cve.nowby Sazabi

Microsoft CVEs

14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.

CVE-2019-1432An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite…Medium · 6.5Nov 12, 2019
CVE-2019-1430A remote code execution vulnerability exists when Windows Media Foundation improperly parses specially crafted QuickTime media files.An…High · 7.8Nov 12, 2019
CVE-2019-1429A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'ScripHigh · 7.5KEVNov 12, 2019
CVE-2019-1428A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge…High · 7.5Nov 12, 2019
CVE-2019-1427A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge…High · 7.5Nov 12, 2019
CVE-2019-1426A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge…High · 7.5Nov 12, 2019
CVE-2019-1425An elevation of privilege vulnerability exists when Visual Studio fails to properly validate hardlinks while extracting archived files…Medium · 6.5Nov 12, 2019
CVE-2019-1424A security feature bypass vulnerability exists when Windows Netlogon improperly handles a secure communications channel, aka 'NetLogon…High · 8.1Nov 12, 2019
CVE-2019-1423An elevation of privilege vulnerability exists in the way that the StartTileData.dll handles file creation in protected locations, aka…High · 7.8Nov 12, 2019
CVE-2019-1422An elevation of privilege vulnerability exists in the way that the iphlpsvc.dll handles file creation allowing for a file overwrite, aka…High · 7.8Nov 12, 2019
CVE-2019-1420An elevation of privilege vulnerability exists in the way that the dssvc.dll handles file creation allowing for a file overwrite or…High · 7.8Nov 12, 2019
CVE-2019-1419A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially…High · 8.8Nov 12, 2019
CVE-2019-1418An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka 'Windows Modules…Low · 3.3Nov 12, 2019
CVE-2019-1417An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka 'Windows Data…High · 7.8Nov 12, 2019
CVE-2019-1416An elevation of privilege vulnerability exists due to a race condition in Windows Subsystem for Linux, aka 'Windows Subsystem for Linux…High · 7.0Nov 12, 2019
CVE-2019-1415An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem…High · 7.8Nov 12, 2019
CVE-2019-1413A security feature bypass vulnerability exists when Microsoft Edge improperly handles extension requests and fails to request host…Medium · 4.3Nov 12, 2019
CVE-2019-1412An information disclosure vulnerability exists in Windows Adobe Type Manager Font Driver (ATMFD.dll) when it fails to properly handle…Medium · 5.5Nov 12, 2019
CVE-2019-1411An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite…Medium · 6.5Nov 12, 2019
CVE-2019-1409An information disclosure vulnerability exists when the Windows Remote Procedure Call (RPC) runtime improperly initializes objects in…Medium · 5.5Nov 12, 2019
CVE-2019-1408An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka…High · 7.8Nov 12, 2019
CVE-2019-1407An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows…High · 7.8Nov 12, 2019
CVE-2019-1406A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database…High · 7.8Nov 12, 2019
CVE-2019-1405An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creationHigh · 7.8KEVNov 12, 2019
CVE-2019-1402An information disclosure vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory…Medium · 5.5Nov 12, 2019
CVE-2019-1399A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user…Medium · 6.2Nov 12, 2019
CVE-2019-1398A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated…High · 8.4Nov 12, 2019
CVE-2019-1397A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated…High · 8.4Nov 12, 2019
CVE-2019-1396An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka…High · 7.8Nov 12, 2019
CVE-2019-1395An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka…High · 7.8Nov 12, 2019