Vendor CVEs
Microsoft
All CVEs
18,148 total · sorted by risk| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-38020 | Hig | 0.48 | 7.3 | 0.01 | Sep 13, 2022 | Visual Studio Code Elevation of Privilege Vulnerability | ||
| CVE-2022-38011 | Hig | 0.48 | 7.3 | 0.01 | Sep 13, 2022 | Raw Image Extension Remote Code Execution Vulnerability | ||
| CVE-2022-30170 | Hig | 0.48 | 7.3 | 0.02 | Sep 13, 2022 | Windows Credential Roaming Service Elevation of Privilege Vulnerability | ||
| CVE-2022-35793 | Hig | 0.48 | 7.3 | 0.09 | Aug 9, 2022 | Windows Print Spooler Elevation of Privilege Vulnerability | ||
| CVE-2022-33631 | Hig | 0.48 | 7.3 | 0.01 | Aug 9, 2022 | Microsoft Excel Security Feature Bypass Vulnerability | ||
| CVE-2022-30209 | Hig | 0.48 | 7.4 | 0.03 | Jul 12, 2022 | Windows IIS Server Elevation of Privilege Vulnerability | ||
| CVE-2022-30203 | Hig | 0.48 | 7.4 | 0.01 | Jul 12, 2022 | Windows Boot Manager Security Feature Bypass Vulnerability | ||
| CVE-2022-22040 | Hig | 0.48 | 7.3 | 0.01 | Jul 12, 2022 | Internet Information Services Dynamic Compression Module Denial of Service Vulnerability | ||
| CVE-2022-26913 | Hig | 0.48 | 7.4 | 0.02 | May 10, 2022 | Windows Authentication Information Disclosure Vulnerability | ||
| CVE-2021-43892 | Hig | 0.48 | 7.4 | 0.03 | Dec 15, 2021 | Microsoft BizTalk ESB Toolkit Spoofing Vulnerability | ||
| CVE-2021-43219 | Hig | 0.48 | 7.4 | 0.04 | Dec 15, 2021 | DirectX Graphics Kernel File Denial of Service Vulnerability | ||
| CVE-2021-40457 | Hig | 0.48 | 7.4 | 0.02 | Oct 13, 2021 | Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability | ||
| CVE-2021-36945 | Hig | 0.48 | 7.3 | 0.02 | Aug 12, 2021 | Windows 10 Update Assistant Elevation of Privilege Vulnerability | ||
| CVE-2021-31949 | Hig | 0.48 | 7.3 | 0.03 | Jun 8, 2021 | Microsoft Outlook Remote Code Execution Vulnerability | ||
| CVE-2021-31938 | Hig | 0.48 | 7.3 | 0.02 | Jun 8, 2021 | Microsoft VsCode Kubernetes Tools Extension Elevation of Privilege Vulnerability | ||
| CVE-2021-31936 | Hig | 0.48 | 7.4 | 0.03 | May 11, 2021 | Microsoft Accessibility Insights for Web Information Disclosure Vulnerability | ||
| CVE-2021-31204 | Hig | 0.48 | 7.3 | 0.01 | May 11, 2021 | .NET and Visual Studio Elevation of Privilege Vulnerability | ||
| CVE-2021-31195 | Med | 0.48 | 6.5 | 0.74 | May 11, 2021 | Microsoft Exchange Server Remote Code Execution Vulnerability | ||
| CVE-2021-31186 | Hig | 0.48 | 7.4 | 0.03 | May 11, 2021 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | ||
| CVE-2021-27070 | Hig | 0.48 | 7.3 | 0.04 | Mar 11, 2021 | Windows 10 Update Assistant Elevation of Privilege Vulnerability | ||
| CVE-2021-1706 | Hig | 0.48 | 7.3 | 0.02 | Jan 12, 2021 | Windows LUAFV Elevation of Privilege Vulnerability | ||
| CVE-2021-1704 | Hig | 0.48 | 7.3 | 0.01 | Jan 12, 2021 | Windows Hyper-V Elevation of Privilege Vulnerability | ||
| CVE-2021-1685 | Hig | 0.48 | 7.3 | 0.01 | Jan 12, 2021 | Windows AppX Deployment Extensions Elevation of Privilege Vulnerability | ||
| CVE-2020-17002 | Hig | 0.48 | 7.4 | 0.03 | Dec 10, 2020 | Azure SDK for C Security Feature Bypass Vulnerability | ||
| CVE-2020-16971 | Hig | 0.48 | 7.4 | 0.04 | Dec 10, 2020 | Azure SDK for Java Security Feature Bypass Vulnerability | ||
| CVE-2020-26233 | Hig | 0.48 | 7.3 | 0.06 | Dec 8, 2020 | Git Credential Manager Core (GCM Core) is a secure Git credential helper built on .NET Core that runs on Windows and macOS. In Git Credential Manager Core before version 2.0.289, when recursively cloning a Git repository on Windows with submodules, Git will first clone the… | ||
| CVE-2020-16994 | Hig | 0.48 | 7.3 | 0.02 | Nov 11, 2020 | Azure Sphere Unsigned Code Execution Vulnerability | ||
| CVE-2020-16991 | Hig | 0.48 | 7.3 | 0.02 | Nov 11, 2020 | Azure Sphere Unsigned Code Execution Vulnerability | ||
