Filter by Date
- 2021
  - 1 06-2021
  - 1 04-2021
  - 1 03-2021
  - 1 01-2021
- 2020
  - 1 09-2020
  - 2 08-2020
  - 2 07-2020
  - 1 06-2020
  - 2 02-2020
- 2019
  - 2 11-2019
  - 1 08-2019
  - 1 07-2019
  - 1 04-2019
  - 1 03-2019
  - 2 02-2019
  - 4 01-2019
- 2018
  - 2 10-2018
  - 4 09-2018
  - 3 08-2018
  - 1 06-2018
  - 3 01-2018
- 2017
  - 3 12-2017
  - 1 10-2017
  - 1 09-2017
  - 1 08-2017
  - 2 07-2017
  - 1 06-2017
  - 1 05-2017
- 2016
  - 3 12-2016
  - 3 11-2016
  - 2 09-2016
  - 1 08-2016
  - 1 06-2016
  - 1 04-2016
- 2015
  - 1 11-2015
  - 1 10-2015
  - 6 09-2015
  - 1 06-2015
  - 2 05-2015
- 2010
  - 1 09-2010
  - 2 08-2010
  - 2 07-2010
- 2009
  - 1 11-2009
  - 1 07-2009
  - 1 06-2009
  - 2 04-2009
  - 2 03-2009
  - 1 02-2009
  - 1 01-2009
- 2008
  - 3 10-2008
  - 2 09-2008
  - 1 08-2008
  - 1 04-2008
  - 1 01-2008
- 2007
  - 1 08-2007
- 2006
  - 1 09-2006
  - 1 08-2006
  - 1 07-2006
  - 1 06-2006
Filter by Risk
- 22
- 53
- 21
- 0
- 0
Filter by Vendor
- All
- 96 Microsoft

Refine Search

Zero-Day Research | Fixes Available

Fortinet's team of dedicated expert researchers and analysts examine many third party products and software applications daily, looking for weaknesses and exploitable vulnerabilities. When a vulnerability is found the Fortiguard Lab teams work together to create protective measures that can be delivered to our customers and notify the software/product vendor of the vulnerability. Learn More

Vulnerability Severity Level

FortiGuard Event Name's Severity Level is mainly based on the ratings set forth by the Common Vulnerability Scoring System (CVSS). The CVSS is a vendor-neutral, industry standard that provides an open framework for communicating the characteristics and impacts of IT vulnerabilities.

FortiGuard Security Level	CVSS v2 Rating
Critical	9 - 10
High	7 - 8.9
Medium	4 - 6.9
Low	0.1 - 3.9
Info	0

Common Vulnerability Scoring System Version 2.0

The Common Vulnerability Scoring System (CVSS) provides an open framework for communicating the characteristics and impacts of IT vulnerabilities. CVSS consists of 3 groups: Base, Temporal and Environmental.

Each group produces a numeric score ranging from 0 to 10, and a Vector, a compressed textual representation that reflects the values used to derive the score. The Base group represents the intrinsic qualities of a vulnerability. The Temporal group reflects the characteristics of a vulnerability that change over time.

The Environmental group represents the characteristics of a vulnerability that are unique to any user's environment. CVSS enables IT managers, vulnerability bulletin providers, security vendors, application vendors and researchers to all benefit by adopting this common language of scoring IT vulnerabilities.

Exceptions

If there is no CVSS rating posted, then the CVSS rating is calculated. A Base Score tool form is available at: http://nvd.nist.gov/cvss.cfm
If the vulnerable software/system is not common in a business network environment and the FortiGuard Severity Level would normally be Critical, then the FortiGuard Severity Level may be reduced to High.
If the vulnerability is a Denial of Service (DoS) attack and only affecting the availability of a remote service or host, then the FortiGuard Severity Level is adjusted to at most Medium for Client-side DoS and High for Server-side DoS
For any "remote code execution" type of vulnerability, the FortiGuard Severity Level is set to either High or Critical.

Exceptions

For identifying or detecting network traffic, the FortiGuard Severity Level is set to Informational.
For a vulnerability/exploit that is highly active, the FortiGuard Severity Level is temporarily set to either High or Critical. Later, the level may be reduced back to its normal level; generally this is based on the temporal parameter of a vulnerability.
For zero-day vulnerabilities where the rating has not yet been fully evaluated, the FortiGuard Severity Level is generally set at either Medium or High.

For more information on CVSS, visit A Complete Guide to the Common Vulnerability Scoring System Version 2.0.

