[ Vendor · 1,865 CVEs ]
Microsoft
CVEs affecting Microsoft published in the last 30 days, plus any Microsoft CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2019-1064 | 12 Jun 2019 | CVSS 7.8 | Microsoft Windows AppX Deployment Service (AppXSVC) Privilege EscalationAn elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links. An attacker who… | ExploitedFix |
| CVE-2019-1069 | 12 Jun 2019 | CVSS 7.8 | Microsoft Task Scheduler Privilege EscalationAn elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully… | ExploitedFix |
| CVE-2019-1069 | 12 Jun 2019 | CVSS 7.8 | Microsoft Task Scheduler Privilege EscalationAn elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully… | ExploitedFix |
| CVE-2019-0903 | 16 May 2019 | CVSS 8.8 | Microsoft GDI Remote Code ExecutionA remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+… | ExploitedFix |
| CVE-2019-0708 | 16 May 2019 | CVSS 9.8 | Microsoft Remote Desktop Services Remote Code ExecutionA remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects… | ExploitedFix |
| CVE-2019-0863 | 16 May 2019 | CVSS 7.8 | Microsoft Windows Error Reporting (WER) Privilege EscalationAn elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Error Reporting Elevation of… | ExploitedFix |
| CVE-2019-0859 | 9 Apr 2019 | CVSS 7.8 | Microsoft Win32k Privilege EscalationAn elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation… | ExploitedFix |
| CVE-2019-0803 | 9 Apr 2019 | CVSS 7.8 | Microsoft Win32k Privilege EscalationAn elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation… | ExploitedFix |
| CVE-2019-0841 | 9 Apr 2019 | CVSS 7.8 | Microsoft Windows AppX Deployment Service (AppXSVC) Privilege EscalationAn elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation… | ExploitedFix |
| CVE-2019-0752 | 9 Apr 2019 | CVSS 7.5 | Microsoft Internet Explorer Type ConfusionA remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting… | ExploitedFix |
| CVE-2019-0797 | 9 Apr 2019 | CVSS 7.8 | Microsoft Win32k Privilege EscalationAn elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation… | ExploitedFix |
| CVE-2019-0808 | 9 Apr 2019 | CVSS 7.8 | Microsoft Win32k Privilege EscalationAn elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation… | ExploitedFix |
| CVE-2019-0703 | 9 Apr 2019 | CVSS 6.5 | Microsoft Windows SMB Information DisclosureAn information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information… | ExploitedFix |
| CVE-2019-0676 | 5 Mar 2019 | CVSS 6.5 | Microsoft Internet Explorer Information DisclosureAn information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.An attacker who successfully exploited… | ExploitedFix |
| CVE-2019-0604 | 5 Mar 2019 | CVSS 9.8 | Microsoft SharePoint Remote Code ExecutionA remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package… | ExploitedFix |
| CVE-2019-0541 | 8 Jan 2019 | CVSS 8.8 | Microsoft MSHTML Remote Code ExecutionA remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Execution… | ExploitedFix |
| CVE-2019-0543 | 8 Jan 2019 | CVSS 7.8 | Microsoft Windows Privilege EscalationAn elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka "Microsoft Windows Elevation of Privilege… | ExploitedFix |
| CVE-2018-8653 | 20 Dec 2018 | CVSS 7.5 | Microsoft Internet Explorer Scripting Engine Memory CorruptionA remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting… | ExploitedFix |
| CVE-2018-8639 | 12 Dec 2018 | CVSS 7.8 | Microsoft Windows Win32k Improper Resource Shutdown or ReleaseAn elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation… | ExploitedFix |
| CVE-2018-8611 | 12 Dec 2018 | CVSS 7.8 | Microsoft Windows Kernel Privilege EscalationAn elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Elevation of… | ExploitedFix |
| CVE-2018-8589 | 14 Nov 2018 | CVSS 7.8 | Microsoft Win32k Privilege EscalationAn elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privilege… | ExploitedFix |
| CVE-2018-8581 | 14 Nov 2018 | CVSS 7.4 | Microsoft Exchange Server Privilege EscalationAn elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability."… | ExploitedFix |
| CVE-2018-8453 | 10 Oct 2018 | CVSS 7.8 | Microsoft Win32k Privilege EscalationAn elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation… | ExploitedFix |
| CVE-2018-8440 | 13 Sep 2018 | CVSS 7.8 | Microsoft Windows Privilege EscalationAn elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows ALPC… | ExploitedFix |
