cve.nowby Sazabi

Microsoft CVEs

14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.

CVE-2018-8512A security feature bypass vulnerability exists in Microsoft Edge when the Edge Content Security Policy (CSP) fails to properly validate…Medium · 5.4Oct 10, 2018
CVE-2018-8511A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…High · 7.5Oct 10, 2018
CVE-2018-8510A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…High · 7.5Oct 10, 2018
CVE-2018-8509A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory…High · 7.5Oct 10, 2018
CVE-2018-8506An Information Disclosure vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka "Microsoft…Medium · 5.5Oct 10, 2018
CVE-2018-8505A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…High · 7.5Oct 10, 2018
CVE-2018-8504A remote code execution vulnerability exists in Microsoft Word software when the software fails to properly handle objects in Protected…High · 8.8Oct 10, 2018
CVE-2018-8503A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…High · 7.5Oct 10, 2018
CVE-2018-8502A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in Protected…High · 8.8Oct 10, 2018
CVE-2018-8501A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in…High · 8.8Oct 10, 2018
CVE-2018-8500A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting…Critical · 9.8Oct 10, 2018
CVE-2018-8498An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request…Medium · 5.4Oct 10, 2018
CVE-2018-8497An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka "Windows Kernel Elevation…High · 7.8Oct 10, 2018
CVE-2018-8495A remote code execution vulnerability exists when Windows Shell improperly handles URIs, aka "Windows Shell Remote Code Execution…High · 7.5Oct 10, 2018
CVE-2018-8494A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote…High · 8.8Oct 10, 2018
CVE-2018-8493An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles fragmented IP packets, aka "Windows TCP/IP…High · 7.5Oct 10, 2018
CVE-2018-8492A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows…Medium · 5.3Oct 10, 2018
CVE-2018-8491A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory…High · 7.5Oct 10, 2018
CVE-2018-8490A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated…High · 8.4Oct 10, 2018
CVE-2018-8489A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated…High · 8.4Oct 10, 2018
CVE-2018-8488An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request…Medium · 5.4Oct 10, 2018
CVE-2018-8486An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Information Disclosure…Medium · 5.5Oct 10, 2018
CVE-2018-8484An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka…High · 7.8Oct 10, 2018
CVE-2018-8482An information disclosure vulnerability exists when Windows Media Player improperly discloses file information, aka "Windows Media Player…Low · 3.1Oct 10, 2018
CVE-2018-8481An information disclosure vulnerability exists when Windows Media Player improperly discloses file information, aka "Windows Media Player…Low · 3.1Oct 10, 2018
CVE-2018-8480An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request…Medium · 5.4Oct 10, 2018
CVE-2018-8473A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory…High · 7.5Oct 10, 2018
CVE-2018-8472An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory…Medium · 5.5Oct 10, 2018
CVE-2018-8460A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory…High · 7.5Oct 10, 2018
CVE-2018-8453An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k High · 7.8KEVOct 10, 2018