Skip to main content
IMMUNITYSEC

Microsoft Vulnerabilities

Microsoft makes the Windows operating system, the Edge browser and Microsoft 365, along with on-premises server products such as Exchange Server and SharePoint Server. The database tracks 394 Microsoft CVE records. CISA lists 389 of them as exploited in the wild, most recently on 2026-09-25. The most affected products are Windows, Internet Explorer, Office.

CVEs
394
Exploited
389
Ransomware
117
Latest KEV
2026-09-25

Recently Exploited Microsoft CVEs

CVE-2026-656608.8 HIGH

Microsoft SharePoint Server Remote Code Execution Vulnerability

MicrosoftKEVEPSS 2.1%2026-08-11
CVE-2026-858807.8 HIGH

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

MicrosoftKEVEPSS 3.6%2026-09-08
CVE-2026-819637.8 HIGH

Windows Update Stack Elevation of Privilege Vulnerability

MicrosoftKEVEPSS 0.4%2026-09-08
CVE-2019-10688.8 HIGH

Microsoft SQL Server Remote Code Execution Vulnerability

MicrosoftKEVEPSS 57.3%2019-07-15
CVE-2026-550409.1 CRITICAL

Microsoft SharePoint Server Security Feature Bypass Vulnerability

MicrosoftKEVEPSS 69.5%2026-07-14
CVE-2026-338249.8 CRITICAL

Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability

MicrosoftKEVEPSS 1.6%2026-04-14

Affected Products

74 products
ProductCVEsKEVLatest
Windows1721722026-09-08
Internet Explorer36362026-05-20
Office29292026-04-14
Win32k25252023-06-22
Exchange Server17172026-04-13
SharePoint10102026-09-25
Defender552026-05-20
SharePoint Server552026-07-14
Open Management Infrastructure (OMI)442021-11-03
Word442023-09-12
.NET Framework332025-02-04
Active Directory332022-08-18
Excel332022-03-03
Silverlight332022-05-25
Windows 10 Version 16073-2026-02-10
DirectX Graphics Kernel (DXGKRNL)222022-03-28
Edge222022-03-28
Edge and Internet Explorer222022-03-28
Enhanced Cryptographic Provider222021-11-03
Graphics Device Interface (GDI)222022-03-25
Microsoft SharePoint Enterprise Server 20162-2026-04-14
MSHTML222021-11-03
PowerPoint222022-06-08
SMBv1222022-02-10
SMBv1 server222022-05-24
SQL Server222026-08-26
Windows 222024-10-15
XML Core Services222022-06-08
.NET Core and Visual Studio112023-08-09
.NET Framework, SharePoint, Visual Studio112021-11-03
Active Directory Federation Services112026-07-14
Ancillary Function Driver (afd.sys)112022-03-28
ATM Font Driver112022-03-03
Client-Server Run-time Subsystem (CSRSS)112022-03-28
Configuration Manager112026-02-12
DirectX112026-05-20
DWM Core Library112024-05-14
Exchange112021-11-17
Forefront Threat Management Gateway (TMG)112022-03-03
Graphics Component112022-02-15
HTTP Protocol Stack112022-04-06
HTTP.sys112022-02-10
Hyper-V RemoteFX112021-11-03
Input Method Editor (IME) Japanese112022-05-25
Internet Explorer and Edge112022-05-24
Internet Explorer Scripting Engine112022-03-25
Internet Information Services (IIS)112021-11-03
Internet Key Exchange (IKE) Service Extensions112026-08-18
Kerberos Key Distribution Center (KDC)112022-03-25
Malware Protection Engine112022-03-03
Microsoft112026-05-15
MSCOMCTL.OCX112021-11-03
Netlogon112021-11-03
Office and WordPad112021-11-03
Office Outlook112025-02-06
Outlook112023-07-11
Partner Center112025-02-25
Power Pages112025-02-21
Project112024-08-13
Publisher112024-09-10
Remote Desktop Services112021-11-03
Skype for Business112023-10-10
SmartScreen Prompt112024-04-30
SMBv3112022-02-10
Streaming Service112024-02-29
Streaming Service Proxy112023-09-12
Task Scheduler112022-03-15
Update Notification Manager112022-05-23
Visual Basic for Applications (VBA)112026-04-13
Windows Ancillary Function Driver for WinSock 112026-08-11
Windows CNG Key Isolation Service112023-10-04
Windows COM+ Event System Service112022-10-11
WinVerifyTrust function112022-01-10
WordPad112023-10-10

Security Advisories

Microsoft Security Update Guide (MSRC)
https://msrc.microsoft.com/update-guide

Weakness Types

Use After Free14Heap-based Buffer Overflow10Deserialization of Untrusted Data8Improper Input Validation8Protection Mechanism Failure8External Control of File Name or Path6Untrusted Pointer Dereference5Link Following5Code Injection4Improper Privilege Management4

