Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2018-8551A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2018-8547A cross-site-scripting (XSS) vulnerability exists when an open source customization for Microsoft Active Directory Federation Services (AD…
- CVE-2018-8546A denial of service vulnerability exists in Skype for Business, aka "Microsoft Skype for Business Denial of Service Vulnerability." This…
- CVE-2018-8545An information disclosure vulnerability exists in the way that Microsoft Edge handles cross-origin requests, aka "Microsoft Edge…
- CVE-2018-8544A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine…
- CVE-2018-8543A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2018-8542A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2018-8541A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2018-8539A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft…
- CVE-2018-8524A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka…
- CVE-2018-8522A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka…
- CVE-2018-8485An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Elevation of Privilege…
- CVE-2018-8476A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in memory, aka…
- CVE-2018-8471An elevation of privilege vulnerability exists in the way that the Microsoft RemoteFX Virtual GPU miniport driver handles objects in…
- CVE-2018-8454An information disclosure vulnerability exists when Windows Audio Service fails to properly handle objects in memory, aka "Windows Audio…
- CVE-2018-8450A remote code execution vulnerability exists when Windows Search handles objects in memory, aka "Windows Search Remote Code Execution…
- CVE-2018-8417A security feature bypass vulnerability exists in Microsoft JScript that could allow an attacker to bypass Device Guard, aka "Microsoft…
- CVE-2018-8416A tampering vulnerability exists when .NET Core improperly handles specially crafted files, aka ".NET Core Tampering Vulnerability." This…
- CVE-2018-8415A tampering vulnerability exists in PowerShell that could allow an attacker to execute unlogged code, aka "Microsoft PowerShell Tampering…
- CVE-2018-8408An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory, aka "Windows Kernel…
- CVE-2018-8407An information disclosure vulnerability exists when "Kernel Remote Procedure Call Provider" driver improperly initializes objects in…
- CVE-2018-8256A remote code execution vulnerability exists when PowerShell improperly handles specially crafted files, aka "Microsoft PowerShell Remote…
- CVE-2018-8569A remote code execution vulnerability exists in the Yammer desktop application due to the loading of arbitrary content, aka "Yammer…
- CVE-2018-8533An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing malicious XML content…
- CVE-2018-8532An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious XMLA file…
- CVE-2018-8531A remote code execution vulnerability exists in the way that Azure IoT Hub Device Client SDK using MQTT protocol accesses objects in…
- CVE-2018-8530A security feature bypass vulnerability exists when Microsoft Edge improperly handles requests of different origins, aka "Microsoft Edge…
- CVE-2018-8527An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious XEL file…
- CVE-2018-8518An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request…
- CVE-2018-8513A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…