cve.nowby Sazabi

Microsoft CVEs

14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.

CVE-2019-1368A security feature bypass exists when Windows Secure Boot improperly restricts access to debugging functionality, aka 'Windows Secure Boot…Medium · 4.6Oct 10, 2019
CVE-2019-1366A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…High · 7.5Oct 10, 2019
CVE-2019-1365An elevation of privilege vulnerability exists when Microsoft IIS Server fails to check the length of a buffer prior to copying memory to…Critical · 9.9Oct 10, 2019
CVE-2019-1364An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory…High · 7.8Oct 10, 2019
CVE-2019-1363An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory…Medium · 5.5Oct 10, 2019
CVE-2019-1362An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory…High · 7.8Oct 10, 2019
CVE-2019-1361An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft…Medium · 5.5Oct 10, 2019
CVE-2019-1359A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database…High · 7.8Oct 10, 2019
CVE-2019-1358A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database…High · 7.8Oct 10, 2019
CVE-2019-1357A spoofing vulnerability exists when Microsoft Browsers improperly handle browser cookies, aka 'Microsoft Browser Spoofing Vulnerability'.Medium · 4.3Oct 10, 2019
CVE-2019-1356An information disclosure vulnerability exists when Microsoft Edge based on Edge HTML improperly handles objects in memory, aka 'Microsoft…Medium · 6.5Oct 10, 2019
CVE-2019-1347A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'.Medium · 6.5Oct 10, 2019
CVE-2019-1346A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'.Medium · 6.5Oct 10, 2019
CVE-2019-1345An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel…Medium · 5.5Oct 10, 2019
CVE-2019-1344An information disclosure vulnerability exists in the way that the Windows Code Integrity Module handles objects in memory, aka 'Windows…Medium · 5.5Oct 10, 2019
CVE-2019-1343A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'.Medium · 6.5Oct 10, 2019
CVE-2019-1342An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash, aka 'Windows Error…High · 7.8Oct 10, 2019
CVE-2019-1341An elevation of privilege vulnerability exists when umpo.dll of the Power Service, improperly handles a Registry Restore Key function, aka…High · 7.8Oct 10, 2019
CVE-2019-1340An elevation of privilege vulnerability exists in Windows AppX Deployment Server that allows file creation in arbitrary locations.To…High · 7.8Oct 10, 2019
CVE-2019-1339An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error…High · 7.8Oct 10, 2019
CVE-2019-1338A security feature bypass vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the…Medium · 5.9Oct 10, 2019
CVE-2019-1337An information disclosure vulnerability exists when Windows Update Client fails to properly handle objects in memory, aka 'Windows Update…Medium · 5.5Oct 10, 2019
CVE-2019-1336An elevation of privilege vulnerability exists in the Microsoft Windows Update Client when it does not properly handle privileges, aka…High · 7.8Oct 10, 2019
CVE-2019-1335A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…High · 7.5Oct 10, 2019
CVE-2019-1334An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel…Medium · 5.5Oct 10, 2019
CVE-2019-1333A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote…High · 8.8Oct 10, 2019
CVE-2019-1331A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka…High · 8.8Oct 10, 2019
CVE-2019-1330An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'.Medium · 6.5Oct 10, 2019
CVE-2019-1329An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request…Medium · 5.4Oct 10, 2019
CVE-2019-1328A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…Medium · 5.4Oct 10, 2019