Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2019-1231An information disclosure vulnerability exists in the way Rome SDK handles server SSL/TLS certificate validation, aka 'Rome SDK…
- CVE-2019-1221A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka…
- CVE-2019-1220A security feature bypass vulnerability exists when Microsoft Browsers fail to validate the correct Security Zone of requests for specific…
- CVE-2019-1219An information disclosure vulnerability exists when the Windows Transaction Manager improperly handles objects in memory, aka 'Windows…
- CVE-2019-1217A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2019-1216An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Information Disclosure…
- CVE-2019-1215An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Windows Elevation of Pr
- CVE-2019-1214An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, a
- CVE-2019-1209An information disclosure vulnerability exists in Lync 2013, aka 'Lync 2013 Information Disclosure Vulnerability'.
- CVE-2019-1208A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code…
- CVE-2019-1142An elevation of privilege vulnerability exists when the .NET Framework common language runtime (CLR) allows file creation in arbitrary…
- CVE-2019-1138A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2019-0928A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user…
- CVE-2019-0788A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote…
- CVE-2019-0787A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote…
- CVE-2019-1125Windows Kernel Information Disclosure Vulnerability
- CVE-2019-1258Azure Active Directory Authentication Library Elevation of Privilege Vulnerability
- CVE-2019-1229Dynamics On-Premise Elevation of Privilege Vulnerability
- CVE-2019-1228Windows Kernel Information Disclosure Vulnerability
- CVE-2019-1227Windows Kernel Information Disclosure Vulnerability
- CVE-2019-1226Remote Desktop Services Remote Code Execution Vulnerability
- CVE-2019-1225Remote Desktop Protocol Server Information Disclosure Vulnerability
- CVE-2019-1224Remote Desktop Protocol Server Information Disclosure Vulnerability
- CVE-2019-1223Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability
- CVE-2019-1222Remote Desktop Services Remote Code Execution Vulnerability
- CVE-2019-1218Outlook iOS Spoofing Vulnerability
- CVE-2019-1213Windows DHCP Server Remote Code Execution Vulnerability
- CVE-2019-1212Windows DHCP Server Denial of Service Vulnerability
- CVE-2019-1211Git for Visual Studio Elevation of Privilege Vulnerability
- CVE-2019-1206Windows DHCP Server Denial of Service Vulnerability