Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2019-0825A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory…
- CVE-2019-0824A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory…
- CVE-2019-0823A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory…
- CVE-2019-0822A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft…
- CVE-2019-0817A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests, aka…
- CVE-2019-0815A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service…
- CVE-2019-0814An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information…
- CVE-2019-0813An elevation of privilege vulnerability exists when Windows Admin Center improperly impersonates operations in certain situations, aka…
- CVE-2019-0812A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2019-0810A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2019-0806A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2019-0805An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows…
- CVE-2019-0803An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k
- CVE-2019-0802An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka…
- CVE-2019-0801A remote code execution vulnerability exists when Microsoft Office fails to properly handle certain files.To exploit the vulnerability, an…
- CVE-2019-0796An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows…
- CVE-2019-0795A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote…
- CVE-2019-0794A remote code execution vulnerability exists when OLE automation improperly handles objects in memory, aka 'OLE Automation Remote Code…
- CVE-2019-0793A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote…
- CVE-2019-0792A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote…
- CVE-2019-0791A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote…
- CVE-2019-0790A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote…
- CVE-2019-0786An elevation of privilege vulnerability exists in the Microsoft Server Message Block (SMB) Server when an attacker with valid credentials…
- CVE-2019-0764A tampering vulnerability exists when Microsoft browsers do not properly validate input under specific conditions, aka 'Microsoft Browsers…
- CVE-2019-0753A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka…
- CVE-2019-0752A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scrip
- CVE-2019-0739A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2019-0735An elevation of privilege vulnerability exists when the Windows Client Server Run-Time Subsystem (CSRSS) fails to properly handle objects…
- CVE-2019-0732A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard when Windows improperly…
- CVE-2019-0731An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows…