Archive
May 2019
Vulnerabilities first published in this month (UTC), newest first.
1,337 results · Feed
-
Unscored —
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Interne…
-
High 7.5
Out-of-bounds write
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2…
-
Unscored —
An spoofing vulnerability exists when Internet Explorer improperly handles URLs, aka 'Internet Explorer Spoofing Vulner…
-
High 7.5
Out-of-bounds write
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2…
-
High 7.5
Out-of-bounds write
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2…
-
High 7.5
Out-of-bounds write
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2…
-
Unscored —
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft …
-
High 7.5
Out-of-bounds write
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0884, CVE-2019-0918.
-
High 7.5
Out-of-bounds write
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0913, CVE-2019-0914, CVE-2…
-
High 7.5
Out-of-bounds write
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2…
-
Unscored —
An information disclosure vulnerability exists in Skype for Android, aka 'Skype for Android Information Disclosure Vuln…
-
Unscored —
An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory, aka 'Intern…
-
Unscored —CVE-2019-0891 EPSS 20%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —CVE-2019-0890 EPSS 14%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —CVE-2019-0899 EPSS 20%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its …
-
Unscored —CVE-2019-0889 EPSS 20%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft bro…
-
Unscored —CVE-2019-0896 EPSS 14%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —
An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly valida…
-
Unscored —CVE-2019-0895 EPSS 14%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —CVE-2019-0897 EPSS 14%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —CVE-2019-0898 EPSS 14%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —CVE-2019-0900 EPSS 14%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —CVE-2019-0901 EPSS 14%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —CVE-2019-0885 EPSS 14%
A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Win…
-
Unscored —CVE-2019-0893 EPSS 14%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —CVE-2019-0894 EPSS 14%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —CVE-2019-0881 Public exploit
An elevation of privilege vulnerability exists when the Windows Kernel improperly handles key enumeration, aka 'Windows…
-
Unscored —
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly s…
-
Unscored —
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…
-
Unscored —
An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails…
-
Unscored —
An elevation of privilege vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to succes…
-
Unscored —CVE-2019-0725 EPSS 28%
A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets, …
-
High 7.8
An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Err…
KEV Nov 3, 2021 -
High 7.5
Regular Expression Denial of Service in System.Text.RegularExpressions
A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka '.NET Framework and .NET Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0980, CVE-2019-0981.
-
Unscored —
A denial of service vulnerability exists when .NET Framework improperly handles objects in heap memory, aka '.NET Frame…
-
Unscored —
An information disclosure vulnerability exists in Microsoft SQL Server Analysis Services when it improperly enforces me…
-
Unscored —
A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an atta…
-
Unscored —
An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standar…