Vendor CVEs

Microsoft

All CVEs

14,319 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2021-36928	Microsoft Edge	Med	0.39	6.0	0.01	Aug 26, 2021	Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2021-26430	Microsoft Azure Sphere	Med	0.39	6.0	0.01	Aug 12, 2021	Azure Sphere Denial of Service Vulnerability
CVE-2021-33764	Microsoft Windows Key Distribution Center	Med	0.39	5.9	0.03	Jul 14, 2021	Windows Key Distribution Center Information Disclosure Vulnerability
CVE-2021-31957	Microsoft Net	Med	0.39	5.9	0.05	Jun 8, 2021	ASP.NET Core Denial of Service Vulnerability
CVE-2020-1343	Microsoft Visual Studio Code Live Share Extension	Med	0.39	5.9	0.03	Jun 9, 2020	An information disclosure vulnerability exists in Visual Studio Code Live Share Extension when it exposes tokens in plain text, aka 'Visual Studio Code Live Share Information Disclosure Vulnerability'.
CVE-2020-1195	Microsoft Feedback extension	Med	0.39	5.9	0.03	May 21, 2020	An elevation of privilege vulnerability exists in Microsoft Edge (Chromium-based) when the Feedback extension improperly validates input, aka 'Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability'.
CVE-2020-0751	Microsoft Hyper-V	Med	0.39	6.0	0.01	Feb 11, 2020	A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on a guest operating system.To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system,…
CVE-2020-0617	Microsoft Hyper-V Virtual PCI	Med	0.39	6.0	0.01	Jan 14, 2020	A denial of service vulnerability exists when Microsoft Hyper-V Virtual PCI on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Hyper-V Denial of Service Vulnerability'.
CVE-2019-1345	Microsoft Windows Kernel	Med	0.39	5.5	0.03	Oct 10, 2019	An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1334.
CVE-2019-1344	Microsoft Windows Code Integrity Module	Med	0.39	5.5	0.03	Oct 10, 2019	An information disclosure vulnerability exists in the way that the Windows Code Integrity Module handles objects in memory, aka 'Windows Code Integrity Module Information Disclosure Vulnerability'.
CVE-2019-1338	Microsoft Windows	Med	0.39	5.9	0.03	Oct 10, 2019	A security feature bypass vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLMv2 protection if a client is also sending LMv2 responses, aka 'Windows NTLM Security Feature Bypass Vulnerability'.
CVE-2019-1318	Microsoft Windows Transport Layer Security	Med	0.39	5.9	0.03	Oct 10, 2019	A spoofing vulnerability exists when Transport Layer Security (TLS) accesses non- Extended Master Secret (EMS) sessions, aka 'Microsoft Windows Transport Layer Security Spoofing Vulnerability'.
CVE-2019-1231	Microsoft Rome SDK	Med	0.39	5.9	0.02	Sep 11, 2019	An information disclosure vulnerability exists in the way Rome SDK handles server SSL/TLS certificate validation, aka 'Rome SDK Information Disclosure Vulnerability'.
CVE-2019-1153	Microsoft Windows Graphics component	Med	0.39	5.5	0.03	Aug 14, 2019	An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit this…
CVE-2019-1148	Microsoft Windows Graphics component	Med	0.39	5.5	0.03	Aug 14, 2019	An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit this…
CVE-2019-1029	Microsoft Skype For Business	Med	0.39	5.9	0.05	Jun 12, 2019	A denial of service vulnerability exists in Skype for Business. An attacker who successfully exploited the vulnerability could cause Skype for Business to stop responding. Note that the denial of service would not allow an attacker to execute code or to elevate the attacker's…
CVE-2019-1008	Microsoft Dynamics On-Premise	Med	0.39	5.9	0.03	May 16, 2019	A security feature bypass vulnerability exists in Dynamics On Premise, aka 'Microsoft Dynamics On-Premise Security Feature Bypass'.
CVE-2019-0932	Microsoft Skype for Android	Med	0.39	5.9	0.05	May 16, 2019	An information disclosure vulnerability exists in Skype for Android, aka 'Skype for Android Information Disclosure Vulnerability'.
CVE-2019-0796	Microsoft Windows	Med	0.39	5.5	0.04	Apr 9, 2019	An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0805, CVE-2019-0836, CVE-2019-0841.
