EN
DeutschEnglishEspañolFrançaisItaliano

Start free Dashboard

Exploited vulnerabilities

Microsoft

390 Microsoft vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.

In the catalogue390
Last 12 months42
In ransomware campaigns117
Last addition13 October 2026

The vulnerabilities390

  1. 13 October 2026CVE-2026-96951WindowsMicrosoft Windows Command Injection Vulnerability
  2. 25 September 2026CVE-2026-65660SharePointMicrosoft SharePoint Code Injection Vulnerability
  3. 8 September 2026CVE-2026-85880WindowsMicrosoft Windows Heap-Based Buffer Overflow Vulnerability
  4. 8 September 2026CVE-2026-81963WindowsMicrosoft Windows Link Following Vulnerability
  5. 26 August 2026CVE-2019-1068SQL ServerMicrosoft SQL Server Remote Code Execution Vulnerability
  6. 18 August 2026CVE-2026-55040SharePointMicrosoft SharePoint Weak Authentication Vulnerability
  7. 18 August 2026CVE-2026-33824Internet Key Exchange (IKE) Service ExtensionsMicrosoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability
  8. 11 August 2026CVE-2026-68820Windows Ancillary Function Driver for WinSock Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
  9. 22 July 2026CVE-2026-50522SharePointMicrosoft SharePoint Deserialization of Untrusted Data Vulnerability
  10. 16 July 2026CVE-2026-58644SharePointMicrosoft SharePoint Deserialization of Untrusted Data Vulnerability
  11. 14 July 2026CVE-2026-56164SharePoint ServerMicrosoft SharePoint Server Missing Authentication for Critical Function Vulnerability
  12. 14 July 2026CVE-2026-56155Active Directory Federation ServicesMicrosoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability
  13. 1 July 2026CVE-2026-45659SharePoint ServerMicrosoft SharePoint Server Deserialization of Untrusted Data VulnerabilityRansomware
  14. 20 May 2026CVE-2026-45498DefenderMicrosoft Defender Denial of Service Vulnerability
  15. 20 May 2026CVE-2026-41091DefenderMicrosoft Defender Link Following Vulnerability
  16. 20 May 2026CVE-2010-0806Internet ExplorerMicrosoft Internet Explorer Use-After-Free Vulnerability
  17. 20 May 2026CVE-2010-0249Internet ExplorerMicrosoft Internet Explorer Use-After-Free Vulnerability
  18. 20 May 2026CVE-2009-1537DirectXMicrosoft DirectX NULL Byte Overwrite Vulnerability
  19. 20 May 2026CVE-2008-4250WindowsMicrosoft Windows Buffer Overflow Vulnerability
  20. 15 May 2026CVE-2026-42897MicrosoftMicrosoft Exchange Server Cross-Site Scripting Vulnerability
  21. 28 April 2026CVE-2026-32202WindowsMicrosoft Windows Protection Mechanism Failure Vulnerability
  22. 22 April 2026CVE-2026-33825DefenderMicrosoft Defender Insufficient Granularity of Access Control VulnerabilityRansomware
  23. 14 April 2026CVE-2026-32201SharePoint ServerMicrosoft SharePoint Server Improper Input Validation Vulnerability
  24. 14 April 2026CVE-2009-0238OfficeMicrosoft Office Remote Code Execution
  25. 13 April 2026CVE-2025-60710WindowsMicrosoft Windows Link Following VulnerabilityRansomware
  26. 13 April 2026CVE-2023-36424WindowsMicrosoft Windows Out-of-Bounds Read Vulnerability
  27. 13 April 2026CVE-2023-21529Exchange ServerMicrosoft Exchange Server Deserialization of Untrusted Data VulnerabilityRansomware
  28. 13 April 2026CVE-2012-1854Visual Basic for Applications (VBA)Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability
  29. 18 March 2026CVE-2026-20963SharePointMicrosoft SharePoint Deserialization of Untrusted Data Vulnerability
  30. 17 February 2026CVE-2008-0015Windows Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability
  31. 12 February 2026CVE-2024-43468Configuration ManagerMicrosoft Configuration Manager SQL Injection Vulnerability
  32. 10 February 2026CVE-2026-21533WindowsMicrosoft Windows Improper Privilege Management Vulnerability
  33. 10 February 2026CVE-2026-21525WindowsMicrosoft Windows NULL Pointer Dereference Vulnerability
  34. 10 February 2026CVE-2026-21519WindowsMicrosoft Windows Type Confusion Vulnerability
  35. 10 February 2026CVE-2026-21514OfficeMicrosoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability
  36. 10 February 2026CVE-2026-21513WindowsMicrosoft MSHTML Framework Protection Mechanism Failure Vulnerability
  37. 10 February 2026CVE-2026-21510WindowsMicrosoft Windows Shell Protection Mechanism Failure Vulnerability
  38. 26 January 2026CVE-2026-21509OfficeMicrosoft Office Security Feature Bypass Vulnerability
  39. 13 January 2026CVE-2026-20805WindowsMicrosoft Windows Information Disclosure Vulnerability
  40. 7 January 2026CVE-2009-0556OfficeMicrosoft Office PowerPoint Code Injection Vulnerability
  41. 9 December 2025CVE-2025-62221WindowsMicrosoft Windows Use After Free Vulnerability
  42. 12 November 2025CVE-2025-62215WindowsMicrosoft Windows Race Condition Vulnerability
  43. 24 October 2025CVE-2025-59287WindowsMicrosoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability
  44. 20 October 2025CVE-2025-33073WindowsMicrosoft Windows SMB Client Improper Access Control Vulnerability
  45. 14 October 2025CVE-2025-59230WindowsMicrosoft Windows Improper Access Control Vulnerability
  46. 14 October 2025CVE-2025-24990WindowsMicrosoft Windows Untrusted Pointer Dereference Vulnerability
  47. 6 October 2025CVE-2021-43226WindowsMicrosoft Windows Privilege Escalation VulnerabilityRansomware
  48. 6 October 2025CVE-2013-3918WindowsMicrosoft Windows Out-of-Bounds Write Vulnerability
  49. 6 October 2025CVE-2011-3402WindowsMicrosoft Windows Remote Code Execution Vulnerability
  50. 6 October 2025CVE-2010-3962Internet ExplorerMicrosoft Internet Explorer Uninitialized Memory Corruption Vulnerability
  51. 12 August 2025CVE-2013-3893Internet ExplorerMicrosoft Internet Explorer Resource Management Errors Vulnerability
  52. 12 August 2025CVE-2007-0671OfficeMicrosoft Office Excel Remote Code Execution Vulnerability
  53. 22 July 2025CVE-2025-49706SharePointMicrosoft SharePoint Improper Authentication VulnerabilityRansomware
  54. 22 July 2025CVE-2025-49704SharePointMicrosoft SharePoint Code Injection VulnerabilityRansomware
  55. 20 July 2025CVE-2025-53770SharePointMicrosoft SharePoint Deserialization of Untrusted Data VulnerabilityRansomware
  56. 10 June 2025CVE-2025-33053Windows Microsoft Windows External Control of File Name or Path Vulnerability
  57. 13 May 2025CVE-2025-32709WindowsMicrosoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
  58. 13 May 2025CVE-2025-32706WindowsMicrosoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability
  59. 13 May 2025CVE-2025-32701WindowsMicrosoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability
  60. 13 May 2025CVE-2025-30400WindowsMicrosoft Windows DWM Core Library Use-After-Free Vulnerability
  61. 13 May 2025CVE-2025-30397WindowsMicrosoft Windows Scripting Engine Type Confusion Vulnerability
  62. 17 April 2025CVE-2025-24054WindowsMicrosoft Windows NTLM Hash Disclosure Spoofing Vulnerability
  63. 8 April 2025CVE-2025-29824WindowsMicrosoft Windows Common Log File System (CLFS) Driver Use-After-Free VulnerabilityRansomware
  64. 11 March 2025CVE-2025-26633WindowsMicrosoft Windows Management Console (MMC) Improper Neutralization VulnerabilityRansomware
  65. 11 March 2025CVE-2025-24993WindowsMicrosoft Windows NTFS Heap-Based Buffer Overflow Vulnerability
  66. 11 March 2025CVE-2025-24991WindowsMicrosoft Windows NTFS Out-Of-Bounds Read Vulnerability
  67. 11 March 2025CVE-2025-24985WindowsMicrosoft Windows Fast FAT File System Driver Integer Overflow Vulnerability
  68. 11 March 2025CVE-2025-24984WindowsMicrosoft Windows NTFS Information Disclosure Vulnerability
  69. 11 March 2025CVE-2025-24983WindowsMicrosoft Windows Win32k Use-After-Free Vulnerability
  70. 3 March 2025CVE-2018-8639WindowsMicrosoft Windows Win32k Improper Resource Shutdown or Release VulnerabilityRansomware
  71. 25 February 2025CVE-2024-49035Partner CenterMicrosoft Partner Center Improper Access Control Vulnerability
  72. 21 February 2025CVE-2025-24989Power PagesMicrosoft Power Pages Improper Access Control Vulnerability
  73. 11 February 2025CVE-2025-21418WindowsMicrosoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability
  74. 11 February 2025CVE-2025-21391WindowsMicrosoft Windows Storage Link Following Vulnerability
  75. 6 February 2025CVE-2024-21413Office OutlookMicrosoft Outlook Improper Input Validation Vulnerability
  76. 4 February 2025CVE-2024-29059.NET FrameworkMicrosoft .NET Framework Information Disclosure Vulnerability
  77. 14 January 2025CVE-2025-21335WindowsMicrosoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability
  78. 14 January 2025CVE-2025-21334WindowsMicrosoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability
  79. 14 January 2025CVE-2025-21333WindowsMicrosoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability
  80. 16 December 2024CVE-2024-35250WindowsMicrosoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability
  81. 10 December 2024CVE-2024-49138WindowsMicrosoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability
  82. 12 November 2024CVE-2024-49039WindowsMicrosoft Windows Task Scheduler Privilege Escalation VulnerabilityRansomware
  83. 12 November 2024CVE-2024-43451WindowsMicrosoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability
  84. 22 October 2024CVE-2024-38094SharePointMicrosoft SharePoint Deserialization VulnerabilityRansomware
  85. 15 October 2024CVE-2024-30088Windows Microsoft Windows Kernel TOCTOU Race Condition VulnerabilityRansomware
  86. 8 October 2024CVE-2024-43573WindowsMicrosoft Windows MSHTML Platform Spoofing Vulnerability
  87. 8 October 2024CVE-2024-43572WindowsMicrosoft Windows Management Console Remote Code Execution Vulnerability
  88. 18 September 2024CVE-2020-0618SQL ServerMicrosoft SQL Server Reporting Services Remote Code Execution VulnerabilityRansomware
  89. 16 September 2024CVE-2024-43461WindowsMicrosoft Windows MSHTML Platform Spoofing Vulnerability
  90. 10 September 2024CVE-2024-38226PublisherMicrosoft Publisher Protection Mechanism Failure Vulnerability
  91. 10 September 2024CVE-2024-38217WindowsMicrosoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability
  92. 10 September 2024CVE-2024-38014WindowsMicrosoft Windows Installer Improper Privilege Management Vulnerability
  93. 21 August 2024CVE-2021-31196Exchange ServerMicrosoft Exchange Server Information Disclosure Vulnerability
  94. 13 August 2024CVE-2024-38213WindowsMicrosoft Windows SmartScreen Security Feature Bypass Vulnerability
  95. 13 August 2024CVE-2024-38193WindowsMicrosoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability
  96. 13 August 2024CVE-2024-38189ProjectMicrosoft Project Remote Code Execution Vulnerability
  97. 13 August 2024CVE-2024-38178WindowsMicrosoft Windows Scripting Engine Memory Corruption Vulnerability
  98. 13 August 2024CVE-2024-38107WindowsMicrosoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability
  99. 13 August 2024CVE-2024-38106WindowsMicrosoft Windows Kernel Privilege Escalation Vulnerability
  100. 5 August 2024CVE-2018-0824WindowsMicrosoft COM for Windows Deserialization of Untrusted Data Vulnerability
  101. 23 July 2024CVE-2012-4792Internet ExplorerMicrosoft Internet Explorer Use-After-Free Vulnerability
  102. 9 July 2024CVE-2024-38112WindowsMicrosoft Windows MSHTML Platform Spoofing Vulnerability
  103. 9 July 2024CVE-2024-38080Windows Microsoft Windows Hyper-V Privilege Escalation Vulnerability
  104. 13 June 2024CVE-2024-26169WindowsMicrosoft Windows Error Reporting Service Improper Privilege Management VulnerabilityRansomware
  105. 14 May 2024CVE-2024-30051DWM Core Library Microsoft DWM Core Library Privilege Escalation VulnerabilityRansomware
  106. 14 May 2024CVE-2024-30040WindowsMicrosoft Windows MSHTML Platform Security Feature Bypass Vulnerability
  107. 30 April 2024CVE-2024-29988SmartScreen PromptMicrosoft SmartScreen Prompt Security Feature Bypass Vulnerability
  108. 23 April 2024CVE-2022-38028WindowsMicrosoft Windows Print Spooler Privilege Escalation Vulnerability
  109. 26 March 2024CVE-2023-24955SharePoint ServerMicrosoft SharePoint Server Code Injection VulnerabilityRansomware
  110. 4 March 2024CVE-2024-21338WindowsMicrosoft Windows Kernel Exposed IOCTL with Insufficient Access Control VulnerabilityRansomware
