Microsoft
390 CVEs in CISA KEV — 117 with confirmed ransomware use
Products
| CVE | Product | CVSS | EPSS | Added | Due | Flags | Description |
|---|---|---|---|---|---|---|---|
CVE-2025-53770 |
SharePoint | — | 1.0000 | 2025-07-20 | 2025-07-21 | RW | Microsoft SharePoint Server on-premises contains a deserialization of untrusted |
CVE-2025-49704 |
SharePoint | — | 1.0000 | 2025-07-22 | 2025-07-23 | RW | Microsoft SharePoint contains a code injection vulnerability that could allow an |
CVE-2023-29357 |
SharePoint Server | — | 0.9998 | 2024-01-10 | 2024-01-31 | RW | Microsoft SharePoint Server contains an unspecified vulnerability that allows an |
CVE-2025-59287 |
Windows | — | 0.9998 | 2025-10-24 | 2025-11-14 | Microsoft Windows Server Update Service (WSUS) contains a deserialization of unt | |
CVE-2022-41082 |
Exchange Server | — | 0.9997 | 2022-09-30 | 2022-10-21 | RW | Microsoft Exchange Server contains an unspecified vulnerability that allows for |
CVE-2022-41040 |
Exchange Server | — | 0.9996 | 2022-09-30 | 2022-10-21 | RW | Microsoft Exchange Server allows for server-side request forgery. Dubbed "ProxyN |
CVE-2023-36884 |
Windows | — | 0.9944 | 2023-07-17 | 2023-08-29 | RW | Microsoft Windows Search contains an unspecified vulnerability that could allow |
CVE-2024-21412 |
Windows | — | 0.9941 | 2024-02-13 | 2024-03-05 | RW | Microsoft Windows Internet Shortcut Files contains an unspecified vulnerability |
CVE-2022-30190 |
Windows | — | 0.9916 | 2022-06-14 | 2022-07-05 | RW | A remote code execution vulnerability exists when MSDT is called using the URL p |
CVE-2025-49706 |
SharePoint | — | 0.9906 | 2025-07-22 | 2025-07-23 | RW | Microsoft SharePoint contains an improper authentication vulnerability that allo |
CVE-2024-29059 |
.NET Framework | — | 0.9862 | 2025-02-04 | 2025-02-25 | Microsoft .NET Framework contains an information disclosure vulnerability that e | |
CVE-2023-23397 |
Office | — | 0.9716 | 2023-03-14 | 2023-04-04 | Microsoft Office Outlook contains a privilege escalation vulnerability that allo | |
CVE-2024-21413 |
Office Outlook | — | 0.9466 | 2025-02-06 | 2025-02-27 | Microsoft Outlook contains an improper input validation vulnerability that allow | |
CVE-2023-41763 |
Skype for Business | — | 0.9055 | 2023-10-10 | 2023-10-31 | Microsoft Skype for Business contains an unspecified vulnerability that allows f | |
CVE-2023-36025 |
Windows | — | 0.8809 | 2023-11-14 | 2023-12-05 | Microsoft Windows SmartScreen contains a security feature bypass vulnerability t | |
CVE-2025-33053 |
Windows | — | 0.8701 | 2025-06-10 | 2025-07-01 | Microsoft Windows contains an external control of file name or path vulnerabilit | |
CVE-2023-24955 |
SharePoint Server | — | 0.8497 | 2024-03-26 | 2024-04-16 | RW | Microsoft SharePoint Server contains a code injection vulnerability that allows |
CVE-2024-43451 |
Windows | — | 0.8427 | 2024-11-12 | 2024-12-03 | Microsoft Windows contains an NTLMv2 hash spoofing vulnerability that could resu | |
CVE-2024-38112 |
Windows | — | 0.8423 | 2024-07-09 | 2024-07-30 | Microsoft Windows MSHTML Platform contains a spoofing vulnerability that has a h | |
CVE-2022-26923 |
Active Directory | — | 0.8350 | 2022-08-18 | 2022-09-08 | An authenticated user could manipulate attributes on computer accounts they own | |
CVE-2025-33073 |
Windows | — | 0.8270 | 2025-10-20 | 2025-11-10 | Microsoft Windows SMB Client contains an improper access control vulnerability t | |
CVE-2024-43468 |
Configuration Manager | — | 0.8104 | 2026-02-12 | 2026-03-05 | Microsoft Configuration Manager contains an SQL injection vulnerability. An unau | |
CVE-2026-45659 |
SharePoint Server | — | 0.8024 | 2026-07-01 | 2026-07-04 | RW | Microsoft SharePoint Server contains a deserialization of untrusted data vulnera |
CVE-2023-24880 |
Windows | — | 0.7801 | 2023-03-14 | 2023-04-04 | RW | Microsoft Windows SmartScreen contains a security feature bypass vulnerability t |
CVE-2022-41080 |
Exchange Server | — | 0.7733 | 2023-01-10 | 2023-01-31 | RW | Microsoft Exchange Server contains an unspecified vulnerability that allows for |
CVE-2026-33824 |
Internet Key Exchange (IKE) Service Extensions | — | 0.7705 | 2026-08-18 | 2026-08-21 | Microsoft Internet Key Exchange (IKE) Service Extensions contains a double free | |
CVE-2022-44698 |
Defender | — | 0.7627 | 2022-12-13 | 2023-01-03 | RW | Microsoft Defender SmartScreen contains a security feature bypass vulnerability |
CVE-2026-32202 |
Windows | 4.3 | 0.7090 | 2026-04-28 | 2026-05-12 | Microsoft Windows Shell contains a protection mechanism failure vulnerability th | |
CVE-2026-21509 |
Office | — | 0.7079 | 2026-01-26 | 2026-02-16 | Microsoft Office contains a security feature bypass vulnerability in which relia | |
CVE-2026-42897 |
Microsoft | 6.1 | 0.7066 | 2026-05-15 | 2026-05-29 | Microsoft Exchange Server contains a cross-site scripting vulnerability during w | |
CVE-2026-55040 |
SharePoint | 9.1 | 0.6954 | 2026-08-18 | 2026-08-21 | 5 PoC | Microsoft SharePoint contains a weak authentication vulnerability which allows a |
CVE-2024-30088 |
Windows | — | 0.6820 | 2024-10-15 | 2024-11-05 | RW | Microsoft Windows Kernel contains a time-of-check to time-of-use (TOCTOU) race c |
CVE-2022-34713 |
Windows | — | 0.6776 | 2022-08-09 | 2022-08-30 | A remote code execution vulnerability exists when Microsoft Windows MSDT is call | |
CVE-2024-43572 |
Windows | — | 0.6670 | 2024-10-08 | 2024-10-29 | Microsoft Windows Management Console contains unspecified vulnerability that all | |
CVE-2026-45498 |
Defender | — | 0.6308 | 2026-05-20 | 2026-06-03 | Microsoft Defender contains an unspecified vulnerability that allows for denial | |
CVE-2025-24054 |
Windows | — | 0.6227 | 2025-04-17 | 2025-05-08 | Microsoft Windows NTLM contains an external control of file name or path vulnera | |
CVE-2026-21510 |
Windows | — | 0.6124 | 2026-02-10 | 2026-03-03 | Microsoft Windows Shell contains a protection mechanism failure vulnerability th | |
CVE-2024-21338 |
Windows | — | 0.5981 | 2024-03-04 | 2024-03-25 | RW | Microsoft Windows Kernel contains an exposed IOCTL with insufficient access cont |
CVE-2023-21529 |
Exchange Server | — | 0.5929 | 2026-04-13 | 2026-04-27 | RW | Microsoft Exchange Server contains a deserialization of untrusted data that allo |
CVE-2024-43461 |
Windows | — | 0.5449 | 2024-09-16 | 2024-10-07 | Microsoft Windows MSHTML Platform contains a user interface (UI) misrepresentati | |
CVE-2024-38094 |
SharePoint | — | 0.5089 | 2024-10-22 | 2024-11-12 | RW | Microsoft SharePoint contains a deserialization vulnerability that allows for re |
CVE-2023-28252 |
Windows | — | 0.4889 | 2023-04-11 | 2023-05-02 | RW | Microsoft Windows Common Log File System (CLFS) driver contains an unspecified v |
CVE-2024-43573 |
Windows | — | 0.4611 | 2024-10-08 | 2024-10-29 | Microsoft Windows MSHTML Platform contains an unspecified spoofing vulnerability | |
CVE-2024-29988 |
SmartScreen Prompt | — | 0.4515 | 2024-04-30 | 2024-05-21 | Microsoft SmartScreen Prompt contains a security feature bypass vulnerability th | |
CVE-2026-32201 |
SharePoint Server | 6.5 | 0.4338 | 2026-04-14 | 2026-04-28 | Microsoft SharePoint Server contains an improper input validation vulnerability | |
CVE-2023-36874 |
Windows | — | 0.4256 | 2023-07-11 | 2023-08-01 | Microsoft Windows Error Reporting Service contains an unspecified vulnerability | |
CVE-2024-38178 |
Windows | — | 0.4138 | 2024-08-13 | 2024-09-03 | Microsoft Windows Scripting Engine contains a memory corruption vulnerability th | |
CVE-2023-29336 |
Win32k | — | 0.4118 | 2023-05-09 | 2023-05-30 | Microsoft Win32k contains an unspecified vulnerability that allows for privilege | |
CVE-2023-21674 |
Windows | — | 0.3421 | 2023-01-10 | 2023-01-31 | Microsoft Windows Advanced Local Procedure Call (ALPC) contains an unspecified v | |
CVE-2025-26633 |
Windows | — | 0.3039 | 2025-03-11 | 2025-04-01 | RW | Microsoft Windows Management Console (MMC) contains an improper neutralization v |
CVE-2026-20963 |
SharePoint | — | 0.2920 | 2026-03-18 | 2026-03-21 | Microsoft SharePoint contains a deserialization of untrusted data vulnerability | |
CVE-2024-38193 |
Windows | — | 0.2874 | 2024-08-13 | 2024-09-03 | Microsoft Windows Ancillary Function Driver for WinSock contains an unspecified | |
CVE-2022-37969 |
Windows | — | 0.2828 | 2022-09-14 | 2022-10-05 | RW | Microsoft Windows Common Log File System (CLFS) driver contains an unspecified v |
CVE-2023-36802 |
Streaming Service Proxy | — | 0.2791 | 2023-09-12 | 2023-10-03 | Microsoft Streaming Service Proxy contains an unspecified vulnerability that all | |
CVE-2024-21351 |
Windows | — | 0.2780 | 2024-02-13 | 2024-03-05 | Microsoft Windows SmartScreen contains a security feature bypass vulnerability t | |
CVE-2025-30397 |
Windows | — | 0.2726 | 2025-05-13 | 2025-06-03 | Microsoft Windows Scripting Engine contains a type confusion vulnerability that | |
CVE-2024-49138 |
Windows | — | 0.2621 | 2024-12-10 | 2024-12-31 | Microsoft Windows Common Log File System (CLFS) driver contains a heap-based buf | |
CVE-2024-35250 |
Windows | — | 0.2522 | 2024-12-16 | 2025-01-06 | Microsoft Windows Kernel-Mode Driver contains an untrusted pointer dereference v | |
CVE-2022-41128 |
Windows | — | 0.2462 | 2022-11-08 | 2022-12-09 | Microsoft Windows contains an unspecified vulnerability in the JScript9 scriptin | |
CVE-2023-29360 |
Streaming Service | — | 0.2162 | 2024-02-29 | 2024-03-21 | Microsoft Streaming Service contains an untrusted pointer dereference vulnerabil | |
CVE-2023-36563 |
WordPad | — | 0.2032 | 2023-10-10 | 2023-10-31 | Microsoft WordPad contains an unspecified vulnerability that allows for informat | |
CVE-2023-36761 |
Word | — | 0.1957 | 2023-09-12 | 2023-10-03 | Microsoft Word contains an unspecified vulnerability that allows for information | |
CVE-2025-29824 |
Windows | — | 0.1925 | 2025-04-08 | 2025-04-29 | RW | Microsoft Windows Common Log File System (CLFS) Driver contains a use-after-free |
CVE-2022-26904 |
Windows | — | 0.1695 | 2022-04-25 | 2022-05-16 | Microsoft Windows User Profile Service contains an unspecified vulnerability tha | |
CVE-2023-36036 |
Windows | — | 0.1667 | 2023-11-14 | 2023-12-05 | Microsoft Windows Cloud Files Mini Filter Driver contains a privilege escalation | |
CVE-2026-58644 |
SharePoint | 9.8 | 0.1587 | 2026-07-16 | 2026-07-19 | Microsoft SharePoint contains a deserialization of untrusted data vulnerability | |
CVE-2026-21513 |
Windows | — | 0.1585 | 2026-02-10 | 2026-03-03 | Microsoft MSHTML Framework contains a protection mechanism failure vulnerability | |
CVE-2023-35311 |
Outlook | — | 0.1552 | 2023-07-11 | 2023-08-01 | Microsoft Outlook contains a security feature bypass vulnerability that allows a | |
CVE-2022-38028 |
Windows | — | 0.1495 | 2024-04-23 | 2024-05-14 | Microsoft Windows Print Spooler service contains a privilege escalation vulnerab | |
CVE-2024-49039 |
Windows | — | 0.1418 | 2024-11-12 | 2024-12-03 | RW | Microsoft Windows Task Scheduler contains a privilege escalation vulnerability t |
CVE-2023-38180 |
.NET Core and Visual Studio | — | 0.1413 | 2023-08-09 | 2023-08-30 | Microsoft .NET Core and Visual Studio contain an unspecified vulnerability that | |
CVE-2024-38213 |
Windows | — | 0.1363 | 2024-08-13 | 2024-09-03 | Microsoft Windows SmartScreen contains a security feature bypass vulnerability t | |
CVE-2024-21410 |
Exchange Server | — | 0.1266 | 2024-02-15 | 2024-03-07 | Microsoft Exchange Server contains an unspecified vulnerability that allows for | |
CVE-2023-36424 |
Windows | — | 0.1209 | 2026-04-13 | 2026-04-27 | Microsoft Windows Common Log File System Driver contains an out-of-bounds read v | |
CVE-2023-21715 |
Office | — | 0.1201 | 2023-02-14 | 2023-03-07 | Microsoft Office Publisher contains a security feature bypass vulnerability that | |
CVE-2023-36033 |
Windows | — | 0.1095 | 2023-11-14 | 2023-12-05 | Microsoft Windows Desktop Window Manager (DWM) Core Library contains an unspecif | |
CVE-2023-23376 |
Windows | — | 0.1085 | 2023-02-14 | 2023-03-07 | RW | Microsoft Windows Common Log File System (CLFS) driver contains an unspecified v |
CVE-2022-26925 |
Windows | — | 0.1048 | 2022-07-01 | 2022-07-22 | Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerabili | |
CVE-2025-21333 |
Windows | — | 0.1007 | 2025-01-14 | 2025-02-04 | Microsoft Windows Hyper-V NT Kernel Integration VSP contains a heap-based buffer | |
CVE-2024-38217 |
Windows | — | 0.1003 | 2024-09-10 | 2024-10-01 | Microsoft Windows Mark of the Web (MOTW) contains a protection mechanism failure | |
CVE-2023-32046 |
Windows | — | 0.0997 | 2023-07-11 | 2023-08-01 | Microsoft Windows MSHTML Platform contains an unspecified vulnerability that all | |
CVE-2026-96951 |
Windows | 8.8 | 0.0981 | 2026-10-13 | 2026-10-16 | Microsoft Windows Shell contains a command injection vulnerability that allows a | |
CVE-2026-41091 |
Defender | — | 0.0820 | 2026-05-20 | 2026-06-03 | Microsoft Defender contains a link following vulnerability that allows an author | |
CVE-2024-38189 |
Project | — | 0.0819 | 2024-08-13 | 2024-09-03 | Microsoft Project contains an unspecified vulnerability that allows for remote c | |
CVE-2026-65660 |
SharePoint | 8.8 | 0.0819 | 2026-09-25 | 2026-09-28 | 2 PoC | Microsoft SharePoint contains a code injection vulnerability which could allow a |
CVE-2026-20805 |
Windows | — | 0.0746 | 2026-01-13 | 2026-02-03 | Microsoft Windows Desktop Windows Manager contains an information disclosure vul | |
CVE-2024-38080 |
Windows | — | 0.0712 | 2024-07-09 | 2024-07-30 | Microsoft Windows Hyper-V contains a privilege escalation vulnerability that all | |
CVE-2026-33825 |
Defender | — | 0.0675 | 2026-04-22 | 2026-05-06 | RW | Microsoft Defender contains an insufficient granularity of access control vulner |
CVE-2025-24990 |
Windows | — | 0.0637 | 2025-10-14 | 2025-11-04 | Microsoft Windows Agere Modem Driver contains an untrusted pointer dereference v | |
CVE-2024-38106 |
Windows | — | 0.0634 | 2024-08-13 | 2024-09-03 | Microsoft Windows Kernel contains an unspecified vulnerability that allows for p | |
CVE-2024-38014 |
Windows | — | 0.0626 | 2024-09-10 | 2024-10-01 | Microsoft Windows Installer contains an improper privilege management vulnerabil | |
CVE-2024-30051 |
DWM Core Library | — | 0.0569 | 2024-05-14 | 2024-06-04 | RW | Microsoft DWM Core Library contains a privilege escalation vulnerability that al |
CVE-2023-21823 |
Windows | — | 0.0556 | 2023-02-14 | 2023-03-07 | Microsoft Windows Graphic Component contains an unspecified vulnerability that a | |
CVE-2026-21525 |
Windows | — | 0.0486 | 2026-02-10 | 2026-03-03 | Microsoft Windows Remote Access Connection Manager contains a NULL pointer deref | |
CVE-2025-60710 |
Windows | — | 0.0461 | 2026-04-13 | 2026-04-27 | RW | Microsoft Windows contains a link following vulnerability that allows for privil |
