Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2021-27059 | not reported | — | Listed | Microsoft Office contains an unspecified vulnerability that allows for remote code execution. | — |
| CVE-2020-0674 | not reported | — | Listed | Microsoft Internet Explorer contains a memory corruption vulnerability due to the way the Scripting Engine handles objects in memory. Succes... | — |
| CVE-2017-11882 | not reported | — | Listed | Microsoft Office contains a memory corruption vulnerability that allows remote code execution in the context of the current user. | — |
| CVE-2019-0541 | not reported | — | Listed | Microsoft MSHTML engine contains an improper input validation vulnerability that allows for remote code execution vulnerability. | — |
| CVE-2021-27085 | not reported | — | Listed | Microsoft Internet Explorer contains an unspecified vulnerability that allows for remote code execution. | — |
| CVE-2015-1641 | not reported | — | Listed | Microsoft Office contains a memory corruption vulnerability due to failure to properly handle rich text format files in memory. Successful e... | — |
| CVE-2012-0158 | not reported | — | Listed | Microsoft MSCOMCTL.OCX contains an unspecified vulnerability that allows for remote code execution, allowing an attacker to take complete co... | — |
| CVE-2018-0802 | not reported | — | Listed | Microsoft Office contains a memory corruption vulnerability due to the way objects are handled in memory. Successful exploitation allows for... | — |
| CVE-2018-0798 | not reported | — | Listed | Microsoft Office contains a memory corruption vulnerability due to the way objects are handled in memory. Successful exploitation allows for... | — |
| CVE-2019-1215 | not reported | — | Listed | Microsoft Windows contains an unspecified vulnerability due to the way ws2ifsl.sys (Winsock) handles objects in memory, allowing for privile... | — |
| CVE-2021-36942 | not reported | — | Listed | Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability allowing an unauthenticated attacker to call a method on... | — |
| CVE-2019-0797 | not reported | — | Listed | Microsoft Win32k contains a privilege escalation vulnerability when the Win32k component fails to properly handle objects in memory. Success... | — |
| CVE-2018-8653 | not reported | — | Listed | Microsoft Internet Explorer contains a memory corruption vulnerability due to how the Scripting Engine handles objects in memory, leading to... | — |
| CVE-2017-8759 | not reported | — | Listed | Microsoft .NET Framework contains a remote code execution vulnerability when processing untrusted input that could allow an attacker to take... | — |
| CVE-2021-40444 | not reported | — | Listed | Microsoft MSHTML contains a unspecified vulnerability that allows for remote code execution. | — |
| CVE-2019-0859 | not reported | — | Listed | Microsoft Win32k fails to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run... | — |
| CVE-2020-1350 | not reported | — | Listed | Microsoft Windows DNS Servers fail to properly handle requests, allowing an attacker to perform remote code execution in the context of the... | — |
| CVE-2021-28310 | not reported | — | Listed | Microsoft Windows Win32k contains an unspecified vulnerability that allows for privilege escalation. | — |
| CVE-2020-1040 | not reported | — | Listed | Microsoft Hyper-V RemoteFX vGPU contains an improper input validation vulnerability due to the host server failing to properly validate inpu... | — |
| CVE-2019-0803 | not reported | — | Listed | Microsoft Win32k contains an unspecified vulnerability due to it failing to properly handle objects in memory causing privilege escalation.... | — |