Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV
TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2026-73128 Microsoft Windows Command Injection Vulnerability Priority CRITICAL 97KEV 2026-10-13TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability Priority CRITICAL 97KEV 2026-09-25TI-2026-56567 Microsoft Windows Link Following Vulnerability Priority CRITICAL 93KEV 2026-09-08TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability Priority CRITICAL 93KEV 2026-09-08TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability Priority CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records
Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

56 records in Visual Studio · all components

TI-2009-02381 CVE-2009-2493 · GHSA-xrpm-74v3-f6fq

The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio…

Priority HIGH 67

The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1; and Windows 2000 SP4, XP SP2 and SP3, Server 2003 S…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.3776 Published 2009-07-29 No fix listed CWE-94
TI-2009-00858 CVE-2009-0901 · GHSA-5q85-2xfh-7gpf

The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio…

Priority HIGH 66

The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold, and Visual C++ 2005 SP1 and 2008 Gold and SP1; and Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vist…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.36608 Published 2009-07-29 No fix listed CWE-457
TI-2009-02389 CVE-2009-2501 · GHSA-5q52-45hp-63pf

Heap-based buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2…

Priority MEDIUM 62

Heap-based buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office W…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.26715 Published 2009-10-14 No fix listed CWE-119
TI-2009-02414 CVE-2009-2528 · GHSA-qq8p-5v5h-rxf8

GDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art…

Priority MEDIUM 59

GDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art Property Tables, which allows remote attackers to execute arbitrary code via a crafted Office document that triggers memory corrupt…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.20452 Published 2009-10-14 No fix listed CWE-94
TI-2009-02392 CVE-2009-2504 · GHSA-m9qw-8j6w-4vww

Multiple integer overflows in unspecified APIs in GDI+ in Microsoft .NET Framework 1.1…

Priority MEDIUM 59

Multiple integer overflows in unspecified APIs in GDI+ in Microsoft .NET Framework 1.1 SP1, .NET Framework 2.0 SP1 and SP2, Windows XP SP2 and SP3, Windows Server 2003 SP2, Vista Gold and SP1, Server 2008 Gold, Office XP…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.20982 Published 2009-10-14 No fix listed CWE-189
TI-2009-02383 CVE-2009-2495 · GHSA-w98q-7wf3-vg43

The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio…

Priority MEDIUM 54

The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1 does not properly enforce string termination, which…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.343 Published 2009-07-29 No fix listed CWE-126
TI-2007-04713 CVE-2007-4891 · GHSA-pwrx-4jvg-2w44

A certain ActiveX control in PDWizard.ocx 6.0.0.9782 and earlier in Microsoft Visual…

Priority MEDIUM 54

A certain ActiveX control in PDWizard.ocx 6.0.0.9782 and earlier in Microsoft Visual Studio 6.0 exposes dangerous (1) StartProcess, (2) SyncShell, (3) SaveAs, (4) CABDefaultURL, (5) CABFileName, and (6) CABRunFile method…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.31003 Published 2007-09-14 No fix listed CWE-78
TI-2014-03082 CVE-2014-3802 · GHSA-vvjc-3hh3-ch9p

msdia.dll in Microsoft Debug Interface Access (DIA) SDK, as distributed in Microsoft…

Priority MEDIUM 43

msdia.dll in Microsoft Debug Interface Access (DIA) SDK, as distributed in Microsoft Visual Studio before 2013, does not properly validate an unspecified variable before use in calculating a dynamic-call address, which a…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.10926 Published 2014-05-20 No fix listed CWE-20
TI-2007-04712 CVE-2007-4890 · GHSA-9q4p-wv38-76g5

Absolute directory traversal vulnerability in a certain ActiveX control in the VB To VSI…

Priority MEDIUM 43

Absolute directory traversal vulnerability in a certain ActiveX control in the VB To VSI Support Library (VBTOVSI.DLL) 1.0.0.0 in Microsoft Visual Studio 6.0 allows remote attackers to create or overwrite arbitrary files…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.1636 Published 2007-09-14 No fix listed CWE-22
Load more
Open these records in search →