58.650 CVE tracked
799 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
16.478 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2024-20700 | HIGH 7.5 | microsoft windows_10_1809 Windows Hyper-V Remote Code Execution Vulnerability | 4.0% | — |
| CVE-2021-27082 | HIGH 7.8 | microsoft quantum_development_kit Quantum Development Kit for Visual Studio Code Remote Code Execution Vulnerability | 3.9% | — |
| CVE-2024-20656 | HIGH 7.8 | microsoft visual_studio Visual Studio Elevation of Privilege Vulnerability | 3.9% | — |
| CVE-2020-1466 | HIGH 7.8 | microsoft windows_server_2012 A denial of service vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could cause the RD | 3.9% | — |
| CVE-2000-0155 | HIGH 7.2 | microsoft windows_95 Windows NT Autorun executes the autorun.inf file on non-removable media, which allows local attackers to specify an alternate program to execute when other users access a drive. | 3.9% | — |
| CVE-1999-1359 | HIGH 7.5 | microsoft windows_nt When the Ntconfig.pol file is used on a server whose name is longer than 13 characters, Windows NT does not properly enforce policies for global groups, which could allow users to bypass restrictions that were intended by those policies. | 3.9% | — |
| CVE-2021-43224 | MED 5.5 | microsoft windows_10 Windows Common Log File System Driver Information Disclosure Vulnerability | 3.9% | — |
| CVE-2021-26416 | HIGH 7.7 | microsoft windows_10 Windows Hyper-V Denial of Service Vulnerability | 3.9% | — |
| CVE-2022-29130 | CRIT 9.8 | microsoft windows_10 Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability | 3.9% | — |
| CVE-2009-0229 | MED 4.9 | microsoft windows_2000 The Windows Printing Service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allows local users to read arbitrary files via a crafted separator page, aka "Print Spooler Read File Vulnerability." | 3.9% | — |
| CVE-2005-4696 | LOW 2.1 | microsoft windows_xp The Microsoft Wireless Zero Configuration system (WZCS) stores WEP keys and pair-wise Master Keys (PMK) of the WPA pre-shared key in plaintext in memory of the explorer process, which allows attackers with access to process memory to steal the keys and access | 3.9% | — |
| CVE-2020-1557 | HIGH 7.3 | microsoft windows_10 A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vu | 3.9% | — |
| CVE-2020-1498 | HIGH 8.8 | microsoft 365_apps A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the | 3.9% | — |
| CVE-2020-1153 | HIGH 7.8 | microsoft windows_10 A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code on a target system. To exploit the vulnerability, a user | 3.9% | — |
| CVE-2010-3888 | HIGH 7.2 | microsoft windows Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vectors, as exploited in the wild in July 2010 by the Stuxnet worm, and identified by Kaspersky Lab researchers and other researchers. | 3.9% | — |
| CVE-2017-0203 | MED 4.3 | microsoft edge A vulnerability exists in Microsoft Edge when the Edge Content Security Policy (CSP) fails to properly validate certain specially crafted documents. An attacker could trick a user into loading a web page with malicious content, aka "Microsoft Edge Security Fea | 3.9% | — |
| CVE-2000-0036 | MED 5.0 | microsoft ie Outlook Express 5 for Macintosh downloads attachments to HTML mail without prompting the user, aka the "HTML Mail Attachment" vulnerability. | 3.9% | — |
| CVE-2021-1668 | HIGH 7.8 | microsoft windows_10 Microsoft DTV-DVD Video Decoder Remote Code Execution Vulnerability | 3.9% | — |
| CVE-2025-49741 | HIGH 7.4 | microsoft edge_chromium No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. | 3.9% | — |
| CVE-2003-0007 | MED 5.0 | microsoft outlook Microsoft Outlook 2002 does not properly handle requests to encrypt email messages with V1 Exchange Server Security certificates, which causes Outlook to send the email in plaintext, aka "Flaw in how Outlook 2002 handles V1 Exchange Server Security Certificate | 3.9% | — |
| CVE-2005-3176 | HIGH 7.5 | microsoft windows_2000 Microsoft Windows 2000 before Update Rollup 1 for SP4 does not record the IP address of a Windows Terminal Services client in a security log event if the client connects successfully, which could make it easier for attackers to escape detection. | 3.9% | — |
| CVE-2020-0645 | HIGH 7.5 | microsoft windows_10 A tampering vulnerability exists when Microsoft IIS Server improperly handles malformed request headers, aka 'Microsoft IIS Server Tampering Vulnerability'. | 3.9% | — |
| CVE-2021-26423 | HIGH 7.5 | microsoft .net .NET Core and Visual Studio Denial of Service Vulnerability | 3.9% | — |
| CVE-2020-0856 | MED 6.5 | microsoft windows_server_2008 <p>An information disclosure vulnerability exists when Active Directory integrated DNS (ADIDNS) mishandles objects in memory. An authenticated attacker who successfully exploited this vulnerability would be able to read sensitive information about the target s | 3.9% | — |
| CVE-2017-0095 | HIGH 7.6 | microsoft windows_10 Hyper-V in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 does not properly validate vSMB packet data, which allows attackers to execute arbitrary code on a target OS, aka "Hyper-V vSMB Remote Code Execution Vulnerability." This vulnerabilit | 3.9% | — |