CVE-2019-0683	Microsoft Active Directory Forest	Med	0.39	5.9	0.03	Apr 9, 2019	An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an attacker in the trusting forest request delegation of a TGT for an identity from the trusted forest, aka 'Active Directory Elevation of Privilege Vulnerability'.
CVE-2019-0657	Microsoft Visual Studio	Med	0.39	5.9	0.05	Mar 5, 2019	A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability'.
CVE-2019-0641	Microsoft Edge	Med	0.39	5.9	0.03	Mar 5, 2019	A security feature bypass vulnerability exists in Microsoft Edge handles whitelisting, aka 'Microsoft Edge Security Feature Bypass Vulnerability'.
CVE-2018-8546	Microsoft Office	Med	0.39	5.9	0.05	Nov 14, 2018	A denial of service vulnerability exists in Skype for Business, aka "Microsoft Skype for Business Denial of Service Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Lync, Skype.
CVE-2018-8444	Microsoft Windows	Med	0.39	5.9	0.06	Sep 13, 2018	An information disclosure vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests, aka "Windows SMB Information Disclosure Vulnerability." This affects Windows Server 2012, Windows 10, Windows 8.1, Windows RT 8.1,…
CVE-2018-8304	Microsoft Windows DNSAPI	Med	0.39	5.9	0.12	Jul 11, 2018	A denial of service vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it fails to properly handle DNS responses, aka "Windows DNSAPI Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008,…
CVE-2018-0975	Microsoft Windows Kernel	Med	0.39	5.5	0.03	Apr 12, 2018	An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows…
CVE-2018-0974	Microsoft Windows Kernel	Med	0.39	5.5	0.04	Apr 12, 2018	An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows…
CVE-2018-0973	Microsoft Windows Kernel	Med	0.39	5.5	0.04	Apr 12, 2018	An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows…
CVE-2018-0972	Microsoft Windows Kernel	Med	0.39	5.5	0.04	Apr 12, 2018	An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows…
CVE-2018-0971	Microsoft Windows Kernel	Med	0.39	5.5	0.04	Apr 12, 2018	An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows…
CVE-2018-0970	Microsoft Windows	Med	0.39	5.5	0.04	Apr 12, 2018	An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows…
CVE-2018-0969	Microsoft Windows Kernel	Med	0.39	5.5	0.04	Apr 12, 2018	An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows…
CVE-2018-0968	Microsoft Windows Kernel	Med	0.39	5.5	0.04	Apr 12, 2018	An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows…
CVE-2018-4863	Microsoft Endpoint Protection	Med	0.39	5.5	0.01	Apr 5, 2018	Sophos Endpoint Protection 10.7 allows local users to bypass an intended tamper protection mechanism by deleting the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Sophos Endpoint Defense\ registry key.
CVE-2018-0753	Microsoft Windows	Med	0.39	5.9	0.09	Jan 4, 2018	Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allow a denial of service vulnerability due to the way objects are handled in memory, aka "Windows IPSec Denial of Service…
CVE-2017-11906	Microsoft Internet Explorer	Med	0.39	5.3	0.25	Dec 12, 2017	Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the…
CVE-2017-11785	Microsoft Windows Server 2008	Med	0.39	5.5	0.03	Oct 13, 2017	The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows an information disclosure vulnerability…
CVE-2017-8687	Microsoft Windows Server 2008	Med	0.39	5.5	0.04	Sep 13, 2017	The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it…
CVE-2017-8685	Microsoft Windows Server 2008	Med	0.39	5.5	0.03	Sep 13, 2017	Windows GDI+ on Microsoft Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows information disclosure by the way it discloses kernel memory addresses, aka "Windows GDI+ Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8684 and CVE-2017-8688.
