Microsoft

Records18046All Threatist records

Exploited (KEV)406In CISA KEV

CVSS critical2330CVSS 9.0–10.0

CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability CRITICAL 99KEV 2026-10-27 TI-2026-73128 Microsoft Windows Command Injection Vulnerability CRITICAL 97KEV 2026-10-13 TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability CRITICAL 97KEV 2026-09-25 TI-2026-56567 Microsoft Windows Link Following Vulnerability CRITICAL 93KEV 2026-09-08 TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability CRITICAL 93KEV 2026-09-08 TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records

Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

11 records in Azure Kubernetes Service · all components

TI-2023-23979 CVE-2023-44487 · GHSA-qppj-fm5r-hxr3

The HTTP/2 protocol allows a denial of service (server resource consumption) because…

CRITICAL 90KEV

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.99999 Published 2023-10-10 Partial fix · 1.28.0, 0.17.0 +9 CWE-400

TI-2023-13726 CVE-2023-29332 · GHSA-j9pr-jq8h-jrmm

Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

MEDIUM 53

Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02676 Published 2023-09-12 Fixed in VHD 202308 CWE-330

TI-2026-40538 CVE-2026-56163 · GHSA-2j44-cf99-2fgr

Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

MEDIUM 51

Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00901 Published 2026-07-24 No fix listed CWE-306

TI-2026-37250 CVE-2026-50516 · GHSA-pq49-h7qm-894f

Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

MEDIUM 50

Incorrect authorization in Microsoft Azure Kubernetes Service allows an authorized attacker to elevate privileges over a network.

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.00831 Published 2026-08-11 No fix listed CWE-306

TI-2026-25539 CVE-2026-33105 · GHSA-q5xq-rvph-wwgr

Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

MEDIUM 50

Improper authorization in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00733 Published 2026-04-02 No fix listed CWE-285

TI-2024-14163 CVE-2024-21403 · GHSA-88fq-wp8p-xcg5

Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability

MEDIUM 44

Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.01338 Published 2024-02-13 Fixed in 0.3.3 CWE-552

TI-2024-14136 CVE-2024-21376 · GHSA-8c3h-v556-h76p

Microsoft Azure Kubernetes Service Confidential Container Remote Code Execution Vulnerability

MEDIUM 43

Microsoft Azure Kubernetes Service Confidential Container Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.01172 Published 2024-02-13 Fixed in 0.3.3 CWE-284

TI-2026-24725 CVE-2026-32193 · GHSA-3rwf-9748-8cvv

Azure Kubernetes Service (AKS) Remote Code Execution Vulnerability

MEDIUM 40

Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Azure Kubernetes Service allows an authorized attacker to execute code locally.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00336 Published 2026-06-09 Fixed in v0.20260213.5 CWE-22

TI-2021-06404 CVE-2021-24109 · GHSA-pcvx-6475-h84c

Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

LOW 34

Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.8 Network High privileges User interaction EPSS 0.02174 Published 2021-02-25 No fix listed

TI-2021-08645 CVE-2021-27075 · GHSA-559g-xmx4-7w7v

Azure Virtual Machine Information Disclosure Vulnerability

LOW 33

Azure Virtual Machine Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.8 Adjacent network Low privileges No interaction EPSS 0.01367 Published 2021-03-11 Fixed in publication

TI-2021-01394 CVE-2021-1677 · GHSA-jr8j-fh83-j7h4

Azure Active Directory Pod Identity Spoofing Vulnerability

LOW 27

Azure Active Directory Pod Identity Spoofing Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.01152 Published 2021-01-12 Fixed in publication CWE-290

Open these records in search →