Microsoft

Records18046All Threatist records

Exploited (KEV)406In CISA KEV

CVSS critical2330CVSS 9.0–10.0

CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability CRITICAL 99KEV 2026-10-27 TI-2026-73128 Microsoft Windows Command Injection Vulnerability CRITICAL 97KEV 2026-10-13 TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability CRITICAL 97KEV 2026-09-25 TI-2026-56567 Microsoft Windows Link Following Vulnerability CRITICAL 93KEV 2026-09-08 TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability CRITICAL 93KEV 2026-09-08 TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records

Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

9 records in Dynamics Gp · all components

TI-2006-05082 CVE-2006-5266 · GHSA-rxxg-c666-q7v4

Multiple buffer overflows in Microsoft Dynamics GP (formerly Great Plains) 9.0 and…

MEDIUM 49

Multiple buffer overflows in Microsoft Dynamics GP (formerly Great Plains) 9.0 and earlier allow remote attackers to execute arbitrary code via (1) a crafted Distributed Process Manager (DPM) message to the (a) DPM compo…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.15695 Published 2008-06-30 No fix listed CWE-119

TI-2022-07396 CVE-2022-23271 · GHSA-c7h9-7hmq-v389

Microsoft Dynamics GP Elevation Of Privilege Vulnerability

MEDIUM 45

Microsoft Dynamics GP Elevation Of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03755 Published 2022-02-09 Fixed in 18.4.1434

TI-2022-07397 CVE-2022-23272 · GHSA-6929-2rrj-qg4c

Microsoft Dynamics GP Elevation Of Privilege Vulnerability

MEDIUM 43

Microsoft Dynamics GP Elevation Of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0255 Published 2022-02-09 Fixed in 18.4.1434

TI-2022-07399 CVE-2022-23274 · GHSA-26cp-j78f-2568

Microsoft Dynamics GP Remote Code Execution Vulnerability

MEDIUM 42

Microsoft Dynamics GP Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02145 Published 2022-02-09 Fixed in 18.4.1434

TI-2022-07398 CVE-2022-23273 · GHSA-rj3q-w987-rh94

Microsoft Dynamics GP Elevation Of Privilege Vulnerability

MEDIUM 42

Microsoft Dynamics GP Elevation Of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.022 Published 2022-02-09 Fixed in 18.4.1434

TI-2006-05081 CVE-2006-5265 · GHSA-gr95-2xhj-gvc5

Unspecified vulnerability in Microsoft Dynamics GP (formerly Great Plains) 9.0 and…

LOW 35

Unspecified vulnerability in Microsoft Dynamics GP (formerly Great Plains) 9.0 and earlier allows remote attackers to cause a denial of service (crash) via an invalid magic number in a Distributed Process Server (DPS) me…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.10419 Published 2008-06-30 No fix listed CWE-20

TI-2010-01927 CVE-2010-2011 · GHSA-j9fh-4mc8-rjqx

Microsoft Dynamics GP uses a substitution cipher to encrypt the system password field and…

LOW 32

Microsoft Dynamics GP uses a substitution cipher to encrypt the system password field and unspecified other fields, which makes it easier for remote authenticated users to obtain sensitive information by decrypting a fie…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.10741 Published 2010-05-21 No fix listed CWE-310

TI-2010-01995 CVE-2010-2083 · GHSA-jfcm-mvvp-g4g7

Microsoft Dynamics GP has a default value of ACCESS for the system password, which might…

LOW 30

Microsoft Dynamics GP has a default value of ACCESS for the system password, which might make it easier for remote authenticated users to bypass intended access restrictions via unspecified vectors.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.08494 Published 2010-05-26 No fix listed CWE-255

TI-2022-07394 CVE-2022-23269 · GHSA-4m96-r76q-68qp

Microsoft Dynamics GP Spoofing Vulnerability

LOW 27

Microsoft Dynamics GP Spoofing Vulnerability

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01164 Published 2022-02-09 Fixed in 18.4.1434

Open these records in search →

Critical	2330
High	10410
Medium	5035
Low	270
No CVSS	1