← Back

Microsoft

microsoft

14,981 CVEs • 1,052 products

Products (1,052)

Click to collapse
Toggle
Windows Server 2016
windows_server_2016
4,925 CVEs
Windows Server 2019
windows_server_2019
4,739 CVEs
Windows Server 2012
windows_server_2012
4,072 CVEs
Windows Server 2008
windows_server_2008
3,554 CVEs
Windows Server 2022
windows_server_2022
3,128 CVEs
Windows 10
windows_10
2,974 CVEs
Windows 7
windows_7
2,368 CVEs
Windows 10 21h2
windows_10_21h2
2,336 CVEs
Windows 10 22h2
windows_10_22h2
2,334 CVEs
Windows 10 1809
windows_10_1809
2,325 CVEs
Windows 8.1
windows_8.1
2,216 CVEs
Windows Rt 8.1
windows_rt_8.1
2,020 CVEs
Windows 10 1607
windows_10_1607
1,974 CVEs
Windows 11 24h2
windows_11_24h2
1,718 CVEs
Windows Server 2025
windows_server_2025
1,690 CVEs
Windows Server 2022 23h2
windows_server_2022_23h2
1,676 CVEs
Windows 11 23h2
windows_11_23h2
1,673 CVEs
Windows 11 22h2
windows_11_22h2
1,652 CVEs
Internet Explorer
internet_explorer
1,635 CVEs
Windows 10 1507
windows_10_1507
1,230 CVEs
Office
office
1,034 CVEs
Windows 11 21h2
windows_11_21h2
1,001 CVEs
Windows 11 25h2
windows_11_25h2
986 CVEs
Windows Vista
windows_vista
828 CVEs
Edge
edge
758 CVEs
Windows Xp
windows_xp
739 CVEs
Windows 11 26h1
windows_11_26h1
699 CVEs
365 Apps
365_apps
576 CVEs
Windows 11
windows_11
573 CVEs
Sharepoint Server
sharepoint_server
549 CVEs
Windows 2000
windows_2000
515 CVEs
Windows Server 2003
windows_server_2003
456 CVEs
Excel
excel
446 CVEs
Windows 2003 Server
windows_2003_server
405 CVEs
Office Long Term Servicing Channel
office_long_term_servicing_channel
368 CVEs
Edge Chromium
edge_chromium
292 CVEs
Windows 10 20h2
windows_10_20h2
283 CVEs
Windows Server
windows_server
273 CVEs
Word
word
269 CVEs
Windows Nt
windows_nt
267 CVEs
Sharepoint Enterprise Server
sharepoint_enterprise_server
256 CVEs
Chakracore
chakracore
255 CVEs
Windows 8
windows_8
254 CVEs
Exchange Server
exchange_server
235 CVEs
Office Online Server
office_online_server
233 CVEs
Sharepoint Foundation
sharepoint_foundation
226 CVEs
Windows Rt
windows_rt
216 CVEs
Office Compatibility Pack
office_compatibility_pack
206 CVEs
Ie
ie
200 CVEs
.net Framework
.net_framework
183 CVEs
Sql Server 2019
sql_server_2019
142 CVEs
Excel Viewer
excel_viewer
125 CVEs
Visual Studio 2022
visual_studio_2022
123 CVEs
Outlook
outlook
120 CVEs
Visual Studio 2019
visual_studio_2019
118 CVEs
Sql Server 2022
sql_server_2022
114 CVEs
Sql Server
sql_server
108 CVEs
Internet Information Server
internet_information_server
107 CVEs
Office Web Apps
office_web_apps
106 CVEs
Office 2024
office_2024
106 CVEs
Office 2021
office_2021
105 CVEs
Sql Server 2017
sql_server_2017
101 CVEs
Dynamics 365
dynamics_365
99 CVEs
Sql Server 2016
sql_server_2016
99 CVEs
Office 2019
office_2019
98 CVEs
Microsoft 365
microsoft_365
98 CVEs
.net
93 CVEs
Visual Studio 2017
visual_studio_2017
92 CVEs
Internet Information Services
internet_information_services
91 CVEs
Windows 98
windows_98
87 CVEs
Word Viewer
word_viewer
87 CVEs
Office 365 Proplus
office_365_proplus
84 CVEs
Windows 10 21h1
windows_10_21h1
83 CVEs
Open Xml File Format Converter
open_xml_file_format_converter
81 CVEs
Powerpoint
powerpoint
79 CVEs
Windows
windows
76 CVEs
Visual Studio Code
visual_studio_code
68 CVEs
Windows 98se
windows_98se
62 CVEs
Office Web Apps Server
office_web_apps_server
62 CVEs
Works
works
59 CVEs
Windows Me
windows_me
58 CVEs
Visual Studio
visual_studio
56 CVEs
Visio
visio
54 CVEs
Windows Media Player
windows_media_player
53 CVEs
Windows Server 20h2
windows_server_20h2
52 CVEs
365 Copilot
365_copilot
52 CVEs
Windows 10 1909
windows_10_1909
47 CVEs
Windows 95
windows_95
46 CVEs
Outlook Express
outlook_express
45 CVEs
Windows 10 1803
windows_10_1803
45 CVEs
Azure Site Recovery Vmware To Azure
azure_site_recovery_vmware_to_azure
44 CVEs
Publisher
publisher
43 CVEs
Lync
lync
43 CVEs
Office Word Viewer
office_word_viewer
42 CVEs
Windows 10 1709
windows_10_1709
41 CVEs
Azure Devops Server
azure_devops_server
40 CVEs
Asp.net Core
asp.net_core
39 CVEs
Office 2016
office_2016
38 CVEs
Azure Site Recovery
azure_site_recovery
37 CVEs
Windows Server 1803
windows_server_1803
35 CVEs

