59.289 CVE tracked
803 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
17.043 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2024-21448 | MED 5.0 | microsoft teams Microsoft Teams for Android Information Disclosure Vulnerability | 1.2% | — |
| CVE-2023-32056 | HIGH 7.8 | microsoft windows_10_1809 Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability | 1.2% | — |
| CVE-2021-26418 | MED 4.6 | microsoft sharepoint_foundation Microsoft SharePoint Server Spoofing Vulnerability | 1.2% | — |
| CVE-2024-49048 | HIGH 8.1 | microsoft torchgeo TorchGeo Remote Code Execution Vulnerability | 1.2% | — |
| CVE-2017-0295 | MED 5.5 | microsoft windows_10 Microsoft Windows 10 1607 and 1703, and Windows Server 2016 allow an authenticated attacker to modify the C:\Users\DEFAULT folder structure, aka "Windows Default Folder Tampering Vulnerability". | 1.2% | — |
| CVE-2026-23674 | HIGH 7.5 | microsoft windows_10_1607 Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network. | 1.2% | — |
| CVE-2025-21253 | MED 5.3 | microsoft edge Microsoft Edge for IOS and Android Spoofing Vulnerability | 1.2% | — |
| CVE-2020-16982 | MED 6.1 | microsoft azure_sphere Azure Sphere Unsigned Code Execution Vulnerability | 1.2% | — |
| CVE-2019-0775 | MED 4.7 | microsoft windows_10 An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0702, CVE-2019-0755, CVE-2019-0767, CVE-2019-0782. | 1.2% | — |
| CVE-2023-32038 | HIGH 8.8 | microsoft windows_10_1507 Microsoft ODBC Driver Remote Code Execution Vulnerability | 1.2% | — |
| CVE-2021-38642 | MED 6.1 | microsoft edge Microsoft Edge for iOS Spoofing Vulnerability | 1.2% | — |
| CVE-2021-38641 | MED 6.1 | microsoft edge Microsoft Edge for Android Spoofing Vulnerability | 1.2% | — |
| CVE-2024-43600 | HIGH 7.8 | microsoft office Microsoft Office Elevation of Privilege Vulnerability | 1.2% | — |
| CVE-2021-33768 | HIGH 8.0 | microsoft exchange_server Microsoft Exchange Server Elevation of Privilege Vulnerability | 1.2% | — |
| CVE-2020-0904 | MED 6.5 | microsoft windows_10 <p>A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on a guest operating system.</p> <p>To exploit the vulnerability, an attacker who already has a privileged accoun | 1.2% | — |
| CVE-2020-0886 | HIGH 7.8 | microsoft windows_10 <p>An elevation of privilege vulnerability exists when the Windows Storage Services improperly handle file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges.</p> <p>To exploit the vulnerability, an attacker wo | 1.2% | — |
| CVE-2025-26668 | HIGH 7.5 | microsoft windows_10_1507 Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network. | 1.2% | — |
| CVE-2024-49050 | HIGH 8.8 | microsoft python Visual Studio Code Python Extension Remote Code Execution Vulnerability | 1.2% | — |
| CVE-2024-21326 | CRIT 9.6 | microsoft edge_chromium Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | 1.2% | — |
| CVE-2024-26196 | MED 4.3 | microsoft edge Microsoft Edge for Android (Chromium-based) Information Disclosure Vulnerability | 1.2% | — |
| CVE-2019-1382 | MED 5.5 | microsoft windows_10 An elevation of privilege vulnerability exists when ActiveX Installer service may allow access to files without proper authentication, aka 'Microsoft ActiveX Installer Service Elevation of Privilege Vulnerability'. | 1.2% | — |
| CVE-2026-62901 | HIGH 7.5 | microsoft .net Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network. | 1.2% | — |
| CVE-2026-50524 | HIGH 7.5 | microsoft .net Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network. | 1.2% | — |
| CVE-2026-50328 | HIGH 7.5 | microsoft windows_10_1607 Uncaught exception in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network. | 1.2% | — |
| CVE-2026-26154 | HIGH 7.5 | microsoft windows_server_2012 Improper input validation in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network. | 1.2% | — |