Microsoft

Records18046All Threatist records

Exploited (KEV)406In CISA KEV

CVSS critical2330CVSS 9.0–10.0

CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability CRITICAL 99KEV 2026-10-27 TI-2026-73128 Microsoft Windows Command Injection Vulnerability CRITICAL 97KEV 2026-10-13 TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability CRITICAL 97KEV 2026-09-25 TI-2026-56567 Microsoft Windows Link Following Vulnerability CRITICAL 93KEV 2026-09-08 TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability CRITICAL 93KEV 2026-09-08 TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records

Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

273 records in Windows Server · all components

TI-2022-06273 CVE-2022-21907 · GHSA-cgqq-62rg-6vmf

HTTP Protocol Stack Remote Code Execution Vulnerability

CRITICAL 92

HTTP Protocol Stack Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.9279 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.19043.1466 +4

TI-2022-10168 CVE-2022-26937 · GHSA-982c-jgv5-r7gp

Windows Network File System Remote Code Execution Vulnerability

HIGH 81

Windows Network File System Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.75974 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.20348.707 +6

TI-2022-06260 CVE-2022-21894 · GHSA-q5c9-xwjv-3hcq

Secure Boot Security Feature Bypass Vulnerability

HIGH 80

Secure Boot Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.09116 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +9 CWE-863

TI-2022-06331 CVE-2022-21972 · GHSA-h7pq-fm7p-5x88

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

HIGH 75

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.79347 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +10

TI-2022-07395 CVE-2022-23270 · GHSA-gcc8-9qcm-vmc4

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

HIGH 73

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.7035 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +10

TI-2022-06206 CVE-2022-21836 · GHSA-f2f4-79fq-q8j8

Windows Certificate Spoofing Vulnerability

HIGH 69

Windows Certificate Spoofing Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00721 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +11 CWE-295

TI-2021-19675 CVE-2021-43883 · GHSA-rxvx-2jq5-pc48

Windows Installer Elevation of Privilege Vulnerability

HIGH 69

Windows Installer Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.12148 Published 2021-12-15 Fixed in 10.0.17763.2366, 10.0.18363.1977 +13

TI-2021-19248 CVE-2021-43240 · GHSA-gqqh-5jqj-j85x

NTFS Set Short Name Elevation of Privilege Vulnerability

HIGH 69

NTFS Set Short Name Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00571 Published 2021-12-15 Fixed in 10.0.18363.1977, 10.0.19043.1415 +5

TI-2018-06102 CVE-2018-8420 · GHSA-43x2-2pcr-g799

XML external entity injection in Microsoft Windows 7

HIGH 69

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windo…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.48901 Published 2018-09-13 No fix listed CWE-611

TI-2009-00545 CVE-2009-0568 · GHSA-q3p5-hhw7-66hg

The RPC Marshalling Engine (aka NDR) in Microsoft Windows 2000 SP4, XP SP2 and SP3…

HIGH 67

The RPC Marshalling Engine (aka NDR) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly maintain its internal state, which allows remote attack…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.32387 Published 2009-06-10 No fix listed CWE-264

TI-2009-01075 CVE-2009-1133 · GHSA-x679-rfx3-vg73

Heap-based buffer overflow in Microsoft Remote Desktop Connection (formerly Terminal…

MEDIUM 64

Heap-based buffer overflow in Microsoft Remote Desktop Connection (formerly Terminal Services Client) running RDP 5.0 through 6.1 on Windows, and Remote Desktop Connection Client for Mac 2.0, allows remote attackers to e…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.30496 Published 2009-08-12 No fix listed CWE-119

TI-2009-00215 CVE-2009-0230 · GHSA-g9jh-6pvh-p2rv

The Windows Print Spooler in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2…

MEDIUM 64

The Windows Print Spooler in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allows remote authenticated users to gain privileges via a crafted RPC message that…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.34878 Published 2009-06-10 No fix listed CWE-264

TI-2022-07379 CVE-2022-23253 · GHSA-p37w-7mr9-5x89

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

MEDIUM 62

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.56376 Published 2022-03-09 Fixed in 10.0.17763.2686, 10.0.18363.2158 +10

TI-2022-06350 CVE-2022-21993 · GHSA-v84f-rwh8-v99h

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability

MEDIUM 62

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.43618 Published 2022-02-09 Fixed in 10.0.17763.2565, 10.0.18363.2094 +9

TI-2021-08231 CVE-2021-26414 · GHSA-3r2g-rwx7-4qwp

Windows DCOM Server Security Feature Bypass

MEDIUM 60

Windows DCOM Server Security Feature Bypass

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.49844 Published 2021-06-08 Fixed in 10.0.17763.4131, 10.0.18363.2344 +13

TI-2022-07409 CVE-2022-23285 · GHSA-6m6p-38qr-9hqw

Remote Desktop Client Remote Code Execution Vulnerability

MEDIUM 59

Remote Desktop Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.25628 Published 2022-03-09 Fixed in 10.0.17763.2686, 10.0.18363.2158 +9

TI-2018-06044 CVE-2018-8350 · GHSA-5x4c-mvw4-g6hr

A remote code execution vulnerability exists when Microsoft Windows PDF Library…

MEDIUM 57

A remote code execution vulnerability exists when Microsoft Windows PDF Library improperly handles objects in memory, aka "Windows PDF Remote Code Execution Vulnerability." This affects Windows 10 Servers, Windows 10.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.19773 Published 2018-08-15 No fix listed

TI-2022-06347 CVE-2022-21990 · GHSA-586w-pwc3-98vf

Remote Desktop Client Remote Code Execution Vulnerability

MEDIUM 56

Remote Desktop Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.18842 Published 2022-03-09 Fixed in 10.0.17763.2686, 10.0.18363.2158 +12

TI-2018-06028 CVE-2018-8332 · GHSA-4vv4-p383-vwpv

A remote code execution vulnerability exists when the Windows font library improperly…

MEDIUM 56

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Win32k Graphics Remote Code Execution Vulnerability." This affects Windows 7, Microsoft…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.1907 Published 2018-09-13 No fix listed

TI-2022-06248 CVE-2022-21881 · GHSA-3qjg-v5jw-mj3f

Windows Kernel Elevation of Privilege Vulnerability

MEDIUM 55

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.24515 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +8 CWE-362

TI-2022-08369 CVE-2022-24502 · GHSA-mcmv-w2jg-7fvh

Windows HTML Platforms Security Feature Bypass Vulnerability

MEDIUM 54

Windows HTML Platforms Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.33063 Published 2022-03-09 Fixed in 10.0.17763.2686, 10.0.18363.2158 +11

TI-2022-06219 CVE-2022-21849 · GHSA-7gmw-8gxm-r73q

Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability

MEDIUM 52

Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06592 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +6

TI-2021-19226 CVE-2021-43217 · GHSA-q33m-rrqm-6xhw

Windows Encrypting File System (EFS) Remote Code Execution Vulnerability

MEDIUM 52

Windows Encrypting File System (EFS) Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0652 Published 2021-12-15 Fixed in 10.0.17763.2366, 10.0.18363.1977 +13

TI-2022-11676 CVE-2022-29130 · GHSA-qjg2-f326-rjmh

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

MEDIUM 50

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03932 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +10

TI-2022-06369 CVE-2022-22012 · GHSA-x48p-wmq2-jh5f

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

MEDIUM 50

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04176 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +10

Open these records in search →