  111. 29 February 2024CVE-2023-29360Streaming ServiceMicrosoft Streaming Service Untrusted Pointer Dereference Vulnerability
  112. 15 February 2024CVE-2024-21410Exchange ServerMicrosoft Exchange Server Privilege Escalation Vulnerability
  113. 13 February 2024CVE-2024-21412WindowsMicrosoft Windows Internet Shortcut Files Security Feature Bypass VulnerabilityRansomware
  114. 13 February 2024CVE-2024-21351WindowsMicrosoft Windows SmartScreen Security Feature Bypass Vulnerability
  115. 10 January 2024CVE-2023-29357SharePoint ServerMicrosoft SharePoint Server Privilege Escalation VulnerabilityRansomware
  116. 16 November 2023CVE-2023-36584WindowsMicrosoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability
  117. 14 November 2023CVE-2023-36036WindowsMicrosoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability
  118. 14 November 2023CVE-2023-36033WindowsMicrosoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability
  119. 14 November 2023CVE-2023-36025WindowsMicrosoft Windows SmartScreen Security Feature Bypass Vulnerability
  120. 10 October 2023CVE-2023-41763Skype for BusinessMicrosoft Skype for Business Privilege Escalation Vulnerability
  121. 10 October 2023CVE-2023-36563WordPadMicrosoft WordPad Information Disclosure Vulnerability
  122. 4 October 2023CVE-2023-28229Windows CNG Key Isolation ServiceMicrosoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability
  123. 12 September 2023CVE-2023-36802Streaming Service ProxyMicrosoft Streaming Service Proxy Privilege Escalation Vulnerability
  124. 12 September 2023CVE-2023-36761WordMicrosoft Word Information Disclosure Vulnerability
  125. 9 August 2023CVE-2023-38180.NET Core and Visual StudioMicrosoft .NET Core and Visual Studio Denial-of-Service Vulnerability
  126. 17 July 2023CVE-2023-36884WindowsMicrosoft Windows Search Remote Code Execution VulnerabilityRansomware
  127. 11 July 2023CVE-2023-36874WindowsMicrosoft Windows Error Reporting Service Privilege Escalation Vulnerability
  128. 11 July 2023CVE-2023-35311OutlookMicrosoft Outlook Security Feature Bypass Vulnerability
  129. 11 July 2023CVE-2023-32049WindowsMicrosoft Windows Defender SmartScreen Security Feature Bypass Vulnerability
  130. 11 July 2023CVE-2023-32046WindowsMicrosoft Windows MSHTML Platform Privilege Escalation Vulnerability
  131. 22 June 2023CVE-2016-0165Win32kMicrosoft Win32k Privilege Escalation Vulnerability
  132. 9 May 2023CVE-2023-29336Win32kMicrosoft Win32K Privilege Escalation Vulnerability
  133. 11 April 2023CVE-2023-28252WindowsMicrosoft Windows Common Log File System (CLFS) Driver Privilege Escalation VulnerabilityRansomware
  134. 7 April 2023CVE-2019-1388WindowsMicrosoft Windows Certificate Dialog Privilege Escalation VulnerabilityRansomware
  135. 30 March 2023CVE-2013-3163Internet ExplorerMicrosoft Internet Explorer Memory Corruption Vulnerability
  136. 14 March 2023CVE-2023-24880WindowsMicrosoft Windows SmartScreen Security Feature Bypass VulnerabilityRansomware
  137. 14 March 2023CVE-2023-23397OfficeMicrosoft Office Outlook Privilege Escalation Vulnerability
  138. 14 February 2023CVE-2023-23376WindowsMicrosoft Windows Common Log File System (CLFS) Driver Privilege Escalation VulnerabilityRansomware
  139. 14 February 2023CVE-2023-21823WindowsMicrosoft Windows Graphic Component Privilege Escalation Vulnerability
  140. 14 February 2023CVE-2023-21715OfficeMicrosoft Office Publisher Security Feature Bypass Vulnerability
  141. 10 January 2023CVE-2023-21674WindowsMicrosoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability
  142. 10 January 2023CVE-2022-41080Exchange ServerMicrosoft Exchange Server Privilege Escalation VulnerabilityRansomware
  143. 13 December 2022CVE-2022-44698DefenderMicrosoft Defender SmartScreen Security Feature Bypass VulnerabilityRansomware
  144. 14 November 2022CVE-2022-41049WindowsMicrosoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability
  145. 8 November 2022CVE-2022-41128WindowsMicrosoft Windows Scripting Languages Remote Code Execution Vulnerability
  146. 8 November 2022CVE-2022-41125WindowsMicrosoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability
  147. 8 November 2022CVE-2022-41091WindowsMicrosoft Windows Mark of the Web (MOTW) Security Feature Bypass VulnerabilityRansomware
  148. 8 November 2022CVE-2022-41073WindowsMicrosoft Windows Print Spooler Privilege Escalation VulnerabilityRansomware
  149. 11 October 2022CVE-2022-41033Windows COM+ Event System ServiceMicrosoft Windows COM+ Event System Service Privilege Escalation Vulnerability
  150. 30 September 2022CVE-2022-41082Exchange ServerMicrosoft Exchange Server Remote Code Execution VulnerabilityRansomware
  151. 30 September 2022CVE-2022-41040Exchange ServerMicrosoft Exchange Server Server-Side Request Forgery VulnerabilityRansomware
  152. 15 September 2022CVE-2010-2568WindowsMicrosoft Windows Remote Code Execution Vulnerability
  153. 14 September 2022CVE-2022-37969WindowsMicrosoft Windows Common Log File System (CLFS) Driver Privilege Escalation VulnerabilityRansomware
  154. 18 August 2022CVE-2022-26923Active DirectoryMicrosoft Active Directory Domain Services Privilege Escalation Vulnerability
  155. 18 August 2022CVE-2022-21971WindowsMicrosoft Windows Runtime Remote Code Execution Vulnerability
  156. 9 August 2022CVE-2022-34713WindowsMicrosoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
  157. 12 July 2022CVE-2022-22047WindowsMicrosoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability
  158. 1 July 2022CVE-2022-26925WindowsMicrosoft Windows LSA Spoofing Vulnerability
  159. 14 June 2022CVE-2022-30190WindowsMicrosoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution VulnerabilityRansomware
  160. 8 June 2022CVE-2013-1331OfficeMicrosoft Office Buffer Overflow Vulnerability
  161. 8 June 2022CVE-2012-4969Internet ExplorerMicrosoft Internet Explorer Use-After-Free Vulnerability
  162. 8 June 2022CVE-2012-1889XML Core ServicesMicrosoft XML Core Services Memory Corruption Vulnerability
  163. 8 June 2022CVE-2012-0151WindowsMicrosoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability
  164. 8 June 2022CVE-2010-2572PowerPointMicrosoft PowerPoint Buffer Overflow Vulnerability
  165. 8 June 2022CVE-2009-0563OfficeMicrosoft Office Buffer Overflow Vulnerability
  166. 8 June 2022CVE-2009-0557OfficeMicrosoft Office Object Record Corruption Vulnerability
  167. 8 June 2022CVE-2006-2492WordMicrosoft Word Malformed Object Pointer Vulnerability
  168. 25 May 2022CVE-2016-7256WindowsMicrosoft Windows Open Type Font Remote Code Execution Vulnerability
  169. 25 May 2022CVE-2016-3393WindowsMicrosoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability
  170. 25 May 2022CVE-2016-0034SilverlightMicrosoft Silverlight Runtime Remote Code Execution VulnerabilityRansomware
  171. 25 May 2022CVE-2015-6175WindowsMicrosoft Windows Kernel Privilege Escalation Vulnerability
  172. 25 May 2022CVE-2015-2425Internet ExplorerMicrosoft Internet Explorer Memory Corruption Vulnerability
  173. 25 May 2022CVE-2015-2360Win32kMicrosoft Win32k Privilege Escalation Vulnerability
  174. 25 May 2022CVE-2015-1769WindowsMicrosoft Windows Mount Manager Privilege Escalation Vulnerability
  175. 25 May 2022CVE-2015-1671WindowsMicrosoft Windows Remote Code Execution Vulnerability
  176. 25 May 2022CVE-2015-0071Internet ExplorerMicrosoft Internet Explorer ASLR Bypass Vulnerability
  177. 25 May 2022CVE-2015-0016WindowsMicrosoft Windows TS WebProxy Directory Traversal Vulnerability
  178. 25 May 2022CVE-2014-4148WindowsMicrosoft Windows Remote Code Execution Vulnerability
  179. 25 May 2022CVE-2014-4123Internet ExplorerMicrosoft Internet Explorer Privilege Escalation Vulnerability
  180. 25 May 2022CVE-2014-4077Input Method Editor (IME) JapaneseMicrosoft IME Japanese Privilege Escalation Vulnerability
  181. 25 May 2022CVE-2014-2817Internet ExplorerMicrosoft Internet Explorer Privilege Escalation Vulnerability
  182. 25 May 2022CVE-2013-7331Internet ExplorerMicrosoft Internet Explorer Information Disclosure Vulnerability
  183. 25 May 2022CVE-2013-3896SilverlightMicrosoft Silverlight Information Disclosure Vulnerability
  184. 25 May 2022CVE-2013-0074SilverlightMicrosoft Silverlight Double Dereference VulnerabilityRansomware
  185. 24 May 2022CVE-2018-8611WindowsMicrosoft Windows Kernel Privilege Escalation Vulnerability
  186. 24 May 2022CVE-2017-8543WindowsMicrosoft Windows Search Remote Code Execution Vulnerability
  187. 24 May 2022CVE-2017-0210Internet ExplorerMicrosoft Internet Explorer Privilege Escalation Vulnerability
  188. 24 May 2022CVE-2017-0149Internet ExplorerMicrosoft Internet Explorer Memory Corruption Vulnerability
  189. 24 May 2022CVE-2017-0147SMBv1 serverMicrosoft Windows SMBv1 Information Disclosure VulnerabilityRansomware
  190. 24 May 2022CVE-2017-0022XML Core ServicesMicrosoft XML Core Services Information Disclosure Vulnerability
  191. 24 May 2022CVE-2017-0005WindowsMicrosoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability
  192. 24 May 2022CVE-2016-3351Internet Explorer and EdgeMicrosoft Internet Explorer and Edge Information Disclosure VulnerabilityRansomware
  193. 24 May 2022CVE-2016-3298Internet ExplorerMicrosoft Internet Explorer Messaging API Information Disclosure Vulnerability
  194. 24 May 2022CVE-2016-0162Internet ExplorerMicrosoft Internet Explorer Information Disclosure Vulnerability
  195. 23 May 2022CVE-2020-1027WindowsMicrosoft Windows Kernel Privilege Escalation Vulnerability
  196. 23 May 2022CVE-2020-0638Update Notification ManagerMicrosoft Update Notification Manager Privilege Escalation VulnerabilityRansomware
  197. 23 May 2022CVE-2019-1385WindowsMicrosoft Windows AppX Deployment Extensions Privilege Escalation VulnerabilityRansomware
  198. 23 May 2022CVE-2019-1130WindowsMicrosoft Windows AppX Deployment Service Privilege Escalation VulnerabilityRansomware
  199. 23 May 2022CVE-2019-0880WindowsMicrosoft Windows Privilege Escalation Vulnerability
  200. 23 May 2022CVE-2019-0703WindowsMicrosoft Windows SMB Information Disclosure Vulnerability
  201. 23 May 2022CVE-2019-0676Internet ExplorerMicrosoft Internet Explorer Information Disclosure Vulnerability
  202. 23 May 2022CVE-2018-8589Win32kMicrosoft Win32k Privilege Escalation Vulnerability
  203. 4 May 2022CVE-2014-4113Win32kMicrosoft Win32k Privilege Escalation Vulnerability
  204. 4 May 2022CVE-2014-0322Internet ExplorerMicrosoft Internet Explorer Use-After-Free Vulnerability
  205. 25 April 2022CVE-2022-26904WindowsMicrosoft Windows User Profile Service Privilege Escalation Vulnerability
  206. 25 April 2022CVE-2022-21919WindowsMicrosoft Windows User Profile Service Privilege Escalation Vulnerability
  207. 25 April 2022CVE-2021-41357Win32kMicrosoft Win32k Privilege Escalation Vulnerability
  208. 25 April 2022CVE-2021-40450Win32kMicrosoft Win32k Privilege Escalation Vulnerability
  209. 19 April 2022CVE-2022-22718WindowsMicrosoft Windows Print Spooler Privilege Escalation Vulnerability
  210. 13 April 2022CVE-2022-24521WindowsMicrosoft Windows CLFS Driver Privilege Escalation VulnerabilityRansomware
  211. 13 April 2022CVE-2015-2502Internet ExplorerMicrosoft Internet Explorer Memory Corruption Vulnerability
  212. 11 April 2022CVE-2021-42287Active DirectoryMicrosoft Active Directory Domain Services Privilege Escalation VulnerabilityRansomware
  213. 11 April 2022CVE-2021-42278Active DirectoryMicrosoft Active Directory Domain Services Privilege Escalation VulnerabilityRansomware
  214. 6 April 2022CVE-2021-31166HTTP Protocol StackMicrosoft HTTP Protocol Stack Remote Code Execution Vulnerability
  215. 6 April 2022CVE-2017-0148SMBv1 serverMicrosoft SMBv1 Server Remote Code Execution VulnerabilityRansomware
  216. 31 March 2022CVE-2021-34484WindowsMicrosoft Windows User Profile Service Privilege Escalation Vulnerability
  217. 28 March 2022CVE-2021-38646OfficeMicrosoft Office Access Connectivity Engine Remote Code Execution VulnerabilityRansomware
  218. 28 March 2022CVE-2021-34486WindowsMicrosoft Windows Event Tracing Privilege Escalation Vulnerability
  219. 28 March 2022CVE-2018-8440WindowsMicrosoft Windows Privilege Escalation VulnerabilityRansomware
  220. 28 March 2022CVE-2018-8406DirectX Graphics Kernel (DXGKRNL)Microsoft DirectX Graphics Kernel Privilege Escalation VulnerabilityRansomware
  221. 28 March 2022CVE-2018-8405DirectX Graphics Kernel (DXGKRNL)Microsoft DirectX Graphics Kernel Privilege Escalation VulnerabilityRansomware
  222. 28 March 2022CVE-2017-0213WindowsMicrosoft Windows Privilege Escalation VulnerabilityRansomware
  223. 28 March 2022CVE-2017-0059Internet ExplorerMicrosoft Internet Explorer Information Disclosure Vulnerability
  224. 28 March 2022CVE-2017-0037Edge and Internet ExplorerMicrosoft Edge and Internet Explorer Type Confusion Vulnerability
  225. 28 March 2022CVE-2016-7201EdgeMicrosoft Edge Memory Corruption Vulnerability
  226. 28 March 2022CVE-2016-7200EdgeMicrosoft Edge Memory Corruption Vulnerability
  227. 28 March 2022CVE-2016-0189Internet ExplorerMicrosoft Internet Explorer Memory Corruption VulnerabilityRansomware
  228. 28 March 2022CVE-2016-0151Client-Server Run-time Subsystem (CSRSS)Microsoft Windows CSRSS Security Feature Bypass VulnerabilityRansomware
  229. 28 March 2022CVE-2016-0040WindowsMicrosoft Windows Kernel Privilege Escalation Vulnerability
  230. 28 March 2022CVE-2015-2426WindowsMicrosoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability
  231. 28 March 2022CVE-2015-2419Internet ExplorerMicrosoft Internet Explorer Memory Corruption Vulnerability
  232. 28 March 2022CVE-2015-1770OfficeMicrosoft Office Uninitialized Memory Use Vulnerability
  233. 28 March 2022CVE-2013-3660Win32kMicrosoft Win32k Privilege Escalation Vulnerability
  234. 28 March 2022CVE-2013-2551Internet ExplorerMicrosoft Internet Explorer Use-After-Free VulnerabilityRansomware
  235. 28 March 2022CVE-2012-2539WordMicrosoft Word Remote Code Execution Vulnerability
  236. 28 March 2022CVE-2011-2005Ancillary Function Driver (afd.sys)Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability
  237. 28 March 2022CVE-2010-4398WindowsMicrosoft Windows Kernel Stack-Based Buffer Overflow Vulnerability
  238. 25 March 2022CVE-2022-21999WindowsMicrosoft Windows Print Spooler Privilege Escalation VulnerabilityRansomware
  239. 25 March 2022CVE-2019-0903Graphics Device Interface (GDI)Microsoft GDI Remote Code Execution Vulnerability
  240. 25 March 2022CVE-2018-8414WindowsMicrosoft Windows Shell Remote Code Execution Vulnerability
  241. 25 March 2022CVE-2018-8373Internet Explorer Scripting EngineMicrosoft Scripting Engine Memory Corruption Vulnerability
  242. 25 March 2022CVE-2017-0146WindowsMicrosoft Windows SMB Remote Code Execution VulnerabilityRansomware
  243. 25 March 2022CVE-2014-6332WindowsMicrosoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability
  244. 25 March 2022CVE-2014-6324Kerberos Key Distribution Center (KDC)Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability
  245. 15 March 2022CVE-2019-1405WindowsMicrosoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation VulnerabilityRansomware
  246. 15 March 2022CVE-2019-1322WindowsMicrosoft Windows Privilege Escalation VulnerabilityRansomware
  247. 15 March 2022CVE-2019-1315WindowsMicrosoft Windows Error Reporting Manager Privilege Escalation VulnerabilityRansomware
  248. 15 March 2022CVE-2019-1253WindowsMicrosoft Windows AppX Deployment Server Privilege Escalation VulnerabilityRansomware
  249. 15 March 2022CVE-2019-1132Win32kMicrosoft Win32k Privilege Escalation Vulnerability
  250. 15 March 2022CVE-2019-1129WindowsMicrosoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation VulnerabilityRansomware
  251. 15 March 2022CVE-2019-1069Task SchedulerMicrosoft Task Scheduler Privilege Escalation VulnerabilityRansomware
  252. 15 March 2022CVE-2019-1064WindowsMicrosoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation VulnerabilityRansomware
  253. 15 March 2022CVE-2019-0841WindowsMicrosoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation VulnerabilityRansomware
  254. 15 March 2022CVE-2019-0543WindowsMicrosoft Windows Privilege Escalation VulnerabilityRansomware
  255. 15 March 2022CVE-2018-8120Win32kMicrosoft Win32k Privilege Escalation VulnerabilityRansomware
  256. 15 March 2022CVE-2017-0101WindowsMicrosoft Windows Transaction Manager Privilege Escalation VulnerabilityRansomware
