Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2018-0954A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka…
- CVE-2018-0953A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2018-0951A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2018-0946A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2018-0945A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2018-0943A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2018-0854A security feature bypass vulnerability exists in Windows Scripting Host which could allow an attacker to bypass Device Guard, aka…
- CVE-2018-8115A remote code execution vulnerability exists when the Windows Host Compute Service Shim (hcsshim) library fails to properly validate input…
- CVE-2018-8118A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory…
- CVE-2018-1035A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Windows Security…
- CVE-2018-8117A security feature bypass vulnerability exists in the Microsoft Wireless Keyboard 850 which could allow an attacker to reuse an AES…
- CVE-2018-8116A denial of service vulnerability exists in the way that Windows handles objects in memory, aka "Microsoft Graphics Component Denial of…
- CVE-2018-1037An information disclosure vulnerability exists when Visual Studio improperly discloses limited contents of uninitialized memory while…
- CVE-2018-1034An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request…
- CVE-2018-1032An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request…
- CVE-2018-1030A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory…
- CVE-2018-1029A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka…
- CVE-2018-1028A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted embedded fonts, aka…
- CVE-2018-1027A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka…
- CVE-2018-1026A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory…
- CVE-2018-1023A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka "Microsoft Browser Memory…
- CVE-2018-1020A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory…
- CVE-2018-1019A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2018-1018A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory…
- CVE-2018-1015A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka…
- CVE-2018-1014An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request…
- CVE-2018-1013A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka…
- CVE-2018-1012A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka…
- CVE-2018-1011A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka…
- CVE-2018-1009An elevation of privilege vulnerability exists when Windows improperly handles objects in memory and incorrectly maps kernel memory, aka…