CVE-2025-62215 |
Windows | — | 0.0446 | 2025-11-12 | 2025-12-03 | Microsoft Windows Kernel contains a race condition vulnerability that allows a l | |
CVE-2026-21533 |
Windows | — | 0.0418 | 2026-02-10 | 2026-03-03 | Microsoft Windows Remote Desktop Services contains an improper privilege managem | |
CVE-2023-32049 |
Windows | — | 0.0416 | 2023-07-11 | 2023-08-01 | Microsoft Windows Defender SmartScreen contains a security feature bypass vulner | |
CVE-2024-26169 |
Windows | — | 0.0398 | 2024-06-13 | 2024-07-04 | RW | Microsoft Windows Error Reporting Service contains an improper privilege managem |
CVE-2024-30040 |
Windows | — | 0.0394 | 2024-05-14 | 2024-06-04 | Microsoft Windows MSHTML Platform contains an unspecified vulnerability that all | |
CVE-2025-24985 |
Windows | — | 0.0389 | 2025-03-11 | 2025-04-01 | Microsoft Windows Fast FAT File System Driver contains an integer overflow or wr | |
CVE-2023-36584 |
Windows | — | 0.0325 | 2023-11-16 | 2023-12-07 | Microsoft Windows Mark of the Web (MOTW) contains a security feature bypass vuln | |
CVE-2022-41125 |
Windows | — | 0.0305 | 2022-11-08 | 2022-12-09 | Microsoft Windows Cryptographic Next Generation (CNG) Key Isolation Service cont | |
CVE-2026-50522 |
SharePoint | 9.8 | 0.0304 | 2026-07-22 | 2026-07-25 | Microsoft SharePoint contains a deserialization of untrusted data vulnerability | |
CVE-2024-38226 |
Publisher | — | 0.0267 | 2024-09-10 | 2024-10-01 | Microsoft Publisher contains a protection mechanism failure vulnerability that a | |
CVE-2025-59230 |
Windows | — | 0.0266 | 2025-10-14 | 2025-11-04 | Microsoft Windows contains an improper access control vulnerability in Windows R | |
CVE-2022-41049 |
Windows | — | 0.0263 | 2022-11-14 | 2022-12-09 | Microsoft Windows Mark of the Web (MOTW) contains a security feature bypass vuln | |
CVE-2025-62221 |
Windows | — | 0.0250 | 2025-12-09 | 2025-12-30 | Microsoft Windows Cloud Files Mini Filter Driver contains a use after free vulne | |
CVE-2026-21519 |
Windows | — | 0.0248 | 2026-02-10 | 2026-03-03 | Microsoft Desktop Windows Manager contains a type confusion vulnerability that c | |
CVE-2022-41073 |
Windows | — | 0.0236 | 2022-11-08 | 2022-12-09 | RW | Microsoft Windows Print Spooler contains an unspecified vulnerability that allow |
CVE-2025-32706 |
Windows | — | 0.0233 | 2025-05-13 | 2025-06-03 | Microsoft Windows Common Log File System (CLFS) Driver contains a heap-based buf | |
CVE-2025-21391 |
Windows | — | 0.0228 | 2025-02-11 | 2025-03-04 | Microsoft Windows Storage contains a link following vulnerability that could all | |
CVE-2025-24993 |
Windows | — | 0.0222 | 2025-03-11 | 2025-04-01 | Microsoft Windows New Technology File System (NTFS) contains a heap-based buffer | |
CVE-2025-21418 |
Windows | — | 0.0213 | 2025-02-11 | 2025-03-04 | Microsoft Windows Ancillary Function Driver for WinSock contains a heap-based bu | |
CVE-2025-24991 |
Windows | — | 0.0202 | 2025-03-11 | 2025-04-01 | Microsoft Windows New Technology File System (NTFS) contains an out-of-bounds re | |
CVE-2025-24984 |
Windows | — | 0.0199 | 2025-03-11 | 2025-04-01 | Microsoft Windows New Technology File System (NTFS) contains an insertion of sen | |
CVE-2025-30400 |
Windows | — | 0.0192 | 2025-05-13 | 2025-06-03 | Microsoft Windows DWM Core Library contains a use-after-free vulnerability that | |
CVE-2022-41091 |
Windows | — | 0.0191 | 2022-11-08 | 2022-12-09 | RW | Microsoft Windows Mark of the Web (MOTW) contains a security feature bypass vuln |
CVE-2022-41033 |
Windows COM+ Event System Service | — | 0.0189 | 2022-10-11 | 2022-11-01 | Microsoft Windows COM+ Event System Service contains an unspecified vulnerabilit | |
CVE-2025-24983 |
Windows | — | 0.0187 | 2025-03-11 | 2025-04-01 | Microsoft Windows Win32 Kernel Subsystem contains a use-after-free vulnerability | |
CVE-2025-32709 |
Windows | — | 0.0182 | 2025-05-13 | 2025-06-03 | Microsoft Windows Ancillary Function Driver for WinSock contains a use-after-fre | |
CVE-2023-28229 |
Windows CNG Key Isolation Service | — | 0.0167 | 2023-10-04 | 2023-10-25 | Microsoft Windows Cryptographic Next Generation (CNG) Key Isolation Service cont | |
CVE-2024-38107 |
Windows | — | 0.0163 | 2024-08-13 | 2024-09-03 | Microsoft Windows Power Dependency Coordinator contains an unspecified vulnerabi | |
CVE-2025-24989 |
Power Pages | — | 0.0162 | 2025-02-21 | 2025-03-14 | Microsoft Power Pages contains an improper access control vulnerability that all | |
CVE-2026-21514 |
Office | — | 0.0159 | 2026-02-10 | 2026-03-03 | Microsoft Office Word contains a reliance on untrusted inputs in a security deci | |
CVE-2025-21334 |
Windows | — | 0.0157 | 2025-01-14 | 2025-02-04 | Microsoft Windows Hyper-V NT Kernel Integration VSP contains a use-after-free vu | |
CVE-2025-32701 |
Windows | — | 0.0142 | 2025-05-13 | 2025-06-03 | Microsoft Windows Common Log File System (CLFS) Driver contains a use-after-free | |
CVE-2025-21335 |
Windows | — | 0.0140 | 2025-01-14 | 2025-02-04 | Microsoft Windows Hyper-V NT Kernel Integration VSP contains a use-after-free vu | |
CVE-2024-49035 |
Partner Center | — | 0.0130 | 2025-02-25 | 2025-03-18 | Microsoft Partner Center contains an improper access control vulnerability that | |
CVE-2026-56164 |
SharePoint Server | 5.3 | 0.0101 | 2026-07-14 | 2026-07-17 | Microsoft SharePoint contains a missing authentication for critical function vul | |
CVE-2026-81963 |
Windows | — | 0.0039 | 2026-09-08 | 2026-09-22 | Microsoft Windows Update Stack contains a link following vulnerability that allo | |
CVE-2026-85880 |
Windows | — | 0.0039 | 2026-09-08 | 2026-09-22 | Microsoft Windows Advanced Local Procedure Call contains a heap-based buffer ove | |
CVE-2026-56155 |
Active Directory Federation Services | 7.8 | 0.0035 | 2026-07-14 | 2026-07-28 | Microsoft Active Directory Federation Services contains an insufficient granular | |
CVE-2026-68820 |
Windows Ancillary Function Driver for WinSock | 7.0 | 0.0033 | 2026-08-11 | 2026-08-25 | 4 PoC | Microsoft Windows Ancillary Function Driver for WinSock contains a use-after-fre |
CVE-2019-1068 |
SQL Server | — | — | 2026-08-26 | 2026-08-29 | Microsoft SQL Server contains a remote code execution vulnerability that could a | |
CVE-2008-4250 |
Windows | — | — | 2026-05-20 | 2026-06-03 | Microsoft Windows contains a buffer overflow vulnerability in the Windows Server | |
CVE-2009-1537 |
DirectX | — | — | 2026-05-20 | 2026-06-03 | Microsoft DirectX contains a NULL byte overwrite vulnerability in the QuickTime | |
CVE-2010-0249 |
Internet Explorer | — | — | 2026-05-20 | 2026-06-03 | Microsoft Internet Explorer contains an use-after-free vulnerability that could | |
CVE-2010-0806 |
Internet Explorer | — | — | 2026-05-20 | 2026-06-03 | Microsoft Internet Explorer contains an use-after-free vulnerability that could | |
CVE-2009-0238 |
Office | — | — | 2026-04-14 | 2026-04-28 | Microsoft Office Excel contains a remote code execution vulnerability that could | |
CVE-2012-1854 |
Visual Basic for Applications (VBA) | — | — | 2026-04-13 | 2026-04-27 | Microsoft Visual Basic for Applications (VBA) contains an insecure library loadi | |
CVE-2008-0015 |
Windows | — | — | 2026-02-17 | 2026-03-10 | Microsoft Windows Video ActiveX Control contains a remote code execution vulnera | |
CVE-2009-0556 |
Office | — | — | 2026-01-07 | 2026-01-28 | Microsoft Office PowerPoint contains a code injection vulnerability that allows | |
CVE-2010-3962 |
Internet Explorer | — | — | 2025-10-06 | 2025-10-27 | Microsoft Internet Explorer contains an uninitialized memory corruption vulnerab | |
CVE-2021-43226 |
Windows | — | — | 2025-10-06 | 2025-10-27 | RW | Microsoft Windows Common Log File System Driver contains a privilege escalation |
CVE-2013-3918 |
Windows | — | — | 2025-10-06 | 2025-10-27 | Microsoft Windows contains an out-of-bounds write vulnerability in the Informati | |
CVE-2011-3402 |
Windows | — | — | 2025-10-06 | 2025-10-27 | Microsoft Windows Kernel contains an unspecified vulnerability in the TrueType f | |
CVE-2007-0671 |
Office | — | — | 2025-08-12 | 2025-09-02 | Microsoft Office Excel contains a remote code execution vulnerability that can b | |
CVE-2013-3893 |
Internet Explorer | — | — | 2025-08-12 | 2025-09-02 | Microsoft Internet Explorer contains a memory corruption vulnerability that allo | |
CVE-2018-8639 |
Windows | — | — | 2025-03-03 | 2025-03-24 | RW | Microsoft Windows Win32k contains an improper resource shutdown or release vulne |
CVE-2020-0618 |
SQL Server | — | — | 2024-09-18 | 2024-10-09 | RW | Microsoft SQL Server Reporting Services contains a deserialization vulnerability |
CVE-2021-31196 |
Exchange Server | — | — | 2024-08-21 | 2024-09-11 | Microsoft Exchange Server contains an information disclosure vulnerability that | |
CVE-2018-0824 |
Windows | — | — | 2024-08-05 | 2024-08-26 | Microsoft COM for Windows contains a deserialization of untrusted data vulnerabi | |
CVE-2012-4792 |
Internet Explorer | — | — | 2024-07-23 | 2024-08-13 | Microsoft Internet Explorer contains a use-after-free vulnerability that allows | |
CVE-2016-0165 |
Win32k | — | — | 2023-06-22 | 2023-07-13 | Microsoft Win32k contains an unspecified vulnerability that allows for privilege | |
CVE-2019-1388 |
Windows | — | — | 2023-04-07 | 2023-04-28 | RW | Microsoft Windows Certificate Dialog contains a privilege escalation vulnerabili |
CVE-2013-3163 |
Internet Explorer | — | — | 2023-03-30 | 2023-04-20 | Microsoft Internet Explorer contains a memory corruption vulnerability that allo | |
CVE-2010-2568 |
Windows | — | — | 2022-09-15 | 2022-10-06 | Microsoft Windows incorrectly parses shortcuts in such a way that malicious code | |
CVE-2022-21971 |
Windows | — | — | 2022-08-18 | 2022-09-08 | Microsoft Windows Runtime contains an unspecified vulnerability that allows for | |
CVE-2022-22047 |
Windows | — | — | 2022-07-12 | 2022-08-02 | Microsoft Windows CSRSS contains an unspecified vulnerability that allows for pr | |
CVE-2013-1331 |
Office | — | — | 2022-06-08 | 2022-06-22 | Microsoft Office contains a buffer overflow vulnerability that allows remote att | |
CVE-2012-4969 |
Internet Explorer | — | — | 2022-06-08 | 2022-06-22 | Microsoft Internet Explorer contains a use-after-free vulnerability that allows | |
CVE-2012-1889 |
XML Core Services | — | — | 2022-06-08 | 2022-06-22 | Microsoft XML Core Services contains a memory corruption vulnerability which cou | |
CVE-2012-0151 |
Windows | — | — | 2022-06-08 | 2022-06-22 | The Authenticode Signature Verification function in Microsoft Windows (WinVerify | |
CVE-2010-2572 |
PowerPoint | — | — | 2022-06-08 | 2022-06-22 | Microsoft PowerPoint contains a buffer overflow vulnerability that alllows for r | |
CVE-2009-0563 |
Office | — | — | 2022-06-08 | 2022-06-22 | Microsoft Office contains a buffer overflow vulnerability that allows remote att | |
CVE-2009-0557 |
Office | — | — | 2022-06-08 | 2022-06-22 | Microsoft Office contains an object record corruption vulnerability that allows | |
CVE-2006-2492 |
Word | — | — | 2022-06-08 | 2022-06-22 | Microsoft Word and Microsoft Works Suites contain a malformed object pointer whi | |
CVE-2016-3393 |
Windows | — | — | 2022-05-25 | 2022-06-15 | A remote code execution vulnerability exists due to the way the Windows GDI comp | |
CVE-2016-7256 |
Windows | — | — | 2022-05-25 | 2022-06-15 | A remote code execution vulnerability exists when the Windows font library impro | |
CVE-2016-0034 |
Silverlight | — | — | 2022-05-25 | 2022-06-15 | RW | Microsoft Silverlight mishandles negative offsets during decoding, which allows |
CVE-2015-0016 |
Windows | — | — | 2022-05-25 | 2022-06-15 | Directory traversal vulnerability in the TS WebProxy (TSWbPrxy) component in Mic | |
CVE-2015-0071 |
Internet Explorer | — | — | 2022-05-25 | 2022-06-15 | Microsoft Internet Explorer allows remote attackers to bypass the address space | |
CVE-2015-2360 |
Win32k | — | — | 2022-05-25 | 2022-06-15 | Win32k.sys in the kernel-mode drivers in Microsoft Windows allows local users to | |
CVE-2015-2425 |
Internet Explorer | — | — | 2022-05-25 | 2022-06-15 | Microsoft Internet Explorer contains a memory corruption vulnerability that allo | |
CVE-2015-1769 |
Windows | — | — | 2022-05-25 | 2022-06-15 | A privilege escalation vulnerability exists when the Windows Mount Manager compo | |
CVE-2015-6175 |
Windows | — | — | 2022-05-25 | 2022-06-15 | The kernel in Microsoft Windows contains a vulnerability that allows local users | |
CVE-2015-1671 |
Windows | — | — | 2022-05-25 | 2022-06-15 | A remote code execution vulnerability exists when components of Windows, .NET Fr | |
CVE-2014-4148 |
Windows | — | — | 2022-05-25 | 2022-06-15 | A remote code execution vulnerability exists when the Windows kernel-mode driver | |
CVE-2014-4123 |
Internet Explorer | — | — | 2022-05-25 | 2022-06-15 | Microsoft Internet Explorer contains an unspecified vulnerability that allows re | |
CVE-2014-2817 |
Internet Explorer | — | — | 2022-05-25 | 2022-06-15 | Microsoft Internet Explorer cotains an unspecified vulnerability that allows rem | |
CVE-2014-4077 |
Input Method Editor (IME) Japanese | — | — | 2022-05-25 | 2022-06-15 | Microsoft Input Method Editor (IME) Japanese is a keyboard with Japanese charact | |
CVE-2013-7331 |
Internet Explorer | — | — | 2022-05-25 | 2022-06-15 | An information disclosure vulnerability exists in Internet Explorer which allows | |
CVE-2013-3896 |
Silverlight | — | — | 2022-05-25 | 2022-06-15 | Microsoft Silverlight does not properly validate pointers during access to Silve | |
CVE-2013-0074 |
Silverlight | — | — | 2022-05-25 | 2022-06-15 | RW | Microsoft Silverlight does not properly validate pointers during HTML object ren |
CVE-2018-8611 |
Windows | — | — | 2022-05-24 | 2022-06-14 | A privilege escalation vulnerability exists when the Windows kernel fails to pro | |
CVE-2017-0147 |
SMBv1 server | — | — | 2022-05-24 | 2022-06-14 | RW | The SMBv1 server in Microsoft Windows allows remote attackers to obtain sensitiv |
CVE-2017-0022 |
XML Core Services | — | — | 2022-05-24 | 2022-06-14 | Microsoft XML Core Services (MSXML) improperly handles objects in memory, allowi | |
CVE-2017-0005 |
Windows | — | — | 2022-05-24 | 2022-06-14 | The Graphics Device Interface (GDI) in Microsoft Windows allows local users to g | |
CVE-2017-0149 |
Internet Explorer | — | — | 2022-05-24 | 2022-06-14 | Microsoft Internet Explorer contains a memory corruption vulnerability that allo | |
CVE-2017-0210 |
Internet Explorer | — | — | 2022-05-24 | 2022-06-14 | A privilege escalation vulnerability exists when Internet Explorer does not prop | |
CVE-2017-8543 |
Windows | — | — | 2022-05-24 | 2022-06-14 | Microsoft Windows allows an attacker to take control of the affected system when | |
CVE-2016-0162 |
Internet Explorer | — | — | 2022-05-24 | 2022-06-14 | An information disclosure vulnerability exists when Internet Explorer does not p | |
CVE-2016-3351 |
Internet Explorer and Edge | — | — | 2022-05-24 | 2022-06-14 | RW | An information disclosure vulnerability exists in the way that certain functions |
CVE-2016-3298 |
Internet Explorer | — | — | 2022-05-24 | 2022-06-14 | An information disclosure vulnerability exists when the Microsoft Internet Messa | |
CVE-2020-1027 |
Windows | — | — | 2022-05-23 | 2022-06-13 | An elevation of privilege vulnerability exists in the way that the Windows Kerne | |
CVE-2020-0638 |
Update Notification Manager | — | — | 2022-05-23 | 2022-06-13 | RW | Microsoft Update Notification Manager contains an unspecified vulnerability that |
CVE-2019-0676 |
Internet Explorer | — | — | 2022-05-23 | 2022-06-13 | An information disclosure vulnerability exists when Internet Explorer improperly | |
CVE-2019-0703 |
Windows | — | — | 2022-05-23 | 2022-06-13 | An information disclosure vulnerability exists in the way that the Windows SMB S | |
CVE-2019-0880 |
Windows | — | — | 2022-05-23 | 2022-06-13 | A local elevation of privilege vulnerability exists in how splwow64.exe handles | |
CVE-2019-1385 |
Windows | — | — | 2022-05-23 | 2022-06-13 | RW | A privilege escalation vulnerability exists when the Windows AppX Deployment Ext |
CVE-2019-1130 |
Windows | — | — | 2022-05-23 | 2022-06-13 | RW | A privilege escalation vulnerability exists when Windows AppX Deployment Service |
CVE-2018-8589 |
Win32k | — | — | 2022-05-23 | 2022-06-13 | A privilege escalation vulnerability exists when Windows improperly handles call | |
CVE-2014-4113 |
Win32k | — | — | 2022-05-04 | 2022-05-25 | Microsoft Win32k contains an unspecified vulnerability that allows for privilege | |
CVE-2014-0322 |
Internet Explorer | — | — | 2022-05-04 | 2022-05-25 | Use-after-free vulnerability in Microsoft Internet Explorer allows remote attack | |
CVE-2022-21919 |
Windows | — | — | 2022-04-25 | 2022-05-16 | Microsoft Windows User Profile Service contains an unspecified vulnerability tha | |
CVE-2021-41357 |
Win32k | — | — | 2022-04-25 | 2022-05-16 | Microsoft Win32k contains an unspecified vulnerability that allows for privilege | |
CVE-2021-40450 |
Win32k | — | — | 2022-04-25 | 2022-05-16 | Microsoft Win32k contains an unspecified vulnerability that allows for privilege | |
CVE-2022-22718 |
Windows | — | — | 2022-04-19 | 2022-05-10 | Microsoft Windows Print Spooler contains an unspecified vulnerability which allo | |
CVE-2022-24521 |
Windows | — | — | 2022-04-13 | 2022-05-04 | RW | Microsoft Windows Common Log File System (CLFS) Driver contains an unspecified v |
CVE-2015-2502 |
Internet Explorer | — | — | 2022-04-13 | 2022-05-04 | Microsoft Internet Explorer contains a memory corruption vulnerability that allo | |
CVE-2021-42287 |
Active Directory | — | — | 2022-04-11 | 2022-05-02 | RW | Microsoft Active Directory Domain Services contains an unspecified vulnerability |
CVE-2021-42278 |
Active Directory | — | — | 2022-04-11 | 2022-05-02 | RW | Microsoft Active Directory Domain Services contains an unspecified vulnerability |
CVE-2021-31166 |
HTTP Protocol Stack | — | — | 2022-04-06 | 2022-04-27 | Microsoft HTTP Protocol Stack contains a vulnerability in http.sys that allows f | |
CVE-2017-0148 |
SMBv1 server | — | — | 2022-04-06 | 2022-04-27 | RW | The SMBv1 server in Microsoft allows remote attackers to execute arbitrary code |
CVE-2021-34484 |
Windows | — | — | 2022-03-31 | 2022-04-21 | Microsoft Windows User Profile Service contains an unspecified vulnerability tha | |
CVE-2021-38646 |
Office | — | — | 2022-03-28 | 2022-04-18 | RW | Microsoft Office Access Connectivity Engine contains an unspecified vulnerabilit |
CVE-2021-34486 |
Windows | — | — | 2022-03-28 | 2022-04-18 | Microsoft Windows Event Tracing contains an unspecified vulnerability which can | |
CVE-2018-8440 |
Windows | — | — | 2022-03-28 | 2022-04-18 | RW | An elevation of privilege vulnerability exists when Windows improperly handles c |
CVE-2018-8406 |
DirectX Graphics Kernel (DXGKRNL) | — | — | 2022-03-28 | 2022-04-18 | RW | An elevation of privilege vulnerability exists when the DirectX Graphics Kernel |
CVE-2018-8405 |
DirectX Graphics Kernel (DXGKRNL) | — | — | 2022-03-28 | 2022-04-18 | RW | An elevation of privilege vulnerability exists when the DirectX Graphics Kernel |
CVE-2017-0213 |
Windows | — | — | 2022-03-28 | 2022-04-18 | RW | Microsoft Windows COM Aggregate Marshaler allows for privilege escalation when a |
CVE-2017-0059 |
Internet Explorer | — | — | 2022-03-28 | 2022-04-18 | Microsoft Internet Explorer allow remote attackers to obtain sensitive informati | |
CVE-2017-0037 |
Edge and Internet Explorer | — | — | 2022-03-28 | 2022-04-18 | Microsoft Edge and Internet Explorer have a type confusion vulnerability in msht | |
CVE-2016-7201 |
Edge | — | — | 2022-03-28 | 2022-04-18 | The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers | |
CVE-2016-7200 |
Edge | — | — | 2022-03-28 | 2022-04-18 | The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers | |
CVE-2016-0189 |
Internet Explorer | — | — | 2022-03-28 | 2022-04-18 | RW | The Microsoft JScript nd VBScript engines, as used in Internet Explorer and othe |
CVE-2016-0151 |
Client-Server Run-time Subsystem (CSRSS) | — | — | 2022-03-28 | 2022-04-18 | RW | The Client-Server Run-time Subsystem (CSRSS) in Microsoft mismanages process tok |
CVE-2016-0040 |
Windows | — | — | 2022-03-28 | 2022-04-18 | The kernel in Microsoft Windows allows local users to gain privileges via a craf | |
CVE-2015-2426 |
Windows | — | — | 2022-03-28 | 2022-04-18 | A remote code execution vulnerability exists in Microsoft Windows when the Windo | |
CVE-2015-2419 |
Internet Explorer | — | — | 2022-03-28 | 2022-04-18 | JScript in Microsoft Internet Explorer allows remote attackers to execute remote | |
CVE-2015-1770 |
Office | — | — | 2022-03-28 | 2022-04-18 | Microsoft Office allows remote attackers to execute arbitrary code via a crafted | |
CVE-2013-3660 |
Win32k | — | — | 2022-03-28 | 2022-04-18 | The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in | |
CVE-2013-2551 |
Internet Explorer | — | — | 2022-03-28 | 2022-04-18 | RW | Use-after-free vulnerability in Microsoft Internet Explorer allows remote attack |
CVE-2012-2539 |
Word | — | — | 2022-03-28 | 2022-04-18 | Microsoft Word allows attackers to execute remote code or cause a denial-of-serv | |
CVE-2011-2005 |
Ancillary Function Driver (afd.sys) | — | — | 2022-03-28 | 2022-04-18 | afd.sys in the Ancillary Function Driver in Microsoft Windows does not properly | |
CVE-2010-4398 |
Windows | — | — | 2022-03-28 | 2022-04-21 | Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys | |
CVE-2022-21999 |
Windows | — | — | 2022-03-25 | 2022-04-15 | RW | Microsoft Windows Print Spooler contains an unspecified vulnerability which can |
CVE-2019-0903 |
Graphics Device Interface (GDI) | — | — | 2022-03-25 | 2022-04-15 | A remote code execution vulnerability exists in the way that the Windows Graphic | |
CVE-2018-8414 |
Windows | — | — | 2022-03-25 | 2022-04-15 | A remote code execution vulnerability exists when the Windows Shell does not pro | |
CVE-2018-8373 |
Internet Explorer Scripting Engine | — | — | 2022-03-25 | 2022-04-15 | A remote code execution vulnerability exists in the way that the scripting engin | |
CVE-2017-0146 |
Windows | — | — | 2022-03-25 | 2022-04-15 | RW | The SMBv1 server in Microsoft Windows allows remote attackers to perform remote |
CVE-2014-6332 |
Windows | — | — | 2022-03-25 | 2022-04-15 | OleAut32.dll in OLE in Microsoft Windows allows remote attackers to remotely exe | |
CVE-2014-6324 |
Kerberos Key Distribution Center (KDC) | — | — | 2022-03-25 | 2022-04-15 | The Kerberos Key Distribution Center (KDC) in Microsoft allows remote authentica | |
CVE-2019-1405 |
Windows | — | — | 2022-03-15 | 2022-04-05 | RW | A privilege escalation vulnerability exists when the Windows UPnP service improp |
CVE-2019-1322 |
Windows | — | — | 2022-03-15 | 2022-04-05 | RW | A privilege escalation vulnerability exists when Windows improperly handles auth |
CVE-2019-1315 |
Windows | — | — | 2022-03-15 | 2022-04-05 | RW | A privilege escalation vulnerability exists when Windows Error Reporting manager |
CVE-2019-1253 |
Windows | — | — | 2022-03-15 | 2022-04-05 | RW | A privilege escalation vulnerability exists when the Windows AppX Deployment Ser |
CVE-2019-1132 |
Win32k | — | — | 2022-03-15 | 2022-04-05 | A privilege escalation vulnerability exists in Windows when the Win32k component | |
CVE-2019-1129 |
Windows | — | — | 2022-03-15 | 2022-04-05 | RW | A privilege escalation vulnerability exists when Windows AppXSVC improperly hand |
CVE-2019-1069 |
Task Scheduler | — | — | 2022-03-15 | 2022-04-05 | RW | A privilege escalation vulnerability exists in the way the Task Scheduler Servic |
CVE-2019-1064 |
Windows | — | — | 2022-03-15 | 2022-04-05 | RW | A privilege escalation vulnerability exists when Windows AppXSVC improperly hand |
CVE-2019-0841 |
Windows | — | — | 2022-03-15 | 2022-04-05 | RW | A privilege escalation vulnerability exists when Windows AppXSVC improperly hand |
CVE-2019-0543 |
Windows | — | — | 2022-03-15 | 2022-04-05 | RW | A privilege escalation vulnerability exists when Windows improperly handles auth |
CVE-2018-8120 |
Win32k | — | — | 2022-03-15 | 2022-04-05 | RW | A privilege escalation vulnerability exists in Windows when the Win32k component |
CVE-2017-0101 |
Windows | — | — | 2022-03-15 | 2022-04-05 | RW | A privilege escalation vulnerability exists when the Windows Transaction Manager |
CVE-2016-3309 |
Windows | — | — | 2022-03-15 | 2022-04-05 | RW | A privilege escalation vulnerability exists when the Windows kernel fails to pro |
CVE-2015-2546 |
Win32k | — | — | 2022-03-15 | 2022-04-05 | RW | The kernel-mode driver in Microsoft Windows OS and Server allows local users to |
CVE-2021-41379 |
Windows | — | — | 2022-03-03 | 2022-03-17 | RW | Microsoft Windows Installer contains an unspecified vulnerability that allows fo |
CVE-2019-1297 |
Excel | — | — | 2022-03-03 | 2022-03-17 | A remote code execution vulnerability exists in Microsoft Excel when the softwar | |
CVE-2018-8581 |
Exchange Server | — | — | 2022-03-03 | 2022-03-17 | RW | A privilege escalation vulnerability exists in Microsoft Exchange Server. An att |
CVE-2017-8540 |
Malware Protection Engine | — | — | 2022-03-03 | 2022-03-24 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Micro | |
CVE-2017-11826 |
Office | — | — | 2022-03-03 | 2022-03-24 | A remote code execution vulnerability exists in Microsoft Office software when t | |
CVE-2017-0261 |
Office | — | — | 2022-03-03 | 2022-03-24 | Microsoft Office contains a use-after-free vulnerability which can allow for rem | |
CVE-2017-0001 |
Graphics Device Interface (GDI) | — | — | 2022-03-03 | 2022-03-24 | The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Serv | |
CVE-2016-7262 |
Excel | — | — | 2022-03-03 | 2022-03-24 | A security feature bypass vulnerability exists when Microsoft Office improperly | |
CVE-2016-7193 |
Office | — | — | 2022-03-03 | 2022-03-24 | Microsoft Office contains a memory corruption vulnerability which can allow for | |
CVE-2016-0099 |
Windows | — | — | 2022-03-03 | 2022-03-24 | RW | A privilege escalation vulnerability exists in Microsoft Windows if the Windows |
CVE-2015-2545 |
Office | — | — | 2022-03-03 | 2022-03-24 | Microsoft Office allows remote attackers to execute arbitrary code via a crafted | |
CVE-2015-2424 |
PowerPoint | — | — | 2022-03-03 | 2022-03-24 | Microsoft PowerPoint allows remote attackers to execute arbitrary code or cause | |
CVE-2015-2387 |
ATM Font Driver | — | — | 2022-03-03 | 2022-03-24 | ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server allo | |
CVE-2015-1701 |
Win32k | — | — | 2022-03-03 | 2022-03-24 | RW | An unspecified vulnerability exists in the Win32k.sys kernel-mode driver in Micr |
CVE-2015-1642 |
Office | — | — | 2022-03-03 | 2022-03-24 | Microsoft Office contains a memory corruption vulnerability that allows remote a | |
CVE-2014-4114 |
Windows | — | — | 2022-03-03 | 2022-03-24 | A vulnerability exists in Windows Object Linking & Embedding (OLE) that could al | |
CVE-2013-5065 |
Windows | — | — | 2022-03-03 | 2022-03-24 | Microsoft Windows NDProxy.sys in the kernel contains an improper input validatio | |
CVE-2013-3897 |
Internet Explorer | — | — | 2022-03-03 | 2022-03-24 | A use-after-free vulnerability exists within CDisplayPointer in Microsoft Intern | |
CVE-2013-1347 |
Internet Explorer | — | — | 2022-03-03 | 2022-03-24 | This vulnerability may corrupt memory in a way that could allow an attacker to e | |
CVE-2012-1856 |
Office | — | — | 2022-03-03 | 2022-03-24 | The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft | |
CVE-2011-1889 |
Forefront Threat Management Gateway (TMG) | — | — | 2022-03-03 | 2022-03-24 | A remote code execution vulnerability exists in the Forefront Threat Management | |
CVE-2010-3333 |
Office | — | — | 2022-03-03 | 2022-03-24 | A stack-based buffer overflow vulnerability exists in the parsing of RTF data in | |
CVE-2010-0232 |
Windows | — | — | 2022-03-03 | 2022-03-24 | The kernel in Microsoft Windows, when access to 16-bit applications is enabled o | |
CVE-2009-3129 |
Excel | — | — | 2022-03-03 | 2022-03-24 | Microsoft Office Excel allows remote attackers to execute arbitrary code via a s | |
CVE-2009-1123 |
Windows | — | — | 2022-03-03 | 2022-03-24 | The kernel in Microsoft Windows does not properly validate changes to unspecifie | |
CVE-2004-0210 |
Windows | — | — | 2022-03-03 | 2022-03-24 | A privilege elevation vulnerability exists in the POSIX subsystem. This vulnerab | |
CVE-2002-0367 |
Windows | — | — | 2022-03-03 | 2022-03-24 | smss.exe debugging subsystem in Microsoft Windows does not properly authenticate | |
CVE-2017-8570 |
Office | — | — | 2022-02-25 | 2022-08-25 | A remote code execution vulnerability exists in Microsoft Office software when i | |
CVE-2017-0222 |
Internet Explorer | — | — | 2022-02-25 | 2022-08-25 | A remote code execution vulnerability exists when Internet Explorer improperly a | |
CVE-2014-6352 |
Windows | — | — | 2022-02-25 | 2022-08-25 | Microsoft Windows allow remote attackers to execute arbitrary code via a crafted | |
CVE-2019-0752 |
Internet Explorer | — | — | 2022-02-15 | 2022-08-15 | RW | A remote code execution vulnerability exists in the way that the scripting engin |
CVE-2018-8174 |
Windows | — | — | 2022-02-15 | 2022-08-15 | RW | A remote code execution vulnerability exists in the way that the VBScript engine |
CVE-2014-1761 |
Word | — | — | 2022-02-15 | 2022-08-15 | Microsoft Word contains a memory corruption vulnerability which when exploited c | |
CVE-2013-3906 |
