Vendor CVEs

Microsoft

All CVEs

16,667 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2022-21855	Microsoft Exchange Server	Cri	0.59	9.0	0.01		Jan 11, 2022	Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2022-21846	Microsoft Exchange Server	Cri	0.59	9.0	0.01		Jan 11, 2022	Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-43882	Microsoft Defender For Iot	Cri	0.59	9.0	0.02		Dec 15, 2021	Microsoft Defender for IoT Remote Code Execution Vulnerability
CVE-2021-26443	Microsoft Virtual Machine Bus (VMBus)	Cri	0.59	9.0	0.02		Nov 10, 2021	Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability
CVE-2021-26427	Microsoft Exchange Server	Cri	0.59	9.0	0.01		Oct 13, 2021	Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-34535	Microsoft Remote Desktop Client	Hig	0.59	8.8	0.22		Aug 12, 2021	Remote Desktop Client Remote Code Execution Vulnerability
CVE-2021-34448	Microsoft Scripting Engine	Med	0.59	6.8	0.40	KEV	Jul 16, 2021	Scripting Engine Memory Corruption Vulnerability
CVE-2021-28483	Microsoft Exchange Server	Cri	0.59	9.0	0.01		Apr 13, 2021	Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-21118	Google Chrome	Hig	0.59	8.8	0.17		Feb 9, 2021	Insufficient data validation in V8 in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
CVE-2020-17142	Microsoft Exchange Server	Cri	0.59	9.1	0.03		Dec 10, 2020	Microsoft Exchange Remote Code Execution Vulnerability
CVE-2020-1481	Microsoft Eslint	Hig	0.59	8.8	0.24		Jul 14, 2020	A remote code execution vulnerability exists in the ESLint extension for Visual Studio Code when it validates source code after opening a project, aka 'Visual Studio Code ESLint Extention Remote Code Execution Vulnerability'.
CVE-2020-1439	Microsoft Sharepoint Server	Hig	0.59	8.8	0.20		Jul 14, 2020	A remote code execution vulnerability exists in PerformancePoint Services for SharePoint Server when the software fails to check the source markup of XML file input, aka 'PerformancePoint Services Remote Code Execution Vulnerability'.
CVE-2020-1436	Microsoft Windows Font Library	Hig	0.59	8.8	0.21		Jul 14, 2020	A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted fonts.For all systems except Windows 10, an attacker who successfully exploited the vulnerability could execute code remotely, aka 'Windows Font Library Remote Code…
CVE-2020-1043	Microsoft Hyper-V	Cri	0.59	9.0	0.05		Jul 14, 2020	A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'. This CVE ID is unique from…
CVE-2020-1042	Microsoft Hyper-V	Cri	0.59	9.0	0.06		Jul 14, 2020	A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'. This CVE ID is unique from…
CVE-2020-1041	Microsoft Hyper-V	Cri	0.59	9.0	0.05		Jul 14, 2020	A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'. This CVE ID is unique from…
CVE-2020-1036	Microsoft Hyper-V RemoteFX vGPU	Cri	0.59	9.0	0.06		Jul 14, 2020	A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'. This CVE ID is unique from…
CVE-2020-1032	Microsoft Hyper-V	Cri	0.59	9.0	0.05		Jul 14, 2020	A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'. This CVE ID is unique from…
CVE-2020-1226	Microsoft Excel	Hig	0.59	8.8	0.17		Jun 9, 2020	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1225.
CVE-2020-1225	Microsoft Excel	Hig	0.59	8.8	0.17		Jun 9, 2020	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1226.
CVE-2020-0964	Microsoft Windows Graphics Device Interface	Hig	0.59	8.8	0.17		Apr 15, 2020	A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.
CVE-2020-0687	Microsoft Windows	Hig	0.59	8.8	0.19		Apr 15, 2020	A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Microsoft Graphics Remote Code Execution Vulnerability'.
CVE-2020-0883	Microsoft Windows Graphics Device Interface	Hig	0.59	8.8	0.22		Mar 12, 2020	A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0881.
