59.557 CVE tracked
803 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
17.219 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-88145 | HIGH 8.8 | microsoft 365_apps Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 0.7% | — |
| CVE-2026-85817 | HIGH 8.8 | microsoft windows_10_1607 Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized attacker to execute code over a network. | 0.7% | — |
| CVE-2026-105716 | HIGH 8.8 | microsoft 365_apps Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | 0.7% | — |
| CVE-2026-105598 | HIGH 8.8 | microsoft 365_apps Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | 0.7% | — |
| CVE-2026-105597 | HIGH 8.8 | microsoft 365_apps Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | 0.7% | — |
| CVE-2026-105596 | HIGH 8.8 | microsoft 365_apps Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | 0.7% | — |
| CVE-2026-105595 | HIGH 8.8 | microsoft 365_apps Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | 0.7% | — |
| CVE-2026-105593 | HIGH 8.8 | microsoft 365_apps Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | 0.7% | — |
| CVE-2026-105591 | HIGH 8.8 | microsoft 365_apps Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | 0.7% | — |
| CVE-2026-102858 | HIGH 8.8 | microsoft microsoft_365 Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network. | 0.7% | — |
| CVE-2024-26172 | MED 5.5 | microsoft windows_10_1809 Windows DWM Core Library Information Disclosure Vulnerability | 0.7% | — |
| CVE-2024-21387 | MED 5.3 | microsoft edge_chromium Microsoft Edge for Android Spoofing Vulnerability | 0.7% | — |
| CVE-2023-32028 | HIGH 7.8 | microsoft ole_db_driver_for_sql_server Microsoft SQL OLE DB Remote Code Execution Vulnerability | 0.7% | — |
| CVE-2023-32026 | HIGH 7.8 | microsoft odbc_driver_for_sql_server Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability | 0.7% | — |
| CVE-2024-28922 | MED 4.1 | microsoft windows_10_1507 Secure Boot Security Feature Bypass Vulnerability | 0.7% | — |
| CVE-2024-21436 | HIGH 7.8 | microsoft windows_10_1507 Windows Installer Elevation of Privilege Vulnerability | 0.7% | — |
| CVE-2023-36898 | HIGH 7.8 | microsoft windows_11_21h2 Tablet Windows User Interface Application Core Remote Code Execution Vulnerability | 0.7% | — |
| CVE-2023-21773 | HIGH 7.8 | microsoft windows_10_1607 Windows Kernel Elevation of Privilege Vulnerability | 0.7% | — |
| CVE-2022-22043 | HIGH 7.8 | microsoft windows_10 Windows Fast FAT File System Driver Elevation of Privilege Vulnerability | 0.7% | — |
| CVE-2022-24465 | LOW 3.3 | microsoft intune_company_portal Microsoft Intune Portal for iOS Security Feature Bypass Vulnerability | 0.7% | — |
| CVE-2020-1159 | MED 6.6 | microsoft windows_10 <p>An elevation of privilege vulnerability exists in the way that the StartTileData.dll handles file creation in protected locations. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.</p> <p>To exploit the v | 0.7% | — |
| CVE-2026-85885 | CRIT 9.9 | microsoft 365_copilot Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an authorized attacker to elevate privileges over a network. | 0.7% | — |
| CVE-2026-57985 | HIGH 7.6 | microsoft edge_chromium Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | 0.7% | — |
| CVE-2025-62220 | HIGH 8.8 | microsoft windows_subsystem_for_linux Heap-based buffer overflow in Windows Subsystem for Linux GUI allows an unauthorized attacker to execute code over a network. | 0.7% | — |
| CVE-2025-55248 | MED 4.8 | microsoft .net Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose information over a network. | 0.7% | — |