Microsoft

Records18046All Threatist records

Exploited (KEV)406In CISA KEV

CVSS critical2330CVSS 9.0–10.0

CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability CRITICAL 99KEV 2026-10-27 TI-2026-73128 Microsoft Windows Command Injection Vulnerability CRITICAL 97KEV 2026-10-13 TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability CRITICAL 97KEV 2026-09-25 TI-2026-56567 Microsoft Windows Link Following Vulnerability CRITICAL 93KEV 2026-09-08 TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability CRITICAL 93KEV 2026-09-08 TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records

Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

17 records in System Center Operations Manager · all components

TI-2021-16224 CVE-2021-38647 · GHSA-rp2g-5hw2-q565

Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

CRITICAL 100KEV

Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99933 Published 2021-09-15 Fixed in DSC Agent versions: 2.71.1.25, 2.70.0.30 +8

TI-2021-16226 CVE-2021-38649 · GHSA-9rvc-mxjm-qh6v

Open Management Infrastructure Elevation of Privilege Vulnerability

CRITICAL 93KEV

Open Management Infrastructure Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.02887 Published 2021-09-15 Fixed in DSC Agent versions: 2.71.1.25, 2.70.0.30 +8

TI-2021-16225 CVE-2021-38648 · GHSA-p8gr-7qcg-86p9

Open Management Infrastructure Elevation of Privilege Vulnerability

CRITICAL 93KEV

Open Management Infrastructure Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.11424 Published 2021-09-15 Fixed in DSC Agent versions: 2.71.1.25, 2.70.0.30 +8

TI-2021-16222 CVE-2021-38645 · GHSA-727j-58h7-43f5

Open Management Infrastructure Elevation of Privilege Vulnerability

CRITICAL 93KEV

Open Management Infrastructure Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.02727 Published 2021-09-15 Fixed in DSC Agent versions: 2.71.1.25, 2.70.0.30 +8

TI-2024-14090 CVE-2024-21330 · GHSA-6m8c-mx2x-w4pf

Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability

HIGH 69

Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00988 Published 2024-03-12 Fixed in 10.19.1253.0, 10.22.1070.0 +6 CWE-122

TI-2024-14094 CVE-2024-21334 · GHSA-75r3-jg89-hhjp

Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

HIGH 68

Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.20157 Published 2024-03-12 Fixed in 10.19.1253.0, 10.22.1070.0 +1 CWE-416

TI-2026-16984 CVE-2026-20967 · GHSA-8gfh-97q4-r32h

System Center Operations Manager (SCOM) Elevation of Privilege Vulnerability

MEDIUM 42

Improper input validation in System Center Operations Manager allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01188 Published 2026-03-10 Fixed in 10.19.10658.0, 10.22.11951.0 +1 CWE-20

TI-2021-01444 CVE-2021-1728 · GHSA-fc98-w582-pwcx

System Center Operations Manager Elevation of Privilege Vulnerability

MEDIUM 42

System Center Operations Manager Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02024 Published 2021-02-25 Fixed in publication CWE-269

TI-2025-20536 CVE-2025-27743 · GHSA-6vg9-pg49-5fg4

Microsoft System Center Elevation of Privilege Vulnerability

LOW 38

Untrusted search path in System Center allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00901 Published 2025-04-08 No fix listed CWE-426

TI-2021-18176 CVE-2021-41352 · GHSA-9gxv-h2pm-f223

SCOM Information Disclosure Vulnerability

LOW 38

SCOM Information Disclosure Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02944 Published 2021-10-13 Fixed in 7.2.12335.0, 10.19.10550.0 +1

TI-2022-14758 CVE-2022-33640 · GHSA-6625-jr57-474g

System Center Operations Manager: Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability

LOW 37

System Center Operations Manager: Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00603 Published 2022-08-09 Fixed in 1.6.10-2, 10.19.1158.0 +2 CWE-269

TI-2013-00010 CVE-2013-0010 · GHSA-93pf-5w83-v5p3

Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager…

LOW 37

Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager 2007 SP1 and R2 allows remote attackers to inject arbitrary web script or HTML via crafted input, aka "System Center Operations Manag…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.16618 Published 2013-01-09 No fix listed CWE-79

TI-2022-11694 CVE-2022-29149

Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability

LOW 36

Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00951 Published 2022-06-15 Fixed in DSC Agent versions: 2.71.1.33, 3.0.0.7 +7

TI-2013-00009 CVE-2013-0009 · GHSA-q5jv-7j7q-rggq

Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager…

LOW 35

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.1364 Published 2013-01-09 No fix listed CWE-79

TI-2023-18096 CVE-2023-36043 · GHSA-7523-xcc2-m3rm

Open Management Infrastructure Information Disclosure Vulnerability

LOW 32

Open Management Infrastructure Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.01399 Published 2023-11-14 Fixed in 1.7.3-0 CWE-200

TI-2015-02126 CVE-2015-2420 · GHSA-849f-x5xh-fgxg

Cross-site scripting (XSS) vulnerability in Microsoft System Center 2012 Operations…

LOW 31

Cross-site scripting (XSS) vulnerability in Microsoft System Center 2012 Operations Manager Gold before Rollup 8, SP1 before Rollup 10, and R2 before Rollup 7 allows remote attackers to inject arbitrary web script or HTM…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.08807 Published 2015-08-15 No fix listed CWE-79

TI-2020-01292 CVE-2020-1331 · GHSA-g72r-8jv2-wpp8

Authentication bypass by spoofing in Microsoft System Center 2016 Operations Manager

LOW 27

A spoofing vulnerability exists when System Center Operations Manager (SCOM) does not properly sanitize a specially crafted web request to an affected SCOM instance, aka 'System Center Operations Manager Spoofing Vulnera…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01257 Published 2020-06-09 No fix listed CWE-290

Open these records in search →

Critical	2330
High	10410
Medium	5035
Low	270
No CVSS	1