Vendor · Vulnerability hub
Microsoft vulnerabilities
Vulnerabilities and patches across Windows, Exchange Server, Outlook, Active Directory, and Azure — including Patch Tuesday triage and zero-days under active exploitation.
We track 404 Microsoft CVEs, 392 of them on CISA's Known Exploited Vulnerabilities catalog (117 flagged for ransomware use). The latest KEV addition is CVE-2026-124194, added .
- CVEs tracked
- 404
- On CISA KEV
- 392
- Ransomware use
- 117
- Rated critical
- 37
Most-exploited Microsoft products
Windows172 on KEV · 47 ransomwareInternet Explorer36 on KEV · 6 ransomwareOffice30 on KEV · 3 ransomwareWin32k25 on KEV · 11 ransomwareExchange Server18 on KEV · 14 ransomwareSharePoint15 on KEV · 8 ransomwareDefender5 on KEV · 2 ransomwareOpen Management Infrastructure (OMI)4 on KEV · 1 ransomwareSMBv14 on KEV · 4 ransomwareWord4 on KEVActive Directory3 on KEV · 2 ransomwareExcel3 on KEVInternet Explorer and Edge3 on KEV · 2 ransomwareMSHTML3 on KEV · 1 ransomware.NET Framework3 on KEVSilverlight3 on KEV · 2 ransomware
Latest Microsoft coverage
Our reporting filed under Microsoft, plus any story that cites one of its CVEs.
microsoft
Windows Paint RCE Fix Ships Via Store, Not Windows Update
Microsoft fixed CVE-2026-83844 in Paint build 11.2609.401.0, but only the Microsoft Store delivers it. Check every user's copy, and ignore the older fixed-build number.
read →
threat intel
BlackX Bootkit Bypasses Secure Boot on Patched Windows 11
APT41's BlackX UEFI bootkit bypassed Secure Boot on patched Windows 11 via CVE-2022-21894. Closing the gap requires manual certificate revocation, not just patching.
read →
microsoft
Microsoft October Patch Tuesday Fixes 1,411 Flaws
Microsoft's October 2026 Patch Tuesday patches a record 1,411 CVEs, including one zero-day confirmed exploited in the wild and two publicly disclosed vulnerabilities.
read →
microsoft
Exchange Server OOB Patch Closes Mailbox-Read Flaw
CVE-2026-96940, a CVSS 8.8 privilege escalation flaw in on-prem Microsoft Exchange, lets authenticated attackers read other users' mailboxes. Patch available now; Exchange Online already fixed.
read →
threat intel
ZITADEL Patches Four Auth Bypass Flaws, Two Critical
ZITADEL patched four authentication bypass CVEs this week, including CVE-2026-105207 at CVSS 9.8 and CVE-2026-105215 at CVSS 9.1. None confirmed exploited in the wild.
read →
cloud
JADEPUFFER Uses Stolen Service Principals to Destroy Azure
Microsoft Threat Intelligence tracks JADEPUFFER-linked attackers using compromised Azure service principals to delete cloud resources. Audit your tenant's non-human identities now.
read →
- SharePoint Code Injection CVE-2026-65660 Added to KEV
- New Windows Defender Zero-Day Blocks AV Updates
- Microsoft Fabric Auth Bypass Reaches CVSS 10.0
- Microsoft Fixes CVSS 10.0 Flaw in Azure AI Foundry
- Microsoft OOB Fixes RDS, Hyper-V Failures from Sept Patches
- Storm-3121 Fakes Passkey Portals to Steal M365 Data
- Nightmare Eclipse Drops Windows Defender Zero-Day
- Microsoft Patches Record 974 Vulns, 2 Zero-Days
- Fake IT Calls Drive M365 Exec Data Theft Campaign
- Microsoft Patches Entra ID CVSS 9.1 Auth Bypass
- Defender's Own Boot Driver Can Kill Security Software
- Entra ID CVE-2026-69836: CVSS 10, Exploited, KEV
- CoSnitch: Three Copilot Flaws Enable One-Click Data Theft
- CISA: Ransomware Gangs Now Exploit Windows Task Host Flaw
- Microsoft Removes WMIC LOLBin From Windows 11
- Microsoft Patch Underway for Defender ShieldBreak Zero-Day
- ShieldBreak: New Unpatched EoP in Defender Scan Engine
- Microsoft Patches LegacyHive Windows Zero-Day
- White House Opens Hack-Back Program to Private Firms
- Jewelbug APT Merges Espionage and Crypto Fraud
- SharePoint CVE-2026-55040 Exploited After PoC Drop
- Lazarus Targeted Defense Firms via Windows Zero-Day
- ShieldBreak: Defender Patch Bypass PoC Published
- Microsoft Patches 400 Flaws, Lazarus Exploited One First
›64 older articles
- SharePoint CVE-2026-45659 Ransomware Attacks Confirmed
- Copilot Prompt Injection Can Rewrite Docs, Self-Propagate
- OWAReaper Backdoor Outlasts Credential Rotation
- Void Blizzard Deploys OWAReaper via Exchange Zero-Day
- Microsoft Adds Security AI to MDASH at Half the Cost
- Certighost PoC Drops: AD CS Flaw Enables Domain Takeover
- Hotel Wi-Fi DNS Hijacked to Serve Fake M365 Pages
- Bing Image Workers Ran SYSTEM Commands via Crafted SVGs
- Certighost: Working Exploit Reaches AD Domain Controllers
- M365 Outage: Automation Bug Pulled Too Many IP Routes
- Certighost: Low-Priv AD Users Can Impersonate DCs
- Bing SVG Flaw Ran Code as SYSTEM on Microsoft Servers
- M365 Outage Drops Teams, SharePoint, Admin Center
- Exchange Online Quarantining Mailboxes in Error Since Sunday
- N-Day Is Now N-Hour: The Vanishing Patch Window
- SharePoint RCE on KEV; Attackers Pivot to Machine Keys
- snap-confine LPE Hits Default Ubuntu Desktop Installs
- Exchange 2016 and 2019 Lose ESU Patches in October
- Azure DevOps MCP: hidden PR text hijacks AI reviewers
- SharePoint attackers stealing keys — rotate credentials now
- SharePoint CVE-2026-50522 exploited after public PoC
- Microsoft ships manual WSUS fix: SUSDB cleanup, IISReset
- 0patch ships free unofficial fix for LegacyHive zero-day
- Exposed WebDAV lab: 1,048 artifacts, real Mexico victims
- WSUS sync fix only for new installs, old servers still stuck
- Microsoft ships KB5121767 OOB for Dell IPF driver hold
- LegacyHive: PoC drops for unpatched Windows LPE zero-day
- 7-Zip 26.02 patches XZ heap overflow, no auto-update
- HollowByte: 11-byte OpenSSL DoS, no CVE, silent June fix
- Agent Data Injection: The Bug Under Every AI Agent
- LegacyHive: unpatched Windows LPE zero-day, PoC public
- Windows Server 2022 mainstream support ends Oct 13
- Windows 11 24H2 Home and Pro: 90 days to end of updates
- n8n cross-issuer JWT bypass logs attackers in as anyone
- CISA adds a fourth SharePoint bug to KEV in 48 hours
- The July patch count Microsoft warned would come
- KB5099539 lands: Windows 10 ESU carries the July zero-days
- LegacyHive: Chaotic Eclipse's fourth Windows zero-day
- CISA: three SharePoint bugs exploited, patch by July 17
- Microsoft blocks Dell PCs from July KB5101650 rollout
- Entra ID passkeys go default in Sept; SMS/voice out Feb 1
- SharePoint JWT bypass fixed; RCE half of chain still open
- Microsoft July Patch Tuesday: 570 CVEs, 3 zero-days out
- Progress patches ShareFile zero-day: 5.12.5 and 6.0.2 out
- OAuth client ID spoofing sneaks past Entra sign-in logs