CVE-2020-0881	Microsoft Windows Graphics Device Interface	Hig	0.59	8.8	0.17		Mar 12, 2020	A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0883.
CVE-2019-1354	Microsoft Visual Studio	Hig	0.59	8.8	0.23		Jan 24, 2020	A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1349, CVE-2019-1350, CVE-2019-1352, CVE-2019-1387.
CVE-2019-1352	Microsoft Visual Studio	Hig	0.59	8.8	0.24		Jan 24, 2020	A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1349, CVE-2019-1350, CVE-2019-1354, CVE-2019-1387.
CVE-2019-1350	Microsoft Visual Studio	Hig	0.59	8.8	0.26		Jan 24, 2020	A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1349, CVE-2019-1352, CVE-2019-1354, CVE-2019-1387.
CVE-2020-0654	Microsoft OneDrive	Cri	0.59	9.1	0.03		Jan 14, 2020	A security feature bypass vulnerability exists in Microsoft OneDrive App for Android.This could allow an attacker to bypass the passcode or fingerprint requirements of the App.The security update addresses the vulnerability by correcting the way Microsoft OneDrive App for…
CVE-2020-0606	Microsoft .net Framework	Hig	0.59	8.8	0.17		Jan 14, 2020	A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework Remote Code…
CVE-2020-0605	Microsoft .net Framework	Hig	0.59	8.8	0.18		Jan 14, 2020	A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework Remote Code…
CVE-2020-0603	Microsoft Asp.net	Hig	0.59	8.8	0.21		Jan 14, 2020	A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in memory.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka 'ASP.NET Core Remote Code Execution…
CVE-2019-1468	Microsoft Windows	Hig	0.59	8.8	0.17		Dec 10, 2019	A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Win32k Graphics Remote Code Execution Vulnerability'.
CVE-2019-1331	Microsoft Excel	Hig	0.59	8.8	0.20		Oct 10, 2019	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1327.
CVE-2019-1109	Microsoft Office	Cri	0.59	9.1	0.04		Jul 15, 2019	A spoofing vulnerability exists when Microsoft Office Javascript does not check the validity of the web page making a request to Office documents.An attacker who successfully exploited this vulnerability could read or write information in Office documents.The security update…
CVE-2019-1019	Microsoft Windows Server 2008	Hig	0.59	8.5	0.15		Jun 12, 2019	A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages. To exploit this vulnerability, an attacker could send a specially crafted authentication request. An attacker who successfully exploited this…
CVE-2019-0938	Microsoft Edge	Cri	0.59	9.0	0.04		May 16, 2019	An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka 'Microsoft Edge Elevation of Privilege Vulnerability'.
CVE-2019-0902	Microsoft Windows	Hig	0.59	8.8	0.18		May 16, 2019	A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0889, CVE-2019-0890, CVE-2019-0891, CVE-2019-0893,…
CVE-2019-0853	Microsoft Windows Graphics Device Interface	Hig	0.59	8.8	0.30		Apr 9, 2019	A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.
CVE-2019-0842	Microsoft Windows VBScript Engine	Hig	0.59	8.8	0.17		Apr 9, 2019	A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution Vulnerability'.
CVE-2019-0795	Microsoft Windows Server 2008	Hig	0.59	8.8	0.20		Apr 9, 2019	A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0790, CVE-2019-0791, CVE-2019-0792, CVE-2019-0793.
CVE-2019-0793	Microsoft Windows Server 2008	Hig	0.59	8.8	0.17		Apr 9, 2019	A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0790, CVE-2019-0791, CVE-2019-0792, CVE-2019-0795.
CVE-2019-0792	Microsoft Windows Server 2008	Hig	0.59	8.8	0.17		Apr 9, 2019	A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0790, CVE-2019-0791, CVE-2019-0793, CVE-2019-0795.
CVE-2019-0791	Microsoft MS XML	Hig	0.59	8.8	0.17		Apr 9, 2019	A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0790, CVE-2019-0792, CVE-2019-0793, CVE-2019-0795.
