59.422 CVE tracked
803 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
17.155 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2020-0725 | HIGH 7.8 | microsoft windows_10 An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0691, CVE-2020-0719, CVE-2020-0720, CVE-2020- | 0.9% | — |
| CVE-2020-0724 | HIGH 7.8 | microsoft windows_10 An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0691, CVE-2020-0719, CVE-2020-0720, CVE-2020- | 0.9% | — |
| CVE-2020-0719 | HIGH 7.8 | microsoft windows_10 An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0691, CVE-2020-0720, CVE-2020-0721, CVE-2020- | 0.9% | — |
| CVE-2020-0685 | HIGH 7.8 | microsoft windows_10 An elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Server Elevation of Privilege Vulnerability'. | 0.9% | — |
| CVE-2020-0682 | HIGH 7.8 | microsoft windows_10 An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'Windows Function Discovery Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0679, CVE-2020-0 | 0.9% | — |
| CVE-2020-0678 | HIGH 7.8 | microsoft windows_10 An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'. | 0.9% | — |
| CVE-2026-83889 | HIGH 8.8 | microsoft windows_10_1607 Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network. | 0.9% | — |
| CVE-2026-80096 | HIGH 8.8 | microsoft windows_10_1607 Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network. | 0.9% | — |
| CVE-2026-78456 | HIGH 8.8 | microsoft sql_server_2022 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. | 0.9% | — |
| CVE-2026-77481 | HIGH 8.8 | microsoft sql_server_2017 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. | 0.9% | — |
| CVE-2026-73012 | HIGH 8.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network. | 0.9% | — |
| CVE-2026-72959 | HIGH 8.8 | microsoft windows_10_1607 Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine | 0.9% | — |
| CVE-2026-71352 | HIGH 8.8 | microsoft windows_10_1607 Integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager allows an authorized attacker to execute code over a network. | 0.9% | — |
| CVE-2026-71336 | HIGH 8.8 | microsoft windows_10_1607 Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execute code over a network. | 0.9% | — |
| CVE-2026-69729 | HIGH 8.8 | microsoft windows_11_24h2 Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute code over a network. | 0.9% | — |
| CVE-2026-69712 | HIGH 8.8 | microsoft windows_server_2012 Use after free in Windows Key Distribution Center allows an authorized attacker to execute code over a network. | 0.9% | — |
| CVE-2026-69628 | HIGH 8.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to execute code over a network. | 0.9% | — |
| CVE-2026-69551 | HIGH 8.8 | microsoft windows_10_1607 Use after free in Windows DNS allows an authorized attacker to execute code over a network. | 0.9% | — |
| CVE-2026-69547 | HIGH 8.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network. | 0.9% | — |
| CVE-2026-69485 | HIGH 8.8 | microsoft windows_10_1607 Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network. | 0.9% | — |
| CVE-2026-69464 | HIGH 8.8 | microsoft sharepoint_server Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | 0.9% | — |
| CVE-2026-69355 | HIGH 8.8 | microsoft exchange_server External control of file name or path in Microsoft Exchange Server allows an authorized attacker to execute code over a network. | 0.9% | — |
| CVE-2026-68786 | HIGH 8.8 | microsoft sql_server_2017 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. | 0.9% | — |
| CVE-2026-68775 | HIGH 8.8 | microsoft sql_server_2017 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. | 0.9% | — |
| CVE-2026-67642 | HIGH 8.8 | microsoft sql_server_2025 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. | 0.9% | — |