Microsoft

Records18046All Threatist records

Exploited (KEV)406In CISA KEV

CVSS critical2330CVSS 9.0–10.0

CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability CRITICAL 99KEV 2026-10-27 TI-2026-73128 Microsoft Windows Command Injection Vulnerability CRITICAL 97KEV 2026-10-13 TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability CRITICAL 97KEV 2026-09-25 TI-2026-56567 Microsoft Windows Link Following Vulnerability CRITICAL 93KEV 2026-09-08 TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability CRITICAL 93KEV 2026-09-08 TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records

Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

11 records in Azure Stack Hub · all components

TI-2021-16224 CVE-2021-38647 · GHSA-rp2g-5hw2-q565

Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

CRITICAL 100KEV

Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99933 Published 2021-09-15 Fixed in DSC Agent versions: 2.71.1.25, 2.70.0.30 +8

TI-2021-16226 CVE-2021-38649 · GHSA-9rvc-mxjm-qh6v

Open Management Infrastructure Elevation of Privilege Vulnerability

CRITICAL 93KEV

Open Management Infrastructure Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.02887 Published 2021-09-15 Fixed in DSC Agent versions: 2.71.1.25, 2.70.0.30 +8

TI-2021-16225 CVE-2021-38648 · GHSA-p8gr-7qcg-86p9

Open Management Infrastructure Elevation of Privilege Vulnerability

CRITICAL 93KEV

Open Management Infrastructure Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.11424 Published 2021-09-15 Fixed in DSC Agent versions: 2.71.1.25, 2.70.0.30 +8

TI-2021-16222 CVE-2021-38645 · GHSA-727j-58h7-43f5

Open Management Infrastructure Elevation of Privilege Vulnerability

CRITICAL 93KEV

Open Management Infrastructure Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.02727 Published 2021-09-15 Fixed in DSC Agent versions: 2.71.1.25, 2.70.0.30 +8

TI-2024-25500 CVE-2024-38220 · GHSA-534f-hj89-3j8f

Azure Stack Hub Elevation of Privilege Vulnerability

MEDIUM 43

Azure Stack Hub Elevation of Privilege Vulnerability

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.01029 Published 2024-09-10 Fixed in 1.2406.1.15 CWE-284

TI-2024-25496 CVE-2024-38216 · GHSA-3w85-rr8r-762j

Azure Stack Hub Elevation of Privilege Vulnerability

MEDIUM 43

Azure Stack Hub Elevation of Privilege Vulnerability

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00923 Published 2024-09-10 Fixed in 1.2406.1.15 CWE-20

TI-2024-25395 CVE-2024-38108 · GHSA-rjjr-f65p-jqf6

Azure Stack Hub Spoofing Vulnerability

MEDIUM 42

Azure Stack Hub Spoofing Vulnerability

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.01207 Published 2024-08-13 Fixed in 1.2311.1.22 CWE-79

TI-2025-33688 CVE-2025-53793 · GHSA-jgjx-67gm-55wx

Azure Stack Hub Information Disclosure Vulnerability

LOW 36

Improper authentication in Azure Stack allows an unauthorized attacker to disclose information over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01392 Published 2025-08-12 Fixed in 1.2406.1.23, 1.2408.1.50 +1 CWE-22

TI-2022-11694 CVE-2022-29149

Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability

LOW 36

Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00951 Published 2022-06-15 Fixed in DSC Agent versions: 2.71.1.33, 3.0.0.7 +7

TI-2024-25482 CVE-2024-38201 · GHSA-v44f-qppf-2r26

Azure Stack Hub Elevation of Privilege Vulnerability

LOW 34

Azure Stack Hub Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local No auth User interaction EPSS 0.00647 Published 2024-08-13 Fixed in 1.2311.1.22 CWE-20

TI-2024-13490 CVE-2024-20679 · GHSA-cx6w-8xmj-8g7f

Azure Stack Hub Spoofing Vulnerability

LOW 34

Azure Stack Hub Spoofing Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01335 Published 2024-02-13 Fixed in 1.2311.1.22 CWE-79

Open these records in search →

Critical	2330
High	10410
Medium	5035
Low	270
No CVSS	1