cve.nowby Sazabi

Microsoft CVEs

14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.

CVE-2017-0265Microsoft PowerPoint for Mac 2011 allows a remote code execution vulnerability when the software fails to properly handle objects in…High · 7.8May 12, 2017
CVE-2017-0264Microsoft PowerPoint for Mac 2011 allows a remote code execution vulnerability when the software fails to properly handle objects in…High · 7.8May 12, 2017
CVE-2017-0263The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, WindowHigh · 7.8KEVMay 12, 2017
CVE-2017-0262Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly High · 7.8KEVMay 12, 2017
CVE-2017-0261Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly High · 7.8KEVMay 12, 2017
CVE-2017-0259The Windows kernel in Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server…Medium · 4.7May 12, 2017
CVE-2017-0258The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows…Medium · 4.7May 12, 2017
CVE-2017-0256A spoofing vulnerability exists when the ASP.NET Core fails to properly sanitize web requests.Medium · 5.3May 12, 2017
CVE-2017-0255Microsoft SharePoint Foundation 2013 SP1 allows an elevation of privilege vulnerability when it does not properly sanitize a specially…Medium · 5.4May 12, 2017
CVE-2017-0254Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Office for Mac 2011, Office for Mac 2016, Microsoft…High · 7.8May 12, 2017
CVE-2017-0249An elevation of privilege vulnerability exists when the ASP.NET Core fails to properly sanitize web requests.High · 7.3May 12, 2017
CVE-2017-0248Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to bypass Enhanced Security Usage taggings…High · 7.5May 12, 2017
CVE-2017-0247A denial of service vulnerability exists when the ASP.NET Core fails to properly validate web requests.High · 7.5May 12, 2017
CVE-2017-0246The Graphics Component in the kernel-mode drivers in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012…High · 7.0May 12, 2017
CVE-2017-0245The kernel-mode drivers in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1 and Windows Server 2012 Gold allow a local authenticated…Medium · 4.7May 12, 2017
CVE-2017-0244The kernel in Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows locally authenticated attackers to gain privileges via a…Medium · 6.7May 12, 2017
CVE-2017-0242An information disclosure vulnerability exists in the way some ActiveX objects are instantiated, aka "Microsoft ActiveX Information…Medium · 5.5May 12, 2017
CVE-2017-0241An elevation of privilege vulnerability exists when Microsoft Edge renders a domain-less page in the URL, which could allow Microsoft Edge…Medium · 5.3May 12, 2017
CVE-2017-0240A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render when handling…High · 7.5May 12, 2017
CVE-2017-0238A remote code execution vulnerability exists in Microsoft browsers in the way JavaScript scripting engines handle objects in memory, aka…High · 7.5May 12, 2017
CVE-2017-0236A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects…High · 7.5May 12, 2017
CVE-2017-0235A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects…High · 7.5May 12, 2017
CVE-2017-0234A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects…High · 7.5May 12, 2017
CVE-2017-0233An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in…High · 8.3May 12, 2017
CVE-2017-0231A spoofing vulnerability exists when Microsoft browsers render SmartScreen Filter, aka "Microsoft Browser Spoofing Vulnerability."Medium · 4.3May 12, 2017
CVE-2017-0230A remote code execution vulnerability exists in Microsoft Edge in the way JavaScript engines render when handling objects in memory, aka…High · 7.5May 12, 2017
CVE-2017-0229A remote code execution vulnerability exists in Microsoft Edge in the way JavaScript engines render when handling objects in memory, aka…High · 7.5May 12, 2017
CVE-2017-0228A remote code execution vulnerability exists in Microsoft browsers in the way JavaScript engines render when handling objects in memory…High · 7.5May 12, 2017
CVE-2017-0227A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render when handling…High · 7.5May 12, 2017
CVE-2017-0226A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory…High · 7.5May 12, 2017