Browse CVEs

HIGH 7.8 CVE-2019-1434 An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k… Windows 10 Patch available Fix from $1,9502019-11-12 HIGH 7.8 CVE-2019-1435 An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Compon… Windows 10 Patch available Fix from $1,9502019-11-12 HIGH 7.8 CVE-2019-1437 An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Compon… Windows 10 Patch available Fix from $1,9502019-11-12 HIGH 7.8 CVE-2019-1438 An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Compon… Windows 10 Patch available Fix from $1,9502019-11-12 HIGH 7.8 CVE-2019-1448EPSS 28% A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft… Excel Patch available Fix from $1,9502019-11-12 MEDIUM 6.5 CVE-2019-1439EPSS 76% An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Infor… Windows 10 Patch available Fix from $1,6002019-11-12 MEDIUM 6.5 CVE-2019-1443EPSS 5% An information disclosure vulnerability exists in Microsoft SharePoint when an attacker uploads a specially crafted file to the SharePoint Server.An … Sharepoint Enterprise Server Patch available Fix from $1,6002019-11-12 MEDIUM 5.5 CVE-2019-1436 An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure V… Windows 10 Patch available Fix from $1,6002019-11-12 MEDIUM 5.5 CVE-2019-1440 An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure V… Windows 10 Patch available Fix from $1,6002019-11-12 MEDIUM 5.5 CVE-2019-1442 A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file,… Sharepoint Server Patch available Fix from $1,6002019-11-12 MEDIUM 5.5 CVE-2019-1446EPSS 8% An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information… Excel Patch available Fix from $1,6002019-11-12 MEDIUM 5.4 CVE-2019-1445 A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications handlers correctly, aka 'Microsoft Office … Office Online Server Patch available Fix from $1,6002019-11-12 MEDIUM 5.4 CVE-2019-1447 A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications handlers correctly, aka 'Microsoft Office … Office Online Server Patch available Fix from $1,6002019-11-12 HIGH 8.8 CVE-2019-1419EPSS 10% A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially crafted Op… Windows 10 Patch available Fix from $1,9502019-11-12 HIGH 8.1 CVE-2019-1424 A security feature bypass vulnerability exists when Windows Netlogon improperly handles a secure communications channel, aka 'NetLogon Security Featu… Windows 10 Patch available Fix from $1,9502019-11-12 HIGH 7.8 CVE-2019-1417 An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka 'Windows Data Sharing Se… Windows 10 Patch available Fix from $1,9502019-11-12 HIGH 7.8 CVE-2019-1420 An elevation of privilege vulnerability exists in the way that the dssvc.dll handles file creation allowing for a file overwrite or creation in a sec… Windows 10 Patch available Fix from $1,9502019-11-12 HIGH 7.8 CVE-2019-1422 An elevation of privilege vulnerability exists in the way that the iphlpsvc.dll handles file creation allowing for a file overwrite, aka 'Windows Ele… Windows 10 Patch available Fix from $1,9502019-11-12 HIGH 7.8 CVE-2019-1423 An elevation of privilege vulnerability exists in the way that the StartTileData.dll handles file creation in protected locations, aka 'Windows Eleva… Windows 10 Patch available Fix from $1,9502019-11-12 HIGH 7.8 CVE-2019-1430EPSS 13% A remote code execution vulnerability exists when Windows Media Foundation improperly parses specially crafted QuickTime media files.An attacker who … Windows 10 Patch available Fix from $1,9502019-11-12 HIGH 7.8 CVE-2019-1433 An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Compon… Windows 10 Patch available Fix from $1,9502019-11-12 HIGH 7.5 CVE-2019-1426EPSS 9% A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based), aka 'Scri… Edge 1.11.15+ Fix from $1,9502019-11-12 HIGH 7.5 CVE-2019-1427EPSS 9% A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based), aka 'Scri… Edge 1.11.15+ Fix from $1,9502019-11-12 HIGH 7.5 CVE-2019-1428EPSS 9% A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based), aka 'Scri… Edge 1.11.15+ Fix from $1,9502019-11-12 HIGH 7.5 CVE-2019-1429 KEVEPSS 73% A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engi… Internet Explorer Patch available Fix from $1,9502019-11-12 MEDIUM 6.5 CVE-2019-1425 An elevation of privilege vulnerability exists when Visual Studio fails to properly validate hardlinks while extracting archived files, aka 'Visual S… Visual Studio 2017 Patch available Fix from $1,6002019-11-12 MEDIUM 6.5 CVE-2019-1432EPSS 5% An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclos… Windows 7 Patch available Fix from $1,6002019-11-12 HIGH 8.4 CVE-2019-1397 A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a g… Windows 10 Patch available Fix from $1,9502019-11-12 HIGH 8.4 CVE-2019-1398 A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a g… Windows 10 Patch available Fix from $1,9502019-11-12 HIGH 7.8 CVE-2019-1395 An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation… Windows 10 Patch available Fix from $1,9502019-11-12