cve.nowby Sazabi

Microsoft CVEs

14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.

CVE-2017-0043Active Directory Federation Services in Microsoft Windows 10 1607, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 Gold and R2…Medium · 5.3Mar 17, 2017
CVE-2017-0042Windows Media Player in Microsoft Windows 8.1; Windows Server 2012 R2; Windows RT 8.1; Windows 7 SP1; Windows 2008 SP2 and R2 SP1, Windows…Low · 3.1Mar 17, 2017
CVE-2017-0040The scripting engine in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of…High · 7.5Mar 17, 2017
CVE-2017-0039Microsoft Windows Vista SP2 and Server 2008 SP2 mishandle dynamic link library (DLL) loading, which allows local users to gain privileges…High · 7.8Mar 17, 2017
CVE-2017-0035A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in…High · 7.5Mar 17, 2017
CVE-2017-0034A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory.High · 7.5Mar 17, 2017
CVE-2017-0033Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to spoof web content via a crafted web site, aka "Microsoft…Medium · 4.3Mar 17, 2017
CVE-2017-0032A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in…High · 7.5Mar 17, 2017
CVE-2017-0031Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Word 2007 SP3, and Word 2010 SP2 allow remote attackers to execute arbitrary…High · 7.8Mar 17, 2017
CVE-2017-0030Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Office Web Apps Server 2010 SP2, Word 2007 SP3, Word 2010 SP2, and Word…High · 7.8Mar 17, 2017
CVE-2017-0029Microsoft Office 2010 SP2, Word 2010 SP2, Word 2013 RT SP1, and Word 2016 allow remote attackers to cause a denial of service (application…Medium · 5.5Mar 17, 2017
CVE-2017-0027Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Services on SharePoint…Medium · 4.7Mar 17, 2017
CVE-2017-0026The kernel-mode drivers in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allow local users to gain privileges via a…High · 7.8Mar 17, 2017
CVE-2017-0025The kernel-mode drivers in Microsoft Windows Vista; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012…High · 7.8Mar 17, 2017
CVE-2017-0024The kernel-mode drivers in Microsoft Windows 10 1607 and Windows Server 2016 allow local users to gain privileges via a crafted…High · 7.8Mar 17, 2017
CVE-2017-0023The PDF library in Microsoft Edge; Windows 8.1; Windows Server 2012 and R2; Windows RT 8.1; and Windows 10, 1511, and 1607 allows remote…High · 7.5Mar 17, 2017
CVE-2017-0022Microsoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows Server 2008 SP2 Medium · 6.5KEVMar 17, 2017
CVE-2017-0021Hyper-V in Microsoft Windows 10 1607 and Windows Server 2016 does not properly validate vSMB packet data, which allows attackers to…Critical · 9.0Mar 17, 2017
CVE-2017-0020Microsoft Excel 2016, Excel 2010 SP2, Excel 2013 RT SP1, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary…High · 7.8Mar 17, 2017
CVE-2017-0019Microsoft Word 2016 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted…High · 7.8Mar 17, 2017
CVE-2017-0018Microsoft Internet Explorer 10 and 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption)…High · 7.5Mar 17, 2017
CVE-2017-0017The RegEx class in the XSS filter in Microsoft Edge allows remote attackers to conduct cross-site scripting (XSS) attacks and obtain…Medium · 6.1Mar 17, 2017
CVE-2017-0016Microsoft Windows 10 Gold, 1511, and 1607; Windows 8.1; Windows RT 8.1; Windows Server 2012 R2, and Windows Server 2016 do not properly…Medium · 5.9Mar 17, 2017
CVE-2017-0015A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in…High · 7.5Mar 17, 2017
CVE-2017-0014The Windows Graphics Component in Microsoft Office 2010 SP2; Windows Server 2008 R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012…High · 7.5Mar 17, 2017
CVE-2017-0012Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to spoof web content via a crafted web site, aka "Microsoft…Medium · 4.3Mar 17, 2017
CVE-2017-0011Microsoft Edge allows remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Edge Information Disclosure…Medium · 4.3Mar 17, 2017
CVE-2017-0010A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in…High · 7.5Mar 17, 2017
CVE-2017-0009Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web…Medium · 4.3Mar 17, 2017
CVE-2017-0008Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web…Medium · 4.3Mar 17, 2017