Vendor CVEs
Microsoft
All CVEs
18,135 total · sorted by risk| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2017-0116 | Med | 0.33 | 4.3 | 0.22 | Mar 17, 2017 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091,… | ||
| CVE-2017-0115 | Med | 0.33 | 4.3 | 0.22 | Mar 17, 2017 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091,… | ||
| CVE-2017-0114 | Med | 0.33 | 4.3 | 0.22 | Mar 17, 2017 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091,… | ||
| CVE-2017-0113 | Med | 0.33 | 4.3 | 0.22 | Mar 17, 2017 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091,… | ||
| CVE-2017-0112 | Med | 0.33 | 4.3 | 0.22 | Mar 17, 2017 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091,… | ||
| CVE-2017-0111 | Med | 0.33 | 4.3 | 0.22 | Mar 17, 2017 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091,… | ||
| CVE-2017-0092 | Med | 0.33 | 4.3 | 0.22 | Mar 17, 2017 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091,… | ||
| CVE-2017-0091 | Med | 0.33 | 4.3 | 0.22 | Mar 17, 2017 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0092,… | ||
| CVE-2017-0085 | Med | 0.33 | 4.3 | 0.22 | Mar 17, 2017 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0091, CVE-2017-0092,… | ||
| CVE-2016-3292 | Med | 0.33 | 5.0 | 0.07 | Sep 14, 2016 | Microsoft Internet Explorer 10 and 11 mishandles integrity settings and zone settings, which allows remote attackers to bypass a sandbox protection mechanism via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability." | ||
| CVE-2016-3256 | Med | 0.33 | 5.0 | 0.05 | Jul 13, 2016 | Microsoft Windows 10 Gold and 1511 allows local users to bypass the Secure Kernel Mode protection mechanism and obtain sensitive information via a crafted application, aka "Windows Secure Kernel Mode Information Disclosure Vulnerability." | ||
| CVE-2016-3232 | Med | 0.33 | 5.0 | 0.06 | Jun 16, 2016 | The Virtual PCI (VPCI) virtual service provider in Microsoft Windows Server 2012 Gold and R2 allows local users to obtain sensitive information from uninitialized memory locations via a crafted application, aka "Windows Virtual PCI Information Disclosure Vulnerability." | ||
| CVE-2016-3230 | Med | 0.33 | 5.0 | 0.03 | Jun 16, 2016 | The Search component in Microsoft Windows 7, Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to cause a denial of service (performance degradation) via a crafted application, aka "Windows… | ||
| CVE-2016-3216 | Med | 0.33 | 4.3 | 0.25 | Jun 16, 2016 | GDI32.dll in the Graphics component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to bypass the ASLR protection mechanism via… | ||
| CVE-2005-3170 | Med | 0.33 | 5.0 | 0.01 | Oct 6, 2005 | The LDAP client on Microsoft Windows 2000 before Update Rollup 1 for SP4 accepts certificates using LDAP Secure Sockets Layer (LDAPS) even when the Certificate Authority (CA) is not trusted, which could allow attackers to trick users into believing that they are accessing a… | ||
| CVE-2026-94520 | Med | 0.32 | 4.9 | 0.01 | Oct 13, 2026 | Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network. | ||
| CVE-2026-67628 | Med | 0.32 | 4.9 | 0.01 | Oct 13, 2026 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. | ||
| CVE-2026-70217 | Med | 0.32 | 4.9 | 0.01 | Oct 13, 2026 | Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. | ||
| CVE-2026-68785 | Med | 0.32 | 4.9 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. | ||
| CVE-2026-20945 | Med | 0.32 | 4.6 | 0.19 | Apr 14, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | ||
| CVE-2025-14432 | Med | 0.32 | 4.9 | 0.00 | Dec 16, 2025 | In limited scenarios, sensitive data might be written to the log file if an admin uses Microsoft Teams Admin Center (TAC) to make device configuration changes. The affected log file is visible only to users with admin credentials. This is limited to Microsoft TAC and does not… | ||
| CVE-2024-20662 | Med | 0.32 | 4.9 | 0.02 | Jan 9, 2024 | Windows Online Certificate Status Protocol (OCSP) Information Disclosure Vulnerability | ||
| CVE-2023-28277 | Med | 0.32 | 4.9 | 0.01 | Apr 11, 2023 | Windows DNS Server Information Disclosure Vulnerability | ||
| CVE-2022-35812 | Med | 0.32 | 4.9 | 0.02 | Aug 9, 2022 | Azure Site Recovery Elevation of Privilege Vulnerability | ||
| CVE-2022-35800 | Med | 0.32 | 4.9 | 0.02 | Aug 9, 2022 | Azure Site Recovery Elevation of Privilege Vulnerability | ||
| CVE-2022-35787 | Med | 0.32 | 4.9 | 0.02 | Aug 9, 2022 | Azure Site Recovery Elevation of Privilege Vulnerability | ||
| CVE-2022-35774 | Med | 0.32 | 4.9 | 0.02 | Aug 9, 2022 | Azure Site Recovery Elevation of Privilege Vulnerability | ||
| CVE-2022-33671 | Med | 0.32 | 4.9 | 0.02 | Jul 12, 2022 | Azure Site Recovery Elevation of Privilege Vulnerability | ||
| CVE-2022-33669 | Med | 0.32 | 4.9 | 0.02 | Jul 12, 2022 | Azure Site Recovery Elevation of Privilege Vulnerability | ||
| CVE-2022-33668 | Med | 0.32 | 4.9 | 0.02 | Jul 12, 2022 | Azure Site Recovery Elevation of Privilege Vulnerability | ||
| CVE-2022-33664 | Med | 0.32 | 4.9 | 0.02 | Jul 12, 2022 | Azure Site Recovery Elevation of Privilege Vulnerability | ||
| CVE-2022-33660 | Med | 0.32 | 4.9 | 0.02 | Jul 12, 2022 | Azure Site Recovery Elevation of Privilege Vulnerability | ||
| CVE-2022-33659 | Med | 0.32 | 4.9 | 0.02 | Jul 12, 2022 | Azure Site Recovery Elevation of Privilege Vulnerability | ||
| CVE-2022-33658 | Med | 0.32 | 4.9 | 0.02 | Jul 12, 2022 | Azure Site Recovery Elevation of Privilege Vulnerability | ||
| CVE-2022-33654 | Med | 0.32 | 4.9 | 0.02 | Jul 12, 2022 | Azure Site Recovery Elevation of Privilege Vulnerability | ||
| CVE-2022-33653 | Med | 0.32 | 4.9 | 0.02 | Jul 12, 2022 | Azure Site Recovery Elevation of Privilege Vulnerability | ||
| CVE-2022-33652 | Med | 0.32 | 4.9 | 0.02 | Jul 12, 2022 | Azure Site Recovery Elevation of Privilege Vulnerability | ||
| CVE-2022-33651 | Med | 0.32 | 4.9 | 0.02 | Jul 12, 2022 | Azure Site Recovery Elevation of Privilege Vulnerability | ||
| CVE-2022-33650 | Med | 0.32 | 4.9 | 0.02 | Jul 12, 2022 | Azure Site Recovery Elevation of Privilege Vulnerability | ||
| CVE-2022-33642 | Med | 0.32 | 4.9 | 0.02 | Jul 12, 2022 | Azure Site Recovery Elevation of Privilege Vulnerability | ||
| CVE-2022-26897 | Med | 0.32 | 4.9 | 0.03 | Apr 15, 2022 | Azure Site Recovery Information Disclosure Vulnerability | ||
| CVE-2022-26896 | Med | 0.32 | 4.9 | 0.03 | Apr 15, 2022 | Azure Site Recovery Information Disclosure Vulnerability | ||
| CVE-2022-23254 | Med | 0.32 | 4.9 | 0.03 | Feb 9, 2022 | Microsoft Power BI Information Disclosure Vulnerability | ||
| CVE-2021-41337 | Med | 0.32 | 4.9 | 0.02 | Oct 13, 2021 | Active Directory Security Feature Bypass Vulnerability | ||
| CVE-2020-8567 | Med | 0.32 | 4.9 | 0.01 | Jan 21, 2021 | Kubernetes Secrets Store CSI Driver Vault Plugin prior to v0.0.6, Azure Plugin prior to v0.0.10, and GCP Plugin prior to v0.2.0 allow an attacker who can create specially-crafted SecretProviderClass objects to write to arbitrary file paths on the host filesystem, including… | ||
