Microsoft

Records18046All Threatist records

Exploited (KEV)406In CISA KEV

CVSS critical2330CVSS 9.0–10.0

CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability CRITICAL 99KEV 2026-10-27 TI-2026-73128 Microsoft Windows Command Injection Vulnerability CRITICAL 97KEV 2026-10-13 TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability CRITICAL 97KEV 2026-09-25 TI-2026-56567 Microsoft Windows Link Following Vulnerability CRITICAL 93KEV 2026-09-08 TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability CRITICAL 93KEV 2026-09-08 TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records

Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

254 records in Windows 8 · all components

TI-2015-01465 CVE-2015-1635 · GHSA-p8wc-6g47-vh8j

HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1…

CRITICAL 100KEV

HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted HTTP requests, aka "HTTP.sys Remo…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99999 Published 2015-04-14 No fix listed CWE-94

TI-2015-02132 CVE-2015-2426 · GHSA-7w6v-23gr-722w

Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft…

CRITICAL 97KEV

Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Wind…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.86576 Published 2015-07-20 No fix listed CWE-124

TI-2015-02077 CVE-2015-2360 · GHSA-259r-5hvg-4f6x

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2…

CRITICAL 97KEV

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Wi…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.1484 Published 2015-06-10 No fix listed CWE-416

TI-2014-05208 CVE-2014-6332 · GHSA-w64p-pvrc-c5w3

OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows…

CRITICAL 97KEV

OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.94918 Published 2014-11-11 No fix listed CWE-119

TI-2014-05200 CVE-2014-6324 · GHSA-j28h-3q4c-49h2

The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows…

CRITICAL 97KEV

The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows re…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.87335 Published 2014-11-18 No fix listed

TI-2014-03387 CVE-2014-4148 · GHSA-4wxx-xmrx-3xq9

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista…

CRITICAL 97KEV

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Go…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.5985 Published 2014-10-15 No fix listed CWE-94

TI-2013-03421 CVE-2013-3918 · GHSA-7627-vgq8-rcjv

The InformationCardSigninHelper Class ActiveX control in icardie.dll in Microsoft Windows…

CRITICAL 97KEV

The InformationCardSigninHelper Class ActiveX control in icardie.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.73693 Published 2013-11-12 No fix listed CWE-787

TI-2015-02238 CVE-2015-2546 · GHSA-5c8h-c2cj-96mm

The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2…

CRITICAL 95KEV

The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows local user…

CVSS 3.1HIGH 8.2 Local Low privileges User interaction EPSS 0.10107 Published 2015-09-09 No fix listed CWE-119

TI-2014-01417 CVE-2014-1812 · GHSA-cm2m-vv5g-hpc2

The Group Policy implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2…

CRITICAL 95KEV

The Group Policy implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 does not properly handle distribution of pass…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.65117 Published 2014-05-14 No fix listed CWE-522

TI-2015-02103 CVE-2015-2387 · GHSA-35f2-76rg-h8vq

ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server 2003 SP2…

CRITICAL 93KEV

ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Win…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.34878 Published 2015-07-14 No fix listed CWE-787

TI-2015-00014 CVE-2015-0016 · GHSA-59ww-48gw-2fpx

Directory traversal vulnerability in the TS WebProxy (aka TSWbPrxy) component in…

CRITICAL 93KEV

Directory traversal vulnerability in the TS WebProxy (aka TSWbPrxy) component in Microsoft Windows Vista SP2, Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Window…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.75777 Published 2015-01-13 No fix listed CWE-22

TI-2014-05227 CVE-2014-6352 · GHSA-hcj8-r3vf-4jr7

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows…

CRITICAL 93KEV

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to execute arbitrary code via a…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.77485 Published 2014-10-22 No fix listed

TI-2014-03364 CVE-2014-4114 · GHSA-3hff-6c4j-j2w5

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows…

CRITICAL 93KEV

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.81628 Published 2014-10-15 No fix listed

TI-2014-03363 CVE-2014-4113 · GHSA-wjjh-xg7v-8wf9

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista…

CRITICAL 93KEV

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.86648 Published 2014-10-15 No fix listed

TI-2013-03202 CVE-2013-3660 · GHSA-f2wh-c6mm-3vrx

The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in…

CRITICAL 93KEV

The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8,…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.39318 Published 2013-05-24 No fix listed CWE-119

TI-2015-01587 CVE-2015-1769 · GHSA-fj6j-88c7-c8gx

Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows…

CRITICAL 88KEV

Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 mishandles symlinks, which…

CVSS 3.1MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.04078 Published 2015-08-15 No fix listed CWE-264

TI-2015-00012 CVE-2015-0014 · GHSA-79p7-jrh4-232r

Buffer overflow in the Telnet service in Microsoft Windows Server 2003 SP2, Windows Vista…

CRITICAL 87

Buffer overflow in the Telnet service in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.96893 Published 2015-01-13 No fix listed CWE-119

TI-2014-05197 CVE-2014-6321 · GHSA-fv59-6vgm-w859

Schannel in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2…

CRITICAL 87

Schannel in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote atta…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.95988 Published 2014-11-11 No fix listed CWE-94

TI-2015-02206 CVE-2015-2509 · GHSA-cvw5-r6p2-vxj5

Windows Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8, and…

HIGH 78

Windows Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8, and Windows 8.1 allows user-assisted remote attackers to execute arbitrary code via a crafted Media Center link (mcl) file, aka "Windows Medi…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.71044 Published 2015-09-09 No fix listed CWE-284

TI-2015-00088 CVE-2015-0096 · GHSA-hq49-4fx9-hw5v

Untrusted search path vulnerability in Microsoft Windows Server 2003 SP2, Windows Vista…

HIGH 78

Untrusted search path vulnerability in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.70964 Published 2015-03-11 No fix listed CWE-426

TI-2013-02775 CVE-2013-3183 · GHSA-8hmm-rcg3-cjjj

The TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2…

HIGH 74

The TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly perform memory allocation for inbound ICMPv6 p…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.78096 Published 2013-08-14 No fix listed CWE-119

TI-2015-05186 CVE-2015-6132 · GHSA-m7p9-cxf7-cf34

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows…

HIGH 73

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandle library loading, wh…

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.84701 Published 2015-12-09 No fix listed CWE-264

TI-2013-03400 CVE-2013-3894 · GHSA-vrrw-m6qm-j235

The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2…

HIGH 72

The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allow remote atta…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.43101 Published 2013-10-09 No fix listed CWE-94

TI-2013-02728 CVE-2013-3128 · GHSA-cp6p-w36w-x52m

The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2…

HIGH 71

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.50374 Published 2013-10-09 No fix listed

TI-2013-00029 CVE-2013-0075 · GHSA-8cj6-498x-25v9

The TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2…

HIGH 71

The TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows remote attackers to cause a denial of servi…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.69936 Published 2013-02-13 No fix listed

Open these records in search →

Critical	2330
High	10410
Medium	5035
Low	270
No CVSS	1