[ Vendor · 30 CVEs ]
Microsoft Corporation
CVEs affecting Microsoft Corporation published in the last 30 days, plus any Microsoft Corporation CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2018-0798 | 10 Jan 2018 | CVSS 8.8 | Microsoft Office Memory CorruptionEquation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution… | ExploitedFix |
| CVE-2018-0802 | 10 Jan 2018 | CVSS 7.8 | Microsoft Office Memory CorruptionEquation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution… | ExploitedFix |
| CVE-2017-11882 | 15 Nov 2017 | CVSS 7.8 | Microsoft Office Memory CorruptionMicrosoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Microsoft Office 2016 allow an… | ExploitedFix |
| CVE-2017-11826 | 13 Oct 2017 | CVSS 7.8 | Microsoft Office Remote Code ExecutionMicrosoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word… | ExploitedFix |
| CVE-2017-11774 | 13 Oct 2017 | CVSS 7.8 | Microsoft Office Outlook Security Feature BypassMicrosoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how Microsoft… | ExploitedFix |
| CVE-2017-8759 | 13 Sep 2017 | CVSS 7.8 | Microsoft .NET Framework Remote Code ExecutionMicrosoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or… | ExploitedFix |
| CVE-2017-8570 | 11 Jul 2017 | CVSS 7.8 | Microsoft Office Remote Code ExecutionMicrosoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Remote Code… | ExploitedFix |
| CVE-2017-8543 | 15 Jun 2017 | CVSS 9.8 | Microsoft Windows Search Remote Code ExecutionMicrosoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8… | ExploitedFix |
| CVE-2017-8464 | 15 Jun 2017 | CVSS 8.8 | Microsoft Windows Shell (.lnk) Remote Code ExecutionWindows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT… | ExploitedFix |
| CVE-2017-8540 | 26 May 2017 | CVSS 7.8 | Microsoft Malware Protection Engine Improper Restriction of OperationsThe Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1… | ExploitedFix |
| CVE-2017-0262 | 12 May 2017 | CVSS 7.8 | Microsoft Office Remote Code ExecutionMicrosoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle… | ExploitedFix |
| CVE-2017-0263 | 12 May 2017 | CVSS 7.8 | Microsoft Win32k Privilege EscalationThe kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1… | ExploitedFix |
| CVE-2017-0261 | 12 May 2017 | CVSS 7.8 | Microsoft Office Use-After-FreeMicrosoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle… | ExploitedFix |
| CVE-2017-0222 | 12 May 2017 | CVSS 8.8 | Microsoft Internet Explorer Remote Code ExecutionA remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption… | ExploitedFix |
| CVE-2017-0213 | 12 May 2017 | CVSS 7.3 | Microsoft Windows Privilege EscalationWindows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows… | ExploitedFix |
| CVE-2017-0199 | 12 Apr 2017 | CVSS 7.8 | Microsoft Office and WordPad Remote Code ExecutionMicrosoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server… | ExploitedFix |
| CVE-2017-0210 | 12 Apr 2017 | CVSS 8.8 | Microsoft Internet Explorer Privilege EscalationAn elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker… | ExploitedFix |
| CVE-2017-0144 | 17 Mar 2017 | CVSS 8.8 | Microsoft SMBv1 Remote Code ExecutionThe SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2… | ExploitedFix |
| CVE-2017-0145 | 17 Mar 2017 | CVSS 8.8 | Microsoft SMBv1 Remote Code ExecutionThe SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2… | ExploitedFix |
| CVE-2017-0146 | 17 Mar 2017 | CVSS 8.8 | Microsoft Windows SMB Remote Code ExecutionThe SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2… | ExploitedFix |
| CVE-2017-0147 | 17 Mar 2017 | CVSS 7.5 | Microsoft Windows SMBv1 Information DisclosureThe SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2… | ExploitedFix |
| CVE-2017-0148 | 17 Mar 2017 | CVSS 8.1 | Microsoft SMBv1 Server Remote Code ExecutionThe SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2… | ExploitedFix |
| CVE-2017-0149 | 17 Mar 2017 | CVSS 8.8 | Microsoft Internet Explorer Memory CorruptionMicrosoft Internet Explorer 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a… | ExploitedFix |
| CVE-2017-0143 | 17 Mar 2017 | CVSS 8.8 | Microsoft Windows Server Message Block (SMBv1) Remote Code ExecutionThe SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2… | ExploitedFix |
| CVE-2017-0101 | 17 Mar 2017 | CVSS 7.8 | Microsoft Windows Transaction Manager Privilege EscalationThe kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Windows… | ExploitedFix |
| CVE-2017-0059 | 17 Mar 2017 | CVSS 4.3 | Microsoft Internet Explorer Information DisclosureMicrosoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka… | ExploitedFix |
| CVE-2017-0001 | 17 Mar 2017 | CVSS 7.8 | Microsoft Graphics Device Interface (GDI) Privilege EscalationThe Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server… | ExploitedFix |
| CVE-2017-0005 | 17 Mar 2017 | CVSS 7.8 | Microsoft Windows Graphics Device Interface (GDI) Privilege EscalationThe Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server… | ExploitedFix |
| CVE-2017-0022 | 17 Mar 2017 | CVSS 6.5 | Microsoft XML Core Services Information DisclosureMicrosoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows Server 2008 SP2 and R2… | ExploitedFix |
| CVE-2017-0037 | 26 Feb 2017 | CVSS 8.1 | Microsoft Edge and Internet Explorer Type ConfusionMicrosoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the… | ExploitedFix |