Microsoft: actively exploited vulnerabilities

Affected products

• Windows175
• Internet Explorer36
• Office29
• Win32k25
• Exchange Server17
• SharePoint10
• Defender5
• SharePoint Server5
• Open Management Infrastructure (OMI)4
• Word4
• .NET Framework3
• Active Directory3
• Excel3
• Silverlight3
• DirectX Graphics Kernel (DXGKRNL)2
• Edge2
• Edge and Internet Explorer2
• Enhanced Cryptographic Provider2
• Graphics Device Interface (GDI)2
• MSHTML2
• PowerPoint2
• SMBv12
• SMBv1 server2
• SQL Server2
• XML Core Services2
• .NET Core and Visual Studio1
• .NET Framework, SharePoint, Visual Studio1
• Active Directory Federation Services1
• Ancillary Function Driver (afd.sys)1
• ATM Font Driver1
• Client-Server Run-time Subsystem (CSRSS)1
• Configuration Manager1
• DirectX1
• DWM Core Library1
• Exchange1
• Forefront Threat Management Gateway (TMG)1
• Graphics Component1
• HTTP Protocol Stack1
• HTTP.sys1
• Hyper-V RemoteFX1
• Input Method Editor (IME) Japanese1
• Internet Explorer and Edge1
• Internet Explorer Scripting Engine1
• Internet Information Services (IIS)1
• Internet Key Exchange (IKE) Service Extensions1
• Kerberos Key Distribution Center (KDC)1
• Malware Protection Engine1
• Microsoft1
• MSCOMCTL.OCX1
• Netlogon1
• Office and WordPad1
• Office Outlook1
• Outlook1
• Partner Center1
• Power Pages1
• Project1
• Publisher1
• Remote Desktop Services1
• Skype for Business1
• SmartScreen Prompt1
• SMBv31
• Streaming Service1
• Streaming Service Proxy1
• Task Scheduler1
• Update Notification Manager1
• Visual Basic for Applications (VBA)1
• Windows Ancillary Function Driver for WinSock1
• Windows CNG Key Isolation Service1
• Windows COM+ Event System Service1
• WinVerifyTrust function1
• WordPad1

Our analyses

CybersecurityAlert level 3 of 5: Important

Windows Update certificates change: PCs that aren't updated will lose patches in 2027

Microsoft warns that Windows Update certificates expire on May 17 and June 19, 2027. PCs and servers not updated by then will no longer receive any security updates.

Oct 11, 20262 min read

CERT-FR alerts and notices

Recent CERT-FR publications naming this vendor (alerts: immediate threat; notices: patches released). In French.

1. CERTFR-2026-AVI-1267Oct 7

   Multiples vulnérabilités dans Microsoft Edge (07 octobre 2026)

2. CERTFR-2026-AVI-1266Oct 6

   Vulnérabilité dans Microsoft Office (06 octobre 2026)

3. CERTFR-2026-AVI-1258Oct 5

   Vulnérabilité dans Microsoft Exchange Server (05 octobre 2026)

4. CERTFR-2026-ALE-008Jul 22

   Multiples vulnérabilités dans Microsoft Sharepoint (22 juillet 2026)

5. CERTFR-2026-ALE-005May 15

   [Màj] Vulnérabilité dans Microsoft Exchange Server (15 mai 2026)

6. CERTFR-2025-ALE-010Jul 21 2025

   [MàJ] Multiples vulnérabilités dans Microsoft SharePoint (21 juillet 2025)

7. CERTFR-2024-ALE-005Feb 15 2024

   [MàJ] Vulnérabilité dans Microsoft Outlook (15 février 2024)

All exploited vulnerabilities

CISA KEV catalog, newest first: each entry corresponds to observed exploitation.

