Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2019-1301A denial of service vulnerability exists when .NET Core improperly handles web requests, aka '.NET Core Denial of Service Vulnerability'.
- CVE-2019-1300A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2019-1299An information disclosure vulnerability exists when Microsoft Edge based on Edge HTML improperly handles objects in memory, aka 'Microsoft…
- CVE-2019-1298A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2019-1297A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka '
- CVE-2019-1296A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe data input, aka…
- CVE-2019-1295A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe data input, aka…
- CVE-2019-1294A security feature bypass exists when Windows Secure Boot improperly restricts access to debugging functionality, aka 'Windows Secure Boot…
- CVE-2019-1293An information disclosure vulnerability exists in Windows when the Windows SMB Client kernel-mode driver fails to properly handle objects…
- CVE-2019-1292A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'.
- CVE-2019-1291A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote…
- CVE-2019-1290A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote…
- CVE-2019-1289An elevation of privilege vulnerability exists when the Windows Update Delivery Optimization does not properly enforce file share…
- CVE-2019-1287An elevation of privilege vulnerability exists in the way that the Windows Network Connectivity Assistant handles objects in memory, aka…
- CVE-2019-1286An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka…
- CVE-2019-1285An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka…
- CVE-2019-1284An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege…
- CVE-2019-1283An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft…
- CVE-2019-1282An information disclosure exists in the Windows Common Log File System (CLFS) driver when it fails to properly handle sandbox checks, aka…
- CVE-2019-1280A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An…
- CVE-2019-1278An elevation of privilege vulnerability exists in the way that the unistore.dll handles objects in memory, aka 'Windows Elevation of…
- CVE-2019-1277An elevation of privilege vulnerability exists in Windows Audio Service when a malformed parameter is processed, aka 'Windows Audio…
- CVE-2019-1274An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel…
- CVE-2019-1273A cross-site-scripting (XSS) vulnerability exists when Active Directory Federation Services (ADFS) does not properly sanitize certain…
- CVE-2019-1272An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).An attacker…
- CVE-2019-1271An elevation of privilege exists in hdAudio.sys which may lead to an out of band write, aka 'Windows Media Elevation of Privilege…
- CVE-2019-1270An elevation of privilege vulnerability exists in Windows store installer where WindowsApps directory is vulnerable to symbolic link…
- CVE-2019-1269An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).An attacker…
- CVE-2019-1268An elevation of privilege exists when Winlogon does not properly handle file path information, aka 'Winlogon Elevation of Privilege…
- CVE-2019-1267An elevation of privilege vulnerability exists in Microsoft Compatibility Appraiser where a configuration file, with local privileges, is…