| CVE-2018-8405 | 15 Aug 2018 | CVSS 7.8 | Microsoft DirectX Graphics Kernel Privilege EscalationAn elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX… | ExploitedFix |
| CVE-2018-8406 | 15 Aug 2018 | CVSS 7.8 | Microsoft DirectX Graphics Kernel Privilege EscalationAn elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX… | ExploitedFix |
| CVE-2018-8414 | 15 Aug 2018 | CVSS 8.8 | Microsoft Windows Shell Remote Code ExecutionA remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows Shell Remote Code Execution… | ExploitedFix |
| CVE-2018-8373 | 15 Aug 2018 | CVSS 7.5 | Microsoft Scripting Engine Memory CorruptionA remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting… | ExploitedFix |
| CVE-2018-8298 | 11 Jul 2018 | CVSS 7.5 | ChakraCore Scripting Engine Type ConfusionA remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory… | ExploitedFix |
| CVE-2018-8174 | 9 May 2018 | CVSS 7.5 | Microsoft Windows VBScript Engine Out-of-Bounds WriteA remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code… | ExploitedFix |
| CVE-2018-8120 | 9 May 2018 | CVSS 7.0 | Microsoft Win32k Privilege EscalationAn elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation… | ExploitedFix |
| CVE-2018-0824 | 9 May 2018 | CVSS 8.8 | Microsoft COM for Windows Deserialization of Untrusted DataA remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Microsoft COM… | ExploitedFix |
| CVE-2018-0824 | 9 May 2018 | CVSS 8.8 | Microsoft COM for Windows Deserialization of Untrusted DataA remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Microsoft COM… | ExploitedFix |
| CVE-2018-0798 | 10 Jan 2018 | CVSS 8.8 | Microsoft Office Memory CorruptionEquation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution… | ExploitedFix |
| CVE-2018-0802 | 10 Jan 2018 | CVSS 7.8 | Microsoft Office Memory CorruptionEquation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution… | ExploitedFix |
| CVE-2017-11882 | 15 Nov 2017 | CVSS 7.8 | Microsoft Office Memory CorruptionMicrosoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Microsoft Office 2016 allow an… | ExploitedFix |
| CVE-2017-11826 | 13 Oct 2017 | CVSS 7.8 | Microsoft Office Remote Code ExecutionMicrosoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word… | ExploitedFix |
| CVE-2017-11774 | 13 Oct 2017 | CVSS 7.8 | Microsoft Office Outlook Security Feature BypassMicrosoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how Microsoft… | ExploitedFix |
| CVE-2017-8759 | 13 Sep 2017 | CVSS 7.8 | Microsoft .NET Framework Remote Code ExecutionMicrosoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or… | ExploitedFix |
| CVE-2017-8570 | 11 Jul 2017 | CVSS 7.8 | Microsoft Office Remote Code ExecutionMicrosoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Remote Code… | ExploitedFix |
| CVE-2017-8543 | 15 Jun 2017 | CVSS 9.8 | Microsoft Windows Search Remote Code ExecutionMicrosoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8… | ExploitedFix |
| CVE-2017-8464 | 15 Jun 2017 | CVSS 8.8 | Microsoft Windows Shell (.lnk) Remote Code ExecutionWindows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT… | ExploitedFix |
| CVE-2017-8540 | 26 May 2017 | CVSS 7.8 | Microsoft Malware Protection Engine Improper Restriction of OperationsThe Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1… | ExploitedFix |
| CVE-2017-0262 | 12 May 2017 | CVSS 7.8 | Microsoft Office Remote Code ExecutionMicrosoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle… | ExploitedFix |
| CVE-2017-0263 | 12 May 2017 | CVSS 7.8 | Microsoft Win32k Privilege EscalationThe kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1… | ExploitedFix |
| CVE-2017-0261 | 12 May 2017 | CVSS 7.8 | Microsoft Office Use-After-FreeMicrosoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle… | ExploitedFix |
| CVE-2017-0222 | 12 May 2017 | CVSS 8.8 | Microsoft Internet Explorer Remote Code ExecutionA remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption… | ExploitedFix |
| CVE-2017-0213 | 12 May 2017 | CVSS 7.3 | Microsoft Windows Privilege EscalationWindows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows… | ExploitedFix |
| CVE-2017-0199 | 12 Apr 2017 | CVSS 7.8 | Microsoft Office and WordPad Remote Code ExecutionMicrosoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server… | ExploitedFix |
| CVE-2017-0210 | 12 Apr 2017 | CVSS 8.8 | Microsoft Internet Explorer Privilege EscalationAn elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker… | ExploitedFix |
