Archive
September 2019
Vulnerabilities first published in this month (UTC), newest first.
1,540 results · Feed
-
Unscored —CVE-2019-1248 EPSS 12%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —CVE-2019-1257 EPSS 12%
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup…
-
Unscored —
An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'D…
-
Unscored —CVE-2019-1252 EPSS 60%
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its …
-
Unscored —
A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web App (OWA) fails to properly handle web re…
-
Unscored —CVE-2019-1246 EPSS 13%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —
A security feature bypass vulnerability exists when Microsoft Yammer App for Android fails to apply the correct Intune …
-
Unscored —
An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privileg…
-
Unscored —
A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, …
-
Unscored —CVE-2019-1250 EPSS 18%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, ak…
-
Unscored —
An elevation of privilege vulnerability exists in Microsoft Compatibility Appraiser where a configuration file, with lo…
-
Unscored —CVE-2019-1262 Public exploit
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…
-
Unscored —CVE-2019-1247 EPSS 12%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —CVE-2019-1249 EPSS 12%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —
An information disclosure vulnerability exists in the way Rome SDK handles server SSL/TLS certificate validation, aka '…
-
Unscored —
A denial of service vulnerability exists in Microsoft Exchange Server software when the software fails to properly hand…
-
Unscored —
A security feature bypass vulnerability exists when Microsoft Browsers fail to validate the correct Security Zone of re…
-
Unscored —
An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersona…
-
High 7.5
Out-of-bounds write
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1138, CVE-2019-1217, CVE-2…
-
Unscored —CVE-2019-1240 EPSS 12%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
High 7.8
An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Wi…
KEV Nov 3, 2021 -
Unscored —
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScri…
-
Unscored —
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…
-
Unscored —
An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Informat…
-
High 7.5
Out-of-bounds write
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1138, CVE-2019-1237, CVE-2…
-
Unscored —CVE-2019-1241 EPSS 17%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —
An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'D…
-
Unscored —CVE-2019-1242 EPSS 12%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
High 7.8CVE-2019-1214 Exploited
An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles…
KEV Nov 3, 2021 -
Unscored —
An elevation of privilege vulnerability exists in Windows Text Service Framework (TSF) when the TSF server process does…
-
Unscored —CVE-2019-1243 EPSS 18%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —
An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'D…
-
Unscored —
An information disclosure vulnerability exists when the Windows Transaction Manager improperly handles objects in memor…
-
Unscored —CVE-2019-0788 EPSS 12%
A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious s…
-
Unscored —CVE-2019-0787 EPSS 12%
A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious s…
-
Unscored —
A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from …
-
Unscored —
An elevation of privilege vulnerability exists when the .NET Framework common language runtime (CLR) allows file creati…
-
Unscored —CVE-2019-1208 EPSS 13%
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScri…
-
Unscored —
An information disclosure vulnerability exists in Lync 2013, aka 'Lync 2013 Information Disclosure Vulnerability'.