Microsoft Patch Tuesday — April 2019
Tuesday, 9 April 2019
- Vulnerabilities
- 139
- Critical
- 0
- High
- 19
- Zero-days
- 0
- Public exploit
- 16
Exploited 7
Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.
-
High 7.8
CVE-2019-0808 Exploited Public exploit An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privil…EPSS 53%
-
High 7.8
CVE-2019-0841 Exploited Public exploit An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privileg…EPSS 41%
-
High 7.8
CVE-2019-0803 Exploited Public exploit An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privil…EPSS 45%
-
High 7.8
CVE-2019-0859 Exploited Public exploit An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privil…EPSS 4.2%
-
High 7.8
CVE-2019-0797 Exploited An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privil…EPSS 1.9%
-
High 7.5
CVE-2019-0752 Exploited Public exploit A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory …EPSS 82%
-
Medium 6.5
CVE-2019-0703 Exploited An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure Vulnera…EPSS 9.4%
Public exploit code 11
Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.
-
Unscored
CVE-2019-0768 Public exploit A security feature bypass vulnerability exists when Internet Explorer VBScript execution policy does not properly restrict VBScript under specific conditions, …EPSS 49%
-
Unscored
CVE-2019-0612 Public exploit A security feature bypass vulnerability exists when Click2Play protection in Microsoft Edge improperly handles flash objects. By itself, this bypass vulnerabil…EPSS 11%
-
Unscored
CVE-2019-0667 Public exploit A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution …EPSS 31%
-
Unscored
CVE-2019-0730 Public exploit An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulne…EPSS 4.4%
-
Unscored
CVE-2019-0731 Public exploit An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulne…EPSS 4.4%
-
Unscored
CVE-2019-0732 Public exploit A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard when Windows improperly handles calls to the LUA…EPSS 3.8%
-
Unscored
CVE-2019-0735 Public exploit An elevation of privilege vulnerability exists when the Windows Client Server Run-Time Subsystem (CSRSS) fails to properly handle objects in memory, aka 'Windo…EPSS 3.7%
-
Unscored
CVE-2019-0796 Public exploit An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulne…EPSS 4.2%
-
Unscored
CVE-2019-0805 Public exploit An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulne…EPSS 2.8%
-
Unscored
CVE-2019-0836 Public exploit An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulne…EPSS 4.3%
-
Unscored
CVE-2019-0678 Public exploit An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access inf…EPSS 6.1%
All vulnerabilities 139
High19 ShowHide
-
High 7.8
CVE-2019-0808 Exploited Public exploit An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privil…EPSS 53%
-
High 7.8
CVE-2019-0841 Exploited Public exploit An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privileg…EPSS 41%
-
High 7.8
CVE-2019-0803 Exploited Public exploit An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privil…EPSS 45%
-
High 7.8
CVE-2019-0859 Exploited Public exploit An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privil…EPSS 4.2%
-
High 7.8
CVE-2019-0797 Exploited An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privil…EPSS 1.9%
-
High 7.5
CVE-2019-0752 Exploited Public exploit A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory …EPSS 82%
- High 7.5 EPSS 23%
- High 7.5 EPSS 9.8%
- High 7.5 EPSS 9.2%
- High 7.5 EPSS 12%
- High 7.5 EPSS 10%
- High 7.5 EPSS 10%
- High 7.5 EPSS 10%
- High 7.5 EPSS 9%
- High 7.5 EPSS 12%
- High 7.5 EPSS 19%
- High 7.5 EPSS 9%
- High 7.5 EPSS 11%
- High 7.5 EPSS 11%
Medium4 ShowHide
-
Medium 6.5
CVE-2019-0703 Exploited An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure Vulnera…EPSS 9.4%
-
Medium 6.5
CVE-2019-0746 Microsoft.ChakraCore vulnerable to Exposure of Sensitive Information to an Unauthorized ActorEPSS 6.6%
-
Medium 5.4
CVE-2019-0830 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected Sh…EPSS 1.6%
-
Medium 5.4
CVE-2019-0831 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected Sh…EPSS 1.6%
Unscored116 ShowHide
-
Unscored
CVE-2019-0768 Public exploit A security feature bypass vulnerability exists when Internet Explorer VBScript execution policy does not properly restrict VBScript under specific conditions, …EPSS 49%
-
Unscored
