Microsoft

Records18046All Threatist records

Exploited (KEV)406In CISA KEV

CVSS critical2330CVSS 9.0–10.0

CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability CRITICAL 99KEV 2026-10-27 TI-2026-73128 Microsoft Windows Command Injection Vulnerability CRITICAL 97KEV 2026-10-13 TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability CRITICAL 97KEV 2026-09-25 TI-2026-56567 Microsoft Windows Link Following Vulnerability CRITICAL 93KEV 2026-09-08 TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability CRITICAL 93KEV 2026-09-08 TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records

Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

10 records in Dynamics Nav · all components

TI-2026-40350 CVE-2026-55944 · GHSA-rvmx-r962-429w

Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability

MEDIUM 52

Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01532 Published 2026-07-14 Fixed in 11.0.50704.0 CWE-502

TI-2020-00875 CVE-2020-0905 · GHSA-3xwp-cg99-2wx2

An remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka…

MEDIUM 48

An remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerability'.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.10838 Published 2020-03-12 No fix listed

TI-2020-00991 CVE-2020-1022 · GHSA-rq3c-gxfr-p3c8

A remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka…

MEDIUM 45

A remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerability'.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.06831 Published 2020-04-15 No fix listed

TI-2020-00987 CVE-2020-1018 · GHSA-4hf4-8q97-rmrh

Information disclosure in Microsoft Dynamics NAV 2016

MEDIUM 42

An information disclosure vulnerability exists when Microsoft Dynamics Business Central/NAV on-premise does not properly hide the value of a masked field when showing the records as a chart page.The attacker who successf…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.06311 Published 2020-04-15 No fix listed CWE-200

TI-2022-19648 CVE-2022-41127 · GHSA-wj3j-9c8f-9hvm

Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability

MEDIUM 40

Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.01711 Published 2022-12-13 Fixed in Build 52203, Build 30712 +19

TI-2020-13107 CVE-2020-17133 · GHSA-48m9-cmgj-94xc

Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability

LOW 35

Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03843 Published 2020-12-09 Fixed in publication

TI-2021-01440 CVE-2021-1724 · GHSA-8qq3-mrrg-37qg

Microsoft Dynamics Business Central Cross-site Scripting Vulnerability

LOW 30

Microsoft Dynamics Business Central Cross-site Scripting Vulnerability

CVSS 3.1MEDIUM 6.1 Adjacent network Low privileges User interaction EPSS 0.01307 Published 2021-02-25 Fixed in publication CWE-79

TI-2018-06281 CVE-2018-8651 · GHSA-642p-r2rr-6p6r

Cross-site scripting in Microsoft Dynamics NAV

LOW 27

A cross site scripting vulnerability exists when Microsoft Dynamics NAV does not properly sanitize a specially crafted web request to an affected Dynamics NAV server, aka "Microsoft Dynamics NAV Cross Site Scripting Vuln…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01463 Published 2018-12-12 No fix listed CWE-79

TI-2021-15023 CVE-2021-36946 · GHSA-2fq7-f2fp-mgxx

Microsoft Dynamics Business Central Cross-site Scripting Vulnerability

LOW 26

Microsoft Dynamics Business Central Cross-site Scripting Vulnerability

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01028 Published 2021-08-12 Fixed in 14.0.47540, 16.0.28457 +3 CWE-79

TI-2022-19603 CVE-2022-41066 · GHSA-33m5-rgm6-r8x3

Microsoft Dynamics Business Central Information Disclosure Vulnerability

LOW 23

Microsoft Dynamics Business Central Information Disclosure Vulnerability

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.01469 Published 2022-11-09 Fixed in 14.0.49339, 19.0.48446 +3

Open these records in search →

Critical	2330
High	10410
Medium	5035
Low	270
No CVSS	1