Microsoft

Records18046All Threatist records

Exploited (KEV)406In CISA KEV

CVSS critical2330CVSS 9.0–10.0

CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability CRITICAL 99KEV 2026-10-27 TI-2026-73128 Microsoft Windows Command Injection Vulnerability CRITICAL 97KEV 2026-10-13 TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability CRITICAL 97KEV 2026-09-25 TI-2026-56567 Microsoft Windows Link Following Vulnerability CRITICAL 93KEV 2026-09-08 TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability CRITICAL 93KEV 2026-09-08 TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records

Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

47 records in Windows 10 1909 · all components

TI-2020-00771 CVE-2020-0796 · GHSA-vh23-87v3-h8c6

Memory corruption in Microsoft Windows 10 Version 1903 for 32-bit Systems

CRITICAL 100KEV

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Remote Code Execution Vulnerability'.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.9981 Published 2020-03-12 Fixed CWE-119

TI-2022-10154 CVE-2022-26923 · GHSA-j9xf-76vv-4wcg

Active Directory Domain Services Elevation of Privilege Vulnerability

CRITICAL 97KEV

Active Directory Domain Services Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.835 Published 2022-05-10 Fixed in 10.0.17763.4252, 10.0.18363.2274 +8 CWE-295

TI-2021-17496 CVE-2021-40444 · GHSA-2h32-fhf6-xhh5

Microsoft MSHTML Remote Code Execution Vulnerability

CRITICAL 97KEV

Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.9784 Published 2021-09-15 Fixed in 10.0.10240.19060, 10.0.14393.4651 +10 CWE-22

TI-2021-13480 CVE-2021-34448 · GHSA-6545-45rg-p2vp

Scripting Engine Memory Corruption Vulnerability

CRITICAL 97KEV

Scripting Engine Memory Corruption Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.40062 Published 2021-07-16 Fixed in 10.0.10240.19003, 10.0.14393.4530 +8 CWE-787

TI-2021-13116 CVE-2021-33742 · GHSA-gf47-3hhj-gv96

Windows MSHTML Platform Remote Code Execution Vulnerability

CRITICAL 97KEV

Windows MSHTML Platform Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.59407 Published 2021-06-08 Fixed in 10.0.17763.1999, 10.0.18363.1621 +11 CWE-787

TI-2020-00989 CVE-2020-1020 · GHSA-jvx5-6596-c2vj

Out-of-bounds write in Microsoft Windows

CRITICAL 97KEV

A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems exce…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.65037 Published 2020-04-15 Fixed CWE-787

TI-2021-13113 CVE-2021-33739 · GHSA-4mwq-m8xw-34mr

Microsoft DWM Core Library Elevation of Privilege Vulnerability

CRITICAL 96KEV

Microsoft DWM Core Library Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.06609 Published 2021-06-08 Fixed in 10.0.18363.1621, 10.0.19043.1052 +2

TI-2013-03406 CVE-2013-3900 · GHSA-8cj2-jg77-qj2p

WinVerifyTrust Signature Validation Vulnerability

CRITICAL 95KEV

Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in a…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.44647 Published 2013-12-11 No fix listed CWE-347

TI-2020-00578 CVE-2020-0601 · GHSA-82jc-cv6x-r223

Improper certificate validation in Microsoft Windows

CRITICAL 94KEV

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate…

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.89078 Published 2020-01-14 No fix listed CWE-295

TI-2022-08387 CVE-2022-24521 · GHSA-59qr-cc8f-v837

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.07134 Published 2022-04-15 Fixed in 10.0.17763.2803, 10.0.18363.2212 +11 CWE-787

TI-2022-06968 CVE-2022-22718 · GHSA-r854-85qm-m3f9

Windows Print Spooler Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Print Spooler Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.18464 Published 2022-02-09 Fixed in 10.0.17763.2565, 10.0.18363.2094 +11

TI-2022-06356 CVE-2022-21999 · GHSA-9cr3-63pg-942x

Windows Print Spooler Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Print Spooler Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.41007 Published 2022-02-09 Fixed in 10.0.17763.2565, 10.0.18363.2094 +11 CWE-22

TI-2022-06330 CVE-2022-21971 · GHSA-58gj-2v59-wxcq

Windows Runtime Remote Code Execution Vulnerability

CRITICAL 93KEV

Windows Runtime Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.53934 Published 2022-02-09 Fixed in 10.0.17763.2565, 10.0.18363.2094 +5 CWE-824

TI-2022-06249 CVE-2022-21882 · GHSA-m3vx-53cf-jqv4

Win32k Elevation of Privilege Vulnerability

CRITICAL 93KEV

Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.59205 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +5 CWE-787

TI-2021-19234 CVE-2021-43226 · GHSA-98jh-5xvm-p5ph

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.03275 Published 2021-12-15 Fixed in 10.0.17763.2366, 10.0.18363.1977 +13

TI-2021-18198 CVE-2021-41379 · GHSA-hxf7-qh53-96j5

Windows Installer Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Installer Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.19452 Published 2021-11-10 Fixed in 10.0.10240.19119, 10.0.14393.4770 +11 CWE-59

TI-2021-17500 CVE-2021-40450 · GHSA-v7qc-rhmv-f6j4

Win32k Elevation of Privilege Vulnerability

CRITICAL 93KEV

Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01523 Published 2021-10-13 Fixed in 10.0.17763.2237, 10.0.18363.1854 +5

TI-2021-17499 CVE-2021-40449 · GHSA-qjf4-g2gg-w6pq

Win32k Elevation of Privilege Vulnerability

CRITICAL 93KEV

Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.81936 Published 2021-10-13 Fixed in 10.0.17763.2237, 10.0.18363.1854 +10 CWE-416

TI-2021-15031 CVE-2021-36955 · GHSA-g26f-6mx8-j24w

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.04071 Published 2021-09-15 Fixed in 10.0.10240.19060, 10.0.14393.4651 +10

TI-2021-15025 CVE-2021-36948 · GHSA-fcr2-qx8m-pfhp

Windows Update Medic Service Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Update Medic Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.2327 Published 2021-08-12 Fixed in 10.0.17763.2114, 10.0.18363.1734 +3

TI-2021-15014 CVE-2021-36934 · GHSA-x4m2-px5g-5q55

Windows Elevation of Privilege Vulnerability

CRITICAL 93KEV

An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Security Accounts Manager (SAM) database.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.67252 Published 2021-07-22 Fixed in 10.0.17763.2114, 10.0.18363.1734 +3

TI-2021-13514 CVE-2021-34486 · GHSA-793m-wq3j-whvr

Windows Event Tracing Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Event Tracing Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.09328 Published 2021-08-12 Fixed in 10.0.17763.2114, 10.0.18363.1734 +3 CWE-416

TI-2021-13512 CVE-2021-34484 · GHSA-mp6h-cxp8-82j6

Windows User Profile Service Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows User Profile Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.21827 Published 2021-08-12 Fixed in 10.0.10240.19022, 10.0.14393.4583 +9

TI-2021-13141 CVE-2021-33771 · GHSA-jv37-xg37-jxgp

Windows Kernel Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.10172 Published 2021-07-14 Fixed in 10.0.10240.19003, 10.0.14393.4530 +6

TI-2021-11966 CVE-2021-31979 · GHSA-rhcm-c7c7-5wq8

Windows Kernel Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0454 Published 2021-07-14 Fixed in 10.0.10240.19003, 10.0.14393.4530 +9 CWE-119

Open these records in search →

Critical	2330
High	10410
Medium	5035
Low	270
No CVSS	1