2026 40 vulnerabilities

1. CVE-2026-96951added Oct 13

   Microsoft Windows Command Injection Vulnerability

   NVD entryCISA catalog

2. CVE-2026-65660added Sep 25

   Microsoft SharePoint Code Injection Vulnerability

   NVD entryCISA catalog

3. CVE-2026-85880added Sep 8

   Microsoft Windows Heap-Based Buffer Overflow Vulnerability

   NVD entryCISA catalog

4. CVE-2026-81963added Sep 8

   Microsoft Windows Link Following Vulnerability

   NVD entryCISA catalog

5. CVE-2019-1068added Aug 26

   Microsoft SQL Server Remote Code Execution Vulnerability

   NVD entryCISA catalog

6. CVE-2026-55040added Aug 18

   Microsoft SharePoint Weak Authentication Vulnerability

   NVD entryCISA catalog

7. CVE-2026-33824added Aug 18

   Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability

   NVD entryCISA catalog

8. CVE-2026-68820added Aug 11

   Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

   NVD entryCISA catalog

9. CVE-2026-50522added Jul 22

   Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

   NVD entryCISA catalog

10. CVE-2026-58644added Jul 16

    Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

    NVD entryCISA catalog

11. CVE-2026-56164added Jul 14

    Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability

    NVD entryCISA catalog

12. CVE-2026-56155added Jul 14

    Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability

    NVD entryCISA catalog

13. CVE-2026-45659Used by ransomwareadded Jul 1

    Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability

    NVD entryCISA catalog

14. CVE-2026-45498added May 20

    Microsoft Defender Denial of Service Vulnerability

    NVD entryCISA catalog

15. CVE-2026-41091added May 20

    Microsoft Defender Link Following Vulnerability

    NVD entryCISA catalog

16. CVE-2010-0806added May 20

    Microsoft Internet Explorer Use-After-Free Vulnerability

    NVD entryCISA catalog

17. CVE-2010-0249added May 20

    Microsoft Internet Explorer Use-After-Free Vulnerability

    NVD entryCISA catalog

18. CVE-2009-1537added May 20

    Microsoft DirectX NULL Byte Overwrite Vulnerability

    NVD entryCISA catalog

19. CVE-2008-4250added May 20

    Microsoft Windows Buffer Overflow Vulnerability

    NVD entryCISA catalog

20. CVE-2026-42897added May 15

    Microsoft Exchange Server Cross-Site Scripting Vulnerability

    NVD entryCISA catalog

21. CVE-2026-32202added Apr 28

    Microsoft Windows Protection Mechanism Failure Vulnerability

    NVD entryCISA catalog

22. CVE-2026-33825Used by ransomwareadded Apr 22

    Microsoft Defender Insufficient Granularity of Access Control Vulnerability

    NVD entryCISA catalog

23. CVE-2026-32201added Apr 14

    Microsoft SharePoint Server Improper Input Validation Vulnerability

    NVD entryCISA catalog

24. CVE-2009-0238added Apr 14

    Microsoft Office Remote Code Execution

    NVD entryCISA catalog

25. CVE-2025-60710Used by ransomwareadded Apr 13

    Microsoft Windows Link Following Vulnerability

    NVD entryCISA catalog

26. CVE-2023-36424added Apr 13

    Microsoft Windows Out-of-Bounds Read Vulnerability

    NVD entryCISA catalog

27. CVE-2023-21529Used by ransomwareadded Apr 13

    Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability

    NVD entryCISA catalog

28. CVE-2012-1854added Apr 13

    Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability

    NVD entryCISA catalog

29. CVE-2026-20963added Mar 18

    Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

    NVD entryCISA catalog

30. CVE-2008-0015added Feb 17

    Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability

    NVD entryCISA catalog

31. CVE-2024-43468added Feb 12

    Microsoft Configuration Manager SQL Injection Vulnerability

    NVD entryCISA catalog

32. CVE-2026-21533added Feb 10

    Microsoft Windows Improper Privilege Management Vulnerability

    NVD entryCISA catalog

33. CVE-2026-21525added Feb 10

    Microsoft Windows NULL Pointer Dereference Vulnerability

    NVD entryCISA catalog

34. CVE-2026-21519added Feb 10

    Microsoft Windows Type Confusion Vulnerability

    NVD entryCISA catalog

35. CVE-2026-21514added Feb 10

    Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability

    NVD entryCISA catalog

36. CVE-2026-21513added Feb 10

    Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability

    NVD entryCISA catalog

37. CVE-2026-21510added Feb 10

    Microsoft Windows Shell Protection Mechanism Failure Vulnerability

    NVD entryCISA catalog

38. CVE-2026-21509added Jan 26

    Microsoft Office Security Feature Bypass Vulnerability

    NVD entryCISA catalog

39. CVE-2026-20805added Jan 13

    Microsoft Windows Information Disclosure Vulnerability

    NVD entryCISA catalog

40. CVE-2009-0556added Jan 7

    Microsoft Office PowerPoint Code Injection Vulnerability

    NVD entryCISA catalog

2025 39 vulnerabilities

1. CVE-2025-62221added Dec 9 2025

   Microsoft Windows Use After Free Vulnerability

   NVD entryCISA catalog

2. CVE-2025-62215added Nov 12 2025

   Microsoft Windows Race Condition Vulnerability

   NVD entryCISA catalog

3. CVE-2025-59287added Oct 24 2025

   Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability

   NVD entryCISA catalog

4. CVE-2025-33073added Oct 20 2025

   Microsoft Windows SMB Client Improper Access Control Vulnerability

   NVD entryCISA catalog

5. CVE-2025-59230added Oct 14 2025

   Microsoft Windows Improper Access Control Vulnerability

   NVD entryCISA catalog

6. CVE-2025-24990added Oct 14 2025

   Microsoft Windows Untrusted Pointer Dereference Vulnerability

   NVD entryCISA catalog

7. CVE-2021-43226Used by ransomwareadded Oct 6 2025

   Microsoft Windows Privilege Escalation Vulnerability

   NVD entryCISA catalog

8. CVE-2013-3918added Oct 6 2025

   Microsoft Windows Out-of-Bounds Write Vulnerability

   NVD entryCISA catalog

9. CVE-2011-3402added Oct 6 2025

   Microsoft Windows Remote Code Execution Vulnerability

   NVD entryCISA catalog

10. CVE-2010-3962added Oct 6 2025

    Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability

    NVD entryCISA catalog

11. CVE-2013-3893added Aug 12 2025

    Microsoft Internet Explorer Resource Management Errors Vulnerability

    NVD entryCISA catalog

12. CVE-2007-0671added Aug 12 2025

    Microsoft Office Excel Remote Code Execution Vulnerability

    NVD entryCISA catalog

13. CVE-2025-49706Used by ransomwareadded Jul 22 2025

    Microsoft SharePoint Improper Authentication Vulnerability

    NVD entryCISA catalog

14. CVE-2025-49704Used by ransomwareadded Jul 22 2025

    Microsoft SharePoint Code Injection Vulnerability

    NVD entryCISA catalog

15. CVE-2025-53770Used by ransomwareadded Jul 20 2025

    Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

    NVD entryCISA catalog

16. CVE-2025-33053added Jun 10 2025

    Microsoft Windows External Control of File Name or Path Vulnerability

    NVD entryCISA catalog

17. CVE-2025-32709added May 13 2025

    Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

    NVD entryCISA catalog

18. CVE-2025-32706added May 13 2025

    Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability

    NVD entryCISA catalog

19. CVE-2025-32701added May 13 2025

    Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability

    NVD entryCISA catalog