CVEs (14,981)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-0974
1Microsoft
7Windows 10
Windows 7Windows 8.1+4 more
Nov 21, 2024
Apr 12, 2018
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel...Show more
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0887, CVE-2018-0960, CVE-2018-0968, CVE-2018-0969, CVE-2018-0970, CVE-2018-0971, CVE-2018-0972, CVE-2018-0973, CVE-2018-0975.Show less
CVE-2018-0973
1Microsoft
7Windows 10
Windows 7Windows 8.1+4 more
Nov 21, 2024
Apr 12, 2018
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel...Show more
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0887, CVE-2018-0960, CVE-2018-0968, CVE-2018-0969, CVE-2018-0970, CVE-2018-0971, CVE-2018-0972, CVE-2018-0974, CVE-2018-0975.Show less
CVE-2018-0972
1Microsoft
7Windows 10
Windows 7Windows 8.1+4 more
Nov 21, 2024
Apr 12, 2018
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel...Show more
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0887, CVE-2018-0960, CVE-2018-0968, CVE-2018-0969, CVE-2018-0970, CVE-2018-0971, CVE-2018-0973, CVE-2018-0974, CVE-2018-0975.Show less
CVE-2018-0971
1Microsoft
7Windows 10
Windows 7Windows 8.1+4 more
Nov 21, 2024
Apr 12, 2018
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel...Show more
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0887, CVE-2018-0960, CVE-2018-0968, CVE-2018-0969, CVE-2018-0970, CVE-2018-0972, CVE-2018-0973, CVE-2018-0974, CVE-2018-0975.Show less
CVE-2018-0970
1Microsoft
7Windows 10
Windows 7Windows 8.1+4 more
Nov 21, 2024
Apr 12, 2018
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel...Show more
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0887, CVE-2018-0960, CVE-2018-0968, CVE-2018-0969, CVE-2018-0971, CVE-2018-0972, CVE-2018-0973, CVE-2018-0974, CVE-2018-0975.Show less
CVE-2018-0969
1Microsoft
7Windows 10
Windows 7Windows 8.1+4 more
Nov 21, 2024
Apr 12, 2018
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel...Show more
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0887, CVE-2018-0960, CVE-2018-0968, CVE-2018-0970, CVE-2018-0971, CVE-2018-0972, CVE-2018-0973, CVE-2018-0974, CVE-2018-0975.Show less
CVE-2018-0968
1Microsoft
7Windows 10
Windows 7Windows 8.1+4 more
Nov 21, 2024
Apr 12, 2018
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel...Show more
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0887, CVE-2018-0960, CVE-2018-0969, CVE-2018-0970, CVE-2018-0971, CVE-2018-0972, CVE-2018-0973, CVE-2018-0974, CVE-2018-0975.Show less
CVE-2018-0967
1Microsoft
7Windows 10
Windows 7Windows 8.1+4 more
Nov 21, 2024
Apr 12, 2018
N/A· v4
5.3 MEDIUM· v3
6.3 MEDIUM· v2
A denial of service vulnerability exists in the way that Windows SNMP Service handles malformed SNMP traps, aka "Windows SNMP Service Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Wind...Show more
A denial of service vulnerability exists in the way that Windows SNMP Service handles malformed SNMP traps, aka "Windows SNMP Service Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.Show less
CVE-2018-0966
1Microsoft
2Windows 10
Windows Server 2016
Nov 21, 2024
Apr 12, 2018
N/A· v4
3.3 LOW· v3
2.1 LOW· v2
A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka "Device Guard Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.
CVE-2018-0964
1Microsoft
2Windows 10
Windows Server 2016
Nov 21, 2024
Apr 12, 2018
N/A· v4
6.1 MEDIUM· v3
1.9 LOW· v2
An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Information Disclosure...Show more
An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Information Disclosure Vulnerability." This affects Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0957.Show less
CVE-2018-0963
1Microsoft
2Windows 10
Windows Server 2016
Nov 21, 2024
Apr 12, 2018
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Window...Show more
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.Show less
