Microsoft

Records18046All Threatist records

Exploited (KEV)406In CISA KEV

CVSS critical2330CVSS 9.0–10.0

CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability CRITICAL 99KEV 2026-10-27 TI-2026-73128 Microsoft Windows Command Injection Vulnerability CRITICAL 97KEV 2026-10-13 TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability CRITICAL 97KEV 2026-09-25 TI-2026-56567 Microsoft Windows Link Following Vulnerability CRITICAL 93KEV 2026-09-08 TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability CRITICAL 93KEV 2026-09-08 TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records

Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

936 records in 365 Apps · all components

TI-2024-14173 CVE-2024-21413 · GHSA-9mp4-h7q5-2rgq

Microsoft Outlook Remote Code Execution Vulnerability

CRITICAL 100KEV

Microsoft Outlook Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.9466 Published 2024-02-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5435.1001 CWE-20

TI-2023-09240 CVE-2023-23397 · GHSA-4778-q233-jmh5

Microsoft Outlook Elevation of Privilege Vulnerability

CRITICAL 100KEV

Microsoft Outlook Elevation of Privilege Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.97159 Published 2023-03-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5387.1000 +1 CWE-20

TI-2024-25471 CVE-2024-38189 · GHSA-w8m3-f759-q5hc

Microsoft Project Remote Code Execution Vulnerability

CRITICAL 97KEV

Microsoft Project Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.08194 Published 2024-08-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5461.1001 CWE-20

TI-2023-17652 CVE-2023-35311 · GHSA-3w2f-j9r3-9h89

Microsoft Outlook Security Feature Bypass Vulnerability

CRITICAL 97KEV

Microsoft Outlook Security Feature Bypass Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.15522 Published 2023-07-11 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5404.1000 +1 CWE-367

TI-2026-17368 CVE-2026-21514 · GHSA-cjj3-m869-748g

Microsoft Word Security Feature Bypass Vulnerability

CRITICAL 93KEV

Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01587 Published 2026-02-10 Fixed in https://aka.ms/OfficeSecurityReleases, 16.106.26020821 CWE-807

TI-2026-17363 CVE-2026-21509 · GHSA-ch84-h92g-mw93

Microsoft Office Security Feature Bypass Vulnerability

CRITICAL 93KEV

Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a security feature locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.70795 Published 2026-01-26 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5539.1001 +1 CWE-807

TI-2021-18725 CVE-2021-42292 · GHSA-jp63-fcqh-36rc

Microsoft Excel Security Feature Bypass Vulnerability

CRITICAL 93KEV

Microsoft Excel Security Feature Bypass Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.43005 Published 2021-11-10 Fixed in https://aka.ms/OfficeSecurityReleases, 15.0.5397.1001 +2

TI-2021-16223 CVE-2021-38646 · GHSA-846x-h43v-68x9

Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

CRITICAL 93KEV

Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.07987 Published 2021-09-15 Fixed in https://aka.ms/OfficeSecurityReleases, 5381.1000 +1

TI-2023-08099 CVE-2023-21715 · GHSA-9gf3-6wpf-hgpx

Microsoft Publisher Security Feature Bypass Vulnerability

CRITICAL 91KEV

Microsoft Publisher Security Feature Bypass Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.12011 Published 2023-02-14 Fixed in https://aka.ms/OfficeSecurityReleases CWE-863

TI-2023-18567 CVE-2023-36761 · GHSA-4w9h-xcp4-6v33

Microsoft Word Information Disclosure Vulnerability

CRITICAL 88KEV

Microsoft Word Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.1957 Published 2023-09-12 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5413.1000 +1 CWE-20

TI-2024-19865 CVE-2024-30103 · GHSA-43r8-23m5-329f

Microsoft Outlook Remote Code Execution Vulnerability

HIGH 73

Microsoft Outlook Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03417 Published 2024-06-11 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5452.1000 CWE-184

TI-2021-13528 CVE-2021-34501 · GHSA-q4qr-976g-hx68

Microsoft Excel Remote Code Execution Vulnerability

HIGH 70

Microsoft Excel Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.51673 Published 2021-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 15.0.5363.1000 +3

TI-2024-19866 CVE-2024-30104 · GHSA-fj5j-7xpr-x2f9

Microsoft Office Remote Code Execution Vulnerability

HIGH 69

Microsoft Office Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01514 Published 2024-06-11 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5452.1000 CWE-59

TI-2023-18094 CVE-2023-36041 · GHSA-hw5x-3h55-qr8x

Microsoft Excel Remote Code Execution Vulnerability

HIGH 69

Microsoft Excel Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.56727 Published 2023-11-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.79.23111019 +1 CWE-416

TI-2023-16325 CVE-2023-33148 · GHSA-cr38-7wwg-698r

Microsoft Office Elevation of Privilege Vulnerability

HIGH 69

Microsoft Office Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0206 Published 2023-07-11 Fixed in 15.0.5571.1000, https://aka.ms/OfficeSecurityReleases CWE-59

TI-2023-15335 CVE-2023-32029 · GHSA-4cw2-xw5p-h7jf

Microsoft Excel Remote Code Execution Vulnerability

HIGH 68

Microsoft Excel Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.53513 Published 2023-06-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.74.23061100 +3 CWE-125

TI-2021-13507 CVE-2021-34478 · GHSA-j59g-pjr7-6mxg

Microsoft Office Remote Code Execution Vulnerability

HIGH 66

Microsoft Office Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.51524 Published 2021-08-12 Fixed in https://aka.ms/OfficeSecurityReleases

TI-2023-16312 CVE-2023-33133 · GHSA-8m5x-q3mc-rqqg

Microsoft Excel Remote Code Execution Vulnerability

HIGH 65

Microsoft Excel Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.44048 Published 2023-06-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.74.23061100 +3 CWE-122

TI-2020-12935 CVE-2020-16947 · GHSA-5wr3-pfv7-cqv6

Microsoft Outlook Remote Code Execution Vulnerability

MEDIUM 63

<p>A remote code execution vulnerability exists in Microsoft Outlook software when the software fails to properly handle objects in memory.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.33658 Published 2020-10-16 Fixed in https://aka.ms/OfficeSecurityReleases, publication CWE-125

TI-2024-25481 CVE-2024-38200 · GHSA-64w9-mqg5-cjpq

Microsoft Office Spoofing Vulnerability

MEDIUM 61

Microsoft Office Spoofing Vulnerability

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.21652 Published 2024-08-08 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5461.1001 CWE-200

TI-2022-16184 CVE-2022-35742 · GHSA-3g3g-4368-2m5v

Microsoft Outlook Denial of Service Vulnerability

MEDIUM 59

Microsoft Outlook Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.22271 Published 2023-06-01 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.4966.1000 +1

TI-2020-01452 CVE-2020-1493 · GHSA-w39r-2vjm-hgjq

Microsoft Outlook Information Disclosure Vulnerability

MEDIUM 58

An information disclosure vulnerability exists when attaching files to Outlook messages.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.07296 Published 2020-08-17 Fixed in https://aka.ms/OfficeSecurityReleases, publication CWE-922

TI-2020-01189 CVE-2020-1226 · GHSA-7xpx-hg7c-46j4

Use after free in Microsoft 365 Apps for Enterprise for 32-bit Systems

MEDIUM 55

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.17489 Published 2020-06-09 No fix listed CWE-416

TI-2020-01188 CVE-2020-1225 · GHSA-m4j6-xp4h-xg9h

Use after free in Microsoft 365 Apps for Enterprise for 32-bit Systems

MEDIUM 55

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.17489 Published 2020-06-09 No fix listed CWE-416

TI-2020-01309 CVE-2020-1349 · GHSA-m68p-g9r9-q6xw

A remote code execution vulnerability exists in Microsoft Outlook software when it fails…

MEDIUM 54

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka 'Microsoft Outlook Remote Code Execution Vulnerability'.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.22578 Published 2020-07-14 No fix listed

Open these records in search →

Critical	2330
High	10410
Medium	5035
Low	270
No CVSS	1