Microsoft vulnerabilities
- Microsoft has 6,950 CVE records published between 28 Oct 2023 and 28 Oct 2026, ranking #2 of 420 vendors on this site by that count.
- Of the 6,949 with a CVSS score, 5,166 (74.3%) are rated critical or high; 1 (0% of all) have no CVSS score.
- 390 vulnerabilities attributed to Microsoft are listed in CISA's Known Exploited Vulnerabilities (KEV) catalog; the most recent, CVE-2026-96951, was added on 13 Oct 2026.
- 117 of them (30%) are marked as known to be used in ransomware campaigns.
- For the 390 KEV entries with a published CVE record, the median time from CVE publication to KEV listing is 522 days.
Records are attributed to Microsoft from the vendor named in the source records. About the data.
CVE records per year
Show data as a table
| Year | CVE records |
|---|---|
| 2017 | 696 |
| 2018 | 712 |
| 2019 | 847 |
| 2020 | 1,265 |
| 2021 | 891 |
| 2022 | 933 |
| 2023 | 997 |
| 2024 | 1,113 |
| 2025 | 1,256 |
| 2026 | 4,473 |
2026 is partial (through 28 Oct 2026), shown in a lighter bar.
| Year | Records | Critical | High | Critical or high | Not scored |
|---|---|---|---|---|---|
| 2026 | 4,473 | 275 | 3,072 | 74.8% | 0% |
| 2025 | 1,256 | 49 | 875 | 73.6% | 0% |
| 2024 | 1,113 | 37 | 782 | 73.7% | 0.1% |
| 2023 | 997 | 37 | 674 | 71.3% | 0% |
| 2022 | 933 | 20 | 643 | 71.1% | 0% |
| 2021 | 891 | 36 | 596 | 72.5% | 2.1% |
| 2020 | 1,265 | 11 | 399 | 66.6% | 51.3% |
| 2019 | 847 | 10 | 104 | 58.8% | 77.1% |
| 2018 | 712 | 0 | 16 | 84.2% | 97.3% |
| 2017 | 696 | 2 | 25 | 93.1% | 95.8% |
| Before 2017 | 2,889 | ||||
Source: CVE List V5 (CVE Program), cve_2026-10-28_0000Z, as of 28 Oct 2026. About the data.
Exploited vulnerabilities in CISA's KEV catalog
| CVE | Product | Name | Added | Ransomware |
|---|---|---|---|---|
| CVE-2026-96951 | Windows | Microsoft Windows Command Injection Vulnerability | 2026-10-13 | Unknown |
| CVE-2026-65660 | SharePoint | Microsoft SharePoint Code Injection Vulnerability | 2026-09-25 | Unknown |
| CVE-2026-81963 | Windows | Microsoft Windows Link Following Vulnerability | 2026-09-08 | Unknown |
| CVE-2026-85880 | Windows | Microsoft Windows Heap-Based Buffer Overflow Vulnerability | 2026-09-08 | Unknown |
| CVE-2019-1068 | SQL Server | Microsoft SQL Server Remote Code Execution Vulnerability | 2026-08-26 | Unknown |
| CVE-2026-33824 | Internet Key Exchange (IKE) Service Extensions | Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability | 2026-08-18 | Unknown |
| CVE-2026-55040 | SharePoint | Microsoft SharePoint Weak Authentication Vulnerability | 2026-08-18 | Unknown |
| CVE-2026-68820 | Windows Ancillary Function Driver for WinSock | Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability | 2026-08-11 | Unknown |
| CVE-2026-50522 | SharePoint | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 2026-07-22 | Unknown |
| CVE-2026-58644 | SharePoint | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 2026-07-16 | Unknown |
| CVE-2026-56155 | Active Directory Federation Services | Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability | 2026-07-14 | Unknown |
| CVE-2026-56164 | SharePoint Server | Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability | 2026-07-14 | Unknown |
| CVE-2026-45659 | SharePoint Server | Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability | 2026-07-01 | Known |
| CVE-2008-4250 | Windows | Microsoft Windows Buffer Overflow Vulnerability | 2026-05-20 | Unknown |
| CVE-2009-1537 | DirectX | Microsoft DirectX NULL Byte Overwrite Vulnerability | 2026-05-20 | Unknown |
| CVE-2010-0249 | Internet Explorer | Microsoft Internet Explorer Use-After-Free Vulnerability | 2026-05-20 | Unknown |
| CVE-2010-0806 | Internet Explorer | Microsoft Internet Explorer Use-After-Free Vulnerability | 2026-05-20 | Unknown |
| CVE-2026-41091 | Defender | Microsoft Defender Link Following Vulnerability | 2026-05-20 | Unknown |
| CVE-2026-45498 | Defender | Microsoft Defender Denial of Service Vulnerability | 2026-05-20 | Unknown |
| CVE-2026-42897 | Microsoft | Microsoft Exchange Server Cross-Site Scripting Vulnerability | 2026-05-15 | Unknown |
| CVE-2026-32202 | Windows | Microsoft Windows Protection Mechanism Failure Vulnerability | 2026-04-28 | Unknown |
| CVE-2026-33825 | Defender | Microsoft Defender Insufficient Granularity of Access Control Vulnerability | 2026-04-22 | Known |
| CVE-2009-0238 | Office | Microsoft Office Remote Code Execution | 2026-04-14 | Unknown |
| CVE-2026-32201 | SharePoint Server | Microsoft SharePoint Server Improper Input Validation Vulnerability | 2026-04-14 | Unknown |
| CVE-2012-1854 | Visual Basic for Applications (VBA) | Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability | 2026-04-13 | Unknown |
| CVE-2023-21529 | Exchange Server | Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability | 2026-04-13 | Known |
| CVE-2023-36424 | Windows | Microsoft Windows Out-of-Bounds Read Vulnerability | 2026-04-13 | Unknown |
| CVE-2025-60710 | Windows | Microsoft Windows Link Following Vulnerability | 2026-04-13 | Known |
| CVE-2026-20963 | SharePoint | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 2026-03-18 | Unknown |
| CVE-2008-0015 | Windows | Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability | 2026-02-17 | Unknown |
| CVE-2024-43468 | Configuration Manager | Microsoft Configuration Manager SQL Injection Vulnerability | 2026-02-12 | Unknown |
| CVE-2026-21510 | Windows | Microsoft Windows Shell Protection Mechanism Failure Vulnerability | 2026-02-10 | Unknown |
| CVE-2026-21513 | Windows | Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability | 2026-02-10 | Unknown |
| CVE-2026-21514 | Office | Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability | 2026-02-10 | Unknown |
| CVE-2026-21519 | Windows | Microsoft Windows Type Confusion Vulnerability | 2026-02-10 | Unknown |
| CVE-2026-21525 | Windows | Microsoft Windows NULL Pointer Dereference Vulnerability | 2026-02-10 | Unknown |
| CVE-2026-21533 | Windows | Microsoft Windows Improper Privilege Management Vulnerability | 2026-02-10 | Unknown |
| CVE-2026-21509 | Office | Microsoft Office Security Feature Bypass Vulnerability | 2026-01-26 | Unknown |
| CVE-2026-20805 | Windows | Microsoft Windows Information Disclosure Vulnerability | 2026-01-13 | Unknown |
| CVE-2009-0556 | Office | Microsoft Office PowerPoint Code Injection Vulnerability | 2026-01-07 | Unknown |
| CVE-2025-62221 | Windows | Microsoft Windows Use After Free Vulnerability | 2025-12-09 | Unknown |
| CVE-2025-62215 | Windows | Microsoft Windows Race Condition Vulnerability | 2025-11-12 | Unknown |
| CVE-2025-59287 | Windows | Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability | 2025-10-24 | Unknown |
| CVE-2025-33073 | Windows | Microsoft Windows SMB Client Improper Access Control Vulnerability | 2025-10-20 | Unknown |
| CVE-2025-24990 | Windows | Microsoft Windows Untrusted Pointer Dereference Vulnerability | 2025-10-14 | Unknown |
| CVE-2025-59230 | Windows | Microsoft Windows Improper Access Control Vulnerability | 2025-10-14 | Unknown |
| CVE-2010-3962 | Internet Explorer | Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability | 2025-10-06 | Unknown |
| CVE-2011-3402 | Windows | Microsoft Windows Remote Code Execution Vulnerability | 2025-10-06 | Unknown |
| CVE-2013-3918 | Windows | Microsoft Windows Out-of-Bounds Write Vulnerability | 2025-10-06 | Unknown |
| CVE-2021-43226 | Windows | Microsoft Windows Privilege Escalation Vulnerability | 2025-10-06 | Known |
| CVE-2007-0671 | Office | Microsoft Office Excel Remote Code Execution Vulnerability | 2025-08-12 | Unknown |
| CVE-2013-3893 | Internet Explorer | Microsoft Internet Explorer Resource Management Errors Vulnerability | 2025-08-12 | Unknown |
| CVE-2025-49704 | SharePoint | Microsoft SharePoint Code Injection Vulnerability | 2025-07-22 | Known |
| CVE-2025-49706 | SharePoint | Microsoft SharePoint Improper Authentication Vulnerability | 2025-07-22 | Known |
| CVE-2025-53770 | SharePoint | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 2025-07-20 | Known |
| CVE-2025-33053 | Windows | Microsoft Windows External Control of File Name or Path Vulnerability | 2025-06-10 | Unknown |
| CVE-2025-30397 | Windows | Microsoft Windows Scripting Engine Type Confusion Vulnerability | 2025-05-13 | Unknown |
| CVE-2025-30400 | Windows | Microsoft Windows DWM Core Library Use-After-Free Vulnerability | 2025-05-13 | Unknown |
| CVE-2025-32701 | Windows | Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability | 2025-05-13 | Unknown |
| CVE-2025-32706 | Windows | Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability | 2025-05-13 | Unknown |
| CVE-2025-32709 | Windows | Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability | 2025-05-13 | Unknown |
| CVE-2025-24054 | Windows | Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability | 2025-04-17 | Unknown |
| CVE-2025-29824 | Windows | Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability | 2025-04-08 | Known |
| CVE-2025-24983 | Windows | Microsoft Windows Win32k Use-After-Free Vulnerability | 2025-03-11 | Unknown |
| CVE-2025-24984 | Windows | Microsoft Windows NTFS Information Disclosure Vulnerability | 2025-03-11 | Unknown |
| CVE-2025-24985 | Windows | Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability | 2025-03-11 | Unknown |
| CVE-2025-24991 | Windows | Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability | 2025-03-11 | Unknown |
| CVE-2025-24993 | Windows | Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability | 2025-03-11 | Unknown |
| CVE-2025-26633 | Windows | Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability | 2025-03-11 | Known |
| CVE-2018-8639 | Windows | Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability | 2025-03-03 | Known |
| CVE-2024-49035 | Partner Center | Microsoft Partner Center Improper Access Control Vulnerability | 2025-02-25 | Unknown |
| CVE-2025-24989 | Power Pages | Microsoft Power Pages Improper Access Control Vulnerability | 2025-02-21 | Unknown |
| CVE-2025-21391 | Windows | Microsoft Windows Storage Link Following Vulnerability | 2025-02-11 | Unknown |
| CVE-2025-21418 | Windows | Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability | 2025-02-11 | Unknown |
| CVE-2024-21413 | Office Outlook | Microsoft Outlook Improper Input Validation Vulnerability | 2025-02-06 | Unknown |
| CVE-2024-29059 | .NET Framework | Microsoft .NET Framework Information Disclosure Vulnerability | 2025-02-04 | Unknown |
| CVE-2025-21333 | Windows | Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability | 2025-01-14 | Unknown |
| CVE-2025-21334 | Windows | Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability | 2025-01-14 | Unknown |
| CVE-2025-21335 | Windows | Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability | 2025-01-14 | Unknown |
| CVE-2024-35250 | Windows | Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability | 2024-12-16 | Unknown |
| CVE-2024-49138 | Windows | Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability | 2024-12-10 | Unknown |
| CVE-2024-43451 | Windows | Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability | 2024-11-12 | Unknown |
| CVE-2024-49039 | Windows | Microsoft Windows Task Scheduler Privilege Escalation Vulnerability | 2024-11-12 | Known |
| CVE-2024-38094 | SharePoint | Microsoft SharePoint Deserialization Vulnerability | 2024-10-22 | Known |
| CVE-2024-30088 | Windows | Microsoft Windows Kernel TOCTOU Race Condition Vulnerability | 2024-10-15 | Known |
| CVE-2024-43572 | Windows | Microsoft Windows Management Console Remote Code Execution Vulnerability | 2024-10-08 | Unknown |
| CVE-2024-43573 | Windows | Microsoft Windows MSHTML Platform Spoofing Vulnerability | 2024-10-08 | Unknown |
| CVE-2020-0618 | SQL Server | Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability | 2024-09-18 | Known |
| CVE-2024-43461 | Windows | Microsoft Windows MSHTML Platform Spoofing Vulnerability | 2024-09-16 | Unknown |
| CVE-2024-38014 | Windows | Microsoft Windows Installer Improper Privilege Management Vulnerability | 2024-09-10 | Unknown |
| CVE-2024-38217 | Windows | Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability | 2024-09-10 | Unknown |
| CVE-2024-38226 | Publisher | Microsoft Publisher Protection Mechanism Failure Vulnerability | 2024-09-10 | Unknown |
| CVE-2021-31196 | Exchange Server | Microsoft Exchange Server Information Disclosure Vulnerability | 2024-08-21 | Unknown |
| CVE-2024-38106 | Windows | Microsoft Windows Kernel Privilege Escalation Vulnerability | 2024-08-13 | Unknown |
| CVE-2024-38107 | Windows | Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability | 2024-08-13 | Unknown |
| CVE-2024-38178 | Windows | Microsoft Windows Scripting Engine Memory Corruption Vulnerability | 2024-08-13 | Unknown |
| CVE-2024-38189 | Project | Microsoft Project Remote Code Execution Vulnerability | 2024-08-13 | Unknown |
| CVE-2024-38193 | Windows | Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability | 2024-08-13 | Unknown |
| CVE-2024-38213 | Windows | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | 2024-08-13 | Unknown |
| CVE-2018-0824 | Windows | Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability | 2024-08-05 | Unknown |
| CVE-2012-4792 | Internet Explorer | Microsoft Internet Explorer Use-After-Free Vulnerability | 2024-07-23 | Unknown |
| CVE-2024-38080 | Windows | Microsoft Windows Hyper-V Privilege Escalation Vulnerability | 2024-07-09 | Unknown |
| CVE-2024-38112 | Windows | Microsoft Windows MSHTML Platform Spoofing Vulnerability | 2024-07-09 | Unknown |
| CVE-2024-26169 | Windows | Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability | 2024-06-13 | Known |
| CVE-2024-30040 | Windows | Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability | 2024-05-14 | Unknown |
| CVE-2024-30051 | DWM Core Library | Microsoft DWM Core Library Privilege Escalation Vulnerability | 2024-05-14 | Known |
| CVE-2024-29988 | SmartScreen Prompt | Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability | 2024-04-30 | Unknown |
| CVE-2022-38028 | Windows | Microsoft Windows Print Spooler Privilege Escalation Vulnerability | 2024-04-23 | Unknown |
| CVE-2023-24955 | SharePoint Server | Microsoft SharePoint Server Code Injection Vulnerability | 2024-03-26 | Known |
| CVE-2024-21338 | Windows | Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability | 2024-03-04 | Known |
| CVE-2023-29360 | Streaming Service | Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability | 2024-02-29 | Unknown |
| CVE-2024-21410 | Exchange Server | Microsoft Exchange Server Privilege Escalation Vulnerability | 2024-02-15 | Unknown |
| CVE-2024-21351 | Windows | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | 2024-02-13 | Unknown |
| CVE-2024-21412 | Windows | Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability | 2024-02-13 | Known |
| CVE-2023-29357 | SharePoint Server | Microsoft SharePoint Server Privilege Escalation Vulnerability | 2024-01-10 | Known |
| CVE-2023-36584 | Windows | Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | 2023-11-16 | Unknown |
| CVE-2023-36025 | Windows | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | 2023-11-14 | Unknown |
| CVE-2023-36033 | Windows | Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability | 2023-11-14 | Unknown |
| CVE-2023-36036 | Windows | Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability | 2023-11-14 | Unknown |
| CVE-2023-36563 | WordPad | Microsoft WordPad Information Disclosure Vulnerability | 2023-10-10 | Unknown |
| CVE-2023-41763 | Skype for Business | Microsoft Skype for Business Privilege Escalation Vulnerability | 2023-10-10 | Unknown |
| CVE-2023-28229 | Windows CNG Key Isolation Service | Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability | 2023-10-04 | Unknown |
| CVE-2023-36761 | Word | Microsoft Word Information Disclosure Vulnerability | 2023-09-12 | Unknown |
| CVE-2023-36802 | Streaming Service Proxy | Microsoft Streaming Service Proxy Privilege Escalation Vulnerability | 2023-09-12 | Unknown |
| CVE-2023-38180 | .NET Core and Visual Studio | Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability | 2023-08-09 | Unknown |
| CVE-2023-36884 | Windows | Microsoft Windows Search Remote Code Execution Vulnerability | 2023-07-17 | Known |
| CVE-2023-32046 | Windows | Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability | 2023-07-11 | Unknown |
| CVE-2023-32049 | Windows | Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability | 2023-07-11 | Unknown |
| CVE-2023-35311 | Outlook | Microsoft Outlook Security Feature Bypass Vulnerability | 2023-07-11 | Unknown |
| CVE-2023-36874 | Windows | Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability | 2023-07-11 | Unknown |
| CVE-2016-0165 | Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 2023-06-22 | Unknown |
| CVE-2023-29336 | Win32k | Microsoft Win32K Privilege Escalation Vulnerability | 2023-05-09 | Unknown |
| CVE-2023-28252 | Windows | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | 2023-04-11 | Known |
| CVE-2019-1388 | Windows | Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability | 2023-04-07 | Known |
| CVE-2013-3163 | Internet Explorer | Microsoft Internet Explorer Memory Corruption Vulnerability | 2023-03-30 | Unknown |
| CVE-2023-23397 | Office | Microsoft Office Outlook Privilege Escalation Vulnerability | 2023-03-14 | Unknown |
| CVE-2023-24880 | Windows | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | 2023-03-14 | Known |
| CVE-2023-21715 | Office | Microsoft Office Publisher Security Feature Bypass Vulnerability | 2023-02-14 | Unknown |
| CVE-2023-21823 | Windows | Microsoft Windows Graphic Component Privilege Escalation Vulnerability | 2023-02-14 | Unknown |
| CVE-2023-23376 | Windows | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | 2023-02-14 | Known |
| CVE-2022-41080 | Exchange Server | Microsoft Exchange Server Privilege Escalation Vulnerability | 2023-01-10 | Known |
| CVE-2023-21674 | Windows | Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability | 2023-01-10 | Unknown |
| CVE-2022-44698 | Defender | Microsoft Defender SmartScreen Security Feature Bypass Vulnerability | 2022-12-13 | Known |
| CVE-2022-41049 | Windows | Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | 2022-11-14 | Unknown |
| CVE-2022-41073 | Windows | Microsoft Windows Print Spooler Privilege Escalation Vulnerability | 2022-11-08 | Known |
| CVE-2022-41091 | Windows | Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | 2022-11-08 | Known |
| CVE-2022-41125 | Windows | Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability | 2022-11-08 | Unknown |
| CVE-2022-41128 | Windows | Microsoft Windows Scripting Languages Remote Code Execution Vulnerability | 2022-11-08 | Unknown |
| CVE-2022-41033 | Windows COM+ Event System Service | Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability | 2022-10-11 | Unknown |
| CVE-2022-41040 | Exchange Server | Microsoft Exchange Server Server-Side Request Forgery Vulnerability | 2022-09-30 | Known |
| CVE-2022-41082 | Exchange Server | Microsoft Exchange Server Remote Code Execution Vulnerability | 2022-09-30 | Known |
| CVE-2010-2568 | Windows | Microsoft Windows Remote Code Execution Vulnerability | 2022-09-15 | Unknown |
| CVE-2022-37969 | Windows | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | 2022-09-14 | Known |
| CVE-2022-21971 | Windows | Microsoft Windows Runtime Remote Code Execution Vulnerability | 2022-08-18 | Unknown |
| CVE-2022-26923 | Active Directory | Microsoft Active Directory Domain Services Privilege Escalation Vulnerability | 2022-08-18 | Unknown |
| CVE-2022-34713 | Windows | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability | 2022-08-09 | Unknown |
| CVE-2022-22047 | Windows | Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability | 2022-07-12 | Unknown |
| CVE-2022-26925 | Windows | Microsoft Windows LSA Spoofing Vulnerability | 2022-07-01 | Unknown |
| CVE-2022-30190 | Windows | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability | 2022-06-14 | Known |
| CVE-2006-2492 | Word | Microsoft Word Malformed Object Pointer Vulnerability | 2022-06-08 | Unknown |
| CVE-2009-0557 | Office | Microsoft Office Object Record Corruption Vulnerability | 2022-06-08 | Unknown |
| CVE-2009-0563 | Office | Microsoft Office Buffer Overflow Vulnerability | 2022-06-08 | Unknown |
| CVE-2010-2572 | PowerPoint | Microsoft PowerPoint Buffer Overflow Vulnerability | 2022-06-08 | Unknown |
| CVE-2012-0151 | Windows | Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability | 2022-06-08 | Unknown |
| CVE-2012-1889 | XML Core Services | Microsoft XML Core Services Memory Corruption Vulnerability | 2022-06-08 | Unknown |
| CVE-2012-4969 | Internet Explorer | Microsoft Internet Explorer Use-After-Free Vulnerability | 2022-06-08 | Unknown |
| CVE-2013-1331 | Office | Microsoft Office Buffer Overflow Vulnerability | 2022-06-08 | Unknown |
| CVE-2013-0074 | Silverlight | Microsoft Silverlight Double Dereference Vulnerability | 2022-05-25 | Known |
| CVE-2013-3896 | Silverlight | Microsoft Silverlight Information Disclosure Vulnerability | 2022-05-25 | Unknown |
| CVE-2013-7331 | Internet Explorer | Microsoft Internet Explorer Information Disclosure Vulnerability | 2022-05-25 | Unknown |
| CVE-2014-2817 | Internet Explorer | Microsoft Internet Explorer Privilege Escalation Vulnerability | 2022-05-25 | Unknown |
| CVE-2014-4077 | Input Method Editor (IME) Japanese | Microsoft IME Japanese Privilege Escalation Vulnerability | 2022-05-25 | Unknown |
| CVE-2014-4123 | Internet Explorer | Microsoft Internet Explorer Privilege Escalation Vulnerability | 2022-05-25 | Unknown |
| CVE-2014-4148 | Windows | Microsoft Windows Remote Code Execution Vulnerability | 2022-05-25 | Unknown |
| CVE-2015-0016 | Windows | Microsoft Windows TS WebProxy Directory Traversal Vulnerability | 2022-05-25 | Unknown |
| CVE-2015-0071 | Internet Explorer | Microsoft Internet Explorer ASLR Bypass Vulnerability | 2022-05-25 | Unknown |
| CVE-2015-1671 | Windows | Microsoft Windows Remote Code Execution Vulnerability | 2022-05-25 | Unknown |
| CVE-2015-1769 | Windows | Microsoft Windows Mount Manager Privilege Escalation Vulnerability | 2022-05-25 | Unknown |
| CVE-2015-2360 | Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 2022-05-25 | Unknown |
| CVE-2015-2425 | Internet Explorer | Microsoft Internet Explorer Memory Corruption Vulnerability | 2022-05-25 | Unknown |
| CVE-2015-6175 | Windows | Microsoft Windows Kernel Privilege Escalation Vulnerability | 2022-05-25 | Unknown |
| CVE-2016-0034 | Silverlight | Microsoft Silverlight Runtime Remote Code Execution Vulnerability | 2022-05-25 | Known |
| CVE-2016-3393 | Windows | Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability | 2022-05-25 | Unknown |
| CVE-2016-7256 | Windows | Microsoft Windows Open Type Font Remote Code Execution Vulnerability | 2022-05-25 | Unknown |
| CVE-2016-0162 | Internet Explorer | Microsoft Internet Explorer Information Disclosure Vulnerability | 2022-05-24 | Unknown |
| CVE-2016-3298 | Internet Explorer | Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability | 2022-05-24 | Unknown |
| CVE-2016-3351 | Internet Explorer and Edge | Microsoft Internet Explorer and Edge Information Disclosure Vulnerability | 2022-05-24 | Known |
| CVE-2017-0005 | Windows | Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability | 2022-05-24 | Unknown |
| CVE-2017-0022 | XML Core Services | Microsoft XML Core Services Information Disclosure Vulnerability | 2022-05-24 | Unknown |
| CVE-2017-0147 | SMBv1 server | Microsoft Windows SMBv1 Information Disclosure Vulnerability | 2022-05-24 | Known |
| CVE-2017-0149 | Internet Explorer | Microsoft Internet Explorer Memory Corruption Vulnerability | 2022-05-24 | Unknown |
| CVE-2017-0210 | Internet Explorer | Microsoft Internet Explorer Privilege Escalation Vulnerability | 2022-05-24 | Unknown |
| CVE-2017-8543 | Windows | Microsoft Windows Search Remote Code Execution Vulnerability | 2022-05-24 | Unknown |
| CVE-2018-8611 | Windows | Microsoft Windows Kernel Privilege Escalation Vulnerability | 2022-05-24 | Unknown |
| CVE-2018-8589 | Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 2022-05-23 | Unknown |
| CVE-2019-0676 | Internet Explorer | Microsoft Internet Explorer Information Disclosure Vulnerability | 2022-05-23 | Unknown |
| CVE-2019-0703 | Windows | Microsoft Windows SMB Information Disclosure Vulnerability | 2022-05-23 | Unknown |
| CVE-2019-0880 | Windows | Microsoft Windows Privilege Escalation Vulnerability | 2022-05-23 | Unknown |
| CVE-2019-1130 | Windows | Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability | 2022-05-23 | Known |
| CVE-2019-1385 | Windows | Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability | 2022-05-23 | Known |
| CVE-2020-0638 | Update Notification Manager | Microsoft Update Notification Manager Privilege Escalation Vulnerability | 2022-05-23 | Known |
| CVE-2020-1027 | Windows | Microsoft Windows Kernel Privilege Escalation Vulnerability | 2022-05-23 | Unknown |
| CVE-2014-0322 | Internet Explorer | Microsoft Internet Explorer Use-After-Free Vulnerability | 2022-05-04 | Unknown |
| CVE-2014-4113 | Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 2022-05-04 | Unknown |
| CVE-2021-40450 | Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 2022-04-25 | Unknown |
| CVE-2021-41357 | Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 2022-04-25 | Unknown |
| CVE-2022-21919 | Windows | Microsoft Windows User Profile Service Privilege Escalation Vulnerability | 2022-04-25 | Unknown |
| CVE-2022-26904 | Windows | Microsoft Windows User Profile Service Privilege Escalation Vulnerability | 2022-04-25 | Unknown |
| CVE-2022-22718 | Windows | Microsoft Windows Print Spooler Privilege Escalation Vulnerability | 2022-04-19 | Unknown |
| CVE-2015-2502 | Internet Explorer | Microsoft Internet Explorer Memory Corruption Vulnerability | 2022-04-13 | Unknown |
| CVE-2022-24521 | Windows | Microsoft Windows CLFS Driver Privilege Escalation Vulnerability | 2022-04-13 | Known |
| CVE-2021-42278 | Active Directory | Microsoft Active Directory Domain Services Privilege Escalation Vulnerability | 2022-04-11 | Known |
| CVE-2021-42287 | Active Directory | Microsoft Active Directory Domain Services Privilege Escalation Vulnerability | 2022-04-11 | Known |
| CVE-2017-0148 | SMBv1 server | Microsoft SMBv1 Server Remote Code Execution Vulnerability | 2022-04-06 | Known |
| CVE-2021-31166 | HTTP Protocol Stack | Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability | 2022-04-06 | Unknown |
| CVE-2021-34484 | Windows | Microsoft Windows User Profile Service Privilege Escalation Vulnerability | 2022-03-31 | Unknown |
| CVE-2010-4398 | Windows | Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability | 2022-03-28 | Unknown |
| CVE-2011-2005 | Ancillary Function Driver (afd.sys) | Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability | 2022-03-28 | Unknown |
| CVE-2012-2539 | Word | Microsoft Word Remote Code Execution Vulnerability | 2022-03-28 | Unknown |
| CVE-2013-2551 | Internet Explorer | Microsoft Internet Explorer Use-After-Free Vulnerability | 2022-03-28 | Known |
| CVE-2013-3660 | Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 2022-03-28 | Unknown |
| CVE-2015-1770 | Office | Microsoft Office Uninitialized Memory Use Vulnerability | 2022-03-28 | Unknown |
| CVE-2015-2419 | Internet Explorer | Microsoft Internet Explorer Memory Corruption Vulnerability | 2022-03-28 | Unknown |
| CVE-2015-2426 | Windows | Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability | 2022-03-28 | Unknown |
| CVE-2016-0040 | Windows | Microsoft Windows Kernel Privilege Escalation Vulnerability | 2022-03-28 | Unknown |
| CVE-2016-0151 | Client-Server Run-time Subsystem (CSRSS) | Microsoft Windows CSRSS Security Feature Bypass Vulnerability | 2022-03-28 | Known |
| CVE-2016-0189 | Internet Explorer | Microsoft Internet Explorer Memory Corruption Vulnerability | 2022-03-28 | Known |
| CVE-2016-7200 | Edge | Microsoft Edge Memory Corruption Vulnerability | 2022-03-28 | Unknown |
| CVE-2016-7201 | Edge | Microsoft Edge Memory Corruption Vulnerability | 2022-03-28 | Unknown |
| CVE-2017-0037 | Edge and Internet Explorer | Microsoft Edge and Internet Explorer Type Confusion Vulnerability | 2022-03-28 | Unknown |
| CVE-2017-0059 | Internet Explorer | Microsoft Internet Explorer Information Disclosure Vulnerability | 2022-03-28 | Unknown |
| CVE-2017-0213 | Windows | Microsoft Windows Privilege Escalation Vulnerability | 2022-03-28 | Known |
| CVE-2018-8405 | DirectX Graphics Kernel (DXGKRNL) | Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability | 2022-03-28 | Known |
| CVE-2018-8406 | DirectX Graphics Kernel (DXGKRNL) | Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability | 2022-03-28 | Known |
| CVE-2018-8440 | Windows | Microsoft Windows Privilege Escalation Vulnerability | 2022-03-28 | Known |
| CVE-2021-34486 | Windows | Microsoft Windows Event Tracing Privilege Escalation Vulnerability | 2022-03-28 | Unknown |
| CVE-2021-38646 | Office | Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability | 2022-03-28 | Known |
| CVE-2014-6324 | Kerberos Key Distribution Center (KDC) | Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability | 2022-03-25 | Unknown |
| CVE-2014-6332 | Windows | Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability | 2022-03-25 | Unknown |
| CVE-2017-0146 | Windows | Microsoft Windows SMB Remote Code Execution Vulnerability | 2022-03-25 | Known |
| CVE-2018-8373 | Internet Explorer Scripting Engine | Microsoft Scripting Engine Memory Corruption Vulnerability | 2022-03-25 | Unknown |
| CVE-2018-8414 | Windows | Microsoft Windows Shell Remote Code Execution Vulnerability | 2022-03-25 | Unknown |
| CVE-2019-0903 | Graphics Device Interface (GDI) | Microsoft GDI Remote Code Execution Vulnerability | 2022-03-25 | Unknown |
| CVE-2022-21999 | Windows | Microsoft Windows Print Spooler Privilege Escalation Vulnerability | 2022-03-25 | Known |
| CVE-2015-2546 | Win32k | Microsoft Win32k Memory Corruption Vulnerability | 2022-03-15 | Known |
| CVE-2016-3309 | Windows | Microsoft Windows Kernel Privilege Escalation Vulnerability | 2022-03-15 | Known |
| CVE-2017-0101 | Windows | Microsoft Windows Transaction Manager Privilege Escalation Vulnerability | 2022-03-15 | Known |
| CVE-2018-8120 | Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 2022-03-15 | Known |
| CVE-2019-0543 | Windows | Microsoft Windows Privilege Escalation Vulnerability | 2022-03-15 | Known |
| CVE-2019-0841 | Windows | Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability | 2022-03-15 | Known |
| CVE-2019-1064 | Windows | Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability | 2022-03-15 | Known |
| CVE-2019-1069 | Task Scheduler | Microsoft Task Scheduler Privilege Escalation Vulnerability | 2022-03-15 | Known |
| CVE-2019-1129 | Windows | Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability | 2022-03-15 | Known |
| CVE-2019-1132 | Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 2022-03-15 | Unknown |
| CVE-2019-1253 | Windows | Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability | 2022-03-15 | Known |
| CVE-2019-1315 | Windows | Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability | 2022-03-15 | Known |
| CVE-2019-1322 | Windows | Microsoft Windows Privilege Escalation Vulnerability | 2022-03-15 | Known |
| CVE-2019-1405 | Windows | Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability | 2022-03-15 | Known |
| CVE-2002-0367 | Windows | Microsoft Windows Privilege Escalation Vulnerability | 2022-03-03 | Unknown |
| CVE-2004-0210 | Windows | Microsoft Windows Privilege Escalation Vulnerability | 2022-03-03 | Unknown |
| CVE-2009-1123 | Windows | Microsoft Windows Improper Input Validation Vulnerability | 2022-03-03 | Unknown |
| CVE-2009-3129 | Excel | Microsoft Excel Featheader Record Memory Corruption Vulnerability | 2022-03-03 | Unknown |
| CVE-2010-0232 | Windows | Microsoft Windows Kernel Exception Handler Vulnerability | 2022-03-03 | Unknown |
| CVE-2010-3333 | Office | Microsoft Office Stack-based Buffer Overflow Vulnerability | 2022-03-03 | Unknown |
| CVE-2011-1889 | Forefront Threat Management Gateway (TMG) | Microsoft Forefront TMG Remote Code Execution Vulnerability | 2022-03-03 | Unknown |
| CVE-2012-1856 | Office | Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability | 2022-03-03 | Unknown |
| CVE-2013-1347 | Internet Explorer | Microsoft Internet Explorer Remote Code Execution Vulnerability | 2022-03-03 | Unknown |
| CVE-2013-3897 | Internet Explorer | Microsoft Internet Explorer Use-After-Free Vulnerability | 2022-03-03 | Unknown |
| CVE-2013-5065 | Windows | Microsoft Windows Kernel Privilege Escalation Vulnerability | 2022-03-03 | Unknown |
| CVE-2014-4114 | Windows | Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability | 2022-03-03 | Unknown |
| CVE-2015-1642 | Office | Microsoft Office Memory Corruption Vulnerability | 2022-03-03 | Unknown |
| CVE-2015-1701 | Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 2022-03-03 | Known |
| CVE-2015-2387 | ATM Font Driver | Microsoft ATM Font Driver Privilege Escalation Vulnerability | 2022-03-03 | Unknown |
| CVE-2015-2424 | PowerPoint | Microsoft PowerPoint Memory Corruption Vulnerability | 2022-03-03 | Unknown |
| CVE-2015-2545 | Office | Microsoft Office Malformed EPS File Vulnerability | 2022-03-03 | Unknown |
| CVE-2016-0099 | Windows | Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability | 2022-03-03 | Known |
| CVE-2016-7193 | Office | Microsoft Office Memory Corruption Vulnerability | 2022-03-03 | Unknown |
| CVE-2016-7262 | Excel | Microsoft Office Security Feature Bypass Vulnerability | 2022-03-03 | Unknown |
| CVE-2017-0001 | Graphics Device Interface (GDI) | Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability | 2022-03-03 | Unknown |
| CVE-2017-0261 | Office | Microsoft Office Use-After-Free Vulnerability | 2022-03-03 | Unknown |
| CVE-2017-11826 | Office | Microsoft Office Remote Code Execution Vulnerability | 2022-03-03 | Unknown |
| CVE-2017-8540 | Malware Protection Engine | Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability | 2022-03-03 | Unknown |
| CVE-2018-8581 | Exchange Server | Microsoft Exchange Server Privilege Escalation Vulnerability | 2022-03-03 | Known |
| CVE-2019-1297 | Excel | Microsoft Excel Remote Code Execution Vulnerability | 2022-03-03 | Unknown |
| CVE-2021-41379 | Windows | Microsoft Windows Installer Privilege Escalation Vulnerability | 2022-03-03 | Known |
| CVE-2014-6352 | Windows | Microsoft Windows Code Injection Vulnerability | 2022-02-25 | Unknown |
| CVE-2017-0222 | Internet Explorer | Microsoft Internet Explorer Remote Code Execution Vulnerability | 2022-02-25 | Unknown |
| CVE-2017-8570 | Office | Microsoft Office Remote Code Execution Vulnerability | 2022-02-25 | Unknown |
| CVE-2013-3906 | Graphics Component | Microsoft Graphics Component Memory Corruption Vulnerability | 2022-02-15 | Unknown |
| CVE-2014-1761 | Word | Microsoft Word Memory Corruption Vulnerability | 2022-02-15 | Unknown |
| CVE-2018-8174 | Windows | Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability | 2022-02-15 | Known |
| CVE-2019-0752 | Internet Explorer | Microsoft Internet Explorer Type Confusion Vulnerability | 2022-02-15 | Known |
| CVE-2015-1635 | HTTP.sys | Microsoft HTTP.sys Remote Code Execution Vulnerability | 2022-02-10 | Unknown |
| CVE-2017-0144 | SMBv1 | Microsoft SMBv1 Remote Code Execution Vulnerability | 2022-02-10 | Known |
| CVE-2017-0145 | SMBv1 | Microsoft SMBv1 Remote Code Execution Vulnerability | 2022-02-10 | Known |
| CVE-2017-0262 | Office | Microsoft Office Remote Code Execution Vulnerability | 2022-02-10 | Unknown |
| CVE-2017-0263 | Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 2022-02-10 | Unknown |
| CVE-2017-8464 | Windows | Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability | 2022-02-10 | Unknown |
| CVE-2020-0796 | SMBv3 | Microsoft SMBv3 Remote Code Execution Vulnerability | 2022-02-10 | Known |
| CVE-2021-36934 | Windows | Microsoft Windows SAM Local Privilege Escalation Vulnerability | 2022-02-10 | Unknown |
| CVE-2022-21882 | Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 2022-02-04 | Known |
| CVE-2014-1776 | Internet Explorer | Microsoft Internet Explorer Memory Corruption Vulnerability | 2022-01-28 | Unknown |
| CVE-2020-0787 | Windows | Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability | 2022-01-28 | Known |
| CVE-2018-8453 | Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 2022-01-21 | Known |
| CVE-2021-33766 | Exchange Server | Microsoft Exchange Server Information Disclosure | 2022-01-18 | Unknown |
| CVE-2013-3900 | WinVerifyTrust function | Microsoft WinVerifyTrust function Remote Code Execution | 2022-01-10 | Unknown |
| CVE-2019-1458 | Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 2022-01-10 | Known |
| CVE-2021-43890 | Windows | Microsoft Windows AppX Installer Spoofing Vulnerability | 2021-12-15 | Known |
| CVE-2021-40449 | Windows | Microsoft Windows Win32k Privilege Escalation Vulnerability | 2021-11-17 | Known |
| CVE-2021-42292 | Office | Microsoft Excel Security Feature Bypass | 2021-11-17 | Unknown |
| CVE-2021-42321 | Exchange | Microsoft Exchange Server Remote Code Execution Vulnerability | 2021-11-17 | Known |
| CVE-2012-0158 | MSCOMCTL.OCX | Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability | 2021-11-03 | Known |
| CVE-2014-1812 | Windows | Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability | 2021-11-03 | Known |
| CVE-2015-1641 | Office | Microsoft Office Memory Corruption Vulnerability | 2021-11-03 | Unknown |
| CVE-2016-0167 | Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 2021-11-03 | Known |
| CVE-2016-0185 | Windows | Microsoft Windows Media Center Remote Code Execution Vulnerability | 2021-11-03 | Unknown |
| CVE-2016-3235 | Office | Microsoft Office OLE DLL Side Loading Vulnerability | 2021-11-03 | Unknown |
| CVE-2016-7255 | Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 2021-11-03 | Known |
| CVE-2017-0143 | Windows | Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability | 2021-11-03 | Known |
| CVE-2017-0199 | Office and WordPad | Microsoft Office and WordPad Remote Code Execution Vulnerability | 2021-11-03 | Known |
| CVE-2017-11774 | Office | Microsoft Office Outlook Security Feature Bypass Vulnerability | 2021-11-03 | Unknown |
| CVE-2017-11882 | Office | Microsoft Office Memory Corruption Vulnerability | 2021-11-03 | Known |
| CVE-2017-7269 | Internet Information Services (IIS) | Microsoft Windows Server Buffer Overflow Vulnerability | 2021-11-03 | Unknown |
| CVE-2017-8759 | .NET Framework | Microsoft .NET Framework Remote Code Execution Vulnerability | 2021-11-03 | Unknown |
| CVE-2018-0798 | Office | Microsoft Office Memory Corruption Vulnerability | 2021-11-03 | Unknown |
| CVE-2018-0802 | Office | Microsoft Office Memory Corruption Vulnerability | 2021-11-03 | Known |
| CVE-2018-8653 | Internet Explorer | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | 2021-11-03 | Unknown |
| CVE-2019-0541 | MSHTML | Microsoft MSHTML Remote Code Execution Vulnerability | 2021-11-03 | Unknown |
| CVE-2019-0604 | SharePoint | Microsoft SharePoint Remote Code Execution Vulnerability | 2021-11-03 | Known |
| CVE-2019-0708 | Remote Desktop Services | Microsoft Remote Desktop Services Remote Code Execution Vulnerability | 2021-11-03 | Known |
| CVE-2019-0797 | Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 2021-11-03 | Unknown |
| CVE-2019-0803 | Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 2021-11-03 | Known |
| CVE-2019-0808 | Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 2021-11-03 | Unknown |
| CVE-2019-0859 | Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 2021-11-03 | Known |
| CVE-2019-0863 | Windows | Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability | 2021-11-03 | Unknown |
| CVE-2019-1214 | Windows | Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability | 2021-11-03 | Unknown |
| CVE-2019-1215 | Windows | Microsoft Windows Privilege Escalation Vulnerability | 2021-11-03 | Known |
| CVE-2019-1367 | Internet Explorer | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | 2021-11-03 | Known |
| CVE-2019-1429 | Internet Explorer | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | 2021-11-03 | Unknown |
| CVE-2020-0601 | Windows | Microsoft Windows CryptoAPI Spoofing Vulnerability | 2021-11-03 | Unknown |
| CVE-2020-0646 | .NET Framework | Microsoft .NET Framework Remote Code Execution Vulnerability | 2021-11-03 | Unknown |
| CVE-2020-0674 | Internet Explorer | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | 2021-11-03 | Unknown |
| CVE-2020-0683 | Windows | Microsoft Windows Installer Privilege Escalation Vulnerability | 2021-11-03 | Unknown |
| CVE-2020-0688 | Exchange Server | Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability | 2021-11-03 | Known |
| CVE-2020-0878 | Edge and Internet Explorer | Microsoft Edge and Internet Explorer Memory Corruption Vulnerability | 2021-11-03 | Known |
| CVE-2020-0938 | Windows | Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability | 2021-11-03 | Unknown |
| CVE-2020-0968 | Internet Explorer | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | 2021-11-03 | Known |
| CVE-2020-0986 | Windows | Microsoft Windows Kernel Privilege Escalation Vulnerability | 2021-11-03 | Unknown |
| CVE-2020-1020 | Windows | Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability | 2021-11-03 | Unknown |
| CVE-2020-1040 | Hyper-V RemoteFX | Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability | 2021-11-03 | Unknown |
