cve.nowby Sazabi

Microsoft CVEs

14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.

CVE-2019-1266A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web App (OWA) fails to properly handle web requests, aka…Medium · 6.1Sep 11, 2019
CVE-2019-1265A security feature bypass vulnerability exists when Microsoft Yammer App for Android fails to apply the correct Intune MAM Policy.This…High · 7.5Sep 11, 2019
CVE-2019-1264A security feature bypass vulnerability exists when Microsoft Office improperly handles input, aka 'Microsoft Office Security Feature…High · 7.8Sep 11, 2019
CVE-2019-1263An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel…Medium · 5.5Sep 11, 2019
CVE-2019-1262A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web…Medium · 5.4Sep 11, 2019
CVE-2019-1261A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting in…High · 8.8Sep 11, 2019
CVE-2019-1260An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'.Medium · 6.5Sep 11, 2019
CVE-2019-1259A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting in…High · 8.8Sep 11, 2019
CVE-2019-1257A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application…High · 8.8Sep 11, 2019
CVE-2019-1256An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka…High · 7.8Sep 11, 2019
CVE-2019-1254An information disclosure vulnerability exists when Windows Hyper-V writes uninitialized memory to disk, aka 'Windows Hyper-V Information…Medium · 5.5Sep 11, 2019
CVE-2019-1253An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerabHigh · 7.8KEVSep 11, 2019
CVE-2019-1252An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka…Medium · 6.5Sep 11, 2019
CVE-2019-1251An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite…Medium · 5.5Sep 11, 2019
CVE-2019-1250A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database…High · 7.8Sep 11, 2019
CVE-2019-1249A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database…High · 7.8Sep 11, 2019
CVE-2019-1248A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database…High · 7.8Sep 11, 2019
CVE-2019-1247A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database…High · 7.8Sep 11, 2019
CVE-2019-1246A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database…High · 7.8Sep 11, 2019
CVE-2019-1245An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite…Medium · 6.5Sep 11, 2019
CVE-2019-1244An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite…Medium · 6.5Sep 11, 2019
CVE-2019-1243A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database…High · 7.8Sep 11, 2019
CVE-2019-1242A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database…High · 7.8Sep 11, 2019
CVE-2019-1241A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database…High · 7.8Sep 11, 2019
CVE-2019-1240A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database…High · 7.8Sep 11, 2019
CVE-2019-1237A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…High · 7.5Sep 11, 2019
CVE-2019-1236A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code…High · 7.5Sep 11, 2019
CVE-2019-1235An elevation of privilege vulnerability exists in Windows Text Service Framework (TSF) when the TSF server process does not validate the…High · 7.8Sep 11, 2019
CVE-2019-1233A denial of service vulnerability exists in Microsoft Exchange Server software when the software fails to properly handle objects in…High · 7.5Sep 11, 2019
CVE-2019-1232An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file…High · 7.8Sep 11, 2019