Microsoft

Records18046All Threatist records

Exploited (KEV)406In CISA KEV

CVSS critical2330CVSS 9.0–10.0

CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability CRITICAL 99KEV 2026-10-27 TI-2026-73128 Microsoft Windows Command Injection Vulnerability CRITICAL 97KEV 2026-10-13 TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability CRITICAL 97KEV 2026-09-25 TI-2026-56567 Microsoft Windows Link Following Vulnerability CRITICAL 93KEV 2026-09-08 TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability CRITICAL 93KEV 2026-09-08 TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records

Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

29 records in Azure Sphere · all components

TI-2021-08650 CVE-2021-27080 · GHSA-rqr5-7m2q-c54f

Azure Sphere Unsigned Code Execution Vulnerability

MEDIUM 43

Azure Sphere Unsigned Code Execution Vulnerability

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.01278 Published 2021-03-11 No fix listed

TI-2020-18104 CVE-2020-35608 · GHSA-8j38-79vm-qxr4

A code execution vulnerability exists in the normal world’s signed code execution…

MEDIUM 41

A code execution vulnerability exists in the normal world’s signed code execution functionality of Microsoft Azure Sphere 20.07.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.04103 Published 2020-12-22 No fix listed CWE-74

TI-2020-12956 CVE-2020-16970 · GHSA-rrf3-xmpm-r2cg

Azure Sphere Unsigned Code Execution Vulnerability

MEDIUM 41

Azure Sphere Unsigned Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.01401 Published 2020-11-11 Fixed in publication CWE-415

TI-2020-12978 CVE-2020-16992 · GHSA-xqg2-m4f3-jfv5

Azure Sphere Elevation of Privilege Vulnerability

LOW 39

Azure Sphere Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.01419 Published 2020-11-11 Fixed in publication

TI-2020-12980 CVE-2020-16994 · GHSA-6p77-w4vc-3q5j

Azure Sphere Unsigned Code Execution Vulnerability

LOW 37

Azure Sphere Unsigned Code Execution Vulnerability

CVSS 3.1HIGH 7.3 Local No auth No interaction EPSS 0.01642 Published 2020-11-11 Fixed in publication

TI-2020-12973 CVE-2020-16987 · GHSA-9ghx-jx5p-8hcc

Azure Sphere Unsigned Code Execution Vulnerability

LOW 37

Azure Sphere Unsigned Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01275 Published 2020-11-11 Fixed in publication

TI-2020-12970 CVE-2020-16984 · GHSA-q538-v3qg-676x

Azure Sphere Unsigned Code Execution Vulnerability

LOW 37

Azure Sphere Unsigned Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01302 Published 2020-11-11 Fixed in publication

TI-2021-09575 CVE-2021-28460 · GHSA-5mhj-whv9-3653

Azure Sphere Unsigned Code Execution Vulnerability

LOW 36

Azure Sphere Unsigned Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Local No auth No interaction EPSS 0.00532 Published 2021-04-13 No fix listed

TI-2021-08246 CVE-2021-26429 · GHSA-w6hx-48fv-27wr

Azure Sphere Elevation of Privilege Vulnerability

LOW 35

Azure Sphere Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00601 Published 2021-08-12 Fixed in 21.07

TI-2020-12977 CVE-2020-16991 · GHSA-5wcg-gp2m-75xf

Azure Sphere Unsigned Code Execution Vulnerability

LOW 35

Azure Sphere Unsigned Code Execution Vulnerability

CVSS 3.1HIGH 7.3 Local No auth No interaction EPSS 0.01702 Published 2020-11-11 Fixed in publication

TI-2020-12979 CVE-2020-16993 · GHSA-rmqj-67rc-m54g

Azure Sphere Elevation of Privilege Vulnerability

LOW 32

Azure Sphere Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.0084 Published 2020-11-11 Fixed in publication CWE-269

