Microsoft

Records18046All Threatist records

Exploited (KEV)406In CISA KEV

CVSS critical2330CVSS 9.0–10.0

CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability CRITICAL 99KEV 2026-10-27 TI-2026-73128 Microsoft Windows Command Injection Vulnerability CRITICAL 97KEV 2026-10-13 TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability CRITICAL 97KEV 2026-09-25 TI-2026-56567 Microsoft Windows Link Following Vulnerability CRITICAL 93KEV 2026-09-08 TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability CRITICAL 93KEV 2026-09-08 TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records

Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

20 records in Defender For Iot · all components

TI-2024-19234 CVE-2024-29053 · GHSA-8ppm-mwhc-2h38

Microsoft Defender for IoT Remote Code Execution Vulnerability

HIGH 73

Microsoft Defender for IoT Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03226 Published 2024-04-09 Fixed in 24.1.3 CWE-36

TI-2021-18746 CVE-2021-42313 · GHSA-rwv9-gxrh-r43w

Microsoft Defender for IoT Remote Code Execution Vulnerability

MEDIUM 50

Microsoft Defender for IoT Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.04075 Published 2021-12-15 Fixed in 10.5.2 CWE-89

TI-2021-18744 CVE-2021-42311 · GHSA-p693-2vfq-fpvw

Microsoft Defender for IoT Remote Code Execution Vulnerability

MEDIUM 50

Microsoft Defender for IoT Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.04423 Published 2021-12-15 Fixed in 10.5.2 CWE-89

TI-2021-19674 CVE-2021-43882 · GHSA-vf2w-cq9r-cwvw

Microsoft Defender for IoT Remote Code Execution Vulnerability

MEDIUM 47

Microsoft Defender for IoT Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02578 Published 2021-12-15 Fixed in 10.5.3 CWE-295

TI-2024-14083 CVE-2024-21323 · GHSA-xx2r-2w7h-qwpc

Microsoft Defender for IoT Remote Code Execution Vulnerability

MEDIUM 46

Microsoft Defender for IoT Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03226 Published 2024-04-09 Fixed in 24.1.3 CWE-36

TI-2021-18743 CVE-2021-42310 · GHSA-gjpx-9j96-m8gx

Microsoft Defender for IoT Remote Code Execution Vulnerability

MEDIUM 46

Microsoft Defender for IoT Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02122 Published 2021-12-15 Fixed in 10.5.2

TI-2024-25378 CVE-2024-38089 · GHSA-7889-fq2w-fxfm

Microsoft Defender for IoT Elevation of Privilege Vulnerability

MEDIUM 45

Microsoft Defender for IoT Elevation of Privilege Vulnerability

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01164 Published 2024-07-09 Fixed in 24.1.4 CWE-269

TI-2021-19676 CVE-2021-43888 · GHSA-9fhq-8w23-f2mg

Microsoft Defender for IoT Information Disclosure Vulnerability

MEDIUM 45

Microsoft Defender for IoT Information Disclosure Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03193 Published 2021-12-15 Fixed in 10.5.2

TI-2021-18747 CVE-2021-42314 · GHSA-2p7j-4wf3-79hx

Microsoft Defender for IoT Remote Code Execution Vulnerability

MEDIUM 44

Microsoft Defender for IoT Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02296 Published 2021-12-15 Fixed in 10.5.2

TI-2022-07390 CVE-2022-23265 · GHSA-8pmq-fh43-m3pq

Microsoft Defender for IoT Remote Code Execution Vulnerability

MEDIUM 43

Microsoft Defender for IoT Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02853 Published 2022-03-09 Fixed in 22.1.2

TI-2021-18748 CVE-2021-42315 · GHSA-cgfp-rmx2-46w3

Microsoft Defender for IoT Remote Code Execution Vulnerability

MEDIUM 43

Microsoft Defender for IoT Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02315 Published 2021-12-15 Fixed in 10.5.2

TI-2021-18185 CVE-2021-41365 · GHSA-5x43-cm8r-v5wr

Microsoft Defender for IoT Remote Code Execution Vulnerability

MEDIUM 43

Microsoft Defender for IoT Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02866 Published 2021-12-15 Fixed in 10.5.2 CWE-89

TI-2024-14082 CVE-2024-21322 · GHSA-9qx9-xj3x-vh99

Microsoft Defender for IoT Remote Code Execution Vulnerability

LOW 39

Microsoft Defender for IoT Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.03103 Published 2024-04-09 Fixed in 24.1.3 CWE-77

TI-2024-19236 CVE-2024-29055 · GHSA-g2p3-5v58-cqcv

Microsoft Defender for IoT Elevation of Privilege Vulnerability

LOW 38

Microsoft Defender for IoT Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0231 Published 2024-04-09 Fixed in 24.1.3 CWE-284

TI-2024-19235 CVE-2024-29054 · GHSA-6mr7-mqw3-p8r7

Microsoft Defender for IoT Elevation of Privilege Vulnerability

LOW 38

Microsoft Defender for IoT Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02291 Published 2024-04-09 Fixed in 24.1.3 CWE-284

TI-2024-14084 CVE-2024-21324 · GHSA-qc8v-ph93-7gqw

Microsoft Defender for IoT Elevation of Privilege Vulnerability

LOW 38

Microsoft Defender for IoT Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0231 Published 2024-04-09 Fixed in 24.1.3 CWE-269

TI-2023-09225 CVE-2023-23379 · GHSA-hqvv-x2xp-chxw

Microsoft Defender for IoT Elevation of Privilege Vulnerability

LOW 36

Microsoft Defender for IoT Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00449 Published 2023-02-14 Fixed in 22.3.6 CWE-23

TI-2022-07391 CVE-2022-23266 · GHSA-8r95-ggqq-rp99

Microsoft Defender for IoT Elevation of Privilege Vulnerability

LOW 36

Microsoft Defender for IoT Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01088 Published 2022-03-09 Fixed in 22.1.2

TI-2021-19677 CVE-2021-43889 · GHSA-rpx5-2jw7-fmx4

Microsoft Defender for IoT Remote Code Execution Vulnerability

LOW 36

Microsoft Defender for IoT Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02354 Published 2021-12-15 Fixed in 10.5.2

TI-2021-18745 CVE-2021-42312 · GHSA-xg35-g9ff-2v9w

Microsoft Defender for IoT Elevation of Privilege Vulnerability

LOW 35

Microsoft Defender for IoT Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00561 Published 2021-12-15 Fixed in 10.5.2

Open these records in search →

Critical	2330
High	10410
Medium	5035
Low	270
No CVSS	1