| CVE-2020-1267 | Med | 0.32 | 4.9 | 0.05 | Jul 14, 2020 | This security update corrects a denial of service in the Local Security Authority Subsystem Service (LSASS) caused when an authenticated attacker sends a specially crafted authentication request, aka 'Local Security Authority Subsystem Service Denial of Service Vulnerability'. | ||
| CVE-2019-1292 | Med | 0.32 | 4.9 | 0.05 | Sep 11, 2019 | A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. | ||
| CVE-2019-0962 | Med | 0.32 | 4.9 | 0.04 | Jul 15, 2019 | An elevation of privilege vulnerability exists in Azure Automation "RunAs account" runbooks for users with contributor role, aka 'Azure Automation Elevation of Privilege Vulnerability'. | ||
| CVE-2018-0891 | Med | 0.32 | 4.3 | 0.14 | Mar 14, 2018 | ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allow… | ||
| CVE-2017-8644 | Med | 0.32 | 4.3 | 0.15 | Aug 8, 2017 | Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to disclose information due to the way that Microsoft Edge handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability". This CVE ID is unique from… |
- risk 0.33cvss 4.3epss 0.22
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091,…
- risk 0.33cvss 4.3epss 0.22
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091,…
- risk 0.33cvss 4.3epss 0.22
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091,…
- risk 0.33cvss 4.3epss 0.22
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091,…
- risk 0.33cvss 4.3epss 0.22
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091,…
- risk 0.33cvss 4.3epss 0.22
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091,…
- risk 0.33cvss 4.3epss 0.22
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091,…
- risk 0.33cvss 4.3epss 0.22
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0092,…
- risk 0.33cvss 4.3epss 0.22
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0091, CVE-2017-0092,…
- risk 0.33cvss 5.0epss 0.07
Microsoft Internet Explorer 10 and 11 mishandles integrity settings and zone settings, which allows remote attackers to bypass a sandbox protection mechanism via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability."
- risk 0.33cvss 5.0epss 0.05
Microsoft Windows 10 Gold and 1511 allows local users to bypass the Secure Kernel Mode protection mechanism and obtain sensitive information via a crafted application, aka "Windows Secure Kernel Mode Information Disclosure Vulnerability."
- risk 0.33cvss 5.0epss 0.06
The Virtual PCI (VPCI) virtual service provider in Microsoft Windows Server 2012 Gold and R2 allows local users to obtain sensitive information from uninitialized memory locations via a crafted application, aka "Windows Virtual PCI Information Disclosure Vulnerability."
- risk 0.33cvss 5.0epss 0.03
The Search component in Microsoft Windows 7, Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to cause a denial of service (performance degradation) via a crafted application, aka "Windows…
- risk 0.33cvss 4.3epss 0.25
GDI32.dll in the Graphics component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to bypass the ASLR protection mechanism via…
- risk 0.33cvss 5.0epss 0.01
The LDAP client on Microsoft Windows 2000 before Update Rollup 1 for SP4 accepts certificates using LDAP Secure Sockets Layer (LDAPS) even when the Certificate Authority (CA) is not trusted, which could allow attackers to trick users into believing that they are accessing a…
- risk 0.32cvss 4.9epss 0.01
Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.
