IT
56.588 CVE tracked
773 Exploited now
183 Used by ransomware
Last sync

Microsoft vulnerabilities

15.468 CVE

Microsoft vulnerabilities
Identifier Severity, sort descending Product and flaw EPSS, sort descending In KEV since, sort descending
CVE-2023-35325 HIGH 7.5 microsoft windows_10_1507 Windows Print Spooler Information Disclosure Vulnerability 1.8%
CVE-1999-0549 HIGH 7.2 microsoft windows_nt Windows NT automatically logs in an administrator upon rebooting. 1.8%
CVE-2024-21428 HIGH 8.8 microsoft sql_server_2016 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability 1.8%
CVE-2024-21415 HIGH 8.8 microsoft sql_server_2016 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability 1.8%
CVE-2024-21373 HIGH 8.8 microsoft sql_server_2016 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability 1.8%
CVE-2024-21335 HIGH 8.8 microsoft sql_server_2016 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability 1.8%
CVE-2024-21333 HIGH 8.8 microsoft sql_server_2016 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability 1.8%
CVE-2024-21332 HIGH 8.8 microsoft sql_server_2016 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability 1.8%
CVE-2022-33647 HIGH 8.1 microsoft windows_server_2008 Windows Kerberos Elevation of Privilege Vulnerability 1.8%
CVE-2011-2011 HIGH 7.2 microsoft windows_2003_server Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via 1.8%
CVE-2023-24954 MED 6.5 microsoft sharepoint_enterprise_server Microsoft SharePoint Server Information Disclosure Vulnerability 1.8%
CVE-2023-36402 HIGH 8.8 microsoft windows_10_1507 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability 1.8%
CVE-2026-62893 CRIT 9.8 microsoft windows_10_1607 Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network. 1.8%
CVE-2022-26912 HIGH 8.3 microsoft edge_chromium Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability 1.8%
CVE-2022-26909 HIGH 8.3 microsoft edge_chromium Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability 1.8%
CVE-2022-26908 HIGH 8.3 microsoft edge_chromium Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability 1.8%
CVE-2022-26900 HIGH 8.3 microsoft edge_chromium Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability 1.8%
CVE-2022-26895 HIGH 8.3 microsoft edge_chromium Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability 1.8%
CVE-2022-26894 HIGH 8.3 microsoft edge_chromium Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability 1.8%
CVE-2022-26891 HIGH 8.3 microsoft edge_chromium Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability 1.8%
CVE-2022-24475 HIGH 8.3 microsoft edge_chromium Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability 1.8%
CVE-2021-34451 MED 5.3 microsoft office_online_server Microsoft Office Online Server Spoofing Vulnerability 1.8%
CVE-2018-8253 MED 4.6 microsoft windows_10 An elevation of privilege vulnerability exists when Microsoft Cortana allows arbitrary website browsing on the lockscreen, aka "Microsoft Cortana Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10. 1.8%
CVE-2009-2517 MED 4.9 microsoft windows_server_2003 The kernel in Microsoft Windows Server 2003 SP2 does not properly handle unspecified exceptions when an error condition occurs, which allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Kernel Exception Handler Vuln 1.8%
CVE-2023-38151 HIGH 8.8 microsoft host_integration_server Microsoft Host Integration Server 2020 Remote Code Execution Vulnerability 1.8%