Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2018-1008An elevation of privilege vulnerability exists in Windows Adobe Type Manager Font Driver (ATMFD.dll) when it fails to properly handle…
- CVE-2018-1007An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka "Microsoft…
- CVE-2018-1005An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request…
- CVE-2018-1004A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine…
- CVE-2018-1003A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system…
- CVE-2018-1001A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka…
- CVE-2018-1000An information disclosure vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka…
- CVE-2018-0998An information disclosure vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka "Microsoft Edge…
- CVE-2018-0997A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory…
- CVE-2018-0996A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka…
- CVE-2018-0995A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2018-0994A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2018-0993A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2018-0991A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory…
- CVE-2018-0990A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2018-0989An information disclosure vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka…
- CVE-2018-0988A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka…
- CVE-2018-0987An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Internet Explorer…
- CVE-2018-0981An information disclosure vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka…
- CVE-2018-0980A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2018-0979A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…
- CVE-2018-0976A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and…
- CVE-2018-0975An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead…
- CVE-2018-0974An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead…
- CVE-2018-0973An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead…
- CVE-2018-0972An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead…
- CVE-2018-0971An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead…
- CVE-2018-0970An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead…
- CVE-2018-0969An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead…
- CVE-2018-0968An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead…