Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV
TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2026-73128 Microsoft Windows Command Injection Vulnerability Priority CRITICAL 97KEV 2026-10-13TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability Priority CRITICAL 97KEV 2026-09-25TI-2026-56567 Microsoft Windows Link Following Vulnerability Priority CRITICAL 93KEV 2026-09-08TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability Priority CRITICAL 93KEV 2026-09-08TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability Priority CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records
Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

8 records in Bing · all components

TI-2025-15322 CVE-2025-21355 · GHSA-fx4j-9fqf-p9p2

Microsoft Bing Remote Code Execution Vulnerability

Priority MEDIUM 52

Missing Authentication for Critical Function in Microsoft Bing allows an unauthorized attacker to execute code over a network

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01693 Published 2025-02-19 No fix listed CWE-306
TI-2026-26190 CVE-2026-33819 · GHSA-97j9-4xhc-69qj

Microsoft Bing Remote Code Execution Vulnerability

Priority MEDIUM 50

Deserialization of untrusted data in Microsoft Bing allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.0084 Published 2026-04-23 No fix listed CWE-502
TI-2026-24719 CVE-2026-32186 · GHSA-2vw7-mrf4-v3mh

Microsoft Bing Elevation of Privilege Vulnerability

Priority MEDIUM 50

Server-side request forgery (ssrf) in Microsoft Bing allows an unauthorized attacker to elevate privileges over a network.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00718 Published 2026-04-03 No fix listed CWE-918
TI-2026-21114 CVE-2026-26120 · GHSA-5j3j-x96g-89v5

Microsoft Bing Tampering Vulnerability

Priority MEDIUM 40

Server-side request forgery (ssrf) in Microsoft Bing allows an unauthorized attacker to perform tampering over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00594 Published 2026-03-19 No fix listed CWE-918
TI-2020-01290 CVE-2020-1329 · GHSA-qgwj-38rm-jhmv

Authentication bypass by spoofing in Microsoft Bing Search for Android

Priority LOW 34

A spoofing vulnerability exists when Microsoft Bing Search for Android improperly handles specific HTML content, aka 'Microsoft Bing Search Spoofing Vulnerability'.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.02658 Published 2020-06-09 No fix listed CWE-290
TI-2026-33394 CVE-2026-45650 · GHSA-xf2j-6378-chgc

Microsoft Bing Search Spoofing Vulnerability

Priority LOW 21

User interface (ui) misrepresentation of critical information in Microsoft Bing allows an unauthorized attacker to perform spoofing over a network.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00619 Published 2026-06-09 Fixed in 33.3 CWE-451
Open these records in search →