- ESET: 11 old signed UEFI shims still bypass Secure Boot
- Zimbra ships 10.1.19; Google TAG reported the XSS
- Microsoft's MDASH and the humans downstream of it
- Microsoft: MDASH will grow Patch Tuesday numbers
- Forg365 PhaaS Chains AiTM + Device-Code + AI Lures at M365
- Microsoft to retire OWA Light in Exchange Server
- Microsoft patches Defender 'RoguePlanet' LPE; PoC public
- Pink Vishing Enrolls Rogue Entra Passkeys on M365 Tenants
- DEBULL Kit Runs M365 Device-Code Phishing, Storm-2372
- BlueHammer Defender LPE Now Used in Ransomware
- Bad Epoll: Linux Kernel LPE Also Hits Android
- Cisco Confirms Active Exploitation of Unified CM Flaw
- Kemp LoadMaster Pre-Auth RCE: PoC Is Out, Patch Now
- SharePoint RCE now on CISA KEV: patch it this week, not next
- Follina: The MSDT Bug That Skipped Macro Warnings
- The MSHTML Zero-Day That Weaponized a Word Doc
- ProxyLogon: Inside the Exchange Server Attack Chain
- PrintNightmare: A Leaked PoC Forced an Emergency Patch
- Outlook MonikerLink Bug Bypasses Protected View
Known exploited Microsoft vulnerabilities
| CVE / Vulnerability | Severity | CVSS | EPSS | Added to KEV | Patch by |
|---|---|---|---|---|---|
| CVE-2026-124194 Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability | [ MEDIUM ] | 6.5 | 1.6% | ||
| CVE-2026-96951 Microsoft Windows Command Injection Vulnerability | [ HIGH ] | 8.8 | 9.8% | ||
| CVE-2026-65660 Microsoft SharePoint Code Injection Vulnerabilitywrite-up | [ HIGH ] | 8.8 | 9.9% | ||
| CVE-2026-85880 Microsoft Windows ALPC Heap Buffer Overflow Privilege Escalationwrite-up | [ HIGH ] | 7.8 | 0.4% | ||
| CVE-2026-81963 Microsoft Windows Update Stack Link-Following Privilege Escalationwrite-up | [ HIGH ] | 7.8 | 7.1% | ||
| CVE-2019-1068 Microsoft SQL Server Remote Code Execution Vulnerability | [ HIGH ] | 8.8 | 57.3% | ||
| CVE-2026-69836 Microsoft Entra ID Deserialization of Untrusted Data — RCEwrite-up | [ CRITICAL ] | 10.0 | 1.8% | — | — |
| CVE-2026-55040 SharePoint Server JWT token authentication bypasswrite-up | [ CRITICAL ] | 9.1 | 69.5% | ||
| CVE-2026-33824 Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability | [ CRITICAL ] | 9.8 | 77.4% | ||
| CVE-2026-68820 Windows AFD WinSock Use-After-Free Privilege Escalationwrite-up | [ HIGH ] | 7.0 | 8.6% | ||
| CVE-2026-50522 SharePoint Server deserialization of untrusted data RCEwrite-up | [ CRITICAL ] | 9.8 | 3.0% | ||
| CVE-2026-58644 Microsoft SharePoint deserialization of untrusted data (unauth RCE)write-up | [ CRITICAL ] | 9.8 | 15.9% | ||
| CVE-2026-56164 SharePoint Server elevation of privilege — missing authentication for critical functionwrite-up | [ MEDIUM ] | 5.3 | 27.3% | ||
| CVE-2026-56155 AD FS elevation of privilege — insufficient access-control granularitywrite-up | [ HIGH ] | 7.8 | 0.3% | ||
| CVE-2026-45659 Microsoft SharePoint Server deserialization remote code executionransomware usewrite-up | [ HIGH ] | 8.8 | 80.2% | ||
| CVE-2026-45498 Microsoft Defender Denial of Service Vulnerability | [ MEDIUM ] | 4.0 | 63.1% | ||
| CVE-2026-41091 Microsoft Defender Link Following Vulnerability | [ HIGH ] | 7.8 | 8.2% | ||
| CVE-2010-0806 Microsoft Internet Explorer Use-After-Free Vulnerability | [ HIGH ] | 8.8 | 82.1% | ||
| CVE-2010-0249 Microsoft Internet Explorer Use-After-Free Vulnerability | [ HIGH ] | 8.8 | 91.9% | ||
| CVE-2009-1537 Microsoft DirectX NULL Byte Overwrite Vulnerability | [ HIGH ] | 8.8 | 51.1% | ||
| CVE-2008-4250 Microsoft Windows Buffer Overflow Vulnerability | [ CRITICAL ] | 9.8 | 98.8% | ||
| CVE-2026-42897 Microsoft Exchange Server Cross-Site Scripting Vulnerability | [ HIGH ] | 8.1 | 70.7% | ||
| CVE-2026-32202 Microsoft Windows Protection Mechanism Failure Vulnerability | [ MEDIUM ] | 4.3 | 71.3% | ||
| CVE-2026-33825 Microsoft Defender Antimalware Platform Local Privilege Escalation (BlueHammer)ransomware usewrite-up | [ HIGH ] | 7.8 | 6.9% | ||
| CVE-2026-32201 SharePoint Server spoofing via improper input validationwrite-up | [ MEDIUM ] | 6.5 | 44.0% | ||
| CVE-2009-0238 Microsoft Office Remote Code Execution | [ HIGH ] | 8.8 | 42.9% | ||
| CVE-2025-60710 Microsoft Windows Link Following Vulnerabilityransomware use | [ HIGH ] | 7.8 | 4.6% | ||
| CVE-2023-36424 Microsoft Windows Out-of-Bounds Read Vulnerability | [ HIGH ] | 7.8 | 12.1% | ||
| CVE-2023-21529 Microsoft Exchange Server Deserialization of Untrusted Data Vulnerabilityransomware use | [ HIGH ] | 8.8 | 59.3% | ||
| CVE-2012-1854 Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability | [ HIGH ] | 7.8 | 20.9% | ||
| CVE-2026-20963 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | [ CRITICAL ] | 9.8 | 29.2% | ||
| CVE-2008-0015 Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability | [ HIGH ] | 8.8 | 76.6% | ||
| CVE-2024-43468 Microsoft Configuration Manager SQL Injection Vulnerability | [ CRITICAL ] | 9.8 | 81.0% | ||
| CVE-2026-21533 Microsoft Windows Improper Privilege Management Vulnerability | [ HIGH ] | 7.8 | 4.3% | ||
| CVE-2026-21525 Microsoft Windows NULL Pointer Dereference Vulnerability | [ MEDIUM ] | 6.2 | 5.0% | ||
| CVE-2026-21519 Microsoft Windows Type Confusion Vulnerability | [ HIGH ] | 7.8 | 2.6% | ||
| CVE-2026-21514 Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability | [ HIGH ] | 7.8 | 1.6% | ||
| CVE-2026-21513 Microsoft MSHTML security feature bypasswrite-up | [ HIGH ] | 8.8 | 15.9% | ||
| CVE-2026-21510 Microsoft Windows Shell Protection Mechanism Failure Vulnerability | [ HIGH ] | 8.8 | 61.2% | ||
| CVE-2026-21509 Microsoft Office Security Feature Bypass Vulnerability | [ HIGH ] | 7.8 | 70.8% | ||
| CVE-2026-20805 Microsoft Windows Information Disclosure Vulnerability | [ MEDIUM ] | 5.5 | 7.5% | ||
| CVE-2009-0556 Microsoft Office PowerPoint Code Injection Vulnerability | [ HIGH ] | 8.8 | 67.3% | ||
| CVE-2025-62221 Microsoft Windows Use After Free Vulnerability | [ HIGH ] | 7.8 | 2.5% | ||
| CVE-2025-62215 Microsoft Windows Race Condition Vulnerability | [ HIGH ] | 7.0 | 4.5% | ||
| CVE-2025-59287 Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability | [ CRITICAL ] | 9.8 | 100.0% | ||
| CVE-2025-33073 Microsoft Windows SMB Client Improper Access Control Vulnerability | [ HIGH ] | 8.8 | 82.8% | ||
| CVE-2025-59230 Microsoft Windows Improper Access Control Vulnerability | [ HIGH ] | 7.8 | 2.7% | ||
| CVE-2025-24990 Microsoft Windows Untrusted Pointer Dereference Vulnerability | [ HIGH ] | 7.8 | 7.9% | ||
| CVE-2021-43226 Microsoft Windows Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 3.3% | ||
| CVE-2013-3918 Microsoft Windows Out-of-Bounds Write Vulnerability | [ HIGH ] | 8.8 | 73.7% | ||
| CVE-2011-3402 Microsoft Windows Remote Code Execution Vulnerability | [ HIGH ] | 8.8 | 78.1% | ||
| CVE-2010-3962 Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability | [ HIGH ] | 8.1 | 96.8% | ||
| CVE-2013-3893 Microsoft Internet Explorer Resource Management Errors Vulnerability | [ HIGH ] | 8.8 | 87.6% | ||
| CVE-2007-0671 Microsoft Office Excel Remote Code Execution Vulnerability | [ HIGH ] | 8.8 | 44.1% | ||
| CVE-2025-49706 Microsoft SharePoint Improper Authentication Vulnerabilityransomware use | [ MEDIUM ] | 6.5 | 99.9% | ||
| CVE-2025-49704 Microsoft SharePoint Code Injection Vulnerabilityransomware use | [ HIGH ] | 8.8 | 100.0% | ||
| CVE-2025-53770 Microsoft SharePoint Deserialization of Untrusted Data Vulnerabilityransomware use | [ CRITICAL ] | 9.8 | 100.0% | ||
| CVE-2025-33053 Windows Internet Shortcut Files path control allows remote code executionwrite-up | [ HIGH ] | 8.8 | 87.1% | ||
| CVE-2025-32709 Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability | [ HIGH ] | 7.8 | 1.8% | ||
| CVE-2025-32706 Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability | [ HIGH ] | 7.8 | 2.3% | ||
| CVE-2025-32701 Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability | [ HIGH ] | 7.8 | 1.4% | ||
| CVE-2025-30400 Microsoft Windows DWM Core Library Use-After-Free Vulnerability | [ HIGH ] | 7.8 | 1.9% | ||
| CVE-2025-30397 Microsoft Windows Scripting Engine Type Confusion Vulnerability | [ HIGH ] | 7.5 | 27.5% | ||
| CVE-2025-24054 Windows NTLM spoofing via file path control leaks credential hasheswrite-up | [ MEDIUM ] | 6.5 | 62.3% | ||
| CVE-2025-29824 Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerabilityransomware use | [ HIGH ] | 7.8 | 19.3% | ||
| CVE-2025-26633 Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerabilityransomware use | [ HIGH ] | 7.0 | 30.4% | ||
| CVE-2025-24993 Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability | [ HIGH ] | 7.8 | 2.2% | ||
| CVE-2025-24991 Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability | [ MEDIUM ] | 5.5 | 2.0% | ||
| CVE-2025-24985 Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability | [ HIGH ] | 7.8 | 3.9% | ||
| CVE-2025-24984 Microsoft Windows NTFS Information Disclosure Vulnerability | [ MEDIUM ] | 4.6 | 2.0% | ||
| CVE-2025-24983 Microsoft Windows Win32k Use-After-Free Vulnerability | [ HIGH ] | 7.0 | 1.9% | ||
| CVE-2018-8639 Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerabilityransomware use | [ HIGH ] | 7.8 | 22.3% | ||
| CVE-2024-49035 Microsoft Partner Center Improper Access Control Vulnerability | [ HIGH ] | 8.7 | 1.4% | ||
| CVE-2025-24989 Microsoft Power Pages Improper Access Control Vulnerability | [ HIGH ] | 8.2 | 1.6% | ||
| CVE-2025-21418 Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability | [ HIGH ] | 7.8 | 2.1% | ||
| CVE-2025-21391 Microsoft Windows Storage Link Following Vulnerability | [ HIGH ] | 7.1 | 2.3% | ||
| CVE-2024-21413 Microsoft Outlook MonikerLink Remote Code Executionwrite-up | [ CRITICAL ] | 9.8 | 94.7% | ||
| CVE-2024-29059 Microsoft .NET Framework Information Disclosure Vulnerability | [ HIGH ] | 7.5 | 98.6% | ||
| CVE-2025-21335 Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability | [ HIGH ] | 7.8 | 1.4% | ||
| CVE-2025-21334 Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability | [ HIGH ] | 7.8 | 1.6% | ||
| CVE-2025-21333 Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability | [ HIGH ] | 7.8 | 10.1% | ||
| CVE-2024-35250 Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability | [ HIGH ] | 7.8 | 25.2% | ||
| CVE-2024-49138 Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability | [ HIGH ] | 7.8 | 26.2% | ||
| CVE-2024-49039 Microsoft Windows Task Scheduler Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 8.8 | 14.2% | ||
| CVE-2024-43451 Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability | [ MEDIUM ] | 6.5 | 84.3% | ||
| CVE-2024-38094 Microsoft SharePoint Deserialization Vulnerabilityransomware use | [ HIGH ] | 7.2 | 50.9% | ||
| CVE-2024-30088 Microsoft Windows Kernel TOCTOU Race Condition Vulnerabilityransomware use | [ HIGH ] | 7.0 | 68.2% | ||
| CVE-2024-43573 Microsoft Windows MSHTML Platform Spoofing Vulnerability | [ MEDIUM ] | 6.5 | 46.1% | ||
| CVE-2024-43572 Microsoft Windows Management Console Remote Code Execution Vulnerability | [ HIGH ] | 7.8 | 66.7% | ||
| CVE-2020-0618 Microsoft SQL Server Reporting Services Remote Code Execution Vulnerabilityransomware use | [ HIGH ] | 8.8 | 99.0% | ||
| CVE-2024-43461 Microsoft Windows MSHTML Platform Spoofing Vulnerability | [ HIGH ] | 8.8 | 54.2% | ||
| CVE-2024-38226 Microsoft Publisher Protection Mechanism Failure Vulnerability | [ HIGH ] | 7.3 | 2.7% | ||
| CVE-2024-38217 Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability | [ MEDIUM ] | 5.4 | 10.0% | ||
| CVE-2024-38014 Microsoft Windows Installer Improper Privilege Management Vulnerability | [ HIGH ] | 7.8 | 6.3% | ||
| CVE-2021-31196 Microsoft Exchange Server Information Disclosure Vulnerability | [ HIGH ] | 7.2 | 54.1% | ||
| CVE-2024-38213 Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | [ MEDIUM ] | 6.5 | 13.6% | ||
| CVE-2024-38193 Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 28.5% | ||
| CVE-2024-38189 Microsoft Project Remote Code Execution Vulnerability | [ HIGH ] | 8.8 | 8.2% | ||
| CVE-2024-38178 Microsoft Windows Scripting Engine Memory Corruption Vulnerability | [ HIGH ] | 7.5 | 41.4% | ||
| CVE-2024-38107 Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 1.6% | ||
| CVE-2024-38106 Microsoft Windows Kernel Privilege Escalation Vulnerability | [ HIGH ] | 7.0 | 6.3% | ||
| CVE-2018-0824 Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability | [ HIGH ] | 8.8 | 73.0% | ||
| CVE-2012-4792 Microsoft Internet Explorer Use-After-Free Vulnerability | [ HIGH ] | 8.8 | 78.8% | ||
| CVE-2024-38112 Microsoft Windows MSHTML Platform Spoofing Vulnerability | [ HIGH ] | 7.5 | 84.2% | ||
| CVE-2024-38080 Microsoft Windows Hyper-V Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 7.1% | ||
| CVE-2024-26169 Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerabilityransomware use | [ HIGH ] | 7.8 | 4.0% | ||
| CVE-2024-30051 Microsoft DWM Core Library Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 6.2% | ||
| CVE-2024-30040 Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability | [ HIGH ] | 8.8 | 3.9% | ||
| CVE-2024-29988 Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability | [ HIGH ] | 8.8 | 45.2% | ||
| CVE-2022-38028 Microsoft Windows Print Spooler Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 14.9% | ||
| CVE-2023-24955 Microsoft SharePoint Server Code Injection Vulnerabilityransomware use | [ HIGH ] | 7.2 | 85.0% | ||
| CVE-2024-21338 Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerabilityransomware use | [ HIGH ] | 7.8 | 62.2% | ||
| CVE-2023-29360 Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability | [ HIGH ] | 8.4 | 21.6% | ||
| CVE-2024-21410 Microsoft Exchange Server Privilege Escalation Vulnerability | [ CRITICAL ] | 9.8 | 12.7% | ||
| CVE-2024-21412 Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerabilityransomware use | [ HIGH ] | 8.1 | 99.4% | ||
| CVE-2024-21351 Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | [ HIGH ] | 7.6 | 27.8% | ||
| CVE-2023-29357 Microsoft SharePoint Server Privilege Escalation Vulnerabilityransomware use | [ CRITICAL ] | 9.8 | 100.0% | ||
| CVE-2023-36584 Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | [ MEDIUM ] | 5.4 | 3.3% | ||
| CVE-2023-36036 Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 16.7% | ||
| CVE-2023-36033 Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 10.9% | ||
| CVE-2023-36025 Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | [ HIGH ] | 8.8 | 88.2% | ||
| CVE-2023-41763 Microsoft Skype for Business Privilege Escalation Vulnerability | [ MEDIUM ] | 5.3 | 90.3% | ||
| CVE-2023-36563 Microsoft WordPad Information Disclosure Vulnerability | [ MEDIUM ] | 6.5 | 20.3% | ||
| CVE-2023-28229 Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability | [ HIGH ] | 7.0 | 1.7% | ||
| CVE-2023-36802 Microsoft Streaming Service Proxy Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 27.9% | ||
| CVE-2023-36761 Microsoft Word Information Disclosure Vulnerability | [ MEDIUM ] | 6.5 | 19.6% | ||
| CVE-2023-38180 Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability | [ HIGH ] | 7.5 | 14.1% | ||
| CVE-2023-36884 Microsoft Windows Search Remote Code Execution Vulnerabilityransomware use | [ HIGH ] | 7.5 | 99.4% | ||
| CVE-2023-36874 Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 44.4% | ||
| CVE-2023-35311 Microsoft Outlook Security Feature Bypass Vulnerability | [ HIGH ] | 8.8 | 15.5% | ||
| CVE-2023-32049 Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability | [ HIGH ] | 8.8 | 4.2% | ||
| CVE-2023-32046 Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 10.0% | ||
| CVE-2016-0165 Microsoft Win32k Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 13.7% | ||
| CVE-2023-29336 Microsoft Win32K Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 41.2% | ||
| CVE-2023-28252 Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 48.9% | ||
| CVE-2019-1388 Microsoft Windows Certificate Dialog Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 8.6% | ||
| CVE-2013-3163 Microsoft Internet Explorer Memory Corruption Vulnerability | [ HIGH ] | 8.8 | 70.7% | ||
| CVE-2023-24880 Microsoft Windows SmartScreen Security Feature Bypass Vulnerabilityransomware use | [ MEDIUM ] | 4.4 | 78.2% | ||
| CVE-2023-23397 Microsoft Office Outlook Privilege Escalation Vulnerability | [ CRITICAL ] | 9.8 | 97.2% | ||
| CVE-2023-23376 Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 10.8% | ||
| CVE-2023-21823 Microsoft Windows Graphic Component Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 5.6% | ||
| CVE-2023-21715 Microsoft Office Publisher Security Feature Bypass Vulnerability | [ HIGH ] | 7.3 | 12.0% | ||
| CVE-2023-21674 Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability | [ HIGH ] | 8.8 | 34.2% | ||
| CVE-2022-41080 Microsoft Exchange Server Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 8.8 | 77.3% | ||
| CVE-2022-44698 Microsoft Defender SmartScreen Security Feature Bypass Vulnerabilityransomware use | [ MEDIUM ] | 5.4 | 75.0% | ||
| CVE-2022-41049 Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | [ MEDIUM ] | 5.4 | 3.3% | ||
| CVE-2022-41128 Microsoft Windows Scripting Languages Remote Code Execution Vulnerability | [ HIGH ] | 8.8 | 24.6% | ||
| CVE-2022-41125 Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 3.0% | ||
| CVE-2022-41091 Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerabilityransomware use | [ MEDIUM ] | 5.4 | 2.3% | ||
| CVE-2022-41073 Microsoft Windows Print Spooler Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 2.6% | ||
| CVE-2022-41033 Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 1.9% | ||
| CVE-2022-41082 Microsoft Exchange Server Remote Code Execution Vulnerabilityransomware use | [ HIGH ] | 8.0 | 100.0% | ||
| CVE-2022-41040 Microsoft Exchange Server Server-Side Request Forgery Vulnerabilityransomware use | [ HIGH ] | 8.8 | 100.0% | ||
| CVE-2010-2568 Microsoft Windows Remote Code Execution Vulnerability | [ HIGH ] | 7.8 | 89.6% | ||
| CVE-2022-37969 Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 28.5% | ||
| CVE-2022-26923 Microsoft Active Directory Domain Services Privilege Escalation Vulnerability | [ HIGH ] | 8.8 | 83.5% | ||
| CVE-2022-21971 Microsoft Windows Runtime Remote Code Execution Vulnerability | [ HIGH ] | 7.8 | 53.9% | ||
| CVE-2022-34713 Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability | [ HIGH ] | 7.8 | 67.8% | ||
| CVE-2022-22047 Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 18.3% | ||
| CVE-2022-26925 Microsoft Windows LSA Spoofing Vulnerability | [ HIGH ] | 8.1 | 10.5% | ||
| CVE-2022-30190 Follina — Microsoft Windows Support Diagnostic Tool Remote Code Executionransomware usewrite-up | [ HIGH ] | 7.8 | 98.5% | ||
| CVE-2013-1331 Microsoft Office Buffer Overflow Vulnerability | [ HIGH ] | 7.8 | 79.8% | ||
| CVE-2012-4969 Microsoft Internet Explorer Use-After-Free Vulnerability | [ HIGH ] | 8.1 | 80.3% | ||
| CVE-2012-1889 Microsoft XML Core Services Memory Corruption Vulnerability | [ HIGH ] | 8.8 | 83.5% | ||
| CVE-2012-0151 Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability | [ HIGH ] | 7.8 | 87.7% | ||
| CVE-2010-2572 Microsoft PowerPoint Buffer Overflow Vulnerability | [ HIGH ] | 7.8 | 58.6% | ||
| CVE-2009-0563 Microsoft Office Buffer Overflow Vulnerability | [ HIGH ] | 7.8 | 59.6% | ||
| CVE-2009-0557 Microsoft Office Object Record Corruption Vulnerability | [ HIGH ] | 7.8 | 52.8% | ||
| CVE-2006-2492 Microsoft Word Malformed Object Pointer Vulnerability | [ HIGH ] | 8.8 | 48.1% | ||
| CVE-2016-7256 Microsoft Windows Open Type Font Remote Code Execution Vulnerability | [ HIGH ] | 8.8 | 64.6% | ||
| CVE-2016-3393 Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability | [ HIGH ] | 7.8 | 68.5% | ||
| CVE-2016-0034 Microsoft Silverlight Runtime Remote Code Execution Vulnerabilityransomware use | [ HIGH ] | 8.8 | 69.4% | ||
| CVE-2015-6175 Microsoft Windows Kernel Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 5.3% | ||
| CVE-2015-2425 Microsoft Internet Explorer Memory Corruption Vulnerability | [ HIGH ] | 8.8 | 44.7% | ||
| CVE-2015-2360 Microsoft Win32k Privilege Escalation Vulnerability | [ HIGH ] | 8.8 | 14.8% | ||
| CVE-2015-1769 Microsoft Windows Mount Manager Privilege Escalation Vulnerability | [ MEDIUM ] | 6.6 | 4.1% | ||
| CVE-2015-1671 Microsoft Windows Remote Code Execution Vulnerability | [ HIGH ] | 7.8 | 48.8% | ||
| CVE-2015-0071 Microsoft Internet Explorer ASLR Bypass Vulnerability | [ MEDIUM ] | 6.5 | 33.6% | ||
| CVE-2015-0016 Microsoft Windows TS WebProxy Directory Traversal Vulnerability | [ HIGH ] | 7.8 | 75.8% | ||
| CVE-2014-4148 Microsoft Windows Remote Code Execution Vulnerability | [ HIGH ] | 8.8 | 59.9% | ||
| CVE-2014-4123 Microsoft Internet Explorer Privilege Escalation Vulnerability | [ HIGH ] | 8.8 | 47.1% | ||
| CVE-2014-4077 Microsoft IME Japanese Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 54.6% | ||
| CVE-2014-2817 Microsoft Internet Explorer Privilege Escalation Vulnerability | [ HIGH ] | 8.8 | 26.3% | ||
| CVE-2013-7331 Microsoft Internet Explorer Information Disclosure Vulnerability | [ MEDIUM ] | 6.5 | 50.2% | ||
| CVE-2013-3896 Microsoft Silverlight Information Disclosure Vulnerability | [ MEDIUM ] | 5.5 | 67.1% | ||
| CVE-2013-0074 Microsoft Silverlight Double Dereference Vulnerabilityransomware use | [ HIGH ] | 7.8 | 78.9% | ||
| CVE-2018-8611 Microsoft Windows Kernel Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 4.2% | ||
| CVE-2017-8543 Microsoft Windows Search Remote Code Execution Vulnerability | [ CRITICAL ] | 9.8 | 74.2% | ||
| CVE-2017-0210 Microsoft Internet Explorer Privilege Escalation Vulnerability | [ HIGH ] | 8.8 | 22.3% | ||
| CVE-2017-0149 Microsoft Internet Explorer Memory Corruption Vulnerability | [ HIGH ] | 8.8 | 28.5% | ||
| CVE-2017-0147 Microsoft Windows SMBv1 Information Disclosure Vulnerabilityransomware use | [ HIGH ] | 7.5 | 99.7% | ||
| CVE-2017-0022 Microsoft XML Core Services Information Disclosure Vulnerability | [ MEDIUM ] | 6.5 | 18.1% | ||
| CVE-2017-0005 Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 11.0% | ||
| CVE-2016-3351 Microsoft Internet Explorer and Edge Information Disclosure Vulnerabilityransomware use | [ MEDIUM ] | 6.5 | 26.5% | ||
| CVE-2016-3298 Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability | [ MEDIUM ] | 6.5 | 33.3% | ||
| CVE-2016-0162 Microsoft Internet Explorer Information Disclosure Vulnerability | [ MEDIUM ] | 4.3 | 21.9% | ||
| CVE-2020-1027 Microsoft Windows Kernel Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 4.7% | ||
| CVE-2020-0638 Microsoft Update Notification Manager Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 2.5% | ||
| CVE-2019-1385 Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 3.6% | ||
| CVE-2019-1130 Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 1.7% | ||
| CVE-2019-0880 Microsoft Windows Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 2.3% | ||
| CVE-2019-0703 Microsoft Windows SMB Information Disclosure Vulnerability | [ MEDIUM ] | 6.5 | 9.4% | ||
| CVE-2019-0676 Microsoft Internet Explorer Information Disclosure Vulnerability | [ MEDIUM ] | 6.5 | 8.1% | ||
| CVE-2018-8589 Microsoft Win32k Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 3.0% | ||
| CVE-2014-4113 Microsoft Win32k Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 86.6% | ||
| CVE-2014-0322 Microsoft Internet Explorer Use-After-Free Vulnerability | [ HIGH ] | 8.8 | 85.1% | ||
| CVE-2022-26904 Microsoft Windows User Profile Service Privilege Escalation Vulnerability | [ HIGH ] | 7.0 | 16.9% | ||
| CVE-2022-21919 Microsoft Windows User Profile Service Privilege Escalation Vulnerability | [ HIGH ] | 7.0 | 2.6% | ||
| CVE-2021-41357 Microsoft Win32k Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 1.5% | ||
| CVE-2021-40450 Microsoft Win32k Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 1.5% | ||
| CVE-2022-22718 Microsoft Windows Print Spooler Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 18.5% | ||
| CVE-2022-24521 Microsoft Windows CLFS Driver Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 7.1% | ||
| CVE-2015-2502 Microsoft Internet Explorer Memory Corruption Vulnerability | [ HIGH ] | 8.8 | 51.0% | ||
| CVE-2021-42287 Microsoft Active Directory Domain Services Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.5 | 77.2% | ||
| CVE-2021-42278 Microsoft Active Directory Domain Services Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.5 | 73.3% | ||
| CVE-2021-31166 Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability | [ CRITICAL ] | 9.8 | 99.9% | ||
| CVE-2017-0148 Microsoft SMBv1 Server Remote Code Execution Vulnerabilityransomware use | [ HIGH ] | 8.1 | 99.4% | ||
| CVE-2021-34484 Microsoft Windows User Profile Service Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 21.8% | ||
| CVE-2021-38646 Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerabilityransomware use | [ HIGH ] | 7.8 | 8.0% | ||
| CVE-2021-34486 Microsoft Windows Event Tracing Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 9.3% | ||
| CVE-2018-8440 Microsoft Windows Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 18.5% | ||
| CVE-2018-8406 Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 3.4% | ||
| CVE-2018-8405 Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 3.4% | ||
| CVE-2017-0213 Microsoft Windows Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.3 | 84.3% | ||
| CVE-2017-0059 Microsoft Internet Explorer Information Disclosure Vulnerability | [ MEDIUM ] | 4.3 | 62.0% | ||
| CVE-2017-0037 Microsoft Edge and Internet Explorer Type Confusion Vulnerability | [ HIGH ] | 8.1 | 80.4% | ||
| CVE-2016-7201 Microsoft Edge Memory Corruption Vulnerability | [ HIGH ] | 8.8 | 80.0% | ||
| CVE-2016-7200 Microsoft Edge Memory Corruption Vulnerability | [ HIGH ] | 8.8 | 82.8% | ||
| CVE-2016-0189 Microsoft Internet Explorer Memory Corruption Vulnerabilityransomware use | [ HIGH ] | 7.5 | 94.1% | ||
| CVE-2016-0151 Microsoft Windows CSRSS Security Feature Bypass Vulnerabilityransomware use | [ HIGH ] | 7.8 | 62.8% | ||
| CVE-2016-0040 Microsoft Windows Kernel Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 24.3% | ||
| CVE-2015-2426 Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability | [ HIGH ] | 8.8 | 86.6% | ||
| CVE-2015-2419 Microsoft Internet Explorer Memory Corruption Vulnerability | [ HIGH ] | 8.8 | 53.0% | ||
| CVE-2015-1770 Microsoft Office Uninitialized Memory Use Vulnerability | [ HIGH ] | 8.8 | 35.0% | ||
| CVE-2013-3660 Microsoft Win32k Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 39.3% | ||
| CVE-2013-2551 Microsoft Internet Explorer Use-After-Free Vulnerabilityransomware use | [ HIGH ] | 8.8 | 74.1% | ||
| CVE-2012-2539 Microsoft Word Remote Code Execution Vulnerability | [ HIGH ] | 7.8 | 53.0% | ||
| CVE-2011-2005 Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability | [ HIGH ] | 7.8 | 31.8% | ||
| CVE-2010-4398 Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability | [ HIGH ] | 7.8 | 8.7% | ||
| CVE-2022-21999 Microsoft Windows Print Spooler Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 41.0% | ||
| CVE-2019-0903 Microsoft GDI Remote Code Execution Vulnerability | [ HIGH ] | 8.8 | 21.7% | ||
| CVE-2018-8414 Microsoft Windows Shell Remote Code Execution Vulnerability | [ HIGH ] | 8.8 | 72.6% | ||
| CVE-2018-8373 Microsoft Scripting Engine Memory Corruption Vulnerability | [ HIGH ] | 7.5 | 61.8% | ||
| CVE-2017-0146 Microsoft Windows SMB Remote Code Execution Vulnerabilityransomware use | [ HIGH ] | 8.8 | 89.9% | ||
| CVE-2014-6332 Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability | [ HIGH ] | 8.8 | 94.9% | ||
| CVE-2014-6324 Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability | [ HIGH ] | 8.8 | 87.3% | ||
| CVE-2019-1405 Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 30.2% | ||
| CVE-2019-1322 Microsoft Windows Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 18.8% | ||
| CVE-2019-1315 Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 3.5% | ||
| CVE-2019-1253 Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 11.6% | ||
| CVE-2019-1132 Microsoft Win32k Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 9.9% | ||
| CVE-2019-1129 Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 1.8% | ||
| CVE-2019-1069 Microsoft Task Scheduler Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 6.2% | ||
| CVE-2019-1064 Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 6.9% | ||
| CVE-2019-0841 Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 41.4% | ||
| CVE-2019-0543 Microsoft Windows Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 4.7% | ||
| CVE-2018-8120 Microsoft Win32k Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.0 | 73.3% | ||
| CVE-2017-0101 Microsoft Windows Transaction Manager Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 57.5% | ||
| CVE-2016-3309 Microsoft Windows Kernel Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 20.5% | ||
| CVE-2015-2546 Microsoft Win32k Memory Corruption Vulnerabilityransomware use | [ HIGH ] | 8.2 | 10.1% | ||
| CVE-2021-41379 Microsoft Windows Installer Privilege Escalation Vulnerabilityransomware use | [ MEDIUM ] | 5.5 | 19.5% | ||
| CVE-2019-1297 Microsoft Excel Remote Code Execution Vulnerability | [ HIGH ] | 8.8 | 21.8% | ||
| CVE-2018-8581 Microsoft Exchange Server Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.4 | 27.6% | ||
| CVE-2017-8540 Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability | [ HIGH ] | 7.8 | 71.9% | ||
| CVE-2017-11826 Microsoft Office Remote Code Execution Vulnerability | [ HIGH ] | 7.8 | 82.2% | ||
| CVE-2017-0261 Microsoft Office Use-After-Free Vulnerability | [ HIGH ] | 7.8 | 78.1% | ||
| CVE-2017-0001 Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 3.1% | ||
| CVE-2016-7262 Microsoft Office Security Feature Bypass Vulnerability | [ HIGH ] | 7.8 | 58.8% | ||
| CVE-2016-7193 Microsoft Office Memory Corruption Vulnerability | [ HIGH ] | 7.8 | 57.6% | ||
| CVE-2016-0099 Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 37.0% | ||
| CVE-2015-2545 Microsoft Office Malformed EPS File Vulnerability | [ HIGH ] | 7.8 | 85.9% | ||
| CVE-2015-2424 Microsoft PowerPoint Memory Corruption Vulnerability | [ HIGH ] | 8.8 | 40.1% | ||
| CVE-2015-2387 Microsoft ATM Font Driver Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 34.9% | ||
| CVE-2015-1701 Microsoft Win32k Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 56.2% | ||
| CVE-2015-1642 Microsoft Office Memory Corruption Vulnerability | [ HIGH ] | 7.8 | 53.1% | ||
| CVE-2014-4114 Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability | [ HIGH ] | 7.8 | 81.6% | ||
| CVE-2013-5065 Microsoft Windows Kernel Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 34.7% | ||
| CVE-2013-3897 Microsoft Internet Explorer Use-After-Free Vulnerability | [ HIGH ] | 8.8 | 77.3% | ||
| CVE-2013-1347 Microsoft Internet Explorer Remote Code Execution Vulnerability | [ HIGH ] | 8.8 | 77.7% | ||
| CVE-2012-1856 Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability | [ HIGH ] | 8.8 | 72.0% | ||
| CVE-2011-1889 Microsoft Forefront TMG Remote Code Execution Vulnerability | [ CRITICAL ] | 9.8 | 49.0% | ||
| CVE-2010-3333 Microsoft Office Stack-based Buffer Overflow Vulnerability | [ HIGH ] | 7.8 | 89.4% | ||
| CVE-2010-0232 Microsoft Windows Kernel Exception Handler Vulnerability | [ HIGH ] | 7.8 | 28.7% | ||
| CVE-2009-3129 Microsoft Excel Featheader Record Memory Corruption Vulnerability | [ HIGH ] | 7.8 | 84.0% | ||
| CVE-2009-1123 Microsoft Windows Improper Input Validation Vulnerability | [ HIGH ] | 7.8 | 4.9% | ||
| CVE-2004-0210 Microsoft Windows Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 7.2% | ||
| CVE-2002-0367 Microsoft Windows Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 4.9% | ||
| CVE-2017-8570 Microsoft Office Remote Code Execution Vulnerability | [ HIGH ] | 7.8 | 89.9% | ||
| CVE-2017-0222 Microsoft Internet Explorer Remote Code Execution Vulnerability | [ HIGH ] | 8.8 | 29.6% | ||
| CVE-2014-6352 Microsoft Windows Code Injection Vulnerability | [ HIGH ] | 7.8 | 77.5% | ||
| CVE-2019-0752 Microsoft Internet Explorer Type Confusion Vulnerabilityransomware use | [ HIGH ] | 7.5 | 81.7% | ||
| CVE-2018-8174 Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerabilityransomware use | [ HIGH ] | 7.5 | 88.2% | ||
| CVE-2014-1761 Microsoft Word Memory Corruption Vulnerability | [ HIGH ] | 7.8 | 77.7% | ||
| CVE-2013-3906 Microsoft Graphics Component Memory Corruption Vulnerability | [ HIGH ] | 7.8 | 84.9% | ||
| CVE-2021-36934 Microsoft Windows SAM Local Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 67.3% | ||
| CVE-2020-0796 Microsoft SMBv3 Remote Code Execution Vulnerabilityransomware use | [ CRITICAL ] | 10.0 | 99.8% | ||
| CVE-2017-8464 Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability | [ HIGH ] | 8.8 | 90.0% | ||
| CVE-2017-0263 Microsoft Win32k Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 10.0% | ||
| CVE-2017-0262 Microsoft Office Remote Code Execution Vulnerability | [ HIGH ] | 7.8 | 81.0% | ||
| CVE-2017-0145 Microsoft SMBv1 Remote Code Execution Vulnerabilityransomware use | [ HIGH ] | 8.8 | 89.8% | ||
| CVE-2017-0144 Microsoft SMBv1 Remote Code Execution Vulnerabilityransomware use | [ HIGH ] | 8.8 | 99.2% | ||
| CVE-2015-1635 Microsoft HTTP.sys Remote Code Execution Vulnerability | [ CRITICAL ] | 9.8 | 100.0% | ||
| CVE-2022-21882 Microsoft Win32k Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.0 | 59.2% | ||
| CVE-2020-0787 Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerabilityransomware use | [ HIGH ] | 7.8 | 42.5% | ||
| CVE-2014-1776 Microsoft Internet Explorer Memory Corruption Vulnerability | [ CRITICAL ] | 9.8 | 82.7% | ||
| CVE-2018-8453 Microsoft Win32k Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 70.0% | ||
| CVE-2021-33766 Microsoft Exchange Server Information Disclosure | [ HIGH ] | 7.3 | 98.2% | ||
| CVE-2019-1458 Microsoft Win32k Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 74.4% | ||
| CVE-2013-3900 Microsoft WinVerifyTrust function Remote Code Execution | [ MEDIUM ] | 5.5 | 44.6% | ||
| CVE-2021-43890 Microsoft Windows AppX Installer Spoofing Vulnerabilityransomware use | [ HIGH ] | 7.1 | 11.3% | ||
| CVE-2021-42321 Microsoft Exchange Server Remote Code Execution Vulnerabilityransomware use | [ HIGH ] | 8.8 | 91.7% | ||
| CVE-2021-42292 Microsoft Excel Security Feature Bypass | [ HIGH ] | 7.8 | 43.0% | ||
| CVE-2021-40449 Microsoft Windows Win32k Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 81.9% | ||
| CVE-2021-40444 MSHTML Remote Code Execution via Malicious Office Documentransomware usewrite-up | [ HIGH ] | 8.8 | 97.8% | ||
| CVE-2021-38649 Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | [ HIGH ] | 7.0 | 2.9% | ||
| CVE-2021-38648 Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 11.4% | ||
| CVE-2021-38647 Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerabilityransomware use | [ CRITICAL ] | 9.8 | 99.9% | ||
| CVE-2021-38645 Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 2.7% | ||
| CVE-2021-36955 Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 4.1% | ||
| CVE-2021-36948 Microsoft Windows Update Medic Service Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 23.3% | ||
| CVE-2021-36942 Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerabilityransomware use | [ HIGH ] | 7.5 | 66.0% | ||
| CVE-2021-34527 PrintNightmare — Windows Print Spooler Remote Code Executionransomware usewrite-up | [ HIGH ] | 8.8 | 99.8% | ||
| CVE-2021-34523 Microsoft Exchange Server Privilege Escalation Vulnerabilityransomware use | [ CRITICAL ] | 9.0 | 100.0% | ||
| CVE-2021-34473 Microsoft Exchange Server Remote Code Execution Vulnerabilityransomware use | [ CRITICAL ] | 9.1 | 100.0% | ||
| CVE-2021-34448 Microsoft Windows Scripting Engine Memory Corruption Vulnerability | [ MEDIUM ] | 6.8 | 40.1% | ||
| CVE-2021-33771 Microsoft Windows Kernel Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 10.2% | ||
| CVE-2021-33742 Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability | [ HIGH ] | 7.5 | 59.4% | ||
| CVE-2021-33739 Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability | [ HIGH ] | 8.4 | 6.6% | ||
| CVE-2021-31979 Microsoft Windows Kernel Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 4.5% | ||
| CVE-2021-31956 Microsoft Windows NTFS Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 22.3% | ||
| CVE-2021-31955 Microsoft Windows Kernel Information Disclosure Vulnerability | [ MEDIUM ] | 5.5 | 81.1% | ||
| CVE-2021-31207 Microsoft Exchange Server Security Feature Bypass Vulnerabilityransomware use | [ MEDIUM ] | 6.6 | 99.8% | ||
| CVE-2021-31201 Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability | [ MEDIUM ] | 5.2 | 2.6% | ||
| CVE-2021-31199 Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability | [ MEDIUM ] | 5.2 | 3.0% | ||
| CVE-2021-28310 Microsoft Win32k Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 8.4% | ||
| CVE-2021-27085 Microsoft Internet Explorer Remote Code Execution Vulnerability | [ HIGH ] | 8.8 | 5.4% | ||
| CVE-2021-27065 Microsoft Exchange Server Remote Code Execution Vulnerabilityransomware use | [ HIGH ] | 7.8 | 99.9% | ||
| CVE-2021-27059 Microsoft Office Remote Code Execution Vulnerability | [ HIGH ] | 7.6 | 6.1% | ||
| CVE-2021-26858 Microsoft Exchange Server Remote Code Execution Vulnerabilityransomware use | [ HIGH ] | 7.8 | 93.7% | ||
| CVE-2021-26857 Microsoft Exchange Server Remote Code Execution Vulnerabilityransomware use | [ HIGH ] | 7.8 | 95.8% | ||
| CVE-2021-26855 ProxyLogon — Microsoft Exchange Server Server-Side Request Forgeryransomware usewrite-up | [ CRITICAL ] | 9.8 | 100.0% | ||
| CVE-2021-26411 Microsoft Internet Explorer Memory Corruption Vulnerabilityransomware use | [ HIGH ] | 8.8 | 81.7% | ||
| CVE-2021-1732 Microsoft Win32k Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 78.4% | ||
| CVE-2021-1675 Microsoft Windows Print Spooler Remote Code Execution Vulnerabilityransomware use | [ HIGH ] | 7.8 | 85.3% | ||
| CVE-2021-1647 Microsoft Defender Remote Code Execution Vulnerability | [ HIGH ] | 7.8 | 39.7% | ||
| CVE-2020-17144 Microsoft Exchange Server Remote Code Execution Vulnerability | [ HIGH ] | 8.4 | 36.5% | ||
| CVE-2020-17087 Microsoft Windows Kernel Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 5.4% | ||
| CVE-2020-1472 Microsoft Netlogon Privilege Escalation Vulnerabilityransomware use | [ MEDIUM ] | 5.5 | 99.4% | ||
| CVE-2020-1464 Microsoft Windows Spoofing Vulnerability | [ HIGH ] | 7.8 | 38.9% | ||
| CVE-2020-1380 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | [ HIGH ] | 7.8 | 24.2% | ||
| CVE-2020-1350 Microsoft Windows DNS Server Remote Code Execution Vulnerability | [ CRITICAL ] | 10.0 | 96.7% | ||
