58.912 CVE tracked
800 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
16.681 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2021-43232 | HIGH 7.8 | microsoft windows_10 Windows Event Tracing Remote Code Execution Vulnerability | 2.2% | — |
| CVE-2021-41360 | HIGH 7.8 | microsoft hevc_video_extensions HEVC Video Extensions Remote Code Execution Vulnerability | 2.2% | — |
| CVE-2016-7221 | HIGH 7.8 | microsoft windows_10 Input Method Editor (IME) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 mishandles DLL loading, which al | 2.2% | — |
| CVE-2015-2549 | HIGH 7.2 | microsoft windows_10 The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows local users to gain privileges via a crafted application, aka | 2.2% | — |
| CVE-2024-21348 | HIGH 7.5 | microsoft windows_10_1507 Internet Connection Sharing (ICS) Denial of Service Vulnerability | 2.2% | — |
| CVE-2002-0720 | HIGH 7.2 | microsoft windows_2000 A handler routine for the Network Connection Manager (NCM) in Windows 2000 allows local users to gain privileges via a complex attack that causes the handler to run in the LocalSystem context with user-specified code. | 2.2% | — |
| CVE-2021-34474 | HIGH 8.0 | microsoft dynamics_365_business_central Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability | 2.2% | — |
| CVE-2021-24109 | MED 6.8 | microsoft azure_kubernetes_service Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability | 2.2% | — |
| CVE-2024-38160 | CRIT 9.1 | microsoft windows_10_1607 Windows Network Virtualization Remote Code Execution Vulnerability | 2.2% | — |
| CVE-2024-38159 | CRIT 9.1 | microsoft windows_10_1607 Windows Network Virtualization Remote Code Execution Vulnerability | 2.2% | — |
| CVE-2022-33647 | HIGH 8.1 | microsoft windows_server_2008 Windows Kerberos Elevation of Privilege Vulnerability | 2.2% | — |
| CVE-2021-31942 | HIGH 7.8 | microsoft 3d_viewer 3D Viewer Remote Code Execution Vulnerability | 2.2% | — |
| CVE-2025-21369 | HIGH 8.8 | microsoft windows_10_1507 Microsoft Digest Authentication Remote Code Execution Vulnerability | 2.2% | — |
| CVE-2025-21368 | HIGH 8.8 | microsoft windows_10_1507 Microsoft Digest Authentication Remote Code Execution Vulnerability | 2.2% | — |
| CVE-2024-38076 | CRIT 9.8 | microsoft windows_server_2016 Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability | 2.2% | — |
| CVE-2022-35827 | HIGH 8.8 | microsoft visual_studio Visual Studio Remote Code Execution Vulnerability | 2.2% | — |
| CVE-2022-35826 | HIGH 8.8 | microsoft visual_studio Visual Studio Remote Code Execution Vulnerability | 2.2% | — |
| CVE-2022-35825 | HIGH 8.8 | microsoft visual_studio Visual Studio Remote Code Execution Vulnerability | 2.2% | — |
| CVE-2014-0262 | HIGH 7.2 | microsoft windows_7 win32k.sys in the kernel-mode drivers in Microsoft Windows 7 SP1 and Server 2008 R2 SP1 does not properly consider thread-owned objects during the processing of window handles, which allows local users to gain privileges via a crafted application, aka "Win32k | 2.2% | — |
| CVE-2020-0976 | MED 5.4 | microsoft sharepoint_enterprise_server A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2020-0972, CVE-2020- | 2.2% | — |
| CVE-2024-26183 | MED 6.5 | microsoft windows_10_1507 Windows Kerberos Denial of Service Vulnerability | 2.2% | — |
| CVE-2019-1363 | MED 5.5 | microsoft windows_7 An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to retrieve information from a targeted system, aka 'Windows GDI Information Disclosure Vulnerability'. | 2.2% | — |
| CVE-2000-0933 | MED 4.6 | microsoft windows_2000 The Input Method Editor (IME) in the Simplified Chinese version of Windows 2000 does not disable access to privileged functionality that should normally be restricted, which allows local users to gain privileges, aka the "Simplified Chinese IME State Recogniti | 2.2% | — |
| CVE-2022-21979 | MED 4.8 | microsoft exchange_server Microsoft Exchange Server Information Disclosure Vulnerability | 2.2% | — |
| CVE-2019-1442 | MED 5.5 | microsoft sharepoint_server A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file, which could trick the victim into entering credentials, aka 'Microsoft Office Security Feature Bypass Vulnerab | 2.2% | — |