59.727 CVE tracked
805 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
17.343 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2025-29834 | HIGH 7.5 | microsoft edge_chromium Out-of-bounds read in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | 0.6% | — |
| CVE-2023-23391 | MED 5.5 | microsoft 365_copilot Office for Android Spoofing Vulnerability | 0.6% | — |
| CVE-2023-21802 | HIGH 7.8 | microsoft windows_10 Windows Media Remote Code Execution Vulnerability | 0.6% | — |
| CVE-2022-29103 | HIGH 7.8 | microsoft windows_10 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | 0.6% | — |
| CVE-2022-23291 | HIGH 7.8 | microsoft windows_10 Windows DWM Core Library Elevation of Privilege Vulnerability | 0.6% | — |
| CVE-2022-22001 | HIGH 7.8 | microsoft windows_10 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | 0.6% | — |
| CVE-2026-69802 | HIGH 8.1 | microsoft windows_server_2012 Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute code over a network. | 0.6% | — |
| CVE-2026-25186 | MED 5.5 | microsoft windows_10_1607 Exposure of sensitive information to an unauthorized actor in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker to disclose information locally. | 0.6% | — |
| CVE-2026-0391 | MED 6.5 | microsoft edge_chromium User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network. | 0.6% | — |
| CVE-2025-54901 | MED 5.5 | microsoft 365_apps Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | 0.6% | — |
| CVE-2022-35797 | MED 6.1 | microsoft windows_10 Windows Hello Security Feature Bypass Vulnerability | 0.6% | — |
| CVE-2022-24459 | HIGH 7.8 | microsoft windows_10 Windows Fax and Scan Service Elevation of Privilege Vulnerability | 0.6% | — |
| CVE-2019-1454 | MED 5.5 | microsoft windows_10 An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'. | 0.6% | — |
| CVE-2025-55244 | CRIT 9.0 | microsoft azure_ai_bot_service Azure Bot Service Elevation of Privilege Vulnerability | 0.6% | — |
| CVE-2025-49696 | HIGH 8.4 | microsoft 365_apps Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally. | 0.6% | — |
| CVE-2024-26246 | LOW 3.9 | microsoft edge Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability | 0.6% | — |
| CVE-2023-38173 | MED 4.3 | microsoft edge_chromium Microsoft Edge for Android Spoofing Vulnerability | 0.6% | — |
| CVE-2022-38003 | HIGH 7.8 | microsoft windows_10 Windows Resilient File System Elevation of Privilege | 0.6% | — |
| CVE-2022-37980 | HIGH 7.8 | microsoft windows_10 Windows DHCP Client Elevation of Privilege Vulnerability | 0.6% | — |
| CVE-2026-69326 | HIGH 8.8 | microsoft windows_10_1607 Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network. | 0.6% | — |
| CVE-2026-57098 | HIGH 7.5 | microsoft remote_desktop_client Improper verification of cryptographic signature in Windows RDP Client allows an unauthorized attacker to disclose information over a network. | 0.6% | — |
| CVE-2025-47168 | HIGH 7.8 | microsoft 365_apps Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 0.6% | — |
| CVE-2024-21315 | HIGH 7.8 | microsoft defender_for_endpoint Microsoft Defender for Endpoint Protection Elevation of Privilege Vulnerability | 0.6% | — |
| CVE-2024-26175 | HIGH 7.8 | microsoft windows_10_1507 Secure Boot Security Feature Bypass Vulnerability | 0.6% | — |
| CVE-2023-21820 | HIGH 7.4 | microsoft windows_10 Windows Distributed File System (DFS) Remote Code Execution Vulnerability | 0.6% | — |