Browse CVEs

MEDIUM 5.5 CVE-2018-8309 A denial of service vulnerability exists when Windows improperly handles objects in memory, aka "Windows Denial of Service Vulnerability." This affec… Windows 10 Patch available Fix from $1,6002018-07-11 MEDIUM 5.5 CVE-2018-8356 A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates, aka ".NET Framework S… .net Framework Patch available Fix from $1,6002018-07-11 MEDIUM 5.4 CVE-2018-8323 An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affe… Sharepoint Enterprise Server Patch available Fix from $1,6002018-07-11 MEDIUM 5.4 CVE-2018-8326 A cross-site-scripting (XSS) vulnerability exists when an open source customization for Microsoft Active Directory Federation Services (AD FS) does n… Web Customizations 0.1+ Fix from $1,6002018-07-11 HIGH 8.8 CVE-2018-8300EPSS 12% A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, ak… Sharepoint Enterprise Server Patch available Fix from $1,9502018-07-11 HIGH 8.1 CVE-2018-8284EPSS 39% A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka ".NET Framework Remote Code Inje… .net Framework Patch available Fix from $1,9502018-07-11 HIGH 7.8 CVE-2018-8281EPSS 18% A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka "Microsof… Office Patch available Fix from $1,9502018-07-11 HIGH 7.8 CVE-2018-8282 An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka "Win32k… Windows 10 Mitigation only Fix from $1,9502018-07-11 HIGH 7.5 CVE-2018-8280EPSS 19% A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scr… Edge after 1.10.0 Fix from $1,9502018-07-11 HIGH 7.5 CVE-2018-8283EPSS 14% A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory … Chakracore 1.10.1+ Fix from $1,9502018-07-11 HIGH 7.5 CVE-2018-8286EPSS 19% A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scr… Edge after 1.10.0 Fix from $1,9502018-07-11 HIGH 7.5 CVE-2018-8287EPSS 17% A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine M… Internet Explorer 1.10.1+ Fix from $1,9502018-07-11 HIGH 7.5 CVE-2018-8288EPSS 63% A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine M… Internet Explorer 1.10.1+ Fix from $1,9502018-07-11 HIGH 7.5 CVE-2018-8290EPSS 19% A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scr… Edge after 1.10.0 Fix from $1,9502018-07-11 HIGH 7.5 CVE-2018-8291EPSS 63% A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine M… Internet Explorer 1.10.1+ Fix from $1,9502018-07-11 HIGH 7.5 CVE-2018-8294EPSS 19% A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scr… Edge after 1.10.0 Fix from $1,9502018-07-11 HIGH 7.5 CVE-2018-8298 KEVEPSS 75% A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory … Chakracore 1.10.1+ Fix from $1,9502018-07-11 HIGH 7.5 CVE-2018-8301EPSS 13% A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnera… Edge Patch available Fix from $1,9502018-07-11 MEDIUM 6.6 CVE-2018-8308 An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Elevation of P… Windows 10 Patch available Fix from $1,6002018-07-11 MEDIUM 6.5 CVE-2018-8305EPSS 6% An information disclosure vulnerability exists in Windows Mail Client when a message is opened, aka "Windows Mail Client Information Disclosure Vulne… Windows Calendar Mitigation only Fix from $1,6002018-07-11 MEDIUM 5.9 CVE-2018-8304EPSS 12% A denial of service vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it fails to properly handle DNS responses, aka "Windows … Windows 10 Patch available Fix from $1,6002018-07-11 MEDIUM 5.5 CVE-2018-8306 A command injection vulnerability exists in the Microsoft Wireless Display Adapter (MWDA) when the Microsoft Wireless Display Adapter does not proper… Wireless Display Adapter Firmware Patch available Fix from $1,6002018-07-11 MEDIUM 5.4 CVE-2018-8299 An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affe… Sharepoint Enterprise Server Patch available Fix from $1,6002018-07-11 MEDIUM 5.3 CVE-2018-8307 A security feature bypass vulnerability exists when Microsoft WordPad improperly handles embedded OLE objects, aka "WordPad Security Feature Bypass V… Windows 10 Patch available Fix from $1,6002018-07-11 HIGH 8.8 CVE-2018-8260EPSS 14% A Remote Code Execution vulnerability exists in .NET software when the software fails to check the source markup of a file, aka ".NET Framework Remot… .net Framework Mitigation only Fix from $1,9502018-07-11 HIGH 7.8 CVE-2018-8172EPSS 31% A remote code execution vulnerability exists in Visual Studio software when the software does not check the source markup of a file for an unbuilt pr… Expression Blend Patch available Fix from $1,9502018-07-11 HIGH 7.8 CVE-2018-8202 An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privilege level, aka ".NET Framework … .net Framework Patch available Fix from $1,9502018-07-11 HIGH 7.8 CVE-2018-8232 A Tampering vulnerability exists when Microsoft Macro Assembler improperly validates code, aka "Microsoft Macro Assembler Tampering Vulnerability." T… Visual Studio 2017 Patch available Fix from $1,9502018-07-11 HIGH 7.8 CVE-2018-8238EPSS 5% A security feature bypass vulnerability exists when Skype for Business or Lync do not properly parse UNC path links shared via messages, aka "Skype f… Lync Patch available Fix from $1,9502018-07-11 HIGH 7.5 CVE-2018-8125EPSS 18% A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnera… Edge Patch available Fix from $1,9502018-07-11