microsoft

15,064 tracked vulnerabilities.

CVE-2017-0262 HIGH KEV
Microsoft Office 2010 SP2, 2013 SP1, 2016 - Remote Code Execution
May 12, 2017
CVSS 7.8
EPSS 0.81
CVE-2017-0261 HIGH KEV
Microsoft Office 2010 SP2, 2013 SP1, 2016 - Remote Code Execution via Use-After-Free
May 12, 2017
CVSS 7.8
EPSS 0.78
CVE-2017-0259 MEDIUM
Windows Kernel - Information Disclosure via Crafted Document
May 12, 2017
CVSS 4.7
EPSS 0.10
CVE-2017-0258 MEDIUM
Windows Kernel - Authenticated Information Disclosure via Crafted Document
May 12, 2017
CVSS 4.7
EPSS 0.07
CVE-2017-0256 MEDIUM
ASP.NET Core MVC - Spoofing via Improper Request Sanitization
May 12, 2017
CVSS 5.3
EPSS 0.04
CVE-2017-0255 MEDIUM
Microsoft SharePoint Foundation 2013 SP1 - Cross-Site Scripting
May 12, 2017
CVSS 5.4
EPSS 0.02
CVE-2017-0254 HIGH
Microsoft Office - Remote Code Execution via Memory Corruption
May 12, 2017
CVSS 7.8
EPSS 0.20
CVE-2017-0249 HIGH
ASP.NET Core MVC - Elevation of Privilege via Improper Web Request Sanitization
May 12, 2017
CVSS 7.3
EPSS 0.04
CVE-2017-0248 HIGH
.NET Framework Security Feature Bypass via Improper Certificate Validation
May 12, 2017
CVSS 7.5
EPSS 0.06
CVE-2017-0247 HIGH
ASP.NET Core Mvc < 1.0.4 and 1.1.x < 1.1.3 - Denial of Service via Unicode Non-Character Encoding
May 12, 2017
CVSS 7.5
EPSS 0.17
CVE-2017-0246 HIGH
Windows - Local Privilege Escalation in Graphics Component
May 12, 2017
CVSS 7.0
EPSS 0.01
CVE-2017-0245 MEDIUM
Windows 7 SP1, Server 2008 SP2/R2 SP1, 2012 Gold - Kernel Info Disclosure
May 12, 2017
CVSS 4.7
EPSS 0.08
CVE-2017-0244 MEDIUM
Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 - Authenticated Privilege Escalation
May 12, 2017
CVSS 6.7
EPSS 0.02
CVE-2017-0242 MEDIUM
Windows 7 and Server 2008 - Information Disclosure via ActiveX Object Instantiation
May 12, 2017
CVSS 5.5
EPSS 0.08
CVE-2017-0241 MEDIUM
Microsoft Edge - Privilege Escalation
May 12, 2017
CVSS 5.3
EPSS 0.03
CVE-2017-0240 HIGH
Microsoft Edge - Remote Code Execution via Memory Corruption
May 12, 2017
CVSS 7.5
EPSS 0.15
CVE-2017-0238 HIGH
Microsoft Edge - Remote Code Execution via JavaScript Engine Memory Corruption
May 12, 2017
CVSS 7.5
EPSS 0.18
CVE-2017-0236 HIGH
Microsoft Edge - Remote Code Execution via Chakra JavaScript Engine Memory Corruption
May 12, 2017
CVSS 7.5
EPSS 0.32
CVE-2017-0235 HIGH
Microsoft Edge - Remote Code Execution via Chakra JavaScript Engine Memory Corruption
May 12, 2017
CVSS 7.5
EPSS 0.11
CVE-2017-0234 HIGH
Microsoft Edge - Remote Code Execution via Chakra JavaScript Engine Memory Corruption
May 12, 2017
CVSS 7.5
EPSS 0.38
CVE-2017-0233 HIGH
Microsoft Edge - Privilege Escalation
May 12, 2017
CVSS 8.3
EPSS 0.03
CVE-2017-0231 MEDIUM
Microsoft Edge and Internet Explorer - Spoofing via SmartScreen Filter Rendering
May 12, 2017
CVSS 4.3
EPSS 0.04
CVE-2017-0230 HIGH
Microsoft Edge - Remote Code Execution via JavaScript Engine Memory Corruption
May 12, 2017
CVSS 7.5
EPSS 0.11
CVE-2017-0229 HIGH
Microsoft Edge - Remote Code Execution via Scripting Engine Memory Corruption
May 12, 2017
CVSS 7.5
EPSS 0.11
CVE-2017-0228 HIGH
Microsoft Edge - Remote Code Execution via JavaScript Engine Memory Corruption
May 12, 2017
CVSS 7.5
EPSS 0.17