Microsoft

Records18046All Threatist records

Exploited (KEV)406In CISA KEV

CVSS critical2330CVSS 9.0–10.0

CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability CRITICAL 99KEV 2026-10-27 TI-2026-73128 Microsoft Windows Command Injection Vulnerability CRITICAL 97KEV 2026-10-13 TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability CRITICAL 97KEV 2026-09-25 TI-2026-56567 Microsoft Windows Link Following Vulnerability CRITICAL 93KEV 2026-09-08 TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability CRITICAL 93KEV 2026-09-08 TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records

Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

573 records in Windows 11 · all components

TI-2021-17499 CVE-2021-40449 · GHSA-qjf4-g2gg-w6pq

Win32k Elevation of Privilege Vulnerability

CRITICAL 93KEV

Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.81936 Published 2021-10-13 Fixed in 10.0.17763.2237, 10.0.18363.1854 +10 CWE-416

TI-2022-10056 CVE-2022-26809 · GHSA-q2wc-9mx8-xr8j

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CRITICAL 92

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.90859 Published 2022-04-15 Fixed in 10.0.17763.2803, 10.0.18363.2212 +11

TI-2022-06273 CVE-2022-21907 · GHSA-cgqq-62rg-6vmf

HTTP Protocol Stack Remote Code Execution Vulnerability

CRITICAL 92

HTTP Protocol Stack Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.9279 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.19043.1466 +4

TI-2022-15533 CVE-2022-34721 · GHSA-hppf-3fwv-wwmm

Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability

CRITICAL 88

Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.76732 Published 2022-09-13 Fixed in 10.0.17763.3406, 10.0.19043.2006 +10

TI-2023-08140 CVE-2023-21758 · GHSA-qqg4-gm3f-2r2x

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

HIGH 82

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.92529 Published 2023-01-10 Fixed in 10.0.17763.3887, 10.0.20348.1487 +7 CWE-476

TI-2022-12476 CVE-2022-30216 · GHSA-gpxc-hjqg-f39p

Windows Server Service Tampering Vulnerability

HIGH 80

Windows Server Service Tampering Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.88617 Published 2022-07-12 Fixed in 10.0.19043.1826, 10.0.20348.825 +3 CWE-434

TI-2022-06260 CVE-2022-21894 · GHSA-q5c9-xwjv-3hcq

Secure Boot Security Feature Bypass Vulnerability

HIGH 80

Secure Boot Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.09116 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +9 CWE-863

TI-2022-17678 CVE-2022-37958 · GHSA-w9jc-m3x9-g758

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

HIGH 77

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.86383 Published 2022-09-13 Fixed in 10.0.17763.3406, 10.0.19043.2006 +9

TI-2022-15530 CVE-2022-34718 · GHSA-56jv-75wp-q86w

Windows TCP/IP Remote Code Execution Vulnerability

HIGH 76

Windows TCP/IP Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.56865 Published 2022-09-13 Fixed in 10.0.17763.3406, 10.0.19043.2006 +10

TI-2022-06331 CVE-2022-21972 · GHSA-h7pq-fm7p-5x88

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

HIGH 75

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.79347 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +10

TI-2022-12437 CVE-2022-30165 · GHSA-4v3j-q36m-pfpg

Windows Kerberos Elevation of Privilege Vulnerability

HIGH 73

Windows Kerberos Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.05094 Published 2022-06-15 Fixed in 10.0.17763.3046, 10.0.19043.1766 +4

TI-2022-07395 CVE-2022-23270 · GHSA-gcc8-9qcm-vmc4

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

HIGH 73

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.7035 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +10

TI-2023-08150 CVE-2023-21768 · GHSA-j69v-7pj3-vg67

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

HIGH 72

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.65417 Published 2023-01-10 Fixed in 10.0.20348.1487, 10.0.22000.1455 +1 CWE-822

TI-2022-19606 CVE-2022-41076 · GHSA-hcfw-r2rr-7g6c

PowerShell Remote Code Execution Vulnerability

HIGH 71

PowerShell Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.60779 Published 2022-12-13 Fixed in 7.2.8, 7.3.1 +14

TI-2022-22007 CVE-2022-44710 · GHSA-qf3p-7jh5-jmr8

DirectX Graphics Kernel Elevation of Privilege Vulnerability

HIGH 69

DirectX Graphics Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00562 Published 2022-12-13 Fixed in 10.0.22621.993

TI-2022-17759 CVE-2022-38044 · GHSA-j4hm-f2fm-2737

Windows CD-ROM File System Driver Remote Code Execution Vulnerability

HIGH 69

Windows CD-ROM File System Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.56269 Published 2022-10-11 Fixed in 10.0.22621.674, 10.0.19042.2130 +11

TI-2022-16210 CVE-2022-35768 · GHSA-vq2h-cpgf-cp92

Windows Kernel Elevation of Privilege Vulnerability

HIGH 69

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01085 Published 2022-08-09 Fixed in 10.0.17763.3287, 10.0.19043.1889 +10 CWE-269

TI-2022-15519 CVE-2022-34707 · GHSA-rv6c-672j-cj29

Windows Kernel Elevation of Privilege Vulnerability

HIGH 69

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01335 Published 2022-08-09 Fixed in 10.0.17763.3287, 10.0.19043.1889 +10 CWE-416

TI-2022-12468 CVE-2022-30206 · GHSA-r965-729w-j5h7

Windows Print Spooler Elevation of Privilege Vulnerability

HIGH 69

Windows Print Spooler Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.02218 Published 2022-07-12 Fixed in 10.0.17763.3165, 10.0.19043.1826 +10

TI-2022-06206 CVE-2022-21836 · GHSA-f2f4-79fq-q8j8

Windows Certificate Spoofing Vulnerability

HIGH 69

Windows Certificate Spoofing Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00721 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +11 CWE-295

TI-2021-19675 CVE-2021-43883 · GHSA-rxvx-2jq5-pc48

Windows Installer Elevation of Privilege Vulnerability

HIGH 69

Windows Installer Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.12148 Published 2021-12-15 Fixed in 10.0.17763.2366, 10.0.18363.1977 +13

TI-2021-19248 CVE-2021-43240 · GHSA-gqqh-5jqj-j85x

NTFS Set Short Name Elevation of Privilege Vulnerability

HIGH 69

NTFS Set Short Name Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00571 Published 2021-12-15 Fixed in 10.0.18363.1977, 10.0.19043.1415 +5

TI-2022-08364 CVE-2022-24497 · GHSA-7jgq-4jfh-mw69

Windows Network File System Remote Code Execution Vulnerability

HIGH 68

Windows Network File System Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.34793 Published 2022-04-15 Fixed in 10.0.17763.2803, 10.0.18363.2212 +9

TI-2022-08358 CVE-2022-24491 · GHSA-c6f2-x332-pmpr

Windows Network File System Remote Code Execution Vulnerability

HIGH 67

Windows Network File System Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.33474 Published 2022-04-15 Fixed in 10.0.17763.2803, 10.0.18363.2212 +9

TI-2022-17674 CVE-2022-37954 · GHSA-qvx7-87cx-j4q2

DirectX Graphics Kernel Elevation of Privilege Vulnerability

HIGH 66

DirectX Graphics Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.45753 Published 2022-09-13 Fixed in 10.0.17763.3406, 10.0.19043.2006 +4

Open these records in search →