Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2018-8392A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system…
- CVE-2018-8391A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting…
- CVE-2018-8367A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2018-8366An information disclosure vulnerability exists when the Microsoft Edge Fetch API incorrectly handles a filtered response type, aka…
- CVE-2018-8354A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2018-8337A security feature bypass vulnerability exists when Windows Subsystem for Linux improperly handles case sensitivity, aka "Windows…
- CVE-2018-8336An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel…
- CVE-2018-8335A denial of service vulnerability exists in the Microsoft Server Block Message (SMB) when an attacker sends specially crafted requests to…
- CVE-2018-8332A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka…
- CVE-2018-8331A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka…
- CVE-2018-8315An information disclosure vulnerability exists when the browser scripting engine improperly handle object types, aka "Microsoft Scripting…
- CVE-2018-8271An information disclosure vulnerability exists in Windows when the Windows bowser.sys kernel-mode driver fails to properly handle objects…
- CVE-2018-8269A denial of service vulnerability exists when OData Library improperly handles web requests, aka "OData Denial of Service Vulnerability."…
- CVE-2018-0965A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated…
- CVE-2018-8414A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows Shell Remote Code Ex
- CVE-2018-8412An elevation of privilege vulnerability exists when the Microsoft AutoUpdate (MAU) application for Mac improperly validates updates before…
- CVE-2018-8406An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "
- CVE-2018-8405An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "
- CVE-2018-8404An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka…
- CVE-2018-8403A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka "Microsoft Browser Memory…
- CVE-2018-8401An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka…
- CVE-2018-8400An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka…
- CVE-2018-8399An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka…
- CVE-2018-8398An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka…
- CVE-2018-8397A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory…
- CVE-2018-8396An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka…
- CVE-2018-8394An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka…
- CVE-2018-8390A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting…
- CVE-2018-8389A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka…
- CVE-2018-8388A spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content, aka "Microsoft Edge Spoofing Vulnerability."…