CVE-2019-0612 Public exploit A security feature bypass vulnerability exists when Click2Play protection in Microsoft Edge improperly handles flash objects. By itself, this bypass vulnerabil…EPSS 11%
-
Unscored
CVE-2019-0667 Public exploit A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution …EPSS 31%
-
Unscored
CVE-2019-0730 Public exploit An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulne…EPSS 4.4%
-
Unscored
CVE-2019-0731 Public exploit An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulne…EPSS 4.4%
-
Unscored
CVE-2019-0732 Public exploit A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard when Windows improperly handles calls to the LUA…EPSS 3.8%
-
Unscored
CVE-2019-0735 Public exploit An elevation of privilege vulnerability exists when the Windows Client Server Run-Time Subsystem (CSRSS) fails to properly handle objects in memory, aka 'Windo…EPSS 3.7%
-
Unscored
CVE-2019-0796 Public exploit An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulne…EPSS 4.2%
-
Unscored
CVE-2019-0805 Public exploit An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulne…EPSS 2.8%
-
Unscored
CVE-2019-0836 Public exploit An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulne…EPSS 4.3%
-
Unscored
CVE-2019-0678 Public exploit An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access inf…EPSS 6.1%
-
Unscored
CVE-2019-0603 A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in memory. An attacker who successfully ex…EPSS 34%
-
Unscored
CVE-2019-0614 An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Dis…EPSS 6.6%
-
Unscored
CVE-2019-0617 A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Ex…EPSS 20%
-
Unscored
CVE-2019-0665 A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution …EPSS 8.3%
-
Unscored
CVE-2019-0666 A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution …EPSS 20%
-
Unscored
CVE-2019-0680 A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory …EPSS 8.1%
- Unscored
-
Unscored
CVE-2019-0683 An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an attacker in the trusting forest request …EPSS 3.4%
-
Unscored
CVE-2019-0685 An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privil…EPSS 1.6%
-
Unscored
CVE-2019-0688 An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles fragmented IP packets, aka 'Windows TCP/IP Information Disclosu…EPSS 8.5%
- Unscored
-
Unscored
CVE-2019-0690 A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a gu…EPSS 1.9%
- Unscored
- Unscored
- Unscored
-
Unscored
CVE-2019-0695 A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating s…EPSS 1.9%
-
Unscored
CVE-2019-0696 An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege V…EPSS 1.1%
-
Unscored
CVE-2019-0697 A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Clie…EPSS 33%
-
Unscored
CVE-2019-0698 A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Clie…EPSS 57%
-
Unscored
CVE-2019-0701 A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating s…EPSS 1.9%
-
Unscored
CVE-2019-0702 An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnera…EPSS 1.6%
-
Unscored
CVE-2019-0704 An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure Vulnera…EPSS 5.6%
-
Unscored
CVE-2019-0726 A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Clie…EPSS 54%
-
Unscored
CVE-2019-0739 A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Cor…EPSS 11%
-
Unscored
CVE-2019-0748 A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office A…EPSS 14%
-
Unscored
CVE-2019-0753 A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory …EPSS 9.2%
-
Unscored
CVE-2019-0754 A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'.EPSS 1.6%
-
Unscored
CVE-2019-0755 An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnera…EPSS 2.4%
-
Unscored
CVE-2019-0756 A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerab…EPSS 12%
-
Unscored
CVE-2019-0757 A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify a NuGet package's folder s…EPSS 2.7%
-
Unscored
CVE-2019-0759 An information disclosure vulnerability exists when the Windows Print Spooler does not properly handle objects in memory, aka 'Windows Print Spooler Informatio…EPSS 1.7%
-
Unscored
CVE-2019-0761 A security feature bypass vulnerability exists when Internet Explorer fails to validate the correct Security Zone of requests for specific URLs, aka 'Internet …EPSS 3.9%
-
Unscored
CVE-2019-0762 A security feature bypass vulnerability exists when Microsoft browsers improperly handle requests of different origins, aka 'Microsoft Browsers Security Featur…EPSS 4.5%
-
Unscored
