Microsoft

Records18046All Threatist records

Exploited (KEV)406In CISA KEV

CVSS critical2330CVSS 9.0–10.0

CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability CRITICAL 99KEV 2026-10-27 TI-2026-73128 Microsoft Windows Command Injection Vulnerability CRITICAL 97KEV 2026-10-13 TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability CRITICAL 97KEV 2026-09-25 TI-2026-56567 Microsoft Windows Link Following Vulnerability CRITICAL 93KEV 2026-09-08 TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability CRITICAL 93KEV 2026-09-08 TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records

Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

1001 records in Windows 11 21h2 · all components

TI-2024-29106 CVE-2024-43461 · GHSA-7q6v-68mf-6678

Windows MSHTML Platform Spoofing Vulnerability

CRITICAL 97KEV

Windows MSHTML Platform Spoofing Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.54486 Published 2024-09-10 Fixed in 10.0.10240.20766, 10.0.14393.7336 +13 CWE-451

TI-2024-19802 CVE-2024-30040 · GHSA-mmh4-cvwv-5vmm

Windows MSHTML Platform Security Feature Bypass Vulnerability

CRITICAL 97KEV

Windows MSHTML Platform Security Feature Bypass Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03939 Published 2024-05-14 Fixed in 10.0.17763.5820, 10.0.20348.2461 +8 CWE-20

TI-2024-19751 CVE-2024-29988 · GHSA-qpqh-hxc9-r48w

SmartScreen Prompt Security Feature Bypass Vulnerability

CRITICAL 97KEV

SmartScreen Prompt Security Feature Bypass Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.45151 Published 2024-04-09 Fixed in 10.0.17763.5696, 10.0.20348.2402 +6 CWE-693

TI-2023-18080 CVE-2023-36025 · GHSA-4jff-227j-6g3v

Windows SmartScreen Security Feature Bypass Vulnerability

CRITICAL 97KEV

Windows SmartScreen Security Feature Bypass Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.88196 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +12

TI-2023-15353 CVE-2023-32049 · GHSA-8q3q-pcch-j42x

Windows SmartScreen Security Feature Bypass Vulnerability

CRITICAL 97KEV

Windows SmartScreen Security Feature Bypass Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04156 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +5

TI-2023-08061 CVE-2023-21674 · GHSA-hqxf-h392-6m7w

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

CRITICAL 97KEV

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.34206 Published 2023-01-10 Fixed in 10.0.17763.3887, 10.0.20348.1487 +8 CWE-416

TI-2022-19649 CVE-2022-41128 · GHSA-778m-x5h7-mg59

Windows Scripting Languages Remote Code Execution Vulnerability

CRITICAL 97KEV

Windows Scripting Languages Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.24623 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +11 CWE-787

TI-2022-10154 CVE-2022-26923 · GHSA-j9xf-76vv-4wcg

Active Directory Domain Services Elevation of Privilege Vulnerability

CRITICAL 97KEV

Active Directory Domain Services Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.835 Published 2022-05-10 Fixed in 10.0.17763.4252, 10.0.18363.2274 +8 CWE-295

TI-2021-13550 CVE-2021-34527 · GHSA-75f9-mm5v-2rgm

Windows Print Spooler Remote Code Execution Vulnerability

CRITICAL 97KEV

A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.99792 Published 2021-07-02 Fixed in 10.0.10240.18969, 10.0.14393.4470 +11

TI-2023-13752 CVE-2023-29360 · GHSA-mfpj-f925-v5gx

Microsoft Streaming Service Elevation of Privilege Vulnerability

CRITICAL 96KEV

Microsoft Streaming Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.2162 Published 2023-06-13 Fixed in 10.0.17763.4499, 10.0.20348.1787 +5 CWE-822

TI-2013-03406 CVE-2013-3900 · GHSA-8cj2-jg77-qj2p

WinVerifyTrust Signature Validation Vulnerability

CRITICAL 95KEV

Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in a…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.44647 Published 2013-12-11 No fix listed CWE-347

TI-2024-14172 CVE-2024-21412 · GHSA-2mmw-g99r-5x3v

Internet Shortcut Files Security Feature Bypass Vulnerability

CRITICAL 94KEV

Internet Shortcut Files Security Feature Bypass Vulnerability

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.9941 Published 2024-02-13 Fixed in 10.0.17763.5458, 10.0.19044.4046 +6 CWE-693

TI-2024-29203 CVE-2024-43572 · GHSA-vw7j-3h6f-xqvx

Microsoft Management Console Remote Code Execution Vulnerability

CRITICAL 93KEV

Microsoft Management Console Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.66695 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +13 CWE-707

TI-2024-25474 CVE-2024-38193 · GHSA-82w9-g9wm-675r

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.28739 Published 2024-08-13 Fixed in 10.0.26100.1457, 10.0.17763.6189 +13 CWE-416

TI-2024-25394 CVE-2024-38107 · GHSA-qg9j-4424-vrp7

Windows Power Dependency Coordinator Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Power Dependency Coordinator Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01635 Published 2024-08-13 Fixed in 10.0.17763.6189, 10.0.20348.2655 +11 CWE-416

TI-2024-25369 CVE-2024-38080 · GHSA-h6q6-38gw-44cx

Windows Hyper-V Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Hyper-V Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.07058 Published 2024-07-09 Fixed in 10.0.20348.2582, 10.0.22000.3079 +3 CWE-190

TI-2024-25307 CVE-2024-38014 · GHSA-mvx5-3q3c-pr6w

Windows Installer Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Installer Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.06263 Published 2024-09-10 Fixed in 10.0.10240.20766, 10.0.14393.7336 +13 CWE-269

TI-2024-23318 CVE-2024-35250 · GHSA-98g3-x4rc-fj4g

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.25222 Published 2024-06-11 Fixed in 10.0.10240.20680, 10.0.14393.7070 +12 CWE-822

TI-2024-19813 CVE-2024-30051 · GHSA-rq9g-8pvx-hrqx

Windows DWM Core Library Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows DWM Core Library Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.05687 Published 2024-05-14 Fixed in 10.0.17763.5820, 10.0.20348.2461 +7 CWE-122

TI-2024-17259 CVE-2024-26169 · GHSA-v6c8-v4w6-r8wx

Windows Error Reporting Service Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Error Reporting Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.04014 Published 2024-03-12 Fixed in 10.0.17763.5576, 10.0.20348.2340 +9 CWE-269

TI-2024-14098 CVE-2024-21338 · GHSA-jqrq-gqwg-r8r5

Windows Kernel Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.5981 Published 2024-02-13 Fixed in 10.0.17763.5458, 10.0.19044.4046 +6 CWE-822

TI-2023-18662 CVE-2023-36874 · GHSA-j95h-qvx8-jp23

Windows Error Reporting Service Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Error Reporting Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.42564 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-59

TI-2023-18596 CVE-2023-36802 · GHSA-4v34-9x49-p452

Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

CRITICAL 93KEV

Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.27909 Published 2023-09-12 Fixed in 10.0.17763.4851, 10.0.20348.1970 +4 CWE-416

TI-2023-18284 CVE-2023-36424 · GHSA-5wf7-vwpm-xxwx

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.12087 Published 2023-11-14 Fixed in 10.0.22631.2715, 10.0.25398.531 +12 CWE-125

TI-2023-18090 CVE-2023-36036 · GHSA-pmq2-r54m-hmf6

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.1667 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +12 CWE-122

Open these records in search →

Critical	2330
High	10410
Medium	5035
Low	270
No CVSS	1