| CVE-2020-16987 | Hig | 0.48 | 7.3 | 0.01 | Nov 11, 2020 | Azure Sphere Unsigned Code Execution Vulnerability | ||
| CVE-2020-16984 | Hig | 0.48 | 7.3 | 0.01 | Nov 11, 2020 | Azure Sphere Unsigned Code Execution Vulnerability | ||
| CVE-2020-1471 | Hig | 0.48 | 7.3 | 0.01 | Sep 11, 2020 | An elevation of privilege vulnerability exists when Microsoft Windows CloudExperienceHost fails to check COM objects. An attacker who successfully exploited the vulnerability could gain elevated privileges on a targeted system. To exploit the vulnerability, an attacker… | ||
| CVE-2020-1345 | Hig | 0.48 | 7.4 | 0.03 | Sep 11, 2020 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to… | ||
| CVE-2020-1319 | Hig | 0.48 | 7.3 | 0.05 | Sep 11, 2020 | A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change,… | ||
| CVE-2020-1198 | Hig | 0.48 | 7.4 | 0.03 | Sep 11, 2020 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to… | ||
| CVE-2020-1571 | Hig | 0.48 | 7.3 | 0.01 | Aug 17, 2020 | An elevation of privilege vulnerability exists in Windows Setup in the way it handles permissions. A locally authenticated attacker could run arbitrary code with elevated system privileges. After successfully exploiting the vulnerability, an attacker could then install programs;… | ||
| CVE-2020-1557 | Hig | 0.48 | 7.3 | 0.04 | Aug 17, 2020 | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by… | ||
| CVE-2020-1182 | Hig | 0.48 | 7.3 | 0.03 | Aug 17, 2020 | A remote code execution vulnerability exists in Microsoft Dynamics 365 for Finance and Operations (on-premises) version 10.0.11. An attacker who successfully exploited this vulnerability could gain remote code execution via server-side script execution on the victim server. An… | ||
| CVE-2019-1439 | Med | 0.48 | 6.5 | 0.75 | Nov 12, 2019 | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. | ||
| CVE-2019-1317 | Hig | 0.48 | 7.3 | 0.01 | Oct 10, 2019 | A denial of service vulnerability exists when Windows improperly handles hard links, aka 'Microsoft Windows Denial of Service Vulnerability'. | ||
| CVE-2019-1211 | Hig | 0.48 | 7.3 | 0.02 | Aug 14, 2019 | An elevation of privilege vulnerability exists in Git for Visual Studio when it improperly parses configuration files. An attacker who successfully exploited the vulnerability could execute code in the context of another local user. To exploit the vulnerability, an authenticated… | ||
| CVE-2019-1185 | Hig | 0.48 | 7.3 | 0.01 | Aug 14, 2019 | An elevation of privilege vulnerability exists due to a stack corruption in Windows Subsystem for Linux. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could… | ||
| CVE-2019-0856 | Hig | 0.48 | 7.2 | 0.19 | Apr 9, 2019 | A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Remote Code Execution Vulnerability'. | ||
| CVE-2017-8494 | Hig | 0.48 | 7.3 | 0.02 | Jun 15, 2017 | Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow a locally-authenticated attacker to run a specially crafted application on a targeted system when Windows Secure Kernel Mode fails to properly handle objects in memory, aka "Windows Elevation of… | ||
| CVE-2017-8460 | Hig | 0.48 | 7.3 | 0.03 | Jun 15, 2017 | Windows PDF in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows information disclosure when a user opens a specially crafted PDF file, aka "Windows PDF Information Disclosure Vulnerability". | ||
| CVE-2017-0298 | Hig | 0.48 | 7.3 | 0.02 | Jun 15, 2017 | A DCOM object in Helppane.exe in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016, when configured to run as the interactive user, allows an… | ||
| CVE-2017-0249 | Hig | 0.48 | 7.3 | 0.04 | May 12, 2017 | An elevation of privilege vulnerability exists when the ASP.NET Core fails to properly sanitize web requests. | ||
