Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV
TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2026-73128 Microsoft Windows Command Injection Vulnerability Priority CRITICAL 97KEV 2026-10-13TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability Priority CRITICAL 97KEV 2026-09-25TI-2026-56567 Microsoft Windows Link Following Vulnerability Priority CRITICAL 93KEV 2026-09-08TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability Priority CRITICAL 93KEV 2026-09-08TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability Priority CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records
Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

10 records in Azure Hdinsight · all components

TI-2026-56164 CVE-2026-81349 · GHSA-3mwh-c6rp-4w29

Azure HDInsight Ambari Elevation of Privilege Vulnerability

Priority LOW 36

Improper neutralization of special elements used in an os command ('os command injection') in Azure HDInsights allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01008 Published 2026-09-08 Fixed in 2606012120 CWE-78
TI-2023-09251 CVE-2023-23408 · GHSA-6h37-c8j2-gj5p

Azure Apache Ambari Spoofing Vulnerability

Priority LOW 28

Azure Apache Ambari Spoofing Vulnerability

CVSS 3.1MEDIUM 4.5 Network High privileges User interaction EPSS 0.04047 Published 2023-03-14 Fixed in 2302250400 CWE-79
TI-2026-17382 CVE-2026-21529 · GHSA-8754-7pfj-x7mr

Azure HDInsight Spoofing Vulnerability

Priority LOW 27

Improper neutralization of input during web page generation ('cross-site scripting') in Azure HDInsights allows an authorized attacker to perform spoofing over a network.

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00654 Published 2026-02-10 Fixed in 5.1 CWE-79
TI-2023-17728 CVE-2023-35393 · GHSA-gfcr-pv59-q6p8

Azure Apache Hive Spoofing Vulnerability

Priority LOW 24

Azure Apache Hive Spoofing Vulnerability

CVSS 3.1MEDIUM 4.5 Network High privileges User interaction EPSS 0.01394 Published 2023-08-08 Fixed in 2307201242 CWE-79
TI-2023-19603 CVE-2023-38188 · GHSA-h4f6-pvrq-rcr4

Azure Apache Hadoop Spoofing Vulnerability

Priority LOW 23

Azure Apache Hadoop Spoofing Vulnerability

CVSS 3.1MEDIUM 4.5 Network High privileges User interaction EPSS 0.01013 Published 2023-08-08 Fixed in 2307201242 CWE-79
TI-2023-18667 CVE-2023-36881 · GHSA-95h7-qcfp-8mx9

Azure Apache Ambari Spoofing Vulnerability

Priority LOW 23

Azure Apache Ambari Spoofing Vulnerability

CVSS 3.1MEDIUM 4.5 Network High privileges User interaction EPSS 0.01033 Published 2023-08-08 Fixed in 2307201242 CWE-79
TI-2023-18664 CVE-2023-36877 · GHSA-8c62-6wcm-89qf

Azure Apache Oozie Spoofing Vulnerability

Priority LOW 23

Azure Apache Oozie Spoofing Vulnerability

CVSS 3.1MEDIUM 4.5 Network High privileges User interaction EPSS 0.01033 Published 2023-08-08 Fixed in 2307201242 CWE-79
Open these records in search →