Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

76 records in Windows · all components

Priority MEDIUM 64

Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on JavaScript API execution via unspecified vectors, a different vulnerability than…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.2547 Published 2015-05-13 No fix listed CWE-284
Priority MEDIUM 64

gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.31037 Published 2008-09-10 No fix listed CWE-119
Priority MEDIUM 60

Untrusted search path vulnerability in Microsoft Windows Progman Group Converter (grpconv.exe) allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan h…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.23504 Published 2010-08-27 No fix listed
Priority MEDIUM 58

A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.30794 Published 2021-08-12 Fixed in 10.0.10240.19060, 10.0.14393.4651 +9
Priority MEDIUM 58

The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initializa…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.73327 Published 2011-09-06 Partial fix CWE-326
Priority MEDIUM 57

Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vul…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.12208 Published 2015-05-13 No fix listed CWE-119
Priority MEDIUM 57

Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vul…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.12208 Published 2015-05-13 No fix listed CWE-119
Priority MEDIUM 57

Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vul…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.12127 Published 2015-05-13 No fix listed CWE-119
Priority MEDIUM 57

Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vul…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.12127 Published 2015-05-13 No fix listed CWE-119
Priority MEDIUM 57

Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vul…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.1231 Published 2015-05-13 No fix listed CWE-119
Priority MEDIUM 57

Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vul…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.12208 Published 2015-05-13 No fix listed CWE-119
Priority MEDIUM 57

Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vul…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.12208 Published 2015-05-13 No fix listed CWE-119
Priority MEDIUM 57

Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vul…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.12208 Published 2015-05-13 No fix listed CWE-119
Priority MEDIUM 57

Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vul…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.12208 Published 2015-05-13 No fix listed CWE-119
Priority MEDIUM 57

Heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CV…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.12769 Published 2014-12-10 No fix listed CWE-119
Load more
Open these records in search →