| CVE-2020-1054 | Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 2021-11-03 | Unknown |
| CVE-2020-1147 | .NET Framework, SharePoint, Visual Studio | Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability | 2021-11-03 | Unknown |
| CVE-2020-1350 | Windows | Microsoft Windows DNS Server Remote Code Execution Vulnerability | 2021-11-03 | Unknown |
| CVE-2020-1380 | Internet Explorer | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | 2021-11-03 | Unknown |
| CVE-2020-1464 | Windows | Microsoft Windows Spoofing Vulnerability | 2021-11-03 | Unknown |
| CVE-2020-1472 | Netlogon | Microsoft Netlogon Privilege Escalation Vulnerability | 2021-11-03 | Known |
| CVE-2020-17087 | Windows | Microsoft Windows Kernel Privilege Escalation Vulnerability | 2021-11-03 | Unknown |
| CVE-2020-17144 | Exchange Server | Microsoft Exchange Server Remote Code Execution Vulnerability | 2021-11-03 | Unknown |
| CVE-2021-1647 | Defender | Microsoft Defender Remote Code Execution Vulnerability | 2021-11-03 | Unknown |
| CVE-2021-1675 | Windows | Microsoft Windows Print Spooler Remote Code Execution Vulnerability | 2021-11-03 | Known |
| CVE-2021-1732 | Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 2021-11-03 | Known |
| CVE-2021-26411 | Internet Explorer | Microsoft Internet Explorer Memory Corruption Vulnerability | 2021-11-03 | Known |
| CVE-2021-26855 | Exchange Server | Microsoft Exchange Server Remote Code Execution Vulnerability | 2021-11-03 | Known |
| CVE-2021-26857 | Exchange Server | Microsoft Exchange Server Remote Code Execution Vulnerability | 2021-11-03 | Known |
| CVE-2021-26858 | Exchange Server | Microsoft Exchange Server Remote Code Execution Vulnerability | 2021-11-03 | Known |
| CVE-2021-27059 | Office | Microsoft Office Remote Code Execution Vulnerability | 2021-11-03 | Unknown |
| CVE-2021-27065 | Exchange Server | Microsoft Exchange Server Remote Code Execution Vulnerability | 2021-11-03 | Known |
| CVE-2021-27085 | Internet Explorer | Microsoft Internet Explorer Remote Code Execution Vulnerability | 2021-11-03 | Unknown |
| CVE-2021-28310 | Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 2021-11-03 | Unknown |
| CVE-2021-31199 | Enhanced Cryptographic Provider | Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability | 2021-11-03 | Unknown |
| CVE-2021-31201 | Enhanced Cryptographic Provider | Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability | 2021-11-03 | Unknown |
| CVE-2021-31207 | Exchange Server | Microsoft Exchange Server Security Feature Bypass Vulnerability | 2021-11-03 | Known |
| CVE-2021-31955 | Windows | Microsoft Windows Kernel Information Disclosure Vulnerability | 2021-11-03 | Unknown |
| CVE-2021-31956 | Windows | Microsoft Windows NTFS Privilege Escalation Vulnerability | 2021-11-03 | Unknown |
| CVE-2021-31979 | Windows | Microsoft Windows Kernel Privilege Escalation Vulnerability | 2021-11-03 | Unknown |
| CVE-2021-33739 | Windows | Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability | 2021-11-03 | Unknown |
| CVE-2021-33742 | Windows | Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability | 2021-11-03 | Unknown |
| CVE-2021-33771 | Windows | Microsoft Windows Kernel Privilege Escalation Vulnerability | 2021-11-03 | Unknown |
| CVE-2021-34448 | Windows | Microsoft Windows Scripting Engine Memory Corruption Vulnerability | 2021-11-03 | Unknown |
| CVE-2021-34473 | Exchange Server | Microsoft Exchange Server Remote Code Execution Vulnerability | 2021-11-03 | Known |
| CVE-2021-34523 | Exchange Server | Microsoft Exchange Server Privilege Escalation Vulnerability | 2021-11-03 | Known |
| CVE-2021-34527 | Windows | Microsoft Windows Print Spooler Remote Code Execution Vulnerability | 2021-11-03 | Known |
| CVE-2021-36942 | Windows | Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability | 2021-11-03 | Known |
| CVE-2021-36948 | Windows | Microsoft Windows Update Medic Service Privilege Escalation Vulnerability | 2021-11-03 | Unknown |
| CVE-2021-36955 | Windows | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | 2021-11-03 | Known |
| CVE-2021-38645 | Open Management Infrastructure (OMI) | Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | 2021-11-03 | Unknown |
| CVE-2021-38647 | Open Management Infrastructure (OMI) | Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability | 2021-11-03 | Known |
| CVE-2021-38648 | Open Management Infrastructure (OMI) | Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | 2021-11-03 | Unknown |
| CVE-2021-38649 | Open Management Infrastructure (OMI) | Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | 2021-11-03 | Unknown |
| CVE-2021-40444 | MSHTML | Microsoft MSHTML Remote Code Execution Vulnerability | 2021-11-03 | Known |
Source: CISA Known Exploited Vulnerabilities (KEV) catalog, 2026.10.27, as of 27 Oct 2026. About the data.
Highest exploit-prediction scores (EPSS)
EPSS estimates the probability that a vulnerability is exploited in the next 30 days. These are the 10 highest-scoring Microsoft records today.
| CVE | EPSS | Percentile | Severity | In KEV |
|---|---|---|---|---|
| CVE-2015-1635 | 100% | 100% | Critical | Yes |
| CVE-2019-0708 | 100% | 100% | Critical | Yes |
| CVE-2021-34473 | 100% | 100% | Critical | Yes |
| CVE-2025-53770 | 100% | 100% | Critical | Yes |
| CVE-2021-26855 | 100% | 100% | Critical | Yes |
| CVE-2025-49704 | 100% | 100% | High | Yes |
| CVE-2021-34523 | 100% | 100% | Critical | Yes |
| CVE-2023-29357 | 100% | 100% | Critical | Yes |
| CVE-2025-59287 | 100% | 100% | Critical | Yes |
| CVE-2012-0158 | 100% | 100% | High | Yes |
Source: FIRST Exploit Prediction Scoring System (EPSS), v2026.06.15, as of 28 Oct 2026; CVE List V5 (CVE Program), cve_2026-10-28_0000Z, as of 28 Oct 2026; CISA Known Exploited Vulnerabilities (KEV) catalog, 2026.10.27, as of 27 Oct 2026. About the data.
Related vendors
Vendors named on the same CVE records as Microsoft.
- PTC (2 shared records)
- Rockwell Automation (2 shared records)