Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2019-0625A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database…
- CVE-2019-0623An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka…
- CVE-2019-0621An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel…
- CVE-2019-0619An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka…
- CVE-2019-0618A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory…
- CVE-2019-0616An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka…
- CVE-2019-0615An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka…
- CVE-2019-0613A remote code execution vulnerability exists in .NET Framework and Visual Studio software when the software fails to check the source…
- CVE-2019-0610A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2019-0607A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2019-0605A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2019-0604A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa
- CVE-2019-0602An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka…
- CVE-2019-0601An information disclosure vulnerability exists when the Human Interface Devices (HID) component improperly handles objects in memory, aka…
- CVE-2019-0600An information disclosure vulnerability exists when the Human Interface Devices (HID) component improperly handles objects in memory, aka…
- CVE-2019-0599A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database…
- CVE-2019-0598A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database…
- CVE-2019-0597A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database…
- CVE-2019-0596A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database…
- CVE-2019-0595A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database…
- CVE-2019-0594A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application…
- CVE-2019-0593A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2019-0591A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2019-0590A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2019-0540A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially…
- CVE-2019-0647An information disclosure vulnerability exists when Team Foundation Server does not properly handle variables marked as secret, aka "Team…
- CVE-2019-0646A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka "Team…
- CVE-2019-0624A spoofing vulnerability exists when a Skype for Business 2015 server does not properly sanitize a specially crafted request, aka "Skype…
- CVE-2019-0622An elevation of privilege vulnerability exists when Skype for Andriod fails to properly handle specific authentication requests, aka…
- CVE-2019-0588An information disclosure vulnerability exists when the Microsoft Exchange PowerShell API grants calendar contributors more view…