Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV
TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2026-73128 Microsoft Windows Command Injection Vulnerability Priority CRITICAL 97KEV 2026-10-13TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability Priority CRITICAL 97KEV 2026-09-25TI-2026-56567 Microsoft Windows Link Following Vulnerability Priority CRITICAL 93KEV 2026-09-08TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability Priority CRITICAL 93KEV 2026-09-08TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability Priority CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records
Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

8 records in Azure Logic Apps · all components

TI-2026-49118 CVE-2026-70200 · GHSA-j33w-4pg5-pvc7

Azure Logic Apps Elevation of Privilege Vulnerability

Priority MEDIUM 50

Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.006 Published 2026-09-17 No fix listed CWE-22
TI-2026-57735 CVE-2026-83944 · GHSA-4xw4-cmxh-ph56

Azure Logic Apps Elevation of Privilege Vulnerability

Priority MEDIUM 49

Improper access control in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00442 Published 2026-09-17 No fix listed CWE-284
TI-2026-17138 CVE-2026-21227 · GHSA-3xjj-vfrx-ch8r

Azure Logic Apps Elevation of Privilege Vulnerability

Priority MEDIUM 49

Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00573 Published 2026-01-22 No fix listed CWE-22
TI-2026-48729 CVE-2026-69400 · GHSA-66h9-689p-45mg

Azure Logic Apps Elevation of Privilege Vulnerability

Priority MEDIUM 45

Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00939 Published 2026-08-20 No fix listed CWE-22
TI-2026-31032 CVE-2026-42823 · GHSA-73g5-7fvx-cpr5

Azure Logic Apps Elevation of Privilege Vulnerability

Priority MEDIUM 44

Improper access control in Azure Logic Apps allows an authorized attacker to elevate privileges over a network.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00601 Published 2026-05-12 No fix listed CWE-284
TI-2026-40536 CVE-2026-56161 · GHSA-jc4p-jq54-67w6

Azure Logic Apps Information Disclosure Vulnerability

Priority MEDIUM 42

Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network.

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.00689 Published 2026-08-06 No fix listed CWE-284
TI-2026-24707 CVE-2026-32171 · GHSA-jw55-vf6x-jr62

Azure Logic Apps Elevation of Privilege Vulnerability

Priority MEDIUM 40

Insufficiently protected credentials in Azure Logic Apps allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0044 Published 2026-04-14 No fix listed CWE-522
Open these records in search →