Graphics Component | — | — | 2022-02-15 | 2022-08-15 | Microsoft Graphics Component contains a memory corruption vulnerability which ca | |
CVE-2021-36934 |
Windows | — | — | 2022-02-10 | 2022-02-24 | If a Volume Shadow Copy (VSS) shadow copy of the system drive is available, user | |
CVE-2020-0796 |
SMBv3 | — | — | 2022-02-10 | 2022-08-10 | RW | A remote code execution vulnerability exists in the way that the Microsoft Serve |
CVE-2017-8464 |
Windows | — | — | 2022-02-10 | 2022-08-10 | Windows Shell in multiple versions of Microsoft Windows allows local users or re | |
CVE-2017-0263 |
Win32k | — | — | 2022-02-10 | 2022-08-10 | Microsoft Win32k contains a privilege escalation vulnerability due to the Window | |
CVE-2017-0262 |
Office | — | — | 2022-02-10 | 2022-08-10 | A remote code execution vulnerability exists in Microsoft Office. | |
CVE-2017-0145 |
SMBv1 | — | — | 2022-02-10 | 2022-08-10 | RW | The SMBv1 server in multiple Microsoft Windows versions allows remote attackers |
CVE-2017-0144 |
SMBv1 | — | — | 2022-02-10 | 2022-08-10 | RW | The SMBv1 server in multiple Microsoft Windows versions allows remote attackers |
CVE-2015-1635 |
HTTP.sys | — | — | 2022-02-10 | 2022-08-10 | Microsoft HTTP protocol stack (HTTP.sys) contains a vulnerability that allows fo | |
CVE-2022-21882 |
Win32k | — | — | 2022-02-04 | 2022-02-18 | RW | Microsoft Win32k contains an unspecified vulnerability that allows for privilege |
CVE-2020-0787 |
Windows | — | — | 2022-01-28 | 2022-07-28 | RW | Microsoft Windows BITS is vulnerable to to a privilege elevation vulnerability i |
CVE-2014-1776 |
Internet Explorer | — | — | 2022-01-28 | 2022-07-28 | Microsoft Internet Explorer contains a memory corruption vulnerability that allo | |
CVE-2018-8453 |
Win32k | — | — | 2022-01-21 | 2022-07-21 | RW | Microsoft Windows Win32k contains a vulnerability that allows an attacker to esc |
CVE-2021-33766 |
Exchange Server | — | — | 2022-01-18 | 2022-02-01 | Microsoft Exchange Server contains an information disclosure vulnerability which | |
CVE-2019-1458 |
Win32k | — | — | 2022-01-10 | 2022-07-10 | RW | A privilege escalation vulnerability exists in Windows when the Win32k component |
CVE-2013-3900 |
WinVerifyTrust function | — | — | 2022-01-10 | 2022-07-10 | A remote code execution vulnerability exists in the way that the WinVerifyTrust | |
CVE-2021-43890 |
Windows | — | — | 2021-12-15 | 2021-12-29 | RW | Microsoft Windows AppX Installer contains a spoofing vulnerability which has a h |
CVE-2021-40449 |
Windows | — | — | 2021-11-17 | 2021-12-01 | RW | Unspecified vulnerability allows for an authenticated user to escalate privilege |
CVE-2021-42321 |
Exchange | — | — | 2021-11-17 | 2021-12-01 | RW | An authenticated attacker could leverage improper validation in cmdlet arguments |
CVE-2021-42292 |
Office | — | — | 2021-11-17 | 2021-12-01 | A security feature bypass vulnerability in Microsoft Excel would allow a local u | |
CVE-2014-1812 |
Windows | — | — | 2021-11-03 | 2022-05-03 | RW | Microsoft Windows Active Directory contains a privilege escalation vulnerability |
CVE-2021-38647 |
Open Management Infrastructure (OMI) | — | — | 2021-11-03 | 2021-11-17 | RW | Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extens |
CVE-2016-0167 |
Win32k | — | — | 2021-11-03 | 2022-05-03 | RW | Microsoft Win32k contains an unspecified vulnerability that allows for privilege |
CVE-2020-0878 |
Edge and Internet Explorer | — | — | 2021-11-03 | 2022-05-03 | RW | Microsoft Edge and Internet Explorer contain a memory corruption vulnerability t |
CVE-2021-31955 |
Windows | — | — | 2021-11-03 | 2021-11-17 | Microsoft Windows Kernel contains an unspecified vulnerability that allows for i | |
CVE-2021-1647 |
Defender | — | — | 2021-11-03 | 2021-11-17 | Microsoft Defender contains an unspecified vulnerability that allows for remote | |
CVE-2021-33739 |
Windows | — | — | 2021-11-03 | 2021-11-17 | Microsoft Desktop Window Manager (DWM) Core Library contains an unspecified vuln | |
CVE-2016-0185 |
Windows | — | — | 2021-11-03 | 2022-05-03 | Microsoft Windows Media Center contains a remote code execution vulnerability wh | |
CVE-2020-0683 |
Windows | — | — | 2021-11-03 | 2022-05-03 | Microsoft Windows Installer contains a privilege escalation vulnerability when M | |
CVE-2020-17087 |
Windows | — | — | 2021-11-03 | 2022-05-03 | Microsoft Windows kernel contains an unspecified vulnerability that allows for p | |
CVE-2021-33742 |
Windows | — | — | 2021-11-03 | 2021-11-17 | Microsoft Windows MSHTML Platform contains an unspecified vulnerability that all | |
CVE-2021-31199 |
Enhanced Cryptographic Provider | — | — | 2021-11-03 | 2021-11-17 | Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability | |
CVE-2021-33771 |
Windows | — | — | 2021-11-03 | 2021-11-17 | Microsoft Windows kernel contains an unspecified vulnerability that allows for p | |
CVE-2021-31956 |
Windows | — | — | 2021-11-03 | 2021-11-17 | Microsoft Windows New Technology File System (NTFS) contains an unspecified vuln | |
CVE-2021-31201 |
Enhanced Cryptographic Provider | — | — | 2021-11-03 | 2021-11-17 | Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability | |
CVE-2021-31979 |
Windows | — | — | 2021-11-03 | 2021-11-17 | Microsoft Windows kernel contains an unspecified vulnerability that allows for p | |
CVE-2020-0938 |
Windows | — | — | 2021-11-03 | 2022-05-03 | Microsoft Windows Adobe Font Manager Library contains an unspecified vulnerabili | |
CVE-2020-17144 |
Exchange Server | — | — | 2021-11-03 | 2022-05-03 | Microsoft Exchange Server improperly validates cmdlet arguments which allow an a | |
CVE-2020-0986 |
Windows | — | — | 2021-11-03 | 2022-05-03 | Microsoft Windows kernel contains an unspecified vulnerability when handling obj | |
CVE-2020-1020 |
Windows | — | — | 2021-11-03 | 2022-05-03 | Microsoft Windows Adobe Font Manager Library contains an unspecified vulnerabili | |
CVE-2021-38645 |
Open Management Infrastructure (OMI) | — | — | 2021-11-03 | 2021-11-17 | Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extens | |
CVE-2021-34523 |
Exchange Server | — | — | 2021-11-03 | 2021-11-17 | RW | Microsoft Exchange Server contains an unspecified vulnerability that allows for |
CVE-2017-7269 |
Internet Information Services (IIS) | — | — | 2021-11-03 | 2022-05-03 | Microsoft Windows Server 2003 R2 contains a buffer overflow vulnerability in Int | |
CVE-2021-36948 |
Windows | — | — | 2021-11-03 | 2021-11-17 | Microsoft Windows Update Medic Service contains an unspecified vulnerability tha | |
CVE-2021-38649 |
Open Management Infrastructure (OMI) | — | — | 2021-11-03 | 2021-11-17 | Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extens | |
CVE-2020-0688 |
Exchange Server | — | — | 2021-11-03 | 2022-05-03 | RW | Microsoft Exchange Server Validation Key fails to properly create unique keys at |
CVE-2017-0143 |
Windows | — | — | 2021-11-03 | 2022-05-03 | RW | Microsoft Windows Server Message Block 1.0 (SMBv1) contains an unspecified vulne |
CVE-2016-7255 |
Win32k | — | — | 2021-11-03 | 2022-05-03 | RW | Microsoft Win32k kernel-mode driver fails to properly handle objects in memory w |
CVE-2019-0708 |
Remote Desktop Services | — | — | 2021-11-03 | 2022-05-03 | RW | Microsoft Remote Desktop Services, formerly known as Terminal Service, contains |
CVE-2021-34473 |
Exchange Server | — | — | 2021-11-03 | 2021-11-17 | RW | Microsoft Exchange Server contains an unspecified vulnerability that allows for |
