56.793 CVE tracked
777 Exploited now
183 Used by ransomware
Last sync
Microsoft vulnerabilities
15.479 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2023-28296 | HIGH 7.8 | microsoft visual_studio_2017 Visual Studio Remote Code Execution Vulnerability | 0.7% | — |
| CVE-2022-21967 | HIGH 7.0 | microsoft windows_10 Xbox Live Auth Manager for Windows Elevation of Privilege Vulnerability | 0.7% | — |
| CVE-2026-20932 | MED 5.5 | microsoft windows_10_1607 Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. | 0.7% | — |
| CVE-2023-36701 | HIGH 7.8 | microsoft windows_10_1507 Microsoft Resilient File System (ReFS) Elevation of Privilege Vulnerability | 0.7% | — |
| CVE-2023-24896 | MED 5.4 | microsoft dynamics_365 Dynamics 365 Finance Spoofing Vulnerability | 0.7% | — |
| CVE-2022-21871 | HIGH 7.0 | microsoft visual_studio_2017 Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability | 0.7% | — |
| CVE-2025-21399 | HIGH 7.4 | microsoft edge_update Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability | 0.7% | — |
| CVE-2026-62910 | HIGH 7.2 | microsoft exchange_server Improper control of resource identifiers ('resource injection') in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. | 0.7% | — |
| CVE-2023-28222 | HIGH 7.1 | microsoft windows_10_1507 Windows Kernel Elevation of Privilege Vulnerability | 0.7% | — |
| CVE-2022-21912 | HIGH 7.8 | microsoft windows_10 DirectX Graphics Kernel Remote Code Execution Vulnerability | 0.7% | — |
| CVE-2022-21875 | HIGH 7.0 | microsoft windows_10 Windows Storage Elevation of Privilege Vulnerability | 0.7% | — |
| CVE-2022-21873 | HIGH 7.0 | microsoft windows_10 Tile Data Repository Elevation of Privilege Vulnerability | 0.7% | — |
| CVE-2022-21872 | HIGH 7.0 | microsoft windows_10 Windows Event Tracing Elevation of Privilege Vulnerability | 0.7% | — |
| CVE-2022-21870 | HIGH 7.0 | microsoft windows_10 Tablet Windows User Interface Application Core Elevation of Privilege Vulnerability | 0.7% | — |
| CVE-2025-21384 | HIGH 8.3 | microsoft azure_health_bot An authenticated attacker can exploit an Server-Side Request Forgery (SSRF) vulnerability in Microsoft Azure Health Bot to elevate privileges over a network. | 0.7% | — |
| CVE-2023-36705 | HIGH 7.8 | microsoft windows_10_1507 Windows Installer Elevation of Privilege Vulnerability | 0.7% | — |
| CVE-2022-21845 | MED 4.7 | microsoft windows_10 Windows Kernel Information Disclosure Vulnerability | 0.7% | — |
| CVE-2021-28438 | MED 5.5 | microsoft windows_10 Windows Console Driver Denial of Service Vulnerability | 0.7% | — |
| CVE-2022-23264 | MED 4.7 | microsoft edge_chromium Microsoft Edge (Chromium-based) Spoofing Vulnerability | 0.7% | — |
| CVE-2025-24075 | HIGH 7.8 | microsoft 365_apps Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 0.7% | — |
| CVE-2024-43526 | MED 6.8 | microsoft windows_10_1809 Windows Mobile Broadband Driver Remote Code Execution Vulnerability | 0.7% | — |
| CVE-2024-43525 | MED 6.8 | microsoft windows_10_1809 Windows Mobile Broadband Driver Remote Code Execution Vulnerability | 0.7% | — |
| CVE-2024-26237 | HIGH 7.8 | microsoft windows_10_1809 Windows Defender Credential Guard Elevation of Privilege Vulnerability | 0.7% | — |
| CVE-2025-24063 | HIGH 7.8 | microsoft windows_10_1507 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 0.7% | — |
| CVE-2024-29994 | HIGH 7.8 | microsoft windows_10_1809 Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability | 0.7% | — |