59.356 CVE tracked
803 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
17.099 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-70306 | CRIT 9.3 | microsoft sharepoint_server Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. | 1.0% | — |
| CVE-2026-81349 | HIGH 7.2 | microsoft azure_hdinsight Improper neutralization of special elements used in an os command ('os command injection') in Azure HDInsights allows an authorized attacker to elevate privileges over a network. | 1.0% | — |
| CVE-2026-47299 | HIGH 7.2 | microsoft azure_monitor_agent Improper neutralization of special elements used in a command ('command injection') in Azure Monitor Agent allows an authorized attacker to elevate privileges over a network. | 1.0% | — |
| CVE-2025-50171 | CRIT 9.1 | microsoft windows_server_2022 Missing authorization in Remote Desktop Server allows an unauthorized attacker to perform spoofing over a network. | 1.0% | — |
| CVE-2024-38048 | MED 6.5 | microsoft windows_10_1507 Windows Network Driver Interface Specification (NDIS) Denial of Service Vulnerability | 1.0% | — |
| CVE-2024-38027 | MED 6.5 | microsoft windows_10_1507 Windows Line Printer Daemon Service Denial of Service Vulnerability | 1.0% | — |
| CVE-2020-1530 | HIGH 7.8 | microsoft windows_10 An elevation of privilege vulnerability exists when Windows Remote Access improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application | 1.0% | — |
| CVE-2022-29146 | HIGH 8.3 | microsoft edge_chromium Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | 1.0% | — |
| CVE-2020-0803 | HIGH 7.8 | microsoft windows_10 An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0778, CVE-2020 | 1.0% | — |
| CVE-2020-0802 | HIGH 7.8 | microsoft windows_10 An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0778, CVE-2020 | 1.0% | — |
| CVE-2026-96246 | HIGH 7.5 | microsoft windows_10_1607 Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network. | 1.0% | — |
| CVE-2026-96245 | HIGH 7.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. | 1.0% | — |
| CVE-2026-85334 | HIGH 7.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network. | 1.0% | — |
| CVE-2024-30062 | HIGH 7.8 | microsoft windows_server_2012 Windows Standards-Based Storage Management Service Remote Code Execution Vulnerability | 1.0% | — |
| CVE-2023-36742 | HIGH 7.8 | microsoft visual_studio_code Visual Studio Code Remote Code Execution Vulnerability | 1.0% | — |
| CVE-2020-16905 | MED 6.8 | microsoft windows_10 <p>An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files. The vulnerability could allow elevation of privilege if an attacker can successfully exploit it.</p> <p>An attacker who successfully exploit | 1.0% | — |
| CVE-2020-0934 | HIGH 7.8 | microsoft windows_10 An elevation of privilege vulnerability exists when the Windows WpcDesktopMonSvc improperly manages memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Elevation of Privilege Vulnerability'. T | 1.0% | — |
| CVE-2019-1420 | HIGH 7.8 | microsoft windows_10 An elevation of privilege vulnerability exists in the way that the dssvc.dll handles file creation allowing for a file overwrite or creation in a secured location, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1422, CV | 1.0% | — |
| CVE-2020-17099 | MED 6.8 | microsoft windows_10 Windows Lock Screen Security Feature Bypass Vulnerability | 1.0% | — |
| CVE-2017-8552 | HIGH 7.8 | microsoft windows_7 A kernel-mode driver in Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, and Windows 8 allows an elevation of privilege when it fails to properly handle objects in memory, | 1.0% | — |
| CVE-1999-1104 | MED 4.6 | microsoft windows_95 Windows 95 uses weak encryption for the password list (.pwl) file used when password caching is enabled, which allows local users to gain privileges by decrypting the passwords. | 1.0% | — |
| CVE-2023-41764 | MED 5.5 | microsoft 365_apps Microsoft Office Spoofing Vulnerability | 1.0% | — |
| CVE-2020-16935 | HIGH 7.8 | microsoft windows_10 <p>An elevation of privilege vulnerability exists when Windows improperly handles COM object creation. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges.</p> <p>To exploit this vulnerability, an attacker | 1.0% | — |
| CVE-2020-1522 | HIGH 7.8 | microsoft windows_10 An elevation of privilege vulnerability exists when the Windows Speech Runtime improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted applica | 1.0% | — |
| CVE-2019-1045 | HIGH 7.8 | microsoft windows_10 An elevation of privilege vulnerability exists in the way that the Windows Network File System (NFS) handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, | 1.0% | — |