Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV
TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2026-73128 Microsoft Windows Command Injection Vulnerability Priority CRITICAL 97KEV 2026-10-13TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability Priority CRITICAL 97KEV 2026-09-25TI-2026-56567 Microsoft Windows Link Following Vulnerability Priority CRITICAL 93KEV 2026-09-08TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability Priority CRITICAL 93KEV 2026-09-08TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability Priority CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records
Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

762 records in Edge · all components

TI-2024-07390 CVE-2024-7971 · GHSA-pq5w-h3jm-m95c

Type confusion in Google Chrome

Priority CRITICAL 100KEV

Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.21009 Published 2024-08-21 Fixed in 128.0.6613.84 CWE-843
TI-2022-03781 CVE-2022-4135 · GHSA-995f-9x5r-2rcj

Out-of-bounds write in Google Chrome

Priority CRITICAL 100KEV

Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.31864 Published 2022-11-25 Fixed in 107.0.5304.121, 19.1.8 CWE-787
TI-2015-00277 CVE-2015-0313 · GHSA-fg66-4vpm-36cx

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through…

Priority CRITICAL 100KEV

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unsp…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.95341 Published 2015-02-02 No fix listed CWE-416
TI-2023-04799 CVE-2023-5217 · GHSA-qqvq-6xgj-jw8g

Out-of-bounds write in Google Chrome

Priority CRITICAL 97KEV

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.49013 Published 2023-09-28 Partial fix · 117.0.5938.132, 1.13.1 +5 CWE-787
TI-2020-12621 CVE-2020-16009 · GHSA-m7mf-48hp-5qmr

Out-of-bounds write in Google Chrome

Priority CRITICAL 97KEV

Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.48293 Published 2020-11-03 Fixed in 86.0.4240.183, 86.0.241 CWE-787
TI-2016-06191 CVE-2016-7201 · GHSA-4f5g-j7wg-7w8j

The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to…

Priority CRITICAL 97KEV

The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.80004 Published 2016-11-10 Fixed in 1.2.2 CWE-843
TI-2016-06190 CVE-2016-7200 · GHSA-5whg-j5fv-xcm2

The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to…

Priority CRITICAL 97KEV

The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.82779 Published 2016-11-10 Fixed in 1.2.2 CWE-787
TI-2021-08228 CVE-2021-26411 · GHSA-c5rh-mmr6-c7ch

Internet Explorer Memory Corruption Vulnerability

Priority CRITICAL 95KEV

Internet Explorer Memory Corruption Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.81667 Published 2021-03-11 Fixed in 10.0.17134.2087, 6.0.6003.21070 CWE-416
TI-2017-00035 CVE-2017-0037 · GHSA-xpg5-jv85-754h

Type confusion in Microsoft Internet Browser

Priority CRITICAL 94KEV

Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuilder::HandleColumnBreakOnColumnSpanningElement function in mshtml.dll, which allows remote attackers to…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.80386 Published 2017-02-26 No fix listed CWE-843
TI-2020-00848 CVE-2020-0878 · GHSA-6j33-6rqj-fh2m

Microsoft Browser Memory Corruption Vulnerability

Priority CRITICAL 92KEV

<p>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.02696 Published 2020-09-11 Fixed in publication CWE-787
TI-2019-00333 CVE-2019-0539 · GHSA-3w4v-qfqc-3433

Out-of-bounds write in Microsoft Edge

Priority HIGH 74

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft…

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.82902 Published 2019-01-08 Fixed in 1.11.5 CWE-787
TI-2019-00359 CVE-2019-0567 · GHSA-6x4f-5v4h-r29j

Out-of-bounds write in Microsoft Edge

Priority HIGH 73

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft…

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.80126 Published 2019-01-08 Fixed in 1.11.5 CWE-787
TI-2018-00721 CVE-2018-0777 · GHSA-xxqm-xpq7-prvx

Out-of-bounds write in Microsoft Edge

Priority HIGH 73

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memor…

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.78434 Published 2018-01-04 No fix listed CWE-787
TI-2018-00720 CVE-2018-0776 · GHSA-qh4c-h6pf-q28g

Out-of-bounds write in Microsoft Edge

Priority HIGH 73

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memor…

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.78434 Published 2018-01-04 No fix listed CWE-787
TI-2018-00714 CVE-2018-0770 · GHSA-5qh9-fjw3-p55r

Out-of-bounds write in Microsoft Edge

Priority HIGH 73

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memor…

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.78434 Published 2018-01-04 No fix listed CWE-787
TI-2018-00713 CVE-2018-0769 · GHSA-h3c3-xcgq-6vr8

Out-of-bounds write in Microsoft Edge

Priority HIGH 73

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memor…

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.78954 Published 2018-01-04 No fix listed CWE-787
TI-2018-00703 CVE-2018-0758 · GHSA-c98h-p8mv-3hjc

Out-of-bounds write in Microsoft Edge

Priority HIGH 73

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memor…

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.80799 Published 2018-01-04 No fix listed CWE-787
TI-2017-00063 CVE-2017-0070 · GHSA-mxpv-7v22-cqc6

Use after free in Microsoft Browser

Priority HIGH 72

A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers.

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.76726 Published 2017-03-17 No fix listed CWE-416
TI-2017-06269 CVE-2017-8755 · GHSA-3hjj-hrcp-g8r3

Memory corruption in Microsoft Edge

Priority HIGH 71

Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the scripting engine handles objects i…

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.71272 Published 2017-09-13 No fix listed CWE-119
TI-2017-06254 CVE-2017-8740 · GHSA-rwpc-vv5g-q5p8

Memory corruption in Microsoft Edge

Priority HIGH 71

Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft Edge scripting engine handles objects in memory, aka "Scripti…

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.72171 Published 2017-09-13 No fix listed CWE-119
TI-2017-06245 CVE-2017-8729 · GHSA-j393-74x5-qp8x

Memory corruption in Microsoft Edge

Priority HIGH 71

Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft Edge scripting engine handles objects in memory, aka "Scripti…

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.72171 Published 2017-09-13 No fix listed CWE-119
TI-2017-06165 CVE-2017-8641 · GHSA-w885-jw3g-7qf8

Memory corruption in Microsoft Scripting Engine

Priority HIGH 71

Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execu…

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.71609 Published 2017-08-08 No fix listed CWE-119
TI-2017-06160 CVE-2017-8636 · GHSA-xvj3-97mf-29q5

Memory corruption in Microsoft Scripting Engine

Priority HIGH 71

Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execu…

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.72116 Published 2017-08-08 No fix listed CWE-119
Load more
Open these records in search →