Microsoft
microsoft
17,767 CVEs • 1,093 products
Products (1,093)
Click to collapseToggle
Products (1,093)
Click to collapse
CVEs (17,767)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
Buffer overflow in the dvwssr.dll DLL in Microsoft Visual Interdev 1.0 allows users to cause a denial of service or execute commands, aka the "Link View Server-Side Component" vulnerability. |
The default permissions for the Cryptography\Offload registry key used by the OffloadModExpo in Windows NT 4.0 allows local users to obtain compromise the cryptographic keys of other users. |
1Microsoft 2Internet Information Server Internet Information ServicesApr 16, 2026 Apr 12, 2000 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IIS 4.0 and 5.0 allows remote attackers to cause a denial of service by sending many URLs with a large number of escaped characters, aka the "Myriad Escaped Characters" Vulnerability. |
After an unattended installation of Windows NT 4.0, an installation file could include sensitive information such as the local Administrator password. |
The unattended installation of Windows 2000 with the OEMPreinstall option sets insecure permissions for the All Users and Default Users directories. |
Microsoft Excel 97 and 2000 does not warn the user when executing Excel Macro Language (XLM) macros in external text files, which could allow an attacker to execute a macro virus, aka the "XLM Text Macro" vulnerability. |
Microsoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename in the CiWebHitsFile argument to the null.htw URL. |
1Microsoft 6Commercial Internet System Internet Information ServerInternet Information Services+3 moreApr 16, 2026 Mar 30, 2000 N/A· v4 N/A· v3 5.0 MEDIUM· v2 IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote attackers to read the source code of ASP and other files, aka the "Virtualized UNC...Show more |
1Microsoft 3Terminal Server Windows 2000Windows NtApr 16, 2026 Mar 30, 2000 N/A· v4 N/A· v3 2.1 LOW· v2 Microsoft TCP/IP Printing Services, aka Print Services for Unix, allows an attacker to cause a denial of service via a malformed TCP/IP print request. |
1Microsoft 1Internet Information Server Apr 16, 2026 Mar 20, 2000 N/A· v4 N/A· v3 5.0 MEDIUM· v2 IIS 4.0 allows attackers to cause a denial of service by requesting a large buffer in a POST or PUT command which consumes memory, aka the "Chunked Transfer Encoding Buffer Overflow Vulnerability." |
1Microsoft 1Windows Media Rights Manager Apr 16, 2026 Mar 17, 2000 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Microsoft Windows Media License Manager allows remote attackers to cause a denial of service by sending a malformed request that causes the manager to halt, aka the "Malformed Media License Request" Vulnerability. |
When a new SQL Server is registered in Enterprise Manager for Microsoft SQL Server 7.0 and the "Always prompt for login name and password" option is not set, then the Enterprise Manager uses weak encryption to store the...Show more |
Microsoft SQL Server 7.0 and Microsoft Data Engine (MSDE) 1.0 allow remote attackers to gain privileges via a malformed Select statement in an SQL query. |
1Microsoft 3Clip Art GreetingsHome PublishingApr 16, 2026 Mar 6, 2000 N/A· v4 N/A· v3 5.1 MEDIUM· v2 Buffer overflow in Microsoft Clip Art Gallery allows remote attackers to cause a denial of service or execute commands via a malformed CIL (clip art library) file, aka the "Clip Art Buffer Overrun" vulnerability. |
1Microsoft 3Windows 95 Windows 98Windows 98seApr 16, 2026 Mar 4, 2000 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Microsoft Windows 9x operating systems allow an attacker to cause a denial of service via a pathname that includes file device names, aka the "DOS Device in Path Name" vulnerability. |
The window.showHelp() method in Internet Explorer 5.x does not restrict HTML help files (.chm) to be executed from the local host, which allows remote attackers to execute arbitrary commands via Microsoft Networking. |
1Microsoft 3Exchange Server OutlookWindows MessagingApr 16, 2026 Feb 29, 2000 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Microsoft email clients in Outlook, Exchange, and Windows Messaging automatically respond to Read Receipt and Delivery Receipt tags, which could allow an attacker to flood a mail system with responses by forging a Read R...Show more |
The Windows Media server allows remote attackers to cause a denial of service via a series of client handshake packets that are sent in an improper sequence, aka the "Misordered Windows Media Services Handshake" vulnerab...Show more |
1Microsoft 3Ie Internet ExplorerOutlookApr 16, 2026 Feb 21, 2000 N/A· v4 N/A· v3 7.6 HIGH· v2 The Microsoft Active Setup ActiveX component in Internet Explorer 4.x and 5.x allows a remote attacker to install software components without prompting the user by stating that the software's manufacturer is Microsoft. |
1Microsoft 3Ie Internet ExplorerVisual StudioApr 16, 2026 Feb 18, 2000 N/A· v4 N/A· v3 5.1 MEDIUM· v2 The Microsoft virtual machine (VM) in Internet Explorer 4.x and 5.x allows a remote attacker to read files via a malicious Java applet that escapes the Java sandbox, aka the "VM File Reading" vulnerability. |