59.313 CVE tracked
803 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
17.061 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2024-26199 | HIGH 7.8 | microsoft 365_apps Microsoft Office Elevation of Privilege Vulnerability | 1.2% | — |
| CVE-2024-30472 | HIGH 7.5 | microsoft telemetry_dashboard Telemetry Dashboard v1.0.0.8 for Dell ThinOS 2402 contains a sensitive information disclosure vulnerability. An unauthenticated user with local access to the device could exploit this vulnerability leading to information disclosure. | 1.2% | — |
| CVE-2022-30164 | HIGH 7.8 | microsoft windows_10 Kerberos AppContainer Security Feature Bypass Vulnerability | 1.2% | — |
| CVE-2021-1677 | MED 5.5 | microsoft azure_kubernetes_service Azure Active Directory Pod Identity Spoofing Vulnerability | 1.2% | — |
| CVE-2020-1475 | HIGH 7.8 | microsoft windows_10 An elevation of privilege vulnerability exists in the way that the srmsvc.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticate | 1.2% | — |
| CVE-2025-26687 | HIGH 7.5 | microsoft 365_copilot Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network. | 1.2% | — |
| CVE-2021-43221 | MED 4.2 | microsoft edge_chromium Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | 1.2% | — |
| CVE-2019-0976 | MED 5.5 | microsoft nuget A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify contents of the intermediate build folder (by default "obj"), aka 'NuGet Package Manager Tampering Vulnerability'. | 1.2% | — |
| CVE-2025-21349 | MED 6.8 | microsoft windows_10_1507 Windows Remote Desktop Configuration Service Tampering Vulnerability | 1.1% | — |
| CVE-2019-0656 | HIGH 7.0 | microsoft windows_10 An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. | 1.1% | — |
| CVE-2026-96248 | HIGH 7.5 | microsoft windows_10_1607 Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network. | 1.1% | — |
| CVE-2026-87716 | HIGH 7.5 | microsoft windows_10_1809 Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to deny service over a network. | 1.1% | — |
| CVE-2026-85808 | HIGH 7.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network. | 1.1% | — |
| CVE-2026-84017 | HIGH 7.5 | microsoft windows_10_1607 Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network. | 1.1% | — |
| CVE-2026-70079 | HIGH 7.5 | microsoft windows_10_1607 Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network. | 1.1% | — |
| CVE-2026-70033 | HIGH 7.5 | microsoft windows_10_1607 Missing release of memory after effective lifetime in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network. | 1.1% | — |
| CVE-2026-70031 | HIGH 7.5 | microsoft windows_10_1607 Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network. | 1.1% | — |
| CVE-2021-26873 | HIGH 7.0 | microsoft windows_10 Windows User Profile Service Elevation of Privilege Vulnerability | 1.1% | — |
| CVE-2018-0983 | HIGH 7.0 | microsoft windows_10 Windows Storage Services in Windows 10 versions 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows Storage Services Elevation | 1.1% | — |
| CVE-2017-8694 | HIGH 7.0 | microsoft windows_10 The Microsoft Windows Kernel Mode Driver on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privile | 1.1% | — |
| CVE-2017-8689 | HIGH 7.0 | microsoft windows_10 The Microsoft Windows Kernel Mode Driver on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privile | 1.1% | — |
| CVE-2025-59185 | MED 6.5 | microsoft windows_10_1507 External control of file name or path in Windows Core Shell allows an unauthorized attacker to perform spoofing over a network. | 1.1% | — |
| CVE-2025-21177 | HIGH 8.7 | microsoft dynamics_365_sales Server-side request forgery (ssrf) in Microsoft Dynamics 365 Sales allows an authorized attacker to elevate privileges over a network. | 1.1% | — |
| CVE-2023-29337 | HIGH 7.1 | microsoft nuget NuGet Client Remote Code Execution Vulnerability | 1.1% | — |
| CVE-2023-21808 | HIGH 7.8 | microsoft .net .NET and Visual Studio Remote Code Execution Vulnerability | 1.1% | — |