microsoft
3,712 known vulnerabilities affecting microsoft products.
Products
windows_server_2019 1452
windows_server_2016 1310
windows_server_2022 1272
windows_server_2025 1131
windows_10_1809 1131
windows_11_24h2 1111
windows_11_25h2 1081
windows_10_22h2 1066
windows_10_21h2 1061
windows_11_26h1 1009
windows 990
windows_10_1607 980
windows_server_2012 977
windows_11_23h2 761
windows_10 343
windows_server_2008 326
365_apps 277
office_2021 225
office_2024 225
office_2019 217
windows_8.1 192
microsoft_365 185
windows_rt_8.1 170
windows_7 169
Vulnerabilities by priority
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2026-62888 | Medium | 2.0% | 7.8 | Use after free in Windows DWM Core Library allows an authorized attacker to elev… | |
| CVE-2026-62713 | Medium | 2.0% | 7.8 | Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an a… | |
| CVE-2021-31984 | Medium | 1.9% | 7.6 | Power BI Remote Code Execution Vulnerability | |
| CVE-2026-26142 | Medium | 1.9% | 9.8 | Deserialization of untrusted data in Nuance PowerScribe allows an unauthorized a… | |
| CVE-2026-64901 | Medium | 1.9% | 8.8 | Deserialization of untrusted data in Microsoft Office SharePoint allows an autho… | |
| CVE-2023-35381 | Medium | 1.9% | 8.8 | Windows Fax Service Remote Code Execution Vulnerability | |
| CVE-2024-38259 | Medium | 1.9% | 8.8 | Microsoft Management Console Remote Code Execution Vulnerability | |
| CVE-2021-36945 | Medium | 1.9% | 7.3 | Windows 10 Update Assistant Elevation of Privilege Vulnerability | |
| CVE-2024-43475 | Medium | 1.8% | 7.3 | Microsoft Windows Admin Center Information Disclosure Vulnerability | |
| CVE-2024-21372 | Medium | 1.8% | 8.8 | Windows OLE Remote Code Execution Vulnerability | |
| CVE-2026-54121 | Medium | 1.8% | 8.8 | Improper authorization in Active Directory Certificate Services (AD CS) allows a… | |
| CVE-2024-21358 | Medium | 1.8% | 8.8 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerabilit… | |
| CVE-2024-21360 | Medium | 1.8% | 8.8 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerabilit… | |
| CVE-2024-21365 | Medium | 1.8% | 8.8 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerabilit… | |
| CVE-2024-21366 | Medium | 1.8% | 8.8 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerabilit… | |
| CVE-2024-21370 | Medium | 1.8% | 8.8 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerabilit… | |
| CVE-2023-21803 | Medium | 1.8% | 9.8 | Windows iSCSI Discovery Service Remote Code Execution Vulnerability | |
| CVE-2023-21713 | Medium | 1.8% | 8.8 | Microsoft SQL Server Remote Code Execution Vulnerability | |
| CVE-2024-38239 | Medium | 1.7% | 7.2 | Windows Kerberos Elevation of Privilege Vulnerability | |
| CVE-2023-21816 | Medium | 1.7% | 7.5 | Windows Active Directory Domain Services API Denial of Service Vulnerability | |
| CVE-2024-21420 | Medium | 1.7% | 8.8 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerabilit… | |
| CVE-2026-50652 | Medium | 1.7% | 7.5 | Deserialization of untrusted data in Azure Active Directory allows an unauthoriz… | |
| CVE-2024-21380 | Medium | 1.7% | 8.0 | Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability | |
| CVE-2024-21379 | Medium | 1.7% | 7.8 | Microsoft Word Remote Code Execution Vulnerability | |
| CVE-2023-36911 | Medium | 1.7% | 9.8 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability | |
| CVE-2024-37965 | Medium | 1.7% | 8.8 | Microsoft SQL Server Elevation of Privilege Vulnerability | |
| CVE-2023-36897 | Medium | 1.7% | 8.1 | Visual Studio Tools for Office Runtime Spoofing Vulnerability | |
| CVE-2026-59132 | Medium | 1.7% | 7.5 | Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to de… | |
| CVE-2026-59124 | Medium | 1.7% | 9.8 | Deserialization of untrusted data in Microsoft High Performance Computing (HPC) … | |
| CVE-2021-26443 | Medium | 1.7% | 9.0 | Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability | |
| CVE-2020-1191 | Medium | 1.7% | 7.8 | An elevation of privilege vulnerability exists when the Windows State Repository… | |
| CVE-2026-61929 | Medium | 1.7% | 7.0 | Use after free in Windows Kernel allows an authorized attacker to elevate privil… | |
| CVE-2026-65788 | Medium | 1.7% | 7.0 | Use after free in Desktop Window Manager allows an authorized attacker to elevat… | |
| CVE-2024-43455 | Medium | 1.7% | 8.8 | Windows Remote Desktop Licensing Service Spoofing Vulnerability | |
| CVE-2024-37337 | Medium | 1.7% | 7.1 | Microsoft SQL Server Native Scoring Information Disclosure Vulnerability | |
| CVE-2024-37342 | Medium | 1.7% | 7.1 | Microsoft SQL Server Native Scoring Information Disclosure Vulnerability | |
| CVE-2023-21700 | Medium | 1.7% | 7.5 | Windows iSCSI Discovery Service Denial of Service Vulnerability | |
| CVE-2023-21701 | Medium | 1.7% | 7.5 | Microsoft Protected Extensible Authentication Protocol (PEAP) Denial of Service … | |
| CVE-2023-21702 | Medium | 1.7% | 7.5 | Windows iSCSI Service Denial of Service Vulnerability | |
| CVE-2023-21811 | Medium | 1.7% | 7.5 | Windows iSCSI Service Denial of Service Vulnerability | |
| CVE-2023-21813 | Medium | 1.7% | 7.5 | Windows Secure Channel Denial of Service Vulnerability | |
| CVE-2024-21375 | Medium | 1.7% | 8.8 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerabilit… | |
| CVE-2024-21349 | Medium | 1.6% | 8.8 | Microsoft ActiveX Data Objects Remote Code Execution Vulnerability | |
| CVE-2024-21359 | Medium | 1.6% | 8.8 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerabilit… | |
| CVE-2024-21361 | Medium | 1.6% | 8.8 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerabilit… | |
| CVE-2024-21367 | Medium | 1.6% | 8.8 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerabilit… | |
| CVE-2024-21368 | Medium | 1.6% | 8.8 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerabilit… | |
| CVE-2022-41062 | Medium | 1.6% | 8.8 | Microsoft SharePoint Server Remote Code Execution Vulnerability | |
| CVE-2024-21352 | Medium | 1.6% | 8.8 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerabilit… | |
| CVE-2024-21391 | Medium | 1.6% | 8.8 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerabilit… |