CVE-2019-0630	Microsoft Windows	Hig	0.59	8.8	0.20		Mar 5, 2019	A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests, aka 'Windows SMB Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0633.
CVE-2019-0585	Microsoft Word	Hig	0.59	8.8	0.20		Jan 8, 2019	A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Word, Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Microsoft…
CVE-2018-8582	Microsoft Outlook	Hig	0.59	8.8	0.17		Nov 14, 2018	A remote code execution vulnerability exists in the way that Microsoft Outlook parses specially modified rule export files, aka "Microsoft Outlook Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook. This CVE ID is unique…
CVE-2018-8256	Microsoft Windows Server 2008	Hig	0.59	8.8	0.20		Nov 14, 2018	A remote code execution vulnerability exists when PowerShell improperly handles specially crafted files, aka "Microsoft PowerShell Remote Code Execution Vulnerability." This affects Windows RT 8.1, PowerShell Core 6.0, Microsoft.PowerShell.Archive 1.2.2.0, Windows Server 2016,…
CVE-2018-8504	Microsoft Word	Hig	0.59	8.8	0.18		Oct 10, 2018	A remote code execution vulnerability exists in Microsoft Word software when the software fails to properly handle objects in Protected View, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Microsoft SharePoint Server, Office 365 ProPlus, Microsoft Office,…
CVE-2018-8502	Microsoft Office	Hig	0.59	8.8	0.19		Oct 10, 2018	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in Protected View, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Excel.
CVE-2018-8501	Microsoft Office	Hig	0.59	8.8	0.18		Oct 10, 2018	A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in Protected View, aka "Microsoft PowerPoint Remote Code Execution Vulnerability." This affects Office 365 ProPlus, PowerPoint Viewer, Microsoft…

CVE-2022-21855CriJan 11, 2022
Microsoft
Exchange Server
risk 0.59cvss 9.0epss 0.01
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2022-21846CriJan 11, 2022
Microsoft
Exchange Server
risk 0.59cvss 9.0epss 0.01
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-43882CriDec 15, 2021
Microsoft
Defender For Iot
risk 0.59cvss 9.0epss 0.02
Microsoft Defender for IoT Remote Code Execution Vulnerability
CVE-2021-26443CriNov 10, 2021
Microsoft
Virtual Machine Bus (VMBus)
risk 0.59cvss 9.0epss 0.02
Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability
CVE-2021-26427CriOct 13, 2021
Microsoft
Exchange Server
risk 0.59cvss 9.0epss 0.01
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-34535HigAug 12, 2021
Microsoft
Remote Desktop Client
risk 0.59cvss 8.8epss 0.22
Remote Desktop Client Remote Code Execution Vulnerability
CVE-2021-34448MedKEVJul 16, 2021
Microsoft
Scripting Engine
risk 0.59cvss 6.8epss 0.40
Scripting Engine Memory Corruption Vulnerability
CVE-2021-28483CriApr 13, 2021
Microsoft
Exchange Server
risk 0.59cvss 9.0epss 0.01
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-21118HigFeb 9, 2021
Google
Chrome
risk 0.59cvss 8.8epss 0.17
Insufficient data validation in V8 in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
CVE-2020-17142CriDec 10, 2020
Microsoft
Exchange Server
risk 0.59cvss 9.1epss 0.03
Microsoft Exchange Remote Code Execution Vulnerability
CVE-2020-1481HigJul 14, 2020
Microsoft
Eslint
risk 0.59cvss 8.8epss 0.24
A remote code execution vulnerability exists in the ESLint extension for Visual Studio Code when it validates source code after opening a project, aka 'Visual Studio Code ESLint Extention Remote Code Execution Vulnerability'.
CVE-2020-1439HigJul 14, 2020
Microsoft
Sharepoint Server
risk 0.59cvss 8.8epss 0.20
A remote code execution vulnerability exists in PerformancePoint Services for SharePoint Server when the software fails to check the source markup of XML file input, aka 'PerformancePoint Services Remote Code Execution Vulnerability'.
