Vulnerabilities > Microsoft > High

DATE CVE VULNERABILITY TITLE RISK
2019-05-16 CVE-2019-0957 Improper Input Validation vulnerability in Microsoft Sharepoint Enterprise Server and Sharepoint Server
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'.
network
low complexity
microsoft CWE-20
8.8
2019-05-16 CVE-2019-0953 Unspecified vulnerability in Microsoft products
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.
local
low complexity
microsoft
7.8
2019-05-16 CVE-2019-0952 Unspecified vulnerability in Microsoft products
A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Microsoft SharePoint Server Remote Code Execution Vulnerability'.
network
low complexity
microsoft
8.8
2019-05-16 CVE-2019-0947 Data Processing Errors vulnerability in Microsoft Office 2010
A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'.
local
low complexity
microsoft CWE-19
7.8
2019-05-16 CVE-2019-0946 Data Processing Errors vulnerability in Microsoft Office and Office 365 Proplus
A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'.
local
low complexity
microsoft CWE-19
7.8
2019-05-16 CVE-2019-0945 Data Processing Errors vulnerability in Microsoft Office and Office 365
A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'.
local
low complexity
microsoft CWE-19
7.8
2019-05-16 CVE-2019-0940 Out-of-bounds Write vulnerability in Microsoft Edge and Internet Explorer
A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory Corruption Vulnerability'.
network
high complexity
microsoft CWE-787
7.5
2019-05-16 CVE-2019-0937 Out-of-bounds Write vulnerability in Microsoft Chakracore and Edge
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'.
network
high complexity
microsoft CWE-787
7.5
2019-05-16 CVE-2019-0936 Link Following vulnerability in Microsoft products
An elevation of privilege vulnerability exists in Microsoft Windows when Windows fails to properly handle certain symbolic links, aka 'Windows Elevation of Privilege Vulnerability'.
local
low complexity
microsoft CWE-59
7.8
2019-05-16 CVE-2019-0933 Out-of-bounds Write vulnerability in Microsoft Chakracore and Edge
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'.
network
high complexity
microsoft CWE-787
7.5