59.703 CVE tracked
805 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
17.320 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2024-28900 | MED 5.5 | microsoft windows_10_1507 Windows Remote Access Connection Manager Information Disclosure Vulnerability | 0.7% | — |
| CVE-2023-23421 | HIGH 7.8 | microsoft windows_10 Windows Kernel Elevation of Privilege Vulnerability | 0.7% | — |
| CVE-2026-97815 | CRIT 9.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. | 0.7% | — |
| CVE-2026-84012 | HIGH 8.1 | microsoft windows_10_1607 Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. | 0.7% | — |
| CVE-2026-81380 | MED 5.3 | microsoft visual_studio_code Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network. | 0.7% | — |
| CVE-2025-47980 | MED 6.2 | microsoft windows_10_1507 Exposure of sensitive information to an unauthorized actor in Windows Imaging Component allows an unauthorized attacker to disclose information locally. | 0.7% | — |
| CVE-2024-38047 | HIGH 7.8 | microsoft windows_10_1607 PowerShell Elevation of Privilege Vulnerability | 0.7% | — |
| CVE-2023-33171 | HIGH 8.2 | microsoft dynamics_365 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | 0.7% | — |
| CVE-2023-28314 | MED 6.1 | microsoft dynamics_365 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | 0.7% | — |
| CVE-2022-21867 | HIGH 7.0 | microsoft windows_10 Windows Push Notifications Apps Elevation of Privilege Vulnerability | 0.7% | — |
| CVE-2022-21863 | HIGH 7.0 | microsoft windows_10 Windows StateRepository API Server file Elevation of Privilege Vulnerability | 0.7% | — |
| CVE-2020-16983 | MED 5.7 | microsoft azure_sphere Azure Sphere Tampering Vulnerability | 0.7% | — |
| CVE-2025-53156 | MED 5.5 | microsoft windows_11_24h2 Exposure of sensitive information to an unauthorized actor in Storage Port Driver allows an authorized attacker to disclose information locally. | 0.7% | — |
| CVE-2025-21336 | MED 5.6 | microsoft windows_10_1507 Windows Cryptographic Information Disclosure Vulnerability | 0.7% | — |
| CVE-2024-43625 | HIGH 8.1 | microsoft windows_11_22h2 Microsoft Windows VMSwitch Elevation of Privilege Vulnerability | 0.7% | — |
| CVE-2026-85889 | CRIT 10.0 | microsoft azure_ai_foundry Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network. | 0.7% | — |
| CVE-2024-20686 | HIGH 7.8 | microsoft windows_server_2022_23h2 Win32k Elevation of Privilege Vulnerability | 0.7% | — |
| CVE-2023-35343 | HIGH 7.8 | microsoft windows_10_1809 Windows Geolocation Service Remote Code Execution Vulnerability | 0.7% | — |
| CVE-2023-28226 | MED 5.3 | microsoft windows_10_1507 Windows Enroll Engine Security Feature Bypass Vulnerability | 0.7% | — |
| CVE-2022-21973 | MED 5.5 | microsoft windows_7 Windows Media Center Update Denial of Service Vulnerability | 0.7% | — |
| CVE-2021-43880 | MED 5.5 | microsoft windows_11 Windows Mobile Device Management Elevation of Privilege Vulnerability | 0.7% | — |
| CVE-2022-30132 | HIGH 7.8 | microsoft windows_10 Windows Container Manager Service Elevation of Privilege Vulnerability | 0.7% | — |
| CVE-2024-43524 | MED 6.8 | microsoft windows_10_1809 Windows Mobile Broadband Driver Remote Code Execution Vulnerability | 0.7% | — |
| CVE-2024-43523 | MED 6.8 | microsoft windows_10_1809 Windows Mobile Broadband Driver Remote Code Execution Vulnerability | 0.7% | — |
| CVE-2022-38015 | MED 6.5 | microsoft windows_10 Windows Hyper-V Denial of Service Vulnerability | 0.7% | — |