cve.nowby Sazabi

Microsoft CVEs

14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.

CVE-2018-8343An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the…High · 7.8Aug 15, 2018
CVE-2018-8342An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the…High · 7.8Aug 15, 2018
CVE-2018-8341An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel…Medium · 4.7Aug 15, 2018
CVE-2018-8340A security feature bypass vulnerability exists when Active Directory Federation Services (AD FS) improperly handles multi-factor…Medium · 6.5Aug 15, 2018
CVE-2018-8339An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input…High · 7.0Aug 15, 2018
CVE-2018-8316A remote code execution vulnerability exists when Internet Explorer improperly validates hyperlinks before loading executable libraries…High · 7.5Aug 15, 2018
CVE-2018-8302A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory…Critical · 9.8Aug 15, 2018
CVE-2018-8273A buffer overflow vulnerability exists in the Microsoft SQL Server that could allow remote code execution on an affected system, aka…Critical · 9.8Aug 15, 2018
CVE-2018-8266A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…High · 7.5Aug 15, 2018
CVE-2018-8253An elevation of privilege vulnerability exists when Microsoft Cortana allows arbitrary website browsing on the lockscreen, aka "Microsoft…Medium · 4.6Aug 15, 2018
CVE-2018-8204A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows…Medium · 5.3Aug 15, 2018
CVE-2018-8200A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows…Medium · 5.3Aug 15, 2018
CVE-2018-0952An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations, aka…High · 7.8Aug 15, 2018
CVE-2016-9486On Windows endpoints, the SecureConnector agent is vulnerable to privilege escalation whereby an authenticated unprivileged user can…High · 7.8Jul 13, 2018
CVE-2016-9485On Windows endpoints, the SecureConnector agent is vulnerable to privilege escalation whereby an authenticated unprivileged user can…High · 7.8Jul 13, 2018
CVE-2018-8356A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates, aka ".NET…Medium · 5.5Jul 11, 2018
CVE-2018-8327A remote code execution vulnerability exists in PowerShell Editor Services, aka "PowerShell Editor Services Remote Code Execution…Critical · 9.8Jul 11, 2018
CVE-2018-8326A cross-site-scripting (XSS) vulnerability exists when an open source customization for Microsoft Active Directory Federation Services (AD…Medium · 5.4Jul 11, 2018
CVE-2018-8325An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information…Medium · 4.3Jul 11, 2018
CVE-2018-8324An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information…Medium · 4.3Jul 11, 2018
CVE-2018-8323An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request…Medium · 5.4Jul 11, 2018
CVE-2018-8319A Security Feature Bypass vulnerability exists in MSR JavaScript Cryptography Library that is caused by incorrect arithmetic computations…Critical · 9.8Jul 11, 2018
CVE-2018-8314An elevation of privilege vulnerability exists when Windows fails a check, allowing a sandbox escape, aka "Windows Elevation of Privilege…Medium · 4.7Jul 11, 2018
CVE-2018-8313An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Windows Elevation of…High · 7.8Jul 11, 2018
CVE-2018-8312A remote code execution vulnerability exists when Microsoft Access fails to properly handle objects in memory, aka "Microsoft Access…High · 7.8Jul 11, 2018
CVE-2018-8311A remote code execution vulnerability exists when Skype for Business and Microsoft Lync clients fail to properly sanitize specially…High · 8.8Jul 11, 2018
CVE-2018-8310A tampering vulnerability exists when Microsoft Outlook does not properly handle specific attachment types when rendering HTML emails, aka…High · 7.5Jul 11, 2018
CVE-2018-8309A denial of service vulnerability exists when Windows improperly handles objects in memory, aka "Windows Denial of Service Vulnerability."…Medium · 5.5Jul 11, 2018
CVE-2018-8308An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel…Medium · 6.6Jul 11, 2018
CVE-2018-8307A security feature bypass vulnerability exists when Microsoft WordPad improperly handles embedded OLE objects, aka "WordPad Security…Medium · 5.3Jul 11, 2018