Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

32 records in Powershell · all components

TI-2023-07935 CVE-2023-21538 · GHSA-8f7f-vqg5-jrv9

.NET Denial of Service Vulnerability

Priority MEDIUM 44

.NET Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02838 Published 2023-01-10 Fixed in 6.0.13, 7.2.9 CWE-502
Priority MEDIUM 42

Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00939 Published 2026-08-11 Fixed in 7.4.19.0, 7.5.10.0 +1 CWE-23
TI-2026-21162 CVE-2026-26171 · GHSA-w3x6-4m5h-cxqf

.NET Denial of Service Vulnerability

Priority MEDIUM 42

Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01753 Published 2026-04-14 Fixed in 10.0.6, 8.0.26 +4 CWE-400
Priority MEDIUM 42

A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.06462 Published 2020-05-21 Fixed in publication, 2.1.18 +1
Priority MEDIUM 41

Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00691 Published 2026-10-13 Fixed in 7.4.21, 7.5.12 +1 CWE-807
TI-2020-07165 CVE-2020-8927 · GHSA-5v8v-66v8-mwm7

Buffer overflow in Brotli library

Priority MEDIUM 41

A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.03217 Published 2020-09-15 Fixed in 1.0.9, 3.1.23 +3 CWE-130
TI-2025-15143 CVE-2025-21171 · GHSA-p54p-p3qm-8vgj

.NET Remote Code Execution Vulnerability

Priority LOW 38

.NET Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.01722 Published 2025-01-14 Partial fix · 9.0.1, 17.10.10 +4 CWE-122
Priority LOW 37

Improper input validation in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00536 Published 2026-04-14 Fixed in 7.4.14, 7.5.5 CWE-20
Priority LOW 37

Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.01072 Published 2025-06-13 Partial fix · 8.0.17, 9.0.6 +6 CWE-426
Priority LOW 36

Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00359 Published 2026-08-11 Fixed in 7.4.19.0, 7.5.10.0 +1 CWE-94
Priority LOW 36

Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an authorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00322 Published 2026-08-14 Fixed in 7.4.19.0, 7.5.10.0 +1 CWE-77
Priority LOW 35

Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00487 Published 2025-10-14 Fixed in 7.4.13, 7.5.4 +15 CWE-284
Priority LOW 35

PowerShell Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0065 Published 2022-04-15 Fixed in 10.0.17763.2803, 10.0.18363.2212 +13
Priority LOW 34

Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00382 Published 2026-08-11 Fixed in 7.4.19.0, 7.5.10.0 +1 CWE-276
Priority LOW 34

Server-side request forgery (ssrf) in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00874 Published 2026-08-11 Fixed in 7.4.19.0, 7.5.10.0 +1 CWE-918
Load more
Open these records in search →