IT
60.267 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync

Microsoft vulnerabilities

17.794 CVE

Microsoft vulnerabilities
Identifier Severity, sort descending Product and flaw EPSS, sort descending In KEV since, sort descending
CVE-2022-35765 HIGH 7.8 microsoft windows_10 Storage Spaces Direct Elevation of Privilege Vulnerability 0.5% —
CVE-2022-35764 HIGH 7.8 microsoft windows_10 Storage Spaces Direct Elevation of Privilege Vulnerability 0.5% —
CVE-2022-35763 HIGH 7.8 microsoft windows_10 Storage Spaces Direct Elevation of Privilege Vulnerability 0.5% —
CVE-2026-69635 MED 6.6 microsoft windows_10_1607 Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges with a physical attack. 0.5% —
CVE-2026-81960 HIGH 7.8 microsoft 365_apps Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 0.5% —
CVE-2026-81959 HIGH 7.8 microsoft 365_apps Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 0.5% —
CVE-2026-81957 HIGH 7.8 microsoft 365_apps Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 0.5% —
CVE-2026-81956 HIGH 7.8 microsoft 365_apps Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 0.5% —
CVE-2026-81954 HIGH 7.8 microsoft 365_apps Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 0.5% —
CVE-2026-81953 HIGH 7.8 microsoft 365_apps Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 0.5% —
CVE-2026-81951 HIGH 7.8 microsoft 365_apps Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 0.5% —
CVE-2026-81950 HIGH 7.8 microsoft 365_apps Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 0.5% —
CVE-2026-81949 HIGH 7.8 microsoft 365_apps Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 0.5% —
CVE-2026-81948 HIGH 7.8 microsoft 365_apps Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 0.5% —
CVE-2026-81947 HIGH 7.8 microsoft 365_apps Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 0.5% —
CVE-2026-81398 HIGH 7.8 microsoft 365_apps Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 0.5% —
CVE-2026-81397 HIGH 7.8 microsoft 365_apps Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 0.5% —
CVE-2026-81396 HIGH 7.8 microsoft 365_apps Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 0.5% —
CVE-2026-81388 HIGH 7.8 microsoft 365_apps Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 0.5% —
CVE-2026-81386 HIGH 7.8 microsoft 365_apps Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 0.5% —
CVE-2026-81353 HIGH 7.8 microsoft heif_image_extension Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally. 0.5% —
CVE-2026-58600 HIGH 7.8 microsoft hevc_video_extensions Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to elevate privileges locally. 0.5% —
CVE-2026-58599 HIGH 7.8 microsoft hevc_video_extensions Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally. 0.5% —
CVE-2026-70313 HIGH 7.8 microsoft 365_apps Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. 0.5% —
CVE-2026-70311 HIGH 7.8 microsoft 365_apps Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. 0.5% —