CVE-2019-0763 A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerabili…EPSS 8.1%
-
Unscored
CVE-2019-0764 A tampering vulnerability exists when Microsoft browsers do not properly validate input under specific conditions, aka 'Microsoft Browsers Tampering Vulnerabil…EPSS 3.6%
-
Unscored
CVE-2019-0765 A remote code execution vulnerability exists in the way that comctl32.dll handles objects in memory, aka 'Comctl32 Remote Code Execution Vulnerability'.EPSS 14%
-
Unscored
CVE-2019-0766 An elevation of privilege vulnerability exists in Windows AppX Deployment Server that allows file creation in arbitrary locations. To exploit the vulnerability…EPSS 1.1%
-
Unscored
CVE-2019-0767 An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.To exploit this vulnerability, an authenticated…EPSS 1.8%
-
Unscored
CVE-2019-0770 A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Cor…EPSS 8.1%
-
Unscored
CVE-2019-0772 A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution …EPSS 13%
-
Unscored
CVE-2019-0774 An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Dis…EPSS 7%
-
Unscored
CVE-2019-0775 An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnera…EPSS 1.2%
-
Unscored
CVE-2019-0776 An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerabili…EPSS 1.6%
-
Unscored
CVE-2019-0777 A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross…EPSS 1.7%
-
Unscored
CVE-2019-0778 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected Sh…EPSS 1.7%
-
Unscored
CVE-2019-0779 A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruption Vulnerability'.EPSS 7.9%
-
Unscored
CVE-2019-0780 A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory Corruption Vulnerabilit…EPSS 8%
-
Unscored
CVE-2019-0782 An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel Information Disclosur…EPSS 1.6%
-
Unscored
CVE-2019-0783 A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory …EPSS 8.1%
-
Unscored
CVE-2019-0784 A remote code execution vulnerability exists in the way that the ActiveX Data objects (ADO) handles objects in memory, aka 'Windows ActiveX Remote Code Executi…EPSS 8.3%
-
Unscored
CVE-2019-0786 An elevation of privilege vulnerability exists in the Microsoft Server Message Block (SMB) Server when an attacker with valid credentials attempts to open a sp…EPSS 7%
-
Unscored
CVE-2019-0790 A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerab…EPSS 16%
-
Unscored
CVE-2019-0791 A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerab…EPSS 18%
-
Unscored
CVE-2019-0792 A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerab…EPSS 18%
-
Unscored
CVE-2019-0793 A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerab…EPSS 18%
-
Unscored
CVE-2019-0794 A remote code execution vulnerability exists when OLE automation improperly handles objects in memory, aka 'OLE Automation Remote Code Execution Vulnerability'.EPSS 15%
-
Unscored
CVE-2019-0795 A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerab…EPSS 21%
-
Unscored
CVE-2019-0798 A spoofing vulnerability exists when a Lync Server or Skype for Business Server does not properly sanitize a specially crafted request, aka 'Skype for Business…EPSS 2.1%
-
Unscored
CVE-2019-0801 A remote code execution vulnerability exists when Microsoft Office fails to properly handle certain files.To exploit the vulnerability, an attacker would have …EPSS 19%
-
Unscored
CVE-2019-0802 An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Dis…EPSS 9.5%
-
Unscored
CVE-2019-0804 An information disclosure vulnerability exists in the way Azure WaLinuxAgent creates swap files on resource disks, aka 'Azure Linux Agent Information Disclosur…EPSS 5.2%
-
Unscored
CVE-2019-0809 A remote code execution vulnerability exists when the Visual Studio C++ Redistributable Installer improperly validates input before loading dynamic link librar…EPSS 11%
-
Unscored
CVE-2019-0813 An elevation of privilege vulnerability exists when Windows Admin Center improperly impersonates operations in certain situations, aka 'Windows Admin Center El…EPSS 3.5%
-
Unscored
CVE-2019-0814 An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerabili…EPSS 2.1%
-
Unscored
CVE-2019-0815 A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.EPSS 7%
-
Unscored
CVE-2019-0816 A security feature bypass exists in Azure SSH Keypairs, due to a change in the provisioning logic for some Linux images that use cloud-init, aka 'Azure SSH Key…EPSS 1.4%
-
Unscored
CVE-2019-0817 A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests, aka 'Microsoft Exchange Spoof…EPSS 2.3%
