Browse CVEs

HIGH 7.8 CVE-2019-1322 KEVEPSS 19% An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation of Privilege… Windows 10 1803 Patch available Fix from $1,9502019-10-10 HIGH 7.8 CVE-2019-1323 An elevation of privilege vulnerability exists in the Microsoft Windows Update Client when it does not properly handle privileges, aka 'Microsoft Win… Windows 10 Patch available Fix from $1,9502019-10-10 HIGH 7.8 CVE-2019-1336 An elevation of privilege vulnerability exists in the Microsoft Windows Update Client when it does not properly handle privileges, aka 'Microsoft Win… Windows 10 Patch available Fix from $1,9502019-10-10 HIGH 7.5 CVE-2019-1326EPSS 6% A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends speciall… Windows 10 Patch available Fix from $1,9502019-10-10 HIGH 7.5 CVE-2019-1335EPSS 10% A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scr… Chakracore Patch available Fix from $1,9502019-10-10 MEDIUM 6.5 CVE-2019-1330 An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. This CVE ID … Sharepoint Enterprise Server Patch available Fix from $1,6002019-10-10 MEDIUM 5.5 CVE-2019-1325 An elevation of privilege vulnerability exists in the Windows redirected drive buffering system (rdbss.sys) when the operating system improperly hand… Windows 10 Patch available Fix from $1,6002019-10-10 MEDIUM 5.5 CVE-2019-1334 An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosu… Windows 10 Patch available Fix from $1,6002019-10-10 MEDIUM 5.4 CVE-2019-1328 A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint… Sharepoint Enterprise Server Patch available Fix from $1,6002019-10-10 MEDIUM 5.4 CVE-2019-1329 An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affe… Sharepoint Enterprise Server Patch available Fix from $1,6002019-10-10 HIGH 7.8 CVE-2019-1311EPSS 36% A remote code execution vulnerability exists when the Windows Imaging API improperly handles objects in memory, aka 'Windows Imaging API Remote Code … Windows 10 Patch available Fix from $1,9502019-10-10 HIGH 7.8 CVE-2019-1315 KEV An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Reporting Manag… Windows 10 1607 Patch available Fix from $1,9502019-10-10 HIGH 7.8 CVE-2019-1316 An elevation of privilege vulnerability exists in Microsoft Windows Setup when it does not properly handle privileges, aka 'Microsoft Windows Setup E… Windows 10 Patch available Fix from $1,9502019-10-10 HIGH 7.8 CVE-2019-1319 An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error Reporting Ele… Windows 10 Patch available Fix from $1,9502019-10-10 HIGH 7.5 CVE-2019-1307EPSS 10% A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scr… Chakracore 1.11.14+ Fix from $1,9502019-10-10 HIGH 7.5 CVE-2019-1308EPSS 10% A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scr… Chakracore 1.11.14+ Fix from $1,9502019-10-10 HIGH 7.3 CVE-2019-1317 A denial of service vulnerability exists when Windows improperly handles hard links, aka 'Microsoft Windows Denial of Service Vulnerability'. Windows 10 Patch available Fix from $1,9502019-10-10 MEDIUM 6.8 CVE-2019-1230EPSS 6% An information disclosure vulnerability exists when the Windows Hyper-V Network Switch on a host operating system fails to properly validate input fr… Windows 10 Patch available Fix from $1,6002019-10-10 MEDIUM 6.8 CVE-2019-1314 A security feature bypass vulnerability exists in Windows 10 Mobile when Cortana allows a user to access files and folders through the locked screen,… Windows 10 Mobile Patch available Fix from $1,6002019-10-10 MEDIUM 6.5 CVE-2019-1313EPSS 5% An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when it improperly enforces permissions, aka 'SQL Ser… Sql Server Management Studio Patch available Fix from $1,6002019-10-10 MEDIUM 5.9 CVE-2019-1166EPSS 68% A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC (Message Integrit… Windows 10 Patch available Fix from $1,6002019-10-10 MEDIUM 5.9 CVE-2019-1318 A spoofing vulnerability exists when Transport Layer Security (TLS) accesses non- Extended Master Secret (EMS) sessions, aka 'Microsoft Windows Trans… Windows 10 Patch available Fix from $1,6002019-10-10 MEDIUM 5.4 CVE-2019-1070 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an a… Sharepoint Enterprise Server Patch available Fix from $1,6002019-10-10 HIGH 8.8 CVE-2019-1060EPSS 14% A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Executio… Windows 10 Patch available Fix from $1,9502019-10-10 HIGH 7.5 CVE-2019-1255 A denial of service vulnerability exists when Microsoft Defender improperly handles files, aka 'Microsoft Defender Denial of Service Vulnerability'. Windows Defender Patch available Fix from $1,9502019-09-23 HIGH 7.5 CVE-2019-1367 KEVEPSS 45% A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engi… Internet Explorer Patch available Fix from $1,9502019-09-23 CRITICAL 9.8 CVE-2019-1306EPSS 17% A remote code execution vulnerability exists when Azure DevOps Server (ADO) and Team Foundation Server (TFS) fail to validate input properly, aka 'Az… Team Foundation Server Patch available Fix from $2,3002019-09-11 HIGH 8.8 CVE-2019-1302 An elevation of privilege vulnerability exists when a ASP.NET Core web application, created using vulnerable project templates, fails to properly san… Asp.net Core Patch available Fix from $1,9502019-09-11 HIGH 7.8 CVE-2019-1303 An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerability, an… Windows 10 Patch available Fix from $1,9502019-09-11 HIGH 7.5 CVE-2019-1301EPSS 5% A denial of service vulnerability exists when .NET Core improperly handles web requests, aka '.NET Core Denial of Service Vulnerability'. .net Core Patch available Fix from $1,9502019-09-11