Vulnerabilities > Microsoft > High

DATE CVE VULNERABILITY TITLE RISK
2019-04-08 CVE-2019-0603 Unspecified vulnerability in Microsoft products
A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in memory.
network
high complexity
microsoft
7.5
2019-04-08 CVE-2019-0592 Out-of-bounds Write vulnerability in Microsoft Chakracore and Edge
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'.
network
high complexity
microsoft CWE-787
7.5
2019-03-12 CVE-2019-5922 Untrusted Search Path vulnerability in Microsoft Teams
Untrusted search path vulnerability in The installer of Microsoft Teams allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
local
low complexity
microsoft CWE-426
7.8
2019-03-12 CVE-2019-5921 Untrusted Search Path vulnerability in Microsoft Windows 7
Untrusted search path vulnerability in Windows 7 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
local
low complexity
microsoft CWE-426
7.8
2019-03-12 CVE-2019-5917 Unspecified vulnerability in Microsoft Azure-Umqtt-C
azure-umqtt-c (available through GitHub prior to 2017 October 6) allows remote attackers to cause a denial of service via unspecified vectors.
network
low complexity
microsoft
7.5
2019-03-05 CVE-2019-0741 Information Exposure Through Log Files vulnerability in Microsoft Java Software Development KIT
An information disclosure vulnerability exists in the way Azure IoT Java SDK logs sensitive information, aka 'Azure IoT Java SDK Information Disclosure Vulnerability'.
network
low complexity
microsoft CWE-532
7.5
2019-03-05 CVE-2019-0728 Unspecified vulnerability in Microsoft Visual Studio Code
A remote code execution vulnerability exists in Visual Studio Code when it process environment variables after opening a project, aka 'Visual Studio Code Remote Code Execution Vulnerability'.
local
low complexity
microsoft
7.8
2019-03-05 CVE-2019-0724 Unspecified vulnerability in Microsoft Exchange Server
An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'.
network
high complexity
microsoft
8.1
2019-03-05 CVE-2019-0686 Unspecified vulnerability in Microsoft Exchange Server
An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'.
network
high complexity
microsoft
7.4
2019-03-05 CVE-2019-0675 Unspecified vulnerability in Microsoft Office 2010
A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'.
local
low complexity
microsoft
7.8