Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV
TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2026-73128 Microsoft Windows Command Injection Vulnerability Priority CRITICAL 97KEV 2026-10-13TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability Priority CRITICAL 97KEV 2026-09-25TI-2026-56567 Microsoft Windows Link Following Vulnerability Priority CRITICAL 93KEV 2026-09-08TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability Priority CRITICAL 93KEV 2026-09-08TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability Priority CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records
Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

9 records in Azure Machine Learning · all components

TI-2025-21694 CVE-2025-30390 · GHSA-pwgp-427f-j92g

Azure ML Compute Elevation of Privilege Vulnerability

Priority MEDIUM 45

Improper authorization in Azure allows an authorized attacker to elevate privileges over a network.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00981 Published 2025-04-30 No fix listed CWE-285
TI-2026-48367 CVE-2026-68791 · GHSA-vv7w-8542-rfx7

Azure Machine Learning Information Disclosure Vulnerability

Priority MEDIUM 44

Incorrect authorization in Azure Machine Learning allows an unauthorized attacker to disclose information over a network.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.0054 Published 2026-09-17 No fix listed CWE-863
TI-2025-31716 CVE-2025-49747 · GHSA-8mh7-q3x4-gpff

Azure Machine Learning Elevation of Privilege Vulnerability

Priority MEDIUM 44

Missing authorization in Azure Machine Learning allows an authorized attacker to elevate privileges over a network.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00812 Published 2025-07-18 No fix listed CWE-862
TI-2025-31715 CVE-2025-49746 · GHSA-7jrr-347f-8grx

Azure Machine Learning Elevation of Privilege Vulnerability

Priority MEDIUM 44

Improper authorization in Azure Machine Learning allows an authorized attacker to elevate privileges over a network.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00871 Published 2025-07-18 No fix listed CWE-285
TI-2026-24737 CVE-2026-32207 · GHSA-h553-38x2-qp6q

Azure Machine Learning Notebook Spoofing Vulnerability

Priority MEDIUM 41

Improper neutralization of input during web page generation ('cross-site scripting') in Azure Machine Learning allows an unauthorized attacker to perform spoofing over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00579 Published 2026-05-07 No fix listed CWE-79
TI-2025-30379 CVE-2025-47995 · GHSA-vp3h-jvmv-7rq4

Azure Machine Learning Elevation of Privilege Vulnerability

Priority MEDIUM 41

Weak authentication in Azure Machine Learning allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00784 Published 2025-07-18 No fix listed CWE-1390
TI-2026-26200 CVE-2026-33833 · GHSA-mq64-7vwv-8j4j

Azure Machine Learning Notebook Spoofing Vulnerability

Priority LOW 36

Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Machine Learning allows an unauthorized attacker to perform spoofing over a network.

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.00498 Published 2026-05-12 Fixed in 1.7.6 CWE-74
Open these records in search →