Microsoft

Records18046All Threatist records

Exploited (KEV)406In CISA KEV

CVSS critical2330CVSS 9.0–10.0

CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability CRITICAL 99KEV 2026-10-27 TI-2026-73128 Microsoft Windows Command Injection Vulnerability CRITICAL 97KEV 2026-10-13 TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability CRITICAL 97KEV 2026-09-25 TI-2026-56567 Microsoft Windows Link Following Vulnerability CRITICAL 93KEV 2026-09-08 TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability CRITICAL 93KEV 2026-09-08 TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records

Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

130 records in .net · all components

TI-2026-79288 CVE-2026-111497 · GHSA-9v8h-qqgm-4m35

Out-of-bounds write in Google Brotli decoder

CRITICAL 99KEV

A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, dis…

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.82641 Published 2026-10-22 Partial fix · 1.0.10, 1.1.1 +2 CWE-252

TI-2023-23979 CVE-2023-44487 · GHSA-qppj-fm5r-hxr3

The HTTP/2 protocol allows a denial of service (server resource consumption) because…

CRITICAL 90KEV

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.99999 Published 2023-10-10 Partial fix · 1.28.0, 0.17.0 +9 CWE-400

TI-2023-19596 CVE-2023-38180 · GHSA-vmch-3w2x-vhgq

.NET and Visual Studio Denial of Service Vulnerability

CRITICAL 90KEV

.NET and Visual Studio Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.14127 Published 2023-08-08 Fixed in 6.0.21, 7.0.10 +4 CWE-400

TI-2023-19588 CVE-2023-38171 · GHSA-xh5m-8qqp-c5x7

Microsoft QUIC Denial of Service Vulnerability

HIGH 76

Microsoft QUIC Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.71046 Published 2023-10-10 Fixed in 17.2.21, 17.4.13 +8 CWE-476

TI-2024-14152 CVE-2024-21392 · GHSA-5fxj-whcv-crrc

.NET and Visual Studio Denial of Service Vulnerability

HIGH 72

.NET and Visual Studio Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0309 Published 2024-03-12 Fixed in 17.9.3, 7.3.12 +6 CWE-400

TI-2021-08380 CVE-2021-26701 · GHSA-ghhp-997w-qr28

.NET Core Remote Code Execution Vulnerability

HIGH 66

.NET Core Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.30096 Published 2021-02-25 Fixed in publication, 4.5.1 +2

TI-2023-18392 CVE-2023-36558 · GHSA-3fx3-85r4-8j3w

ASP.NET Core Security Feature Bypass Vulnerability

MEDIUM 63

ASP.NET Core Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.01077 Published 2023-11-14 Fixed in 6.0.25, 7.0.14 +5

TI-2023-15338 CVE-2023-32032 · GHSA-q85v-668x-6fjr

.NET and Visual Studio Elevation of Privilege Vulnerability

MEDIUM 62

.NET and Visual Studio Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.006 Published 2023-06-13 Fixed in 7.0.7, 17.2.16 +4 CWE-20

TI-2023-18100 CVE-2023-36049 · GHSA-c3hf-8vgx-72rh

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

MEDIUM 58

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0679 Published 2023-11-14 Fixed in 17.2.22, 17.4.14 +11 CWE-20

TI-2024-29136 CVE-2024-43498 · GHSA-v7vf-f5q6-m899

.NET and Visual Studio Remote Code Execution Vulnerability

MEDIUM 55

.NET and Visual Studio Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03591 Published 2024-11-12 Partial fix · 7.5.0, 17.8.16 +4 CWE-843

TI-2021-06407 CVE-2021-24112 · GHSA-rxg9-xrhp-64gj

.NET Core Remote Code Execution Vulnerability

MEDIUM 55

.NET Core Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03454 Published 2021-02-25 Fixed in publication, 4.7.2 +1 CWE-94

TI-2024-00056 CVE-2024-0057 · GHSA-68w7-72jg-6qpp

NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability

MEDIUM 54

NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02778 Published 2024-01-09 Fixed in 8.0.1, 7.0.15 +25 CWE-20

TI-2023-18292 CVE-2023-36435 · GHSA-fr44-546p-7xcp

Microsoft QUIC Denial of Service Vulnerability

MEDIUM 47

Microsoft QUIC Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05718 Published 2023-10-10 Fixed in 7.3.9, 10.0.20348.2031 +4 CWE-400

TI-2022-11690 CVE-2022-29145 · GHSA-fcg8-mg9g-6hc4

.NET and Visual Studio Denial of Service Vulnerability

MEDIUM 47

.NET and Visual Studio Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05538 Published 2022-05-10 Fixed in 6.0.5, 3.1.25 +5 CWE-400

TI-2022-11665 CVE-2022-29117 · GHSA-3rq8-h3gj-r5c6

.NET and Visual Studio Denial of Service Vulnerability

MEDIUM 47

.NET and Visual Studio Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05735 Published 2022-05-10 Fixed in 6.0.5, 3.1.25 +6 CWE-400

TI-2022-07392 CVE-2022-23267 · GHSA-485p-mrj5-8w2v

.NET and Visual Studio Denial of Service Vulnerability

MEDIUM 47

.NET and Visual Studio Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05703 Published 2022-05-10 Fixed in 3.1.25, 5.0.17 +9 CWE-400

TI-2022-17731 CVE-2022-38013 · GHSA-r8m2-4x37-6592

.NET Core and Visual Studio Denial of Service Vulnerability

MEDIUM 46

.NET Core and Visual Studio Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04307 Published 2022-09-13 Fixed in 17.3.5, 17.3.4 +6 CWE-400

TI-2026-20760 CVE-2026-25667 · GHSA-jc8w-j2q2-vwjx

ASP.NET Core Kestrel in Microsoft .NET 8.0 before 8.0.22 and .NET 9.0 before 9.0.11…

MEDIUM 45

ASP.NET Core Kestrel in Microsoft .NET 8.0 before 8.0.22 and .NET 9.0 before 9.0.11 allows a remote attacker to cause excessive CPU consumption by sending a crafted QUIC packet, because of an incorrect exit condition for…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03186 Published 2026-03-19 No fix listed CWE-400

TI-2025-15147 CVE-2025-21176 · GHSA-gjf6-3w4p-7xfh

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

MEDIUM 45

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02381 Published 2025-01-14 Partial fix · 8.0.12, 9.0.1 +12 CWE-126

TI-2022-08333 CVE-2022-24464 · GHSA-cw98-9j8w-wxv9

.NET and Visual Studio Denial of Service Vulnerability

MEDIUM 45

.NET and Visual Studio Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03551 Published 2022-03-09 Fixed in 6.0.3, 5.0.15 +5 CWE-400

TI-2022-06343 CVE-2022-21986 · GHSA-x459-p2rx-f8ff

.NET Denial of Service Vulnerability

MEDIUM 45

.NET Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03739 Published 2022-02-09 Fixed in 16.9.17, 16.11.10 +4

TI-2021-08240 CVE-2021-26423 · GHSA-rh58-r7jh-xhx3

.NET Core and Visual Studio Denial of Service Vulnerability

MEDIUM 45

.NET Core and Visual Studio Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03902 Published 2021-08-12 Fixed in 5.0.9, 2.1.30 +9

TI-2026-33337 CVE-2026-45591 · GHSA-f8h2-vmm9-qhj6

ASP.NET Core Denial of Service Vulnerability

MEDIUM 44

Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02481 Published 2026-06-09 Fixed in 10.0.9, 8.0.28 +2 CWE-400

TI-2024-29137 CVE-2024-43499 · GHSA-6x36-qxmj-rv4p

.NET and Visual Studio Denial of Service Vulnerability

MEDIUM 44

.NET and Visual Studio Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02595 Published 2024-11-12 Partial fix · 17.6.21, 17.10.9 +4 CWE-409

TI-2024-29127 CVE-2024-43485 · GHSA-8g4q-xg66-9fp4

.NET and Visual Studio Denial of Service Vulnerability

MEDIUM 44

.NET and Visual Studio Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03078 Published 2024-10-08 Partial fix · 6.0.35, 8.0.10 +9 CWE-407

Open these records in search →

Critical	2330
High	10410
Medium	5035
Low	270
No CVSS	1