Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV
TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2026-73128 Microsoft Windows Command Injection Vulnerability Priority CRITICAL 97KEV 2026-10-13TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability Priority CRITICAL 97KEV 2026-09-25TI-2026-56567 Microsoft Windows Link Following Vulnerability Priority CRITICAL 93KEV 2026-09-08TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability Priority CRITICAL 93KEV 2026-09-08TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability Priority CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records
Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

10 records in Office For Mac · all components

TI-2018-05921 CVE-2018-8176 · GHSA-j39f-3w23-66c2

Improper input validation in Microsoft Office

Priority MEDIUM 58

A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly validate XML content, aka "Microsoft PowerPoint Remote Code Execution Vulnerability." This affects Microso…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.23221 Published 2018-05-23 No fix listed CWE-20
TI-2018-05907 CVE-2018-8162 · GHSA-8vgw-6fjh-vr4q

A remote code execution vulnerability exists in Microsoft Excel software when the…

Priority MEDIUM 55

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Off…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.24253 Published 2018-05-09 No fix listed
TI-2018-05893 CVE-2018-8148 · GHSA-5vcm-8396-wq7p

A remote code execution vulnerability exists in Microsoft Excel software when the…

Priority MEDIUM 55

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Off…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.24253 Published 2018-05-09 No fix listed
TI-2018-05892 CVE-2018-8147 · GHSA-497m-f8hg-qc7r

A remote code execution vulnerability exists in Microsoft Excel software when the…

Priority MEDIUM 55

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Off…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.24253 Published 2018-05-09 No fix listed
TI-2017-08773 CVE-2017-11825 · GHSA-f6q6-xhg5-qpp7

Memory corruption in Microsoft Office 2016, Microsoft Office 2016 for Mac

Priority MEDIUM 54

Microsoft Office 2016 Click-to-Run (C2R) and Microsoft Office 2016 for Mac allow an attacker to use a specially crafted file to perform actions in the security context of the current user, due to how Microsoft Office han…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.22899 Published 2017-10-13 No fix listed CWE-119
TI-2016-06246 CVE-2016-7257 · GHSA-p4w9-qqg4-c6m7

The GDI component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1…

Priority MEDIUM 49

The GDI component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office for Mac 2011, and Office 2016 for Mac allows remote attackers to obtain sensitive information from process memor…

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.22679 Published 2016-12-20 No fix listed CWE-200
TI-2018-06111 CVE-2018-8429 · GHSA-xqvw-jp2q-crr2

Information disclosure in Microsoft Excel Viewer

Priority LOW 39

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Excel Viewer, Micros…

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.12255 Published 2018-09-13 No fix listed CWE-200
TI-2018-06095 CVE-2018-8412 · GHSA-345c-xx24-53p2

Improper input validation in Microsoft Office

Priority LOW 37

An elevation of privilege vulnerability exists when the Microsoft AutoUpdate (MAU) application for Mac improperly validates updates before executing them, aka "Microsoft (MAU) Office Elevation of Privilege Vulnerability.…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.01351 Published 2018-08-15 No fix listed CWE-20
Open these records in search →