2018

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obje

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memo

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially c

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially c

An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, whic

A security feature bypass vulnerability exists when Windows improperly suspends BitLocker Device Encryption, aka "BitLoc

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka "Wi

A spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content, aka "Microsoft Edge Spoofi

An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Informati

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Elevation

An information disclosure vulnerability exists when Microsoft Outlook fails to respect "Default link type" settings conf

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Elevation

A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka

An information disclosure vulnerability exists when VBScript improperly discloses the contents of its memory, which coul

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

An elevation of privilege exists in Windows COM Aggregate Marshaler, aka "Windows COM Elevation of Privilege Vulnerabili

A security feature bypass exists when Windows incorrectly validates kernel driver signatures, aka "Windows Security Feat

A cross-site-scripting (XSS) vulnerability exists when an open source customization for Microsoft Active Directory Feder

A denial of service vulnerability exists in Skype for Business, aka "Microsoft Skype for Business Denial of Service Vuln

An information disclosure vulnerability exists in the way that Microsoft Edge handles cross-origin requests, aka "Micros

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memo

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in m

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in m

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Elevation

A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in

An elevation of privilege vulnerability exists in the way that the Microsoft RemoteFX Virtual GPU miniport driver handle

An information disclosure vulnerability exists when Windows Audio Service fails to properly handle objects in memory, ak

A remote code execution vulnerability exists when Windows Search handles objects in memory, aka "Windows Search Remote C

A security feature bypass vulnerability exists in Microsoft JScript that could allow an attacker to bypass Device Guard,

A tampering vulnerability exists when .NET Core improperly handles specially crafted files, aka ".NET Core Tampering Vul

A tampering vulnerability exists in PowerShell that could allow an attacker to execute unlogged code, aka "Microsoft Pow

An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory, aka "Wi

An information disclosure vulnerability exists when "Kernel Remote Procedure Call Provider" driver improperly initialize

A remote code execution vulnerability exists when PowerShell improperly handles specially crafted files, aka "Microsoft

There is a possible XSS vulnerability in Rack before 2.0.6 and 1.6.11. Carefully crafted requests can impact the data re

There is a possible DoS vulnerability in the multipart parser in Rack before 2.0.6. Specially crafted requests can cause

VMware vRealize Log Insight (4.7.x before 4.7.1 and 4.6.x before 4.6.2) contains a vulnerability due to improper authori

Apache Hadoop 3.1.0, 3.0.0-alpha to 3.0.2, 2.9.0 to 2.9.1, 2.8.0 to 2.8.4, 2.0.0-alpha to 2.7.6, 0.23.0 to 0.23.11 is ex

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Losant Arduino MQTT

When opening a deep link URL in SAP Fiori Client with log level set to "Debug", the client application logs the URL to t

The broadcast messages received by SAP Fiori Client are not protected by permissions. SAP Fiori Client version 1.11.5 in