Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV
TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2026-73128 Microsoft Windows Command Injection Vulnerability Priority CRITICAL 97KEV 2026-10-13TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability Priority CRITICAL 97KEV 2026-09-25TI-2026-56567 Microsoft Windows Link Following Vulnerability Priority CRITICAL 93KEV 2026-09-08TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability Priority CRITICAL 93KEV 2026-09-08TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability Priority CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records
Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

366 records in Office Long Term Servicing Channel · all components

TI-2024-14173 CVE-2024-21413 · GHSA-9mp4-h7q5-2rgq

Microsoft Outlook Remote Code Execution Vulnerability

Priority CRITICAL 100KEV

Microsoft Outlook Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.9466 Published 2024-02-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5435.1001 CWE-20
TI-2023-09240 CVE-2023-23397 · GHSA-4778-q233-jmh5

Microsoft Outlook Elevation of Privilege Vulnerability

Priority CRITICAL 100KEV

Microsoft Outlook Elevation of Privilege Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.97159 Published 2023-03-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5387.1000 +1 CWE-20
TI-2024-25471 CVE-2024-38189 · GHSA-w8m3-f759-q5hc

Microsoft Project Remote Code Execution Vulnerability

Priority CRITICAL 97KEV

Microsoft Project Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.08194 Published 2024-08-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5461.1001 CWE-20
TI-2026-17368 CVE-2026-21514 · GHSA-cjj3-m869-748g

Microsoft Word Security Feature Bypass Vulnerability

Priority CRITICAL 93KEV

Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01587 Published 2026-02-10 Fixed in https://aka.ms/OfficeSecurityReleases, 16.106.26020821 CWE-807
TI-2026-17363 CVE-2026-21509 · GHSA-ch84-h92g-mw93

Microsoft Office Security Feature Bypass Vulnerability

Priority CRITICAL 93KEV

Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a security feature locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.70795 Published 2026-01-26 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5539.1001 +1 CWE-807
TI-2024-25505 CVE-2024-38226 · GHSA-rf2v-qj9w-x393

Microsoft Publisher Security Feature Bypass Vulnerability

Priority CRITICAL 91KEV

Microsoft Publisher Security Feature Bypass Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.02667 Published 2024-09-10 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5465.1001 CWE-693
TI-2023-08100 CVE-2023-21716 · GHSA-64mm-8wcm-jw5g

Microsoft Word Remote Code Execution Vulnerability

Priority CRITICAL 90

Microsoft Word Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.848 Published 2023-02-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.70.23021201 +4 CWE-190
TI-2023-18567 CVE-2023-36761 · GHSA-4w9h-xcp4-6v33

Microsoft Word Information Disclosure Vulnerability

Priority CRITICAL 88KEV

Microsoft Word Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.1957 Published 2023-09-12 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5413.1000 +1 CWE-20
TI-2024-19865 CVE-2024-30103 · GHSA-43r8-23m5-329f

Microsoft Outlook Remote Code Execution Vulnerability

Priority HIGH 73

Microsoft Outlook Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03417 Published 2024-06-11 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5452.1000 CWE-184
TI-2024-19866 CVE-2024-30104 · GHSA-fj5j-7xpr-x2f9

Microsoft Office Remote Code Execution Vulnerability

Priority HIGH 69

Microsoft Office Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01514 Published 2024-06-11 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5452.1000 CWE-59
TI-2023-18094 CVE-2023-36041 · GHSA-hw5x-3h55-qr8x

Microsoft Excel Remote Code Execution Vulnerability

Priority HIGH 69

Microsoft Excel Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.56727 Published 2023-11-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.79.23111019 +1 CWE-416
TI-2023-16325 CVE-2023-33148 · GHSA-cr38-7wwg-698r