| CVE-2020-1147 Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability | [ HIGH ] | 7.8 | 95.8% | ||
| CVE-2020-1054 Microsoft Win32k Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 53.9% | ||
| CVE-2020-1040 Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability | [ CRITICAL ] | 9.0 | 7.6% | ||
| CVE-2020-1020 Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability | [ HIGH ] | 8.8 | 65.0% | ||
| CVE-2020-0986 Microsoft Windows Kernel Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 16.4% | ||
| CVE-2020-0968 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerabilityransomware use | [ HIGH ] | 7.5 | 30.7% | ||
| CVE-2020-0938 Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability | [ HIGH ] | 7.8 | 69.0% | ||
| CVE-2020-0878 Microsoft Edge and Internet Explorer Memory Corruption Vulnerabilityransomware use | [ MEDIUM ] | 4.2 | 2.7% | ||
| CVE-2020-0688 Microsoft Exchange Server Validation Key Remote Code Execution Vulnerabilityransomware use | [ HIGH ] | 8.8 | 100.0% | ||
| CVE-2020-0683 Microsoft Windows Installer Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 7.7% | ||
| CVE-2020-0674 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | [ HIGH ] | 7.5 | 86.9% | ||
| CVE-2020-0646 Microsoft .NET Framework Remote Code Execution Vulnerability | [ CRITICAL ] | 9.8 | 99.2% | ||
| CVE-2020-0601 Microsoft Windows CryptoAPI Spoofing Vulnerability | [ HIGH ] | 8.1 | 89.1% | ||
| CVE-2019-1429 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | [ HIGH ] | 7.5 | 77.3% | ||
| CVE-2019-1367 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerabilityransomware use | [ HIGH ] | 7.5 | 52.4% | ||
| CVE-2019-1215 Microsoft Windows Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 19.3% | ||
| CVE-2019-1214 Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability | [ HIGH ] | 7.8 | 1.4% | ||
| CVE-2019-0863 Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 5.2% | ||
| CVE-2019-0859 Microsoft Win32k Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 4.2% | ||
| CVE-2019-0808 Microsoft Win32k Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 53.3% | ||
| CVE-2019-0803 Microsoft Win32k Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 45.2% | ||
| CVE-2019-0797 Microsoft Win32k Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 1.9% | ||
| CVE-2019-0708 Microsoft Remote Desktop Services Remote Code Execution Vulnerabilityransomware use | [ CRITICAL ] | 9.8 | 100.0% | ||
| CVE-2019-0604 Microsoft SharePoint Remote Code Execution Vulnerabilityransomware use | [ CRITICAL ] | 9.8 | 99.9% | ||
| CVE-2019-0541 Microsoft MSHTML Remote Code Execution Vulnerability | [ HIGH ] | 8.8 | 53.2% | ||
| CVE-2018-8653 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | [ HIGH ] | 7.5 | 29.6% | ||
| CVE-2018-0802 Microsoft Office Memory Corruption Vulnerabilityransomware use | [ HIGH ] | 7.8 | 93.3% | ||
| CVE-2018-0798 Microsoft Office Memory Corruption Vulnerability | [ HIGH ] | 8.8 | 95.1% | ||
| CVE-2017-8759 Microsoft .NET Framework Remote Code Execution Vulnerability | [ HIGH ] | 7.8 | 88.7% | ||
| CVE-2017-7269 Microsoft Windows Server Buffer Overflow Vulnerability | [ CRITICAL ] | 9.8 | 99.8% | ||
| CVE-2017-11882 Microsoft Office Memory Corruption Vulnerabilityransomware use | [ HIGH ] | 7.8 | 99.9% | ||
| CVE-2017-11774 Microsoft Office Outlook Security Feature Bypass Vulnerability | [ HIGH ] | 7.8 | 59.6% | ||
| CVE-2017-0199 Microsoft Office and WordPad Remote Code Execution Vulnerabilityransomware use | [ HIGH ] | 7.8 | 99.5% | ||
| CVE-2017-0143 Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerabilityransomware use | [ HIGH ] | 8.8 | 93.3% | ||
| CVE-2016-7255 Microsoft Win32k Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 81.0% | ||
| CVE-2016-3235 Microsoft Office OLE DLL Side Loading Vulnerability | [ HIGH ] | 7.8 | 43.3% | ||
| CVE-2016-0185 Microsoft Windows Media Center Remote Code Execution Vulnerability | [ HIGH ] | 7.8 | 69.8% | ||
| CVE-2016-0167 Microsoft Win32k Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 5.7% | ||
| CVE-2015-1641 Microsoft Office Memory Corruption Vulnerability | [ HIGH ] | 7.8 | 97.2% | ||
| CVE-2014-1812 Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 8.8 | 65.1% | ||
| CVE-2012-0158 Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerabilityransomware use | [ HIGH ] | 8.8 | 100.0% |
Every Microsoft CVE on CISA's KEV catalog that we hold, newest KEV addition first. "Patch by" is CISA's BOD 22-01 deadline for US federal agencies, a useful priority signal for everyone else.
Other Microsoft CVEs we track
| CVE / Vulnerability | Severity | CVSS | EPSS | Added to KEV |
|---|---|---|---|---|
| CVE-2026-96940 Microsoft Exchange Server privilege escalation via weak authorizationwrite-up | [ HIGH ] | 8.8 | 2.7% | — |
| CVE-2026-85889 Azure AI Foundry missing authentication allows unauthorized privilege escalationwrite-up | [ CRITICAL ] | 10.0 | 0.7% | — |
| CVE-2026-69843 Microsoft Fabric authentication bypass by spoofingwrite-up | [ CRITICAL ] | 10.0 | 0.9% | — |
| CVE-2026-62916 Authentication Bypass via Alternate Path in Microsoft Entra IDwrite-up | [ CRITICAL ] | 9.1 | 0.9% | — |
| CVE-2026-69414 Elevation of Privilege in Microsoft Defender Malware Protection Enginewrite-up | [ HIGH ] | 7.8 | 1.4% | — |
| CVE-2026-62878 Windows DNS Server Stack Buffer Overflow Remote Code Executionwrite-up | [ CRITICAL ] | 9.8 | 1.0% | — |
| CVE-2026-62815 Microsoft QUIC Unauthenticated Remote Code Executionwrite-up | [ CRITICAL ] | 9.8 | 1.0% | — |
| CVE-2026-32191 Bing Image Crawler Executes Attacker-Hosted SVG as SYSTEMwrite-up | [ CRITICAL ] | 9.8 | 0.8% | — |
| CVE-2026-32194 Bing Image Processing Executes User-Supplied SVG as SYSTEMwrite-up | [ CRITICAL ] | 9.8 | 1.2% | — |
| CVE-2026-50661 Windows BitLocker security feature bypasswrite-up | [ MEDIUM ] | 6.1 | 0.5% | — |
| CVE-2026-50656 Microsoft Defender Malware Protection Engine race-condition EoP ('RoguePlanet')write-up | [ HIGH ] | 7.8 | 11.2% | — |
| CVE-2022-21894 Windows Secure Boot Security Feature Bypass (Baton Drop)write-up | [ MEDIUM ] | 4.4 | 9.1% | — |
Not on CISA KEV as of our last sync. Severity and CVSS as stated by NVD or the vendor; EPSS from FIRST.org.
Machine-readable: /api/v1/vendors/microsoft.json.
Every CVE row links to its record with the CISA required action, catalog coverage and primary sources. We describe impact and remediation only; no exploit code. See the full KEV tracker, the vendor scorecard, or all vendors.