58.689 CVE tracked
799 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
16.478 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2022-29107 | MED 5.5 | microsoft 365_apps Microsoft Office Security Feature Bypass Vulnerability | 3.1% | — |
| CVE-2019-1344 | MED 5.5 | microsoft windows_10 An information disclosure vulnerability exists in the way that the Windows Code Integrity Module handles objects in memory, aka 'Windows Code Integrity Module Information Disclosure Vulnerability'. | 3.1% | — |
| CVE-2001-1560 | LOW 2.1 | microsoft windows_2000 Win32k.sys (aka Graphics Device Interface (GDI)) in Windows 2000 and XP allows local users to cause a denial of service (system crash) by calling the ShowWindow function after receiving a WM_NCCREATE message. | 3.1% | — |
| CVE-2021-31177 | HIGH 7.8 | microsoft 365_apps Microsoft Office Remote Code Execution Vulnerability | 3.1% | — |
| CVE-2021-36970 | HIGH 8.8 | microsoft windows_10 Windows Print Spooler Spoofing Vulnerability | 3.1% | — |
| CVE-2018-0880 | HIGH 7.0 | microsoft windows_10 The Desktop Bridge in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how the virtual registry is managed, aka "Windows Desktop Bridge Elevation of Privilege Vulnerabil | 3.1% | — |
| CVE-2021-26868 | HIGH 7.8 | microsoft windows_10 Windows Graphics Component Elevation of Privilege Vulnerability | 3.1% | — |
| CVE-2019-1193 | MED 6.4 | microsoft edge A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who | 3.1% | — |
| CVE-2022-21911 | HIGH 7.5 | microsoft .net_framework .NET Framework Denial of Service Vulnerability | 3.1% | — |
| CVE-2015-1680 | LOW 2.1 | microsoft windows_7 The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow local users to bypass the ASLR protec | 3.1% | — |
| CVE-2015-1679 | LOW 2.1 | microsoft windows_7 The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow local users to bypass the ASLR protec | 3.1% | — |
| CVE-2015-1678 | LOW 2.1 | microsoft windows_7 The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow local users to bypass the ASLR protec | 3.1% | — |
| CVE-2015-1677 | LOW 2.1 | microsoft windows_7 The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow local users to bypass the ASLR protec | 3.1% | — |
| CVE-2015-1676 | LOW 2.1 | microsoft windows_7 The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow local users to bypass the ASLR protec | 3.1% | — |
| CVE-2025-21247 | MED 4.3 | microsoft windows_10_1507 Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network. | 3.1% | — |
| CVE-2021-24080 | MED 6.5 | microsoft windows_10 Windows Trust Verification API Denial of Service Vulnerability | 3.1% | — |
| CVE-2021-42295 | MED 5.5 | microsoft 365_apps Visual Basic for Applications Information Disclosure Vulnerability | 3.0% | — |
| CVE-2023-24860 | HIGH 7.5 | microsoft malware_protection_engine Microsoft Defender Denial of Service Vulnerability | 3.0% | — |
| CVE-2021-33764 | MED 5.9 | microsoft windows_server_2008 Windows Key Distribution Center Information Disclosure Vulnerability | 3.0% | — |
| CVE-2021-31176 | HIGH 7.8 | microsoft 365_apps Microsoft Office Remote Code Execution Vulnerability | 3.0% | — |
| CVE-2022-21996 | HIGH 7.8 | microsoft windows_11 Win32k Elevation of Privilege Vulnerability | 3.0% | — |
| CVE-2022-24541 | HIGH 8.8 | microsoft windows_10 Windows Server Service Remote Code Execution Vulnerability | 3.0% | — |
| CVE-2020-17121 | HIGH 8.8 | microsoft sharepoint_foundation Microsoft SharePoint Remote Code Execution Vulnerability | 3.0% | — |
| CVE-2017-8685 | MED 5.5 | microsoft windows_7 Windows GDI+ on Microsoft Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows information disclosure by the way it discloses kernel memory addresses, aka "Windows GDI+ Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8684 and | 3.0% | — |
| CVE-2019-0941 | MED 4.4 | microsoft windows_10 A denial of service exists in Microsoft IIS Server when the optional request filtering feature improperly handles requests. An attacker who successfully exploited this vulnerability could perform a temporary denial of service against pages configured to use re | 3.0% | — |