59.223 CVE tracked
803 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
16.977 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2004-2365 | LOW 2.1 | microsoft windows_2003_server Memory leak in Microsoft Windows XP and Windows Server 2003 allows local users to cause a denial of service (memory exhaustion) by repeatedly creating and deleting directories using a non-standard tool such as smbmount. | 1.7% | — |
| CVE-2025-21203 | MED 6.5 | microsoft windows_server_2008 Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. | 1.7% | — |
| CVE-2024-43455 | HIGH 8.8 | microsoft windows_server_2008 Windows Remote Desktop Licensing Service Spoofing Vulnerability | 1.7% | — |
| CVE-2024-37342 | HIGH 7.1 | microsoft sql_2016_azure_connect_feature_pack Microsoft SQL Server Native Scoring Information Disclosure Vulnerability | 1.7% | — |
| CVE-2024-37337 | HIGH 7.1 | microsoft sql_2016_azure_connect_feature_pack Microsoft SQL Server Native Scoring Information Disclosure Vulnerability | 1.7% | — |
| CVE-2023-28297 | HIGH 8.8 | microsoft windows_10_1607 Windows Remote Procedure Call Service (RPCSS) Elevation of Privilege Vulnerability | 1.7% | — |
| CVE-2011-1888 | HIGH 7.2 | microsoft windows_7 win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a | 1.7% | — |
| CVE-2019-1158 | MED 5.5 | microsoft windows_10 An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise a user’s system. There are mu | 1.7% | — |
| CVE-2020-0616 | MED 5.5 | microsoft windows_10 A denial of service vulnerability exists when Windows improperly handles hard links, aka 'Microsoft Windows Denial of Service Vulnerability'. | 1.7% | — |
| CVE-2017-8715 | MED 5.3 | microsoft windows_10 The Microsoft Device Guard on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a security feature bypass by the way it handles Windows PowerShell sessions, aka "Windows Security Feature Bypass". | 1.7% | — |
| CVE-2024-21638 | CRIT 9.1 | microsoft azure_ipam Azure IPAM (IP Address Management) is a lightweight solution developed on top of the Azure platform designed to help Azure customers manage their IP Address space easily and effectively. By design there is no write access to customers' Azure environments as th | 1.7% | — |
| CVE-2006-0008 | HIGH 7.2 | microsoft office The ShellAbout API call in Korean Input Method Editor (IME) in Korean versions of Microsoft Windows XP SP1 and SP2, Windows Server 2003 up to SP1, and Office 2003, allows local users to gain privileges by launching the "shell about dialog box" and clicking the | 1.7% | — |
| CVE-2026-25166 | HIGH 7.8 | microsoft windows_10_1607 Deserialization of untrusted data in Windows System Image Manager allows an authorized attacker to execute code locally. | 1.7% | — |
| CVE-2024-38138 | HIGH 7.5 | microsoft windows_server_2016 Windows Deployment Services Remote Code Execution Vulnerability | 1.7% | — |
| CVE-2018-8563 | MED 5.5 | microsoft windows_7 An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Serv | 1.7% | — |
| CVE-2018-8408 | MED 5.5 | microsoft windows_10 An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Win | 1.7% | — |
| CVE-2018-8407 | MED 5.5 | microsoft windows_10 An information disclosure vulnerability exists when "Kernel Remote Procedure Call Provider" driver improperly initializes objects in memory, aka "MSRPC Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windo | 1.7% | — |
| CVE-2024-43593 | HIGH 8.8 | microsoft windows_server_2008 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | 1.7% | — |
| CVE-2024-43592 | HIGH 8.8 | microsoft windows_server_2008 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | 1.7% | — |
| CVE-2023-24859 | HIGH 7.5 | microsoft windows_10 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | 1.7% | — |
| CVE-2023-21813 | HIGH 7.5 | microsoft windows_10 Windows Secure Channel Denial of Service Vulnerability | 1.7% | — |
| CVE-2023-21811 | HIGH 7.5 | microsoft windows_10 Windows iSCSI Service Denial of Service Vulnerability | 1.7% | — |
| CVE-2023-21702 | HIGH 7.5 | microsoft windows_10 Windows iSCSI Service Denial of Service Vulnerability | 1.7% | — |
| CVE-2023-21701 | HIGH 7.5 | microsoft windows_10 Microsoft Protected Extensible Authentication Protocol (PEAP) Denial of Service Vulnerability | 1.7% | — |
| CVE-2023-21700 | HIGH 7.5 | microsoft windows_10 Windows iSCSI Discovery Service Denial of Service Vulnerability | 1.7% | — |