Microsoft vulnerabilities

15.471 CVE

Microsoft vulnerabilities
Identifier	Severity, sort descending	Product and flaw	EPSS, sort descending	In KEV since, sort descending
CVE-2020-0766	HIGH 7.8	microsoft windows_10 <p>An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.</p> <p>To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially craf	0.9%	—
CVE-2020-1556	HIGH 7.8	microsoft windows_10 An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally a	0.9%	—
CVE-2020-1524	HIGH 7.8	microsoft windows_10 An elevation of privilege vulnerability exists when the Windows Speech Shell Components improperly handle memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted	0.9%	—
CVE-2019-1284	HIGH 7.8	microsoft windows_7 An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'.	0.9%	—
CVE-2026-65815	HIGH 8.8	microsoft dynamics_365 Deserialization of untrusted data in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network.	0.9%	—
CVE-2026-50682	HIGH 7.1	microsoft windows_10_21h2 Out-of-bounds read in Windows Active Directory allows an authorized attacker to deny service over a network.	0.9%	—
CVE-2025-21180	HIGH 7.8	microsoft windows_10_1507 Heap-based buffer overflow in Windows exFAT File System allows an unauthorized attacker to execute code locally.	0.9%	—
CVE-2025-21321	MED 5.5	microsoft windows_10_1507 Windows Kernel Memory Information Disclosure Vulnerability	0.9%	—
CVE-2025-21320	MED 5.5	microsoft windows_10_1507 Windows Kernel Memory Information Disclosure Vulnerability	0.9%	—
CVE-2025-21319	MED 5.5	microsoft windows_10_1507 Windows Kernel Memory Information Disclosure Vulnerability	0.9%	—
CVE-2025-21318	MED 5.5	microsoft windows_10_1507 Windows Kernel Memory Information Disclosure Vulnerability	0.9%	—
CVE-2025-21316	MED 5.5	microsoft windows_10_1507 Windows Kernel Memory Information Disclosure Vulnerability	0.9%	—
CVE-2023-32047	HIGH 7.8	microsoft paint_3d Paint 3D Remote Code Execution Vulnerability	0.9%	—
CVE-2024-43518	HIGH 8.8	microsoft windows_10_1507 Windows Telephony Server Remote Code Execution Vulnerability	0.9%	—
CVE-2024-38234	MED 6.5	microsoft windows_10_1507 Windows Networking Denial of Service Vulnerability	0.9%	—
CVE-2024-38171	HIGH 7.8	microsoft 365_apps Microsoft PowerPoint Remote Code Execution Vulnerability	0.9%	—
CVE-2024-38058	MED 6.8	microsoft windows_10_1507 BitLocker Security Feature Bypass Vulnerability	0.9%	—
CVE-2023-21793	HIGH 7.8	microsoft 3d_builder 3D Builder Remote Code Execution Vulnerability	0.9%	—
CVE-2023-21791	HIGH 7.8	microsoft 3d_builder 3D Builder Remote Code Execution Vulnerability	0.9%	—
CVE-2023-21790	HIGH 7.8	microsoft 3d_builder 3D Builder Remote Code Execution Vulnerability	0.9%	—
CVE-2023-21789	HIGH 7.8	microsoft 3d_builder 3D Builder Remote Code Execution Vulnerability	0.9%	—
CVE-2023-21788	HIGH 7.8	microsoft 3d_builder 3D Builder Remote Code Execution Vulnerability	0.9%	—
CVE-2023-21787	HIGH 7.8	microsoft 3d_builder 3D Builder Remote Code Execution Vulnerability	0.9%	—
CVE-2023-21786	HIGH 7.8	microsoft 3d_builder 3D Builder Remote Code Execution Vulnerability	0.9%	—
CVE-2023-21785	HIGH 7.8	microsoft 3d_builder 3D Builder Remote Code Execution Vulnerability	0.9%	—