Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2019-0639A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting…
- CVE-2019-0617A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database…
- CVE-2019-0614An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka…
- CVE-2019-0612A security feature bypass vulnerability exists when Click2Play protection in Microsoft Edge improperly handles flash objects.
- CVE-2019-0611A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2019-0609A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka…
- CVE-2019-0603A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in memory.
- CVE-2019-0592A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2019-5922Untrusted search path vulnerability in The installer of Microsoft Teams allows an attacker to gain privileges via a Trojan horse DLL in an…
- CVE-2019-5921Untrusted search path vulnerability in Windows 7 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
- CVE-2019-5917azure-umqtt-c (available through GitHub prior to 2017 October 6) allows remote attackers to cause a denial of service via unspecified…
- CVE-2019-0743A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team…
- CVE-2019-0742A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team…
- CVE-2019-0741An information disclosure vulnerability exists in the way Azure IoT Java SDK logs sensitive information, aka 'Azure IoT Java SDK…
- CVE-2019-0729An Elevation of Privilege vulnerability exists in the way Azure IoT Java SDK generates symmetric keys for encryption, allowing an attacker…
- CVE-2019-0728A remote code execution vulnerability exists in Visual Studio Code when it process environment variables after opening a project, aka…
- CVE-2019-0724An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege…
- CVE-2019-0686An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege…
- CVE-2019-0676An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.An attacker who successfully expl
- CVE-2019-0675A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory…
- CVE-2019-0674A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory…
- CVE-2019-0673A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory…
- CVE-2019-0672A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory…
- CVE-2019-0671A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory…
- CVE-2019-0670A spoofing vulnerability exists in Microsoft SharePoint when the application does not properly parse HTTP content, aka 'Microsoft…
- CVE-2019-0669An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel…
- CVE-2019-0668An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request…
- CVE-2019-0664An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka…
- CVE-2019-0663An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.To exploit this…
- CVE-2019-0662A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory…