Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2018-1040A denial of service vulnerability exists in the way that the Windows Code Integrity Module performs hashing, aka "Windows Code Integrity…
- CVE-2018-1036An elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS Elevation of Privilege Vulnerability." This…
- CVE-2018-0982An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Windows Elevation of…
- CVE-2018-0978A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory…
- CVE-2018-0871An information disclosure vulnerability exists when Edge improperly marks files, aka "Microsoft Edge Information Disclosure…
- CVE-2018-8176A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly validate XML content…
- CVE-2018-8142A security feature bypass exists when Windows incorrectly validates kernel driver signatures, aka "Windows Security Feature Bypass…
- CVE-2018-8179A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory…
- CVE-2018-8178A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka "Microsoft Browser Memory…
- CVE-2018-8177A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2018-8174A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Rem
- CVE-2018-8173A remote code execution vulnerability exists in Microsoft InfoPath when the software fails to properly handle objects in memory, aka…
- CVE-2018-8170An elevation of privilege vulnerability exists in the way that the Windows kernel image handles objects in memory, aka "Windows Image…
- CVE-2018-8168An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request…
- CVE-2018-8167An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory…
- CVE-2018-8166An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka…
- CVE-2018-8165An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka…
- CVE-2018-8164An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka…
- CVE-2018-8162A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka…
- CVE-2018-8161A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory…
- CVE-2018-8160An information disclosure vulnerability exists in Outlook when a message is opened, aka "Microsoft Outlook Information Disclosure…
- CVE-2018-8159An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA) fails to properly handle web requests, aka…
- CVE-2018-8157A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory…
- CVE-2018-8156An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request…
- CVE-2018-8155An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request…
- CVE-2018-8154A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory…
- CVE-2018-8153A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests, aka…
- CVE-2018-8152An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA) fails to properly handle web requests, aka…
- CVE-2018-8151An information disclosure vulnerability exists when Microsoft Exchange improperly handles objects in memory, aka "Microsoft Exchange…
- CVE-2018-8150A security feature bypass vulnerability exists when the Microsoft Outlook attachment block filter does not properly handle attachments…