20. CVE-2025-30400added May 13 2025

    Microsoft Windows DWM Core Library Use-After-Free Vulnerability

    NVD entryCISA catalog

21. CVE-2025-30397added May 13 2025

    Microsoft Windows Scripting Engine Type Confusion Vulnerability

    NVD entryCISA catalog

22. CVE-2025-24054added Apr 17 2025

    Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability

    NVD entryCISA catalog

23. CVE-2025-29824Used by ransomwareadded Apr 8 2025

    Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability

    NVD entryCISA catalog

24. CVE-2025-26633Used by ransomwareadded Mar 11 2025

    Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability

    NVD entryCISA catalog

25. CVE-2025-24993added Mar 11 2025

    Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability

    NVD entryCISA catalog

26. CVE-2025-24991added Mar 11 2025

    Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability

    NVD entryCISA catalog

27. CVE-2025-24985added Mar 11 2025

    Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability

    NVD entryCISA catalog

28. CVE-2025-24984added Mar 11 2025

    Microsoft Windows NTFS Information Disclosure Vulnerability

    NVD entryCISA catalog

29. CVE-2025-24983added Mar 11 2025

    Microsoft Windows Win32k Use-After-Free Vulnerability

    NVD entryCISA catalog

30. CVE-2018-8639Used by ransomwareadded Mar 3 2025

    Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability

    NVD entryCISA catalog

31. CVE-2024-49035added Feb 25 2025

    Microsoft Partner Center Improper Access Control Vulnerability

    NVD entryCISA catalog

32. CVE-2025-24989added Feb 21 2025

    Microsoft Power Pages Improper Access Control Vulnerability

    NVD entryCISA catalog

33. CVE-2025-21418added Feb 11 2025

    Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability

    NVD entryCISA catalog

34. CVE-2025-21391added Feb 11 2025

    Microsoft Windows Storage Link Following Vulnerability

    NVD entryCISA catalog

35. CVE-2024-21413added Feb 6 2025

    Microsoft Outlook Improper Input Validation Vulnerability

    NVD entryCISA catalog

36. CVE-2024-29059added Feb 4 2025

    Microsoft .NET Framework Information Disclosure Vulnerability

    NVD entryCISA catalog

37. CVE-2025-21335added Jan 14 2025

    Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

    NVD entryCISA catalog

38. CVE-2025-21334added Jan 14 2025

    Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

    NVD entryCISA catalog

39. CVE-2025-21333added Jan 14 2025

    Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability

    NVD entryCISA catalog

2024 36 vulnerabilities

1. CVE-2024-35250added Dec 16 2024

   Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability

   NVD entryCISA catalog

2. CVE-2024-49138added Dec 10 2024

   Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability

   NVD entryCISA catalog

3. CVE-2024-49039Used by ransomwareadded Nov 12 2024

   Microsoft Windows Task Scheduler Privilege Escalation Vulnerability

   NVD entryCISA catalog

4. CVE-2024-43451added Nov 12 2024

   Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability

   NVD entryCISA catalog

5. CVE-2024-38094Used by ransomwareadded Oct 22 2024

   Microsoft SharePoint Deserialization Vulnerability

   NVD entryCISA catalog

6. CVE-2024-30088Used by ransomwareadded Oct 15 2024

   Microsoft Windows Kernel TOCTOU Race Condition Vulnerability

   NVD entryCISA catalog

7. CVE-2024-43573added Oct 8 2024

   Microsoft Windows MSHTML Platform Spoofing Vulnerability

   NVD entryCISA catalog

8. CVE-2024-43572added Oct 8 2024

   Microsoft Windows Management Console Remote Code Execution Vulnerability

   NVD entryCISA catalog

9. CVE-2020-0618Used by ransomwareadded Sep 18 2024

   Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability

   NVD entryCISA catalog

10. CVE-2024-43461added Sep 16 2024

    Microsoft Windows MSHTML Platform Spoofing Vulnerability

    NVD entryCISA catalog

11. CVE-2024-38226added Sep 10 2024

    Microsoft Publisher Protection Mechanism Failure Vulnerability

    NVD entryCISA catalog

12. CVE-2024-38217added Sep 10 2024

    Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability

    NVD entryCISA catalog

13. CVE-2024-38014added Sep 10 2024

    Microsoft Windows Installer Improper Privilege Management Vulnerability

    NVD entryCISA catalog

14. CVE-2021-31196added Aug 21 2024

    Microsoft Exchange Server Information Disclosure Vulnerability

    NVD entryCISA catalog

15. CVE-2024-38213added Aug 13 2024

    Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

    NVD entryCISA catalog

16. CVE-2024-38193added Aug 13 2024

    Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability

    NVD entryCISA catalog

17. CVE-2024-38189added Aug 13 2024

    Microsoft Project Remote Code Execution Vulnerability

    NVD entryCISA catalog

18. CVE-2024-38178added Aug 13 2024

    Microsoft Windows Scripting Engine Memory Corruption Vulnerability

    NVD entryCISA catalog

19. CVE-2024-38107added Aug 13 2024

    Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability

    NVD entryCISA catalog

20. CVE-2024-38106added Aug 13 2024

    Microsoft Windows Kernel Privilege Escalation Vulnerability

    NVD entryCISA catalog

21. CVE-2018-0824added Aug 5 2024

    Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability

    NVD entryCISA catalog

22. CVE-2012-4792added Jul 23 2024

    Microsoft Internet Explorer Use-After-Free Vulnerability

    NVD entryCISA catalog

23. CVE-2024-38112added Jul 9 2024

    Microsoft Windows MSHTML Platform Spoofing Vulnerability

    NVD entryCISA catalog

24. CVE-2024-38080added Jul 9 2024

    Microsoft Windows Hyper-V Privilege Escalation Vulnerability

    NVD entryCISA catalog

25. CVE-2024-26169Used by ransomwareadded Jun 13 2024

    Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability

    NVD entryCISA catalog

26. CVE-2024-30051Used by ransomwareadded May 14 2024

    Microsoft DWM Core Library Privilege Escalation Vulnerability

    NVD entryCISA catalog

27. CVE-2024-30040added May 14 2024

    Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability

    NVD entryCISA catalog

28. CVE-2024-29988added Apr 30 2024

    Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability

    NVD entryCISA catalog

29. CVE-2022-38028added Apr 23 2024

    Microsoft Windows Print Spooler Privilege Escalation Vulnerability

    NVD entryCISA catalog

30. CVE-2023-24955Used by ransomwareadded Mar 26 2024

    Microsoft SharePoint Server Code Injection Vulnerability

    NVD entryCISA catalog

31. CVE-2024-21338Used by ransomwareadded Mar 4 2024

    Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability

    NVD entryCISA catalog

32. CVE-2023-29360added Feb 29 2024

    Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability

    NVD entryCISA catalog

33. CVE-2024-21410added Feb 15 2024

    Microsoft Exchange Server Privilege Escalation Vulnerability

    NVD entryCISA catalog

34. CVE-2024-21412Used by ransomwareadded Feb 13 2024

    Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability

    NVD entryCISA catalog

35. CVE-2024-21351added Feb 13 2024

    Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

    NVD entryCISA catalog

36. CVE-2023-29357Used by ransomwareadded Jan 10 2024