All Microsoft CVEs

394 records
CVETitleVendorCVSSEPSSKEVPublished
CVE-2026-65660
Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft8.82.1%KEV2026-08-11
CVE-2026-85880
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Microsoft7.83.6%KEV2026-09-08
CVE-2026-81963
Windows Update Stack Elevation of Privilege Vulnerability
Microsoft7.80.4%KEV2026-09-08
CVE-2019-1068
Microsoft SQL Server Remote Code Execution Vulnerability
Microsoft8.857.3%KEV2019-07-15
CVE-2026-55040
Microsoft SharePoint Server Security Feature Bypass Vulnerability
Microsoft9.169.5%KEV2026-07-14
CVE-2026-33824
Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability
Microsoft9.81.6%KEV2026-04-14
CVE-2026-68820
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Microsoft7.00.3%KEV2026-08-11
CVE-2026-50522
Microsoft SharePoint Remote Code Execution Vulnerability
Microsoft9.83.0%KEV2026-07-14
CVE-2026-58644
Microsoft SharePoint Remote Code Execution Vulnerability
Microsoft9.815.9%KEV2026-07-14
CVE-2026-56164
Microsoft SharePoint Server Elevation of Privilege Vulnerability
Microsoft5.31.0%KEV2026-07-14
CVE-2026-56155
Active Directory Federation Services Elevation of Privilege Vulnerability
Microsoft7.80.3%KEV2026-07-14
CVE-2026-45659
Microsoft SharePoint Remote Code Execution Vulnerability
Microsoft8.82.7%KEV2026-05-22
CVE-2008-4250
Microsoft Windows Buffer Overflow Vulnerability
-9.898.8%KEV2008-10-23
CVE-2010-0249
Microsoft Internet Explorer Use-After-Free Vulnerability
-8.891.9%KEV2010-01-15
CVE-2010-0806
Microsoft Internet Explorer Use-After-Free Vulnerability
-8.882.2%KEV2010-03-10
CVE-2009-1537
Microsoft DirectX NULL Byte Overwrite Vulnerability
-8.851.2%KEV2009-05-29
CVE-2026-45498
Microsoft Defender Denial of Service Vulnerability
Microsoft4.01.3%KEV2026-05-20
CVE-2026-41091
Microsoft Defender Elevation of Privilege Vulnerability
Microsoft7.80.4%KEV2026-05-20
CVE-2026-42897
Microsoft Exchange Server Spoofing Vulnerability
Microsoft8.10.5%KEV2026-05-14
CVE-2026-32202
Windows Shell Spoofing Vulnerability
Microsoft4.34.9%KEV2026-04-14
CVE-2026-33825
Microsoft Defender Elevation of Privilege Vulnerability
Microsoft7.80.4%KEV2026-04-14
CVE-2026-32201
Microsoft SharePoint Server Spoofing Vulnerability
Microsoft6.543.4%KEV2026-04-14
CVE-2009-0238
Microsoft Office Remote Code Execution
-8.843.2%KEV2009-02-25
CVE-2023-21529
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft8.859.3%KEV2023-02-14
CVE-2012-1854
Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability
-7.821.0%KEV2012-07-10
CVE-2023-36424
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Microsoft7.812.2%KEV2023-11-14
CVE-2025-60710
Host Process for Windows Tasks Elevation of Privilege Vulnerability
Microsoft7.84.6%KEV2025-11-11
CVE-2026-20963
Microsoft SharePoint Remote Code Execution Vulnerability
Microsoft9.829.6%KEV2026-01-13
CVE-2008-0015
Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability
-8.876.6%KEV2009-07-07
CVE-2024-43468
Microsoft Configuration Manager Remote Code Execution Vulnerability
Microsoft9.881.0%KEV2024-10-08
CVE-2026-21510
Windows Shell Security Feature Bypass Vulnerability
Microsoft8.824.5%KEV2026-02-10
CVE-2026-21513
MSHTML Framework Security Feature Bypass Vulnerability
Microsoft8.815.9%KEV2026-02-10
CVE-2026-21525
Windows Remote Access Connection Manager Denial of Service Vulnerability
Microsoft6.24.9%KEV2026-02-10
CVE-2026-21533
Windows Remote Desktop Services Elevation of Privilege Vulnerability
Microsoft7.84.2%KEV2026-02-10
CVE-2026-21519
Desktop Window Manager Elevation of Privilege Vulnerability
Microsoft7.82.5%KEV2026-02-10
CVE-2026-21514
Microsoft Word Security Feature Bypass Vulnerability
Microsoft7.81.6%KEV2026-02-10
CVE-2026-21509
Microsoft Office Security Feature Bypass Vulnerability
Microsoft7.870.8%KEV2026-01-26
CVE-2026-20805
Desktop Window Manager Information Disclosure Vulnerability
Microsoft5.57.2%KEV2026-01-13
CVE-2009-0556
Microsoft Office PowerPoint Code Injection Vulnerability
-8.867.3%KEV2009-04-03
CVE-2025-62221
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Microsoft7.82.5%KEV2025-12-09
CVE-2025-62215
Windows Kernel Elevation of Privilege Vulnerability
Microsoft7.06.0%KEV2025-11-11
CVE-2025-59287
Windows Server Update Service (WSUS) Remote Code Execution Vulnerability
Microsoft9.8100.0%KEV2025-10-14
CVE-2025-33073
Windows SMB Client Elevation of Privilege Vulnerability
Microsoft8.882.7%KEV2025-06-10
CVE-2025-24990
Windows Agere Modem Driver Elevation of Privilege Vulnerability
Microsoft7.86.4%KEV2025-10-14
CVE-2025-59230
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Microsoft7.82.7%KEV2025-10-14
CVE-2010-3962
Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability
-8.196.8%KEV2010-11-05
CVE-2011-3402
Microsoft Windows Remote Code Execution Vulnerability
-8.878.1%KEV2011-11-04
CVE-2013-3918
Microsoft Windows Out-of-Bounds Write Vulnerability
-8.873.7%KEV2013-11-12
CVE-2021-43226
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Microsoft7.83.3%KEV2021-12-15
CVE-2013-3893
Microsoft Internet Explorer Resource Management Errors Vulnerability
-8.887.5%KEV2013-09-18
CVE-2007-0671
Microsoft Office Excel Remote Code Execution Vulnerability
-8.843.2%KEV2007-02-03
CVE-2025-49704
Microsoft SharePoint Remote Code Execution Vulnerability
Microsoft8.8100.0%KEV2025-07-08
CVE-2025-49706
Microsoft SharePoint Server Spoofing Vulnerability
Microsoft6.599.1%KEV2025-07-08
CVE-2025-53770
Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft9.8100.0%KEV2025-07-20
CVE-2025-33053
Internet Shortcut Files Remote Code Execution Vulnerability
Microsoft8.887.0%KEV2025-06-10
CVE-2025-30397
Scripting Engine Memory Corruption Vulnerability
Microsoft7.526.8%KEV2025-05-13
CVE-2025-32706
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Microsoft7.82.3%KEV2025-05-13
CVE-2025-32709
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Microsoft7.82.2%KEV2025-05-13
CVE-2025-30400
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Microsoft7.81.9%KEV2025-05-13
CVE-2025-32701
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Microsoft7.81.4%KEV2025-05-13
CVE-2025-24054
NTLM Hash Disclosure Spoofing Vulnerability
Microsoft6.558.9%KEV2025-03-11
CVE-2025-29824
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Microsoft7.813.9%KEV2025-04-08
CVE-2025-26633
Microsoft Management Console Security Feature Bypass Vulnerability
Microsoft7.030.4%KEV2025-03-11
CVE-2025-24985
Windows Fast FAT File System Driver Remote Code Execution Vulnerability
Microsoft7.83.9%KEV2025-03-11
CVE-2025-24993
Windows NTFS Remote Code Execution Vulnerability
Microsoft7.82.2%KEV2025-03-11
CVE-2025-24991
Windows NTFS Information Disclosure Vulnerability
Microsoft5.52.0%KEV2025-03-11
CVE-2025-24984
Windows NTFS Information Disclosure Vulnerability
Microsoft4.62.0%KEV2025-03-11
CVE-2025-24983
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Microsoft7.01.4%KEV2025-03-11
CVE-2018-8639
Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability
Microsoft8.422.2%KEV2018-12-12
CVE-2024-49035
Partner.Microsoft.Com Elevation of Privilege Vulnerability
Microsoft8.71.3%KEV2024-11-26
CVE-2025-24989
Microsoft Power Pages Elevation of Privilege Vulnerability
Microsoft8.21.6%KEV2025-02-19
CVE-2025-21391
Windows Storage Elevation of Privilege Vulnerability
Microsoft7.12.3%KEV2025-02-11
CVE-2025-21418
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Microsoft7.81.6%KEV2025-02-11
CVE-2024-21413
Microsoft Outlook Remote Code Execution Vulnerability
Microsoft9.894.7%KEV2024-02-13
CVE-2024-29059
.NET Framework Information Disclosure Vulnerability
Microsoft7.598.6%KEV2024-03-22
CVE-2025-21333
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
Microsoft7.810.0%KEV2025-01-14
CVE-2025-21334
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
Microsoft7.81.6%KEV2025-01-14
CVE-2025-21335
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
Microsoft7.81.4%KEV2025-01-14
CVE-2024-35250
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Microsoft7.825.2%KEV2024-06-11
CVE-2024-49138
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Microsoft7.826.2%KEV2024-12-10
CVE-2024-43451
NTLM Hash Disclosure Spoofing Vulnerability
Microsoft6.584.1%KEV2024-11-12
CVE-2024-49039
Windows Task Scheduler Elevation of Privilege Vulnerability
Microsoft8.814.2%KEV2024-11-12
CVE-2024-38094
Microsoft SharePoint Remote Code Execution Vulnerability
Microsoft7.250.9%KEV2024-07-09
CVE-2024-30088
Windows Kernel Elevation of Privilege Vulnerability
Microsoft7.068.2%KEV2024-06-11
CVE-2024-43572
Microsoft Management Console Remote Code Execution Vulnerability
Microsoft7.866.7%KEV2024-10-08
CVE-2024-43573
Windows MSHTML Platform Spoofing Vulnerability
Microsoft6.546.1%KEV2024-10-08
CVE-2020-0618
Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability
Microsoft9.899.0%KEV2020-02-11
CVE-2024-43461
Windows MSHTML Platform Spoofing Vulnerability
Microsoft8.854.5%KEV2024-09-10
CVE-2024-38217
Windows Mark of the Web Security Feature Bypass Vulnerability
Microsoft5.410.0%KEV2024-09-10
CVE-2024-38014
Windows Installer Elevation of Privilege Vulnerability
Microsoft7.86.3%KEV2024-09-10
CVE-2024-38226
Microsoft Publisher Security Feature Bypass Vulnerability
Microsoft7.32.7%KEV2024-09-10
CVE-2021-31196
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft7.254.1%KEV2021-07-14
CVE-2024-38178
Scripting Engine Memory Corruption Vulnerability
Microsoft7.541.4%KEV2024-08-13
CVE-2024-38193
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Microsoft7.828.7%KEV2024-08-13
CVE-2024-38213
Windows Mark of the Web Security Feature Bypass Vulnerability
Microsoft6.513.6%KEV2024-08-13
CVE-2024-38189
Microsoft Project Remote Code Execution Vulnerability
Microsoft8.88.2%KEV2024-08-13
CVE-2024-38106
Windows Kernel Elevation of Privilege Vulnerability
Microsoft7.06.3%KEV2024-08-13
CVE-2024-38107
Windows Power Dependency Coordinator Elevation of Privilege Vulnerability
Microsoft7.81.6%KEV2024-08-13
CVE-2018-0824
Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability
-7.573.2%KEV2018-05-09
CVE-2012-4792
Microsoft Internet Explorer Use-After-Free Vulnerability
-8.878.8%KEV2012-12-30
CVE-2024-38112
Windows MSHTML Platform Spoofing Vulnerability
Microsoft7.584.2%KEV2024-07-09
CVE-2024-38080
Windows Hyper-V Elevation of Privilege Vulnerability
Microsoft7.87.1%KEV2024-07-09
CVE-2024-26169
Windows Error Reporting Service Elevation of Privilege Vulnerability
Microsoft7.84.0%KEV2024-03-12
CVE-2024-30051
Windows DWM Core Library Elevation of Privilege Vulnerability
Microsoft7.85.7%KEV2024-05-14
CVE-2024-30040
Windows MSHTML Platform Security Feature Bypass Vulnerability
Microsoft8.83.9%KEV2024-05-14
CVE-2024-29988
SmartScreen Prompt Security Feature Bypass Vulnerability
Microsoft8.844.9%KEV2024-04-09
CVE-2022-38028
Windows Print Spooler Elevation of Privilege Vulnerability
Microsoft7.814.9%KEV2022-10-11
CVE-2023-24955
Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft7.285.0%KEV2023-05-09
CVE-2024-21338
Windows Kernel Elevation of Privilege Vulnerability
Microsoft7.859.8%KEV2024-02-13
CVE-2023-29360
Microsoft Streaming Service Elevation of Privilege Vulnerability
Microsoft8.421.6%KEV2023-06-13
CVE-2024-21410
Microsoft Exchange Server Elevation of Privilege Vulnerability
Microsoft9.812.6%KEV2024-02-13
CVE-2024-21412
Internet Shortcut Files Security Feature Bypass Vulnerability
Microsoft8.199.4%KEV2024-02-13
CVE-2024-21351
Windows SmartScreen Security Feature Bypass Vulnerability
Microsoft7.627.8%KEV2024-02-13
CVE-2023-29357
Microsoft SharePoint Server Elevation of Privilege Vulnerability
Microsoft9.8100.0%KEV2023-06-13
CVE-2023-36584
Windows Mark of the Web Security Feature Bypass Vulnerability
Microsoft5.43.1%KEV2023-10-10
CVE-2023-36025
Windows SmartScreen Security Feature Bypass Vulnerability
Microsoft8.888.1%KEV2023-11-14
CVE-2023-36036
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Microsoft7.816.7%KEV2023-11-14
CVE-2023-36033
Windows DWM Core Library Elevation of Privilege Vulnerability
Microsoft7.810.9%KEV2023-11-14
CVE-2023-41763
Skype for Business Elevation of Privilege Vulnerability
Microsoft5.390.4%KEV2023-10-10
CVE-2023-36563
Microsoft WordPad Information Disclosure Vulnerability
Microsoft6.520.7%KEV2023-10-10
CVE-2023-28229
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
Microsoft7.01.7%KEV2023-04-11
CVE-2023-36802
Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability
Microsoft7.827.9%KEV2023-09-12
CVE-2023-36761
Microsoft Word Information Disclosure Vulnerability
Microsoft6.519.6%KEV2023-09-12
CVE-2023-38180
.NET and Visual Studio Denial of Service Vulnerability
Microsoft7.514.0%KEV2023-08-08
CVE-2023-36884
Windows Search Remote Code Execution Vulnerability
Microsoft7.598.9%KEV2023-07-11
CVE-2023-36874
Windows Error Reporting Service Elevation of Privilege Vulnerability
Microsoft7.842.6%KEV2023-07-11
CVE-2023-35311
Microsoft Outlook Security Feature Bypass Vulnerability
Microsoft8.815.5%KEV2023-07-11
CVE-2023-32046
Windows MSHTML Platform Elevation of Privilege Vulnerability
Microsoft7.810.0%KEV2023-07-11
CVE-2023-32049
Windows SmartScreen Security Feature Bypass Vulnerability
Microsoft8.84.2%KEV2023-07-11
CVE-2016-0165
Microsoft Win32k Privilege Escalation Vulnerability
-7.813.7%KEV2016-04-12
CVE-2023-29336
Win32k Elevation of Privilege Vulnerability
Microsoft7.841.2%KEV2023-05-09
CVE-2023-28252
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Microsoft7.849.0%KEV2023-04-11
CVE-2019-1388
Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability
Microsoft7.88.6%KEV2019-11-12
CVE-2013-3163
Microsoft Internet Explorer Memory Corruption Vulnerability
-8.870.7%KEV2013-07-10
CVE-2023-23397
Microsoft Outlook Elevation of Privilege Vulnerability
Microsoft9.897.2%KEV2023-03-14
CVE-2023-24880
Windows SmartScreen Security Feature Bypass Vulnerability
Microsoft4.478.0%KEV2023-03-14
CVE-2023-21715
Microsoft Publisher Security Feature Bypass Vulnerability
Microsoft7.312.0%KEV2023-02-14
CVE-2023-23376
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Microsoft7.810.9%KEV2023-02-14
CVE-2023-21823
Windows Graphics Component Remote Code Execution Vulnerability
Microsoft7.85.6%KEV2023-02-14
CVE-2022-41080
Microsoft Exchange Server Elevation of Privilege Vulnerability
Microsoft8.877.3%KEV2022-11-09
CVE-2023-21674
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Microsoft8.841.0%KEV2023-01-10
CVE-2022-44698
Windows SmartScreen Security Feature Bypass Vulnerability
Microsoft5.476.3%KEV2022-12-13
CVE-2022-41049
Windows Mark of the Web Security Feature Bypass Vulnerability
Microsoft5.42.5%KEV2022-11-09
CVE-2022-41128
Windows Scripting Languages Remote Code Execution Vulnerability
Microsoft8.824.6%KEV2022-11-09
CVE-2022-41125
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
Microsoft7.83.0%KEV2022-11-09
CVE-2022-41073
Windows Print Spooler Elevation of Privilege Vulnerability
Microsoft7.82.3%KEV2022-11-09
CVE-2022-41091
Windows Mark of the Web Security Feature Bypass Vulnerability
Microsoft5.41.8%KEV2022-11-09
CVE-2022-41033
Windows COM+ Event System Service Elevation of Privilege Vulnerability
Microsoft7.81.9%KEV2022-10-11
CVE-2022-41082
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft8.0100.0%KEV2022-10-03
CVE-2022-41040
Microsoft Exchange Server Elevation of Privilege Vulnerability
Microsoft8.8100.0%KEV2022-10-03
CVE-2010-2568
Microsoft Windows Remote Code Execution Vulnerability
-7.891.3%KEV2010-07-22
CVE-2022-37969
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Microsoft7.828.3%KEV2022-09-13
CVE-2022-26923
Active Directory Domain Services Elevation of Privilege Vulnerability
Microsoft8.883.5%KEV2022-05-10
CVE-2022-21971
Windows Runtime Remote Code Execution Vulnerability
Microsoft7.853.9%KEV2022-02-09
CVE-2022-34713
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
Microsoft7.867.8%KEV2022-08-09
CVE-2022-22047
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
Microsoft7.818.8%KEV2022-07-12
CVE-2022-26925
Windows LSA Spoofing Vulnerability
Microsoft8.110.5%KEV2022-05-10
CVE-2022-30190
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
Microsoft7.899.2%KEV2022-06-01
CVE-2012-0151
Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability
-7.887.7%KEV2012-04-10
CVE-2012-1889
Microsoft XML Core Services Memory Corruption Vulnerability
-8.883.5%KEV2012-06-13
CVE-2012-4969
Microsoft Internet Explorer Use-After-Free Vulnerability
-8.180.3%KEV2012-09-18
CVE-2013-1331
Microsoft Office Buffer Overflow Vulnerability
-7.879.8%KEV2013-06-12
CVE-2009-0563
Microsoft Office Buffer Overflow Vulnerability
-7.862.8%KEV2009-06-10
CVE-2010-2572
Microsoft PowerPoint Buffer Overflow Vulnerability
-7.858.6%KEV2010-11-10
CVE-2009-0557
Microsoft Office Object Record Corruption Vulnerability
-7.853.0%KEV2009-06-10
CVE-2006-2492
Microsoft Word Malformed Object Pointer Vulnerability
-8.848.1%KEV2006-05-20
CVE-2013-0074
Microsoft Silverlight Double Dereference Vulnerability
-7.878.9%KEV2013-03-13
CVE-2015-0016
Microsoft Windows TS WebProxy Directory Traversal Vulnerability
-7.875.8%KEV2015-01-13
CVE-2016-0034
Microsoft Silverlight Runtime Remote Code Execution Vulnerability
-8.869.4%KEV2016-01-13
CVE-2016-3393
Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability
-7.868.5%KEV2016-10-14
CVE-2013-3896
Microsoft Silverlight Information Disclosure Vulnerability
-5.568.0%KEV2013-10-09
CVE-2016-7256
Microsoft Windows Open Type Font Remote Code Execution Vulnerability
-8.864.6%KEV2016-11-10
CVE-2014-4148
Microsoft Windows Remote Code Execution Vulnerability
-8.859.9%KEV2014-10-15
CVE-2014-4077
Microsoft IME Japanese Privilege Escalation Vulnerability
-7.854.6%KEV2014-11-11
CVE-2013-7331
Microsoft Internet Explorer Information Disclosure Vulnerability
-6.550.2%KEV2014-02-26
CVE-2015-1671
Microsoft Windows Remote Code Execution Vulnerability
-7.849.0%KEV2015-05-13
CVE-2014-4123
Microsoft Internet Explorer Privilege Escalation Vulnerability
-8.847.1%KEV2014-10-15
CVE-2015-2425
Microsoft Internet Explorer Memory Corruption Vulnerability
-8.844.7%KEV2015-07-14
CVE-2015-0071
Microsoft Internet Explorer ASLR Bypass Vulnerability
-6.533.6%KEV2015-02-11
CVE-2014-2817
Microsoft Internet Explorer Privilege Escalation Vulnerability
-8.826.3%KEV2014-08-12
CVE-2015-2360
Microsoft Win32k Privilege Escalation Vulnerability
-8.814.8%KEV2015-06-10
CVE-2015-6175
Microsoft Windows Kernel Privilege Escalation Vulnerability
-7.85.1%KEV2015-12-09
CVE-2015-1769
Microsoft Windows Mount Manager Privilege Escalation Vulnerability
-6.64.1%KEV2015-08-15
CVE-2017-0147
Microsoft Windows SMBv1 Information Disclosure Vulnerability
Microsoft Corporation7.599.7%KEV2017-03-17
CVE-2017-8543
Microsoft Windows Search Remote Code Execution Vulnerability
Microsoft Corporation9.874.2%KEV2017-06-15
CVE-2016-3298
Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability
-6.533.3%KEV2016-10-14
CVE-2017-0149
Microsoft Internet Explorer Memory Corruption Vulnerability
Microsoft Corporation8.829.2%KEV2017-03-17
CVE-2016-3351
Microsoft Internet Explorer and Edge Information Disclosure Vulnerability
-6.526.5%KEV2016-09-14
CVE-2017-0210
Microsoft Internet Explorer Privilege Escalation Vulnerability
Microsoft Corporation8.822.3%KEV2017-04-12
CVE-2016-0162
Microsoft Internet Explorer Information Disclosure Vulnerability
-4.322.0%KEV2016-04-12
CVE-2017-0022
Microsoft XML Core Services Information Disclosure Vulnerability
Microsoft Corporation6.518.1%KEV2017-03-17
CVE-2017-0005
Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability
Microsoft Corporation7.811.0%KEV2017-03-17
CVE-2018-8611
Microsoft Windows Kernel Privilege Escalation Vulnerability
Microsoft7.84.2%KEV2018-12-12
CVE-2019-0703
Microsoft Windows SMB Information Disclosure Vulnerability
Microsoft6.59.6%KEV2019-04-08
CVE-2019-0676
Microsoft Internet Explorer Information Disclosure Vulnerability
Microsoft6.58.1%KEV2019-03-06
CVE-2020-1027
Microsoft Windows Kernel Privilege Escalation Vulnerability
Microsoft7.84.5%KEV2020-04-15
CVE-2019-1385
Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability
Microsoft7.83.6%KEV2019-11-12
CVE-2018-8589
Microsoft Win32k Privilege Escalation Vulnerability
Microsoft7.83.0%KEV2018-11-14
CVE-2020-0638
Microsoft Update Notification Manager Privilege Escalation Vulnerability
Microsoft7.82.4%KEV2020-01-14
CVE-2019-0880
Microsoft Windows Privilege Escalation Vulnerability
Microsoft7.82.3%KEV2019-07-15
CVE-2019-1130
Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability
Microsoft7.81.7%KEV2019-07-29
CVE-2014-4113
Microsoft Win32k Privilege Escalation Vulnerability
-7.886.9%KEV2014-10-15
CVE-2014-0322
Microsoft Internet Explorer Use-After-Free Vulnerability
-8.885.1%KEV2014-02-14
CVE-2022-26904
Windows User Profile Service Elevation of Privilege Vulnerability
Microsoft7.016.9%KEV2022-04-15
CVE-2022-21919
Windows User Profile Service Elevation of Privilege Vulnerability
Microsoft7.02.4%KEV2022-01-11
CVE-2021-40450
Win32k Elevation of Privilege Vulnerability
Microsoft7.81.6%KEV2021-10-13
CVE-2021-41357
Win32k Elevation of Privilege Vulnerability
Microsoft7.81.6%KEV2021-10-13
CVE-2022-22718
Windows Print Spooler Elevation of Privilege Vulnerability
Microsoft7.818.5%KEV2022-02-09
CVE-2015-2502
Microsoft Internet Explorer Memory Corruption Vulnerability
-8.851.0%KEV2015-08-19
CVE-2022-24521
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Microsoft7.87.1%KEV2022-04-15
CVE-2021-42287
Active Directory Domain Services Elevation of Privilege Vulnerability
Microsoft7.577.2%KEV2021-11-10
CVE-2021-42278
Active Directory Domain Services Elevation of Privilege Vulnerability
Microsoft7.573.3%KEV2021-11-10
CVE-2021-31166
HTTP Protocol Stack Remote Code Execution Vulnerability
Microsoft9.899.9%KEV2021-05-11
CVE-2017-0148
Microsoft SMBv1 Server Remote Code Execution Vulnerability
Microsoft Corporation8.199.4%KEV2017-03-17
CVE-2021-34484
Windows User Profile Service Elevation of Privilege Vulnerability
Microsoft7.821.8%KEV2021-08-12
CVE-2016-0189
Microsoft Internet Explorer Memory Corruption Vulnerability
-7.594.1%KEV2016-05-11
CVE-2015-2426
Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability
-8.886.6%KEV2015-07-20
CVE-2017-0213
Microsoft Windows Privilege Escalation Vulnerability
Microsoft Corporation7.384.1%KEV2017-05-12
CVE-2016-7200
Microsoft Edge Memory Corruption Vulnerability
-8.882.8%KEV2016-11-10
CVE-2017-0037
Microsoft Edge and Internet Explorer Type Confusion Vulnerability
Microsoft Corporation8.180.4%KEV2017-02-26
CVE-2016-7201
Microsoft Edge Memory Corruption Vulnerability
-8.880.0%KEV2016-11-10
CVE-2013-2551
Microsoft Internet Explorer Use-After-Free Vulnerability
-8.873.9%KEV2013-03-11
CVE-2016-0151
Microsoft Windows CSRSS Security Feature Bypass Vulnerability
-7.862.9%KEV2016-04-12
CVE-2017-0059
Microsoft Internet Explorer Information Disclosure Vulnerability
Microsoft Corporation4.362.0%KEV2017-03-17
CVE-2015-2419
Microsoft Internet Explorer Memory Corruption Vulnerability
-8.853.1%KEV2015-07-14
CVE-2012-2539
Microsoft Word Remote Code Execution Vulnerability
-7.853.0%KEV2012-12-12
CVE-2013-3660
Microsoft Win32k Privilege Escalation Vulnerability
-7.839.3%KEV2013-05-24
CVE-2015-1770
Microsoft Office Uninitialized Memory Use Vulnerability
-8.835.0%KEV2015-06-10
CVE-2011-2005
Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability
-7.831.8%KEV2011-10-12
CVE-2016-0040
Microsoft Windows Kernel Privilege Escalation Vulnerability
-7.824.5%KEV2016-02-10
CVE-2018-8440
Microsoft Windows Privilege Escalation Vulnerability
Microsoft7.818.4%KEV2018-09-13
CVE-2021-34486
Windows Event Tracing Elevation of Privilege Vulnerability
Microsoft7.89.3%KEV2021-08-12
CVE-2010-4398
Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability
-7.88.7%KEV2010-12-03
CVE-2021-38646
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
Microsoft7.88.0%KEV2021-09-15
CVE-2018-8405
Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability
Microsoft7.83.4%KEV2018-08-15
CVE-2018-8406
Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability
Microsoft7.83.4%KEV2018-08-15
CVE-2014-6332
Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability
-8.894.9%KEV2014-11-11
CVE-2017-0146
Microsoft Windows SMB Remote Code Execution Vulnerability
Microsoft Corporation8.889.9%KEV2017-03-17
CVE-2014-6324
Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability
-8.887.3%KEV2014-11-18
CVE-2018-8414
Microsoft Windows Shell Remote Code Execution Vulnerability
Microsoft8.872.9%KEV2018-08-15
CVE-2018-8373
Microsoft Scripting Engine Memory Corruption Vulnerability
Microsoft7.561.9%KEV2018-08-15
CVE-2022-21999
Windows Print Spooler Elevation of Privilege Vulnerability
Microsoft7.841.0%KEV2022-02-09
CVE-2019-0903
Microsoft GDI Remote Code Execution Vulnerability
Microsoft8.821.7%KEV2019-05-16
CVE-2018-8120
Microsoft Win32k Privilege Escalation Vulnerability
Microsoft7.073.4%KEV2018-05-09
CVE-2017-0101
Microsoft Windows Transaction Manager Privilege Escalation Vulnerability
Microsoft Corporation7.857.5%KEV2017-03-17
CVE-2019-0841
Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
Microsoft7.841.4%KEV2019-04-09
CVE-2019-1405
Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability
Microsoft7.830.2%KEV2019-11-12
CVE-2016-3309
Microsoft Windows Kernel Privilege Escalation Vulnerability
-7.820.5%KEV2016-08-09
CVE-2019-1322
Microsoft Windows Privilege Escalation Vulnerability
Microsoft7.819.2%KEV2019-10-10
CVE-2019-1253
Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability
Microsoft7.811.6%KEV2019-09-11
CVE-2015-2546
Microsoft Win32k Memory Corruption Vulnerability
-8.210.1%KEV2015-09-09
CVE-2019-1132
Microsoft Win32k Privilege Escalation Vulnerability
Microsoft7.89.9%KEV2019-07-29
CVE-2019-1064
Windows Elevation of Privilege Vulnerability
Microsoft7.86.9%KEV2019-06-12
CVE-2019-1069
Task Scheduler Elevation of Privilege Vulnerability
Microsoft7.86.1%KEV2019-06-12
CVE-2019-0543
Microsoft Windows Privilege Escalation Vulnerability
-7.84.7%KEV2019-01-08
CVE-2019-1315
Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability
Microsoft7.83.5%KEV2019-10-10
CVE-2019-1129
Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
Microsoft7.81.8%KEV2019-07-29
CVE-2010-3333
Microsoft Office Stack-based Buffer Overflow Vulnerability
-7.889.5%KEV2010-11-10
CVE-2015-2545
Microsoft Office Malformed EPS File Vulnerability
-7.885.9%KEV2015-09-09
CVE-2009-3129
Microsoft Excel Featheader Record Memory Corruption Vulnerability
-7.884.0%KEV2009-11-11
CVE-2014-4114
Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability
-7.881.6%KEV2014-10-15
CVE-2017-11826
Microsoft Office Remote Code Execution Vulnerability
Microsoft Corporation7.881.2%KEV2017-10-13
CVE-2017-0261
Microsoft Office Use-After-Free Vulnerability
Microsoft Corporation7.878.1%KEV2017-05-12
CVE-2013-1347
Microsoft Internet Explorer Remote Code Execution Vulnerability
-8.877.7%KEV2013-05-05
CVE-2013-3897
Microsoft Internet Explorer Use-After-Free Vulnerability
-8.877.3%KEV2013-10-09
CVE-2012-1856
Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability
-8.872.0%KEV2012-08-15
CVE-2017-8540
Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability
Microsoft Corporation7.871.9%KEV2017-05-26
CVE-2016-7262
Microsoft Office Security Feature Bypass Vulnerability
-7.857.7%KEV2016-12-20
CVE-2016-7193
Microsoft Office Memory Corruption Vulnerability
-7.857.6%KEV2016-10-14
CVE-2015-1701
Microsoft Win32k Privilege Escalation Vulnerability
-7.855.9%KEV2015-04-21
CVE-2015-1642
Microsoft Office Memory Corruption Vulnerability
-7.853.1%KEV2015-08-15
CVE-2011-1889
Microsoft Forefront TMG Remote Code Execution Vulnerability
-9.849.0%KEV2011-06-16
CVE-2015-2424
Microsoft PowerPoint Memory Corruption Vulnerability
-8.840.4%KEV2015-07-14
CVE-2016-0099
Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability
-7.837.0%KEV2016-03-09
CVE-2015-2387
Microsoft ATM Font Driver Privilege Escalation Vulnerability
-7.834.9%KEV2015-07-14
CVE-2013-5065
Microsoft Windows Kernel Privilege Escalation Vulnerability
-7.834.7%KEV2013-11-27
CVE-2010-0232
Microsoft Windows Kernel Exception Handler Vulnerability
-7.828.7%KEV2010-01-21
CVE-2018-8581
Microsoft Exchange Server Privilege Escalation Vulnerability
Microsoft7.427.4%KEV2018-11-14
CVE-2019-1297
Microsoft Excel Remote Code Execution Vulnerability
Microsoft8.821.8%KEV2019-09-11
CVE-2021-41379
Windows Installer Elevation of Privilege Vulnerability
Microsoft5.519.5%KEV2021-11-10
CVE-2004-0210
Microsoft Windows Privilege Escalation Vulnerability
-7.87.2%KEV2004-07-14
CVE-2002-0367
Microsoft Windows Privilege Escalation Vulnerability
-7.84.9%KEV2003-04-02
CVE-2009-1123
Microsoft Windows Improper Input Validation Vulnerability
-7.84.9%KEV2009-06-10
CVE-2017-0001
Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability
Microsoft Corporation7.83.1%KEV2017-03-17
CVE-2017-8570
Microsoft Office Remote Code Execution Vulnerability
Microsoft Corporation7.889.9%KEV2017-07-11
CVE-2014-6352
Microsoft Windows Code Injection Vulnerability
-7.877.5%KEV2014-10-22
CVE-2017-0222
Microsoft Internet Explorer Remote Code Execution Vulnerability
Microsoft Corporation8.829.6%KEV2017-05-12
CVE-2018-8174
Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability
Microsoft7.588.3%KEV2018-05-09
CVE-2013-3906
Microsoft Graphics Component Memory Corruption Vulnerability
-7.884.9%KEV2013-11-06
CVE-2019-0752
Microsoft Internet Explorer Type Confusion Vulnerability
Microsoft7.581.7%KEV2019-04-09
CVE-2014-1761
Microsoft Word Memory Corruption Vulnerability
-7.877.5%KEV2014-03-24
CVE-2015-1635
Microsoft HTTP.sys Remote Code Execution Vulnerability
-9.8100.0%KEV2015-04-14
CVE-2020-0796
Microsoft SMBv3 Remote Code Execution Vulnerability
Microsoft10.099.8%KEV2020-03-12
CVE-2017-0144
Microsoft SMBv1 Remote Code Execution Vulnerability
Microsoft Corporation8.899.2%KEV2017-03-17
CVE-2017-8464
Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability
Microsoft Corporation8.890.0%KEV2017-06-15
CVE-2017-0145
Microsoft SMBv1 Remote Code Execution Vulnerability
Microsoft Corporation8.889.8%KEV2017-03-17
CVE-2017-0262
Microsoft Office Remote Code Execution Vulnerability
Microsoft Corporation7.881.0%KEV2017-05-12
CVE-2021-36934
Windows Elevation of Privilege Vulnerability
Microsoft7.867.3%KEV2021-07-22
CVE-2017-0263
Microsoft Win32k Privilege Escalation Vulnerability
Microsoft Corporation7.810.0%KEV2017-05-12
CVE-2022-21882
Win32k Elevation of Privilege Vulnerability
Microsoft7.059.2%KEV2022-01-11
CVE-2014-1776
Microsoft Internet Explorer Memory Corruption Vulnerability
-9.882.7%KEV2014-04-27
CVE-2020-0787
Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability
Microsoft7.842.5%KEV2020-03-12
CVE-2018-8453
Microsoft Win32k Privilege Escalation Vulnerability
Microsoft7.870.0%KEV2018-10-10
CVE-2021-33766
Microsoft Exchange Server Information Disclosure Vulnerability
Microsoft7.398.2%KEV2021-07-14
CVE-2019-1458
Microsoft Win32k Privilege Escalation Vulnerability
Microsoft7.874.4%KEV2019-12-10
CVE-2013-3900
WinVerifyTrust Signature Validation Vulnerability
Microsoft5.544.6%KEV2013-12-11
CVE-2021-43890
Windows AppX Installer Spoofing Vulnerability
Microsoft7.111.3%KEV2021-12-15
CVE-2021-42321
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft8.891.7%KEV2021-11-10
CVE-2021-40449
Win32k Elevation of Privilege Vulnerability
Microsoft7.874.1%KEV2021-10-13
CVE-2021-42292
Microsoft Excel Security Feature Bypass Vulnerability
Microsoft7.843.0%KEV2021-11-10
CVE-2019-0708
Microsoft Remote Desktop Services Remote Code Execution Vulnerability
Microsoft9.8100.0%KEV2019-05-16
CVE-2021-34473
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft9.1100.0%KEV2021-07-14
CVE-2021-26855
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft9.1100.0%KEV2021-03-02
CVE-2021-34523
Microsoft Exchange Server Elevation of Privilege Vulnerability
Microsoft9.0100.0%KEV2021-07-14
CVE-2012-0158
Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability
-8.8100.0%KEV2012-04-10
CVE-2020-0688
Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability
Microsoft8.8100.0%KEV2020-02-11
CVE-2017-11882
Microsoft Office Memory Corruption Vulnerability
Microsoft Corporation7.899.9%KEV2017-11-15
CVE-2021-38647
Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
Microsoft9.899.9%KEV2021-09-15
CVE-2019-0604
Microsoft SharePoint Remote Code Execution Vulnerability
Microsoft9.899.9%KEV2019-03-06
CVE-2021-27065
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft7.899.9%KEV2021-03-02
CVE-2017-7269
Microsoft Windows Server Buffer Overflow Vulnerability
-9.899.8%KEV2017-03-27
CVE-2021-34527
Windows Print Spooler Remote Code Execution Vulnerability
Microsoft8.899.8%KEV2021-07-02
CVE-2021-31207
Microsoft Exchange Server Security Feature Bypass Vulnerability
Microsoft6.699.8%KEV2021-05-11
CVE-2017-0199
Microsoft Office and WordPad Remote Code Execution Vulnerability
Microsoft Corporation7.899.5%KEV2017-04-12
CVE-2020-1472
Netlogon Elevation of Privilege Vulnerability
Microsoft5.599.4%KEV2020-08-17
CVE-2020-0646
Microsoft .NET Framework Remote Code Execution Vulnerability
Microsoft9.899.2%KEV2020-01-14
CVE-2021-40444
Microsoft MSHTML Remote Code Execution Vulnerability
Microsoft8.897.5%KEV2021-09-15
CVE-2020-1350
Microsoft Windows DNS Server Remote Code Execution Vulnerability
Microsoft10.096.7%KEV2020-07-14
CVE-2015-1641
Microsoft Office Memory Corruption Vulnerability
-7.896.7%KEV2015-04-14
CVE-2021-26857
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft7.895.8%KEV2021-03-02
CVE-2018-0798
Microsoft Office Memory Corruption Vulnerability
Microsoft Corporation8.895.1%KEV2018-01-10
CVE-2020-1147
Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability
Microsoft7.894.0%KEV2020-07-14
CVE-2021-26858
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft7.893.7%KEV2021-03-02
CVE-2017-0143
Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability
Microsoft Corporation8.893.3%KEV2017-03-17
CVE-2018-0802
Microsoft Office Memory Corruption Vulnerability
Microsoft Corporation7.893.3%KEV2018-01-10
CVE-2020-0601
Microsoft Windows CryptoAPI Spoofing Vulnerability
Microsoft8.189.4%KEV2020-01-14
CVE-2017-8759
Microsoft .NET Framework Remote Code Execution Vulnerability
Microsoft Corporation7.888.7%KEV2017-09-13
CVE-2020-0674
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
Microsoft7.586.9%KEV2020-02-11
CVE-2021-1675
Windows Print Spooler Remote Code Execution Vulnerability
Microsoft7.885.3%KEV2021-06-08
CVE-2021-31955
Windows Kernel Information Disclosure Vulnerability
Microsoft5.581.1%KEV2021-06-08
CVE-2016-7255
Microsoft Win32k Privilege Escalation Vulnerability
-7.881.0%KEV2016-11-10
CVE-2021-26411
Internet Explorer Memory Corruption Vulnerability
Microsoft8.880.8%KEV2021-03-11
CVE-2021-1732
Windows Win32k Elevation of Privilege Vulnerability
Microsoft7.878.4%KEV2021-02-25
CVE-2019-1429
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
Microsoft7.577.3%KEV2019-11-12
CVE-2016-0185
Microsoft Windows Media Center Remote Code Execution Vulnerability
-7.869.8%KEV2016-05-11
CVE-2020-0938
Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability
Microsoft7.869.0%KEV2020-04-15
CVE-2021-36942
Windows LSA Spoofing Vulnerability
Microsoft7.566.0%KEV2021-08-12
CVE-2020-1020
Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability
Microsoft8.865.0%KEV2020-04-15
CVE-2014-1812
Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability
-8.864.9%KEV2014-05-14
CVE-2017-11774
Microsoft Office Outlook Security Feature Bypass Vulnerability
Microsoft Corporation7.859.6%KEV2017-10-13
CVE-2021-33742
Windows MSHTML Platform Remote Code Execution Vulnerability
Microsoft7.559.4%KEV2021-06-08
CVE-2020-1054
Win32k Elevation of Privilege Vulnerability
Microsoft7.054.2%KEV2020-05-21
CVE-2019-0541
Microsoft MSHTML Remote Code Execution Vulnerability
Microsoft8.853.2%KEV2019-01-08
CVE-2019-0808
Microsoft Win32k Privilege Escalation Vulnerability
Microsoft7.853.0%KEV2019-04-09
CVE-2019-1367
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
Microsoft7.552.4%KEV2019-09-23
CVE-2019-0803
Microsoft Win32k Privilege Escalation Vulnerability
Microsoft7.845.2%KEV2019-04-09
CVE-2016-3235
Microsoft Office OLE DLL Side Loading Vulnerability
-7.843.3%KEV2016-06-16
CVE-2021-34448
Scripting Engine Memory Corruption Vulnerability
Microsoft6.840.1%KEV2021-07-16
CVE-2021-1647
Microsoft Defender Remote Code Execution Vulnerability
Microsoft7.839.4%KEV2021-01-12
CVE-2020-1464
Windows Spoofing Vulnerability
Microsoft7.838.9%KEV2020-08-17
CVE-2020-17144
Microsoft Exchange Remote Code Execution Vulnerability
Microsoft8.436.5%KEV2020-12-09
CVE-2020-0968
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
Microsoft7.530.7%KEV2020-04-15
CVE-2018-8653
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
Microsoft7.529.6%KEV2018-12-20
CVE-2020-1380
Scripting Engine Memory Corruption Vulnerability
Microsoft7.824.2%KEV2020-08-17
CVE-2021-36948
Windows Update Medic Service Elevation of Privilege Vulnerability
Microsoft7.823.3%KEV2021-08-12
CVE-2021-31956
Windows NTFS Elevation of Privilege Vulnerability
Microsoft7.822.3%KEV2021-06-08
CVE-2019-1215
Microsoft Windows Privilege Escalation Vulnerability
Microsoft7.819.3%KEV2019-09-11
CVE-2020-0986
Microsoft Windows Kernel Privilege Escalation Vulnerability
Microsoft7.816.4%KEV2020-06-09
CVE-2021-38648
Open Management Infrastructure Elevation of Privilege Vulnerability
Microsoft7.811.4%KEV2021-09-15
CVE-2021-33771
Windows Kernel Elevation of Privilege Vulnerability
Microsoft7.810.2%KEV2021-07-14
CVE-2021-28310
Win32k Elevation of Privilege Vulnerability
Microsoft7.88.4%KEV2021-04-13
CVE-2020-0683
Microsoft Windows Installer Privilege Escalation Vulnerability
Microsoft7.87.6%KEV2020-02-11
CVE-2020-1040
Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability
Microsoft9.07.4%KEV2020-07-14
CVE-2021-33739
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Microsoft8.46.6%KEV2021-06-08
CVE-2021-27059
Microsoft Office Remote Code Execution Vulnerability
Microsoft7.66.1%KEV2021-03-11
CVE-2016-0167
Microsoft Win32k Privilege Escalation Vulnerability
-7.85.7%KEV2016-04-12
CVE-2021-27085
Internet Explorer Remote Code Execution Vulnerability
Microsoft8.85.4%KEV2021-03-11
CVE-2020-17087
Windows Kernel Local Elevation of Privilege Vulnerability
Microsoft7.85.4%KEV2020-11-11
CVE-2019-0863
Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability
Microsoft7.85.2%KEV2019-05-16
CVE-2021-31979
Windows Kernel Elevation of Privilege Vulnerability
Microsoft7.84.5%KEV2021-07-14
CVE-2019-0859
Microsoft Win32k Privilege Escalation Vulnerability
Microsoft7.84.2%KEV2019-04-09
CVE-2021-36955
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Microsoft7.84.1%KEV2021-09-15
CVE-2021-31199
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
Microsoft5.23.0%KEV2021-06-08
CVE-2021-38649
Open Management Infrastructure Elevation of Privilege Vulnerability
Microsoft7.02.9%KEV2021-09-15
CVE-2021-38645
Open Management Infrastructure Elevation of Privilege Vulnerability
Microsoft7.82.7%KEV2021-09-15
CVE-2020-0878
Microsoft Browser Memory Corruption Vulnerability
Microsoft4.22.7%KEV2020-09-11
CVE-2021-31201
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
Microsoft5.22.6%KEV2021-06-08
CVE-2019-0797
Microsoft Win32k Privilege Escalation Vulnerability
Microsoft7.81.9%KEV2019-04-09
CVE-2019-1214
Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability
Microsoft7.81.4%KEV2019-09-11
CVE-2026-20872
NTLM Hash Disclosure Spoofing Vulnerability
Microsoft6.520.1%2026-01-13
CVE-2026-20945
Microsoft SharePoint Server Spoofing Vulnerability
Microsoft4.619.1%2026-04-14
CVE-2026-20947
Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft8.818.8%2026-01-13
CVE-2026-20925
NTLM Hash Disclosure Spoofing Vulnerability
Microsoft6.518.2%2026-01-13
CVE-2026-21249
Windows NTLM Spoofing Vulnerability
Microsoft3.311.5%2026-02-10

Frequently Asked Questions

How many Microsoft vulnerabilities are actively exploited?→

389 Microsoft CVEs are in the CISA Known Exploited Vulnerabilities catalog as of 2026-10-09. The latest was added on 2026-09-25.

Which Microsoft vulnerabilities are used in ransomware attacks?→

CISA marks 117 Microsoft KEV entries as known to be used in ransomware campaigns, including CVE-2026-45659, CVE-2026-33825, CVE-2023-21529, CVE-2025-60710, CVE-2021-43226.

Which Microsoft products have the most exploited vulnerabilities?→
  • +Windows: 172 CVEs (172 in KEV)
  • +Internet Explorer: 36 CVEs (36 in KEV)
  • +Office: 29 CVEs (29 in KEV)
  • +Win32k: 25 CVEs (25 in KEV)
  • +Exchange Server: 17 CVEs (17 in KEV)
Where does Microsoft publish security advisories?→

Microsoft publishes security advisories at https://msrc.microsoft.com/update-guide. Check the vendor advisory for fixed versions and workarounds before applying updates.

Sources

CVE record data © The MITRE Corporation, used under the CVE Terms of Use. Vendor and product names for exploited CVEs follow the CISA Known Exploited Vulnerabilities catalog (CC0). Exploit prediction scores by FIRST EPSS (first.org/epss). This site is not affiliated with or endorsed by Microsoft, MITRE, CISA, or FIRST.