Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2019
April

CVEs published in April 2019

1,481 vulnerabilities, 188 critical, 17 exploited.

Known exploitedIn KEVPublic exploitFix available

fortinet fortisandboxA reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiSandbox before 3.0 may...CVE-2018-13566.1 MediumApril 9, 2019
forcepoint email securityA configuration issue has been discovered in Forcepoint Email Security 8.4.x and 8.5.x: the...CVE-2019-61409.8 CriticalApril 9, 2019
check point ipsec vpnCheck Point IKEv2 IPsec VPN up to R80.30, in some less common conditions, may allow an attacker...CVE-2019-8456EPSS 20.4%5.9 MediumApril 9, 2019
symantec vip enterprise gatewaySymantec VIP Enterprise Gateway (all versions) may be susceptible to a cross-site scripting (XSS)...CVE-2019-96966.1 MediumApril 9, 2019
microsoft windows, windows server, windows 10 +7 more +9 moreA remote code execution vulnerability exists when the Windows Jet Database Engine improperly...CVE-2019-08797.8 HighApril 9, 2019
microsoft windows, windows server, windows 10 +7 more +9 moreA remote code execution vulnerability exists when the Windows Jet Database Engine improperly...CVE-2019-08777.8 HighApril 9, 2019
microsoft open enclave sdk, open enclave software development kit +1 moreAn information disclosure vulnerability exists when affected Open Enclave SDK versions improperly...CVE-2019-08765.5 MediumApril 9, 2019
microsoft azure devops serverAn elevation of privilege vulnerability exists when Azure DevOps Server 2019 does not properly...CVE-2019-08757.5 HighApril 9, 2019
microsoft azure devops serverA Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly...CVE-2019-08746.1 MediumApril 9, 2019
microsoft azure devops server, team foundation server, team foundation server 2018 +2 moreA Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation...CVE-2019-08716.1 MediumApril 9, 2019
microsoft azure devops server, team foundation server, team foundation server 2018 +2 moreA Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation...CVE-2019-08706.1 MediumApril 9, 2019
microsoft azure devops serverA spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails to properly handle...CVE-2019-08696.1 MediumApril 9, 2019
microsoft azure devops server, team foundation server, team foundation server 2018 +2 moreA Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation...CVE-2019-08686.1 MediumApril 9, 2019
microsoft azure devops server, team foundation server, team foundation server 2018 +2 moreA Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation...CVE-2019-08676.1 MediumApril 9, 2019
microsoft azure devops server, team foundation server, team foundation server 2015 +1 more +3 moreA Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation...CVE-2019-08666.1 MediumApril 9, 2019
microsoft internet explorer, internet explorer 10, internet explorer 11 +2 moreA remote code execution vulnerability exists in the way that the scripting engine handles objects...CVE-2019-0862EPSS 11.1%7.5 HighApril 9, 2019
microsoft chakracore, edge +1 moreChakraCore Memory Corruption VulnerabilityCVE-2019-0861Fix availableEPSS 11.1%7.5 HighApril 9, 2019
microsoft chakracore, edge +1 moreChakraCore Memory Corruption VulnerabilityCVE-2019-0860Fix availableEPSS 10.8%7.5 HighApril 9, 2019
microsoft win32k, windows, windows server +15 more +17 moreAn elevation of privilege vulnerability exists in Windows when the Win32k component fails to...CVE-2019-0859In KEVPublic exploit7.8 HighApril 9, 2019
microsoft exchange server, exchange server 2013, exchange server 2016 +1 more +3 moreA spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails...CVE-2019-08586.1 MediumApril 9, 2019
microsoft azure devops serverA spoofing vulnerability that could allow a security feature bypass exists in when Azure DevOps...CVE-2019-08576.5 MediumApril 9, 2019
microsoft windows, windows server, windows 10 +7 more +9 moreA remote code execution vulnerability exists when Windows improperly handles objects in memory,...CVE-2019-0856EPSS 19.4%7.2 HighApril 9, 2019
microsoft windows, windows server, windows 10 +7 more +9 moreA remote code execution vulnerability exists in the way that the Windows Graphics Device...CVE-2019-0853EPSS 30.1%8.8 HighApril 9, 2019
microsoft windows, windows server, windows 10 +7 more +9 moreA remote code execution vulnerability exists when the Windows Jet Database Engine improperly...CVE-2019-0851EPSS 16.1%7.8 HighApril 9, 2019
microsoft windows, windows server, windows 10 +7 more +9 moreAn information disclosure vulnerability exists when the Windows GDI component improperly...CVE-2019-08496.5 MediumApril 9, 2019
microsoft windows, windows server, windows 10 +7 more +9 moreAn information disclosure vulnerability exists when the win32k component improperly provides...CVE-2019-08485.5 MediumApril 9, 2019
microsoft windows, windows server, windows 10 +7 more +9 moreA remote code execution vulnerability exists when the Windows Jet Database Engine improperly...CVE-2019-0847EPSS 16.1%7.8 HighApril 9, 2019
microsoft windows, windows server, windows 10 +7 more +9 moreA remote code execution vulnerability exists when the Windows Jet Database Engine improperly...CVE-2019-0846EPSS 16.1%7.8 HighApril 9, 2019
microsoft windows, windows server, windows 10 +7 more +9 moreA remote code execution vulnerability exists when the IOleCvt interface renders ASP webpage...CVE-2019-0845EPSS 14.8%8.8 HighApril 9, 2019
microsoft windows, windows server, windows 10 +7 more +9 moreAn information disclosure vulnerability exists when the Windows kernel improperly handles objects...CVE-2019-08445.5 MediumApril 9, 2019
microsoft windows, windows server, windows 10 +7 more +9 moreA remote code execution vulnerability exists in the way that the VBScript engine handles objects...CVE-2019-0842EPSS 18.0%8.8 HighApril 9, 2019
microsoft windows, windows server, windows 10 1703 +5 more +7 moreAn elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC)...CVE-2019-0841In KEVPublic exploitEPSS 41.4%7.8 HighApril 9, 2019
microsoft windows, windows server, windows 10 +2 more +4 moreAn information disclosure vulnerability exists when the Windows kernel improperly handles objects...CVE-2019-08405.5 MediumApril 9, 2019
microsoft windows, windows server, windows 10 +7 more +9 moreAn information disclosure vulnerability exists when the Terminal Services component improperly...CVE-2019-08394.4 MediumApril 9, 2019
microsoft windows, windows server, windows 10 +7 more +9 moreAn information disclosure vulnerability exists when Windows Task Scheduler improperly discloses...CVE-2019-08387.8 HighApril 9, 2019
microsoft windows, windows server, windows 10 +1 more +3 moreAn information disclosure vulnerability exists when DirectX improperly handles objects in memory,...CVE-2019-08375.5 MediumApril 9, 2019
microsoft windows, windows server, windows 10 +7 more +9 moreAn elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV...CVE-2019-0836Public exploit7.8 HighApril 9, 2019
microsoft internet explorer 10, internet explorer 11, internet explorer +2 moreAn information disclosure vulnerability exists when the scripting engine does not properly handle...CVE-2019-08356.5 MediumApril 9, 2019
microsoft edgeAn information disclosure vulnerability exists when Microsoft Edge improperly handles objects in...CVE-2019-08336.5 MediumApril 9, 2019
microsoft sharepoint server, sharepoint enterprise server, sharepoint foundation +2 moreA cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not...CVE-2019-08315.4 MediumApril 9, 2019
microsoft sharepoint server, sharepoint enterprise server, sharepoint foundation +2 moreA cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not...CVE-2019-08305.4 MediumApril 9, 2019
microsoft chakracore, edge +1 moreChakraCore Memory Corruption VulnerabilityCVE-2019-0829Fix available7.5 HighApril 9, 2019
microsoft excel, office, office 365 proplus +2 moreA remote code execution vulnerability exists in Microsoft Excel software when the software fails...CVE-2019-0828EPSS 13.7%7.8 HighApril 9, 2019
microsoft office, office 365 proplus +1 moreA remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine...CVE-2019-0827EPSS 10.5%7.8 HighApril 9, 2019
microsoft office, office 365 proplus +1 moreA remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine...CVE-2019-0826EPSS 10.5%7.8 HighApril 9, 2019
microsoft office, office 365 proplus +1 moreA remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine...CVE-2019-0825EPSS 10.5%7.8 HighApril 9, 2019
microsoft office, office 365 proplus +1 moreA remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine...CVE-2019-0824EPSS 10.5%7.8 HighApril 9, 2019
microsoft officeA remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine...CVE-2019-0823EPSS 10.5%7.8 HighApril 9, 2019
microsoft office, office 365 proplus +1 moreA remote code execution vulnerability exists in the way that Microsoft Graphics Components handle...CVE-2019-0822EPSS 13.7%7.8 HighApril 9, 2019
microsoft exchange server, exchange server 2013, exchange server 2016 +1 more +3 moreA spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails...CVE-2019-08175.4 MediumApril 9, 2019
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open