CVE-2020-1436HigJul 14, 2020
Microsoft
Windows Font Library
risk 0.59cvss 8.8epss 0.21
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted fonts.For all systems except Windows 10, an attacker who successfully exploited the vulnerability could execute code remotely, aka 'Windows Font Library Remote Code…
CVE-2020-1043CriJul 14, 2020
Microsoft
Hyper-V
risk 0.59cvss 9.0epss 0.05
A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'. This CVE ID is unique from…
CVE-2020-1042CriJul 14, 2020
Microsoft
Hyper-V
risk 0.59cvss 9.0epss 0.06
A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'. This CVE ID is unique from…
CVE-2020-1041CriJul 14, 2020
Microsoft
Hyper-V
risk 0.59cvss 9.0epss 0.05
A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'. This CVE ID is unique from…
CVE-2020-1036CriJul 14, 2020
Microsoft
Hyper-V RemoteFX vGPU
risk 0.59cvss 9.0epss 0.06
A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'. This CVE ID is unique from…
CVE-2020-1032CriJul 14, 2020
Microsoft
Hyper-V
risk 0.59cvss 9.0epss 0.05
A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'. This CVE ID is unique from…
CVE-2020-1226HigJun 9, 2020
Microsoft
Excel
risk 0.59cvss 8.8epss 0.17
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1225.
CVE-2020-1225HigJun 9, 2020
Microsoft
Excel
risk 0.59cvss 8.8epss 0.17
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1226.
CVE-2020-0964HigApr 15, 2020
Microsoft
Windows Graphics Device Interface
risk 0.59cvss 8.8epss 0.17
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.
CVE-2020-0687HigApr 15, 2020
Microsoft
Windows
risk 0.59cvss 8.8epss 0.19
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Microsoft Graphics Remote Code Execution Vulnerability'.
CVE-2020-0883HigMar 12, 2020
Microsoft
Windows Graphics Device Interface
risk 0.59cvss 8.8epss 0.22
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0881.
CVE-2020-0881HigMar 12, 2020
Microsoft
Windows Graphics Device Interface
risk 0.59cvss 8.8epss 0.17
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0883.
CVE-2019-1354HigJan 24, 2020
Microsoft
Visual Studio
risk 0.59cvss 8.8epss 0.23
A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1349, CVE-2019-1350, CVE-2019-1352, CVE-2019-1387.
CVE-2019-1352HigJan 24, 2020
Microsoft
Visual Studio
risk 0.59cvss 8.8epss 0.24
A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1349, CVE-2019-1350, CVE-2019-1354, CVE-2019-1387.
CVE-2019-1350HigJan 24, 2020
Microsoft
Visual Studio
risk 0.59cvss 8.8epss 0.26
A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1349, CVE-2019-1352, CVE-2019-1354, CVE-2019-1387.
CVE-2020-0654CriJan 14, 2020
Microsoft
OneDrive
risk 0.59cvss 9.1epss 0.03
A security feature bypass vulnerability exists in Microsoft OneDrive App for Android.This could allow an attacker to bypass the passcode or fingerprint requirements of the App.The security update addresses the vulnerability by correcting the way Microsoft OneDrive App for…
CVE-2020-0606HigJan 14, 2020
Microsoft
.net Framework
risk 0.59cvss 8.8epss 0.17
A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework Remote Code…
CVE-2020-0605HigJan 14, 2020
Microsoft
.net Framework
risk 0.59cvss 8.8epss 0.18
A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework Remote Code…
CVE-2020-0603HigJan 14, 2020
Microsoft
Asp.net
risk 0.59cvss 8.8epss 0.21
A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in memory.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka 'ASP.NET Core Remote Code Execution…
CVE-2019-1468HigDec 10, 2019
Microsoft
Windows
risk 0.59cvss 8.8epss 0.17
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Win32k Graphics Remote Code Execution Vulnerability'.
CVE-2019-1331HigOct 10, 2019
Microsoft
Excel
risk 0.59cvss 8.8epss 0.20
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1327.
