Vulnerabilities > Microsoft > High

DATE CVE VULNERABILITY TITLE RISK
2019-03-12 CVE-2019-5921 Untrusted Search Path vulnerability in Microsoft Windows 7
Untrusted search path vulnerability in Windows 7 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
local
low complexity
microsoft CWE-426
7.8
2019-03-12 CVE-2019-5917 Unspecified vulnerability in Microsoft Azure-Umqtt-C
azure-umqtt-c (available through GitHub prior to 2017 October 6) allows remote attackers to cause a denial of service via unspecified vectors.
network
low complexity
microsoft
7.5
2019-03-05 CVE-2019-0741 Information Exposure Through Log Files vulnerability in Microsoft Java Software Development KIT
An information disclosure vulnerability exists in the way Azure IoT Java SDK logs sensitive information, aka 'Azure IoT Java SDK Information Disclosure Vulnerability'.
network
low complexity
microsoft CWE-532
7.5
2019-03-05 CVE-2019-0728 Unspecified vulnerability in Microsoft Visual Studio Code
A remote code execution vulnerability exists in Visual Studio Code when it process environment variables after opening a project, aka 'Visual Studio Code Remote Code Execution Vulnerability'.
local
low complexity
microsoft
7.8
2019-03-05 CVE-2019-0724 Unspecified vulnerability in Microsoft Exchange Server
An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'.
network
high complexity
microsoft
8.1
2019-03-05 CVE-2019-0686 Unspecified vulnerability in Microsoft Exchange Server
An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'.
network
high complexity
microsoft
7.4
2019-03-05 CVE-2019-0675 Unspecified vulnerability in Microsoft Office 2010
A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'.
local
low complexity
microsoft
7.8
2019-03-05 CVE-2019-0674 Unspecified vulnerability in Microsoft Office and Office 365 Proplus
A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'.
local
low complexity
microsoft
7.8
2019-03-05 CVE-2019-0673 Unspecified vulnerability in Microsoft Office and Office 365 Proplus
A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'.
local
low complexity
microsoft
7.8
2019-03-05 CVE-2019-0672 Unspecified vulnerability in Microsoft Office and Office 365 Proplus
A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'.
local
low complexity
microsoft
7.8