Browse CVEs

HIGH 7.8 CVE-2018-8577EPSS 17% A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft… Excel Patch available Fix from $1,9502018-11-14 HIGH 7.5 CVE-2018-8551EPSS 14% A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scr… Chakracore Patch available Fix from $1,9502018-11-14 HIGH 7.5 CVE-2018-8555EPSS 14% A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scr… Chakracore Patch available Fix from $1,9502018-11-14 HIGH 7.5 CVE-2018-8556EPSS 14% A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scr… Chakracore Patch available Fix from $1,9502018-11-14 HIGH 7.5 CVE-2018-8557EPSS 14% A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scr… Chakracore Patch available Fix from $1,9502018-11-14 HIGH 7.4 CVE-2018-8581 KEVEPSS 27% An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability." Th… Exchange Server Patch available Fix from $1,9502018-11-14 MEDIUM 6.5 CVE-2018-8558 An information disclosure vulnerability exists when Microsoft Outlook fails to respect "Default link type" settings configured via the SharePoint Onl… Office Patch available Fix from $1,6002018-11-14 MEDIUM 6.5 CVE-2018-8579EPSS 6% An information disclosure vulnerability exists when attaching files to Outlook messages, aka "Microsoft Outlook Information Disclosure Vulnerability.… Office Patch available Fix from $1,6002018-11-14 MEDIUM 5.5 CVE-2018-8549 A security feature bypass exists when Windows incorrectly validates kernel driver signatures, aka "Windows Security Feature Bypass Vulnerability." Th… Windows 10 Patch available Fix from $1,6002018-11-14 MEDIUM 5.5 CVE-2018-8563 An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Information Disclosure Vulnerability."… Windows 7 Patch available Fix from $1,6002018-11-14 MEDIUM 5.5 CVE-2018-8565 An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka "Win32k Information Disclosure V… Windows 10 Patch available Fix from $1,6002018-11-14 MEDIUM 5.4 CVE-2018-8547 A cross-site-scripting (XSS) vulnerability exists when an open source customization for Microsoft Active Directory Federation Services (AD FS) does n… Windows 10 Patch available Fix from $1,6002018-11-14 MEDIUM 5.4 CVE-2018-8567 An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to … Edge Patch available Fix from $1,6002018-11-14 MEDIUM 5.4 CVE-2018-8568 An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affe… Sharepoint Enterprise Server Patch available Fix from $1,6002018-11-14 MEDIUM 5.4 CVE-2018-8572 An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affe… Sharepoint Enterprise Server Patch available Fix from $1,6002018-11-14 CRITICAL 9.8 CVE-2018-8476EPSS 60% A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in memory, aka "Windows Deployme… Windows Server 2008 Patch available Fix from $2,3002018-11-14 HIGH 8.8 CVE-2018-8256EPSS 20% A remote code execution vulnerability exists when PowerShell improperly handles specially crafted files, aka "Microsoft PowerShell Remote Code Execut… Microsoft.powershell.archive Patch available Fix from $1,9502018-11-14 HIGH 8.8 CVE-2018-8450EPSS 15% A remote code execution vulnerability exists when Windows Search handles objects in memory, aka "Windows Search Remote Code Execution Vulnerability."… Windows 10 Patch available Fix from $1,9502018-11-14 HIGH 8.8 CVE-2018-8544EPSS 41% A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code … Windows 10 Patch available Fix from $1,9502018-11-14 HIGH 7.8 CVE-2018-8415 A tampering vulnerability exists in PowerShell that could allow an attacker to execute unlogged code, aka "Microsoft PowerShell Tampering Vulnerabili… Powershell Core Patch available Fix from $1,9502018-11-14 HIGH 7.8 CVE-2018-8471 An elevation of privilege vulnerability exists in the way that the Microsoft RemoteFX Virtual GPU miniport driver handles objects in memory, aka "Mic… Windows 10 Patch available Fix from $1,9502018-11-14 HIGH 7.8 CVE-2018-8485 An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Elevation of Privilege Vulnerability."… Windows 10 Patch available Fix from $1,9502018-11-14 HIGH 7.8 CVE-2018-8522EPSS 17% A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook… Office Patch available Fix from $1,9502018-11-14 HIGH 7.8 CVE-2018-8524EPSS 17% A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook… Office Patch available Fix from $1,9502018-11-14 HIGH 7.8 CVE-2018-8539EPSS 17% A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remot… Office Patch available Fix from $1,9502018-11-14 HIGH 7.5 CVE-2018-8541EPSS 14% A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scr… Chakracore Patch available Fix from $1,9502018-11-14 HIGH 7.5 CVE-2018-8542EPSS 14% A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scr… Chakracore Patch available Fix from $1,9502018-11-14 HIGH 7.5 CVE-2018-8543EPSS 14% A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scr… Chakracore Patch available Fix from $1,9502018-11-14 MEDIUM 6.5 CVE-2018-8416EPSS 7% A tampering vulnerability exists when .NET Core improperly handles specially crafted files, aka ".NET Core Tampering Vulnerability." This affects .NE… Asp.net Core Patch available Fix from $1,6002018-11-14 MEDIUM 5.9 CVE-2018-8546EPSS 6% A denial of service vulnerability exists in Skype for Business, aka "Microsoft Skype for Business Denial of Service Vulnerability." This affects Offi… Lync Patch available Fix from $1,6002018-11-14