Windows 10 CVEs and Security Vulnerabilities

CVE-2019-1255

A denial of service vulnerability exists when Microsoft Defender improperly handles files, aka 'Microsoft Defender Denial of Service Vulnerability'.

CVSS 3.1 · 7.5 High EPSS 4.1% KEV · Not listed

Vendors

Microsoft

Products

Forefront Endpoint Protection 2010 Security Essentials System Center Endpoint Protection and 9 more

CVE-2019-1254

An information disclosure vulnerability exists when Windows Hyper-V writes uninitialized memory to disk, aka 'Windows Hyper-V Information Disclosure Vulnerability'.

CVSS 3.1 · 5.5 Medium EPSS 1.3% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows Server 2016 Windows Server 2019

CVE-2019-1252

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1286.

CVSS 3.1 · 6.5 Medium EPSS 60.4% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 7 Windows 8.1 and 5 more

CVE-2019-1251

An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1244, CVE-2019-1245.

CVSS 3.1 · 5.5 Medium EPSS 1.7% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows Server 2016 Windows Server 2019

CVE-2019-1250

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1240, CVE-2019-1241, CVE-2019-1242, CVE-2019-1243, CVE-2019-1246, CVE-2019-1247, CVE-2019-1248, CVE-2019-1249.

CVSS 3.1 · 7.8 High EPSS 18.4% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 7 Windows 8.1 and 5 more

CVE-2019-1249

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1240, CVE-2019-1241, CVE-2019-1242, CVE-2019-1243, CVE-2019-1246, CVE-2019-1247, CVE-2019-1248, CVE-2019-1250.

CVSS 3.1 · 7.8 High EPSS 11.9% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 7 Windows 8.1 and 5 more

CVE-2019-1248

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1240, CVE-2019-1241, CVE-2019-1242, CVE-2019-1243, CVE-2019-1246, CVE-2019-1247, CVE-2019-1249, CVE-2019-1250.

CVSS 3.1 · 7.8 High EPSS 11.9% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 7 Windows 8.1 and 5 more

CVE-2019-1247

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1240, CVE-2019-1241, CVE-2019-1242, CVE-2019-1243, CVE-2019-1246, CVE-2019-1248, CVE-2019-1249, CVE-2019-1250.

CVSS 3.1 · 7.8 High EPSS 11.9% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 7 Windows 8.1 and 5 more

CVE-2019-1246

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1240, CVE-2019-1241, CVE-2019-1242, CVE-2019-1243, CVE-2019-1247, CVE-2019-1248, CVE-2019-1249, CVE-2019-1250.

CVSS 3.1 · 7.8 High EPSS 12.6% KEV · Not listed

Vendors

Microsoft

Products

Office Office 365 Proplus Windows 10 and 7 more

CVE-2019-1245

An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1244, CVE-2019-1251.

CVSS 3.1 · 6.5 Medium EPSS 12.9% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 7 Windows 8.1 and 5 more

CVE-2019-1244

An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1245, CVE-2019-1251.

CVSS 3.1 · 6.5 Medium EPSS 12.1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 7 Windows 8.1 and 5 more

CVE-2019-1243

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1240, CVE-2019-1241, CVE-2019-1242, CVE-2019-1246, CVE-2019-1247, CVE-2019-1248, CVE-2019-1249, CVE-2019-1250.

CVSS 3.1 · 7.8 High EPSS 18.4% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 7 Windows 8.1 and 5 more

CVE-2019-1242

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1240, CVE-2019-1241, CVE-2019-1243, CVE-2019-1246, CVE-2019-1247, CVE-2019-1248, CVE-2019-1249, CVE-2019-1250.

CVSS 3.1 · 7.8 High EPSS 11.9% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 7 Windows 8.1 and 5 more

CVE-2019-1241

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1240, CVE-2019-1242, CVE-2019-1243, CVE-2019-1246, CVE-2019-1247, CVE-2019-1248, CVE-2019-1249, CVE-2019-1250.

CVSS 3.1 · 7.8 High EPSS 17.2% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 7 Windows 8.1 and 5 more

CVE-2019-1240

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1241, CVE-2019-1242, CVE-2019-1243, CVE-2019-1246, CVE-2019-1247, CVE-2019-1248, CVE-2019-1249, CVE-2019-1250.

CVSS 3.1 · 7.8 High EPSS 11.9% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 7 Windows 8.1 and 5 more

CVE-2019-1239

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1238.

CVSS 3.1 · 7.5 High EPSS 7.5% KEV · Not listed

Vendors

Microsoft

Products

Internet Explorer Windows 10 Windows Server 2019

CVE-2019-1238

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1239.

CVSS 3.1 · 6.4 Medium EPSS 5.9% KEV · Not listed

Vendors

Microsoft

Products

Internet Explorer Windows 10 Windows 7 and 6 more

CVE-2019-1237

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1138, CVE-2019-1217, CVE-2019-1298, CVE-2019-1300.

CVSS 3.1 · 7.5 High EPSS 8.7% KEV · Not listed

Vendors

Microsoft

Products

Chakracore Edge Windows 10 and 2 more

CVE-2019-1236

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1208.

CVSS 3.1 · 7.5 High EPSS 7.5% KEV · Not listed

Vendors

Microsoft

Products

Internet Explorer Windows 10 Windows 7 and 6 more

CVE-2019-1235

An elevation of privilege vulnerability exists in Windows Text Service Framework (TSF) when the TSF server process does not validate the source of input or commands it receives, aka 'Windows Text Service Framework Elevation of Privilege Vulnerability'.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 7 Windows 8.1 and 5 more

Search vulnerabilities