| CVE-2017-7269 | 27 Mar 2017 | CVSS 9.8 | Microsoft Windows Server Buffer OverflowBuffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server… | ExploitedFix |
| CVE-2017-0144 | 17 Mar 2017 | CVSS 8.8 | Microsoft SMBv1 Remote Code ExecutionThe SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2… | ExploitedFix |
| CVE-2017-0145 | 17 Mar 2017 | CVSS 8.8 | Microsoft SMBv1 Remote Code ExecutionThe SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2… | ExploitedFix |
| CVE-2017-0146 | 17 Mar 2017 | CVSS 8.8 | Microsoft Windows SMB Remote Code ExecutionThe SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2… | ExploitedFix |
| CVE-2017-0147 | 17 Mar 2017 | CVSS 7.5 | Microsoft Windows SMBv1 Information DisclosureThe SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2… | ExploitedFix |
| CVE-2017-0148 | 17 Mar 2017 | CVSS 8.1 | Microsoft SMBv1 Server Remote Code ExecutionThe SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2… | ExploitedFix |
| CVE-2017-0149 | 17 Mar 2017 | CVSS 8.8 | Microsoft Internet Explorer Memory CorruptionMicrosoft Internet Explorer 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a… | ExploitedFix |
| CVE-2017-0143 | 17 Mar 2017 | CVSS 8.8 | Microsoft Windows Server Message Block (SMBv1) Remote Code ExecutionThe SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2… | ExploitedFix |
| CVE-2017-0101 | 17 Mar 2017 | CVSS 7.8 | Microsoft Windows Transaction Manager Privilege EscalationThe kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Windows… | ExploitedFix |
| CVE-2017-0059 | 17 Mar 2017 | CVSS 4.3 | Microsoft Internet Explorer Information DisclosureMicrosoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka… | ExploitedFix |
| CVE-2017-0001 | 17 Mar 2017 | CVSS 7.8 | Microsoft Graphics Device Interface (GDI) Privilege EscalationThe Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server… | ExploitedFix |
| CVE-2017-0005 | 17 Mar 2017 | CVSS 7.8 | Microsoft Windows Graphics Device Interface (GDI) Privilege EscalationThe Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server… | ExploitedFix |
| CVE-2017-0022 | 17 Mar 2017 | CVSS 6.5 | Microsoft XML Core Services Information DisclosureMicrosoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows Server 2008 SP2 and R2… | ExploitedFix |
| CVE-2017-0037 | 26 Feb 2017 | CVSS 8.1 | Microsoft Edge and Internet Explorer Type ConfusionMicrosoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the… | ExploitedFix |
| CVE-2016-7262 | 20 Dec 2016 | CVSS 7.8 | Microsoft Office Security Feature BypassMicrosoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow… | ExploitedFix |
| CVE-2016-7256 | 10 Nov 2016 | CVSS 8.8 | Microsoft Windows Open Type Font Remote Code Executionatmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server… | ExploitedFix |
| CVE-2016-7255 | 10 Nov 2016 | CVSS 7.8 | Microsoft Win32k Privilege EscalationThe kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and… | ExploitedFix |
| CVE-2016-7201 | 10 Nov 2016 | CVSS 8.8 | Microsoft Edge Memory CorruptionThe Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory… | ExploitedFix |
| CVE-2016-7200 | 10 Nov 2016 | CVSS 8.8 | Microsoft Edge Memory CorruptionThe Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory… | ExploitedFix |
| CVE-2016-7193 | 14 Oct 2016 | CVSS 7.8 | Microsoft Office Memory CorruptionMicrosoft Word 2007 SP2, Office 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack… | ExploitedFix |
| CVE-2016-3393 | 14 Oct 2016 | CVSS 7.8 | Microsoft Windows Graphics Device Interface (GDI) Remote Code ExecutionGraphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows… | ExploitedFix |
| CVE-2016-3298 | 14 Oct 2016 | CVSS 6.5 | Microsoft Internet Explorer Messaging API Information DisclosureMicrosoft Internet Explorer 9 through 11 and the Internet Messaging API in Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1… | ExploitedFix |
| CVE-2016-3351 | 14 Sep 2016 | CVSS 6.5 | Microsoft Internet Explorer and Edge Information DisclosureMicrosoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka… | ExploitedFix |
| CVE-2016-3309 | 9 Aug 2016 | CVSS 7.8 | Microsoft Windows Kernel Privilege EscalationThe kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and… | ExploitedFix |
| CVE-2016-3235 | 16 Jun 2016 | CVSS 7.8 | Microsoft Office OLE DLL Side LoadingMicrosoft Visio 2007 SP3, Visio 2010 SP2, Visio 2013 SP1, Visio 2016, Visio Viewer 2007 SP3, and Visio Viewer 2010 mishandle library loading, which… | ExploitedFix |
