Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2017-0186A denial of service vulnerability exists when Microsoft Hyper-V Network Switch running on a Windows 10, Windows 8.1, Windows Server 2012…
- CVE-2017-0185A denial of service vulnerability exists when Microsoft Hyper-V Network Switch running on a Windows 10, Windows 8.1, Windows Server 2012…
- CVE-2017-0184A denial of service vulnerability exists when Microsoft Hyper-V running on a host server fails to properly validate input from a…
- CVE-2017-0183A denial of service vulnerability exists when Microsoft Hyper-V Network Switch running on a Windows 10, Windows Server 2008 R2, Windows…
- CVE-2017-0182A denial of service vulnerability exists when Microsoft Hyper-V Network Switch running on a Windows 10, Windows Server 2008 R2, Windows…
- CVE-2017-0181A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a Windows 10 or Windows Server 2016 host…
- CVE-2017-0180A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a host server fails to properly validate input…
- CVE-2017-0179A denial of service vulnerability exists when Microsoft Hyper-V running on a Windows 10, Windows 8.1, Windows Server 2012 R2, or Windows…
- CVE-2017-0178A denial of service vulnerability exists when Microsoft Hyper-V running on Windows 10, Windows 10 1511, Windows 10 1607, Windows 8.1…
- CVE-2017-0169An information disclosure vulnerability exists when Windows Hyper-V running on a Windows 8.1, Windows Server 2012.
- CVE-2017-0168An information disclosure vulnerability exists when the Windows Hyper-V Network Switch running on a Windows 8.1, Windows Server 2008…
- CVE-2017-0167An information disclosure vulnerability exists in Windows 8.1, Windows RT 8.1, Windows Server 2012 R2, Windows 10, and Windows Server 2016…
- CVE-2017-0166An elevation of privilege vulnerability exists in Windows when LDAP request buffer lengths are improperly calculated.
- CVE-2017-0165An elevation of privilege vulnerability exists when Microsoft Windows running on Windows 10, Windows 10 1511, Windows 8.1, Windows RT 8.1…
- CVE-2017-0164A denial of service vulnerability exists in Windows 10 1607 and Windows Server 2016 Active Directory when an authenticated attacker sends…
- CVE-2017-0163A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a host server fails to properly validate input…
- CVE-2017-0162A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a Windows 10, Windows 8.1, Windows Server 2012…
- CVE-2017-0160Microsoft .NET Framework 2.0, 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allows an attacker with access to the local system to execute…
- CVE-2017-0159A security feature bypass vulnerability exists in Windows 10 1607, Windows Server 2012 R2, and Windows 2016 when ADFS incorrectly treats…
- CVE-2017-0158An elevation of privilege vulnerability exists when Microsoft Windows running on Windows 10, Windows 10 1511, Windows 8.1 Windows RT 8.1…
- CVE-2017-0156An elevation of privilege vulnerability exists in Windows 7, Windows 8.1, Windows RT 8.1, Windows 10, Windows Server 2008 R2, Windows…
- CVE-2017-0155The Graphics component in the kernel in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; and Windows 7 SP1 allows local…
- CVE-2017-0106Microsoft Excel 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1, and Microsoft Outlook 2016 allow remote attackers to…
- CVE-2017-0093A remote code execution vulnerability in Microsoft Edge exists in the way that the Scripting Engine renders when handling objects in…
- CVE-2017-0058A Win32k information disclosure vulnerability exists in Microsoft Windows when the win32k component improperly provides kernel information.
- CVE-2017-0154Microsoft Internet Explorer 11 on Windows 10, 1511, and 1606 and Windows Server 2016 does not enforce cross-domain policies, allowing…
- CVE-2017-0151A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in…
- CVE-2017-0150A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in…
- CVE-2017-0149Microsoft Internet Explorer 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v
- CVE-2017-0148The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold an