Vendor CVEs

Microsoft

All CVEs

18,138 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2021-26701	Microsoft Net	Hig	0.55	8.1	0.30		Feb 25, 2021	.NET Core Remote Code Execution Vulnerability
CVE-2021-24105	Microsoft package manager	Hig	0.55	8.4	0.02		Feb 25, 2021	Depending on configuration of various package managers it is possible for an attacker to insert a malicious package into a package manager's repository which can be retrieved and used during development, build, and release processes. This insertion could lead to remote code…
CVE-2020-17141	Microsoft Exchange Server	Hig	0.55	8.4	0.07		Dec 10, 2020	Microsoft Exchange Remote Code Execution Vulnerability
CVE-2020-17136	Microsoft Windows Cloud Files Mini Filter Driver	Hig	0.55	7.8	0.14		Dec 10, 2020	Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2020-1576	Microsoft Sharepoint Server	Hig	0.55	8.5	0.02		Sep 11, 2020	A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application…
CVE-2020-1285	Microsoft Windows Graphics Device Interface	Hig	0.55	8.4	0.04		Sep 11, 2020	A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install…
CVE-2020-1337	Microsoft Windows Print Spooler	Hig	0.55	7.8	0.14		Aug 17, 2020	An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. An attacker could…
CVE-2020-1048	Microsoft Windows Print Spooler	Hig	0.55	7.8	0.16		May 21, 2020	An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. An attacker could…
CVE-2020-0910	Microsoft Windows Hyper-V	Hig	0.55	8.4	0.09		Apr 15, 2020	A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'.
CVE-2019-1398	Microsoft Windows Hyper-V	Hig	0.55	8.4	0.03		Nov 12, 2019	A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1389,…
CVE-2019-1397	Microsoft Windows Hyper-V	Hig	0.55	8.4	0.05		Nov 12, 2019	A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1389,…
CVE-2019-1389	Microsoft Windows Hyper-V	Hig	0.55	8.4	0.05		Nov 12, 2019	A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1397,…
CVE-2019-1234	Microsoft Azure Stack	Hig	0.55	7.5	0.75		Nov 12, 2019	A spoofing vulnerability exists when Azure Stack fails to validate certain requests, aka 'Azure Stack Spoofing Vulnerability'.
CVE-2019-1170	Microsoft Windows 10 1909	Hig	0.55	7.9	0.02		Aug 14, 2019	An elevation of privilege vulnerability exists when reparse points are created by sandboxed processes allowing sandbox escape. An attacker who successfully exploited the vulnerability could use the sandbox escape to elevate privileges on an affected system. To exploit the…
CVE-2019-0703	Microsoft Windows	Med	0.55	6.5	0.09	KEV	Apr 9, 2019	An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0704, CVE-2019-0821.
CVE-2019-0676	Microsoft Internet Explorer	Med	0.55	6.5	0.08	KEV	Mar 5, 2019	An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.An attacker who successfully exploited this vulnerability could test for the presence of files on disk, aka 'Internet Explorer Information Disclosure Vulnerability'.
CVE-2019-0574	Microsoft Windows Server 2016	Hig	0.55	7.8	0.19		Jan 8, 2019	An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10…
CVE-2019-0573	Microsoft Windows Server 2016	Hig	0.55	7.8	0.20		Jan 8, 2019	An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10…
CVE-2019-0571	Microsoft Windows Server 2016	Hig	0.55	7.8	0.16		Jan 8, 2019	An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10…
CVE-2019-0551	Microsoft Windows Server 2016	Hig	0.55	8.4	0.04		Jan 8, 2019	A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10,…
CVE-2019-0550	Microsoft Windows Server 2019	Hig	0.55	8.4	0.04		Jan 8, 2019	A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows 10 Servers, Windows 10,…
CVE-2018-8625	Microsoft Internet Explorer	Hig	0.55	7.5	0.44		Dec 12, 2018	A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10.
CVE-2018-8619	Microsoft Internet Explorer	Hig	0.55	7.5	0.45		Dec 12, 2018	A remote code execution vulnerability exists when the Internet Explorer VBScript execution policy does not properly restrict VBScript under specific conditions, aka "Internet Explorer Remote Code Execution Vulnerability." This affects Internet Explorer 9, Internet Explorer 11,…
CVE-2018-8490	Microsoft Windows Server 2016	Hig	0.55	8.4	0.04		Oct 10, 2018	A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10,…
CVE-2018-8489	Microsoft Windows Server 2008	Hig	0.55	8.4	0.04		Oct 10, 2018	A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2,…
CVE-2018-8474	Microsoft Lync for Mac 2011	Hig	0.55	7.5	0.38		Sep 13, 2018	A security feature bypass vulnerability exists when Lync for Mac 2011 fails to properly sanitize specially crafted messages, aka "Lync for Mac 2011 Security Feature Bypass Vulnerability." This affects Microsoft Lync.
CVE-2018-8439	Microsoft Windows Server 2012	Hig	0.55	8.4	0.04		Sep 13, 2018	A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows Server 2012 R2, Windows RT…
CVE-2018-0965	Microsoft Windows Server 2016	Hig	0.55	8.4	0.05		Sep 13, 2018	A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10,…
CVE-2018-8357	Microsoft Internet Explorer	Hig	0.55	8.3	0.08		Aug 15, 2018	An elevation of privilege vulnerability exists in Microsoft browsers allowing sandbox escape, aka "Microsoft Browser Elevation of Privilege Vulnerability." This affects Internet Explorer 11, Microsoft Edge.
CVE-2018-8225	Microsoft Windows Server 2008	Hig	0.55	8.1	0.24		Jun 14, 2018	A remote code execution vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it fails to properly handle DNS responses, aka "Windows DNSAPI Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server…
CVE-2018-0886	Microsoft Windows Server 2008	Hig	0.55	7.0	0.82		Mar 14, 2018	The Credential Security Support Provider protocol (CredSSP) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709 Windows Server 2016 and Windows Server, version 1709 allows…
CVE-2018-0866	Microsoft Internet Explorer	Hig	0.55	7.5	0.44		Feb 15, 2018	Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles…
CVE-2017-11903	Microsoft Internet Explorer	Hig	0.55	7.5	0.47		Dec 12, 2017	Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to…
CVE-2017-11779	Microsoft Windows Server 2012	Hig	0.55	8.1	0.33		Oct 13, 2017	The Microsoft Windows Domain Name System (DNS) DNSAPI.dll on Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to properly handle DNS responses,…
CVE-2017-8461	Microsoft Windows Xp	Hig	0.55	7.8	0.20		Jun 15, 2017	Windows RPC with Routing and Remote Access enabled in Windows XP and Windows Server 2003 allows an attacker to execute code on a targeted RPC server which has Routing and Remote Access enabled via a specially crafted application, aka "Windows RPC Remote Code Execution…
CVE-2017-0202	Microsoft Internet Explorer	Hig	0.55	7.5	0.46		Apr 12, 2017	A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user, a.k.a. "Internet Explorer Memory…
CVE-2017-0160	Microsoft .net Framework	Hig	0.55	7.8	0.18		Apr 12, 2017	Microsoft .NET Framework 2.0, 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allows an attacker with access to the local system to execute malicious code, aka ".NET Remote Code Execution Vulnerability."
CVE-2016-3376	Microsoft Windows	Hig	0.55	7.8	0.13		Oct 14, 2016	The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka…
CVE-2016-7191	Microsoft Azure Active Directory Passport	Hig	0.55	8.1	0.29		Sep 28, 2016	The Microsoft Azure Active Directory Passport (aka Passport-Azure-AD) library 1.x before 1.4.6 and 2.x before 2.0.1 for Node.js does not recognize the validateIssuer setting, which allows remote attackers to bypass authentication via a crafted token.
CVE-2016-3353	Microsoft Internet Explorer	Hig	0.55	8.3	0.12		Sep 14, 2016	Microsoft Internet Explorer 9 through 11 mishandles .url files from the Internet zone, which allows remote attackers to bypass intended access restrictions via a crafted file, aka "Internet Explorer Security Feature Bypass."
CVE-2016-3238	Microsoft Windows	Hig	0.55	8.1	0.35		Jul 13, 2016	The Print Spooler service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows man-in-the-middle attackers to execute arbitrary code by providing a…
CVE-2016-4108	Microsoft Internet Explorer	Hig	0.55	7.5	0.38		May 11, 2016	Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.
CVE-2016-1106	Microsoft Internet Explorer	Hig	0.55	7.5	0.37		May 11, 2016	Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.
CVE-2016-1105	Microsoft Internet Explorer	Hig	0.55	7.5	0.38		May 11, 2016	Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.
CVE-2016-1104	Microsoft Internet Explorer	Hig	0.55	7.5	0.40		May 11, 2016	Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.
CVE-2016-1103	Microsoft Internet Explorer	Hig	0.55	7.5	0.38		May 11, 2016	Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.
CVE-2016-1102	Microsoft Internet Explorer	Hig	0.55	7.5	0.40		May 11, 2016	Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.
CVE-2016-1101	Microsoft Internet Explorer	Hig	0.55	7.5	0.38		May 11, 2016	Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.
CVE-2016-1096	Microsoft Internet Explorer	Hig	0.55	7.5	0.40		May 11, 2016	Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.
CVE-2016-0135	Microsoft Windows 10 1909	Hig	0.55	8.4	0.02		Apr 12, 2016	The Secondary Logon Service in Microsoft Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Secondary Logon Elevation of Privilege Vulnerability."

CVE-2021-26701HigFeb 25, 2021
Microsoft
Net
risk 0.55cvss 8.1epss 0.30
.NET Core Remote Code Execution Vulnerability
CVE-2021-24105HigFeb 25, 2021
Microsoft
package manager
risk 0.55cvss 8.4epss 0.02
Depending on configuration of various package managers it is possible for an attacker to insert a malicious package into a package manager's repository which can be retrieved and used during development, build, and release processes. This insertion could lead to remote code…
CVE-2020-17141HigDec 10, 2020
Microsoft
Exchange Server
risk 0.55cvss 8.4epss 0.07
Microsoft Exchange Remote Code Execution Vulnerability
CVE-2020-17136HigDec 10, 2020
Microsoft
Windows Cloud Files Mini Filter Driver
risk 0.55cvss 7.8epss 0.14
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2020-1576HigSep 11, 2020
Microsoft
Sharepoint Server
risk 0.55cvss 8.5epss 0.02
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application…
CVE-2020-1285HigSep 11, 2020
Microsoft
Windows Graphics Device Interface
risk 0.55cvss 8.4epss 0.04
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install…
CVE-2020-1337HigAug 17, 2020
Microsoft
Windows Print Spooler
risk 0.55cvss 7.8epss 0.14
An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. An attacker could…
CVE-2020-1048HigMay 21, 2020
Microsoft
Windows Print Spooler
risk 0.55cvss 7.8epss 0.16
An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. An attacker could…
CVE-2020-0910HigApr 15, 2020
Microsoft
Windows Hyper-V
risk 0.55cvss 8.4epss 0.09
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'.
CVE-2019-1398HigNov 12, 2019
Microsoft
Windows Hyper-V
risk 0.55cvss 8.4epss 0.03
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1389,…
CVE-2019-1397HigNov 12, 2019
Microsoft
Windows Hyper-V
risk 0.55cvss 8.4epss 0.05
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1389,…
CVE-2019-1389HigNov 12, 2019
Microsoft
Windows Hyper-V
risk 0.55cvss 8.4epss 0.05
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1397,…
CVE-2019-1234HigNov 12, 2019
Microsoft
Azure Stack
risk 0.55cvss 7.5epss 0.75
A spoofing vulnerability exists when Azure Stack fails to validate certain requests, aka 'Azure Stack Spoofing Vulnerability'.