    Microsoft SharePoint Server Privilege Escalation Vulnerability

    NVD entryCISA catalog

2023 27 vulnerabilities

1. CVE-2023-36584added Nov 16 2023

   Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability

   NVD entryCISA catalog

2. CVE-2023-36036added Nov 14 2023

   Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability

   NVD entryCISA catalog

3. CVE-2023-36033added Nov 14 2023

   Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability

   NVD entryCISA catalog

4. CVE-2023-36025added Nov 14 2023

   Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

   NVD entryCISA catalog

5. CVE-2023-41763added Oct 10 2023

   Microsoft Skype for Business Privilege Escalation Vulnerability

   NVD entryCISA catalog

6. CVE-2023-36563added Oct 10 2023

   Microsoft WordPad Information Disclosure Vulnerability

   NVD entryCISA catalog

7. CVE-2023-28229added Oct 4 2023

   Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability

   NVD entryCISA catalog

8. CVE-2023-36802added Sep 12 2023

   Microsoft Streaming Service Proxy Privilege Escalation Vulnerability

   NVD entryCISA catalog

9. CVE-2023-36761added Sep 12 2023

   Microsoft Word Information Disclosure Vulnerability

   NVD entryCISA catalog

10. CVE-2023-38180added Aug 9 2023

    Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability

    NVD entryCISA catalog

11. CVE-2023-36884Used by ransomwareadded Jul 17 2023

    Microsoft Windows Search Remote Code Execution Vulnerability

    NVD entryCISA catalog

12. CVE-2023-36874added Jul 11 2023

    Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability

    NVD entryCISA catalog

13. CVE-2023-35311added Jul 11 2023

    Microsoft Outlook Security Feature Bypass Vulnerability

    NVD entryCISA catalog

14. CVE-2023-32049added Jul 11 2023

    Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability

    NVD entryCISA catalog

15. CVE-2023-32046added Jul 11 2023

    Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability

    NVD entryCISA catalog

16. CVE-2016-0165added Jun 22 2023

    Microsoft Win32k Privilege Escalation Vulnerability

    NVD entryCISA catalog

17. CVE-2023-29336added May 9 2023

    Microsoft Win32K Privilege Escalation Vulnerability

    NVD entryCISA catalog

18. CVE-2023-28252Used by ransomwareadded Apr 11 2023

    Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

    NVD entryCISA catalog

19. CVE-2019-1388Used by ransomwareadded Apr 7 2023

    Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability

    NVD entryCISA catalog

20. CVE-2013-3163added Mar 30 2023

    Microsoft Internet Explorer Memory Corruption Vulnerability

    NVD entryCISA catalog

21. CVE-2023-24880Used by ransomwareadded Mar 14 2023

    Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

    NVD entryCISA catalog

22. CVE-2023-23397added Mar 14 2023

    Microsoft Office Outlook Privilege Escalation Vulnerability

    NVD entryCISA catalog

23. CVE-2023-23376Used by ransomwareadded Feb 14 2023

    Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

    NVD entryCISA catalog

24. CVE-2023-21823added Feb 14 2023

    Microsoft Windows Graphic Component Privilege Escalation Vulnerability

    NVD entryCISA catalog

25. CVE-2023-21715added Feb 14 2023

    Microsoft Office Publisher Security Feature Bypass Vulnerability

    NVD entryCISA catalog

26. CVE-2023-21674added Jan 10 2023

    Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability

    NVD entryCISA catalog

27. CVE-2022-41080Used by ransomwareadded Jan 10 2023

    Microsoft Exchange Server Privilege Escalation Vulnerability

    NVD entryCISA catalog

2022 165 vulnerabilities

1. CVE-2022-44698Used by ransomwareadded Dec 13 2022

   Microsoft Defender SmartScreen Security Feature Bypass Vulnerability

   NVD entryCISA catalog

2. CVE-2022-41049added Nov 14 2022

   Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability

   NVD entryCISA catalog

3. CVE-2022-41128added Nov 8 2022

   Microsoft Windows Scripting Languages Remote Code Execution Vulnerability

   NVD entryCISA catalog

4. CVE-2022-41125added Nov 8 2022

   Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability

   NVD entryCISA catalog

5. CVE-2022-41091Used by ransomwareadded Nov 8 2022

   Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability

   NVD entryCISA catalog

6. CVE-2022-41073Used by ransomwareadded Nov 8 2022

   Microsoft Windows Print Spooler Privilege Escalation Vulnerability

   NVD entryCISA catalog

7. CVE-2022-41033added Oct 11 2022

   Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability

   NVD entryCISA catalog

8. CVE-2022-41082Used by ransomwareadded Sep 30 2022

   Microsoft Exchange Server Remote Code Execution Vulnerability

   NVD entryCISA catalog

9. CVE-2022-41040Used by ransomwareadded Sep 30 2022

   Microsoft Exchange Server Server-Side Request Forgery Vulnerability

   NVD entryCISA catalog

10. CVE-2010-2568added Sep 15 2022

    Microsoft Windows Remote Code Execution Vulnerability

    NVD entryCISA catalog

11. CVE-2022-37969Used by ransomwareadded Sep 14 2022

    Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

    NVD entryCISA catalog

12. CVE-2022-26923added Aug 18 2022

    Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

    NVD entryCISA catalog

13. CVE-2022-21971added Aug 18 2022

    Microsoft Windows Runtime Remote Code Execution Vulnerability

    NVD entryCISA catalog

14. CVE-2022-34713added Aug 9 2022

    Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

    NVD entryCISA catalog

15. CVE-2022-22047added Jul 12 2022

    Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability

    NVD entryCISA catalog

16. CVE-2022-26925added Jul 1 2022

    Microsoft Windows LSA Spoofing Vulnerability

    NVD entryCISA catalog

17. CVE-2022-30190Used by ransomwareadded Jun 14 2022

    Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

    NVD entryCISA catalog

18. CVE-2013-1331added Jun 8 2022

    Microsoft Office Buffer Overflow Vulnerability

    NVD entryCISA catalog

19. CVE-2012-4969added Jun 8 2022

    Microsoft Internet Explorer Use-After-Free Vulnerability

    NVD entryCISA catalog

20. CVE-2012-1889added Jun 8 2022

    Microsoft XML Core Services Memory Corruption Vulnerability

    NVD entryCISA catalog

21. CVE-2012-0151added Jun 8 2022

    Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability

    NVD entryCISA catalog

22. CVE-2010-2572added Jun 8 2022

    Microsoft PowerPoint Buffer Overflow Vulnerability

    NVD entryCISA catalog

23. CVE-2009-0563added Jun 8 2022

    Microsoft Office Buffer Overflow Vulnerability

    NVD entryCISA catalog

24. CVE-2009-0557added Jun 8 2022

    Microsoft Office Object Record Corruption Vulnerability

    NVD entryCISA catalog

25. CVE-2006-2492added Jun 8 2022

    Microsoft Word Malformed Object Pointer Vulnerability

    NVD entryCISA catalog

26. CVE-2016-7256added May 25 2022

    Microsoft Windows Open Type Font Remote Code Execution Vulnerability

    NVD entryCISA catalog

27. CVE-2016-3393added May 25 2022

    Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability

    NVD entryCISA catalog

28. CVE-2016-0034Used by ransomwareadded May 25 2022

    Microsoft Silverlight Runtime Remote Code Execution Vulnerability

