Microsoft

Records18046All Threatist records

Exploited (KEV)406In CISA KEV

CVSS critical2330CVSS 9.0–10.0

CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability CRITICAL 99KEV 2026-10-27 TI-2026-73128 Microsoft Windows Command Injection Vulnerability CRITICAL 97KEV 2026-10-13 TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability CRITICAL 97KEV 2026-09-25 TI-2026-56567 Microsoft Windows Link Following Vulnerability CRITICAL 93KEV 2026-09-08 TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability CRITICAL 93KEV 2026-09-08 TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records

Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

28 records in Windows Server 2004 · all components

TI-2021-11386 CVE-2021-31166 · GHSA-3mj9-c62w-jw5w

HTTP Protocol Stack Remote Code Execution Vulnerability

CRITICAL 100KEV

HTTP Protocol Stack Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99867 Published 2021-05-11 Fixed in 10.0.19041.982, 10.0.19042.982 CWE-416

TI-2020-01431 CVE-2020-1472 · GHSA-gc5h-xf3g-h5x4

Netlogon Elevation of Privilege Vulnerability

CRITICAL 100KEV

An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC).

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.99389 Published 2020-08-17 Partial fix · publication

TI-2021-18722 CVE-2021-42287 · GHSA-737r-5j68-97hh

Active Directory Domain Services Elevation of Privilege Vulnerability

CRITICAL 97KEV

Active Directory Domain Services Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.7717 Published 2021-11-10 Fixed in 6.1.7601.25769, 6.0.6003.21282 +6

TI-2021-17496 CVE-2021-40444 · GHSA-2h32-fhf6-xhh5

Microsoft MSHTML Remote Code Execution Vulnerability

CRITICAL 97KEV

Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.9784 Published 2021-09-15 Fixed in 10.0.10240.19060, 10.0.14393.4651 +10 CWE-22

TI-2021-13113 CVE-2021-33739 · GHSA-4mwq-m8xw-34mr

Microsoft DWM Core Library Elevation of Privilege Vulnerability

CRITICAL 96KEV

Microsoft DWM Core Library Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.06609 Published 2021-06-08 Fixed in 10.0.18363.1621, 10.0.19043.1052 +2

TI-2021-19234 CVE-2021-43226 · GHSA-98jh-5xvm-p5ph

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.03275 Published 2021-12-15 Fixed in 10.0.17763.2366, 10.0.18363.1977 +13

TI-2021-18198 CVE-2021-41379 · GHSA-hxf7-qh53-96j5

Windows Installer Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Installer Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.19452 Published 2021-11-10 Fixed in 10.0.10240.19119, 10.0.14393.4770 +11 CWE-59

TI-2021-18181 CVE-2021-41357 · GHSA-pph6-grp2-wvvw

Win32k Elevation of Privilege Vulnerability

CRITICAL 93KEV

Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01582 Published 2021-10-13 Fixed in 10.0.19043.1288, 10.0.20348.288 +3

TI-2021-17500 CVE-2021-40450 · GHSA-v7qc-rhmv-f6j4

Win32k Elevation of Privilege Vulnerability

CRITICAL 93KEV

Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01582 Published 2021-10-13 Fixed in 10.0.17763.2237, 10.0.18363.1854 +5

TI-2021-17499 CVE-2021-40449 · GHSA-qjf4-g2gg-w6pq

Win32k Elevation of Privilege Vulnerability

CRITICAL 93KEV

Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.81936 Published 2021-10-13 Fixed in 10.0.17763.2237, 10.0.18363.1854 +10 CWE-416

TI-2021-15031 CVE-2021-36955 · GHSA-g26f-6mx8-j24w

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.04071 Published 2021-09-15 Fixed in 10.0.10240.19060, 10.0.14393.4651 +10

TI-2021-15025 CVE-2021-36948 · GHSA-fcr2-qx8m-pfhp

Windows Update Medic Service Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Update Medic Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.2327 Published 2021-08-12 Fixed in 10.0.17763.2114, 10.0.18363.1734 +3

TI-2021-13514 CVE-2021-34486 · GHSA-793m-wq3j-whvr

Windows Event Tracing Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Event Tracing Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.09328 Published 2021-08-12 Fixed in 10.0.17763.2114, 10.0.18363.1734 +3 CWE-416

TI-2021-13512 CVE-2021-34484 · GHSA-mp6h-cxp8-82j6

Windows User Profile Service Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows User Profile Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.21827 Published 2021-08-12 Fixed in 10.0.10240.19022, 10.0.14393.4583 +9

TI-2021-13141 CVE-2021-33771 · GHSA-jv37-xg37-jxgp

Windows Kernel Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.10172 Published 2021-07-14 Fixed in 10.0.10240.19003, 10.0.14393.4530 +6

TI-2021-11966 CVE-2021-31979 · GHSA-rhcm-c7c7-5wq8

Windows Kernel Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0454 Published 2021-07-14 Fixed in 10.0.10240.19003, 10.0.14393.4530 +9 CWE-119

TI-2021-11943 CVE-2021-31956 · GHSA-jj4q-6c47-cggx

Windows NTFS Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows NTFS Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.22273 Published 2021-06-08 Fixed in 10.0.17763.1999, 10.0.18363.1621 +10 CWE-191

TI-2021-11417 CVE-2021-31199 · GHSA-j8p4-6frh-8hrj

Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

CRITICAL 93KEV

Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.02979 Published 2021-06-08 Fixed in 10.0.17763.1999, 10.0.18363.1621 +10

TI-2021-09473 CVE-2021-28310 · GHSA-8mmc-r5c6-h963

Win32k Elevation of Privilege Vulnerability

CRITICAL 93KEV

Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.08398 Published 2021-04-13 Fixed in publication CWE-787

TI-2021-01448 CVE-2021-1732 · GHSA-gvwr-5hrc-2gr5

Windows Win32k Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.78376 Published 2021-02-25 Fixed in publication CWE-787

TI-2021-01392 CVE-2021-1675 · GHSA-vwmm-qq95-vqhf

Windows Print Spooler Remote Code Execution Vulnerability

CRITICAL 93KEV

Windows Print Spooler Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.85305 Published 2021-06-08 Fixed in 10.0.17763.1999, 10.0.18363.1621 +10

TI-2020-01423 CVE-2020-1464 · GHSA-75g4-7255-wxgc

Windows Spoofing Vulnerability

CRITICAL 93KEV

A spoofing vulnerability exists when Windows incorrectly validates file signatures.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.38946 Published 2020-08-17 Fixed in publication CWE-347

TI-2020-00956 CVE-2020-0986 · GHSA-5wgx-4x92-f6pf

Out-of-bounds write in Microsoft Windows

CRITICAL 93KEV

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.16405 Published 2020-06-09 No fix listed CWE-787

TI-2021-18714 CVE-2021-42278 · GHSA-chp6-c7f5-h9w9

Active Directory Domain Services Elevation of Privilege Vulnerability

CRITICAL 92KEV

Active Directory Domain Services Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.73297 Published 2021-11-10 Fixed in 6.1.7601.25769, 6.0.6003.21282 +7

TI-2021-15020 CVE-2021-36942 · GHSA-p8qf-gcxq-47xm

Windows LSA Spoofing Vulnerability

CRITICAL 92KEV

Windows LSA Spoofing Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.66023 Published 2021-08-12 Fixed in 6.1.7601.25685, 6.0.6003.21192 +6

Open these records in search →

Critical	2330
High	10410
Medium	5035
Low	270
No CVSS	1