cve.nowby Sazabi

Microsoft CVEs

14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.

CVE-2019-1008A security feature bypass vulnerability exists in Dynamics On Premise, aka 'Microsoft Dynamics On-Premise Security Feature Bypass'.Medium · 5.9May 16, 2019
CVE-2019-1000An elevation of privilege vulnerability exists in Microsoft Azure Active Directory Connect build 1.3.20.0, which allows an attacker to…Medium · 5.3May 16, 2019
CVE-2019-0995A security feature bypass vulnerability exists when urlmon.dll improperly handles certain Mark of the Web queries, aka 'Internet Explorer…High · 8.8May 16, 2019
CVE-2019-0982A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service…High · 7.5May 16, 2019
CVE-2019-0981A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net…High · 7.5May 16, 2019
CVE-2019-0980A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net…High · 7.5May 16, 2019
CVE-2019-0979A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user…Medium · 5.4May 16, 2019
CVE-2019-0976A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify…Medium · 5.5May 16, 2019
CVE-2019-0971An information disclosure vulnerability exists when Azure DevOps Server and Microsoft Team Foundation Server do not properly sanitize a…Medium · 6.5May 16, 2019
CVE-2019-0963A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requesMedium · 5.4May 16, 2019
CVE-2019-0961An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka…Medium · 6.5May 16, 2019
CVE-2019-0958An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request…High · 8.8May 16, 2019
CVE-2019-0957An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request…High · 8.8May 16, 2019
CVE-2019-0956An information disclosure vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request…Medium · 6.5May 16, 2019
CVE-2019-0953A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft…High · 7.8May 16, 2019
CVE-2019-0952A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net…High · 8.8May 16, 2019
CVE-2019-0951A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…Medium · 5.4May 16, 2019
CVE-2019-0950A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…Medium · 5.7May 16, 2019
CVE-2019-0949A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…Medium · 5.7May 16, 2019
CVE-2019-0947A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory…High · 7.8May 16, 2019
CVE-2019-0946A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory…High · 7.8May 16, 2019
CVE-2019-0945A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory…High · 7.8May 16, 2019
CVE-2019-0942An elevation of privilege vulnerability exists in the Unified Write Filter (UWF) feature for Windows 10 when it improperly restricts…Medium · 5.5May 16, 2019
CVE-2019-0940A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory…High · 7.5May 16, 2019
CVE-2019-0938An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in…Critical · 9.0May 16, 2019
CVE-2019-0937A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…High · 7.5May 16, 2019
CVE-2019-0936An elevation of privilege vulnerability exists in Microsoft Windows when Windows fails to properly handle certain symbolic links, aka…High · 7.8May 16, 2019
CVE-2019-0933A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…High · 7.5May 16, 2019
CVE-2019-0932An information disclosure vulnerability exists in Skype for Android, aka 'Skype for Android Information Disclosure Vulnerability'.Medium · 5.9May 16, 2019
CVE-2019-0931An elevation of privilege vulnerability exists when the Storage Service improperly handles file operations, aka 'Windows Storage Service…High · 7.0May 16, 2019