-
Unscored
CVE-2019-0821 An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure Vulnera…EPSS 6.2%
-
Unscored
CVE-2019-0822 A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Remote …EPSS 14%
-
Unscored
CVE-2019-0823 A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office A…EPSS 11%
-
Unscored
CVE-2019-0824 A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office A…EPSS 11%
-
Unscored
CVE-2019-0825 A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office A…EPSS 11%
-
Unscored
CVE-2019-0826 A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office A…EPSS 11%
-
Unscored
CVE-2019-0827 A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office A…EPSS 11%
-
Unscored
CVE-2019-0828 A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Rem…EPSS 14%
-
Unscored
CVE-2019-0833 An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka 'Microsoft Edge Information Disclosure Vulnerabili…EPSS 7.1%
-
Unscored
CVE-2019-0835 An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory, aka 'Microsoft Scripting Engine Informatio…EPSS 6.7%
-
Unscored
CVE-2019-0837 An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Information Disclosure Vulnerability'.EPSS 2.1%
-
Unscored
CVE-2019-0838 An information disclosure vulnerability exists when Windows Task Scheduler improperly discloses credentials to Windows Credential Manager, aka 'Windows Informa…EPSS 2.1%
-
Unscored
CVE-2019-0839 An information disclosure vulnerability exists when the Terminal Services component improperly discloses the contents of its memory, aka 'Windows Information D…EPSS 2.2%
-
Unscored
CVE-2019-0840 An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnera…EPSS 2.1%
-
Unscored
CVE-2019-0842 A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution …EPSS 18%
-
Unscored
CVE-2019-0844 An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnera…EPSS 2.1%
-
Unscored
CVE-2019-0845 A remote code execution vulnerability exists when the IOleCvt interface renders ASP webpage content, aka 'Windows IOleCvt Interface Remote Code Execution Vulne…EPSS 15%
-
Unscored
CVE-2019-0846 A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Ex…EPSS 16%
-
Unscored
CVE-2019-0847 A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Ex…EPSS 16%
-
Unscored
CVE-2019-0848 An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerabili…EPSS 2.1%
-
Unscored
CVE-2019-0849 An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Dis…EPSS 9.5%
-
Unscored
CVE-2019-0851 A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Ex…EPSS 16%
-
Unscored
CVE-2019-0853 A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code E…EPSS 30%
-
Unscored
CVE-2019-0856 A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Remote Code Execution Vulnerability'.EPSS 19%
-
Unscored
CVE-2019-0857 A spoofing vulnerability that could allow a security feature bypass exists in when Azure DevOps Server does not properly sanitize user provided input, aka 'Azu…EPSS 3.9%
-
Unscored
CVE-2019-0858 A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests, aka 'Microsoft Exchange Spoof…EPSS 2.1%
-
Unscored
CVE-2019-0862 A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory …EPSS 11%
-
Unscored
CVE-2019-0866 A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure …EPSS 2.6%
-
Unscored
CVE-2019-0867 A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure …EPSS 2.4%
-
Unscored
CVE-2019-0868 A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure …EPSS 2.4%
-
Unscored
CVE-2019-0869 A spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails to properly handle web requests, aka 'Azure DevOps Server HTML Injection Vulnera…EPSS 2%
-
Unscored
CVE-2019-0870 A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure …EPSS 2.4%
-
Unscored
CVE-2019-0871 A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure …EPSS 2.4%
-
Unscored
CVE-2019-0874 A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site …EPSS 2%
-
Unscored
CVE-2019-0875 An elevation of privilege vulnerability exists when Azure DevOps Server 2019 does not properly enforce project permissions, aka 'Azure DevOps Server Elevation …EPSS 3%
-
Unscored
CVE-2019-0876 An information disclosure vulnerability exists when affected Open Enclave SDK versions improperly handle objects in memory, aka 'Open Enclave SDK Information D…EPSS 1.6%
-
Unscored
CVE-2019-0877 A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Ex…EPSS 4.9%
-
Unscored
CVE-2019-0879 A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Ex…EPSS 9.8%