TI-2020-12974 CVE-2020-16988 · GHSA-2r72-fwfv-2p48

Azure Sphere Elevation of Privilege Vulnerability

LOW 32

Azure Sphere Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.9 Physical High privileges No interaction EPSS 0.00725 Published 2020-11-11 Fixed in publication

TI-2021-18733 CVE-2021-42300 · GHSA-4h6w-q63m-qm8m

Azure Sphere Tampering Vulnerability

LOW 31

Azure Sphere Tampering Vulnerability

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00617 Published 2021-11-10 Fixed in 22.07

TI-2021-18193 CVE-2021-41374 · GHSA-385x-88c3-c379

Azure Sphere Information Disclosure Vulnerability

LOW 31

Azure Sphere Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.7 Local No auth No interaction EPSS 0.00737 Published 2021-11-10 Fixed in 22.07

TI-2020-12976 CVE-2020-16990 · GHSA-wf5v-g4f8-4jqh

Azure Sphere Information Disclosure Vulnerability

LOW 31

Azure Sphere Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.01464 Published 2020-11-11 Fixed in publication CWE-732

TI-2020-12971 CVE-2020-16985 · GHSA-x775-fvv7-8cfw

Azure Sphere Information Disclosure Vulnerability

LOW 31

Azure Sphere Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.01725 Published 2020-11-11 Fixed in publication CWE-908

TI-2020-12969 CVE-2020-16983 · GHSA-6rrx-7rpr-28q2

Azure Sphere Tampering Vulnerability

LOW 31

Azure Sphere Tampering Vulnerability

CVSS 3.1MEDIUM 6.2 Physical High privileges No interaction EPSS 0.00673 Published 2020-11-11 Fixed in publication

TI-2021-08644 CVE-2021-27074 · GHSA-8434-wqr6-v3mr

Azure Sphere Unsigned Code Execution Vulnerability

LOW 30

Azure Sphere Unsigned Code Execution Vulnerability

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.01307 Published 2021-03-11 No fix listed

TI-2020-12972 CVE-2020-16986 · GHSA-75hw-5m2m-hf8p

Azure Sphere Denial of Service Vulnerability

LOW 30

Azure Sphere Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.0127 Published 2020-11-11 Fixed in publication

TI-2020-12968 CVE-2020-16982 · GHSA-x5v4-47j6-mq5c

Azure Sphere Unsigned Code Execution Vulnerability

LOW 30

Azure Sphere Unsigned Code Execution Vulnerability

CVSS 3.1MEDIUM 6.2 Physical High privileges No interaction EPSS 0.01237 Published 2020-11-11 Fixed in publication

TI-2020-12975 CVE-2020-16989 · GHSA-9hgp-2jvm-r82h

Azure Sphere Elevation of Privilege Vulnerability

LOW 29

Azure Sphere Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.2 Physical High privileges No interaction EPSS 0.00711 Published 2020-11-11 Fixed in publication

TI-2020-12967 CVE-2020-16981 · GHSA-j7mg-79qf-rg92

Azure Sphere Elevation of Privilege Vulnerability

LOW 29

Azure Sphere Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.2 Physical High privileges No interaction EPSS 0.00689 Published 2020-11-11 Fixed in publication

TI-2021-08247 CVE-2021-26430 · GHSA-c556-742c-cv9q

Azure Sphere Denial of Service Vulnerability

LOW 28

Azure Sphere Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00732 Published 2021-08-12 Fixed in 21.07

TI-2020-18105 CVE-2020-35609 · GHSA-8xr7-5cxh-6x35

A denial-of-service vulnerability exists in the asynchronous ioctl functionality of…

LOW 28

A denial-of-service vulnerability exists in the asynchronous ioctl functionality of Microsoft Azure Sphere 20.05.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.01337 Published 2020-12-22 No fix listed CWE-835

TI-2022-16262 CVE-2022-35821 · GHSA-8f2g-vrjv-j68r

Azure Sphere Information Disclosure Vulnerability

LOW 23

Azure Sphere Information Disclosure Vulnerability

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.01055 Published 2022-08-09 Fixed in 22.07

Open these records in search →