Microsoft

Records18046All Threatist records

Exploited (KEV)406In CISA KEV

CVSS critical2330CVSS 9.0–10.0

CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability CRITICAL 99KEV 2026-10-27 TI-2026-73128 Microsoft Windows Command Injection Vulnerability CRITICAL 97KEV 2026-10-13 TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability CRITICAL 97KEV 2026-09-25 TI-2026-56567 Microsoft Windows Link Following Vulnerability CRITICAL 93KEV 2026-09-08 TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability CRITICAL 93KEV 2026-09-08 TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records

Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

283 records in Windows 10 20h2 · all components

TI-2021-11386 CVE-2021-31166 · GHSA-3mj9-c62w-jw5w

HTTP Protocol Stack Remote Code Execution Vulnerability

CRITICAL 100KEV

HTTP Protocol Stack Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99867 Published 2021-05-11 Fixed in 10.0.19041.982, 10.0.19042.982 CWE-416

TI-2023-08061 CVE-2023-21674 · GHSA-hqxf-h392-6m7w

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

CRITICAL 97KEV

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.34206 Published 2023-01-10 Fixed in 10.0.17763.3887, 10.0.20348.1487 +8 CWE-416

TI-2022-19649 CVE-2022-41128 · GHSA-778m-x5h7-mg59

Windows Scripting Languages Remote Code Execution Vulnerability

CRITICAL 97KEV

Windows Scripting Languages Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.24623 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +11 CWE-787

TI-2022-10154 CVE-2022-26923 · GHSA-j9xf-76vv-4wcg

Active Directory Domain Services Elevation of Privilege Vulnerability

CRITICAL 97KEV

Active Directory Domain Services Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.835 Published 2022-05-10 Fixed in 10.0.17763.4252, 10.0.18363.2274 +8 CWE-295

TI-2021-17496 CVE-2021-40444 · GHSA-2h32-fhf6-xhh5

Microsoft MSHTML Remote Code Execution Vulnerability

CRITICAL 97KEV

Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.9784 Published 2021-09-15 Fixed in 10.0.10240.19060, 10.0.14393.4651 +10 CWE-22

TI-2021-13550 CVE-2021-34527 · GHSA-75f9-mm5v-2rgm

Windows Print Spooler Remote Code Execution Vulnerability

CRITICAL 97KEV

A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.99792 Published 2021-07-02 Fixed in 10.0.10240.18969, 10.0.14393.4470 +11

TI-2021-13480 CVE-2021-34448 · GHSA-6545-45rg-p2vp

Scripting Engine Memory Corruption Vulnerability

CRITICAL 97KEV

Scripting Engine Memory Corruption Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.40062 Published 2021-07-16 Fixed in 10.0.10240.19003, 10.0.14393.4530 +8 CWE-787

TI-2021-13116 CVE-2021-33742 · GHSA-gf47-3hhj-gv96

Windows MSHTML Platform Remote Code Execution Vulnerability

CRITICAL 97KEV

Windows MSHTML Platform Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.59407 Published 2021-06-08 Fixed in 10.0.17763.1999, 10.0.18363.1621 +11 CWE-787

TI-2021-13113 CVE-2021-33739 · GHSA-4mwq-m8xw-34mr

Microsoft DWM Core Library Elevation of Privilege Vulnerability

CRITICAL 96KEV

Microsoft DWM Core Library Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.06609 Published 2021-06-08 Fixed in 10.0.18363.1621, 10.0.19043.1052 +2

TI-2013-03406 CVE-2013-3900 · GHSA-8cj2-jg77-qj2p

WinVerifyTrust Signature Validation Vulnerability

CRITICAL 95KEV

Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in a…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.44647 Published 2013-12-11 No fix listed CWE-347

TI-2023-12812 CVE-2023-28252 · GHSA-385j-3gwh-pjgr

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.48892 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11 CWE-122

TI-2023-09222 CVE-2023-23376 · GHSA-j6mx-66rf-6rxq

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.10853 Published 2023-02-14 Fixed in 10.0.10240.19747, 10.0.14393.5717 +11 CWE-122

TI-2023-08201 CVE-2023-21823 · GHSA-7ggm-m49m-ff38

Windows Graphics Component Remote Code Execution Vulnerability

CRITICAL 93KEV

Windows Graphics Component Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.05563 Published 2023-02-14 Fixed in 16.0.16130.20156, 2.70.23021003 +14 CWE-190

TI-2023-07949 CVE-2023-21554 · GHSA-xvhr-xr27-hpmq

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CRITICAL 93

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.95412 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11 CWE-20

TI-2022-19647 CVE-2022-41125 · GHSA-5vr9-7945-27pf

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.03046 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +10 CWE-787

TI-2022-19604 CVE-2022-41073 · GHSA-6xmp-59j9-c5x2

Windows Print Spooler Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Print Spooler Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.02627 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +12 CWE-787

TI-2022-19574 CVE-2022-41033 · GHSA-qjvf-mwxj-x748

Windows COM+ Event System Service Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows COM+ Event System Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01886 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11 CWE-843

TI-2022-17744 CVE-2022-38028 · GHSA-5vrq-5cmx-xwfc

Windows Print Spooler Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Print Spooler Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.14949 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +9

TI-2022-17688 CVE-2022-37969 · GHSA-vp7q-rg64-pxr9

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.28483 Published 2022-09-13 Fixed in 10.0.17763.3406, 10.0.19043.2006 +10 CWE-787

TI-2022-15525 CVE-2022-34713 · GHSA-86f2-7h4r-pc7m

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

CRITICAL 93KEV

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.67757 Published 2022-08-09 Fixed in 10.0.17763.3287, 10.0.19043.1889 +9

TI-2022-12457 CVE-2022-30190 · GHSA-4r9q-wqcj-x85j

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

CRITICAL 93KEV

A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.99163 Published 2022-06-01 Fixed in 10.0.17763.3046, 10.0.19043.1766 +9

TI-2022-08387 CVE-2022-24521 · GHSA-59qr-cc8f-v837

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.07134 Published 2022-04-15 Fixed in 10.0.17763.2803, 10.0.18363.2212 +11 CWE-787

TI-2022-06968 CVE-2022-22718 · GHSA-r854-85qm-m3f9

Windows Print Spooler Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Print Spooler Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.18464 Published 2022-02-09 Fixed in 10.0.17763.2565, 10.0.18363.2094 +11

TI-2022-06398 CVE-2022-22047 · GHSA-p4j8-4hv2-8733

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.18765 Published 2022-07-12 Fixed in 10.0.17763.3165, 10.0.19043.1826 +10 CWE-426

TI-2022-06356 CVE-2022-21999 · GHSA-9cr3-63pg-942x

Windows Print Spooler Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Print Spooler Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.41007 Published 2022-02-09 Fixed in 10.0.17763.2565, 10.0.18363.2094 +11 CWE-22

Open these records in search →

Critical	2330
High	10410
Medium	5035
Low	270
No CVSS	1