Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2018-8306A command injection vulnerability exists in the Microsoft Wireless Display Adapter (MWDA) when the Microsoft Wireless Display Adapter does…
- CVE-2018-8305An information disclosure vulnerability exists in Windows Mail Client when a message is opened, aka "Windows Mail Client Information…
- CVE-2018-8304A denial of service vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it fails to properly handle DNS responses…
- CVE-2018-8301A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory…
- CVE-2018-8300A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application…
- CVE-2018-8299An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request…
- CVE-2018-8298A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engin
- CVE-2018-8297An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information…
- CVE-2018-8296A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka…
- CVE-2018-8294A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2018-8291A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka…
- CVE-2018-8290A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2018-8289An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information…
- CVE-2018-8288A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka…
- CVE-2018-8287A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka…
- CVE-2018-8286A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2018-8284A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka ".NET Framework…
- CVE-2018-8283A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting…
- CVE-2018-8282An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory…
- CVE-2018-8281A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory…
- CVE-2018-8280A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2018-8279A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory…
- CVE-2018-8278A spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content, aka "Microsoft Edge Spoofing Vulnerability."…
- CVE-2018-8276A security feature bypass vulnerability exists in the Microsoft Chakra scripting engine that allows Control Flow Guard (CFG) to be…
- CVE-2018-8275A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory…
- CVE-2018-8274A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory…
- CVE-2018-8262A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory…
- CVE-2018-8260A Remote Code Execution vulnerability exists in .NET software when the software fails to check the source markup of a file, aka ".NET…
- CVE-2018-8242A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka…
- CVE-2018-8238A security feature bypass vulnerability exists when Skype for Business or Lync do not properly parse UNC path links shared via messages…