59.529 CVE tracked
803 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
17.194 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-97745 | HIGH 8.8 | microsoft 365_apps Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-97742 | HIGH 8.8 | microsoft 365_apps Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-97741 | HIGH 8.8 | microsoft 365_apps Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-97739 | HIGH 8.8 | microsoft 365_apps Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-88144 | HIGH 8.8 | microsoft 365_apps Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-70215 | HIGH 8.8 | microsoft 365_apps Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-102857 | HIGH 8.8 | microsoft 365_apps Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-102856 | HIGH 8.8 | microsoft 365_apps Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2019-1037 | HIGH 7.0 | microsoft windows_10 An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. | 0.8% | — |
| CVE-2025-59285 | HIGH 7.0 | microsoft azure_monitor_agent Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally. | 0.8% | — |
| CVE-2025-21361 | HIGH 7.8 | microsoft office Microsoft Outlook Remote Code Execution Vulnerability | 0.8% | — |
| CVE-2025-21187 | HIGH 7.8 | microsoft power_automate_for_desktop Microsoft Power Automate Remote Code Execution Vulnerability | 0.8% | — |
| CVE-2024-38170 | HIGH 7.1 | microsoft 365_apps Microsoft Excel Remote Code Execution Vulnerability | 0.8% | — |
| CVE-2024-30068 | HIGH 8.8 | microsoft windows_10_1507 Windows Kernel Elevation of Privilege Vulnerability | 0.8% | — |
| CVE-2022-24513 | HIGH 7.8 | microsoft visual_studio_2017 Visual Studio Elevation of Privilege Vulnerability | 0.8% | — |
| CVE-2020-0912 | HIGH 7.0 | microsoft windows_10 <p>An elevation of privilege vulnerability exists when the Windows Function Discovery SSDP Provider improperly handles memory.</p> <p>To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run | 0.8% | — |
| CVE-2026-85878 | CRIT 9.9 | microsoft azure_horizondb Improper authorization in Azure Database for PostgreSQL allows an authorized attacker to elevate privileges over a network. | 0.8% | — |
| CVE-2026-83941 | CRIT 9.9 | microsoft entra_id Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network. | 0.8% | — |
| CVE-2026-77487 | HIGH 8.8 | microsoft sql_server_2017 Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network. | 0.8% | — |
| CVE-2026-77483 | HIGH 8.8 | microsoft sql_server_2017 Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network. | 0.8% | — |
| CVE-2026-77480 | HIGH 8.8 | microsoft sql_server_2017 Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network. | 0.8% | — |
| CVE-2026-73028 | HIGH 8.8 | microsoft sql_server_2017 Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network. | 0.8% | — |
| CVE-2026-69724 | HIGH 8.8 | microsoft sharepoint_server Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-69676 | HIGH 8.8 | microsoft windows_10_1607 Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-69465 | HIGH 8.8 | microsoft sharepoint_server Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 0.8% | — |