cve.nowby Sazabi

Microsoft CVEs

14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.

CVE-2019-1327A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka…High · 8.8Oct 10, 2019
CVE-2019-1326A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and…High · 7.5Oct 10, 2019
CVE-2019-1325An elevation of privilege vulnerability exists in the Windows redirected drive buffering system (rdbss.sys) when the operating system…Medium · 5.5Oct 10, 2019
CVE-2019-1323An elevation of privilege vulnerability exists in the Microsoft Windows Update Client when it does not properly handle privileges, aka…High · 7.8Oct 10, 2019
CVE-2019-1322An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation of High · 7.8KEVOct 10, 2019
CVE-2019-1321An elevation of privilege vulnerability exists when Windows CloudStore improperly handles file Discretionary Access Control List (DACL)…High · 7.8Oct 10, 2019
CVE-2019-1320An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation…High · 7.8Oct 10, 2019
CVE-2019-1319An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error…High · 7.8Oct 10, 2019
CVE-2019-1318A spoofing vulnerability exists when Transport Layer Security (TLS) accesses non- Extended Master Secret (EMS) sessions, aka 'Microsoft…Medium · 5.9Oct 10, 2019
CVE-2019-1317A denial of service vulnerability exists when Windows improperly handles hard links, aka 'Microsoft Windows Denial of Service…High · 7.3Oct 10, 2019
CVE-2019-1316An elevation of privilege vulnerability exists in Microsoft Windows Setup when it does not properly handle privileges, aka 'Microsoft…High · 7.8Oct 10, 2019
CVE-2019-1315An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error ReportHigh · 7.8KEVOct 10, 2019
CVE-2019-1314A security feature bypass vulnerability exists in Windows 10 Mobile when Cortana allows a user to access files and folders through the…Medium · 6.8Oct 10, 2019
CVE-2019-1313An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when it improperly enforces permissions…Medium · 6.5Oct 10, 2019
CVE-2019-1311A remote code execution vulnerability exists when the Windows Imaging API improperly handles objects in memory, aka 'Windows Imaging API…High · 7.8Oct 10, 2019
CVE-2019-1308A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…High · 7.5Oct 10, 2019
CVE-2019-1307A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…High · 7.5Oct 10, 2019
CVE-2019-1239A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code…High · 7.5Oct 10, 2019
CVE-2019-1238A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code…Medium · 6.4Oct 10, 2019
CVE-2019-1230An information disclosure vulnerability exists when the Windows Hyper-V Network Switch on a host operating system fails to properly…Medium · 6.8Oct 10, 2019
CVE-2019-1166A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC…Medium · 5.9Oct 10, 2019
CVE-2019-1070A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web…Medium · 5.4Oct 10, 2019
CVE-2019-1060A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote…High · 8.8Oct 10, 2019
CVE-2019-0608A spoofing vulnerability exists when Microsoft Browsers does not properly parse HTTP content, aka 'Microsoft Browser Spoofing…Medium · 4.3Oct 10, 2019
CVE-2019-1367A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'ScripHigh · 7.5KEVSep 23, 2019
CVE-2019-1255A denial of service vulnerability exists when Microsoft Defender improperly handles files, aka 'Microsoft Defender Denial of Service…High · 7.5Sep 23, 2019
CVE-2019-1306A remote code execution vulnerability exists when Azure DevOps Server (ADO) and Team Foundation Server (TFS) fail to validate input…Critical · 9.8Sep 11, 2019
CVE-2019-1305A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team…Medium · 5.4Sep 11, 2019
CVE-2019-1303An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this…High · 7.8Sep 11, 2019
CVE-2019-1302An elevation of privilege vulnerability exists when a ASP.NET Core web application, created using vulnerable project templates, fails to…High · 8.8Sep 11, 2019