CVE-2017-8684	Microsoft Windows Server 2008	Med	0.39	5.5	0.04	Sep 13, 2017	Windows GDI+ on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT 8.1, allows information disclosure by the way it discloses kernel memory addresses, aka "Windows GDI+ Information Disclosure Vulnerability".…
CVE-2017-8681	Microsoft Windows Server 2008	Med	0.39	5.5	0.04	Sep 13, 2017	The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it…
CVE-2017-8680	Microsoft Windows Server 2008	Med	0.39	5.5	0.04	Sep 13, 2017	The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT 8.1 allows an information disclosure vulnerability when it improperly handles objects in memory, aka "Win32k Information…
CVE-2017-8678	Microsoft Windows Server 2008	Med	0.39	5.5	0.04	Sep 13, 2017	The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it…
CVE-2017-8673	Microsoft Windows 10 1909	Med	0.39	5.9	0.05	Aug 8, 2017	The Remote Desktop Protocol (RDP) implementation in Microsoft Windows 10 1703 allows an attacker to connect to a target system using RDP and send specially crafted requests, aka "Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability."
CVE-2017-8582	Microsoft Windows Server 2008	Med	0.39	5.9	0.08	Jul 11, 2017	HTTP.sys in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when the component improperly…
CVE-2017-8564	Microsoft Windows Server 2008	Med	0.39	5.5	0.03	Jul 11, 2017	Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it fails to properly…
CVE-2017-8469	Microsoft Windows Server 2008	Med	0.39	5.5	0.04	Jun 15, 2017	The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted…
CVE-2017-0280	Microsoft Server Message Block	Med	0.39	5.9	0.07	May 12, 2017	The Microsoft Server Message Block 1.0 (SMBv1) allows denial of service when an attacker sends specially crafted requests to the server, aka "Windows SMB Denial of Service Vulnerability". This CVE ID is unique from CVE-2017-0269 and CVE-2017-0273.
CVE-2017-0276	Microsoft Windows Server 2008	Med	0.39	5.9	0.07	May 12, 2017	Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows…
CVE-2017-0275	Microsoft Windows Server 2008	Med	0.39	5.9	0.08	May 12, 2017	Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows…

CVE-2021-36928MedAug 26, 2021
Microsoft
Edge
risk 0.39cvss 6.0epss 0.01
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2021-26430MedAug 12, 2021
Microsoft
Azure Sphere
risk 0.39cvss 6.0epss 0.01
Azure Sphere Denial of Service Vulnerability
CVE-2021-33764MedJul 14, 2021
Microsoft
Windows Key Distribution Center
risk 0.39cvss 5.9epss 0.03
Windows Key Distribution Center Information Disclosure Vulnerability
CVE-2021-31957MedJun 8, 2021
Microsoft
Net
risk 0.39cvss 5.9epss 0.05
ASP.NET Core Denial of Service Vulnerability
CVE-2020-1343MedJun 9, 2020
Microsoft
Visual Studio Code Live Share Extension
risk 0.39cvss 5.9epss 0.03
An information disclosure vulnerability exists in Visual Studio Code Live Share Extension when it exposes tokens in plain text, aka 'Visual Studio Code Live Share Information Disclosure Vulnerability'.
CVE-2020-1195MedMay 21, 2020
Microsoft
Feedback extension
risk 0.39cvss 5.9epss 0.03
An elevation of privilege vulnerability exists in Microsoft Edge (Chromium-based) when the Feedback extension improperly validates input, aka 'Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability'.
CVE-2020-0751MedFeb 11, 2020
Microsoft
Hyper-V
risk 0.39cvss 6.0epss 0.01
A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on a guest operating system.To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system,…
CVE-2020-0617MedJan 14, 2020
Microsoft
Hyper-V Virtual PCI
risk 0.39cvss 6.0epss 0.01
A denial of service vulnerability exists when Microsoft Hyper-V Virtual PCI on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Hyper-V Denial of Service Vulnerability'.
CVE-2019-1345MedOct 10, 2019
Microsoft
Windows Kernel
risk 0.39cvss 5.5epss 0.03
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1334.
CVE-2019-1344MedOct 10, 2019
Microsoft
Windows Code Integrity Module
risk 0.39cvss 5.5epss 0.03
An information disclosure vulnerability exists in the way that the Windows Code Integrity Module handles objects in memory, aka 'Windows Code Integrity Module Information Disclosure Vulnerability'.
CVE-2019-1338MedOct 10, 2019
Microsoft
Windows
risk 0.39cvss 5.9epss 0.03
A security feature bypass vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLMv2 protection if a client is also sending LMv2 responses, aka 'Windows NTLM Security Feature Bypass Vulnerability'.
