cve.nowby Sazabi

Microsoft CVEs

14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.

CVE-2018-8448An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA) fails to properly handle web requests, aka…Medium · 5.4Oct 10, 2018
CVE-2018-8432A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft…High · 7.8Oct 10, 2018
CVE-2018-8427An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft…Medium · 5.5Oct 10, 2018
CVE-2018-8423A remote code execution vulnerability exists in the Microsoft JET Database Engine, aka "Microsoft JET Database Engine Remote Code…High · 7.8Oct 10, 2018
CVE-2018-8413A remote code execution vulnerability exists when "Windows Theme API" does not properly decompress files, aka "Windows Theme API Remote…High · 7.8Oct 10, 2018
CVE-2018-8411An elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS Elevation of Privilege Vulnerability." This…High · 7.8Oct 10, 2018
CVE-2018-8333An Elevation of Privilege vulnerability exists in Filter Manager when it improperly handles objects in memory, aka "Microsoft Filter…High · 7.0Oct 10, 2018
CVE-2018-8330An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel…Medium · 5.5Oct 10, 2018
CVE-2018-8329An Elevation of Privilege vulnerability exists in Windows Subsystem for Linux when it fails to properly handle objects in memory, aka…High · 7.8Oct 10, 2018
CVE-2018-8320A security feature bypass vulnerability exists in DNS Global Blocklist feature, aka "Windows DNS Security Feature Bypass Vulnerability."…Medium · 4.3Oct 10, 2018
CVE-2018-8292An information disclosure vulnerability exists in .NET Core when authentication information is inadvertently exposed in a redirect, aka…High · 7.5Oct 10, 2018
CVE-2018-8265A remote code execution vulnerability exists in the way Microsoft Exchange software parses specially crafted email messages, aka…High · 7.8Oct 10, 2018
CVE-2018-8479A spoofing vulnerability exists for the Azure IoT Device Provisioning for the C SDK library using the HTTP protocol on Windows platform…Medium · 5.6Sep 13, 2018
CVE-2018-8475A remote code execution vulnerability exists when Windows does not properly handle specially crafted image files, aka "Windows Remote Code…High · 8.8Sep 13, 2018
CVE-2018-8474A security feature bypass vulnerability exists when Lync for Mac 2011 fails to properly sanitize specially crafted messages, aka "Lync for…High · 7.5Sep 13, 2018
CVE-2018-8470A security feature bypass vulnerability exists in Internet Explorer due to how scripts are handled that allows a universal cross-site…Medium · 6.1Sep 13, 2018
CVE-2018-8469An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in…High · 7.4Sep 13, 2018
CVE-2018-8468An elevation of privilege vulnerability exists when Windows, allowing a sandbox escape, aka "Windows Elevation of Privilege…Medium · 4.7Sep 13, 2018
CVE-2018-8467A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…High · 7.5Sep 13, 2018
CVE-2018-8466A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…High · 7.5Sep 13, 2018
CVE-2018-8465A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…High · 7.5Sep 13, 2018
CVE-2018-8464An remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka "Microsoft Edge PDF…High · 7.5Sep 13, 2018
CVE-2018-8463An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in…High · 7.4Sep 13, 2018
CVE-2018-8462An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka…High · 7.8Sep 13, 2018
CVE-2018-8461A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory…High · 7.5Sep 13, 2018
CVE-2018-8459A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting…High · 7.5Sep 13, 2018
CVE-2018-8457A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka…High · 7.5Sep 13, 2018
CVE-2018-8456A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting…High · 7.5Sep 13, 2018
CVE-2018-8455An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka "Windows Kernel Elevation…High · 7.8Sep 13, 2018
CVE-2018-8452An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft browsers…Medium · 4.3Sep 13, 2018