cve.nowby Sazabi

Microsoft CVEs

14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.

CVE-2019-0730An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows…High · 7.8Apr 9, 2019
CVE-2019-0688An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles fragmented IP packets, aka 'Windows TCP/IP…High · 7.5Apr 9, 2019
CVE-2019-0685An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka…High · 7.8Apr 9, 2019
CVE-2019-0782An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel…Medium · 5.5Apr 9, 2019
CVE-2019-0783A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka…High · 7.5Apr 9, 2019
CVE-2019-0784A remote code execution vulnerability exists in the way that the ActiveX Data objects (ADO) handles objects in memory, aka 'Windows…High · 7.5Apr 9, 2019
CVE-2019-0797An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k High · 7.8KEVApr 9, 2019
CVE-2019-0798A spoofing vulnerability exists when a Lync Server or Skype for Business Server does not properly sanitize a specially crafted request…Medium · 6.1Apr 9, 2019
CVE-2019-0804An information disclosure vulnerability exists in the way Azure WaLinuxAgent creates swap files on resource disks, aka 'Azure Linux Agent…Medium · 6.5Apr 9, 2019
CVE-2019-0808An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k High · 7.8KEVApr 9, 2019
CVE-2019-0809A remote code execution vulnerability exists when the Visual Studio C++ Redistributable Installer improperly validates input before…High · 7.8Apr 9, 2019
CVE-2019-0816A security feature bypass exists in Azure SSH Keypairs, due to a change in the provisioning logic for some Linux images that use…Medium · 5.1Apr 9, 2019
CVE-2019-0821An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB…Medium · 6.5Apr 9, 2019
CVE-2019-0770A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka…High · 7.5Apr 9, 2019
CVE-2019-0771A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka…High · 7.5Apr 9, 2019
CVE-2019-0772A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine…High · 8.8Apr 9, 2019
CVE-2019-0773A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka…High · 7.5Apr 9, 2019
CVE-2019-0774An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka…Medium · 6.5Apr 9, 2019
CVE-2019-0775An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel…Medium · 4.7Apr 9, 2019
CVE-2019-0776An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information…Medium · 5.5Apr 9, 2019
CVE-2019-0777A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team…Medium · 5.4Apr 9, 2019
CVE-2019-0778A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web…Medium · 5.4Apr 9, 2019
CVE-2019-0779A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory…High · 7.5Apr 9, 2019
CVE-2019-0780A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory…High · 7.5Apr 9, 2019
CVE-2019-0756A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote…High · 8.8Apr 9, 2019
CVE-2019-0757A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify a…Medium · 6.5Apr 9, 2019
CVE-2019-0759An information disclosure vulnerability exists when the Windows Print Spooler does not properly handle objects in memory, aka 'Windows…Medium · 5.5Apr 9, 2019
CVE-2019-0761A security feature bypass vulnerability exists when Internet Explorer fails to validate the correct Security Zone of requests for specific…Medium · 6.5Apr 9, 2019
CVE-2019-0762A security feature bypass vulnerability exists when Microsoft browsers improperly handle requests of different origins, aka 'Microsoft…Medium · 4.3Apr 9, 2019
CVE-2019-0763A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory…High · 7.5Apr 9, 2019