Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2019-1133Scripting Engine Memory Corruption Vulnerability
- CVE-2019-1131Chakra Scripting Engine Memory Corruption Vulnerability
- CVE-2019-1078Microsoft Graphics Component Information Disclosure Vulnerability
- CVE-2019-1057MS XML Remote Code Execution Vulnerability
- CVE-2019-1030Microsoft Edge based on Edge HTML Information Disclosure Vulnerability
- CVE-2019-0965Windows Hyper-V Remote Code Execution Vulnerability
- CVE-2019-0736Windows DHCP Client Remote Code Execution Vulnerability
- CVE-2019-0723Windows Hyper-V Denial of Service Vulnerability
- CVE-2019-0720Hyper-V Remote Code Execution Vulnerability
- CVE-2019-0718Windows Hyper-V Denial of Service Vulnerability
- CVE-2019-0717Windows Hyper-V Denial of Service Vulnerability
- CVE-2019-0716Windows Denial of Service Vulnerability
- CVE-2019-0715Windows Hyper-V Denial of Service Vulnerability
- CVE-2019-0714Windows Hyper-V Denial of Service Vulnerability
- CVE-2019-1137A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web…
- CVE-2019-1136An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege…
- CVE-2019-1134A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques
- CVE-2019-1132An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k
- CVE-2019-1130An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows El
- CVE-2019-1129An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows El
- CVE-2019-1128A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution…
- CVE-2019-1127A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution…
- CVE-2019-1126A security feature bypass vulnerability exists in Active Directory Federation Services (ADFS) which could allow an attacker to bypass the…
- CVE-2019-1124A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution…
- CVE-2019-1123A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution…
- CVE-2019-1122A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution…
- CVE-2019-1121A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution…
- CVE-2019-1120A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution…
- CVE-2019-1119A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution…
- CVE-2019-1118A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution…