Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2019-0862A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka…
- CVE-2019-0861A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2019-0860A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2019-0859An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k
- CVE-2019-0858A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests, aka…
- CVE-2019-0857A spoofing vulnerability that could allow a security feature bypass exists in when Azure DevOps Server does not properly sanitize user…
- CVE-2019-0856A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Remote Code Execution…
- CVE-2019-0853A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory…
- CVE-2019-0851A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database…
- CVE-2019-0849An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka…
- CVE-2019-0848An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information…
- CVE-2019-0847A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database…
- CVE-2019-0846A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database…
- CVE-2019-0845A remote code execution vulnerability exists when the IOleCvt interface renders ASP webpage content, aka 'Windows IOleCvt Interface Remote…
- CVE-2019-0844An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel…
- CVE-2019-0842A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine…
- CVE-2019-0841An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows El
- CVE-2019-0840An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel…
- CVE-2019-0839An information disclosure vulnerability exists when the Terminal Services component improperly discloses the contents of its memory, aka…
- CVE-2019-0838An information disclosure vulnerability exists when Windows Task Scheduler improperly discloses credentials to Windows Credential Manager…
- CVE-2019-0837An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Information Disclosure…
- CVE-2019-0836An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows…
- CVE-2019-0835An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory, aka 'Microsoft…
- CVE-2019-0833An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka 'Microsoft Edge Information…
- CVE-2019-0831A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques
- CVE-2019-0830A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques
- CVE-2019-0829A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2019-0828A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka…
- CVE-2019-0827A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory…
- CVE-2019-0826A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory…