Microsoft Corporation vulnerabilities
836 vulnerabilities
Known vulnerabilities in Microsoft Corporation products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 184 products.
Products
50 of 184- Microsoft Edge90 vulnerabilities
- Microsoft Windows63 vulnerabilities
- Internet Explorer46 vulnerabilities
- Microsoft Office45 vulnerabilities
- Windows Kernel41 vulnerabilities
- Chakracore, Microsoft Edge40 vulnerabilities
- Windows33 vulnerabilities
- Windows Uniscribe30 vulnerabilities
- Browser20 vulnerabilities
- Microsoft Scripting Engine18 vulnerabilities
- Microsoft Sharepoint17 vulnerabilities
- Windows Hyper V17 vulnerabilities
- Office14 vulnerabilities
- Edge13 vulnerabilities
- Equation Editor12 vulnerabilities
- Hyper V12 vulnerabilities
- Windows GDI+11 vulnerabilities
- Asp.Net Core9 vulnerabilities
- Microsoft Edge, Chakracore9 vulnerabilities
- Chakracore8 vulnerabilities
- Win32K8 vulnerabilities
- Windows 10 Gold, 1511, 1607, And 1703, And Windows Server 20168 vulnerabilities
- Internet Explorer, Microsoft Edge7 vulnerabilities
- Malware Protection Engine7 vulnerabilities
- Server Message Block 1.07 vulnerabilities
- Microsoft Browsers6 vulnerabilities
- Microsoft Graphics Component6 vulnerabilities
- Windows Graphics Component6 vulnerabilities
- Chakracore, Microsoft Edge, Internet Explorer5 vulnerabilities
- Device Guard5 vulnerabilities
- Microsoft Outlook5 vulnerabilities
- Graphics4 vulnerabilities
- Microsoft Malware Protection Engine4 vulnerabilities
- Microsoft Server Message Block 1.04 vulnerabilities
- Uniscribe4 vulnerabilities
- Windows Kernel Mode Drivers4 vulnerabilities
- Windows Shell4 vulnerabilities
- Windows Subsystem For Linux4 vulnerabilities
- Exchange Server3 vulnerabilities
- Git3 vulnerabilities
- Microsoft Chakracore3 vulnerabilities
- Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 Cu16, And Exchange Server 2016 CU5.3 vulnerabilities
- Microsoft JET Database Engine3 vulnerabilities
- Microsoft Sharepoint Enterprise Server3 vulnerabilities
- Microsoft Windows Embedded Opentype (Eot) Font Engine3 vulnerabilities
- Server Block Message 1.03 vulnerabilities
- Server Block Message (Smb)3 vulnerabilities
- Windows COM3 vulnerabilities
- Windows PDF3 vulnerabilities
- Windows Search3 vulnerabilities
CVE-2018-1038microsoft corporationwindows+2
EPSS score8.51%
The Windows kernel in Windows 7 SP1 and Windows Server 2008 R2 SP1 allows an elevation of privilege vulnerability due to the way it handles objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability."CVE-2018-0745microsoft corporationwindows kernel+2EPSS score2.87%
The Windows kernel in Windows 10 version 1703. Windows 10 version 1709, and Windows Server, version 1709 allows an information disclosure vulnerability due to the way objects are handled in memory, aka "Windows Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0746 and CVE-2018-0747.CVE-2018-0837microsoft corporationmicrosoft edge, chakracore+3EPSS score65.31%
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834, CVE-2018-0835, CVE-2018-0836, CVE-2018-0838, CVE-2018-0840, CVE-2018-0856, CVE-2018-0857, CVE-2018-0858, CVE-2018-0859, CVE-2018-0860, CVE-2018-0861, and CVE-2018-0866.CVE-2018-0821microsoft corporationappcontainer+2EPSS score2.30%
AppContainer in Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way constrained impersonations are handled, aka "Windows AppContainer Elevation Of Privilege Vulnerability".CVE-2018-0869microsoft corporationsharepoint server+1EPSS score2.19%
SharePoint Server 2016 allows an elevation of privilege vulnerability due to how web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability".CVE-2018-0795microsoft corporationmicrosoft office+2EPSS score19.27%
Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Office Remote Code Execution Vulnerability".CVE-2018-0788microsoft corporationwindows adobe type manager font driver (atmfd.dll)+2EPSS score1.12%
The Windows Adobe Type Manager Font Driver (Atmfd.dll) in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 and R2 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "OpenType Font Driver Elevation of Privilege Vulnerability".CVE-2018-0925microsoft corporationchakracore+2EPSS score11.44%
ChakraCore allows remote code execution, due to how the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0876, CVE-2018-0889, CVE-2018-0893, and CVE-2018-0935.CVE-2018-0752microsoft corporationwindows kernel+4EPSS score2.77%
The Windows Kernel API in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way the Kernel API enforces permissions, aka "Windows Elevation of Privilege Vulnerability". This CVE ID is unique from CVE-2018-0751.CVE-2018-0806microsoft corporationequation editor+3EPSS score24.50%
Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Remote Code Execution Vulnerability". This CVE is unique from CVE-2018-0804, CVE-2018-0805, and CVE-2018-0807.CVE-2018-0885microsoft corporationmicrosoft hyper-v network switch+5EPSS score5.28%
The Microsoft Hyper-V Network Switch in 64-bit versions of Microsoft Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows a denial of service vulnerability due to how input from a privileged user on a guest operating system is validated, aka "Hyper-V Denial of Service Vulnerability".CVE-2018-0800microsoft corporationmicrosoft edge+2EPSS score6.66%
Microsoft Edge in Microsoft Windows 10 1709 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0767 and CVE-2018-0780.CVE-2018-0851microsoft corporationmicrosoft office+3EPSS score19.11%
Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run (C2R) allow a remote code execution vulnerability, due to how Office handles objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE is unique from CVE-2018-0852.CVE-2018-0791microsoft corporationmicrosoft outlook+2EPSS score20.57%
Microsoft Outlook 2007, Microsoft Outlook 2010, Microsoft Outlook 2013, and Microsoft Outlook 2016 allow a remote code execution vulnerability due to the way email messages are parsed, aka "Microsoft Outlook Remote Code Execution Vulnerability". This CVE is unique from CVE-2018-0793.CVE-2018-0880microsoft corporationwindows desktop bridge+3EPSS score3.06%
The Desktop Bridge in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how the virtual registry is managed, aka "Windows Desktop Bridge Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0882.CVE-2018-0777microsoft corporationmicrosoft edge+2EPSS score78.43%
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762, CVE-2018-0768, CVE-2018-0769, CVE-2018-0770, CVE-2018-0772, CVE-2018-0773, CVE-2018-0774, CVE-2018-0775, CVE-2018-0776, CVE-2018-0778, and CVE-2018-0781.CVE-2018-0746microsoft corporationwindows kernel+3EPSS score4.08%
The Windows kernel in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way memory addresses are handled, aka "Windows Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0745 and CVE-2018-0747.CVE-2018-0741microsoft corporationcolor management module (icm32.dll)+1EPSS score7.23%
The Color Management Module (Icm32.dll) in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an information disclosure vulnerability due to the way objects are handled in memory, aka "Microsoft Color Management Information Disclosure Vulnerability".CVE-2018-0742microsoft corporationwindows+5EPSS score1.24%
The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows Kernel Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0756. CVE-2018-0809, CVE-2018-0820 and CVE-2018-0843.CVE-2018-0784microsoft corporationasp.net core+1EPSS score6.50%
ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to the ASP.NET Core project templates, aka "ASP.NET Core Elevation Of Privilege Vulnerability". This CVE is unique from CVE-2018-0808.