| CVE-2016-0189 | 11 May 2016 | CVSS 7.5 | Microsoft Internet Explorer Memory CorruptionThe Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote… | ExploitedFix |
| CVE-2016-0185 | 11 May 2016 | CVSS 7.8 | Microsoft Windows Media Center Remote Code ExecutionMedia Center in Microsoft Windows Vista SP2, Windows 7 SP1, and Windows 8.1 allows remote attackers to execute arbitrary code via a crafted Media… | ExploitedFix |
| CVE-2016-0167 | 12 Apr 2016 | CVSS 7.8 | Microsoft Win32k Privilege EscalationThe kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and… | ExploitedFix |
| CVE-2016-0165 | 12 Apr 2016 | CVSS 7.8 | Microsoft Win32k Privilege EscalationThe kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and… | ExploitedFix |
| CVE-2016-0162 | 12 Apr 2016 | CVSS 4.3 | Microsoft Internet Explorer Information DisclosureMicrosoft Internet Explorer 9 through 11 allows remote attackers to determine the existence of files via crafted JavaScript code, aka "Internet… | ExploitedFix |
| CVE-2016-0151 | 12 Apr 2016 | CVSS 7.8 | Microsoft Windows CSRSS Security Feature BypassThe Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511… | ExploitedFix |
| CVE-2016-0099 | 9 Mar 2016 | CVSS 7.8 | Microsoft Windows Secondary Logon Service Privilege EscalationThe Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold… | ExploitedFix |
| CVE-2016-0040 | 10 Feb 2016 | CVSS 7.8 | Microsoft Windows Kernel Privilege EscalationThe kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via a crafted… | ExploitedFix |
| CVE-2016-0034 | 13 Jan 2016 | CVSS 8.8 | Microsoft Silverlight Runtime Remote Code ExecutionMicrosoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers to execute arbitrary code or… | ExploitedFix |
| CVE-2015-6175 | 9 Dec 2015 | CVSS 7.8 | Microsoft Windows Kernel Privilege EscalationThe kernel in Microsoft Windows 10 Gold allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory Elevation of… | ExploitedFix |
| CVE-2015-2546 | 9 Sep 2015 | CVSS 8.2 | Microsoft Win32k Memory CorruptionThe kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012… | ExploitedFix |
| CVE-2015-2545 | 9 Sep 2015 | CVSS 7.8 | Microsoft Office Malformed EPS FileMicrosoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted EPS image, aka… | ExploitedFix |
| CVE-2015-2502 | 19 Aug 2015 | CVSS 8.8 | Microsoft Internet Explorer Memory CorruptionMicrosoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a… | ExploitedFix |
| CVE-2015-1769 | 15 Aug 2015 | CVSS 6.6 | Microsoft Windows Mount Manager Privilege EscalationMount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and… | ExploitedFix |
| CVE-2015-1642 | 15 Aug 2015 | CVSS 7.8 | Microsoft Office Memory CorruptionMicrosoft Office 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office… | ExploitedFix |
| CVE-2015-2426 | 20 Jul 2015 | CVSS 8.8 | Microsoft Windows Adobe Type Manager Library Remote Code ExecutionBuffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7… | ExploitedFix |
| CVE-2015-2387 | 14 Jul 2015 | CVSS 7.8 | Microsoft ATM Font Driver Privilege EscalationATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows… | ExploitedFix |
| CVE-2015-2425 | 14 Jul 2015 | CVSS 8.8 | Microsoft Internet Explorer Memory CorruptionMicrosoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… | ExploitedFix |
| CVE-2015-2424 | 14 Jul 2015 | CVSS 8.8 | Microsoft PowerPoint Memory CorruptionMicrosoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 2013 SP1, and PowerPoint 2013 RT SP1… | ExploitedFix |
| CVE-2015-2419 | 14 Jul 2015 | CVSS 8.8 | Microsoft Internet Explorer Memory CorruptionJScript 9 in Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)… | ExploitedFix |
| CVE-2015-2360 | 10 Jun 2015 | CVSS 8.8 | Microsoft Win32k Privilege Escalationwin32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows… | ExploitedFix |
| CVE-2015-1770 | 10 Jun 2015 | CVSS 8.8 | Microsoft Office Uninitialized Memory UseMicrosoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office… | ExploitedFix |
| CVE-2015-1671 | 13 May 2015 | CVSS 7.8 | Microsoft Windows Remote Code ExecutionThe Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Office 2007 SP3 and 2010 SP2… | ExploitedFix |
| CVE-2015-1701 | 21 Apr 2015 | CVSS 7.8 | Microsoft Win32k Privilege EscalationWin32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via… | ExploitedFix |
| CVE-2015-1641 | 14 Apr 2015 | CVSS 7.8 | Microsoft Office Memory CorruptionMicrosoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Compatibility Pack SP3, Word… | ExploitedFix |
Page 18 of 19