Microsoft

Records18046All Threatist records

Exploited (KEV)406In CISA KEV

CVSS critical2330CVSS 9.0–10.0

CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability CRITICAL 99KEV 2026-10-27 TI-2026-73128 Microsoft Windows Command Injection Vulnerability CRITICAL 97KEV 2026-10-13 TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability CRITICAL 97KEV 2026-09-25 TI-2026-56567 Microsoft Windows Link Following Vulnerability CRITICAL 93KEV 2026-09-08 TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability CRITICAL 93KEV 2026-09-08 TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records

Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

23 records in Team Foundation Server · all components

TI-2019-01021 CVE-2019-1306 · GHSA-wvw6-4r49-h4g6

Improper input validation in Microsoft Team Foundation Server 2018

MEDIUM 59

A remote code execution vulnerability exists when Azure DevOps Server (ADO) and Team Foundation Server (TFS) fail to validate input properly, aka 'Azure DevOps and Team Foundation Server Remote Code Execution Vulnerabili…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.16988 Published 2019-09-11 No fix listed CWE-20

TI-2019-00802 CVE-2019-1072 · GHSA-g5c6-v9ph-hmxh

Improper input validation in Microsoft Team Foundation Server 2012

MEDIUM 57

A remote code execution vulnerability exists when Azure DevOps Server and Team Foundation Server (TFS) improperly handle user input, aka 'Azure DevOps Server and Team Foundation Server Remote Code Execution Vulnerability…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.13446 Published 2019-07-15 No fix listed CWE-20

TI-2018-06193 CVE-2018-8529 · GHSA-g635-3cv2-g7jq

A remote code execution vulnerability exists when Team Foundation Server (TFS) does not…

MEDIUM 57

A remote code execution vulnerability exists when Team Foundation Server (TFS) does not enable basic authorization on the communication between the TFS and Search services, aka "Team Foundation Server Remote Code Executi…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.13455 Published 2018-11-15 No fix listed

TI-2019-00710 CVE-2019-0971 · GHSA-858j-7757-pwv6

Improper output encoding in Microsoft Team Foundation Server 2018

MEDIUM 40

An information disclosure vulnerability exists when Azure DevOps Server and Microsoft Team Foundation Server do not properly sanitize a specially crafted authentication request to an affected server, aka 'Azure DevOps Se…

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.08464 Published 2019-05-16 No fix listed CWE-116

TI-2020-00733 CVE-2020-0758 · GHSA-f545-q9v5-fj94

An elevation of privilege vulnerability exists when Azure DevOps Server and Team…

LOW 37

An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps Server and Team Foundation Services Elevation of Privilege Vul…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.02015 Published 2020-03-12 No fix listed

TI-2019-00435 CVE-2019-0647 · GHSA-v23r-27xv-r8wv

Information disclosure in Microsoft Team

LOW 36

An information disclosure vulnerability exists when Team Foundation Server does not properly handle variables marked as secret, aka "Team Foundation Server Information Disclosure Vulnerability." This affects Team.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.04611 Published 2019-01-17 No fix listed CWE-200

TI-2021-08640 CVE-2021-27067 · GHSA-5xwm-q3wx-jvmr

Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability

LOW 34

Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02826 Published 2021-04-13 Fixed in publication

TI-2019-00625 CVE-2019-0871 · GHSA-4wrw-g53q-g424

Cross-site scripting in Microsoft Team Foundation Server

LOW 32

A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.02419 Published 2019-04-09 No fix listed CWE-79

TI-2019-00624 CVE-2019-0870 · GHSA-p34c-hp83-p85p

Cross-site scripting in Microsoft Team Foundation Server

LOW 32

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.02419 Published 2019-04-09 No fix listed CWE-79

TI-2019-00622 CVE-2019-0868 · GHSA-hfvg-pfv5-xv72

Cross-site scripting in Microsoft Team Foundation Server

LOW 32

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.02419 Published 2019-04-09 No fix listed CWE-79

TI-2019-00621 CVE-2019-0867 · GHSA-2cf6-m3mv-f2w7

Cross-site scripting in Microsoft Team Foundation Server 2018

LOW 32

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.02387 Published 2019-04-09 No fix listed CWE-79

TI-2019-00620 CVE-2019-0866 · GHSA-wxr5-r4hr-h5r7

Cross-site scripting in Microsoft Team Foundation Server

LOW 32

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.02626 Published 2019-04-09 No fix listed CWE-79

TI-2020-13119 CVE-2020-17145 · GHSA-8frx-3j37-5wj8

Azure DevOps Server and Team Foundation Services Spoofing Vulnerability

LOW 28

Azure DevOps Server and Team Foundation Services Spoofing Vulnerability

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01553 Published 2020-12-09 Fixed in publication

TI-2019-01020 CVE-2019-1305 · GHSA-33xh-mrrx-855g

Cross-site scripting in Microsoft Team Foundation Server

LOW 28

A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01535 Published 2019-09-11 No fix listed CWE-79

TI-2019-00806 CVE-2019-1076 · GHSA-mfj8-755g-89xp

Cross-site scripting in Microsoft Team Foundation Server 2018

LOW 28

A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01627 Published 2019-07-15 No fix listed CWE-79

TI-2019-00717 CVE-2019-0979 · GHSA-vgfq-m53c-p426

Cross-site scripting in Microsoft Team Foundation Server

LOW 28

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01697 Published 2019-05-16 No fix listed CWE-79

TI-2019-00626 CVE-2019-0872 · GHSA-4rmj-34m5-wq4m

Cross-site scripting in Microsoft Team Foundation Server

LOW 28

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01697 Published 2019-05-16 No fix listed CWE-79

TI-2019-00544 CVE-2019-0777 · GHSA-5h3x-73w2-c5q7

Cross-site scripting in Microsoft Team Foundation Server 2018

LOW 28

A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01697 Published 2019-04-09 No fix listed CWE-79

TI-2019-00517 CVE-2019-0743 · GHSA-h4q6-2j67-w8cr

Cross-site scripting in Microsoft Team Foundation Server 2018

LOW 28

A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01773 Published 2019-03-06 No fix listed CWE-79

TI-2019-00516 CVE-2019-0742 · GHSA-wvmp-h3p2-gj8q

Cross-site scripting in Microsoft Team Foundation Server 2018

LOW 28

A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01773 Published 2019-03-06 No fix listed CWE-79

TI-2018-06250 CVE-2018-8602 · GHSA-9g97-qcwv-h434

Cross-site scripting in Microsoft Team

LOW 28

A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka "Team Foundation Server Cross-site Scripting Vulnerability." This affects Team.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01707 Published 2018-11-14 No fix listed CWE-79

TI-2020-00675 CVE-2020-0700 · GHSA-vqxj-cwvp-vwpq

Cross-site scripting in Microsoft Azure DevOps Server

LOW 27

A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01328 Published 2020-03-12 No fix listed CWE-79

TI-2019-00434 CVE-2019-0646 · GHSA-c5jp-rpx7-xpxg

Cross-site scripting in Microsoft Team

LOW 27

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01461 Published 2019-01-17 No fix listed CWE-79

Open these records in search →

Critical	2330
High	10410
Medium	5035
Low	270
No CVSS	1