Microsoft Corporation
Page 9 of 9 — Microsoft Corporation CVEs from a corpus of 865, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-0080 | High | 7.8 | 2017-03-17 | The kernel-mode drivers in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allow local users to gain privileges via a crafted application, ak… |
CVE-2017-0079 | High | 7.8 | 2017-03-17 | The kernel-mode drivers in Windows 8.1; Windows Server 2012 R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a… |
CVE-2017-0078 | High | 7.8 | 2017-03-17 | The kernel-mode drivers in Microsoft Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 all… |
CVE-2017-0076 | Medium | 5.4 | 2017-03-17 | Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and 2008 R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 and R2; Windows 10, 1511, and 1607… |
CVE-2017-0075 | High | 7.6 | 2017-03-17 | Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows 10 Gold, 1511, and… |
CVE-2017-0073 | Medium | 4.3 | 2017-03-17 | The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold an… |
CVE-2017-0072 | High | 8.8 | 2017-03-17 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted… |
CVE-2017-0071 | High | 7.5 | 2017-03-17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes… |
CVE-2017-0070 | High | 7.5 | 2017-03-17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes… |
CVE-2017-0069 | Medium | 4.3 | 2017-03-17 | Microsoft Edge allows remote attackers to spoof web content via a crafted web site, aka "Microsoft Edge Spoofing Vulnerability." This vulnerability is differen… |
CVE-2017-0068 | Medium | 4.3 | 2017-03-17 | Browsers in Microsoft Edge allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Microsoft Edge Information D… |
CVE-2017-0067 | High | 7.5 | 2017-03-17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes… |
CVE-2017-0066 | Medium | 4.2 | 2017-03-17 | Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in other browser windows, aka "Microsoft Edge Security Feature Bypass… |
CVE-2017-0065 | Medium | 4.3 | 2017-03-17 | Microsoft Edge allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Microsoft Browser Information Disclosur… |
CVE-2017-0063 | Medium | 6.5 | 2017-03-17 | The Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2; Windows Server 2008 SP2 and R2; and Windows 7 SP1; Windows 8.1; Win… |
CVE-2017-0062 | Medium | 4.7 | 2017-03-17 | The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold an… |
CVE-2017-0061 | Medium | 5.3 | 2017-03-17 | The Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2, Windows Server 2008 SP2 and R2, and Windows 7 SP1 allows remote att… |
CVE-2017-0060 | Medium | 5.5 | 2017-03-17 | The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold an… |
CVE-2017-0059 | Medium | 4.3 | 2017-03-17 | Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explo… |
CVE-2017-0057 | Medium | 4.3 | 2017-03-17 | DNS client in Microsoft Windows 8.1; Windows Server 2012 R2, Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 fails to properly process… |
CVE-2017-0056 | High | 7.8 | 2017-03-17 | The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Window… |
CVE-2017-0055 | Medium | 6.1 | 2017-03-17 | Microsoft Internet Information Server (IIS) in Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2… |
CVE-2017-0053 | High | 7.8 | 2017-03-17 | Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Word 2007 SP3, Word 2010 SP2, Word 2013 SP1, Word 2013 R2 SP1, Word 2016, and Word Viewer allow remot… |
CVE-2017-0052 | High | 7.8 | 2017-03-17 | Microsoft Office Compatibility Pack SP3, Excel 2007 SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote attackers to execute arbit… |
CVE-2017-0051 | Medium | 5.4 | 2017-03-17 | Microsoft Windows 10 1607 and Windows Server 2016 allow remote attackers to cause a denial of service (application hang) via a crafted Office document, aka "Mi… |
CVE-2017-0050 | High | 7.8 | 2017-03-17 | The kernel API in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7; Windows 8; Windows 10 Gold, 1511, and 1607; Windows RT 8.1; Windo… |
CVE-2017-0049 | Medium | 4.3 | 2017-03-17 | The VBScript engine in Microsoft Internet Explorer 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "… |
CVE-2017-0047 | High | 7.8 | 2017-03-17 | The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold an… |
CVE-2017-0045 | Medium | 5.5 | 2017-03-17 | Windows DVD Maker in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, and Windows Vista SP2 does not properly parse crafted .msdvd files, which allows attack… |
CVE-2017-0043 | Medium | 5.3 | 2017-03-17 | Active Directory Federation Services in Microsoft Windows 10 1607, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 Gold and R2, and Windows Server 2016… |
CVE-2017-0042 | Low | 3.1 | 2017-03-17 | Windows Media Player in Microsoft Windows 8.1; Windows Server 2012 R2; Windows RT 8.1; Windows 7 SP1; Windows 2008 SP2 and R2 SP1, Windows Server 2016; Windows… |
CVE-2017-0040 | High | 7.5 | 2017-03-17 | The scripting engine in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt… |
