Browse CVEs

MEDIUM 5.5 CVE-2020-0607EPSS 6% An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Compon… Windows 10 Patch available Fix from $1,6002020-01-14 MEDIUM 5.5 CVE-2020-0608 An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure V… Windows 10 Patch available Fix from $1,6002020-01-14 HIGH 7.8 CVE-2019-1484EPSS 9% A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Windows OLE Remote Code Execution… Windows 10 Patch available Fix from $1,9502019-12-10 MEDIUM 6.5 CVE-2019-1487 An information disclosure vulnerability in Android Apps using Microsoft Authentication Library (MSAL) 0.3.1-Alpha or later exists under specific cond… Authentication Library after 0.2.2 Fix from $1,6002019-12-10 MEDIUM 6.1 CVE-2019-1486 A spoofing vulnerability exists in Visual Studio Live Share when a guest connected to a Live Share session is redirected to an arbitrary URL specifie… Visual Studio 2019 1.0.1374+ Fix from $1,6002019-12-10 MEDIUM 5.4 CVE-2019-1490 A spoofing vulnerability exists when a Skype for Business Server does not properly sanitize a specially crafted request, aka 'Skype for Business Serv… Skype For Business Patch available Fix from $1,6002019-12-10 HIGH 8.2 CVE-2019-1471EPSS 8% A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a g… Windows 10 Patch available Fix from $1,9502019-12-10 HIGH 7.8 CVE-2019-1476EPSS 5% An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation o… Windows 10 Patch available Fix from $1,9502019-12-10 HIGH 7.8 CVE-2019-1477 An elevation of privilege vulnerability exists when the Windows Printer Service improperly validates file paths while loading printer drivers, aka 'W… Windows 10 Patch available Fix from $1,9502019-12-10 HIGH 7.8 CVE-2019-1483 An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerability, an… Windows 10 Patch available Fix from $1,9502019-12-10 MEDIUM 6.0 CVE-2019-1470EPSS 6% An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated… Windows 10 Patch available Fix from $1,6002019-12-10 MEDIUM 5.5 CVE-2019-1472 An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosu… Windows 10 Patch available Fix from $1,6002019-12-10 MEDIUM 5.5 CVE-2019-1474 An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosu… Windows 10 Patch available Fix from $1,6002019-12-10 HIGH 8.8 CVE-2019-1468EPSS 17% A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Win32k Graphics … Windows 10 Patch available Fix from $1,9502019-12-10 HIGH 7.8 CVE-2019-1458 KEVEPSS 74% An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation… Windows 10 1507 Patch available Fix from $1,9502019-12-10 HIGH 7.8 CVE-2019-1462EPSS 18% A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka 'Micr… Office Patch available Fix from $1,9502019-12-10 HIGH 7.5 CVE-2019-1453EPSS 9% A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends speciall… Windows 10 Patch available Fix from $1,9502019-12-10 MEDIUM 6.5 CVE-2019-1461 A denial of service vulnerability exists in Microsoft Word software when the software fails to properly handle objects in memory, aka 'Microsoft Word… Office Patch available Fix from $1,6002019-12-10 MEDIUM 6.5 CVE-2019-1465EPSS 6% An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Infor… Windows 10 Patch available Fix from $1,6002019-12-10 MEDIUM 6.5 CVE-2019-1466EPSS 6% An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Infor… Windows 10 Patch available Fix from $1,6002019-12-10 MEDIUM 6.5 CVE-2019-1467EPSS 6% An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Infor… Windows 10 Patch available Fix from $1,6002019-12-10 MEDIUM 5.5 CVE-2019-1463 An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory, aka 'Micros… Office Patch available Fix from $1,6002019-12-10 MEDIUM 5.5 CVE-2019-1464EPSS 8% An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information… Excel Patch available Fix from $1,6002019-12-10 MEDIUM 5.5 CVE-2019-1469 An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure V… Windows 10 Patch available Fix from $1,6002019-12-10 MEDIUM 6.1 CVE-2019-1332EPSS 7% A cross-site scripting (XSS) vulnerability exists when Microsoft SQL Server Reporting Services (SSRS) does not properly sanitize a specially-crafted … Power Bi Report Server Patch available Fix from $1,6002019-12-10 MEDIUM 5.5 CVE-2019-1400 An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory, aka 'Micros… Office Patch available Fix from $1,6002019-12-10 HIGH 7.8 CVE-2019-16765EPSS 5% If an attacker can get a user to open a specially prepared directory tree as a workspace in Visual Studio Code with the CodeQL extension active, arbi… Codeql 1.0.1+ Fix from $1,9502019-11-25 CRITICAL 9.8 CVE-2019-1449EPSS 6% A security feature bypass vulnerability exists in the way that Office Click-to-Run (C2R) components handle a specially crafted file, which could lead… Office Patch available Fix from $2,3002019-11-12 HIGH 8.8 CVE-2019-1456EPSS 9% A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially crafted Op… Windows 10 Patch available Fix from $1,9502019-11-12 HIGH 7.8 CVE-2019-1457 A security feature bypass vulnerability exists in Microsoft Office software by not enforcing macro settings on an Excel document, aka 'Microsoft Offi… Office Patch available Fix from $1,9502019-11-12