Microsoft

Records18046All Threatist records

Exploited (KEV)406In CISA KEV

CVSS critical2330CVSS 9.0–10.0

CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability CRITICAL 99KEV 2026-10-27 TI-2026-73128 Microsoft Windows Command Injection Vulnerability CRITICAL 97KEV 2026-10-13 TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability CRITICAL 97KEV 2026-09-25 TI-2026-56567 Microsoft Windows Link Following Vulnerability CRITICAL 93KEV 2026-09-08 TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability CRITICAL 93KEV 2026-09-08 TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records

Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

2974 records in Windows 10 · all components

TI-2015-02132 CVE-2015-2426 · GHSA-7w6v-23gr-722w

Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft…

CRITICAL 97KEV

Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Wind…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.86576 Published 2015-07-20 No fix listed CWE-124

TI-2022-10056 CVE-2022-26809 · GHSA-q2wc-9mx8-xr8j

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CRITICAL 92

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.90859 Published 2022-04-15 Fixed in 10.0.17763.2803, 10.0.18363.2212 +11

TI-2022-06273 CVE-2022-21907 · GHSA-cgqq-62rg-6vmf

HTTP Protocol Stack Remote Code Execution Vulnerability

CRITICAL 92

HTTP Protocol Stack Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.9279 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.19043.1466 +4

TI-2019-00906 CVE-2019-1181 · GHSA-w8p3-q4q6-xq79

Remote Desktop Services Remote Code Execution Vulnerability

CRITICAL 89

A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted request…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.7844 Published 2019-08-14 Fixed in publication

TI-2022-15533 CVE-2022-34721 · GHSA-hppf-3fwv-wwmm

Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability

CRITICAL 88

Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.76732 Published 2022-09-13 Fixed in 10.0.17763.3406, 10.0.19043.2006 +10

TI-2015-01587 CVE-2015-1769 · GHSA-fj6j-88c7-c8gx

Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows…

CRITICAL 88KEV

Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 mishandles symlinks, which…

CVSS 3.1MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.04078 Published 2015-08-15 No fix listed CWE-264

TI-2023-08140 CVE-2023-21758 · GHSA-qqg4-gm3f-2r2x

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

HIGH 82

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.92529 Published 2023-01-10 Fixed in 10.0.17763.3887, 10.0.20348.1487 +7 CWE-476

TI-2019-00933 CVE-2019-1212 · GHSA-ggpr-x33h-6668

Windows DHCP Server Denial of Service Vulnerability

HIGH 82

A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06738 Published 2019-08-14 Fixed in publication CWE-787

TI-2016-02716 CVE-2016-3236 · GHSA-xxfh-4hh8-prf8

The Web Proxy Auto Discovery (WPAD) protocol implementation in Microsoft Windows Vista…

HIGH 81

The Web Proxy Auto Discovery (WPAD) protocol implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.75609 Published 2016-06-16 No fix listed CWE-19

TI-2022-12476 CVE-2022-30216 · GHSA-gpxc-hjqg-f39p

Windows Server Service Tampering Vulnerability

HIGH 80

Windows Server Service Tampering Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.88617 Published 2022-07-12 Fixed in 10.0.19043.1826, 10.0.20348.825 +3 CWE-434

TI-2022-06260 CVE-2022-21894 · GHSA-q5c9-xwjv-3hcq

Secure Boot Security Feature Bypass Vulnerability

HIGH 80

Secure Boot Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.09116 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +9 CWE-863

TI-2019-00340 CVE-2019-0547 · GHSA-6cwf-wg9f-5wqv

Out-of-bounds write in Microsoft Windows 10

HIGH 80

A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka "Windows DHCP Client Remote Code Execution Vulnerability." This affects Windows…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.71365 Published 2019-01-08 No fix listed CWE-787

TI-2019-00416 CVE-2019-0626 · GHSA-4xjw-72cm-x4gr

Out-of-bounds write in Microsoft Windows

HIGH 79

A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP server, aka 'Windows DHCP Server Remote Code Execution Vulnerability'.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.68627 Published 2019-03-06 No fix listed CWE-787

TI-2022-17678 CVE-2022-37958 · GHSA-w9jc-m3x9-g758

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

HIGH 77

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.86383 Published 2022-09-13 Fixed in 10.0.17763.3406, 10.0.19043.2006 +9

TI-2021-08241 CVE-2021-26424 · GHSA-f425-rchp-ffpg

Windows TCP/IP Remote Code Execution Vulnerability

HIGH 77

Windows TCP/IP Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.61133 Published 2021-08-12 Fixed in 10.0.10240.19022, 10.0.14393.4583 +9

TI-2020-01381 CVE-2020-1421 · GHSA-f75r-mrmx-746p

Type confusion in Microsoft Windows 10 Version 2004 for 32-bit Systems

HIGH 77

A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this vulnerability could gain the same user righ…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.74504 Published 2020-07-14 No fix listed CWE-843

TI-2019-00479 CVE-2019-0698 · GHSA-c773-95pr-cwwc

Out-of-bounds write in Microsoft Windows

HIGH 77

A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code Execution Vulnerability'.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.6285 Published 2019-04-08 No fix listed CWE-787

TI-2023-18430 CVE-2023-36606 · GHSA-wh38-jq3r-39hr

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

HIGH 76

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.69361 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-400

TI-2022-15530 CVE-2022-34718 · GHSA-56jv-75wp-q86w

Windows TCP/IP Remote Code Execution Vulnerability

HIGH 76

Windows TCP/IP Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.56865 Published 2022-09-13 Fixed in 10.0.17763.3406, 10.0.19043.2006 +10

TI-2022-06331 CVE-2022-21972 · GHSA-h7pq-fm7p-5x88

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

HIGH 75

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.79347 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +10

TI-2019-00503 CVE-2019-0726 · GHSA-xfvv-5229-rm3v

Out-of-bounds write in Microsoft Windows

HIGH 75

A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code Execution Vulnerability'.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.54459 Published 2019-04-08 No fix listed CWE-787

TI-2016-00035 CVE-2016-0041 · GHSA-7q4m-gr62-6xww

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows…

HIGH 75

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold and 1511, and Internet Explorer 10 and 11 mishandle DLL loadin…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.82907 Published 2016-02-10 No fix listed

TI-2019-00408 CVE-2019-0618 · GHSA-3c37-qxqv-r99x

A remote code execution vulnerability exists in the way that the Windows Graphics Device…

HIGH 74

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.67008 Published 2019-03-06 No fix listed

TI-2017-08724 CVE-2017-11771 · GHSA-9vvc-6v43-39qc

Improper input validation in Microsoft Windows Search

HIGH 74

The Microsoft Windows Search component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Serv…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.51932 Published 2017-10-13 No fix listed CWE-20

TI-2016-02696 CVE-2016-3213 · GHSA-cj7m-368h-qqqf

The Web Proxy Auto Discovery (WPAD) protocol implementation in Microsoft Windows Vista…

HIGH 74

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.66904 Published 2016-06-16 No fix listed CWE-264

Open these records in search →

Critical	2330
High	10410
Medium	5035
Low	270
No CVSS	1