cve.nowby Sazabi

Microsoft CVEs

14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.

CVE-2018-8449A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka "Device Guard Security Feature Bypass…Low · 3.3Sep 13, 2018
CVE-2018-8447A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory…High · 7.5Sep 13, 2018
CVE-2018-8446An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel…Medium · 5.5Sep 13, 2018
CVE-2018-8445An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel…Medium · 5.5Sep 13, 2018
CVE-2018-8444An information disclosure vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain…Medium · 5.9Sep 13, 2018
CVE-2018-8443An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel…Medium · 5.5Sep 13, 2018
CVE-2018-8442An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel…Medium · 5.5Sep 13, 2018
CVE-2018-8441An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka "Windows Subsystem for Linux…High · 7.8Sep 13, 2018
CVE-2018-8440An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows AHigh · 7.8KEVSep 13, 2018
CVE-2018-8439A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated…High · 8.4Sep 13, 2018
CVE-2018-8438A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a…Medium · 6.8Sep 13, 2018
CVE-2018-8437A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a…Medium · 6.2Sep 13, 2018
CVE-2018-8436A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a…Medium · 6.2Sep 13, 2018
CVE-2018-8435A security feature bypass vulnerability exists when Windows Hyper-V BIOS loader fails to provide a high-entropy source, aka "Windows…Medium · 4.2Sep 13, 2018
CVE-2018-8434An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an…Medium · 5.4Sep 13, 2018
CVE-2018-8433An information disclosure vulnerability exists when the Windows Graphics component improperly handles objects in memory, aka "Microsoft…Medium · 4.7Sep 13, 2018
CVE-2018-8431An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request…Medium · 5.4Sep 13, 2018
CVE-2018-8430A remote code execution vulnerability exists in Microsoft Word if a user opens a specially crafted PDF file, aka "Word PDF Remote Code…High · 7.8Sep 13, 2018
CVE-2018-8429An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel…Medium · 5.5Sep 13, 2018
CVE-2018-8428An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request…Medium · 5.4Sep 13, 2018
CVE-2018-8426A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web…Medium · 5.4Sep 13, 2018
CVE-2018-8425A spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content, aka "Microsoft Edge Spoofing Vulnerability."…Medium · 4.3Sep 13, 2018
CVE-2018-8424An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka…Medium · 6.5Sep 13, 2018
CVE-2018-8422An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka…Medium · 6.5Sep 13, 2018
CVE-2018-8421A remote code execution vulnerability exists when Microsoft .NET Framework processes untrusted input, aka ".NET Framework Remote Code…Critical · 9.8Sep 13, 2018
CVE-2018-8420A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote…High · 8.8Sep 13, 2018
CVE-2018-8419An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka "Windows Kernel…Medium · 5.5Sep 13, 2018
CVE-2018-8410An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory, aka "Windows…High · 7.8Sep 13, 2018
CVE-2018-8409A denial of service vulnerability exists when System.IO.Pipelines improperly handles requests, aka "System.IO.Pipelines Denial of…High · 7.5Sep 13, 2018
CVE-2018-8393A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system…High · 7.8Sep 13, 2018