Microsoft

Records18046All Threatist records

Exploited (KEV)406In CISA KEV

CVSS critical2330CVSS 9.0–10.0

CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability CRITICAL 99KEV 2026-10-27 TI-2026-73128 Microsoft Windows Command Injection Vulnerability CRITICAL 97KEV 2026-10-13 TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability CRITICAL 97KEV 2026-09-25 TI-2026-56567 Microsoft Windows Link Following Vulnerability CRITICAL 93KEV 2026-09-08 TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability CRITICAL 93KEV 2026-09-08 TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records

Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

13 records in Directx · all components

TI-2009-01458 CVE-2009-1537 · GHSA-qvw7-mg6g-qm9m

Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in…

CRITICAL 97KEV

Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 allows remote atta…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.5108 Published 2009-05-29 No fix listed CWE-158

TI-2008-01384 CVE-2008-1444 · GHSA-qqq9-9jcf-h8wp

Stack-based buffer overflow in Microsoft DirectX 7.0 and 8.1 on Windows 2000 SP4 allows…

HIGH 67

Stack-based buffer overflow in Microsoft DirectX 7.0 and 8.1 on Windows 2000 SP4 allows remote attackers to execute arbitrary code via a Synchronized Accessible Media Interchange (SAMI) file with crafted parameters for a…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.39483 Published 2008-06-12 No fix listed CWE-119

TI-2007-03780 CVE-2007-3901 · GHSA-3h62-xc6m-rwqv

Stack-based buffer overflow in the DirectShow Synchronized Accessible Media Interchange…

HIGH 67

Stack-based buffer overflow in the DirectShow Synchronized Accessible Media Interchange (SAMI) parser in quartz.dll for Microsoft DirectX 7.0 through 10.0 allows remote attackers to execute arbitrary code via a crafted S…

CVSS 2.0HIGH 8.5 Network Low privileges Interaction — EPSS 0.45873 Published 2007-12-12 No fix listed CWE-119

TI-2007-03775 CVE-2007-3895 · GHSA-5qg2-6cq9-52q8

Buffer overflow in Microsoft DirectShow in Microsoft DirectX 7.0 through 10.0 allows…

HIGH 66

Buffer overflow in Microsoft DirectShow in Microsoft DirectX 7.0 through 10.0 allows remote attackers to execute arbitrary code via a crafted (1) WAV or (2) AVI file.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.36234 Published 2007-12-12 No fix listed CWE-119

TI-2009-00078 CVE-2009-0084 · GHSA-r85w-v686-f8j6

Use-after-free vulnerability in DirectShow in Microsoft DirectX 8.1 and 9.0 allows remote…

MEDIUM 64

Use-after-free vulnerability in DirectShow in Microsoft DirectX 8.1 and 9.0 allows remote attackers to execute arbitrary code via an MJPEG file or video stream with a malformed Huffman table, which triggers an exception…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.31808 Published 2009-04-15 No fix listed CWE-94

TI-2008-00010 CVE-2008-0011 · GHSA-q2hg-79w4-xr3v

Microsoft DirectX 8.1 through 9.0c, and DirectX on Microsoft XP SP2 and SP3, Server 2003…

MEDIUM 64

Microsoft DirectX 8.1 through 9.0c, and DirectX on Microsoft XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008, does not properly perform MJPEG error checking, which allows remote attackers to…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.31589 Published 2008-06-12 No fix listed CWE-119

TI-2009-01460 CVE-2009-1539 · GHSA-fvc3-rj7w-m3hp

The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0…

MEDIUM 62

The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 does not properly validate unspecified size fie…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.25818 Published 2009-07-15 No fix listed CWE-94

TI-2009-01459 CVE-2009-1538 · GHSA-q3v5-344h-5c65

The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0…

MEDIUM 62

The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 performs updates to pointers without properly v…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.2682 Published 2009-07-15 No fix listed CWE-20

TI-2012-01344 CVE-2012-1537 · GHSA-6r5j-qhr5-7458

Heap-based buffer overflow in DirectPlay in DirectX 9.0 through 11.1 in Microsoft Windows…

MEDIUM 60

Heap-based buffer overflow in DirectPlay in DirectX 9.0 through 11.1 in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windo…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.22568 Published 2012-12-12 No fix listed CWE-119

TI-2010-01799 CVE-2010-1880 · GHSA-7q7f-5rv3-vf4f

Unspecified vulnerability in Quartz.dll for DirectShow on Microsoft Windows 2000 SP4, XP…

MEDIUM 59

Unspecified vulnerability in Quartz.dll for DirectShow on Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1, and Server 2008 allows remote attackers to execute arbitrary code via a media file with cr…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.21221 Published 2010-06-08 No fix listed CWE-94

TI-2010-01798 CVE-2010-1879 · GHSA-9vxq-x797-gr8g

Unspecified vulnerability in Quartz.dll for DirectShow; Windows Media Format Runtime 9…

MEDIUM 59

Unspecified vulnerability in Quartz.dll for DirectShow; Windows Media Format Runtime 9, 9.5, and 11; Media Encoder 9; and the Asycfilt.dll COM component allows remote attackers to execute arbitrary code via a media file…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.20284 Published 2010-06-08 No fix listed CWE-94

TI-2003-00326 CVE-2003-0346 · GHSA-wpf2-wvqg-3wf6

Multiple integer overflows in a Microsoft Windows DirectX MIDI library (QUARTZ.DLL) allow…

MEDIUM 57

Multiple integer overflows in a Microsoft Windows DirectX MIDI library (QUARTZ.DLL) allow remote attackers to execute arbitrary code via a MIDI (.mid) file with (1) large length for a Text or Copyright string, or (2) a l…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.32667 Published 2003-07-25 No fix listed

TI-2004-00173 CVE-2004-0202 · GHSA-f7gm-fj67-499w

IDirectPlay4 Application Programming Interface (API) of Microsoft DirectPlay 7.0a thru…

MEDIUM 45

IDirectPlay4 Application Programming Interface (API) of Microsoft DirectPlay 7.0a thru 9.0b, as used in Windows Server 2003 and earlier allows remote attackers to cause a denial of service (application crash) via a malfo…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.26301 Published 2004-06-11 No fix listed

Open these records in search →

Critical	2330
High	10410
Medium	5035
Low	270
No CVSS	1