    NVD entryCISA catalog

29. CVE-2015-6175added May 25 2022

    Microsoft Windows Kernel Privilege Escalation Vulnerability

    NVD entryCISA catalog

30. CVE-2015-2425added May 25 2022

    Microsoft Internet Explorer Memory Corruption Vulnerability

    NVD entryCISA catalog

31. CVE-2015-2360added May 25 2022

    Microsoft Win32k Privilege Escalation Vulnerability

    NVD entryCISA catalog

32. CVE-2015-1769added May 25 2022

    Microsoft Windows Mount Manager Privilege Escalation Vulnerability

    NVD entryCISA catalog

33. CVE-2015-1671added May 25 2022

    Microsoft Windows Remote Code Execution Vulnerability

    NVD entryCISA catalog

34. CVE-2015-0071added May 25 2022

    Microsoft Internet Explorer ASLR Bypass Vulnerability

    NVD entryCISA catalog

35. CVE-2015-0016added May 25 2022

    Microsoft Windows TS WebProxy Directory Traversal Vulnerability

    NVD entryCISA catalog

36. CVE-2014-4148added May 25 2022

    Microsoft Windows Remote Code Execution Vulnerability

    NVD entryCISA catalog

37. CVE-2014-4123added May 25 2022

    Microsoft Internet Explorer Privilege Escalation Vulnerability

    NVD entryCISA catalog

38. CVE-2014-4077added May 25 2022

    Microsoft IME Japanese Privilege Escalation Vulnerability

    NVD entryCISA catalog

39. CVE-2014-2817added May 25 2022

    Microsoft Internet Explorer Privilege Escalation Vulnerability

    NVD entryCISA catalog

40. CVE-2013-7331added May 25 2022

    Microsoft Internet Explorer Information Disclosure Vulnerability

    NVD entryCISA catalog

41. CVE-2013-3896added May 25 2022

    Microsoft Silverlight Information Disclosure Vulnerability

    NVD entryCISA catalog

42. CVE-2013-0074Used by ransomwareadded May 25 2022

    Microsoft Silverlight Double Dereference Vulnerability

    NVD entryCISA catalog

43. CVE-2018-8611added May 24 2022

    Microsoft Windows Kernel Privilege Escalation Vulnerability

    NVD entryCISA catalog

44. CVE-2017-8543added May 24 2022

    Microsoft Windows Search Remote Code Execution Vulnerability

    NVD entryCISA catalog

45. CVE-2017-0210added May 24 2022

    Microsoft Internet Explorer Privilege Escalation Vulnerability

    NVD entryCISA catalog

46. CVE-2017-0149added May 24 2022

    Microsoft Internet Explorer Memory Corruption Vulnerability

    NVD entryCISA catalog

47. CVE-2017-0147Used by ransomwareadded May 24 2022

    Microsoft Windows SMBv1 Information Disclosure Vulnerability

    NVD entryCISA catalog

48. CVE-2017-0022added May 24 2022

    Microsoft XML Core Services Information Disclosure Vulnerability

    NVD entryCISA catalog

49. CVE-2017-0005added May 24 2022

    Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability

    NVD entryCISA catalog

50. CVE-2016-3351Used by ransomwareadded May 24 2022

    Microsoft Internet Explorer and Edge Information Disclosure Vulnerability

    NVD entryCISA catalog

51. CVE-2016-3298added May 24 2022

    Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability

    NVD entryCISA catalog

52. CVE-2016-0162added May 24 2022

    Microsoft Internet Explorer Information Disclosure Vulnerability

    NVD entryCISA catalog

53. CVE-2020-1027added May 23 2022

    Microsoft Windows Kernel Privilege Escalation Vulnerability

    NVD entryCISA catalog

54. CVE-2020-0638Used by ransomwareadded May 23 2022

    Microsoft Update Notification Manager Privilege Escalation Vulnerability

    NVD entryCISA catalog

55. CVE-2019-1385Used by ransomwareadded May 23 2022

    Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability

    NVD entryCISA catalog

56. CVE-2019-1130Used by ransomwareadded May 23 2022

    Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability

    NVD entryCISA catalog

57. CVE-2019-0880added May 23 2022

    Microsoft Windows Privilege Escalation Vulnerability

    NVD entryCISA catalog

58. CVE-2019-0703added May 23 2022

    Microsoft Windows SMB Information Disclosure Vulnerability

    NVD entryCISA catalog

59. CVE-2019-0676added May 23 2022

    Microsoft Internet Explorer Information Disclosure Vulnerability

    NVD entryCISA catalog

60. CVE-2018-8589added May 23 2022

    Microsoft Win32k Privilege Escalation Vulnerability

    NVD entryCISA catalog

61. CVE-2014-4113added May 4 2022

    Microsoft Win32k Privilege Escalation Vulnerability

    NVD entryCISA catalog

62. CVE-2014-0322added May 4 2022

    Microsoft Internet Explorer Use-After-Free Vulnerability

    NVD entryCISA catalog

63. CVE-2022-26904added Apr 25 2022

    Microsoft Windows User Profile Service Privilege Escalation Vulnerability

    NVD entryCISA catalog

64. CVE-2022-21919added Apr 25 2022

    Microsoft Windows User Profile Service Privilege Escalation Vulnerability

    NVD entryCISA catalog

65. CVE-2021-41357added Apr 25 2022

    Microsoft Win32k Privilege Escalation Vulnerability

    NVD entryCISA catalog

66. CVE-2021-40450added Apr 25 2022

    Microsoft Win32k Privilege Escalation Vulnerability

    NVD entryCISA catalog

67. CVE-2022-22718added Apr 19 2022

    Microsoft Windows Print Spooler Privilege Escalation Vulnerability

    NVD entryCISA catalog

68. CVE-2022-24521Used by ransomwareadded Apr 13 2022

    Microsoft Windows CLFS Driver Privilege Escalation Vulnerability

    NVD entryCISA catalog

69. CVE-2015-2502added Apr 13 2022

    Microsoft Internet Explorer Memory Corruption Vulnerability

    NVD entryCISA catalog

70. CVE-2021-42287Used by ransomwareadded Apr 11 2022

    Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

    NVD entryCISA catalog

71. CVE-2021-42278Used by ransomwareadded Apr 11 2022

    Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

    NVD entryCISA catalog

72. CVE-2021-31166added Apr 6 2022

    Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability

    NVD entryCISA catalog

73. CVE-2017-0148Used by ransomwareadded Apr 6 2022

    Microsoft SMBv1 Server Remote Code Execution Vulnerability

    NVD entryCISA catalog

74. CVE-2021-34484added Mar 31 2022

    Microsoft Windows User Profile Service Privilege Escalation Vulnerability

    NVD entryCISA catalog

75. CVE-2021-38646Used by ransomwareadded Mar 28 2022

    Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

    NVD entryCISA catalog

76. CVE-2021-34486added Mar 28 2022

    Microsoft Windows Event Tracing Privilege Escalation Vulnerability

    NVD entryCISA catalog

77. CVE-2018-8440Used by ransomwareadded Mar 28 2022

    Microsoft Windows Privilege Escalation Vulnerability

    NVD entryCISA catalog

78. CVE-2018-8406Used by ransomwareadded Mar 28 2022

    Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability

    NVD entryCISA catalog

79. CVE-2018-8405Used by ransomwareadded Mar 28 2022

    Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability

    NVD entryCISA catalog

80. CVE-2017-0213Used by ransomwareadded Mar 28 2022

    Microsoft Windows Privilege Escalation Vulnerability

    NVD entryCISA catalog

81. CVE-2017-0059added Mar 28 2022

    Microsoft Internet Explorer Information Disclosure Vulnerability

    NVD entryCISA catalog

82. CVE-2017-0037added Mar 28 2022

    Microsoft Edge and Internet Explorer Type Confusion Vulnerability

    NVD entryCISA catalog

83. CVE-2016-7201added Mar 28 2022

    Microsoft Edge Memory Corruption Vulnerability

