Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV
TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2026-73128 Microsoft Windows Command Injection Vulnerability Priority CRITICAL 97KEV 2026-10-13TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability Priority CRITICAL 97KEV 2026-09-25TI-2026-56567 Microsoft Windows Link Following Vulnerability Priority CRITICAL 93KEV 2026-09-08TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability Priority CRITICAL 93KEV 2026-09-08TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability Priority CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records
Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

28 records in Windows 10 2004 · all components

TI-2021-17496 CVE-2021-40444 · GHSA-2h32-fhf6-xhh5

Microsoft MSHTML Remote Code Execution Vulnerability

Priority CRITICAL 97KEV

Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.9784 Published 2021-09-15 Fixed in 10.0.10240.19060, 10.0.14393.4651 +10 CWE-22
TI-2021-13480 CVE-2021-34448 · GHSA-6545-45rg-p2vp

Scripting Engine Memory Corruption Vulnerability

Priority CRITICAL 97KEV

Scripting Engine Memory Corruption Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.40062 Published 2021-07-16 Fixed in 10.0.10240.19003, 10.0.14393.4530 +8 CWE-787
TI-2021-18198 CVE-2021-41379 · GHSA-hxf7-qh53-96j5

Windows Installer Elevation of Privilege Vulnerability

Priority CRITICAL 93KEV

Windows Installer Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.19452 Published 2021-11-10 Fixed in 10.0.10240.19119, 10.0.14393.4770 +11 CWE-59
TI-2021-18181 CVE-2021-41357 · GHSA-pph6-grp2-wvvw

Win32k Elevation of Privilege Vulnerability

Priority CRITICAL 93KEV

Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01523 Published 2021-10-13 Fixed in 10.0.19043.1288, 10.0.20348.288 +3
TI-2021-17500 CVE-2021-40450 · GHSA-v7qc-rhmv-f6j4

Win32k Elevation of Privilege Vulnerability

Priority CRITICAL 93KEV

Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01523 Published 2021-10-13 Fixed in 10.0.17763.2237, 10.0.18363.1854 +5
TI-2021-17499 CVE-2021-40449 · GHSA-qjf4-g2gg-w6pq

Win32k Elevation of Privilege Vulnerability

Priority CRITICAL 93KEV

Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.81936 Published 2021-10-13 Fixed in 10.0.17763.2237, 10.0.18363.1854 +10 CWE-416
TI-2021-15014 CVE-2021-36934 · GHSA-x4m2-px5g-5q55

Windows Elevation of Privilege Vulnerability

Priority CRITICAL 93KEV

An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Security Accounts Manager (SAM) database.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.67252 Published 2021-07-22 Fixed in 10.0.17763.2114, 10.0.18363.1734 +3
TI-2021-13141 CVE-2021-33771 · GHSA-jv37-xg37-jxgp

Windows Kernel Elevation of Privilege Vulnerability

Priority CRITICAL 93KEV

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.10172 Published 2021-07-14 Fixed in 10.0.10240.19003, 10.0.14393.4530 +6
TI-2021-11966 CVE-2021-31979 · GHSA-rhcm-c7c7-5wq8

Windows Kernel Elevation of Privilege Vulnerability

Priority CRITICAL 93KEV

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0454 Published 2021-07-14 Fixed in 10.0.10240.19003, 10.0.14393.4530 +9 CWE-119
TI-2021-11943 CVE-2021-31956 · GHSA-jj4q-6c47-cggx

Windows NTFS Elevation of Privilege Vulnerability

Priority CRITICAL 93KEV

Windows NTFS Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.22273 Published 2021-06-08 Fixed in 10.0.17763.1999, 10.0.18363.1621 +10 CWE-191
TI-2021-09473 CVE-2021-28310 · GHSA-8mmc-r5c6-h963

Win32k Elevation of Privilege Vulnerability

Priority CRITICAL 93KEV

Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.08398 Published 2021-04-13 Fixed in publication CWE-787
TI-2020-01423 CVE-2020-1464 · GHSA-75g4-7255-wxgc

Windows Spoofing Vulnerability

Priority CRITICAL 93KEV

A spoofing vulnerability exists when Windows incorrectly validates file signatures.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.38946 Published 2020-08-17 Fixed in publication CWE-347
TI-2020-00956 CVE-2020-0986 · GHSA-5wgx-4x92-f6pf

Out-of-bounds write in Microsoft Windows

Priority CRITICAL 93KEV

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.16405 Published 2020-06-09 No fix listed CWE-787
Load more
Open these records in search →