IT
59.734 CVE tracked
805 Exploited now
188 Used by ransomware
Last sync

Microsoft vulnerabilities

17.344 CVE

Microsoft vulnerabilities
Identifier Severity, sort descending Product and flaw EPSS, sort descending In KEV since, sort descending
CVE-2026-83869 CRIT 9.8 microsoft windows_10_1607 Integer underflow (wrap or wraparound) in DNS Server allows an unauthorized attacker to execute code over a network. 0.6% —
CVE-2024-43508 MED 5.5 microsoft windows_11_22h2 Windows Graphics Component Information Disclosure Vulnerability 0.6% —
CVE-2024-43500 MED 5.5 microsoft windows_11_22h2 Windows Resilient File System (ReFS) Information Disclosure Vulnerability 0.6% —
CVE-2023-36732 HIGH 7.8 microsoft windows_10_1507 Win32k Elevation of Privilege Vulnerability 0.6% —
CVE-2022-22050 HIGH 7.8 microsoft windows_10 Windows Fax Service Elevation of Privilege Vulnerability 0.6% —
CVE-2022-23257 HIGH 8.8 microsoft windows_10 Windows Hyper-V Remote Code Execution Vulnerability 0.6% —
CVE-2022-21862 HIGH 7.0 microsoft windows_10 Windows Application Model Core API Elevation of Privilege Vulnerability 0.6% —
CVE-2022-21859 HIGH 7.0 microsoft windows_10 Windows Accounts Control Elevation of Privilege Vulnerability 0.6% —
CVE-2026-70178 HIGH 8.5 microsoft fabric Missing authorization in Microsoft Fabric allows an authorized attacker to elevate privileges over a network. 0.6% —
CVE-2026-69857 HIGH 8.5 microsoft azure_cosmos_db Authorization bypass through user-controlled key in Azure Cosmos DB allows an authorized attacker to perform spoofing over a network. 0.6% —
CVE-2026-65818 HIGH 8.5 microsoft power_platform Server-side request forgery (ssrf) in Power Automate allows an authorized attacker to elevate privileges over a network. 0.6% —
CVE-2024-49051 HIGH 7.8 microsoft pc_manager Microsoft PC Manager Elevation of Privilege Vulnerability 0.6% —
CVE-2024-43551 HIGH 7.8 microsoft windows_10_1607 Windows Storage Elevation of Privilege Vulnerability 0.6% —
CVE-2024-38098 HIGH 7.8 microsoft azure_connected_machine_agent Azure Connected Machine Agent Elevation of Privilege Vulnerability 0.6% —
CVE-2022-34703 HIGH 7.8 microsoft windows_10 Windows Partition Management Driver Elevation of Privilege Vulnerability 0.6% —
CVE-2026-70012 HIGH 7.5 microsoft windows_10_1607 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. 0.6% —
CVE-2026-70004 HIGH 7.5 microsoft windows_10_1607 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. 0.6% —
CVE-2026-69998 HIGH 7.5 microsoft windows_10_1607 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. 0.6% —
CVE-2026-69997 HIGH 7.5 microsoft windows_10_1607 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. 0.6% —
CVE-2026-69996 HIGH 7.5 microsoft windows_10_1607 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. 0.6% —
CVE-2026-69995 HIGH 7.5 microsoft windows_10_1607 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. 0.6% —
CVE-2026-69994 HIGH 7.5 microsoft windows_10_1607 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. 0.6% —
CVE-2026-69992 HIGH 7.5 microsoft windows_10_1607 Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network. 0.6% —
CVE-2026-69991 HIGH 7.5 microsoft windows_10_1607 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. 0.6% —
CVE-2024-38151 MED 5.5 microsoft windows_10_1507 Windows Kernel Information Disclosure Vulnerability 0.6% —