    NVD entryCISA catalog

84. CVE-2016-7200added Mar 28 2022

    Microsoft Edge Memory Corruption Vulnerability

    NVD entryCISA catalog

85. CVE-2016-0189Used by ransomwareadded Mar 28 2022

    Microsoft Internet Explorer Memory Corruption Vulnerability

    NVD entryCISA catalog

86. CVE-2016-0151Used by ransomwareadded Mar 28 2022

    Microsoft Windows CSRSS Security Feature Bypass Vulnerability

    NVD entryCISA catalog

87. CVE-2016-0040added Mar 28 2022

    Microsoft Windows Kernel Privilege Escalation Vulnerability

    NVD entryCISA catalog

88. CVE-2015-2426added Mar 28 2022

    Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability

    NVD entryCISA catalog

89. CVE-2015-2419added Mar 28 2022

    Microsoft Internet Explorer Memory Corruption Vulnerability

    NVD entryCISA catalog

90. CVE-2015-1770added Mar 28 2022

    Microsoft Office Uninitialized Memory Use Vulnerability

    NVD entryCISA catalog

91. CVE-2013-3660added Mar 28 2022

    Microsoft Win32k Privilege Escalation Vulnerability

    NVD entryCISA catalog

92. CVE-2013-2551Used by ransomwareadded Mar 28 2022

    Microsoft Internet Explorer Use-After-Free Vulnerability

    NVD entryCISA catalog

93. CVE-2012-2539added Mar 28 2022

    Microsoft Word Remote Code Execution Vulnerability

    NVD entryCISA catalog

94. CVE-2011-2005added Mar 28 2022

    Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability

    NVD entryCISA catalog

95. CVE-2010-4398added Mar 28 2022

    Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability

    NVD entryCISA catalog

96. CVE-2022-21999Used by ransomwareadded Mar 25 2022

    Microsoft Windows Print Spooler Privilege Escalation Vulnerability

    NVD entryCISA catalog

97. CVE-2019-0903added Mar 25 2022

    Microsoft GDI Remote Code Execution Vulnerability

    NVD entryCISA catalog

98. CVE-2018-8414added Mar 25 2022

    Microsoft Windows Shell Remote Code Execution Vulnerability

    NVD entryCISA catalog

99. CVE-2018-8373added Mar 25 2022

    Microsoft Scripting Engine Memory Corruption Vulnerability

    NVD entryCISA catalog

100. CVE-2017-0146Used by ransomwareadded Mar 25 2022

     Microsoft Windows SMB Remote Code Execution Vulnerability

     NVD entryCISA catalog

101. CVE-2014-6332added Mar 25 2022

     Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability

     NVD entryCISA catalog

102. CVE-2014-6324added Mar 25 2022

     Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability

     NVD entryCISA catalog

103. CVE-2019-1405Used by ransomwareadded Mar 15 2022

     Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability

     NVD entryCISA catalog

104. CVE-2019-1322Used by ransomwareadded Mar 15 2022

     Microsoft Windows Privilege Escalation Vulnerability

     NVD entryCISA catalog

105. CVE-2019-1315Used by ransomwareadded Mar 15 2022

     Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability

     NVD entryCISA catalog

106. CVE-2019-1253Used by ransomwareadded Mar 15 2022

     Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability

     NVD entryCISA catalog

107. CVE-2019-1132added Mar 15 2022

     Microsoft Win32k Privilege Escalation Vulnerability

     NVD entryCISA catalog

108. CVE-2019-1129Used by ransomwareadded Mar 15 2022

     Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

     NVD entryCISA catalog

109. CVE-2019-1069Used by ransomwareadded Mar 15 2022

     Microsoft Task Scheduler Privilege Escalation Vulnerability

     NVD entryCISA catalog

110. CVE-2019-1064Used by ransomwareadded Mar 15 2022

     Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

     NVD entryCISA catalog

111. CVE-2019-0841Used by ransomwareadded Mar 15 2022

     Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

     NVD entryCISA catalog

112. CVE-2019-0543Used by ransomwareadded Mar 15 2022

     Microsoft Windows Privilege Escalation Vulnerability

     NVD entryCISA catalog

113. CVE-2018-8120Used by ransomwareadded Mar 15 2022

     Microsoft Win32k Privilege Escalation Vulnerability

     NVD entryCISA catalog

114. CVE-2017-0101Used by ransomwareadded Mar 15 2022

     Microsoft Windows Transaction Manager Privilege Escalation Vulnerability

     NVD entryCISA catalog

115. CVE-2016-3309Used by ransomwareadded Mar 15 2022

     Microsoft Windows Kernel Privilege Escalation Vulnerability

     NVD entryCISA catalog

116. CVE-2015-2546Used by ransomwareadded Mar 15 2022

     Microsoft Win32k Memory Corruption Vulnerability

     NVD entryCISA catalog

117. CVE-2021-41379Used by ransomwareadded Mar 3 2022

     Microsoft Windows Installer Privilege Escalation Vulnerability

     NVD entryCISA catalog

118. CVE-2019-1297added Mar 3 2022

     Microsoft Excel Remote Code Execution Vulnerability

     NVD entryCISA catalog

119. CVE-2018-8581Used by ransomwareadded Mar 3 2022

     Microsoft Exchange Server Privilege Escalation Vulnerability

     NVD entryCISA catalog

120. CVE-2017-8540added Mar 3 2022

     Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability

     NVD entryCISA catalog

121. CVE-2017-11826added Mar 3 2022

     Microsoft Office Remote Code Execution Vulnerability

     NVD entryCISA catalog

122. CVE-2017-0261added Mar 3 2022

     Microsoft Office Use-After-Free Vulnerability

     NVD entryCISA catalog

123. CVE-2017-0001added Mar 3 2022

     Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability

     NVD entryCISA catalog

124. CVE-2016-7262added Mar 3 2022

     Microsoft Office Security Feature Bypass Vulnerability

     NVD entryCISA catalog

125. CVE-2016-7193added Mar 3 2022

     Microsoft Office Memory Corruption Vulnerability

     NVD entryCISA catalog

126. CVE-2016-0099Used by ransomwareadded Mar 3 2022

     Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability

     NVD entryCISA catalog

127. CVE-2015-2545added Mar 3 2022

     Microsoft Office Malformed EPS File Vulnerability

     NVD entryCISA catalog

128. CVE-2015-2424added Mar 3 2022

     Microsoft PowerPoint Memory Corruption Vulnerability

     NVD entryCISA catalog

129. CVE-2015-2387added Mar 3 2022

     Microsoft ATM Font Driver Privilege Escalation Vulnerability

     NVD entryCISA catalog

130. CVE-2015-1701Used by ransomwareadded Mar 3 2022

     Microsoft Win32k Privilege Escalation Vulnerability

     NVD entryCISA catalog

131. CVE-2015-1642added Mar 3 2022

     Microsoft Office Memory Corruption Vulnerability

     NVD entryCISA catalog

132. CVE-2014-4114added Mar 3 2022

     Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability

     NVD entryCISA catalog

133. CVE-2013-5065added Mar 3 2022

     Microsoft Windows Kernel Privilege Escalation Vulnerability

     NVD entryCISA catalog

134. CVE-2013-3897added Mar 3 2022

     Microsoft Internet Explorer Use-After-Free Vulnerability

     NVD entryCISA catalog

135. CVE-2013-1347added Mar 3 2022

     Microsoft Internet Explorer Remote Code Execution Vulnerability

     NVD entryCISA catalog

136. CVE-2012-1856added Mar 3 2022

     Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability

     NVD entryCISA catalog

137. CVE-2011-1889added Mar 3 2022

     Microsoft Forefront TMG Remote Code Execution Vulnerability

     NVD entryCISA catalog

138. CVE-2010-3333added Mar 3 2022

     Microsoft Office Stack-based Buffer Overflow Vulnerability

