IT
59.223 CVE tracked
800 Exploited now
188 Used by ransomware
Last sync

Microsoft vulnerabilities

16.977 CVE

Microsoft vulnerabilities
Identifier Severity, sort descending Product and flaw EPSS, sort descending In KEV since, sort descending
CVE-2022-35809 MED 6.5 microsoft azure_site_recovery Azure Site Recovery Elevation of Privilege Vulnerability 1.9% —
CVE-2022-35808 MED 6.5 microsoft azure_site_recovery Azure Site Recovery Elevation of Privilege Vulnerability 1.9% —
CVE-2022-35807 MED 6.5 microsoft azure_site_recovery Azure Site Recovery Elevation of Privilege Vulnerability 1.9% —
CVE-2022-35801 MED 6.5 microsoft azure_site_recovery Azure Site Recovery Elevation of Privilege Vulnerability 1.9% —
CVE-2022-35799 MED 6.5 microsoft azure_site_recovery Azure Site Recovery Elevation of Privilege Vulnerability 1.9% —
CVE-2022-35791 MED 6.5 microsoft azure_site_recovery_vmware_to_azure Azure Site Recovery Elevation of Privilege Vulnerability 1.9% —
CVE-2022-35790 MED 6.5 microsoft azure_site_recovery_vmware_to_azure Azure Site Recovery Elevation of Privilege Vulnerability 1.9% —
CVE-2022-35789 MED 6.5 microsoft azure_site_recovery_vmware_to_azure Azure Site Recovery Elevation of Privilege Vulnerability 1.9% —
CVE-2022-35788 MED 6.5 microsoft azure_site_recovery_vmware_to_azure Azure Site Recovery Elevation of Privilege Vulnerability 1.9% —
CVE-2022-35786 MED 6.5 microsoft azure_site_recovery_vmware_to_azure Azure Site Recovery Elevation of Privilege Vulnerability 1.9% —
CVE-2022-35785 MED 6.5 microsoft azure_site_recovery_vmware_to_azure Azure Site Recovery Elevation of Privilege Vulnerability 1.9% —
CVE-2022-35784 MED 6.5 microsoft azure_site_recovery_vmware_to_azure Azure Site Recovery Elevation of Privilege Vulnerability 1.9% —
CVE-2024-49107 HIGH 7.3 microsoft windows_10_1507 WmsRepair Service Elevation of Privilege Vulnerability 1.9% —
CVE-2020-0744 MED 5.5 microsoft windows_10 An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to retrieve information from a targeted system, aka 'Windows GDI Information Disclosure Vulnerability'. 1.9% —
CVE-2021-33753 MED 4.7 microsoft bing Microsoft Bing Search Spoofing Vulnerability 1.9% —
CVE-2022-26829 MED 6.6 microsoft windows_server_2008 Windows DNS Server Remote Code Execution Vulnerability 1.9% —
CVE-2022-26822 MED 6.6 microsoft windows_server_2008 Windows DNS Server Remote Code Execution Vulnerability 1.9% —
CVE-2022-26821 MED 6.6 microsoft windows_server_2008 Windows DNS Server Remote Code Execution Vulnerability 1.9% —
CVE-2022-26820 MED 6.6 microsoft windows_server_2008 Windows DNS Server Remote Code Execution Vulnerability 1.9% —
CVE-2022-26819 MED 6.6 microsoft windows_server_2008 Windows DNS Server Remote Code Execution Vulnerability 1.9% —
CVE-2025-60719 HIGH 7.0 microsoft windows_10_1607 Untrusted pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. 1.9% —
CVE-2020-0624 HIGH 7.8 microsoft windows_10 An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0642. 1.9% —
CVE-2024-20663 MED 6.5 microsoft windows_10_1507 Windows Message Queuing Client (MSMQC) Information Disclosure 1.9% —
CVE-2011-0039 HIGH 7.2 microsoft windows_2003_server The Local Security Authority Subsystem Service (LSASS) in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly process authentication requests, which allows local users to gain privileges via a request with a crafted length, aka "LSASS Length 1.9% —
CVE-2023-36433 MED 6.5 microsoft dynamics_365 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability 1.9% —