Please view our Responsible Disclosure Policies

FG-VD-19-149 (Microsoft)

Fortinet Discovers Microsoft Windows Imaging Library UncompressFile Memory Corruption

Discovered: Nov 19, 2019 Released: Feb 13, 2020 Risk

CVE-2020-0708

FG-VD-19-004 (Microsoft)

Fortinet Discovers Microsoft Windows JET Database Engine Remote Code Execution Vulnerability

Discovered: Jan 09, 2019 Released: Apr 09, 2019 Risk

CVE-2019-0851

FG-VD-19-026 (Microsoft)

Fortinet Discovers Microsoft Windows JET Database Engine Remote Code Execution Vulnerability

Discovered: Feb 26, 2019 Released: Apr 09, 2019 Risk

CVE-2019-0825

FG-VD-18-003 (Microsoft)

Fortinet Discovers Microsoft Windows Webservices Library Denial of Service Vulnerability

Discovered: Jan 05, 2018 Released: Jun 12, 2018 Risk

CVE-2018-8205

FG-VD-17-146 (Microsoft)

Fortinet Discovers Microsoft Windows Embedded OpenType Font Engine Information Disclosure Vulnerability II

Discovered: Aug 04, 2017 Released: Nov 15, 2017 Risk

CVE-2017-11832

FG-VD-09-030 (Microsoft)

Fortinet Discovers Microsoft Excel Vulnerability

Discovered: Nov 25, 2009 Released: Jun 08, 2010 Risk

CVE-2010-0823

FG-VD-09-020 (Microsoft)

Fortinet Discovers Memory Corruption In Microsoft Excel Excel.exe Module

Discovered: Jun 18, 2009 Released: Nov 10, 2009 Risk

CVE-2009-3134

FG-VD-09-001 (Microsoft)

Fortinet Discovers Multiple Memory Corruption Vulnerabilities In Microsoft Office Excel Excel.exe Module

Discovered: Jan 20, 2009 Released: Jun 10, 2009 Risk

CVE-2009-0549

FG-VD-08-041 (Microsoft)

Fortinet Discovers Remote Code Execution Vulnerability In Microsoft Internet Explorer

Discovered: Oct 29, 2008 Released: Jun 09, 2009 Risk

CVE-2009-1141

FG-VD-08-044 (Microsoft)

Fortinet Discovers Memory Corruption Vulnerabilities In Microsoft Office Visio

Discovered: Jan 04, 2008 Released: Mar 04, 2009 Risk

CVE-2009-0096

FG-VD-06-006 (Microsoft)

Stack Overflow Vulnerability in Microsoft Excel

Discovered: Jun 15, 2006 Released: Jun 30, 2006 Risk

CVE-2006-0029

FG-VD-20-112 (Microsoft)

Fortinet Discovers MSRawImage Store Kodak Decoders Out-of-bound Memory Write Vulnerability

Discovered: Aug 06, 2020 Risk

CVE-2020-17082

FG-VD-21-048 (Microsoft)

Fortinet Discovers Microsoft Windows Installer Authenticode Signature Validation Bypass Vulnerability

Discovered: Apr 23, 2021 Released: Jul 20, 2021 Risk

CVE-2021-33765

FG-VD-20-129 (Microsoft)

Fortinet Discovers MSRawImage Store Raw Decoders Out-of-bound Memory Write Vulnerability

Discovered: Aug 06, 2020 Released: Nov 17, 2020 Risk

CVE-2020-17078

FG-VD-20-040 (Microsoft)

Fortinet Discovers Microsoft Windows 10 Platform Privilege Escalation Vulnerability

Discovered: Feb 08, 2020 Released: Jun 09, 2020 Risk

CVE-2020-1296

FG-VD-18-145 (Microsoft)

Fortinet Discovers Microsoft Windows Storage Service Elevation of Privilege Vulnerability

Discovered: Oct 15, 2018 Released: Feb 13, 2019 Risk

CVE-2019-0659

FG-VD-18-141 (Microsoft)

Fortinet Discovers Microsoft Office Outlook Remote Code Execution Vulnerability

Discovered: Sep 29, 2018 Released: Dec 11, 2018 Risk

CVE-2018-8587

FG-VD-18-105 (Microsoft)

Fortinet Discovers Microsoft Windows JET Database Engine Buffer Overflow Vulnerability

Discovered: Jun 14, 2018 Released: Sep 11, 2018 Risk

CVE-2018-8392

FG-VD-17-207 (Microsoft)

Fortinet Discovers Microsoft Word RTF File Handling Memory Corruption Vulnerability

Discovered: Oct 26, 2017 Released: Jan 10, 2018 Risk

CVE-2018-0797

FG-VD-16-094 (Microsoft)

Fortinet Discovers Microsoft Windows Server WINS Server Remote Memory Corruption Vulnerability

Discovered: Dec 27, 2016 Released: Jun 12, 2017 Risk

At a glance: RESET

Zero-Day Research | Fixes Available

At a glance:
RESET