     NVD entryCISA catalog

139. CVE-2010-0232added Mar 3 2022

     Microsoft Windows Kernel Exception Handler Vulnerability

     NVD entryCISA catalog

140. CVE-2009-3129added Mar 3 2022

     Microsoft Excel Featheader Record Memory Corruption Vulnerability

     NVD entryCISA catalog

141. CVE-2009-1123added Mar 3 2022

     Microsoft Windows Improper Input Validation Vulnerability

     NVD entryCISA catalog

142. CVE-2004-0210added Mar 3 2022

     Microsoft Windows Privilege Escalation Vulnerability

     NVD entryCISA catalog

143. CVE-2002-0367added Mar 3 2022

     Microsoft Windows Privilege Escalation Vulnerability

     NVD entryCISA catalog

144. CVE-2017-8570added Feb 25 2022

     Microsoft Office Remote Code Execution Vulnerability

     NVD entryCISA catalog

145. CVE-2017-0222added Feb 25 2022

     Microsoft Internet Explorer Remote Code Execution Vulnerability

     NVD entryCISA catalog

146. CVE-2014-6352added Feb 25 2022

     Microsoft Windows Code Injection Vulnerability

     NVD entryCISA catalog

147. CVE-2019-0752Used by ransomwareadded Feb 15 2022

     Microsoft Internet Explorer Type Confusion Vulnerability

     NVD entryCISA catalog

148. CVE-2018-8174Used by ransomwareadded Feb 15 2022

     Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability

     NVD entryCISA catalog

149. CVE-2014-1761added Feb 15 2022

     Microsoft Word Memory Corruption Vulnerability

     NVD entryCISA catalog

150. CVE-2013-3906added Feb 15 2022

     Microsoft Graphics Component Memory Corruption Vulnerability

     NVD entryCISA catalog

151. CVE-2021-36934added Feb 10 2022

     Microsoft Windows SAM Local Privilege Escalation Vulnerability

     NVD entryCISA catalog

152. CVE-2020-0796Used by ransomwareadded Feb 10 2022

     Microsoft SMBv3 Remote Code Execution Vulnerability

     NVD entryCISA catalog

153. CVE-2017-8464added Feb 10 2022

     Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability

     NVD entryCISA catalog

154. CVE-2017-0263added Feb 10 2022

     Microsoft Win32k Privilege Escalation Vulnerability

     NVD entryCISA catalog

155. CVE-2017-0262added Feb 10 2022

     Microsoft Office Remote Code Execution Vulnerability

     NVD entryCISA catalog

156. CVE-2017-0145Used by ransomwareadded Feb 10 2022

     Microsoft SMBv1 Remote Code Execution Vulnerability

     NVD entryCISA catalog

157. CVE-2017-0144Used by ransomwareadded Feb 10 2022

     Microsoft SMBv1 Remote Code Execution Vulnerability

     NVD entryCISA catalog

158. CVE-2015-1635added Feb 10 2022

     Microsoft HTTP.sys Remote Code Execution Vulnerability

     NVD entryCISA catalog

159. CVE-2022-21882Used by ransomwareadded Feb 4 2022

     Microsoft Win32k Privilege Escalation Vulnerability

     NVD entryCISA catalog

160. CVE-2020-0787Used by ransomwareadded Jan 28 2022

     Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability

     NVD entryCISA catalog

161. CVE-2014-1776added Jan 28 2022

     Microsoft Internet Explorer Memory Corruption Vulnerability

     NVD entryCISA catalog

162. CVE-2018-8453Used by ransomwareadded Jan 21 2022

     Microsoft Win32k Privilege Escalation Vulnerability

     NVD entryCISA catalog

163. CVE-2021-33766added Jan 18 2022

     Microsoft Exchange Server Information Disclosure

     NVD entryCISA catalog

164. CVE-2019-1458Used by ransomwareadded Jan 10 2022

     Microsoft Win32k Privilege Escalation Vulnerability

     NVD entryCISA catalog

165. CVE-2013-3900added Jan 10 2022

     Microsoft WinVerifyTrust function Remote Code Execution

     NVD entryCISA catalog

2021 83 vulnerabilities

1. CVE-2021-43890Used by ransomwareadded Dec 15 2021

   Microsoft Windows AppX Installer Spoofing Vulnerability

   NVD entryCISA catalog

2. CVE-2021-42321Used by ransomwareadded Nov 17 2021

   Microsoft Exchange Server Remote Code Execution Vulnerability

   NVD entryCISA catalog

3. CVE-2021-42292added Nov 17 2021

   Microsoft Excel Security Feature Bypass

   NVD entryCISA catalog

4. CVE-2021-40449Used by ransomwareadded Nov 17 2021

   Microsoft Windows Win32k Privilege Escalation Vulnerability

   NVD entryCISA catalog

5. CVE-2021-40444Used by ransomwareadded Nov 3 2021

   Microsoft MSHTML Remote Code Execution Vulnerability

   NVD entryCISA catalog

6. CVE-2021-38649added Nov 3 2021

   Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability

   NVD entryCISA catalog

7. CVE-2021-38648added Nov 3 2021

   Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability

   NVD entryCISA catalog

8. CVE-2021-38647Used by ransomwareadded Nov 3 2021

   Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

   NVD entryCISA catalog

9. CVE-2021-38645added Nov 3 2021

   Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability

   NVD entryCISA catalog

10. CVE-2021-36955Used by ransomwareadded Nov 3 2021

    Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

    NVD entryCISA catalog

11. CVE-2021-36948added Nov 3 2021

    Microsoft Windows Update Medic Service Privilege Escalation Vulnerability

    NVD entryCISA catalog

12. CVE-2021-36942Used by ransomwareadded Nov 3 2021

    Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability

    NVD entryCISA catalog

13. CVE-2021-34527Used by ransomwareadded Nov 3 2021

    Microsoft Windows Print Spooler Remote Code Execution Vulnerability

    NVD entryCISA catalog

14. CVE-2021-34523Used by ransomwareadded Nov 3 2021

    Microsoft Exchange Server Privilege Escalation Vulnerability

    NVD entryCISA catalog

15. CVE-2021-34473Used by ransomwareadded Nov 3 2021

    Microsoft Exchange Server Remote Code Execution Vulnerability

    NVD entryCISA catalog

16. CVE-2021-34448added Nov 3 2021

    Microsoft Windows Scripting Engine Memory Corruption Vulnerability

    NVD entryCISA catalog

17. CVE-2021-33771added Nov 3 2021

    Microsoft Windows Kernel Privilege Escalation Vulnerability

    NVD entryCISA catalog

18. CVE-2021-33742added Nov 3 2021

    Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability

    NVD entryCISA catalog

19. CVE-2021-33739added Nov 3 2021

    Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability

    NVD entryCISA catalog

20. CVE-2021-31979added Nov 3 2021

    Microsoft Windows Kernel Privilege Escalation Vulnerability

    NVD entryCISA catalog

21. CVE-2021-31956added Nov 3 2021

    Microsoft Windows NTFS Privilege Escalation Vulnerability

    NVD entryCISA catalog

22. CVE-2021-31955added Nov 3 2021

    Microsoft Windows Kernel Information Disclosure Vulnerability

    NVD entryCISA catalog

23. CVE-2021-31207Used by ransomwareadded Nov 3 2021

    Microsoft Exchange Server Security Feature Bypass Vulnerability

    NVD entryCISA catalog

24. CVE-2021-31201added Nov 3 2021

    Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability

    NVD entryCISA catalog

25. CVE-2021-31199added Nov 3 2021

    Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability

    NVD entryCISA catalog

26. CVE-2021-28310added Nov 3 2021

    Microsoft Win32k Privilege Escalation Vulnerability

    NVD entryCISA catalog

27. CVE-2021-27085added Nov 3 2021

    Microsoft Internet Explorer Remote Code Execution Vulnerability

    NVD entryCISA catalog

28. CVE-2021-27065Used by ransomwareadded Nov 3 2021

