Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2018-8626A remote code execution vulnerability exists in Windows Domain Name System (DNS) servers when they fail to properly handle requests, aka…
- CVE-2018-8625A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine…
- CVE-2018-8624A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2018-8622An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel…
- CVE-2018-8621An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel…
- CVE-2018-8619A remote code execution vulnerability exists when the Internet Explorer VBScript execution policy does not properly restrict VBScript…
- CVE-2018-8618A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2018-8617A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2018-8612A Denial Of Service vulnerability exists when Connected User Experiences and Telemetry Service fails to validate certain function values…
- CVE-2018-8611An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Eleva
- CVE-2018-8604A tampering vulnerability exists when Microsoft Exchange Server fails to properly handle profile data, aka "Microsoft Exchange Server…
- CVE-2018-8599An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file…
- CVE-2018-8598An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel…
- CVE-2018-8597A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka…
- CVE-2018-8596An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka…
- CVE-2018-8595An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka…
- CVE-2018-8587A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka…
- CVE-2018-8583A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2018-8580An information disclosure vulnerability exists where certain modes of the search function in Microsoft SharePoint Server are vulnerable to…
- CVE-2018-8540A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka ".NET Framework…
- CVE-2018-8517A denial of service vulnerability exists when .NET Framework improperly handles special web requests, aka ".NET Framework Denial Of…
- CVE-2018-8514An information disclosure vulnerability exists when Remote Procedure Call runtime improperly initializes objects in memory, aka "Remote…
- CVE-2018-8477An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel…
- CVE-2018-8529A remote code execution vulnerability exists when Team Foundation Server (TFS) does not enable basic authorization on the communication…
- CVE-2018-8609A remote code execution vulnerability exists in Microsoft Dynamics 365 (on-premises) version 8 when the server fails to properly sanitize…
- CVE-2018-8608A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8 does not properly sanitize a specially…
- CVE-2018-8607A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8 does not properly sanitize a specially…
- CVE-2018-8606A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8 does not properly sanitize a specially…
- CVE-2018-8602A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka "Team…
- CVE-2018-8600A Cross-site Scripting (XSS) vulnerability exists when Azure App Services on Azure Stack does not properly sanitize user provided input…