59.422 CVE tracked
803 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
17.155 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2023-36029 | MED 4.3 | microsoft edge Microsoft Edge (Chromium-based) Spoofing Vulnerability | 1.0% | — |
| CVE-2020-16908 | HIGH 7.8 | microsoft windows_10 <p>An elevation of privilege vulnerability exists in Windows Setup in the way it handles directories.</p> <p>A locally authenticated attacker could run arbitrary code with elevated system privileges. After successfully exploiting the vulnerability, an attacker | 1.0% | — |
| CVE-2026-70575 | MED 5.3 | microsoft windows_11_23h2 Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network. | 1.0% | — |
| CVE-2023-35634 | HIGH 8.0 | microsoft windows_11_21h2 Windows Bluetooth Driver Remote Code Execution Vulnerability | 1.0% | — |
| CVE-2023-36886 | HIGH 7.6 | microsoft dynamics_365 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | 1.0% | — |
| CVE-2021-1657 | HIGH 7.8 | microsoft windows_10 Windows Fax Compose Form Remote Code Execution Vulnerability | 1.0% | — |
| CVE-2026-50432 | MED 5.3 | microsoft windows_10_1607 Use after free in Windows Virtual Filtering Platform (VFP) allows an authorized attacker to deny service over a network. | 1.0% | — |
| CVE-2024-30053 | MED 6.5 | microsoft azure_migrate Azure Migrate Cross-Site Scripting Vulnerability | 1.0% | — |
| CVE-2023-24948 | HIGH 7.4 | microsoft windows_10_1507 Windows Bluetooth Driver Elevation of Privilege Vulnerability | 1.0% | — |
| CVE-2021-1640 | HIGH 7.8 | microsoft windows_10 Windows Print Spooler Elevation of Privilege Vulnerability | 1.0% | — |
| CVE-2026-97819 | MED 6.5 | microsoft windows_10_1607 Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 1.0% | — |
| CVE-2026-97817 | MED 6.5 | microsoft windows_10_1607 Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network. | 1.0% | — |
| CVE-2026-97813 | MED 6.5 | microsoft windows_10_1809 Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network. | 1.0% | — |
| CVE-2026-85821 | MED 6.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally. | 1.0% | — |
| CVE-2026-85331 | MED 6.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information over a network. | 1.0% | — |
| CVE-2026-108129 | MED 6.5 | microsoft windows_10_1607 Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 1.0% | — |
| CVE-2026-108128 | MED 6.5 | microsoft windows_10_1607 Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 1.0% | — |
| CVE-2026-108127 | MED 6.5 | microsoft windows_10_1607 Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 1.0% | — |
| CVE-2024-38164 | CRIT 9.6 | microsoft groupme An improper access control vulnerability in GroupMe allows an a unauthenticated attacker to elevate privileges over a network by convincing a user to click on a malicious link. | 1.0% | — |
| CVE-2024-35248 | HIGH 7.3 | microsoft dynamics_365_business_central Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability | 1.0% | — |
| CVE-2024-21341 | MED 6.8 | microsoft windows_10_1809 Windows Kernel Remote Code Execution Vulnerability | 1.0% | — |
| CVE-2020-1369 | HIGH 7.8 | microsoft windows_10 An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletService Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1344, CVE-2020-1362. | 1.0% | — |
| CVE-2020-1344 | HIGH 7.8 | microsoft windows_10 An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletService Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1362, CVE-2020-1369. | 1.0% | — |
| CVE-2020-1166 | HIGH 7.8 | microsoft windows_10 An elevation of privilege vulnerability exists when Windows improperly handles calls to Clipboard Service. An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system. An attacker could then in | 1.0% | — |
| CVE-2020-1165 | HIGH 7.8 | microsoft windows_10 An elevation of privilege vulnerability exists when Windows improperly handles calls to Clipboard Service. An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system. An attacker could then in | 1.0% | — |