cve.nowby Sazabi

Microsoft CVEs

14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.

CVE-2019-0890A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database…High · 7.8May 16, 2019
CVE-2019-0889A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database…High · 7.8May 16, 2019
CVE-2019-0886An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an…Medium · 6.8May 16, 2019
CVE-2019-0885A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Windows OLE Remote…High · 7.8May 16, 2019
CVE-2019-0884A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka…High · 7.5May 16, 2019
CVE-2019-0882An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka…Medium · 6.5May 16, 2019
CVE-2019-0881An elevation of privilege vulnerability exists when the Windows Kernel improperly handles key enumeration, aka 'Windows Kernel Elevation…High · 7.8May 16, 2019
CVE-2019-0872A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user…Medium · 5.4May 16, 2019
CVE-2019-0864A denial of service vulnerability exists when .NET Framework improperly handles objects in heap memory, aka '.NET Framework Denial of…Medium · 5.5May 16, 2019
CVE-2019-0863An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Error Reporting ElevatioHigh · 7.8KEVMay 16, 2019
CVE-2019-0820A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka '.NET Framework and .NET…High · 7.5May 16, 2019
CVE-2019-0819An information disclosure vulnerability exists in Microsoft SQL Server Analysis Services when it improperly enforces metadata permissions…Medium · 6.5May 16, 2019
CVE-2019-0758An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka…Medium · 6.5May 16, 2019
CVE-2019-0734An elevation of privilege vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully decode and…High · 8.1May 16, 2019
CVE-2019-0733A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an attacker to bypass WDAC…Medium · 5.3May 16, 2019
CVE-2019-0727An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows…High · 7.8May 16, 2019
CVE-2019-0725A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets, aka 'Windows DHCP…Critical · 9.8May 16, 2019
CVE-2019-0708A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attackerCritical · 9.8KEVMay 16, 2019
CVE-2019-0707An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the…High · 7.0May 16, 2019
CVE-2019-0879A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database…High · 7.8Apr 9, 2019
CVE-2019-0877A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database…High · 7.8Apr 9, 2019
CVE-2019-0876An information disclosure vulnerability exists when affected Open Enclave SDK versions improperly handle objects in memory, aka 'Open…Medium · 5.5Apr 9, 2019
CVE-2019-0875An elevation of privilege vulnerability exists when Azure DevOps Server 2019 does not properly enforce project permissions, aka 'Azure…High · 7.5Apr 9, 2019
CVE-2019-0874A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure…Medium · 6.1Apr 9, 2019
CVE-2019-0871A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user…Medium · 6.1Apr 9, 2019
CVE-2019-0870A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user…Medium · 6.1Apr 9, 2019
CVE-2019-0869A spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails to properly handle web requests, aka 'Azure DevOps Server…Medium · 6.1Apr 9, 2019
CVE-2019-0868A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user…Medium · 6.1Apr 9, 2019
CVE-2019-0867A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user…Medium · 6.1Apr 9, 2019
CVE-2019-0866A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user…Medium · 6.1Apr 9, 2019