Browse CVEs

MEDIUM 5.5 CVE-2018-8407 An information disclosure vulnerability exists when "Kernel Remote Procedure Call Provider" driver improperly initializes objects in memory, aka "MSR… Windows 10 Patch available Fix from $1,6002018-11-14 MEDIUM 5.5 CVE-2018-8408 An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory, aka "Windows Kernel Information Disc… Windows 10 Patch available Fix from $1,6002018-11-14 MEDIUM 5.5 CVE-2018-8454 An information disclosure vulnerability exists when Windows Audio Service fails to properly handle objects in memory, aka "Windows Audio Service Info… Windows 10 Patch available Fix from $1,6002018-11-14 MEDIUM 5.3 CVE-2018-8417 A security feature bypass vulnerability exists in Microsoft JScript that could allow an attacker to bypass Device Guard, aka "Microsoft JScript Secur… Windows 10 Patch available Fix from $1,6002018-11-14 HIGH 7.8 CVE-2018-8569EPSS 12% A remote code execution vulnerability exists in the Yammer desktop application due to the loading of arbitrary content, aka "Yammer Desktop Applicati… Yammer Patch available Fix from $1,9502018-10-23 HIGH 8.8 CVE-2018-8531EPSS 14% A remote code execution vulnerability exists in the way that Azure IoT Hub Device Client SDK using MQTT protocol accesses objects in memory, aka "Azu… Azure Internet Of Things Edge Patch available Fix from $1,9502018-10-10 MEDIUM 5.5 CVE-2018-8527EPSS 16% An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious XEL file containing a refere… Sql Server Management Studio Patch available Fix from $1,6002018-10-10 MEDIUM 5.5 CVE-2018-8532EPSS 16% An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious XMLA file containing a refer… Sql Server Management Studio Patch available Fix from $1,6002018-10-10 MEDIUM 5.5 CVE-2018-8533EPSS 16% An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing malicious XML content containing a refer… Sql Server Management Studio Patch available Fix from $1,6002018-10-10 HIGH 8.8 CVE-2018-8504EPSS 17% A remote code execution vulnerability exists in Microsoft Word software when the software fails to properly handle objects in Protected View, aka "Mi… Office Patch available Fix from $1,9502018-10-10 HIGH 7.5 CVE-2018-8505EPSS 15% A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scr… Chakracore Patch available Fix from $1,9502018-10-10 HIGH 7.5 CVE-2018-8509EPSS 13% A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnera… Edge Patch available Fix from $1,9502018-10-10 HIGH 7.5 CVE-2018-8510EPSS 15% A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scr… Chakracore Patch available Fix from $1,9502018-10-10 HIGH 7.5 CVE-2018-8511EPSS 15% A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scr… Chakracore Patch available Fix from $1,9502018-10-10 HIGH 7.5 CVE-2018-8513EPSS 15% A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scr… Chakracore Patch available Fix from $1,9502018-10-10 MEDIUM 5.5 CVE-2018-8506 An Information Disclosure vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka "Microsoft Windows Cod… Windows 10 Patch available Fix from $1,6002018-10-10 MEDIUM 5.4 CVE-2018-8512 A security feature bypass vulnerability exists in Microsoft Edge when the Edge Content Security Policy (CSP) fails to properly validate certain speci… Edge Patch available Fix from $1,6002018-10-10 MEDIUM 5.4 CVE-2018-8518 An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affe… Sharepoint Enterprise Server Patch available Fix from $1,6002018-10-10 CRITICAL 9.8 CVE-2018-8500EPSS 17% A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory … Chakracore Patch available Fix from $2,3002018-10-10 HIGH 8.8 CVE-2018-8494EPSS 20% A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote Code Executio… Windows 10 Patch available Fix from $1,9502018-10-10 HIGH 8.8 CVE-2018-8501EPSS 17% A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in Protected View, a… Office Patch available Fix from $1,9502018-10-10 HIGH 8.8 CVE-2018-8502EPSS 19% A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in Protected View, aka "M… Excel Patch available Fix from $1,9502018-10-10 HIGH 7.8 CVE-2018-8497 An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka "Windows Kernel Elevation of Privile… Windows 10 Patch available Fix from $1,9502018-10-10 HIGH 7.5 CVE-2018-8493EPSS 8% An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles fragmented IP packets, aka "Windows TCP/IP Informatio… Windows 10 1507 Patch available Fix from $1,9502018-10-10 HIGH 7.5 CVE-2018-8495EPSS 47% A remote code execution vulnerability exists when Windows Shell improperly handles URIs, aka "Windows Shell Remote Code Execution Vulnerability." Thi… Windows 10 Patch available Fix from $1,9502018-10-10 HIGH 7.5 CVE-2018-8503EPSS 15% A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scr… Chakracore Patch available Fix from $1,9502018-10-10 MEDIUM 5.4 CVE-2018-8498 An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affe… Sharepoint Enterprise Server Patch available Fix from $1,6002018-10-10 HIGH 8.4 CVE-2018-8489 A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a g… Windows 10 Patch available Fix from $1,9502018-10-10 HIGH 8.4 CVE-2018-8490 A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a g… Windows 10 Patch available Fix from $1,9502018-10-10 HIGH 7.8 CVE-2018-8484 An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX G… Windows 10 Patch available Fix from $1,9502018-10-10