CVE-2019-1109CriJul 15, 2019
Microsoft
Office
risk 0.59cvss 9.1epss 0.04
A spoofing vulnerability exists when Microsoft Office Javascript does not check the validity of the web page making a request to Office documents.An attacker who successfully exploited this vulnerability could read or write information in Office documents.The security update…
CVE-2019-1019HigJun 12, 2019
Microsoft
Windows Server 2008
risk 0.59cvss 8.5epss 0.15
A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages. To exploit this vulnerability, an attacker could send a specially crafted authentication request. An attacker who successfully exploited this…
CVE-2019-0938CriMay 16, 2019
Microsoft
Edge
risk 0.59cvss 9.0epss 0.04
An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka 'Microsoft Edge Elevation of Privilege Vulnerability'.
CVE-2019-0902HigMay 16, 2019
Microsoft
Windows
risk 0.59cvss 8.8epss 0.18
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0889, CVE-2019-0890, CVE-2019-0891, CVE-2019-0893,…
CVE-2019-0853HigApr 9, 2019
Microsoft
Windows Graphics Device Interface
risk 0.59cvss 8.8epss 0.30
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.
CVE-2019-0842HigApr 9, 2019
Microsoft
Windows VBScript Engine
risk 0.59cvss 8.8epss 0.17
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution Vulnerability'.
CVE-2019-0795HigApr 9, 2019
Microsoft
Windows Server 2008
risk 0.59cvss 8.8epss 0.20
A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0790, CVE-2019-0791, CVE-2019-0792, CVE-2019-0793.
CVE-2019-0793HigApr 9, 2019
Microsoft
Windows Server 2008
risk 0.59cvss 8.8epss 0.17
A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0790, CVE-2019-0791, CVE-2019-0792, CVE-2019-0795.
CVE-2019-0792HigApr 9, 2019
Microsoft
Windows Server 2008
risk 0.59cvss 8.8epss 0.17
A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0790, CVE-2019-0791, CVE-2019-0793, CVE-2019-0795.
CVE-2019-0791HigApr 9, 2019
Microsoft
MS XML
risk 0.59cvss 8.8epss 0.17
A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0790, CVE-2019-0792, CVE-2019-0793, CVE-2019-0795.
CVE-2019-0630HigMar 5, 2019
Microsoft
Windows
risk 0.59cvss 8.8epss 0.20
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests, aka 'Windows SMB Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0633.
CVE-2019-0585HigJan 8, 2019
Microsoft
Word
risk 0.59cvss 8.8epss 0.20
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Word, Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Microsoft…
CVE-2018-8582HigNov 14, 2018
Microsoft
Outlook
risk 0.59cvss 8.8epss 0.17
A remote code execution vulnerability exists in the way that Microsoft Outlook parses specially modified rule export files, aka "Microsoft Outlook Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook. This CVE ID is unique…
CVE-2018-8256HigNov 14, 2018
Microsoft
Windows Server 2008
risk 0.59cvss 8.8epss 0.20
A remote code execution vulnerability exists when PowerShell improperly handles specially crafted files, aka "Microsoft PowerShell Remote Code Execution Vulnerability." This affects Windows RT 8.1, PowerShell Core 6.0, Microsoft.PowerShell.Archive 1.2.2.0, Windows Server 2016,…
CVE-2018-8504HigOct 10, 2018
Microsoft
Word
risk 0.59cvss 8.8epss 0.18
A remote code execution vulnerability exists in Microsoft Word software when the software fails to properly handle objects in Protected View, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Microsoft SharePoint Server, Office 365 ProPlus, Microsoft Office,…
CVE-2018-8502HigOct 10, 2018
Microsoft
Office
risk 0.59cvss 8.8epss 0.19
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in Protected View, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Excel.
CVE-2018-8501HigOct 10, 2018
Microsoft
Office
risk 0.59cvss 8.8epss 0.18
A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in Protected View, aka "Microsoft PowerPoint Remote Code Execution Vulnerability." This affects Office 365 ProPlus, PowerPoint Viewer, Microsoft…

Page 19 of 334