Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV
TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2026-73128 Microsoft Windows Command Injection Vulnerability Priority CRITICAL 97KEV 2026-10-13TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability Priority CRITICAL 97KEV 2026-09-25TI-2026-56567 Microsoft Windows Link Following Vulnerability Priority CRITICAL 93KEV 2026-09-08TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability Priority CRITICAL 93KEV 2026-09-08TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability Priority CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records
Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

32 records in .net Core · all components

TI-2020-01112 CVE-2020-1147 · GHSA-g5vf-38cp-4px9

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and…

Priority CRITICAL 93KEV

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Vi…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.95804 Published 2020-07-14 Fixed in 2.1.20, 3.1.6
TI-2021-08380 CVE-2021-26701 · GHSA-ghhp-997w-qr28

.NET Core Remote Code Execution Vulnerability

Priority HIGH 66

.NET Core Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.30096 Published 2021-02-25 Fixed in publication, 4.5.1 +2
TI-2020-00583 CVE-2020-0606 · GHSA-r4mw-gxf7-vxr9

Improper input validation in Microsoft .NET Core

Priority MEDIUM 56

A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.18343 Published 2020-01-14 Fixed in 3.0.2, 3.1.1 +1 CWE-20
TI-2020-00582 CVE-2020-0605 · GHSA-f3wx-45hf-3hwx

Improper input validation in Microsoft .NET Core

Priority MEDIUM 56

A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.18399 Published 2020-01-14 No fix listed CWE-20
TI-2021-06407 CVE-2021-24112 · GHSA-rxg9-xrhp-64gj

.NET Core Remote Code Execution Vulnerability

Priority MEDIUM 55

.NET Core Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03454 Published 2021-02-25 Fixed in publication, 4.7.2 +1 CWE-94
TI-2019-00338 CVE-2019-0545 · GHSA-2xjx-v99w-gqf3

Information disclosure in Microsoft .NET Core

Priority MEDIUM 45

An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin Resource Sharing (CORS) configurations, aka ".NET Framework Information Disclosure Vulnerability." This a…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.09611 Published 2019-01-08 Fixed in 2.1.7, 2.2.1 CWE-200
TI-2018-00709 CVE-2018-0765 · GHSA-35hc-x2cw-2j4v

A denial of service vulnerability exists when .NET and .NET Core improperly process XML…

Priority MEDIUM 44

A denial of service vulnerability exists when .NET and .NET Core improperly process XML documents, aka ".NET and .NET Core Denial of Service Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Frame…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.08125 Published 2018-05-09 Fixed in 4.4.2 CWE-611
TI-2020-01075 CVE-2020-1108 · GHSA-3w5p-jhp5-c29q

.NET Core & .NET Framework Denial of Service Vulnerability

Priority MEDIUM 42

A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.06462 Published 2020-05-21 Fixed in publication, 2.1.18 +1
TI-2020-07165 CVE-2020-8927 · GHSA-5v8v-66v8-mwm7

Buffer overflow in Brotli library

Priority MEDIUM 41

A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.03217 Published 2020-09-15 Fixed in 1.0.9, 3.1.23 +3 CWE-130
TI-2019-00581 CVE-2019-0820 · GHSA-cmhx-cq75-c4mj

Uncontrolled resource consumption in Microsoft .NET Framework 4.5.2

Priority MEDIUM 41

A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka '.NET Framework and .NET Core Denial of Service Vulnerability'.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05719 Published 2019-05-16 Fixed in 4.3.1 CWE-400
TI-2018-00727 CVE-2018-0786 · GHSA-jc8g-xhw5-6x46

Improper certificate validation in Microsoft .NET Framework, .NET Core, and PowerShell…

Priority LOW 39

Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, .NET Core 1.0 and 2.0, and PowerShell Core 6.0.0 allow a security feature bypass vulnerability due to the way certificates are…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03687 Published 2018-01-10 Fixed in 5.2.4, 5.3.5 +6 CWE-295
Load more
Open these records in search →