Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2018-8387A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory…
- CVE-2018-8385A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka…
- CVE-2018-8384A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2018-8383A spoofing vulnerability exists when Microsoft Edge does not properly parse HTTP content, aka "Microsoft Edge Spoofing Vulnerability."…
- CVE-2018-8382An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel…
- CVE-2018-8381A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2018-8380A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2018-8379A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka…
- CVE-2018-8378An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable…
- CVE-2018-8377A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory…
- CVE-2018-8376A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in…
- CVE-2018-8375A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka…
- CVE-2018-8374A tampering vulnerability exists when Microsoft Exchange Server fails to properly handle profile data, aka "Microsoft Exchange Server…
- CVE-2018-8373A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scrip
- CVE-2018-8372A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka…
- CVE-2018-8371A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka…
- CVE-2018-8370A information disclosure vulnerability exists when WebAudio Library improperly handles audio requests, aka "Microsoft Edge Information…
- CVE-2018-8360An information disclosure vulnerability exists in Microsoft .NET Framework that could allow an attacker to access information in…
- CVE-2018-8359A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting…
- CVE-2018-8358A security feature bypass vulnerability exists when Microsoft Edge improperly handles redirect requests, aka "Microsoft Edge Security…
- CVE-2018-8357An elevation of privilege vulnerability exists in Microsoft browsers allowing sandbox escape, aka "Microsoft Browser Elevation of…
- CVE-2018-8355A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka…
- CVE-2018-8351An information disclosure vulnerability exists when affected Microsoft browsers improperly allow cross-frame interaction, aka "Microsoft…
- CVE-2018-8350A remote code execution vulnerability exists when Microsoft Windows PDF Library improperly handles objects in memory, aka "Windows PDF…
- CVE-2018-8349A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka…
- CVE-2018-8348An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel…
- CVE-2018-8347An elevation of privilege vulnerability exists in Microsoft Windows when the Windows kernel fails to properly handle parsing of certain…
- CVE-2018-8346A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed, aka…
- CVE-2018-8345A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed, aka…
- CVE-2018-8344A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka…