2019 CVE Vulnerabilities

17,623 CVEs published in 2019.

CVE IDSeverityCVSSDescription
CVE-2019-1269HIGH7.8An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (A...
CVE-2019-1268HIGH7.8An elevation of privilege exists when Winlogon does not properly handle file path information, aka 'Winlogon Elevation o...
CVE-2019-1267HIGH7.8An elevation of privilege vulnerability exists in Microsoft Compatibility Appraiser where a configuration file, with loc...
CVE-2019-1266MEDIUM6.1A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web App (OWA) fails to properly handle web req...
CVE-2019-1265HIGH7.5A security feature bypass vulnerability exists when Microsoft Yammer App for Android fails to apply the correct Intune M...
CVE-2019-1264HIGH7.8A security feature bypass vulnerability exists when Microsoft Office improperly handles input, aka 'Microsoft Office Sec...
CVE-2019-1263MEDIUM5.5An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka...
CVE-2019-1262MEDIUM5.4A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall...
CVE-2019-1261HIGH8.8A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, r...
CVE-2019-1260MEDIUM6.5An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege...
CVE-2019-1259HIGH8.8A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, r...
CVE-2019-1257HIGH8.8A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup ...
CVE-2019-1256HIGH7.8An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in ...
CVE-2019-1254MEDIUM5.5An information disclosure vulnerability exists when Windows Hyper-V writes uninitialized memory to disk, aka 'Windows Hy...
CVE-2019-1253HIGH7.8An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To e...
CVE-2019-1252MEDIUM6.5An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m...
CVE-2019-1251MEDIUM5.5An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'Di...
CVE-2019-1250HIGH7.8A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, ...
CVE-2019-1249HIGH7.8A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, ...
CVE-2019-1248HIGH7.8A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, ...
CVE-2019-1247HIGH7.8A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, ...
CVE-2019-1246HIGH7.8A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, ...
CVE-2019-1245MEDIUM6.5An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'Di...
CVE-2019-1244MEDIUM6.5An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'Di...
CVE-2019-1243HIGH7.8A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, ...

Check if your code is affected by 2019 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now