Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV
TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2026-73128 Microsoft Windows Command Injection Vulnerability Priority CRITICAL 97KEV 2026-10-13TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability Priority CRITICAL 97KEV 2026-09-25TI-2026-56567 Microsoft Windows Link Following Vulnerability Priority CRITICAL 93KEV 2026-09-08TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability Priority CRITICAL 93KEV 2026-09-08TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability Priority CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records
Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

827 records in Windows Vista · all components

TI-2008-04072 CVE-2008-4250 · GHSA-3v68-r58v-m4c2

The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and…

Priority CRITICAL 100KEV

The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.98751 Published 2008-10-23 No fix listed CWE-119
TI-2016-06245 CVE-2016-7256 · GHSA-cx4j-72f6-rmxr

atmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008…

Priority CRITICAL 97KEV

atmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.64591 Published 2016-11-10 No fix listed
TI-2015-02132 CVE-2015-2426 · GHSA-7w6v-23gr-722w

Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft…

Priority CRITICAL 97KEV

Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Wind…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.86576 Published 2015-07-20 No fix listed CWE-124
TI-2015-02077 CVE-2015-2360 · GHSA-259r-5hvg-4f6x

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2…

Priority CRITICAL 97KEV

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Wi…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.1484 Published 2015-06-10 No fix listed CWE-416
TI-2014-05208 CVE-2014-6332 · GHSA-w64p-pvrc-c5w3

OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows…

Priority CRITICAL 97KEV

OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.94918 Published 2014-11-11 No fix listed CWE-119
TI-2014-03387 CVE-2014-4148 · GHSA-4wxx-xmrx-3xq9

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista…

Priority CRITICAL 97KEV

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Go…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.5985 Published 2014-10-15 No fix listed CWE-94
TI-2013-03421 CVE-2013-3918 · GHSA-7627-vgq8-rcjv

The InformationCardSigninHelper Class ActiveX control in icardie.dll in Microsoft Windows…

Priority CRITICAL 97KEV

The InformationCardSigninHelper Class ActiveX control in icardie.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.73693 Published 2013-11-12 No fix listed CWE-787
TI-2011-03009 CVE-2011-3402 · GHSA-qv6f-65c9-qp9p

Unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the…

Priority CRITICAL 97KEV

Unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.78138 Published 2011-11-04 No fix listed
TI-2015-02238 CVE-2015-2546 · GHSA-5c8h-c2cj-96mm

The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2…

Priority CRITICAL 95KEV

The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows local user…

CVSS 3.1HIGH 8.2 Local Low privileges User interaction EPSS 0.10107 Published 2015-09-09 No fix listed CWE-119
TI-2014-01417 CVE-2014-1812 · GHSA-cm2m-vv5g-hpc2

The Group Policy implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2…

Priority CRITICAL 95KEV

The Group Policy implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 does not properly handle distribution of pass…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.65117 Published 2014-05-14 No fix listed CWE-522
TI-2017-00184 CVE-2017-0199 · GHSA-mrf9-75pc-cjmm

Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1…

Priority CRITICAL 93KEV

Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1 allow remote attackers to execute a…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.99497 Published 2017-04-12 No fix listed
TI-2017-00094 CVE-2017-0101 · GHSA-5cr3-r8pg-5j63

Memory corruption in Microsoft Windows

Priority CRITICAL 93KEV

The kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1; Windows 10 Gold, 1511, and 1607;…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.57482 Published 2017-03-17 No fix listed CWE-119
TI-2017-00005 CVE-2017-0005 · GHSA-8w8f-9j37-53m3

The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008…

Priority CRITICAL 93KEV

The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 all…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.11022 Published 2017-03-17 No fix listed
TI-2017-00001 CVE-2017-0001 · GHSA-3jwp-gjhp-77f3

The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008…

Priority CRITICAL 93KEV

The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 all…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.03114 Published 2017-03-17 No fix listed
TI-2016-02783 CVE-2016-3309 · GHSA-7cmx-3w9q-4v5g

The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2…

Priority CRITICAL 93KEV

The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local use…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.20467 Published 2016-08-09 No fix listed
TI-2016-00158 CVE-2016-0185 · GHSA-76r4-g8fm-62pc

Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, and Windows 8.1 allows remote…

Priority CRITICAL 93KEV

Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, and Windows 8.1 allows remote attackers to execute arbitrary code via a crafted Media Center link (aka .mcl) file, aka "Windows Media Center Remote Code Executi…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.69846 Published 2016-05-11 No fix listed
TI-2016-00080 CVE-2016-0099 · GHSA-fq5j-826m-h5wc

The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and…

Priority CRITICAL 93KEV

The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 does not properly…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.37045 Published 2016-03-09 No fix listed CWE-120
TI-2015-02103 CVE-2015-2387 · GHSA-35f2-76rg-h8vq

ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server 2003 SP2…

Priority CRITICAL 93KEV

ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Win…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.34878 Published 2015-07-14 No fix listed CWE-787
TI-2015-01523 CVE-2015-1701 · GHSA-rq9p-fw9r-ppg4

Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2…

Priority CRITICAL 93KEV

Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in April 2015, aka "Win…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.55923 Published 2015-04-21 No fix listed
TI-2015-00014 CVE-2015-0016 · GHSA-59ww-48gw-2fpx

Directory traversal vulnerability in the TS WebProxy (aka TSWbPrxy) component in…

Priority CRITICAL 93KEV

Directory traversal vulnerability in the TS WebProxy (aka TSWbPrxy) component in Microsoft Windows Vista SP2, Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Window…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.75777 Published 2015-01-13 No fix listed CWE-22
Load more
Open these records in search →