CVE-2020-1464 |
Windows | — | — | 2021-11-03 | 2022-05-03 | Microsoft Windows contains a spoofing vulnerability when Windows incorrectly val | |
CVE-2021-1732 |
Win32k | — | — | 2021-11-03 | 2021-11-17 | RW | Microsoft Win32k contains an unspecified vulnerability that allows for privilege |
CVE-2021-34527 |
Windows | — | — | 2021-11-03 | 2022-05-03 | RW | Microsoft Windows Print Spooler contains an unspecified vulnerability due to the |
CVE-2021-31207 |
Exchange Server | — | — | 2021-11-03 | 2021-11-17 | RW | Microsoft Exchange Server contains an unspecified vulnerability that allows for |
CVE-2019-0803 |
Win32k | — | — | 2021-11-03 | 2022-05-03 | RW | Microsoft Win32k contains an unspecified vulnerability due to it failing to prop |
CVE-2020-1040 |
Hyper-V RemoteFX | — | — | 2021-11-03 | 2022-05-03 | Microsoft Hyper-V RemoteFX vGPU contains an improper input validation vulnerabil | |
CVE-2021-28310 |
Win32k | — | — | 2021-11-03 | 2021-11-17 | Microsoft Windows Win32k contains an unspecified vulnerability that allows for p | |
CVE-2020-1350 |
Windows | — | — | 2021-11-03 | 2022-05-03 | Microsoft Windows DNS Servers fail to properly handle requests, allowing an atta | |
CVE-2021-26411 |
Internet Explorer | — | — | 2021-11-03 | 2021-11-17 | RW | Microsoft Internet Explorer contains an unspecified vulnerability that allows fo |
CVE-2019-0859 |
Win32k | — | — | 2021-11-03 | 2022-05-03 | RW | Microsoft Win32k fails to properly handle objects in memory causing privilege es |
CVE-2021-40444 |
MSHTML | — | — | 2021-11-03 | 2021-11-17 | RW | Microsoft MSHTML contains a unspecified vulnerability that allows for remote cod |
CVE-2017-8759 |
.NET Framework | — | — | 2021-11-03 | 2022-05-03 | Microsoft .NET Framework contains a remote code execution vulnerability when pro | |
CVE-2018-8653 |
Internet Explorer | — | — | 2021-11-03 | 2022-05-03 | Microsoft Internet Explorer contains a memory corruption vulnerability due to ho | |
CVE-2019-0797 |
Win32k | — | — | 2021-11-03 | 2022-05-03 | Microsoft Win32k contains a privilege escalation vulnerability when the Win32k c | |
CVE-2021-36942 |
Windows | — | — | 2021-11-03 | 2021-11-17 | RW | Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerabili |
CVE-2019-1215 |
Windows | — | — | 2021-11-03 | 2022-05-03 | RW | Microsoft Windows contains an unspecified vulnerability due to the way ws2ifsl.s |
CVE-2018-0798 |
Office | — | — | 2021-11-03 | 2022-05-03 | Microsoft Office contains a memory corruption vulnerability due to the way objec | |
CVE-2018-0802 |
Office | — | — | 2021-11-03 | 2022-05-03 | RW | Microsoft Office contains a memory corruption vulnerability due to the way objec |
CVE-2012-0158 |
MSCOMCTL.OCX | — | — | 2021-11-03 | 2022-05-03 | RW | Microsoft MSCOMCTL.OCX contains an unspecified vulnerability that allows for rem |
CVE-2015-1641 |
Office | — | — | 2021-11-03 | 2022-05-03 | Microsoft Office contains a memory corruption vulnerability due to failure to pr | |
CVE-2021-27085 |
Internet Explorer | — | — | 2021-11-03 | 2021-11-17 | Microsoft Internet Explorer contains an unspecified vulnerability that allows fo | |
CVE-2019-0541 |
MSHTML | — | — | 2021-11-03 | 2022-05-03 | Microsoft MSHTML engine contains an improper input validation vulnerability that | |
CVE-2017-11882 |
Office | — | — | 2021-11-03 | 2022-05-03 | RW | Microsoft Office contains a memory corruption vulnerability that allows remote c |
CVE-2020-0674 |
Internet Explorer | — | — | 2021-11-03 | 2022-05-03 | Microsoft Internet Explorer contains a memory corruption vulnerability due to th | |
CVE-2021-27059 |
Office | — | — | 2021-11-03 | 2021-11-17 | Microsoft Office contains an unspecified vulnerability that allows for remote co | |
CVE-2019-1367 |
Internet Explorer | — | — | 2021-11-03 | 2022-05-03 | RW | Microsoft Internet Explorer contains a memory corruption vulnerability in how th |
CVE-2017-0199 |
Office and WordPad | — | — | 2021-11-03 | 2022-05-03 | RW | Microsoft Office and WordPad contain an unspecified vulnerability due to the way |
CVE-2020-1380 |
Internet Explorer | — | — | 2021-11-03 | 2022-05-03 | Microsoft Internet Explorer contains a memory corruption vulnerability which can | |
CVE-2019-1429 |
Internet Explorer | — | — | 2021-11-03 | 2022-05-03 | Microsoft Internet Explorer contains a memory corruption vulnerability which can | |
CVE-2017-11774 |
Office | — | — | 2021-11-03 | 2022-05-03 | Microsoft Office Outlook contains a security feature bypass vulnerability due to | |
CVE-2020-0968 |
Internet Explorer | — | — | 2021-11-03 | 2022-05-03 | RW | Microsoft Internet Explorer contains a memory corruption vulnerability due to ho |
CVE-2020-1472 |
Netlogon | — | — | 2021-11-03 | 2022-05-03 | RW | Microsoft's Netlogon Remote Protocol (MS-NRPC) contains a privilege escalation v |
CVE-2021-26855 |
Exchange Server | — | — | 2021-11-03 | 2022-05-03 | RW | Microsoft Exchange Server contains an unspecified vulnerability that allows for |
CVE-2021-26858 |
Exchange Server | — | — | 2021-11-03 | 2022-05-03 | RW | Microsoft Exchange Server contains an unspecified vulnerability that allows for |
CVE-2021-27065 |
Exchange Server | — | — | 2021-11-03 | 2022-05-03 | RW | Microsoft Exchange Server contains an unspecified vulnerability that allows for |
CVE-2020-1054 |
Win32k | — | — | 2021-11-03 | 2022-05-03 | Microsoft Win32k contains a privilege escalation vulnerability when the Windows | |
CVE-2021-1675 |
Windows | — | — | 2021-11-03 | 2021-11-17 | RW | Microsoft Windows Print Spooler contains an unspecified vulnerability that allow |
CVE-2021-34448 |
Windows | — | — | 2021-11-03 | 2021-11-17 | Microsoft Windows Scripting Engine contains an unspecified vulnerability that al | |
CVE-2020-0601 |
Windows | — | — | 2021-11-03 | 2022-05-03 | Microsoft Windows CryptoAPI (Crypt32.dll) contains a spoofing vulnerability in t | |
CVE-2019-0604 |
SharePoint | — | — | 2021-11-03 | 2022-05-03 | RW | Microsoft SharePoint fails to check the source markup of an application package. |
CVE-2020-0646 |
.NET Framework | — | — | 2021-11-03 | 2022-05-03 | Microsoft .NET Framework contains an improper input validation vulnerability tha | |
CVE-2019-0808 |
Win32k | — | — | 2021-11-03 | 2022-05-03 | Microsoft Win32k contains a privilege escalation vulnerability due to the compon | |
CVE-2021-26857 |
Exchange Server | — | — | 2021-11-03 | 2022-05-03 | RW | Microsoft Exchange Server contains an unspecified vulnerability that allows for |
CVE-2020-1147 |
.NET Framework, SharePoint, Visual Studio | — | — | 2021-11-03 | 2022-05-03 | Microsoft .NET Framework, Microsoft SharePoint, and Visual Studio contain a remo | |
CVE-2019-1214 |
Windows | — | — | 2021-11-03 | 2022-05-03 | Microsoft Windows Common Log File System (CLFS) driver improperly handles object | |
CVE-2016-3235 |
Office | — | — | 2021-11-03 | 2022-05-03 | Microsoft Office Object Linking & Embedding (OLE) dynamic link library (DLL) con | |
CVE-2019-0863 |
Windows | — | — | 2021-11-03 | 2022-05-03 | Microsoft Windows Error Reporting (WER) contains a privilege escalation vulnerab | |
CVE-2021-36955 |
Windows | — | — | 2021-11-03 | 2021-11-17 | RW | Microsoft Windows Common Log File System (CLFS) driver contains an unspecified v |
CVE-2021-38648 |
Open Management Infrastructure (OMI) | — | — | 2021-11-03 | 2021-11-17 | Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extens |