cve.nowby Sazabi

Microsoft CVEs

14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.

CVE-2019-1394An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka…High · 7.8Nov 12, 2019
CVE-2019-1393An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka…High · 7.8Nov 12, 2019
CVE-2019-1392An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel…High · 7.8Nov 12, 2019
CVE-2019-1391A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'.Medium · 5.5Nov 12, 2019
CVE-2019-1390A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code…High · 7.5Nov 12, 2019
CVE-2019-1389A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated…High · 8.4Nov 12, 2019
CVE-2019-1388An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka 'WinHigh · 7.8KEVNov 12, 2019
CVE-2019-1385An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resultiHigh · 7.8KEVNov 12, 2019
CVE-2019-1384A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages.To exploit…Critical · 9.9Nov 12, 2019
CVE-2019-1383An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka 'Windows Data…High · 7.8Nov 12, 2019
CVE-2019-1382An elevation of privilege vulnerability exists when ActiveX Installer service may allow access to files without proper authentication, aka…Medium · 5.5Nov 12, 2019
CVE-2019-1381An information disclosure vulnerability exists when the Windows Servicing Stack allows access to unprivileged file locations, aka…Medium · 5.5Nov 12, 2019
CVE-2019-1380A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of…High · 7.8Nov 12, 2019
CVE-2019-1379An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka 'Windows Data…High · 7.8Nov 12, 2019
CVE-2019-1374An information disclosure vulnerability exists in the way Windows Error Reporting (WER) handles objects in memory, aka 'Windows Error…Medium · 5.5Nov 12, 2019
CVE-2019-1373A remote code execution vulnerability exists in Microsoft Exchange through the deserialization of metadata via PowerShell, aka 'Microsoft…Critical · 9.8Nov 12, 2019
CVE-2019-1370An information disclosure vulnerability exists when affected Open Enclave SDK versions improperly handle objects in memory, aka 'Open…Medium · 5.5Nov 12, 2019
CVE-2019-1324An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles IPv6 flowlabel filled in packets, aka…Medium · 5.3Nov 12, 2019
CVE-2019-1310A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a…Medium · 6.8Nov 12, 2019
CVE-2019-1309A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a…Medium · 6.8Nov 12, 2019
CVE-2019-1234A spoofing vulnerability exists when Azure Stack fails to validate certain requests, aka 'Azure Stack Spoofing Vulnerability'.High · 7.5Nov 12, 2019
CVE-2019-0721A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an…Critical · 9.1Nov 12, 2019
CVE-2019-0719A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an…Critical · 9.1Nov 12, 2019
CVE-2019-0712A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a…Medium · 6.8Nov 12, 2019
CVE-2019-1378An elevation of privilege vulnerability exists in Windows 10 Update Assistant in the way it handles permissions.A locally authenticated…High · 7.8Oct 10, 2019
CVE-2019-1376An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when it improperly enforces permissions…Medium · 6.5Oct 10, 2019
CVE-2019-1375A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web…Medium · 5.4Oct 10, 2019
CVE-2019-1372An remote code execution vulnerability exists when Azure App Service/ Antares on Azure Stack fails to check the length of a buffer prior…Critical · 10.0Oct 10, 2019
CVE-2019-1371A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory…High · 7.5Oct 10, 2019
CVE-2019-1369An information disclosure vulnerability exists when affected Open Enclave SDK versions improperly handle objects in memory, aka 'Open…Medium · 5.5Oct 10, 2019