| CVE-2017-0063 | Med | 0.48 | 6.5 | 0.35 | Mar 17, 2017 | The Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2; Windows Server 2008 SP2 and R2; and Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote… | ||
| CVE-2017-0059 | Med | 0.48 | 4.3 | 0.62 | KEV | Mar 17, 2017 | Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability." This vulnerability is different from those described in CVE-2017-0008 and… | |
| CVE-2016-7291 | Hig | 0.48 | 7.1 | 0.23 | Dec 20, 2016 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac 2011, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allow remote attackers to obtain sensitive information from process memory or cause a… | ||
| CVE-2016-7290 | Hig | 0.48 | 7.1 | 0.23 | Dec 20, 2016 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac 2011, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allow remote attackers to obtain sensitive information from process memory or cause a… |
- risk 0.48cvss 7.3epss 0.01
Visual Studio Code Elevation of Privilege Vulnerability
- risk 0.48cvss 7.3epss 0.01
Raw Image Extension Remote Code Execution Vulnerability
- risk 0.48cvss 7.3epss 0.02
Windows Credential Roaming Service Elevation of Privilege Vulnerability
- risk 0.48cvss 7.3epss 0.09
Windows Print Spooler Elevation of Privilege Vulnerability
- risk 0.48cvss 7.3epss 0.01
Microsoft Excel Security Feature Bypass Vulnerability
- risk 0.48cvss 7.4epss 0.03
Windows IIS Server Elevation of Privilege Vulnerability
- risk 0.48cvss 7.4epss 0.01
Windows Boot Manager Security Feature Bypass Vulnerability
- risk 0.48cvss 7.3epss 0.01
Internet Information Services Dynamic Compression Module Denial of Service Vulnerability
- risk 0.48cvss 7.4epss 0.02
Windows Authentication Information Disclosure Vulnerability
- risk 0.48cvss 7.4epss 0.03
Microsoft BizTalk ESB Toolkit Spoofing Vulnerability
- risk 0.48cvss 7.4epss 0.04
DirectX Graphics Kernel File Denial of Service Vulnerability
- risk 0.48cvss 7.4epss 0.02
Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability
- risk 0.48cvss 7.3epss 0.02
Windows 10 Update Assistant Elevation of Privilege Vulnerability
- risk 0.48cvss 7.3epss 0.03
Microsoft Outlook Remote Code Execution Vulnerability
- risk 0.48cvss 7.3epss 0.02
Microsoft VsCode Kubernetes Tools Extension Elevation of Privilege Vulnerability
- risk 0.48cvss 7.4epss 0.03
Microsoft Accessibility Insights for Web Information Disclosure Vulnerability
- risk 0.48cvss 7.3epss 0.01
.NET and Visual Studio Elevation of Privilege Vulnerability
- risk 0.48cvss 6.5epss 0.74
Microsoft Exchange Server Remote Code Execution Vulnerability
- risk 0.48cvss 7.4epss 0.03
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
- risk 0.48cvss 7.3epss 0.04
Windows 10 Update Assistant Elevation of Privilege Vulnerability
- risk 0.48cvss 7.3epss 0.02
Windows LUAFV Elevation of Privilege Vulnerability
- risk 0.48cvss 7.3epss 0.01
Windows Hyper-V Elevation of Privilege Vulnerability
- risk 0.48cvss 7.3epss 0.01
Windows AppX Deployment Extensions Elevation of Privilege Vulnerability
- risk 0.48cvss 7.4epss 0.03
Azure SDK for C Security Feature Bypass Vulnerability
- risk 0.48cvss 7.4epss 0.04
Azure SDK for Java Security Feature Bypass Vulnerability
- risk 0.48cvss 7.3epss 0.06
Git Credential Manager Core (GCM Core) is a secure Git credential helper built on .NET Core that runs on Windows and macOS. In Git Credential Manager Core before version 2.0.289, when recursively cloning a Git repository on Windows with submodules, Git will first clone the…
- risk 0.48cvss 7.3epss 0.02
Azure Sphere Unsigned Code Execution Vulnerability
- risk 0.48cvss 7.3epss 0.02
Azure Sphere Unsigned Code Execution Vulnerability
- risk 0.48cvss 7.3epss 0.01
Azure Sphere Unsigned Code Execution Vulnerability
- risk 0.48cvss 7.3epss 0.01
Azure Sphere Unsigned Code Execution Vulnerability
