Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2019-0765A remote code execution vulnerability exists in the way that comctl32.dll handles objects in memory, aka 'Comctl32 Remote Code Execution…
- CVE-2019-0766An elevation of privilege vulnerability exists in Windows AppX Deployment Server that allows file creation in arbitrary locations.
- CVE-2019-0767An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.To exploit this…
- CVE-2019-0768A security feature bypass vulnerability exists when Internet Explorer VBScript execution policy does not properly restrict VBScript under…
- CVE-2019-0769A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2019-0697A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client…
- CVE-2019-0698A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client…
- CVE-2019-0701A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user…
- CVE-2019-0702An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel…
- CVE-2019-0703An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information
- CVE-2019-0704An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB…
- CVE-2019-0726A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client…
- CVE-2019-0746An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge, aka…
- CVE-2019-0748A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory…
- CVE-2019-0754A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'.
- CVE-2019-0755An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel…
- CVE-2019-0678An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an…
- CVE-2019-0680A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka…
- CVE-2019-0682An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka 'Windows Subsystem for Linux…
- CVE-2019-0683An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an attacker in the…
- CVE-2019-0689An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka 'Windows Subsystem for Linux…
- CVE-2019-0690A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a…
- CVE-2019-0692An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka 'Windows Subsystem for Linux…
- CVE-2019-0693An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka 'Windows Subsystem for Linux…
- CVE-2019-0694An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka 'Windows Subsystem for Linux…
- CVE-2019-0695A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user…
- CVE-2019-0696An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel…
- CVE-2019-0667A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine…
- CVE-2019-0666A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine…
- CVE-2019-0665A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine…