58.701 CVE tracked
799 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
16.489 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2001-0919 | MED 5.1 | microsoft internet_explorer Internet Explorer 5.50.4134.0100 on Windows ME with "Prompt to allow cookies to be stored on your machine" enabled does not warn a user when a cookie is set using Javascript. | 2.7% | — |
| CVE-2022-30159 | MED 5.5 | microsoft office_online_server Microsoft Office Information Disclosure Vulnerability | 2.7% | — |
| CVE-1999-1235 | MED 4.6 | microsoft internet_explorer Internet Explorer 5.0 records the username and password for FTP servers in the URL history, which could allow (1) local users to read the information from another user's index.dat, or (2) people who are physically observing ("shoulder surfing") another user to | 2.7% | — |
| CVE-2016-7295 | MED 5.5 | microsoft windows_10 The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local user | 2.7% | — |
| CVE-2016-7258 | MED 5.5 | microsoft windows_10 The kernel in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 mishandles page-fault system calls, which allows local users to obtain sensitive information from arbitrary processes via a crafted application, aka "Windows Kernel Memory Address | 2.7% | — |
| CVE-2022-30168 | HIGH 7.8 | microsoft photos Microsoft Photos App Remote Code Execution Vulnerability | 2.7% | — |
| CVE-2021-34449 | HIGH 7.0 | microsoft windows_10 Win32k Elevation of Privilege Vulnerability | 2.7% | — |
| CVE-2021-28445 | HIGH 8.1 | microsoft windows_10 Windows Network File System Remote Code Execution Vulnerability | 2.7% | — |
| CVE-2000-0167 | LOW 2.1 | microsoft internet_information_server IIS Inetinfo.exe allows local users to cause a denial of service by creating a mail file with a long name and a .txt.eml extension in the pickup directory. | 2.7% | — |
| CVE-2021-24110 | HIGH 7.8 | microsoft high_efficiency_video_coding HEVC Video Extensions Remote Code Execution Vulnerability | 2.7% | — |
| CVE-2007-1206 | HIGH 7.2 | microsoft windows_2000 The Virtual DOS Machine (VDM) in the Windows Kernel in Microsoft Windows NT 4.0; 2000 SP4; XP SP2; Server 2003, 2003 SP1, and 2003 SP2; and Windows Vista before June 2006; uses insecure permissions (PAGE_READWRITE) for a physical memory view, which allows loca | 2.7% | — |
| CVE-2024-21404 | HIGH 7.5 | microsoft asp.net_core .NET Denial of Service Vulnerability | 2.7% | — |
| CVE-2021-33780 | HIGH 8.8 | microsoft windows_server_2008 Windows DNS Server Remote Code Execution Vulnerability | 2.7% | — |
| CVE-2022-22041 | MED 6.8 | microsoft windows_10 Windows Print Spooler Elevation of Privilege Vulnerability | 2.7% | — |
| CVE-2021-28475 | HIGH 7.8 | microsoft visual_studio_code Visual Studio Code Remote Code Execution Vulnerability | 2.7% | — |
| CVE-2021-28473 | HIGH 7.8 | microsoft visual_studio_code Visual Studio Code Remote Code Execution Vulnerability | 2.7% | — |
| CVE-2021-28469 | HIGH 7.8 | microsoft visual_studio_code Visual Studio Code Remote Code Execution Vulnerability | 2.7% | — |
| CVE-2021-28457 | HIGH 7.8 | microsoft visual_studio_code Visual Studio Code Remote Code Execution Vulnerability | 2.7% | — |
| CVE-2021-24071 | MED 5.3 | microsoft sharepoint_enterprise_server Microsoft SharePoint Information Disclosure Vulnerability | 2.7% | — |
| CVE-2024-38168 | HIGH 7.5 | microsoft .net .NET and Visual Studio Denial of Service Vulnerability | 2.7% | — |
| CVE-2022-34734 | HIGH 8.8 | microsoft windows_10 Microsoft ODBC Driver Remote Code Execution Vulnerability | 2.7% | — |
| CVE-2022-34732 | HIGH 8.8 | microsoft windows_10 Microsoft ODBC Driver Remote Code Execution Vulnerability | 2.7% | — |
| CVE-2022-34730 | HIGH 8.8 | microsoft windows_10 Microsoft ODBC Driver Remote Code Execution Vulnerability | 2.7% | — |
| CVE-2022-34727 | HIGH 8.8 | microsoft windows_10 Microsoft ODBC Driver Remote Code Execution Vulnerability | 2.7% | — |
| CVE-2022-34726 | HIGH 8.8 | microsoft windows_10 Microsoft ODBC Driver Remote Code Execution Vulnerability | 2.7% | — |