Browse CVEs

HIGH 7.5 CVE-2019-0548EPSS 8% A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This … Asp.net Core Patch available Fix from $1,9502019-01-08 MEDIUM 5.5 CVE-2019-0536 An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosu… Windows 10 Patch available Fix from $1,6002019-01-08 MEDIUM 5.5 CVE-2019-0537EPSS 5% An information disclosure vulnerability exists when Visual Studio improperly discloses arbitrary file contents if the victim opens a malicious .vscon… Visual Studio Patch available Fix from $1,6002019-01-08 MEDIUM 5.5 CVE-2019-0549 An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosu… Windows 10 Patch available Fix from $1,6002019-01-08 MEDIUM 5.5 CVE-2019-0553 An information disclosure vulnerability exists when Windows Subsystem for Linux improperly handles objects in memory, aka "Windows Subsystem for Linu… Windows 10 Patch available Fix from $1,6002019-01-08 MEDIUM 5.5 CVE-2019-0554 An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosu… Windows 10 Patch available Fix from $1,6002019-01-08 HIGH 7.5 CVE-2018-8653 KEVEPSS 24% A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engi… Internet Explorer Patch available Fix from $1,9502018-12-20 MEDIUM 5.4 CVE-2018-8650 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an a… Sharepoint Enterprise Server Patch available Fix from $1,6002018-12-12 MEDIUM 5.4 CVE-2018-8651 A cross site scripting vulnerability exists when Microsoft Dynamics NAV does not properly sanitize a specially crafted web request to an affected Dyn… Dynamics Nav Patch available Fix from $1,6002018-12-12 MEDIUM 5.4 CVE-2018-8652 A Cross-site Scripting (XSS) vulnerability exists when Windows Azure Pack does not properly sanitize user-provided input, aka "Windows Azure Pack Cro… Windows Azure Pack Rollup Patch available Fix from $1,6002018-12-12 CRITICAL 9.8 CVE-2018-8626EPSS 35% A remote code execution vulnerability exists in Windows Domain Name System (DNS) servers when they fail to properly handle requests, aka "Windows DNS… Windows 10 Patch available Fix from $2,3002018-12-12 HIGH 8.8 CVE-2018-8634EPSS 14% A remote code execution vulnerability exists in Windows where Microsoft text-to-speech fails to properly handle objects in the memory, aka "Microsoft… Windows 10 Patch available Fix from $1,9502018-12-12 HIGH 8.8 CVE-2018-8635EPSS 5% An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted authentication request… Sharepoint Enterprise Server Patch available Fix from $1,9502018-12-12 HIGH 7.8 CVE-2018-8628EPSS 15% A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka "Micr… Office Patch available Fix from $1,9502018-12-12 HIGH 7.8 CVE-2018-8636EPSS 15% A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft… Excel Patch available Fix from $1,9502018-12-12 HIGH 7.8 CVE-2018-8639 KEVEPSS 22% An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation… Windows 10 1507 Patch available Fix from $1,9502018-12-12 HIGH 7.8 CVE-2018-8641 An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka "Win32k… Windows 10 Patch available Fix from $1,9502018-12-12 HIGH 7.5 CVE-2018-8617EPSS 53% A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scr… Chakracore Patch available Fix from $1,9502018-12-12 HIGH 7.5 CVE-2018-8618EPSS 11% A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scr… Chakracore Patch available Fix from $1,9502018-12-12 HIGH 7.5 CVE-2018-8624EPSS 13% A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scr… Chakracore Patch available Fix from $1,9502018-12-12 HIGH 7.5 CVE-2018-8629EPSS 20% A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scr… Chakracore Patch available Fix from $1,9502018-12-12 MEDIUM 5.5 CVE-2018-8622 An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosu… Windows 7 Patch available Fix from $1,6002018-12-12 MEDIUM 5.5 CVE-2018-8627EPSS 6% An information disclosure vulnerability exists when Microsoft Excel software reads out of bound memory due to an uninitialized variable, which could … Excel Patch available Fix from $1,6002018-12-12 MEDIUM 5.5 CVE-2018-8637 An information disclosure vulnerability exists in Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Add… Windows 10 Patch available Fix from $1,6002018-12-12 MEDIUM 5.5 CVE-2018-8638 An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Information Disclosure Vulnerability."… Windows 10 Patch available Fix from $1,6002018-12-12 MEDIUM 5.5 CVE-2018-8649 A denial of service vulnerability exists when Windows improperly handles objects in memory, aka "Windows Denial of Service Vulnerability." This affec… Windows 10 Patch available Fix from $1,6002018-12-12 CRITICAL 9.8 CVE-2018-8540EPSS 21% A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka ".NET Framework Remote Code Inje… .net Framework Patch available Fix from $2,3002018-12-12 HIGH 7.8 CVE-2018-8587EPSS 30% A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook… Office Patch available Fix from $1,9502018-12-12 HIGH 7.8 CVE-2018-8597EPSS 15% A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft… Excel Patch available Fix from $1,9502018-12-12 HIGH 7.8 CVE-2018-8599 An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations, a… Visual Studio Patch available Fix from $1,9502018-12-12