CVE-2017-0039 | High | 7.8 | 2017-03-17 | Microsoft Windows Vista SP2 and Server 2008 SP2 mishandle dynamic link library (DLL) loading, which allows local users to gain privileges via a crafted applica… |
CVE-2017-0035 | High | 7.5 | 2017-03-17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes… |
CVE-2017-0034 | High | 7.5 | 2017-03-17 | A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in a way that en… |
CVE-2017-0033 | Medium | 4.3 | 2017-03-17 | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to spoof web content via a crafted web site, aka "Microsoft Browser Spoofing Vulnerabi… |
CVE-2017-0032 | High | 7.5 | 2017-03-17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes… |
CVE-2017-0031 | High | 7.8 | 2017-03-17 | Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Word 2007 SP3, and Word 2010 SP2 allow remote attackers to execute arbitrary code or cause a denial o… |
CVE-2017-0030 | High | 7.8 | 2017-03-17 | Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Office Web Apps Server 2010 SP2, Word 2007 SP3, Word 2010 SP2, and Word Automation Services on ShareP… |
CVE-2017-0029 | Medium | 5.5 | 2017-03-17 | Microsoft Office 2010 SP2, Word 2010 SP2, Word 2013 RT SP1, and Word 2016 allow remote attackers to cause a denial of service (application hang) via a crafted… |
CVE-2017-0027 | Medium | 4.7 | 2017-03-17 | Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Services on SharePoint Server 2013 SP1 allow… |
CVE-2017-0026 | High | 7.8 | 2017-03-17 | The kernel-mode drivers in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allow local users to gain privileges via a crafted application, ak… |
CVE-2017-0025 | High | 7.8 | 2017-03-17 | The kernel-mode drivers in Microsoft Windows Vista; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT… |
CVE-2017-0024 | High | 7.8 | 2017-03-17 | The kernel-mode drivers in Microsoft Windows 10 1607 and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevat… |
CVE-2017-0023 | High | 7.5 | 2017-03-17 | The PDF library in Microsoft Edge; Windows 8.1; Windows Server 2012 and R2; Windows RT 8.1; and Windows 10, 1511, and 1607 allows remote attackers to execute a… |
CVE-2017-0022 | Medium | 6.5 | 2017-03-17 | Microsoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows Server 2008 SP2 and R2 SP1; Windows… |
CVE-2017-0021 | Critical | 9.0 | 2017-03-17 | Hyper-V in Microsoft Windows 10 1607 and Windows Server 2016 does not properly validate vSMB packet data, which allows attackers to execute arbitrary code on a… |
CVE-2017-0020 | High | 7.8 | 2017-03-17 | Microsoft Excel 2016, Excel 2010 SP2, Excel 2013 RT SP1, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code or cause a denial… |
CVE-2017-0019 | High | 7.8 | 2017-03-17 | Microsoft Word 2016 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft O… |
CVE-2017-0018 | High | 7.5 | 2017-03-17 | Microsoft Internet Explorer 10 and 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site… |
CVE-2017-0017 | Medium | 6.1 | 2017-03-17 | The RegEx class in the XSS filter in Microsoft Edge allows remote attackers to conduct cross-site scripting (XSS) attacks and obtain sensitive information via… |
CVE-2017-0016 | Medium | 5.9 | 2017-03-17 | Microsoft Windows 10 Gold, 1511, and 1607; Windows 8.1; Windows RT 8.1; Windows Server 2012 R2, and Windows Server 2016 do not properly handle certain requests… |
CVE-2017-0015 | High | 7.5 | 2017-03-17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes… |
CVE-2017-0014 | High | 7.5 | 2017-03-17 | The Windows Graphics Component in Microsoft Office 2010 SP2; Windows Server 2008 R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows R… |
CVE-2017-0012 | Medium | 4.3 | 2017-03-17 | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to spoof web content via a crafted web site, aka "Microsoft Browser Spoofing Vulnerabi… |
CVE-2017-0011 | Medium | 4.3 | 2017-03-17 | Microsoft Edge allows remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Edge Information Disclosure Vulnerability." This… |
CVE-2017-0010 | High | 7.5 | 2017-03-17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes… |
CVE-2017-0009 | Medium | 4.3 | 2017-03-17 | Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Microsoft Brow… |
CVE-2017-0008 | Medium | 4.3 | 2017-03-17 | Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explo… |
CVE-2017-0007 | Medium | 5.5 | 2017-03-17 | Device Guard in Microsoft Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows remote attackers to modify PowerShell script without invalidating associa… |
CVE-2017-0006 | High | 7.8 | 2017-03-17 | Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote attackers to execute arbit… |
CVE-2017-0005 | High | 7.8 | 2017-03-17 | The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold an… |
CVE-2017-0001 | High | 7.8 | 2017-03-17 | The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold an… |
CVE-2017-0037 | High | 8.1 | 2017-02-26 | Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuilder::HandleColumnBreakOnColumnSpanningEle… |
CVE-2017-0038 | Medium | 5.5 | 2017-02-20 | gdi32.dll in Graphics Device Interface (GDI) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 201… |