IT
59.422 CVE tracked
803 Exploited now
188 Used by ransomware
Last sync

Microsoft vulnerabilities

17.155 CVE

Microsoft vulnerabilities
Identifier Severity, sort descending Product and flaw EPSS, sort descending In KEV since, sort descending
CVE-2025-54107 MED 4.3 microsoft windows_10_1507 Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network. 0.9% —
CVE-2024-26201 MED 6.6 microsoft intune_company_portal Microsoft Intune Linux Agent Elevation of Privilege Vulnerability 0.9% —
CVE-2025-21379 HIGH 7.1 microsoft windows_11_24h2 DHCP Client Service Remote Code Execution Vulnerability 0.9% —
CVE-2023-21734 HIGH 7.8 microsoft 365_apps Microsoft Office Remote Code Execution Vulnerability 0.9% —
CVE-2025-29812 HIGH 7.8 microsoft windows_11_22h2 Untrusted pointer dereference in Windows Kernel Memory allows an authorized attacker to elevate privileges locally. 0.9% —
CVE-2024-20671 MED 5.5 microsoft windows_defender_antimalware_platform Microsoft Defender Security Feature Bypass Vulnerability 0.9% —
CVE-2023-32054 HIGH 7.3 microsoft windows_10_1507 Volume Shadow Copy Elevation of Privilege Vulnerability 0.9% —
CVE-2021-43238 HIGH 7.8 microsoft windows_10 Windows Remote Access Elevation of Privilege Vulnerability 0.9% —
CVE-2020-1266 HIGH 7.8 microsoft windows_10 An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0986, CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, 0.9% —
CVE-2020-1262 HIGH 7.8 microsoft windows_10 An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0986, CVE-2020-1237, CVE-2020-1246, CVE-2020-1264, 0.9% —
CVE-2020-1247 HIGH 7.8 microsoft windows_10 An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1207, CVE-2020-1251, CVE-2020-1253, 0.9% —
CVE-2020-1094 HIGH 7.8 microsoft windows_10 An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Folder Service Elevation of Privilege Vulnerability'. 0.9% —
CVE-2020-1017 HIGH 7.8 microsoft windows_10 An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0940, CVE-2020-1001, CV 0.9% —
CVE-2020-1006 HIGH 7.8 microsoft windows_10 An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0940, CVE-2020-1001, CV 0.9% —
CVE-2020-1004 HIGH 7.8 microsoft windows_10 An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. 0.9% —
CVE-2020-1003 HIGH 7.8 microsoft windows_10 An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0913, CVE-2020-1000, CVE-2020-1027. 0.9% —
CVE-2020-0996 HIGH 7.8 microsoft windows_10 An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory, aka 'Windows Update Stack Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0985. 0.9% —
CVE-2020-0958 HIGH 7.8 microsoft windows_10 An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0956, CVE-2020-0957. 0.9% —
CVE-2020-0956 HIGH 7.8 microsoft windows_10 An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0957, CVE-2020-0958. 0.9% —
CVE-2020-0940 HIGH 7.8 microsoft windows_10 An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1001, CVE-2020-1006, CV 0.9% —
CVE-2020-0913 HIGH 7.8 microsoft windows_10 An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1000, CVE-2020-1003, CVE-2020-1027. 0.9% —
CVE-2020-0888 HIGH 7.8 microsoft windows_10 An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0784. 0.9% —
CVE-2020-0835 HIGH 7.8 microsoft windows_defender An elevation of privilege vulnerability exists when Windows Defender antimalware platform improperly handles hard links, aka 'Windows Defender Antimalware Platform Hard Link Elevation of Privilege Vulnerability'. 0.9% —
CVE-2020-0757 HIGH 7.8 microsoft windows_10 An elevation of privilege vulnerability exists when Windows improperly handles Secure Socket Shell remote commands, aka 'Windows SSH Elevation of Privilege Vulnerability'. 0.9% —
CVE-2020-0745 HIGH 7.8 microsoft windows_10 An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0715, CVE-2020-0792. 0.9% —