Microsoft Vulnerability Research (MSVR) Advisories Archive

Microsoft Vulnerability Research (MSVR) Advisories describe security vulnerabilities that Microsoft or security researchers discovered in third-party products or services, and which Microsoft has disclosed to the affected vendors. Microsoft performs this disclosure to the affected vendor under the procedures described in Coordinated Vulnerability Disclosure.

Protect Your PC

Microsoft has the following information about how you can help protect your PC:

All Published or Updated MSVR Advisories:

Advisory NumberAdvisory DescriptionDate
Microsoft Security Advisory (MSVR13-005)Vulnerability in SumatraPDF Reader Could Allow Remote Code ExecutionTuesday, April 16, 2013
Microsoft Security Advisory (MSVR13-004)Vulnerability in DjVuLibre Could Allow Remote Code ExecutionTuesday, March 19, 2013
Microsoft Security Advisory (MSVR13-003)Vulnerability in VMware VMCI.sys Could Allow Local Elevation of PrivilegeTuesday, February 19, 2013
Microsoft Security Advisory (MSVR13-002)Vulnerability in VMware OVF Tool Could Allow Arbitrary Code ExecutionTuesday, February 19, 2013
Microsoft Security Advisory (MSVR13-001)Vulnerability in Lenovo ThinkPad Bluetooth with Enhanced Data Rate Software Could Allow Arbitrary Code ExecutionTuesday, January 15, 2013
Microsoft Security Advisory (MSVR12-021)Memory Corruption in QuickTime Could Allow Arbitrary Code ExecutionTuesday, December 18, 2012
Microsoft Security Advisory (MSVR12-020)Oracle AutoVue DXF Parsing Could Allow Arbitrary Code ExecutionTuesday, November 20, 2012
Microsoft Security Advisory (MSVR12-019)Oracle AutoVue DGN Parsing Could Allow Arbitrary Code ExecutionTuesday, November 20, 2012
Microsoft Security Advisory (MSVR12-018)Memory Corruption in Symantec Ghost Could Allow Arbitrary Code ExecutionTuesday, November 20, 2012
Microsoft Security Advisory (MSVR12-016)Vulnerabilities in Ektron CMS Could Allow Arbitrary Code ExecutionWednesday, November 14, 2012
Microsoft Security Advisory (MSVR12-017)Vulnerabilities in FFmpeg Libavcodec Could Allow Arbitrary Code ExecutionTuesday, October 16, 2012
Microsoft Security Advisory (MSVR12-015)Memory Corruption in Google SketchUp Could Allow Arbitrary Code ExecutionTuesday, September 18, 2012
Microsoft Security Advisory (MSVR12-014)Vulnerabilities in SumatraPDF Reader Could Allow Arbitrary Code ExecutionTuesday, September 18, 2012
Microsoft Security Advisory (MSVR12-013)Vulnerability in Foxit Reader Could Allow Arbitrary Code ExecutionTuesday, August 21, 2012
Microsoft Security Advisory (MSVR12-012)Safari Content-Disposition Handling Could Allow Cross-site ScriptingTuesday, August 21, 2012
Microsoft Security Advisory (MSVR12-011)Vulnerabilities in Nullsoft Winamp Could Allow Arbitrary Code ExecutionTuesday, July 17, 2012
Microsoft Security Advisory (MSVR12-010)Vulnerability in Cisco WebEx Player Could Allow Remote Code ExecutionTuesday, July 17, 2012
Microsoft Security Advisory (MSVR12-009)Vulnerability in LongTail Video JW Player Could Allow Cross-Site ScriptingTuesday, June 19, 2012
Microsoft Security Advisory (MSVR12-008)Vulnerability in Google Chrome Could Allow Local Code ExecutionTuesday, June 19, 2012
Microsoft Security Advisory (MSVR12-007)Apple QuickTime MPEG Parsing Memory CorruptionThursday, May 17, 2012
Microsoft Security Advisory (MSVR12-006)Vulnerability in RealNetworks Helix Universal Media Server Could Allow Denial of ServiceTuesday, April 17, 2012
Microsoft Security Advisory (MSVR12-005)Vulnerabilities in RealNetworks Helix Server Could Allow Arbitrary Script ExecutionTuesday, April 17, 2012
Microsoft Security Advisory (MSVR12-004)JPEG 2000 Memory Overwrite Vulnerability in OpenJPEG Could Allow Arbitrary Code ExecutionTuesday, March 20, 2012
Microsoft Security Advisory (MSVR12-003)Vulnerability in DotNetNuke Could Allow Arbitrary Script ExecutionTuesday, February 21, 2012
Microsoft Security Advisory (MSVR12-002)Vulnerability in DotNetNuke Could Allow Arbitrary Script ExecutionTuesday, February 21, 2012
Microsoft Security Advisory (MSVR12-001)Vulnerabilities in XnViewer Could Allow Remote Code ExecutionTuesday, January 17, 2012
Microsoft Security Advisory (MSVR11-015)Vulnerability in Hex-Rays IDA Pro, IDAPython Plugin Could Allow Arbitrary Script ExecutionWednesday, December 21, 2011
Microsoft Security Advisory (MSVR11-016)Vulnerability in NVIDIA Stereoscopic 3D Driver Could Allow Elevation of PrivilegeTuesday, December 20, 2011
Microsoft Security Advisory (MSVR11-014)Vulnerability in Wireshark Allows For Arbitrary Script ExecutionTuesday, November 15, 2011
Microsoft Security Advisory (MSVR11-013)Vulnerability in Wireshark Could Allow Remote Code ExecutionTuesday, October 18, 2011
Microsoft Security Advisory (MSVR11-012)Vulnerability in FFmpeg Could Allow Remote Code ExecutionTuesday, October 18, 2011
Microsoft Security Advisory (MSVR11-011)Vulnerability in FFmpeg Matroska Format Decoder Could Allow Remote Code ExecutionTuesday, September 20, 2011
Microsoft Security Advisory (MSVR11-010)Vulnerability in WordPress Could Allow Cross-Domain Script ExecutionTuesday, August 16, 2011
Microsoft Security Advisory (MSVR11-009)Vulnerability in Apple Safari Could Allow Information DisclosureTuesday, August 16, 2011
Microsoft Security Advisory (MSVR11-008)Vulnerability in Google Picasa Could Allow Remote Code ExecutionTuesday, July 19, 2011
Microsoft Security Advisory (MSVR11-007)Clickjacking Vulnerability in Facebook.com Could Allow Account CompromiseTuesday, July 19, 2011
Microsoft Security Advisory (MSVR11-006)Vulnerability in Google SketchUp Could Allow Remote Code ExecutionTuesday, June 21, 2011
Microsoft Security Advisory (MSVR11-005)Vulnerability in Foxit Reader Could Allow Remote Code ExecutionTuesday, June 21, 2011
Microsoft Security Advisory (MSVR11-004)Vulnerability in RealNetworks RealPlayer RichFX Component Could Allow Remote Code ExecutionTuesday, May 17, 2011
Microsoft Security Advisory (MSVR11-003)Vulnerability in RealNetworks RealPlayer Could Allow Remote Code ExecutionTuesday, May 17, 2011
Microsoft Security Advisory (MSVR11-002)HTML5 Implementation in Chrome, Opera, and Safari Could Allow Information DisclosureTuesday, May 17, 2011
Microsoft Security Advisory (MSVR11-001)Use-After-Free Object Lifetime Vulnerability in Chrome Could Allow Sandboxed Remote Code ExecutionTuesday, April 19, 2011


Disclamer

The information provided in this page is provided "as is" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.