- risk 0.32cvss 4.9epss 0.01
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
- risk 0.32cvss 4.9epss 0.01
Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
- risk 0.32cvss 4.9epss 0.01
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
- risk 0.32cvss 4.6epss 0.19
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
- risk 0.32cvss 4.9epss 0.00
In limited scenarios, sensitive data might be written to the log file if an admin uses Microsoft Teams Admin Center (TAC) to make device configuration changes. The affected log file is visible only to users with admin credentials. This is limited to Microsoft TAC and does not…
- risk 0.32cvss 4.9epss 0.02
Windows Online Certificate Status Protocol (OCSP) Information Disclosure Vulnerability
- risk 0.32cvss 4.9epss 0.01
Windows DNS Server Information Disclosure Vulnerability
- risk 0.32cvss 4.9epss 0.02
Azure Site Recovery Elevation of Privilege Vulnerability
- risk 0.32cvss 4.9epss 0.02
Azure Site Recovery Elevation of Privilege Vulnerability
- risk 0.32cvss 4.9epss 0.02
Azure Site Recovery Elevation of Privilege Vulnerability
- risk 0.32cvss 4.9epss 0.02
Azure Site Recovery Elevation of Privilege Vulnerability
- risk 0.32cvss 4.9epss 0.02
Azure Site Recovery Elevation of Privilege Vulnerability
- risk 0.32cvss 4.9epss 0.02
Azure Site Recovery Elevation of Privilege Vulnerability
- risk 0.32cvss 4.9epss 0.02
Azure Site Recovery Elevation of Privilege Vulnerability
- risk 0.32cvss 4.9epss 0.02
Azure Site Recovery Elevation of Privilege Vulnerability
- risk 0.32cvss 4.9epss 0.02
Azure Site Recovery Elevation of Privilege Vulnerability
- risk 0.32cvss 4.9epss 0.02
Azure Site Recovery Elevation of Privilege Vulnerability
- risk 0.32cvss 4.9epss 0.02
Azure Site Recovery Elevation of Privilege Vulnerability
- risk 0.32cvss 4.9epss 0.02
Azure Site Recovery Elevation of Privilege Vulnerability
- risk 0.32cvss 4.9epss 0.02
Azure Site Recovery Elevation of Privilege Vulnerability
- risk 0.32cvss 4.9epss 0.02
Azure Site Recovery Elevation of Privilege Vulnerability
- risk 0.32cvss 4.9epss 0.02
Azure Site Recovery Elevation of Privilege Vulnerability
- risk 0.32cvss 4.9epss 0.02
Azure Site Recovery Elevation of Privilege Vulnerability
- risk 0.32cvss 4.9epss 0.02
Azure Site Recovery Elevation of Privilege Vulnerability
- risk 0.32cvss 4.9epss 0.03
Azure Site Recovery Information Disclosure Vulnerability
- risk 0.32cvss 4.9epss 0.03
Azure Site Recovery Information Disclosure Vulnerability
- risk 0.32cvss 4.9epss 0.03
Microsoft Power BI Information Disclosure Vulnerability
- risk 0.32cvss 4.9epss 0.02
Active Directory Security Feature Bypass Vulnerability
- risk 0.32cvss 4.9epss 0.01
Kubernetes Secrets Store CSI Driver Vault Plugin prior to v0.0.6, Azure Plugin prior to v0.0.10, and GCP Plugin prior to v0.2.0 allow an attacker who can create specially-crafted SecretProviderClass objects to write to arbitrary file paths on the host filesystem, including…
- risk 0.32cvss 4.9epss 0.05
This security update corrects a denial of service in the Local Security Authority Subsystem Service (LSASS) caused when an authenticated attacker sends a specially crafted authentication request, aka 'Local Security Authority Subsystem Service Denial of Service Vulnerability'.
- risk 0.32cvss 4.9epss 0.05
A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'.
- risk 0.32cvss 4.9epss 0.04
An elevation of privilege vulnerability exists in Azure Automation "RunAs account" runbooks for users with contributor role, aka 'Azure Automation Elevation of Privilege Vulnerability'.
- risk 0.32cvss 4.3epss 0.14
ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allow…
- risk 0.32cvss 4.3epss 0.15
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to disclose information due to the way that Microsoft Edge handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability". This CVE ID is unique from…
Page 257 of 363