Vendor

Microsoft

14,258 known vulnerabilities.

Products

Windows Server 2019 6,362 Windows Server 2019 (Server Core installation) 6,265 Windows 10 Version 1809 5,907 Windows Server 2022 5,762 Windows Server 2016 5,572 Windows Server 2016 (Server Core installation) 5,368 Windows 10 Version 21H2 5,141 Windows 10 Version 1607 4,987 Windows 10 Version 22H2 4,643 Windows Server 2025 4,336 Windows Server 2025 (Server Core installation) 4,334 Windows 11 Version 24H2 4,232 Windows Server 2012 R2 4,119 Windows 11 version 23H2 4,056 Windows Server 2012 R2 (Server Core installation) 3,974 Windows Server 2012 3,881 Windows Server 2012 (Server Core installation) 3,748 Windows 11 Version 25H2 3,497 Windows 11 version 26H1 3,230 Windows 10 Version 1507 2,323 Windows Server 2008 R2 Service Pack 1 1,900 Windows Server 2008 R2 Service Pack 1 (Server Core installation) 1,886 Windows 11 version 22H2 1,776 Windows Server 2022, 23H2 Edition (Server Core installation) 1,723 Windows Server 2008 Service Pack 2 1,694 Windows Server 2008 Service Pack 2 (Server Core installation) 1,689 Windows 11 Version 26H2 1,663 Windows 11 version 21H2 1,560 Windows 11 version 22H3 1,276 Windows 10 Version 20H2 1,259 Windows 8.1 1,117 Microsoft 365 Apps for Enterprise 1,105 Windows 10 Version 1903 for x64-based Systems 1,069 Windows Server, version 1903 (Server Core installation) 1,055 Windows 10 Version 1909 1,045 Windows 10 Version 1903 for ARM64-based Systems 1,037 Windows 10 Version 1903 for 32-bit Systems 1,034 Windows Server, version 1909 (Server Core installation) 989 Windows Server version 20H2 965 Microsoft Office LTSC 2021 953

All Critical High Medium Low Exploited only Public exploit

8,209 results · Clear filters · Feed

High 7.5

CVE-2019-0982

Denial of service in ASP.NET Core

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.

Microsoft ASP.NET Core Microsoft.AspNetCore.SignalR.Protocols.MessagePack NuGet

May 16, 2019
High 7.5

CVE-2019-0937

Out-of-bounds write

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2…

Microsoft Microsoft Edge ChakraCore Microsoft Edge on Windows 10 Version 1903 for ARM64-based Systems Windows Browsers NuGet

May 16, 2019
High 7.5

CVE-2019-0933

Out-of-bounds write

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2…

Microsoft Microsoft Edge ChakraCore Microsoft Edge on Windows 10 Version 1903 for 32-bit Systems Windows Browsers NuGet

May 16, 2019
High 7.5

CVE-2019-0913

Out-of-bounds write

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0914, CVE-2…

Microsoft Microsoft Edge ChakraCore Microsoft Edge on Windows 10 Version 1903 for x64-based Systems Windows Browsers NuGet

May 16, 2019
High 7.5

CVE-2019-0925

Out-of-bounds write

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2…

Microsoft Microsoft Edge ChakraCore Microsoft Edge on Windows 10 Version 1903 for 32-bit Systems Windows Browsers NuGet

May 16, 2019
High 7.5

CVE-2019-0914

Out-of-bounds write

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2…

Microsoft Microsoft Edge ChakraCore Microsoft Edge on Windows 10 Version 1903 for x64-based Systems Windows Browsers NuGet

May 16, 2019
High 7.5

CVE-2019-0916

Out-of-bounds write

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2…

Microsoft Microsoft Edge ChakraCore Microsoft Edge on Windows 10 Version 1903 for 32-bit Systems Windows Browsers NuGet

May 16, 2019
High 8.8

CVE-2019-0903 Exploited EPSS 22%

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles object…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

May 16, 2019
KEV Mar 25, 2022
High 7.5

CVE-2019-0927

Out-of-bounds write

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2…

Microsoft Microsoft Edge ChakraCore Microsoft Edge on Windows 10 Version 1903 for 32-bit Systems Windows Browsers NuGet

May 16, 2019
High 7.5

CVE-2019-0924

Out-of-bounds write

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2…

Microsoft Microsoft Edge ChakraCore Microsoft Edge on Windows 10 Version 1903 for ARM64-based Systems Windows Browsers NuGet

May 16, 2019
High 7.5

CVE-2019-0923

Out-of-bounds write

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2…

Microsoft Microsoft Edge Microsoft Edge on Windows 10 Version 1903 for 32-bit Systems Microsoft Edge on Windows 10 Version 1903 for ARM64-based Systems Windows Browsers NuGet

May 16, 2019
High 7.5

CVE-2019-0917

Out-of-bounds write

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2…

Microsoft Microsoft Edge ChakraCore Microsoft Edge on Windows 10 Version 1903 for 32-bit Systems Windows Browsers NuGet

May 16, 2019
High 7.5

CVE-2019-0922

Out-of-bounds write

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2…

Microsoft Microsoft Edge ChakraCore Microsoft Edge on Windows 10 Version 1903 for x64-based Systems Windows Browsers NuGet

May 16, 2019
High 7.5

CVE-2019-0911

Out-of-bounds write

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0884, CVE-2019-0918.