Microsoft Office Elevation of Privilege Vulnerability

Priority HIGH 69

Microsoft Office Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0206 Published 2023-07-11 Fixed in 15.0.5571.1000, https://aka.ms/OfficeSecurityReleases CWE-59
TI-2023-15335 CVE-2023-32029 · GHSA-4cw2-xw5p-h7jf

Microsoft Excel Remote Code Execution Vulnerability

Priority HIGH 68

Microsoft Excel Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.53513 Published 2023-06-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.74.23061100 +3 CWE-125
TI-2023-16312 CVE-2023-33133 · GHSA-8m5x-q3mc-rqqg

Microsoft Excel Remote Code Execution Vulnerability

Priority HIGH 65

Microsoft Excel Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.44048 Published 2023-06-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.74.23061100 +3 CWE-122
TI-2024-25481 CVE-2024-38200 · GHSA-64w9-mqg5-cjpq

Microsoft Office Spoofing Vulnerability

Priority MEDIUM 61

Microsoft Office Spoofing Vulnerability

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.21652 Published 2024-08-08 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5461.1001 CWE-200
TI-2022-16184 CVE-2022-35742 · GHSA-3g3g-4368-2m5v

Microsoft Outlook Denial of Service Vulnerability

Priority MEDIUM 59

Microsoft Outlook Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.22271 Published 2023-06-01 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.4966.1000 +1
TI-2025-37796 CVE-2025-60724 · GHSA-763w-gp22-47jh

GDI+ Remote Code Execution Vulnerability

Priority MEDIUM 58

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0629 Published 2025-11-11 Fixed in 16.0.19426.20044, 16.103.25110922 +13 CWE-122
TI-2024-14138 CVE-2024-21378 · GHSA-qm4q-xhjm-67jr

Microsoft Outlook Remote Code Execution Vulnerability

Priority MEDIUM 53

Microsoft Outlook Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.10976 Published 2024-02-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5435.1000 CWE-94
TI-2023-18274 CVE-2023-36413 · GHSA-74c2-wj39-p5wc

Microsoft Office Security Feature Bypass Vulnerability

Priority MEDIUM 52

Microsoft Office Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.2997 Published 2023-11-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5422.1000
TI-2023-16310 CVE-2023-33131 · GHSA-pr4m-4844-x8pg

Microsoft Outlook Remote Code Execution Vulnerability

Priority MEDIUM 49

Microsoft Outlook Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.05718 Published 2023-06-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5400.1000 +1 CWE-94
TI-2023-16327 CVE-2023-33150 · GHSA-p4qm-vjjr-qmj2

Microsoft Office Security Feature Bypass Vulnerability

Priority MEDIUM 47

Microsoft Office Security Feature Bypass Vulnerability

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.02146 Published 2023-07-11 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5404.1000 +1 CWE-693
TI-2026-29139 CVE-2026-40364 · GHSA-mw8j-qvr9-2jpg

Microsoft Word Remote Code Execution Vulnerability

Priority MEDIUM 46

Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.04421 Published 2026-05-12 Fixed in https://aka.ms/OfficeSecurityReleases, 16.109.26051019 +1 CWE-122
TI-2026-17365 CVE-2026-21511 · GHSA-x27j-2rq3-h4mw

Microsoft Outlook Spoofing Vulnerability

Priority MEDIUM 46

Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03967 Published 2026-02-10 Fixed in https://aka.ms/OfficeSecurityReleases, 16.106.26020821 +3 CWE-502
TI-2024-25314 CVE-2024-38021 · GHSA-jmwq-hmf3-87q7

Microsoft Outlook Remote Code Execution Vulnerability

Priority MEDIUM 46

Microsoft Outlook Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03497 Published 2024-07-09 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5456.1000 CWE-20
TI-2023-17744 CVE-2023-35636 · GHSA-7m3r-9jw9-j2rw

Microsoft Outlook Information Disclosure Vulnerability

Priority MEDIUM 46

Microsoft Outlook Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.17559 Published 2023-12-12 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5426.1000 CWE-200
Load more
Open these records in search →