Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV
TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2026-73128 Microsoft Windows Command Injection Vulnerability Priority CRITICAL 97KEV 2026-10-13TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability Priority CRITICAL 97KEV 2026-09-25TI-2026-56567 Microsoft Windows Link Following Vulnerability Priority CRITICAL 93KEV 2026-09-08TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability Priority CRITICAL 93KEV 2026-09-08TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability Priority CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records
Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

11 records in Pc Manager · all components

TI-2025-33689 CVE-2025-53795 · GHSA-w8wj-2r94-3qv9

Microsoft PC Manager Elevation of Privilege Vulnerability

Priority MEDIUM 50

Improper authorization in Microsoft PC Manager allows an unauthorized attacker to elevate privileges over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00612 Published 2025-08-21 No fix listed CWE-285
TI-2026-37177 CVE-2026-50438 · GHSA-mx3q-8ph8-rf8h

Microsoft PC Manager Elevation of Privilege Vulnerability

Priority MEDIUM 40

Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.0037 Published 2026-07-14 Fixed in 3.22.1.0 CWE-59
TI-2025-21351 CVE-2025-29975 · GHSA-693h-v7jp-h34f

Microsoft PC Manager Elevation of Privilege Vulnerability

Priority LOW 37

Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00533 Published 2025-05-13 Fixed in 3.16.1.0 CWE-59
TI-2026-42205 CVE-2026-58636 · GHSA-cwx9-j747-4x45

Microsoft PC Manager Elevation of Privilege Vulnerability

Priority LOW 36

Improper link resolution before file access ('link following') in Window PC Manager allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0037 Published 2026-07-14 Fixed in 3.21.6.0 CWE-59
TI-2026-37248 CVE-2026-50512 · GHSA-c6mx-5853-2f2j

Microsoft PC Manager Elevation of Privilege Vulnerability

Priority LOW 36

Missing authentication for critical function in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00257 Published 2026-06-09 Fixed in 3.21.6.0 CWE-306
TI-2026-37247 CVE-2026-50511 · GHSA-5grc-66qq-8mgg

Microsoft PC Manager Elevation of Privilege Vulnerability

Priority LOW 36

Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00329 Published 2026-06-09 Fixed in 3.21.6.0 CWE-59
TI-2026-36365 CVE-2026-49161 · GHSA-25vj-c5mm-vwxg

Microsoft PC Manager Security Feature Bypass Vulnerability

Priority LOW 36

Improper access control in Microsoft PC Manager allows an authorized attacker to bypass a security feature locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00239 Published 2026-06-09 Fixed in 3.21.6.0 CWE-284
TI-2025-31707 CVE-2025-49738 · GHSA-7gcp-8477-v2hx

Microsoft PC Manager Elevation of Privilege Vulnerability

Priority LOW 36

Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00381 Published 2025-07-08 Fixed in 3.17.4 CWE-59
TI-2025-31697 CVE-2025-49728 · GHSA-gvq8-wg5r-rqmh

Microsoft PC Manager Security Feature Bypass Vulnerability

Priority LOW 18

Cleartext storage of sensitive information in Microsoft PC Manager allows an unauthorized attacker to bypass a security feature locally.

CVSS 3.1MEDIUM 4.0 Local No auth No interaction EPSS 0.0024 Published 2025-09-16 Fixed in 3.18.0.0 CWE-312
Open these records in search →