cve.nowby Sazabi

Microsoft CVEs

14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.

CVE-2018-8149An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request…Medium · 5.4May 9, 2018
CVE-2018-8148A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka…High · 7.8May 9, 2018
CVE-2018-8147A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka…High · 7.8May 9, 2018
CVE-2018-8145An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an…High · 7.5May 9, 2018
CVE-2018-8141An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel…Medium · 4.7May 9, 2018
CVE-2018-8139A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka…High · 7.5May 9, 2018
CVE-2018-8137A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka…High · 7.5May 9, 2018
CVE-2018-8136A remote code execution vulnerability exists in the way that Windows handles objects in memory, aka "Windows Remote Code Execution…High · 7.8May 9, 2018
CVE-2018-8134An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Windows Elevation of…High · 7.0May 9, 2018
CVE-2018-8133A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…High · 7.5May 9, 2018
CVE-2018-8132A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Windows Security…Medium · 5.3May 9, 2018
CVE-2018-8129A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Windows Security…Medium · 5.3May 9, 2018
CVE-2018-8128A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka…High · 7.5May 9, 2018
CVE-2018-8127An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel…Medium · 5.5May 9, 2018
CVE-2018-8126A security feature bypass vulnerability exists when Internet Explorer fails to validate User Mode Code Integrity (UMCI) policies, aka…High · 8.8May 9, 2018
CVE-2018-8124An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka…High · 7.0May 9, 2018
CVE-2018-8123An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information…Medium · 4.3May 9, 2018
CVE-2018-8122A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka…High · 7.5May 9, 2018
CVE-2018-8120An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k High · 7.0KEVMay 9, 2018
CVE-2018-8119A spoofing vulnerability exists when the Azure IoT Device Provisioning AMQP Transport library improperly validates certificates over the…Medium · 5.6May 9, 2018
CVE-2018-8114A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka…High · 7.5May 9, 2018
CVE-2018-8112A security feature bypass vulnerability exists when Microsoft Edge improperly handles requests of different origins, aka "Microsoft Edge…Medium · 4.3May 9, 2018
CVE-2018-1039A security feature bypass vulnerability exists in .Net Framework which could allow an attacker to bypass Device Guard, aka ".NET Framework…High · 7.8May 9, 2018
CVE-2018-1025An information disclosure vulnerability exists when affected Microsoft browsers improperly handle objects in memory, aka "Microsoft…Medium · 4.3May 9, 2018
CVE-2018-1022A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka…High · 7.5May 9, 2018
CVE-2018-1021An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information…Medium · 4.3May 9, 2018
CVE-2018-0961A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate vSMB packet data, aka…High · 7.6May 9, 2018
CVE-2018-0959A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated…High · 7.6May 9, 2018
CVE-2018-0958A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Windows Security…Medium · 5.3May 9, 2018
CVE-2018-0955A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka…High · 7.5May 9, 2018