- risk 0.48cvss 7.3epss 0.01
An elevation of privilege vulnerability exists when Microsoft Windows CloudExperienceHost fails to check COM objects. An attacker who successfully exploited the vulnerability could gain elevated privileges on a targeted system. To exploit the vulnerability, an attacker…
- risk 0.48cvss 7.4epss 0.03
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to…
- risk 0.48cvss 7.3epss 0.05
A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change,…
- risk 0.48cvss 7.4epss 0.03
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to…
- risk 0.48cvss 7.3epss 0.01
An elevation of privilege vulnerability exists in Windows Setup in the way it handles permissions. A locally authenticated attacker could run arbitrary code with elevated system privileges. After successfully exploiting the vulnerability, an attacker could then install programs;…
- risk 0.48cvss 7.3epss 0.04
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by…
- risk 0.48cvss 7.3epss 0.03
A remote code execution vulnerability exists in Microsoft Dynamics 365 for Finance and Operations (on-premises) version 10.0.11. An attacker who successfully exploited this vulnerability could gain remote code execution via server-side script execution on the victim server. An…
- risk 0.48cvss 6.5epss 0.75
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'.
- risk 0.48cvss 7.3epss 0.01
A denial of service vulnerability exists when Windows improperly handles hard links, aka 'Microsoft Windows Denial of Service Vulnerability'.
- risk 0.48cvss 7.3epss 0.02
An elevation of privilege vulnerability exists in Git for Visual Studio when it improperly parses configuration files. An attacker who successfully exploited the vulnerability could execute code in the context of another local user. To exploit the vulnerability, an authenticated…
- risk 0.48cvss 7.3epss 0.01
An elevation of privilege vulnerability exists due to a stack corruption in Windows Subsystem for Linux. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could…
- risk 0.48cvss 7.2epss 0.19
A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Remote Code Execution Vulnerability'.
- risk 0.48cvss 7.3epss 0.02
Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow a locally-authenticated attacker to run a specially crafted application on a targeted system when Windows Secure Kernel Mode fails to properly handle objects in memory, aka "Windows Elevation of…
- risk 0.48cvss 7.3epss 0.03
Windows PDF in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows information disclosure when a user opens a specially crafted PDF file, aka "Windows PDF Information Disclosure Vulnerability".
- risk 0.48cvss 7.3epss 0.02
A DCOM object in Helppane.exe in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016, when configured to run as the interactive user, allows an…
- risk 0.48cvss 7.3epss 0.04
An elevation of privilege vulnerability exists when the ASP.NET Core fails to properly sanitize web requests.
- risk 0.48cvss 6.5epss 0.35
The Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2; Windows Server 2008 SP2 and R2; and Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote…
- risk 0.48cvss 4.3epss 0.62
Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability." This vulnerability is different from those described in CVE-2017-0008 and…
- risk 0.48cvss 7.1epss 0.23
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac 2011, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allow remote attackers to obtain sensitive information from process memory or cause a…
- risk 0.48cvss 7.1epss 0.23
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac 2011, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allow remote attackers to obtain sensitive information from process memory or cause a…
Page 165 of 363