Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2017-11774 | not reported | — | Listed | Microsoft Office Outlook contains a security feature bypass vulnerability due to improperly handling objects in memory. Successful exploitat... | — |
| CVE-2019-1429 | not reported | — | Listed | Microsoft Internet Explorer contains a memory corruption vulnerability which can allow for remote code execution in the context of the curre... | — |
| CVE-2020-1380 | not reported | — | Listed | Microsoft Internet Explorer contains a memory corruption vulnerability which can allow for remote code execution in the context of the curre... | — |
| CVE-2017-0199 | not reported | — | Listed | Microsoft Office and WordPad contain an unspecified vulnerability due to the way the applications parse specially crafted files. Successful... | — |
| CVE-2019-1367 | not reported | — | Listed | Microsoft Internet Explorer contains a memory corruption vulnerability in how the scripting engine handles objects in memory. Successful exp... | — |
| CVE-2021-27059 | not reported | — | Listed | Microsoft Office contains an unspecified vulnerability that allows for remote code execution. | — |
| CVE-2020-0674 | not reported | — | Listed | Microsoft Internet Explorer contains a memory corruption vulnerability due to the way the Scripting Engine handles objects in memory. Succes... | — |
| CVE-2017-11882 | not reported | — | Listed | Microsoft Office contains a memory corruption vulnerability that allows remote code execution in the context of the current user. | — |
| CVE-2019-0541 | not reported | — | Listed | Microsoft MSHTML engine contains an improper input validation vulnerability that allows for remote code execution vulnerability. | — |
| CVE-2021-27085 | not reported | — | Listed | Microsoft Internet Explorer contains an unspecified vulnerability that allows for remote code execution. | — |
| CVE-2015-1641 | not reported | — | Listed | Microsoft Office contains a memory corruption vulnerability due to failure to properly handle rich text format files in memory. Successful e... | — |
| CVE-2012-0158 | not reported | — | Listed | Microsoft MSCOMCTL.OCX contains an unspecified vulnerability that allows for remote code execution, allowing an attacker to take complete co... | — |
| CVE-2018-0802 | not reported | — | Listed | Microsoft Office contains a memory corruption vulnerability due to the way objects are handled in memory. Successful exploitation allows for... | — |
| CVE-2018-0798 | not reported | — | Listed | Microsoft Office contains a memory corruption vulnerability due to the way objects are handled in memory. Successful exploitation allows for... | — |
| CVE-2019-1215 | not reported | — | Listed | Microsoft Windows contains an unspecified vulnerability due to the way ws2ifsl.sys (Winsock) handles objects in memory, allowing for privile... | — |
| CVE-2021-36942 | not reported | — | Listed | Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability allowing an unauthenticated attacker to call a method on... | — |
| CVE-2019-0797 | not reported | — | Listed | Microsoft Win32k contains a privilege escalation vulnerability when the Win32k component fails to properly handle objects in memory. Success... | — |
| CVE-2018-8653 | not reported | — | Listed | Microsoft Internet Explorer contains a memory corruption vulnerability due to how the Scripting Engine handles objects in memory, leading to... | — |
| CVE-2017-8759 | not reported | — | Listed | Microsoft .NET Framework contains a remote code execution vulnerability when processing untrusted input that could allow an attacker to take... | — |
| CVE-2021-40444 | not reported | — | Listed | Microsoft MSHTML contains a unspecified vulnerability that allows for remote code execution. | — |