Browse CVEs

CRITICAL 9.8 CVE-2019-1072EPSS 12% A remote code execution vulnerability exists when Azure DevOps Server and Team Foundation Server (TFS) improperly handle user input, aka 'Azure DevOp… Team Foundation Server Patch available Fix from $2,3002019-07-15 HIGH 7.8 CVE-2019-1082 An elevation of privilege vulnerability exists in Microsoft Windows where a certain DLL, with Local Service privilege, is vulnerable to race planting… Windows 10 Patch available Fix from $1,9502019-07-15 HIGH 7.8 CVE-2019-1085 An elevation of privilege vulnerability exists in the way that the wlansvc.dll handles objects in memory, aka 'Windows WLAN Service Elevation of Priv… Windows 10 Patch available Fix from $1,9502019-07-15 HIGH 7.5 CVE-2019-1083EPSS 7% A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests, aka '.NET Denial of Service Vu… .net Framework Patch available Fix from $1,9502019-07-15 MEDIUM 6.5 CVE-2019-1079EPSS 5% An information disclosure vulnerability exists when Visual Studio improperly parses XML input in certain settings files, aka 'Visual Studio Informati… Visual Studio Patch available Fix from $1,6002019-07-15 MEDIUM 6.5 CVE-2019-1084 An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable characters. An authe… Exchange Server Patch available Fix from $1,6002019-07-15 MEDIUM 6.1 CVE-2019-1075 A spoofing vulnerability exists in ASP.NET Core that could lead to an open redirect, aka 'ASP.NET Core Spoofing Vulnerability'. Asp.net Core Patch available Fix from $1,6002019-07-15 MEDIUM 5.5 CVE-2019-1071 An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosu… Windows 10 Patch available Fix from $1,6002019-07-15 MEDIUM 5.5 CVE-2019-1073 An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosu… Windows 10 Patch available Fix from $1,6002019-07-15 MEDIUM 5.5 CVE-2019-1074 An elevation of privilege vulnerability exists in Microsoft Windows where certain folders, with local service privilege, are vulnerable to symbolic l… Windows 10 Patch available Fix from $1,6002019-07-15 MEDIUM 5.4 CVE-2019-1076 A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Se… Team Foundation Server Patch available Fix from $1,6002019-07-15 MEDIUM 5.0 CVE-2019-1077 An elevation of privilege vulnerability exists when the Visual Studio updater service improperly handles file permissions, aka 'Visual Studio Elevati… Visual Studio 2017 Patch available Fix from $1,6002019-07-15 HIGH 8.8 CVE-2019-1068EPSS 42% A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL… Sql Server Patch available Fix from $1,9502019-07-15 HIGH 7.8 CVE-2019-0999 An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'. Windows 10 Patch available Fix from $1,9502019-07-15 HIGH 7.8 CVE-2019-1067 An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of P… Windows 10 Patch available Fix from $1,9502019-07-15 HIGH 7.5 CVE-2019-1001EPSS 8% A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine M… Chakracore 1.11.11+ Fix from $1,9502019-07-15 HIGH 7.5 CVE-2019-1006EPSS 6% An authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF), allowing signing of SA… .net Framework Patch available Fix from $1,9502019-07-15 HIGH 7.5 CVE-2019-1062EPSS 9% A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scr… Chakracore 1.11.11+ Fix from $1,9502019-07-15 HIGH 7.0 CVE-2019-1037 An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Error Reporting Elevation of Priv… Windows 10 Patch available Fix from $1,9502019-07-15 MEDIUM 6.3 CVE-2019-0975 A security feature bypass vulnerability exists when Active Directory Federation Services (ADFS) improperly updates its list of banned IP addresses. T… Windows Server 2016 Patch available Fix from $1,6002019-07-15 CRITICAL 9.8 CVE-2019-0785EPSS 48% A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP failover serve… Windows Server 2012 Patch available Fix from $2,3002019-07-15 HIGH 8.0 CVE-2019-0887EPSS 71% A remote code execution vulnerability exists in Remote Desktop Services - formerly known as Terminal Services - when an authenticated attacker abuses… Remote Desktop Client 1.2.2691+ Fix from $1,9502019-07-15 HIGH 7.8 CVE-2019-0880 KEV A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnera… Windows 10 1507 Patch available Fix from $1,9502019-07-15 HIGH 7.5 CVE-2019-0811 A denial of service vulnerability exists in Windows DNS Server when it fails to properly handle DNS queries, aka 'Windows DNS Server Denial of Servic… Windows Server 2012 Patch available Fix from $1,9502019-07-15 HIGH 7.5 CVE-2019-0865 A denial of service vulnerability exists when SymCrypt improperly handles a specially crafted digital signature.An attacker could exploit the vulnera… Windows 10 Patch available Fix from $1,9502019-07-15 MEDIUM 6.8 CVE-2019-0966 A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest o… Windows 10 Patch available Fix from $1,6002019-07-15 HIGH 7.8 CVE-2019-1064 KEVEPSS 7% An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links. An attacker who successf… Windows 10 1607 Patch available Fix from $1,9502019-06-12 HIGH 7.8 CVE-2019-1065 An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully explo… Windows 10 Patch available Fix from $1,9502019-06-12 HIGH 7.8 CVE-2019-1069 KEVEPSS 6% An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully … Windows 10 1507 Patch available Fix from $1,9502019-06-12 MEDIUM 6.3 CVE-2019-1053 An elevation of privilege vulnerability exists when the Windows Shell fails to validate folder shortcuts. An attacker who successfully exploited the … Windows 10 Patch available Fix from $1,6002019-06-12