Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV
TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2026-73128 Microsoft Windows Command Injection Vulnerability Priority CRITICAL 97KEV 2026-10-13TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability Priority CRITICAL 97KEV 2026-09-25TI-2026-56567 Microsoft Windows Link Following Vulnerability Priority CRITICAL 93KEV 2026-09-08TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability Priority CRITICAL 93KEV 2026-09-08TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability Priority CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records
Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

11 records in Sharepoint Designer · all components

TI-2015-02093 CVE-2015-2376 · GHSA-43p6-h9vq-p8q6

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Office for…

Priority MEDIUM 56

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Office for Mac 2011, Excel Viewer 2007 SP3, Office Compatibility Pack SP3, Excel Services on SharePoint Server 2007 SP3, Excel Services on Shar…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.15639 Published 2015-07-14 No fix listed CWE-119
TI-2014-00243 CVE-2014-0251 · GHSA-hcw7-j5pr-h3vx

Microsoft Windows SharePoint Services 3.0 SP3; SharePoint Server 2007 SP3, 2010 SP1 and…

Priority MEDIUM 54

Microsoft Windows SharePoint Services 3.0 SP3; SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 Gold and SP1; SharePoint Foundation 2010 SP1 and SP2 and 2013 Gold and SP1; Project Server 2010 SP1 and SP2 and 2013 G…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.14214 Published 2014-05-14 No fix listed CWE-94
TI-2016-02832 CVE-2016-3365 · GHSA-44c5-4q35-vpm4

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016…

Priority MEDIUM 53

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Server 2007 SP3, Excel Services on SharePoint Server 2010…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.19867 Published 2016-09-14 No fix listed CWE-119
TI-2016-00114 CVE-2016-0136 · GHSA-h4j9-g7ww-mg8h

Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, Excel Services…

Priority MEDIUM 53

Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, Excel Services on SharePoint Server 2007 SP3, and Excel Services on SharePoint Server 2010 SP2 allow remote attackers to execute arbitrary code via…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.20232 Published 2016-04-12 No fix listed CWE-119
TI-2016-02825 CVE-2016-3358 · GHSA-87pf-j2gx-jjvx

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016…

Priority MEDIUM 52

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel 2016 for Mac, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Server 2007 SP3, Excel Services on Sh…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.18434 Published 2016-09-14 No fix listed CWE-119
TI-2016-02829 CVE-2016-3362 · GHSA-cfgg-h7vh-cg6c

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016…

Priority MEDIUM 51

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Server 2007 SP3, Excel Services on SharePoint Server 2010…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.17466 Published 2016-09-14 No fix listed CWE-119
TI-2016-02827 CVE-2016-3360 · GHSA-vqrv-x3p6-36rh

Microsoft PowerPoint 2007 SP3, PowerPoint 2010 SP2, PowerPoint 2013 SP1, PowerPoint 2013…

Priority MEDIUM 51

Microsoft PowerPoint 2007 SP3, PowerPoint 2010 SP2, PowerPoint 2013 SP1, PowerPoint 2013 RT SP1, PowerPoint 2016 for Mac, Office Compatibility Pack SP3, PowerPoint Viewer, SharePoint Server 2013 SP1, Office Web Apps 2010…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.17235 Published 2016-09-14 No fix listed CWE-119
TI-2020-12934 CVE-2020-16946 · GHSA-5hw6-9rj2-gh22

Microsoft Office SharePoint XSS Vulnerability

Priority MEDIUM 41

<p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server.

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.01612 Published 2020-10-16 Fixed in publication CWE-79
TI-2020-01531 CVE-2020-1573 · GHSA-j6gj-p9mw-9wgg

Microsoft Office SharePoint XSS Vulnerability

Priority LOW 29

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.01882 Published 2020-08-17 Fixed in publication CWE-79
Open these records in search →