CVE-2019-1170HigAug 14, 2019
Microsoft
Windows 10 1909
risk 0.55cvss 7.9epss 0.02
An elevation of privilege vulnerability exists when reparse points are created by sandboxed processes allowing sandbox escape. An attacker who successfully exploited the vulnerability could use the sandbox escape to elevate privileges on an affected system. To exploit the…
CVE-2019-0703MedKEVApr 9, 2019
Microsoft
Windows
risk 0.55cvss 6.5epss 0.09
An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0704, CVE-2019-0821.
CVE-2019-0676MedKEVMar 5, 2019
Microsoft
Internet Explorer
risk 0.55cvss 6.5epss 0.08
An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.An attacker who successfully exploited this vulnerability could test for the presence of files on disk, aka 'Internet Explorer Information Disclosure Vulnerability'.
CVE-2019-0574HigJan 8, 2019
Microsoft
Windows Server 2016
risk 0.55cvss 7.8epss 0.19
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10…
CVE-2019-0573HigJan 8, 2019
Microsoft
Windows Server 2016
risk 0.55cvss 7.8epss 0.20
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10…
CVE-2019-0571HigJan 8, 2019
Microsoft
Windows Server 2016
risk 0.55cvss 7.8epss 0.16
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10…
CVE-2019-0551HigJan 8, 2019
Microsoft
Windows Server 2016
risk 0.55cvss 8.4epss 0.04
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10,…
CVE-2019-0550HigJan 8, 2019
Microsoft
Windows Server 2019
risk 0.55cvss 8.4epss 0.04
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows 10 Servers, Windows 10,…
CVE-2018-8625HigDec 12, 2018
Microsoft
Internet Explorer
risk 0.55cvss 7.5epss 0.44
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10.
CVE-2018-8619HigDec 12, 2018
Microsoft
Internet Explorer
risk 0.55cvss 7.5epss 0.45
A remote code execution vulnerability exists when the Internet Explorer VBScript execution policy does not properly restrict VBScript under specific conditions, aka "Internet Explorer Remote Code Execution Vulnerability." This affects Internet Explorer 9, Internet Explorer 11,…
CVE-2018-8490HigOct 10, 2018
Microsoft
Windows Server 2016
risk 0.55cvss 8.4epss 0.04
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10,…
CVE-2018-8489HigOct 10, 2018
Microsoft
Windows Server 2008
risk 0.55cvss 8.4epss 0.04
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2,…
CVE-2018-8474HigSep 13, 2018
Microsoft
Lync for Mac 2011
risk 0.55cvss 7.5epss 0.38
A security feature bypass vulnerability exists when Lync for Mac 2011 fails to properly sanitize specially crafted messages, aka "Lync for Mac 2011 Security Feature Bypass Vulnerability." This affects Microsoft Lync.
CVE-2018-8439HigSep 13, 2018
Microsoft
Windows Server 2012
risk 0.55cvss 8.4epss 0.04
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows Server 2012 R2, Windows RT…
CVE-2018-0965HigSep 13, 2018
Microsoft
Windows Server 2016
risk 0.55cvss 8.4epss 0.05
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10,…
CVE-2018-8357HigAug 15, 2018
Microsoft
Internet Explorer
risk 0.55cvss 8.3epss 0.08
An elevation of privilege vulnerability exists in Microsoft browsers allowing sandbox escape, aka "Microsoft Browser Elevation of Privilege Vulnerability." This affects Internet Explorer 11, Microsoft Edge.
