IT
58.849 CVE tracked
800 Exploited now
188 Used by ransomware
Last sync

Microsoft vulnerabilities

16.631 CVE

Microsoft vulnerabilities
Identifier Severity, sort descending Product and flaw EPSS, sort descending In KEV since, sort descending
CVE-2021-28342 HIGH 8.8 microsoft windows_10 Remote Procedure Call Runtime Remote Code Execution Vulnerability 2.3% —
CVE-2021-28341 HIGH 8.8 microsoft windows_10 Remote Procedure Call Runtime Remote Code Execution Vulnerability 2.3% —
CVE-2021-28339 HIGH 8.8 microsoft windows_10 Remote Procedure Call Runtime Remote Code Execution Vulnerability 2.3% —
CVE-2021-28338 HIGH 8.8 microsoft windows_10 Remote Procedure Call Runtime Remote Code Execution Vulnerability 2.3% —
CVE-2021-28337 HIGH 8.8 microsoft windows_10 Remote Procedure Call Runtime Remote Code Execution Vulnerability 2.3% —
CVE-2021-28336 HIGH 8.8 microsoft windows_10 Remote Procedure Call Runtime Remote Code Execution Vulnerability 2.3% —
CVE-2021-28335 HIGH 8.8 microsoft windows_10 Remote Procedure Call Runtime Remote Code Execution Vulnerability 2.3% —
CVE-2021-28334 HIGH 8.8 microsoft windows_10 Remote Procedure Call Runtime Remote Code Execution Vulnerability 2.3% —
CVE-2021-28332 HIGH 8.8 microsoft windows_10 Remote Procedure Call Runtime Remote Code Execution Vulnerability 2.3% —
CVE-2021-28331 HIGH 8.8 microsoft windows_10 Remote Procedure Call Runtime Remote Code Execution Vulnerability 2.3% —
CVE-2021-28330 HIGH 8.8 microsoft windows_10 Remote Procedure Call Runtime Remote Code Execution Vulnerability 2.3% —
CVE-2021-28329 HIGH 8.8 microsoft windows_10 Remote Procedure Call Runtime Remote Code Execution Vulnerability 2.3% —
CVE-2023-36603 HIGH 7.5 microsoft windows_10_1809 Windows TCP/IP Denial of Service Vulnerability 2.3% —
CVE-2023-36602 HIGH 7.5 microsoft windows_10_1507 Windows TCP/IP Denial of Service Vulnerability 2.3% —
CVE-2020-0753 HIGH 7.8 microsoft windows_10 An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0754. 2.3% —
CVE-2025-62454 HIGH 7.8 microsoft windows_10_1809 Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. 2.3% —
CVE-2024-43575 HIGH 7.5 microsoft windows_server_2016 Windows Hyper-V Denial of Service Vulnerability 2.3% —
CVE-2024-43567 HIGH 7.5 microsoft windows_server_2012 Windows Hyper-V Denial of Service Vulnerability 2.3% —
CVE-2024-30070 HIGH 7.5 microsoft windows_server_2012 DHCP Server Service Denial of Service Vulnerability 2.3% —
CVE-2019-1463 MED 5.5 microsoft office An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory, aka 'Microsoft Access Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1400. 2.3% —
CVE-2019-1400 MED 5.5 microsoft office An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory, aka 'Microsoft Access Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1463. 2.3% —
CVE-2021-40474 HIGH 7.8 microsoft 365_apps Microsoft Excel Remote Code Execution Vulnerability 2.3% —
CVE-2024-38232 HIGH 7.5 microsoft windows_10_1607 Windows Networking Denial of Service Vulnerability 2.3% —
CVE-2024-20670 HIGH 8.1 microsoft outlook Outlook for Windows Spoofing Vulnerability 2.3% —
CVE-2017-8628 MED 6.8 microsoft windows_10 Microsoft Bluetooth Driver in Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703 allows a spoofing vulnerability due to Microsoft's implementation of the Bluetooth stack, aka "Microsoft Bluetooth Driver Spoof 2.3% —