59.452 CVE tracked
803 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
17.174 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-85792 | CRIT 9.8 | microsoft windows_10_1607 Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine | 0.9% | — |
| CVE-2026-84015 | CRIT 9.8 | microsoft windows_10_1607 Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthorized attacker to execute code over a network. | 0.9% | — |
| CVE-2026-102210 | CRIT 9.8 | microsoft windows_10_1809 Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network. | 0.9% | — |
| CVE-2021-26427 | CRIT 9.0 | microsoft exchange_server Microsoft Exchange Server Remote Code Execution Vulnerability | 0.9% | — |
| CVE-2025-25006 | MED 5.3 | microsoft exchange_server Improper handling of additional special element in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network. | 0.9% | — |
| CVE-2024-29060 | MED 6.7 | microsoft visual_studio_2017 Visual Studio Elevation of Privilege Vulnerability | 0.9% | — |
| CVE-2021-26434 | HIGH 7.8 | microsoft visual_studio_2017 Visual Studio Elevation of Privilege Vulnerability | 0.9% | — |
| CVE-2020-1392 | HIGH 7.8 | microsoft windows_10 An elevation of privilege vulnerability exists when the Windows Delivery Optimization service improperly handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1388, CVE-2020-1394, CVE-2020-1395. | 0.9% | — |
| CVE-2024-43587 | MED 5.9 | microsoft edge_chromium Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | 0.9% | — |
| CVE-2022-22710 | MED 5.5 | microsoft windows_10 Windows Common Log File System Driver Denial of Service Vulnerability | 0.9% | — |
| CVE-2020-1402 | HIGH 7.8 | microsoft windows_10 An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows ActiveX Installer Service Eleva | 0.9% | — |
| CVE-2024-43476 | HIGH 7.6 | microsoft dynamics_365 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | 0.9% | — |
| CVE-2020-1080 | HIGH 8.8 | microsoft windows_10 <p>An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory. An attacker who successfully exploited these vulnerabilities could gain elevated privileges on a target operating system.</p> <p | 0.9% | — |
| CVE-2020-1047 | HIGH 7.8 | microsoft windows_10 <p>An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory. An attacker who successfully exploited these vulnerabilities could gain elevated privileges on a target operating system.</p> <p | 0.9% | — |
| CVE-2025-49674 | HIGH 8.8 | microsoft windows_server_2008 Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network. | 0.9% | — |
| CVE-2024-39804 | HIGH 7.1 | microsoft powerpoint A library injection vulnerability exists in Microsoft PowerPoint 16.83 for macOS. A specially crafted library can leverage PowerPoint's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to t | 0.9% | — |
| CVE-2024-49110 | MED 6.8 | microsoft windows_10_1809 Windows Mobile Broadband Driver Elevation of Privilege Vulnerability | 0.9% | — |
| CVE-2023-38147 | HIGH 8.8 | microsoft windows_10_1507 Windows Miracast Wireless Display Remote Code Execution Vulnerability | 0.9% | — |
| CVE-2021-36956 | MED 4.4 | microsoft azure_sphere Azure Sphere Information Disclosure Vulnerability | 0.9% | — |
| CVE-2020-17076 | HIGH 7.8 | microsoft windows_10 Windows Update Orchestrator Service Elevation of Privilege Vulnerability | 0.9% | — |
| CVE-2020-1596 | MED 5.4 | microsoft windows_10 <p>A information disclosure vulnerability exists when TLS components use weak hash algorithms. An attacker who successfully exploited this vulnerability could obtain information to further compromise a users's encrypted transmission channel.</p> <p>To exploit | 0.9% | — |
| CVE-2026-85798 | HIGH 7.2 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network. | 0.9% | — |
| CVE-2024-28917 | MED 6.2 | microsoft azure_arc_extension_microsoft.azstackhci.operator Azure Arc-enabled Kubernetes Extension Cluster-Scope Elevation of Privilege Vulnerability | 0.9% | — |
| CVE-2026-97830 | HIGH 7.5 | microsoft windows_11_23h2 Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network. | 0.9% | — |
| CVE-2026-85337 | MED 6.5 | microsoft windows_10_1607 Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network. | 0.9% | — |