Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2018-8233An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka…
- CVE-2018-8231A remote code execution vulnerability exists when HTTP Protocol Stack (Http.sys) improperly handles objects in memory, aka "HTTP Protocol…
- CVE-2018-8229A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2018-8227A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2018-8226A denial of service vulnerability exists in the HTTP 2.0 protocol stack (HTTP.sys) when HTTP.sys improperly parses specially crafted HTTP…
- CVE-2018-8225A remote code execution vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it fails to properly handle DNS…
- CVE-2018-8224An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel…
- CVE-2018-8221A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows…
- CVE-2018-8219An elevation of privilege vulnerability exists when Windows Hyper-V instruction emulation fails to properly enforce privilege levels, aka…
- CVE-2018-8218A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a…
- CVE-2018-8217A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows…
- CVE-2018-8216A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows…
- CVE-2018-8215A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows…
- CVE-2018-8214An elevation of privilege vulnerability exists in Windows when Desktop Bridge does not properly manage the virtual registry, aka "Windows…
- CVE-2018-8213A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka "Windows Remote Code Execution…
- CVE-2018-8212A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows…
- CVE-2018-8211A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows…
- CVE-2018-8210A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka "Windows Remote Code Execution…
- CVE-2018-8209An information disclosure vulnerability exists when Windows allows a normal user to access the Wireless LAN profile of an administrative…
- CVE-2018-8208An elevation of privilege vulnerability exists in Windows when Desktop Bridge does not properly manage the virtual registry, aka "Windows…
- CVE-2018-8207An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel…
- CVE-2018-8205A denial of service vulnerability exists when Windows improperly handles objects in memory, aka "Windows Denial of Service Vulnerability."…
- CVE-2018-8201A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows…
- CVE-2018-8175An denial of service vulnerability exists when Windows NT WEBDAV Minirdr attempts to query a WEBDAV directory, aka "WEBDAV Denial of…
- CVE-2018-8169An elevation of privilege vulnerability exists when the (Human Interface Device) HID Parser Library driver improperly handles objects in…
- CVE-2018-8140An Elevation of Privilege vulnerability exists when Cortana retrieves data from user input services without consideration for status, aka…
- CVE-2018-8121An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory, aka "Windows Kernel…
- CVE-2018-8113A security feature bypass vulnerability exists in Internet Explorer that allows for bypassing Mark of the Web Tagging (MOTW), aka…
- CVE-2018-8111A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory…
- CVE-2018-8110A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory…