Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV
TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2026-73128 Microsoft Windows Command Injection Vulnerability Priority CRITICAL 97KEV 2026-10-13TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability Priority CRITICAL 97KEV 2026-09-25TI-2026-56567 Microsoft Windows Link Following Vulnerability Priority CRITICAL 93KEV 2026-09-08TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability Priority CRITICAL 93KEV 2026-09-08TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability Priority CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records
Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

14 records in Azure Monitor Agent · all components

TI-2025-38770 CVE-2025-62550 · GHSA-6jvc-gm78-f98r

Azure Monitor Agent Remote Code Execution Vulnerability

Priority MEDIUM 41

Out-of-bounds write in Azure Monitor Agent allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00743 Published 2025-12-09 Fixed in 1.35.9 CWE-131
TI-2026-24724 CVE-2026-32192 · GHSA-h54c-4c22-cqmp

Azure Monitor Agent Elevation of Privilege Vulnerability

Priority MEDIUM 40

Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01925 Published 2026-04-14 Fixed in 1.41.0 CWE-502
TI-2025-37033 CVE-2025-59494 · GHSA-qph3-ggc9-wvcf

Azure Monitor Agent Elevation of Privilege Vulnerability

Priority LOW 37

Improper access control in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00649 Published 2025-10-14 Fixed in 1.38.1.0 CWE-284
TI-2025-30374 CVE-2025-47988 · GHSA-fvm8-p9v4-fpvh

Azure Monitor Agent Remote Code Execution Vulnerability

Priority LOW 37

Improper control of generation of code ('code injection') in Azure Monitor Agent allows an unauthorized attacker to execute code over an adjacent network.

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.0104 Published 2025-07-08 Fixed in 1.35.1 CWE-94
TI-2026-34876 CVE-2026-47299 · GHSA-87m8-66q7-8p58

Azure Monitor Agent Elevation of Privilege Vulnerability

Priority LOW 36

Improper neutralization of special elements used in a command ('command injection') in Azure Monitor Agent allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01008 Published 2026-08-11 Fixed in 1.43 CWE-77
TI-2026-24736 CVE-2026-32204 · GHSA-8pm6-3cpv-xjv2

Azure Monitor Agent Elevation of Privilege Vulnerability

Priority LOW 36

External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00285 Published 2026-05-12 Fixed in 1.14.0 CWE-73
TI-2026-24704 CVE-2026-32168 · GHSA-2vp6-3rx5-75mf

Azure Monitor Agent Elevation of Privilege Vulnerability

Priority LOW 36

Improper input validation in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00307 Published 2026-04-14 Fixed in 1.35.9 CWE-20
TI-2025-37040 CVE-2025-59504 · GHSA-2575-3228-j966

Azure Monitor Agent Remote Code Execution Vulnerability

Priority LOW 34

Heap-based buffer overflow in Azure Monitor Agent allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.3 Local No auth No interaction EPSS 0.00351 Published 2025-11-11 Fixed in v1.37.1 CWE-122
TI-2025-36861 CVE-2025-59285 · GHSA-mqgx-rqhv-mg4p

Azure Monitor Agent Elevation of Privilege Vulnerability

Priority LOW 34

Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00798 Published 2025-10-14 Fixed in 1.36.3 CWE-502
Open these records in search →