Microsoft

Records18046All Threatist records

Exploited (KEV)406In CISA KEV

CVSS critical2330CVSS 9.0–10.0

CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability CRITICAL 99KEV 2026-10-27 TI-2026-73128 Microsoft Windows Command Injection Vulnerability CRITICAL 97KEV 2026-10-13 TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability CRITICAL 97KEV 2026-09-25 TI-2026-56567 Microsoft Windows Link Following Vulnerability CRITICAL 93KEV 2026-09-08 TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability CRITICAL 93KEV 2026-09-08 TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records

Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

11 records in Azure Connected Machine Agent · all components

TI-2026-35143 CVE-2026-47632 · GHSA-hhxq-vhpq-pjf3

Azure Connected Machine Agent Elevation of Privilege Vulnerability

MEDIUM 41

Improper certificate validation in Azure Connected Machine Agent allows an unauthorized attacker to elevate privileges over an adjacent network.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00495 Published 2026-07-14 Fixed in 1.65 CWE-295

TI-2025-36382 CVE-2025-58724 · GHSA-h3w8-46xj-f555

Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability

LOW 37

Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00586 Published 2025-10-14 Fixed in 1.57 CWE-284

TI-2024-25446 CVE-2024-38162 · GHSA-924r-5j98-wj3c

Azure Connected Machine Agent Elevation of Privilege Vulnerability

LOW 37

Azure Connected Machine Agent Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00513 Published 2024-08-13 Fixed in 1.44 CWE-284

TI-2024-25385 CVE-2024-38098 · GHSA-ggjr-j3fm-frpm

Azure Connected Machine Agent Elevation of Privilege Vulnerability

LOW 37

Azure Connected Machine Agent Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00632 Published 2024-08-13 Fixed in 1.44 CWE-59

TI-2026-17136 CVE-2026-21224 · GHSA-9426-g97r-954q

Azure Connected Machine Agent Elevation of Privilege Vulnerability

LOW 36

Stack-based buffer overflow in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0032 Published 2026-01-13 Fixed in 1.60.03293.2680 CWE-121

TI-2025-34971 CVE-2025-55316 · GHSA-cxfc-2cj3-gw3w

Azure Connected Machine Agent Elevation of Privilege Vulnerability

LOW 36

External control of file name or path in Azure Arc allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00366 Published 2025-09-09 Fixed in 1.56 CWE-73

TI-2025-31662 CVE-2025-49692 · GHSA-c9mp-9pqq-q7c3

Azure Connected Machine Agent Elevation of Privilege Vulnerability

LOW 36

Improper access control in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00347 Published 2025-09-09 Fixed in 1.49 CWE-284

TI-2024-14089 CVE-2024-21329 · GHSA-3vmx-4pjf-8pwv

Azure Connected Machine Agent Elevation of Privilege Vulnerability

LOW 36

Azure Connected Machine Agent Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.01088 Published 2024-02-13 Fixed in 1.38 CWE-59

TI-2026-29155 CVE-2026-40381 · GHSA-mm5g-hh2r-m789

Azure Connected Machine Agent Elevation of Privilege Vulnerability

LOW 35

Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00219 Published 2026-05-12 Fixed in 1.63 CWE-284

TI-2025-30375 CVE-2025-47989 · GHSA-m3vx-vrp7-pf23

Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability

LOW 34

Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00564 Published 2025-10-14 Fixed in 1.57 CWE-284

TI-2023-17734 CVE-2023-35624 · GHSA-7hxh-jwwx-fv35

Azure Connected Machine Agent Elevation of Privilege Vulnerability

LOW 34

Azure Connected Machine Agent Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00875 Published 2023-12-12 Fixed in 1.37 CWE-59

Open these records in search →

Critical	2330
High	10410
Medium	5035
Low	270
No CVSS	1