    Microsoft Exchange Server Remote Code Execution Vulnerability

    NVD entryCISA catalog

29. CVE-2021-27059added Nov 3 2021

    Microsoft Office Remote Code Execution Vulnerability

    NVD entryCISA catalog

30. CVE-2021-26858Used by ransomwareadded Nov 3 2021

    Microsoft Exchange Server Remote Code Execution Vulnerability

    NVD entryCISA catalog

31. CVE-2021-26857Used by ransomwareadded Nov 3 2021

    Microsoft Exchange Server Remote Code Execution Vulnerability

    NVD entryCISA catalog

32. CVE-2021-26855Used by ransomwareadded Nov 3 2021

    Microsoft Exchange Server Remote Code Execution Vulnerability

    NVD entryCISA catalog

33. CVE-2021-26411Used by ransomwareadded Nov 3 2021

    Microsoft Internet Explorer Memory Corruption Vulnerability

    NVD entryCISA catalog

34. CVE-2021-1732Used by ransomwareadded Nov 3 2021

    Microsoft Win32k Privilege Escalation Vulnerability

    NVD entryCISA catalog

35. CVE-2021-1675Used by ransomwareadded Nov 3 2021

    Microsoft Windows Print Spooler Remote Code Execution Vulnerability

    NVD entryCISA catalog

36. CVE-2021-1647added Nov 3 2021

    Microsoft Defender Remote Code Execution Vulnerability

    NVD entryCISA catalog

37. CVE-2020-17144added Nov 3 2021

    Microsoft Exchange Server Remote Code Execution Vulnerability

    NVD entryCISA catalog

38. CVE-2020-17087added Nov 3 2021

    Microsoft Windows Kernel Privilege Escalation Vulnerability

    NVD entryCISA catalog

39. CVE-2020-1472Used by ransomwareadded Nov 3 2021

    Microsoft Netlogon Privilege Escalation Vulnerability

    NVD entryCISA catalog

40. CVE-2020-1464added Nov 3 2021

    Microsoft Windows Spoofing Vulnerability

    NVD entryCISA catalog

41. CVE-2020-1380added Nov 3 2021

    Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

    NVD entryCISA catalog

42. CVE-2020-1350added Nov 3 2021

    Microsoft Windows DNS Server Remote Code Execution Vulnerability

    NVD entryCISA catalog

43. CVE-2020-1147added Nov 3 2021

    Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability

    NVD entryCISA catalog

44. CVE-2020-1054added Nov 3 2021

    Microsoft Win32k Privilege Escalation Vulnerability

    NVD entryCISA catalog

45. CVE-2020-1040added Nov 3 2021

    Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability

    NVD entryCISA catalog

46. CVE-2020-1020added Nov 3 2021

    Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability

    NVD entryCISA catalog

47. CVE-2020-0986added Nov 3 2021

    Microsoft Windows Kernel Privilege Escalation Vulnerability

    NVD entryCISA catalog

48. CVE-2020-0968Used by ransomwareadded Nov 3 2021

    Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

    NVD entryCISA catalog

49. CVE-2020-0938added Nov 3 2021

    Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability

    NVD entryCISA catalog

50. CVE-2020-0878Used by ransomwareadded Nov 3 2021

    Microsoft Edge and Internet Explorer Memory Corruption Vulnerability

    NVD entryCISA catalog

51. CVE-2020-0688Used by ransomwareadded Nov 3 2021

    Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability

    NVD entryCISA catalog

52. CVE-2020-0683added Nov 3 2021

    Microsoft Windows Installer Privilege Escalation Vulnerability

    NVD entryCISA catalog

53. CVE-2020-0674added Nov 3 2021

    Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

    NVD entryCISA catalog

54. CVE-2020-0646added Nov 3 2021

    Microsoft .NET Framework Remote Code Execution Vulnerability

    NVD entryCISA catalog

55. CVE-2020-0601added Nov 3 2021

    Microsoft Windows CryptoAPI Spoofing Vulnerability

    NVD entryCISA catalog

56. CVE-2019-1429added Nov 3 2021

    Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

    NVD entryCISA catalog

57. CVE-2019-1367Used by ransomwareadded Nov 3 2021

    Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

    NVD entryCISA catalog

58. CVE-2019-1215Used by ransomwareadded Nov 3 2021

    Microsoft Windows Privilege Escalation Vulnerability

    NVD entryCISA catalog

59. CVE-2019-1214added Nov 3 2021

    Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability

    NVD entryCISA catalog

60. CVE-2019-0863added Nov 3 2021

    Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability

    NVD entryCISA catalog

61. CVE-2019-0859Used by ransomwareadded Nov 3 2021

    Microsoft Win32k Privilege Escalation Vulnerability

    NVD entryCISA catalog

62. CVE-2019-0808added Nov 3 2021

    Microsoft Win32k Privilege Escalation Vulnerability

    NVD entryCISA catalog

63. CVE-2019-0803Used by ransomwareadded Nov 3 2021

    Microsoft Win32k Privilege Escalation Vulnerability

    NVD entryCISA catalog

64. CVE-2019-0797added Nov 3 2021

    Microsoft Win32k Privilege Escalation Vulnerability

    NVD entryCISA catalog

65. CVE-2019-0708Used by ransomwareadded Nov 3 2021

    Microsoft Remote Desktop Services Remote Code Execution Vulnerability

    NVD entryCISA catalog

66. CVE-2019-0604Used by ransomwareadded Nov 3 2021

    Microsoft SharePoint Remote Code Execution Vulnerability

    NVD entryCISA catalog

67. CVE-2019-0541added Nov 3 2021

    Microsoft MSHTML Remote Code Execution Vulnerability

    NVD entryCISA catalog

68. CVE-2018-8653added Nov 3 2021

    Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

    NVD entryCISA catalog

69. CVE-2018-0802Used by ransomwareadded Nov 3 2021

    Microsoft Office Memory Corruption Vulnerability

    NVD entryCISA catalog

70. CVE-2018-0798added Nov 3 2021

    Microsoft Office Memory Corruption Vulnerability

    NVD entryCISA catalog

71. CVE-2017-8759added Nov 3 2021

    Microsoft .NET Framework Remote Code Execution Vulnerability

    NVD entryCISA catalog

72. CVE-2017-7269added Nov 3 2021

    Microsoft Windows Server Buffer Overflow Vulnerability

    NVD entryCISA catalog

73. CVE-2017-11882Used by ransomwareadded Nov 3 2021

    Microsoft Office Memory Corruption Vulnerability

    NVD entryCISA catalog

74. CVE-2017-11774added Nov 3 2021

    Microsoft Office Outlook Security Feature Bypass Vulnerability

    NVD entryCISA catalog

75. CVE-2017-0199Used by ransomwareadded Nov 3 2021

    Microsoft Office and WordPad Remote Code Execution Vulnerability

    NVD entryCISA catalog

76. CVE-2017-0143Used by ransomwareadded Nov 3 2021

    Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability

    NVD entryCISA catalog

77. CVE-2016-7255Used by ransomwareadded Nov 3 2021

    Microsoft Win32k Privilege Escalation Vulnerability

    NVD entryCISA catalog

78. CVE-2016-3235added Nov 3 2021

    Microsoft Office OLE DLL Side Loading Vulnerability

    NVD entryCISA catalog

79. CVE-2016-0185added Nov 3 2021

    Microsoft Windows Media Center Remote Code Execution Vulnerability

    NVD entryCISA catalog

80. CVE-2016-0167Used by ransomwareadded Nov 3 2021

    Microsoft Win32k Privilege Escalation Vulnerability

    NVD entryCISA catalog

81. CVE-2015-1641added Nov 3 2021

    Microsoft Office Memory Corruption Vulnerability

    NVD entryCISA catalog

82. CVE-2014-1812Used by ransomwareadded Nov 3 2021

    Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability

    NVD entryCISA catalog

83. CVE-2012-0158Used by ransomwareadded Nov 3 2021

    Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability

    NVD entryCISA catalog