Vulnerabilities in microsoft

10,829 results
CVE-2018-8253—An elevation of privilege vulnerability exists when Microsoft Cortana allows arbitrary website browsing on the lockscreen, aka "Microsoft CoEPSS 1.8%CVE-2023-38151HIGHMicrosoft Host Integration Server 2020 Remote Code Execution VulnerabilityEPSS 1.8%CVE-2023-36438HIGHWindows TCP/IP Information Disclosure VulnerabilityEPSS 1.8%CVE-2019-1129HIGHAn elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows ElEPSS 1.8%KEVCVE-2024-38019HIGHMicrosoft Windows Performance Data Helper Library Remote Code Execution VulnerabilityEPSS 1.8%CVE-2024-43458HIGHWindows Networking Information Disclosure VulnerabilityEPSS 1.8%CVE-2018-8140—An Elevation of Privilege vulnerability exists when Cortana retrieves data from user input services without consideration for status, aka "CEPSS 1.8%CVE-2019-1436—An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information DisEPSS 1.8%CVE-2023-35298HIGHHTTP.sys Denial of Service VulnerabilityEPSS 1.8%CVE-2023-32084HIGHHTTP.sys Denial of Service VulnerabilityEPSS 1.8%CVE-2024-29045HIGHMicrosoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityEPSS 1.8%CVE-2019-0743—A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team FounEPSS 1.8%CVE-2019-0742—A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team FounEPSS 1.8%CVE-2020-1205MEDIUMMicrosoft SharePoint Spoofing VulnerabilityEPSS 1.8%CVE-2022-41035MEDIUMMicrosoft Edge (Chromium-based) Spoofing VulnerabilityEPSS 1.8%CVE-2025-29813CRITICALAzure DevOps Elevation of Privilege VulnerabilityEPSS 1.8%CVE-2023-21713HIGHMicrosoft SQL Server Remote Code Execution VulnerabilityEPSS 1.8%CVE-2024-21365HIGHMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityEPSS 1.8%CVE-2024-21360HIGHMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityEPSS 1.8%CVE-2024-21366HIGHMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityEPSS 1.8%