CVE-2019-1318MedOct 10, 2019
Microsoft
Windows Transport Layer Security
risk 0.39cvss 5.9epss 0.03
A spoofing vulnerability exists when Transport Layer Security (TLS) accesses non- Extended Master Secret (EMS) sessions, aka 'Microsoft Windows Transport Layer Security Spoofing Vulnerability'.
CVE-2019-1231MedSep 11, 2019
Microsoft
Rome SDK
risk 0.39cvss 5.9epss 0.02
An information disclosure vulnerability exists in the way Rome SDK handles server SSL/TLS certificate validation, aka 'Rome SDK Information Disclosure Vulnerability'.
CVE-2019-1153MedAug 14, 2019
Microsoft
Windows Graphics component
risk 0.39cvss 5.5epss 0.03
An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit this…
CVE-2019-1148MedAug 14, 2019
Microsoft
Windows Graphics component
risk 0.39cvss 5.5epss 0.03
An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit this…
CVE-2019-1029MedJun 12, 2019
Microsoft
Skype For Business
risk 0.39cvss 5.9epss 0.05
A denial of service vulnerability exists in Skype for Business. An attacker who successfully exploited the vulnerability could cause Skype for Business to stop responding. Note that the denial of service would not allow an attacker to execute code or to elevate the attacker's…
CVE-2019-1008MedMay 16, 2019
Microsoft
Dynamics On-Premise
risk 0.39cvss 5.9epss 0.03
A security feature bypass vulnerability exists in Dynamics On Premise, aka 'Microsoft Dynamics On-Premise Security Feature Bypass'.
CVE-2019-0932MedMay 16, 2019
Microsoft
Skype for Android
risk 0.39cvss 5.9epss 0.05
An information disclosure vulnerability exists in Skype for Android, aka 'Skype for Android Information Disclosure Vulnerability'.
CVE-2019-0796MedApr 9, 2019
Microsoft
Windows
risk 0.39cvss 5.5epss 0.04
An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0805, CVE-2019-0836, CVE-2019-0841.
CVE-2019-0683MedApr 9, 2019
Microsoft
Active Directory Forest
risk 0.39cvss 5.9epss 0.03
An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an attacker in the trusting forest request delegation of a TGT for an identity from the trusted forest, aka 'Active Directory Elevation of Privilege Vulnerability'.
CVE-2019-0657MedMar 5, 2019
Microsoft
Visual Studio
risk 0.39cvss 5.9epss 0.05
A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability'.
CVE-2019-0641MedMar 5, 2019
Microsoft
Edge
risk 0.39cvss 5.9epss 0.03
A security feature bypass vulnerability exists in Microsoft Edge handles whitelisting, aka 'Microsoft Edge Security Feature Bypass Vulnerability'.
CVE-2018-8546MedNov 14, 2018
Microsoft
Office
risk 0.39cvss 5.9epss 0.05
A denial of service vulnerability exists in Skype for Business, aka "Microsoft Skype for Business Denial of Service Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Lync, Skype.
CVE-2018-8444MedSep 13, 2018
Microsoft
Windows
risk 0.39cvss 5.9epss 0.06
An information disclosure vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests, aka "Windows SMB Information Disclosure Vulnerability." This affects Windows Server 2012, Windows 10, Windows 8.1, Windows RT 8.1,…
CVE-2018-8304MedJul 11, 2018
Microsoft
Windows DNSAPI
risk 0.39cvss 5.9epss 0.12
A denial of service vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it fails to properly handle DNS responses, aka "Windows DNSAPI Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008,…
CVE-2018-0975MedApr 12, 2018
Microsoft
Windows Kernel
risk 0.39cvss 5.5epss 0.03
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows…
CVE-2018-0974MedApr 12, 2018
Microsoft
Windows Kernel
risk 0.39cvss 5.5epss 0.04
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows…
CVE-2018-0973MedApr 12, 2018
Microsoft
Windows Kernel
risk 0.39cvss 5.5epss 0.04
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows…
CVE-2018-0972MedApr 12, 2018
Microsoft
Windows Kernel
risk 0.39cvss 5.5epss 0.04
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows…
CVE-2018-0971MedApr 12, 2018
Microsoft
Windows Kernel
risk 0.39cvss 5.5epss 0.04
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows…
CVE-2018-0970MedApr 12, 2018
Microsoft
Windows
risk 0.39cvss 5.5epss 0.04
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows…
CVE-2018-0969MedApr 12, 2018
Microsoft
Windows Kernel
risk 0.39cvss 5.5epss 0.04
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows…
CVE-2018-0968MedApr 12, 2018
Microsoft
Windows Kernel
risk 0.39cvss 5.5epss 0.04
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows…
CVE-2018-4863MedApr 5, 2018
Microsoft
Endpoint Protection
risk 0.39cvss 5.5epss 0.01
Sophos Endpoint Protection 10.7 allows local users to bypass an intended tamper protection mechanism by deleting the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Sophos Endpoint Defense\ registry key.
