IT
59.223 CVE tracked
803 Exploited now
188 Used by ransomware
Last sync

Microsoft vulnerabilities

16.977 CVE

Microsoft vulnerabilities
Identifier Severity, sort descending Product and flaw EPSS, sort descending In KEV since, sort descending
CVE-2021-40457 HIGH 7.4 microsoft dynamics_365 Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability 1.6% —
CVE-2020-1160 MED 5.5 microsoft windows_10 An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'Microsoft Graphics Component Information Disclosure Vulnerability'. 1.6% —
CVE-2024-43591 HIGH 8.7 microsoft azure_command-line_interface Azure Command Line Integration (CLI) Elevation of Privilege Vulnerability 1.6% —
CVE-2020-0661 MED 6.8 microsoft windows_10 A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Service Vulnerability'. This CVE ID is unique from CVE-2020-075 1.6% —
CVE-2023-33173 MED 6.5 microsoft windows_10_1507 Remote Procedure Call Runtime Denial of Service Vulnerability 1.6% —
CVE-2023-33172 MED 6.5 microsoft windows_10_1507 Remote Procedure Call Runtime Denial of Service Vulnerability 1.6% —
CVE-2023-33169 MED 6.5 microsoft windows_10_1507 Remote Procedure Call Runtime Denial of Service Vulnerability 1.6% —
CVE-2023-33168 MED 6.5 microsoft windows_10_1507 Remote Procedure Call Runtime Denial of Service Vulnerability 1.6% —
CVE-2023-33167 MED 6.5 microsoft windows_10_1507 Remote Procedure Call Runtime Denial of Service Vulnerability 1.6% —
CVE-2023-33166 MED 6.5 microsoft windows_10_1507 Remote Procedure Call Runtime Denial of Service Vulnerability 1.6% —
CVE-2023-32035 MED 6.5 microsoft windows_10_1507 Remote Procedure Call Runtime Denial of Service Vulnerability 1.6% —
CVE-2023-32034 MED 6.5 microsoft windows_10_1507 Remote Procedure Call Runtime Denial of Service Vulnerability 1.6% —
CVE-2025-26676 MED 6.5 microsoft windows_server_2008 Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. 1.6% —
CVE-2023-35319 MED 6.5 microsoft windows_10_1507 Remote Procedure Call Runtime Denial of Service Vulnerability 1.6% —
CVE-2023-35318 MED 6.5 microsoft windows_10_1507 Remote Procedure Call Runtime Denial of Service Vulnerability 1.6% —
CVE-2023-35314 MED 6.5 microsoft windows_10_1507 Remote Procedure Call Runtime Denial of Service Vulnerability 1.6% —
CVE-2023-33164 MED 6.5 microsoft windows_10_1507 Remote Procedure Call Runtime Denial of Service Vulnerability 1.6% —
CVE-2021-1684 MED 5.0 microsoft windows_10 Microsoft is aware of the "Impersonation in the Passkey Entry Protocol" vulnerability. For more information regarding the vulnerability, please see this statement from the Bluetooth SIG. To address the vulnerability, Microsoft has released a software 1.6% —
CVE-2023-36903 HIGH 7.8 microsoft windows_10 Windows System Assessment Tool Elevation of Privilege Vulnerability 1.6% —
CVE-2021-41342 MED 6.8 microsoft windows_10 Windows MSHTML Platform Remote Code Execution Vulnerability 1.6% —
CVE-2024-38130 HIGH 8.8 microsoft windows_10_1507 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability 1.6% —
CVE-2024-38128 HIGH 8.8 microsoft windows_server_2008 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability 1.6% —
CVE-2024-38121 HIGH 8.8 microsoft windows_server_2008 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability 1.6% —
CVE-2024-38120 HIGH 8.8 microsoft windows_server_2008 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability 1.6% —
CVE-2024-38115 HIGH 8.8 microsoft windows_10_1507 Windows IP Routing Management Snapin Remote Code Execution Vulnerability 1.6% —