Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2019-0553An information disclosure vulnerability exists when Windows Subsystem for Linux improperly handles objects in memory, aka "Windows…
- CVE-2019-0552An elevation of privilege exists in Windows COM Desktop Broker, aka "Windows COM Elevation of Privilege Vulnerability." This affects…
- CVE-2019-0551A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated…
- CVE-2019-0550A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated…
- CVE-2019-0549An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel…
- CVE-2019-0548A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service…
- CVE-2019-0547A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client…
- CVE-2019-0546A remote code execution vulnerability exists in Visual Studio when the C++ compiler improperly handles specific combinations of C++…
- CVE-2019-0545An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin Resource Sharing (CORS)…
- CVE-2019-0541A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Ex
- CVE-2019-0539A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2019-0537An information disclosure vulnerability exists when Visual Studio improperly discloses arbitrary file contents if the victim opens a…
- CVE-2019-0536An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel…
- CVE-2018-8653A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scrip
- CVE-2018-8650A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques
- CVE-2018-8652A Cross-site Scripting (XSS) vulnerability exists when Windows Azure Pack does not properly sanitize user-provided input, aka "Windows…
- CVE-2018-8651A cross site scripting vulnerability exists when Microsoft Dynamics NAV does not properly sanitize a specially crafted web request to an…
- CVE-2018-8649A denial of service vulnerability exists when Windows improperly handles objects in memory, aka "Windows Denial of Service Vulnerability."…
- CVE-2018-8643A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka…
- CVE-2018-8641An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory…
- CVE-2018-8639An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k
- CVE-2018-8638An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Information Disclosure…
- CVE-2018-8637An information disclosure vulnerability exists in Windows kernel that could allow an attacker to retrieve information that could lead to a…
- CVE-2018-8636A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka…
- CVE-2018-8635An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted…
- CVE-2018-8634A remote code execution vulnerability exists in Windows where Microsoft text-to-speech fails to properly handle objects in the memory, aka…
- CVE-2018-8631A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory…
- CVE-2018-8629A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2018-8628A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in…
- CVE-2018-8627An information disclosure vulnerability exists when Microsoft Excel software reads out of bound memory due to an uninitialized variable…