CVE-2018-0960
1Microsoft
7Windows 10
Windows 7Windows 8.1+4 more
Nov 21, 2024
Apr 12, 2018
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Wind...Show more
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0887, CVE-2018-0968, CVE-2018-0969, CVE-2018-0970, CVE-2018-0971, CVE-2018-0972, CVE-2018-0973, CVE-2018-0974, CVE-2018-0975.Show less
CVE-2018-0957
1Microsoft
5Windows 10
Windows 8.1Windows Rt 8.1+2 more
Nov 21, 2024
Apr 12, 2018
N/A· v4
5.3 MEDIUM· v3
1.9 LOW· v2
An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Information Disclosure...Show more
An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Information Disclosure Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0964.Show less
CVE-2018-0956
1Microsoft
2Windows 10
Windows Server 2016
Nov 21, 2024
Apr 12, 2018
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
A denial of service vulnerability exists in the HTTP 2.0 protocol stack (HTTP.sys) when HTTP.sys improperly parses specially crafted HTTP 2.0 requests, aka "HTTP.sys Denial of Service Vulnerability." This affects Windows...Show more
A denial of service vulnerability exists in the HTTP 2.0 protocol stack (HTTP.sys) when HTTP.sys improperly parses specially crafted HTTP 2.0 requests, aka "HTTP.sys Denial of Service Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.Show less
CVE-2018-0950
1Microsoft
3Office
Office Compatibility PackWord
Nov 21, 2024
Apr 12, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
An information disclosure vulnerability exists when Office renders Rich Text Format (RTF) email messages containing OLE objects when a message is opened or previewed, aka "Microsoft Office Information Disclosure Vulnerab...Show more
An information disclosure vulnerability exists when Office renders Rich Text Format (RTF) email messages containing OLE objects when a message is opened or previewed, aka "Microsoft Office Information Disclosure Vulnerability." This affects Microsoft Word, Microsoft Office. This CVE ID is unique from CVE-2018-1007.Show less
CVE-2018-0920
1Microsoft
1Excel
Nov 21, 2024
Apr 12, 2018
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Exc...Show more
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Excel. This CVE ID is unique from CVE-2018-1011, CVE-2018-1027, CVE-2018-1029.Show less
CVE-2018-0892
1Microsoft
1Edge
Nov 21, 2024
Apr 12, 2018
N/A· v4
4.3 MEDIUM· v3
4.3 MEDIUM· v2
An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Microsoft Edge. This CVE ID is unique from...Show more
An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-0998.Show less
CVE-2018-0890
1Microsoft
2Windows 10
Windows Server 2016
Nov 21, 2024
Apr 12, 2018
N/A· v4
5.3 MEDIUM· v3
3.5 LOW· v2
A security feature bypass vulnerability exists when Active Directory incorrectly applies Network Isolation settings, aka "Active Directory Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows...Show more
A security feature bypass vulnerability exists when Active Directory incorrectly applies Network Isolation settings, aka "Active Directory Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.Show less
CVE-2018-0887
1Microsoft
7Windows 10
Windows 7Windows 8.1+4 more
Nov 21, 2024
Apr 12, 2018
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012...Show more
An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0960, CVE-2018-0968, CVE-2018-0969, CVE-2018-0970, CVE-2018-0971, CVE-2018-0972, CVE-2018-0973, CVE-2018-0974, CVE-2018-0975.Show less
CVE-2018-0870
1Microsoft
1Internet Explorer
Nov 21, 2024
Apr 12, 2018
N/A· v4
7.5 HIGH· v3
7.6 HIGH· v2
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This affects Internet Explorer 11. This CVE ID is unique...Show more
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This affects Internet Explorer 11. This CVE ID is unique from CVE-2018-0991, CVE-2018-0997, CVE-2018-1018, CVE-2018-1020.Show less