Microsoft Microsoft Edge ChakraCore Internet Explorer 11 Windows Browsers NuGet

May 16, 2019
High 7.5

CVE-2019-0912

Out-of-bounds write

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0913, CVE-2019-0914, CVE-2…

Microsoft Microsoft Edge ChakraCore Microsoft Edge on Windows 10 Version 1903 for 32-bit Systems Windows Browsers NuGet

May 16, 2019
High 7.5

CVE-2019-0915

Out-of-bounds write

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2…

Microsoft Microsoft Edge ChakraCore Microsoft Edge on Windows 10 Version 1903 for x64-based Systems Windows Browsers NuGet

May 16, 2019
High 7.8

CVE-2019-0863 Exploited Public exploit

An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Err…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

May 16, 2019
KEV Nov 3, 2021
High 7.5

CVE-2019-0820

Regular Expression Denial of Service in System.Text.RegularExpressions

A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka '.NET Framework and .NET Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0980, CVE-2019-0981.

Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 Microsoft .NET Framework 3.5.1 Windows NuGet

May 16, 2019
High 7.5

CVE-2019-0860 EPSS 11%

ChakraCore Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0806, CVE-2019-0810, CVE-2…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Apr 9, 2019
High 7.5

CVE-2019-0861 EPSS 11%

ChakraCore Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0806, CVE-2019-0810, CVE-2…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Apr 9, 2019
High 7.8

CVE-2019-0859 Exploited · Ransomware Public exploit

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

Microsoft Windows Windows Server Windows

Apr 9, 2019
KEV Nov 3, 2021
High 7.8

CVE-2019-0841 Exploited · Ransomware Public exploit EPSS 41%

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard l…

Microsoft Windows Windows Server Windows

Apr 9, 2019
KEV Mar 15, 2022
High 7.5

CVE-2019-0829

ChakraCore Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0806, CVE-2019-0810, CVE-2…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Apr 9, 2019
High 7.5

CVE-2019-0810 EPSS 12%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0806, CVE-2019-0812, CVE-2…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Apr 9, 2019
High 7.5

CVE-2019-0806

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0810, CVE-2019-0812, CVE-2…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Apr 9, 2019
High 7.5

CVE-2019-0812 EPSS 19%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0806, CVE-2019-0810, CVE-2…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Apr 9, 2019
High 7.8

CVE-2019-0803 Exploited · Ransomware Public exploit EPSS 45%

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

Microsoft Windows Windows Server Windows

Apr 9, 2019
KEV Nov 3, 2021
High 7.5

CVE-2019-0752 Exploited · Ransomware Public exploit EPSS 82%

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…

Microsoft Internet Explorer 11 Internet Explorer 10

Apr 9, 2019
KEV Feb 15, 2022
High 7.8

CVE-2019-0797 Exploited

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

Microsoft Windows Windows Server Windows

Apr 9, 2019
KEV Nov 3, 2021
High 7.8

CVE-2019-0808 Exploited Public exploit EPSS 53%

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

Microsoft Windows Windows Server Windows

Apr 9, 2019
KEV Nov 3, 2021
High 7.5

CVE-2019-0771 EPSS 10%

High severity vulnerability that affects Microsoft.ChakraCore

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0609, CVE-2019-0639, CVE-2019-0680, CVE-…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Apr 9, 2019
High 7.5

CVE-2019-0773 EPSS 10%

High severity vulnerability that affects Microsoft.ChakraCore

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0609, CVE-2019-0639, CVE-2019-0680, CVE-…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Apr 9, 2019
High 7.5

CVE-2019-0769 EPSS 10%

High severity vulnerability that affects Microsoft.ChakraCore

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0609, CVE-2019-0639, CVE-2019-0680, CVE-…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Apr 9, 2019
High 7.5

CVE-2019-0639 EPSS 12%

High severity vulnerability that affects Microsoft.ChakraCore

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0609, CVE-2019-0680, CVE-2019-0769, CVE-2019-07…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Apr 8, 2019
High 7.5

CVE-2019-0611

High severity vulnerability that affects Microsoft.ChakraCore

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0592.

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Apr 8, 2019
High 7.5

CVE-2019-0609

High severity vulnerability that affects Microsoft.ChakraCore

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0639, CVE-2019-0680, CVE-2019-0769, CVE-2…

Microsoft Microsoft Edge ChakraCore Internet Explorer 11 Browsers NuGet

Apr 8, 2019
High 7.5

CVE-2019-0592 EPSS 23%

High severity vulnerability that affects Microsoft.ChakraCore

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0611.

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Apr 8, 2019
High 8.1

CVE-2019-0649

Chakra JIT server Privilege Escalation

A vulnerability exists in Microsoft Chakra JIT server, aka 'Scripting Engine Elevation of Privileged Vulnerability'.

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Mar 6, 2019
High 7.5

CVE-2019-0567 Public exploit EPSS 80%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Jan 8, 2019
High 7.5

CVE-2019-0568 Public exploit EPSS 69%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Jan 8, 2019