CVE-2018-8225HigJun 14, 2018
Microsoft
Windows Server 2008
risk 0.55cvss 8.1epss 0.24
A remote code execution vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it fails to properly handle DNS responses, aka "Windows DNSAPI Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server…
CVE-2018-0886HigMar 14, 2018
Microsoft
Windows Server 2008
risk 0.55cvss 7.0epss 0.82
The Credential Security Support Provider protocol (CredSSP) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709 Windows Server 2016 and Windows Server, version 1709 allows…
CVE-2018-0866HigFeb 15, 2018
Microsoft
Internet Explorer
risk 0.55cvss 7.5epss 0.44
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles…
CVE-2017-11903HigDec 12, 2017
Microsoft
Internet Explorer
risk 0.55cvss 7.5epss 0.47
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to…
CVE-2017-11779HigOct 13, 2017
Microsoft
Windows Server 2012
risk 0.55cvss 8.1epss 0.33
The Microsoft Windows Domain Name System (DNS) DNSAPI.dll on Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to properly handle DNS responses,…
CVE-2017-8461HigJun 15, 2017
Microsoft
Windows Xp
risk 0.55cvss 7.8epss 0.20
Windows RPC with Routing and Remote Access enabled in Windows XP and Windows Server 2003 allows an attacker to execute code on a targeted RPC server which has Routing and Remote Access enabled via a specially crafted application, aka "Windows RPC Remote Code Execution…
CVE-2017-0202HigApr 12, 2017
Microsoft
Internet Explorer
risk 0.55cvss 7.5epss 0.46
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user, a.k.a. "Internet Explorer Memory…
CVE-2017-0160HigApr 12, 2017
Microsoft
.net Framework
risk 0.55cvss 7.8epss 0.18
Microsoft .NET Framework 2.0, 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allows an attacker with access to the local system to execute malicious code, aka ".NET Remote Code Execution Vulnerability."
CVE-2016-3376HigOct 14, 2016
Microsoft
Windows
risk 0.55cvss 7.8epss 0.13
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka…
CVE-2016-7191HigSep 28, 2016
Microsoft
Azure Active Directory Passport
risk 0.55cvss 8.1epss 0.29
The Microsoft Azure Active Directory Passport (aka Passport-Azure-AD) library 1.x before 1.4.6 and 2.x before 2.0.1 for Node.js does not recognize the validateIssuer setting, which allows remote attackers to bypass authentication via a crafted token.
CVE-2016-3353HigSep 14, 2016
Microsoft
Internet Explorer
risk 0.55cvss 8.3epss 0.12
Microsoft Internet Explorer 9 through 11 mishandles .url files from the Internet zone, which allows remote attackers to bypass intended access restrictions via a crafted file, aka "Internet Explorer Security Feature Bypass."
CVE-2016-3238HigJul 13, 2016
Microsoft
Windows
risk 0.55cvss 8.1epss 0.35
The Print Spooler service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows man-in-the-middle attackers to execute arbitrary code by providing a…
CVE-2016-4108HigMay 11, 2016
Microsoft
Internet Explorer
risk 0.55cvss 7.5epss 0.38
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.
CVE-2016-1106HigMay 11, 2016
Microsoft
Internet Explorer
risk 0.55cvss 7.5epss 0.37
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.
CVE-2016-1105HigMay 11, 2016
Microsoft
Internet Explorer
risk 0.55cvss 7.5epss 0.38
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.
CVE-2016-1104HigMay 11, 2016
Microsoft
Internet Explorer
risk 0.55cvss 7.5epss 0.40
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.
CVE-2016-1103HigMay 11, 2016
Microsoft
Internet Explorer
risk 0.55cvss 7.5epss 0.38
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.
CVE-2016-1102HigMay 11, 2016
Microsoft
Internet Explorer
risk 0.55cvss 7.5epss 0.40
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.
CVE-2016-1101HigMay 11, 2016
Microsoft
Internet Explorer
risk 0.55cvss 7.5epss 0.38
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.
CVE-2016-1096HigMay 11, 2016
Microsoft
Internet Explorer
risk 0.55cvss 7.5epss 0.40
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.
CVE-2016-0135HigApr 12, 2016
Microsoft
Windows 10 1909
risk 0.55cvss 8.4epss 0.02
The Secondary Logon Service in Microsoft Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Secondary Logon Elevation of Privilege Vulnerability."

Page 54 of 363