Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV
TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2026-73128 Microsoft Windows Command Injection Vulnerability Priority CRITICAL 97KEV 2026-10-13TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability Priority CRITICAL 97KEV 2026-09-25TI-2026-56567 Microsoft Windows Link Following Vulnerability Priority CRITICAL 93KEV 2026-09-08TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability Priority CRITICAL 93KEV 2026-09-08TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability Priority CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records
Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

9 records in Visio Viewer · all components

TI-2012-00018 CVE-2012-0018 · GHSA-4522-mh29-ff78

Microsoft Visio Viewer 2010 Gold and SP1 does not properly validate attributes in Visio…

Priority MEDIUM 61

Microsoft Visio Viewer 2010 Gold and SP1 does not properly validate attributes in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "VSD File Format Memory Corruption Vulnerabil…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.25072 Published 2012-05-09 No fix listed CWE-20
TI-2012-00137 CVE-2012-0138 · GHSA-m4w6-q2pr-qg8f

Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the…

Priority MEDIUM 59

Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format M…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.19852 Published 2012-02-14 No fix listed CWE-94
TI-2012-00136 CVE-2012-0137 · GHSA-2f7j-3wrq-f3c8

Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the…

Priority MEDIUM 59

Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format M…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.19852 Published 2012-02-14 No fix listed CWE-94
TI-2012-00135 CVE-2012-0136 · GHSA-rcch-qf9h-vxg3

Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the…

Priority MEDIUM 59

Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format M…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.19852 Published 2012-02-14 No fix listed CWE-94
TI-2012-00020 CVE-2012-0020 · GHSA-8g7q-wq2r-7xqc

Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the…

Priority MEDIUM 59

Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format M…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.20013 Published 2012-02-14 No fix listed CWE-94
TI-2012-00019 CVE-2012-0019 · GHSA-g829-q6h9-qvpp

Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the…

Priority MEDIUM 59

Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format M…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.20013 Published 2012-02-14 No fix listed CWE-94
Open these records in search →