Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV
TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2026-73128 Microsoft Windows Command Injection Vulnerability Priority CRITICAL 97KEV 2026-10-13TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability Priority CRITICAL 97KEV 2026-09-25TI-2026-56567 Microsoft Windows Link Following Vulnerability Priority CRITICAL 93KEV 2026-09-08TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability Priority CRITICAL 93KEV 2026-09-08TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability Priority CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records
Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

12 records in Forefront Unified Access Gateway · all components

TI-2018-09021 CVE-2018-12571 · GHSA-rcm8-cg2r-pcq3

uniquesig0/InternalSite/InitParams.aspx in Microsoft Forefront Unified Access Gateway…

Priority HIGH 66

uniquesig0/InternalSite/InitParams.aspx in Microsoft Forefront Unified Access Gateway 2010 allows remote attackers to trigger outbound DNS queries for arbitrary hosts via a comma-separated list of URLs in the orig_url pa…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.3069 Published 2018-07-05 No fix listed CWE-918
TI-2011-01739 CVE-2011-1969 · GHSA-3pj4-6qw8-r7x8

Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1…

Priority MEDIUM 57

Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 provides the MicrosoftClient.jar file containing a signed Java applet, which allows remote attackers to execute arbitrary code on cl…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.17309 Published 2011-10-12 No fix listed CWE-94
TI-2012-00144 CVE-2012-0147 · GHSA-5f59-cr5p-9xh9

Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 does not…

Priority MEDIUM 49

Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 does not properly configure the default web site, which allows remote attackers to obtain sensitive information via a crafted HTTPS request, aka…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.3562 Published 2012-04-10 No fix listed CWE-16
TI-2010-02620 CVE-2010-2732 · GHSA-7443-8957-rjqm

Open redirect vulnerability in the web interface in Microsoft Forefront Unified Access…

Priority MEDIUM 41

Open redirect vulnerability in the web interface in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to redirect users to arbitrary web sites and conduc…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.13417 Published 2010-11-10 No fix listed CWE-20
TI-2011-01778 CVE-2011-2012 · GHSA-9q92-w4h6-42xf

Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1…

Priority MEDIUM 40

Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 does not properly validate session cookies, which allows remote attackers to cause a denial of service (IIS outage) via unspecified…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.16588 Published 2011-10-12 No fix listed CWE-20
TI-2012-00143 CVE-2012-0146 · GHSA-3chf-r576-v3g8

Open redirect vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1…

Priority LOW 39

Open redirect vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL, a…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.10996 Published 2012-04-10 No fix listed CWE-20
TI-2010-02621 CVE-2010-2733 · GHSA-68w3-hcjc-pxw8

Cross-site scripting (XSS) vulnerability in the Web Monitor in Microsoft Forefront…

Priority LOW 35

Cross-site scripting (XSS) vulnerability in the Web Monitor in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary web script or HTML v…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.14233 Published 2010-11-10 No fix listed CWE-79
Open these records in search →