Microsoft

Records18046All Threatist records

Exploited (KEV)406In CISA KEV

CVSS critical2330CVSS 9.0–10.0

CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability CRITICAL 99KEV 2026-10-27 TI-2026-73128 Microsoft Windows Command Injection Vulnerability CRITICAL 97KEV 2026-10-13 TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability CRITICAL 97KEV 2026-09-25 TI-2026-56567 Microsoft Windows Link Following Vulnerability CRITICAL 93KEV 2026-09-08 TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability CRITICAL 93KEV 2026-09-08 TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records

Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

9 records in Sql 2016 Azure Connect Feature Pack · all components

TI-2024-24853 CVE-2024-37341 · GHSA-c5m2-6p7h-vxqm

Microsoft SQL Server Elevation of Privilege Vulnerability

MEDIUM 46

Microsoft SQL Server Elevation of Privilege Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01444 Published 2024-09-10 Fixed in 13.0.6450.1, 13.0.7045.2 +6 CWE-284

TI-2024-24852 CVE-2024-37340 · GHSA-mhc8-f455-fqc9

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

MEDIUM 43

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01623 Published 2024-09-10 Fixed in 14.0.3475.1, 14.0.2060.1 +4 CWE-822

TI-2024-24851 CVE-2024-37339 · GHSA-5999-prhj-w7r5

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

MEDIUM 43

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01623 Published 2024-09-10 Fixed in 14.0.3475.1, 14.0.2060.1 +4 CWE-822

TI-2024-24850 CVE-2024-37338 · GHSA-r3q3-7r4r-xv74

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

MEDIUM 43

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01623 Published 2024-09-10 Fixed in 14.0.3475.1, 14.0.2060.1 +4 CWE-125

TI-2024-24847 CVE-2024-37335 · GHSA-3r5x-g9r7-3w5m

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

MEDIUM 43

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01623 Published 2024-09-10 Fixed in 14.0.3475.1, 14.0.2060.1 +4 CWE-122

TI-2024-17280 CVE-2024-26191 · GHSA-6jf8-wh8p-q53m

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

MEDIUM 43

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01623 Published 2024-09-10 Fixed in 14.0.3475.1, 14.0.2060.1 +4 CWE-122

TI-2024-17276 CVE-2024-26186 · GHSA-xr4h-93hj-62q2

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

MEDIUM 43

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01623 Published 2024-09-10 Fixed in 14.0.3475.1, 14.0.2060.1 +4 CWE-416

TI-2024-24854 CVE-2024-37342 · GHSA-pgxx-gq7v-fg8m

Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

LOW 37

Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.0166 Published 2024-09-10 Fixed in 14.0.3475.1, 14.0.2060.1 +4 CWE-125

TI-2024-24849 CVE-2024-37337 · GHSA-m65g-rcvq-qjj5

Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

LOW 37

Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.0166 Published 2024-09-10 Fixed in 14.0.3475.1, 14.0.2060.1 +4 CWE-197

Open these records in search →