CVE-2018-0753MedJan 4, 2018
Microsoft
Windows
risk 0.39cvss 5.9epss 0.09
Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allow a denial of service vulnerability due to the way objects are handled in memory, aka "Windows IPSec Denial of Service…
CVE-2017-11906MedDec 12, 2017
Microsoft
Internet Explorer
risk 0.39cvss 5.3epss 0.25
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the…
CVE-2017-11785MedOct 13, 2017
Microsoft
Windows Server 2008
risk 0.39cvss 5.5epss 0.03
The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows an information disclosure vulnerability…
CVE-2017-8687MedSep 13, 2017
Microsoft
Windows Server 2008
risk 0.39cvss 5.5epss 0.04
The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it…
CVE-2017-8685MedSep 13, 2017
Microsoft
Windows Server 2008
risk 0.39cvss 5.5epss 0.03
Windows GDI+ on Microsoft Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows information disclosure by the way it discloses kernel memory addresses, aka "Windows GDI+ Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8684 and CVE-2017-8688.
CVE-2017-8684MedSep 13, 2017
Microsoft
Windows Server 2008
risk 0.39cvss 5.5epss 0.04
Windows GDI+ on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT 8.1, allows information disclosure by the way it discloses kernel memory addresses, aka "Windows GDI+ Information Disclosure Vulnerability".…
CVE-2017-8681MedSep 13, 2017
Microsoft
Windows Server 2008
risk 0.39cvss 5.5epss 0.04
The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it…
CVE-2017-8680MedSep 13, 2017
Microsoft
Windows Server 2008
risk 0.39cvss 5.5epss 0.04
The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT 8.1 allows an information disclosure vulnerability when it improperly handles objects in memory, aka "Win32k Information…
CVE-2017-8678MedSep 13, 2017
Microsoft
Windows Server 2008
risk 0.39cvss 5.5epss 0.04
The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it…
CVE-2017-8673MedAug 8, 2017
Microsoft
Windows 10 1909
risk 0.39cvss 5.9epss 0.05
The Remote Desktop Protocol (RDP) implementation in Microsoft Windows 10 1703 allows an attacker to connect to a target system using RDP and send specially crafted requests, aka "Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability."
CVE-2017-8582MedJul 11, 2017
Microsoft
Windows Server 2008
risk 0.39cvss 5.9epss 0.08
HTTP.sys in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when the component improperly…
CVE-2017-8564MedJul 11, 2017
Microsoft
Windows Server 2008
risk 0.39cvss 5.5epss 0.03
Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it fails to properly…
CVE-2017-8469MedJun 15, 2017
Microsoft
Windows Server 2008
risk 0.39cvss 5.5epss 0.04
The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted…
CVE-2017-0280MedMay 12, 2017
Microsoft
Server Message Block
risk 0.39cvss 5.9epss 0.07
The Microsoft Server Message Block 1.0 (SMBv1) allows denial of service when an attacker sends specially crafted requests to the server, aka "Windows SMB Denial of Service Vulnerability". This CVE ID is unique from CVE-2017-0269 and CVE-2017-0273.
CVE-2017-0276MedMay 12, 2017
Microsoft
Windows Server 2008
risk 0.39cvss 5.9epss 0.07
Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows…
CVE-2017-0275MedMay 12, 2017
Microsoft
Windows Server 2008
risk 0.39cvss 5.9epss 0.08
Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows…

Page 163 of 287