58.650 CVE tracked
799 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
16.478 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2020-17122 | HIGH 7.8 | microsoft office Microsoft Excel Remote Code Execution Vulnerability | 3.5% | — |
| CVE-2026-20843 | HIGH 7.8 | microsoft windows_10_1607 Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally. | 3.5% | — |
| CVE-2024-38021 | HIGH 8.8 | microsoft 365_apps Microsoft Outlook Remote Code Execution Vulnerability | 3.5% | — |
| CVE-2018-8434 | MED 5.4 | microsoft windows_10 An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Information Disclosure Vulnerability." This affects Win | 3.5% | — |
| CVE-2017-11863 | MED 6.1 | microsoft edge Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to trick a user into loading a page containing malicious content, due to how the Edge Content Security Policy (CSP) val | 3.5% | — |
| CVE-2018-8425 | MED 4.3 | microsoft edge A spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content, aka "Microsoft Edge Spoofing Vulnerability." This affects Microsoft Edge. | 3.5% | — |
| CVE-2020-17002 | HIGH 7.4 | microsoft c_sdk_for_azure_iot Azure SDK for C Security Feature Bypass Vulnerability | 3.5% | — |
| CVE-2001-1518 | LOW 2.1 | microsoft windows_2000 RunAs (runas.exe) in Windows 2000 only creates one session instance at a time, which allows local users to cause a denial of service (RunAs hang) by creating a named pipe session with the authentication server without any request for service. NOTE: the vendor | 3.5% | — |
| CVE-2017-8719 | MED 4.7 | microsoft windows_10 The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerabi | 3.5% | — |
| CVE-2017-8709 | MED 4.7 | microsoft windows_10 The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerabi | 3.5% | — |
| CVE-2021-24090 | HIGH 7.8 | microsoft windows_10 Windows Error Reporting Elevation of Privilege Vulnerability | 3.5% | — |
| CVE-2020-16955 | HIGH 7.8 | microsoft 365_apps <p>An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) AppVLP handles certain files. An attacker who successfully exploited the vulnerability could elevate privileges.</p> <p>To exploit this vulnerability, an atta | 3.5% | — |
| CVE-2017-8713 | MED 5.3 | microsoft windows_10 The Windows Hyper-V component on Microsoft Windows Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it fails to properly validate input from an auth | 3.5% | — |
| CVE-2023-23415 | CRIT 9.8 | microsoft windows_10_1507 Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability | 3.5% | — |
| CVE-2015-1722 | HIGH 7.2 | microsoft windows_7 Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 | 3.5% | — |
| CVE-2020-0654 | CRIT 9.1 | microsoft onedrive A security feature bypass vulnerability exists in Microsoft OneDrive App for Android.This could allow an attacker to bypass the passcode or fingerprint requirements of the App.The security update addresses the vulnerability by correcting the way Microsoft OneD | 3.5% | — |
| CVE-2001-1519 | LOW 3.6 | microsoft windows_2000 RunAs (runas.exe) in Windows 2000 allows local users to create a spoofed named pipe when the service is stopped, then capture cleartext usernames and passwords when clients connect to the service. NOTE: the vendor disputes this issue, saying that administrati | 3.5% | — |
| CVE-2021-30621 | MED 6.5 | fedoraproject fedora Chromium: CVE-2021-30621 UI Spoofing in Autofill | 3.5% | — |
| CVE-2021-30619 | MED 6.5 | fedoraproject fedora Chromium: CVE-2021-30619 UI Spoofing in Autofill | 3.5% | — |
| CVE-2009-5159 | MED 6.1 | invisioncommunity invision_power_board Invision Power Board (aka IPB or IP.Board) 2.x through 3.0.4, when Internet Explorer 5 is used, allows XSS via a .txt attachment. | 3.5% | — |
| CVE-2022-29112 | MED 6.5 | microsoft windows_10 Windows Graphics Component Information Disclosure Vulnerability | 3.5% | — |
| CVE-2021-26885 | HIGH 7.8 | microsoft windows_10 Windows WalletService Elevation of Privilege Vulnerability | 3.5% | — |
| CVE-2021-34504 | HIGH 7.8 | microsoft windows_10 Windows Address Book Remote Code Execution Vulnerability | 3.5% | — |
| CVE-2015-2366 | HIGH 7.2 | microsoft windows_7 win32k.sys in the kernel-mode drivers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, aka "Win32k Elev | 3.5% | — |
| CVE-2015-2365 | HIGH 7.2 | microsoft windows_2003_server win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users | 3.5% | — |