  257. 15 March 2022CVE-2016-3309WindowsMicrosoft Windows Kernel Privilege Escalation VulnerabilityRansomware
  258. 15 March 2022CVE-2015-2546Win32kMicrosoft Win32k Memory Corruption VulnerabilityRansomware
  259. 3 March 2022CVE-2021-41379WindowsMicrosoft Windows Installer Privilege Escalation VulnerabilityRansomware
  260. 3 March 2022CVE-2019-1297ExcelMicrosoft Excel Remote Code Execution Vulnerability
  261. 3 March 2022CVE-2018-8581Exchange ServerMicrosoft Exchange Server Privilege Escalation VulnerabilityRansomware
  262. 3 March 2022CVE-2017-8540Malware Protection EngineMicrosoft Malware Protection Engine Improper Restriction of Operations Vulnerability
  263. 3 March 2022CVE-2017-11826OfficeMicrosoft Office Remote Code Execution Vulnerability
  264. 3 March 2022CVE-2017-0261OfficeMicrosoft Office Use-After-Free Vulnerability
  265. 3 March 2022CVE-2017-0001Graphics Device Interface (GDI)Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability
  266. 3 March 2022CVE-2016-7262ExcelMicrosoft Office Security Feature Bypass Vulnerability
  267. 3 March 2022CVE-2016-7193OfficeMicrosoft Office Memory Corruption Vulnerability
  268. 3 March 2022CVE-2016-0099WindowsMicrosoft Windows Secondary Logon Service Privilege Escalation VulnerabilityRansomware
  269. 3 March 2022CVE-2015-2545OfficeMicrosoft Office Malformed EPS File Vulnerability
  270. 3 March 2022CVE-2015-2424PowerPointMicrosoft PowerPoint Memory Corruption Vulnerability
  271. 3 March 2022CVE-2015-2387ATM Font DriverMicrosoft ATM Font Driver Privilege Escalation Vulnerability
  272. 3 March 2022CVE-2015-1701Win32kMicrosoft Win32k Privilege Escalation VulnerabilityRansomware
  273. 3 March 2022CVE-2015-1642OfficeMicrosoft Office Memory Corruption Vulnerability
  274. 3 March 2022CVE-2014-4114WindowsMicrosoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability
  275. 3 March 2022CVE-2013-5065WindowsMicrosoft Windows Kernel Privilege Escalation Vulnerability
  276. 3 March 2022CVE-2013-3897Internet ExplorerMicrosoft Internet Explorer Use-After-Free Vulnerability
  277. 3 March 2022CVE-2013-1347Internet ExplorerMicrosoft Internet Explorer Remote Code Execution Vulnerability
  278. 3 March 2022CVE-2012-1856OfficeMicrosoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability
  279. 3 March 2022CVE-2011-1889Forefront Threat Management Gateway (TMG)Microsoft Forefront TMG Remote Code Execution Vulnerability
  280. 3 March 2022CVE-2010-3333OfficeMicrosoft Office Stack-based Buffer Overflow Vulnerability
  281. 3 March 2022CVE-2010-0232WindowsMicrosoft Windows Kernel Exception Handler Vulnerability
  282. 3 March 2022CVE-2009-3129ExcelMicrosoft Excel Featheader Record Memory Corruption Vulnerability
  283. 3 March 2022CVE-2009-1123WindowsMicrosoft Windows Improper Input Validation Vulnerability
  284. 3 March 2022CVE-2004-0210WindowsMicrosoft Windows Privilege Escalation Vulnerability
  285. 3 March 2022CVE-2002-0367WindowsMicrosoft Windows Privilege Escalation Vulnerability
  286. 25 February 2022CVE-2017-8570OfficeMicrosoft Office Remote Code Execution Vulnerability
  287. 25 February 2022CVE-2017-0222Internet ExplorerMicrosoft Internet Explorer Remote Code Execution Vulnerability
  288. 25 February 2022CVE-2014-6352WindowsMicrosoft Windows Code Injection Vulnerability
  289. 15 February 2022CVE-2019-0752Internet ExplorerMicrosoft Internet Explorer Type Confusion VulnerabilityRansomware
  290. 15 February 2022CVE-2018-8174WindowsMicrosoft Windows VBScript Engine Out-of-Bounds Write VulnerabilityRansomware
  291. 15 February 2022CVE-2014-1761WordMicrosoft Word Memory Corruption Vulnerability
  292. 15 February 2022CVE-2013-3906Graphics ComponentMicrosoft Graphics Component Memory Corruption Vulnerability
  293. 10 February 2022CVE-2021-36934WindowsMicrosoft Windows SAM Local Privilege Escalation Vulnerability
  294. 10 February 2022CVE-2020-0796SMBv3Microsoft SMBv3 Remote Code Execution VulnerabilityRansomware
  295. 10 February 2022CVE-2017-8464WindowsMicrosoft Windows Shell (.lnk) Remote Code Execution Vulnerability
  296. 10 February 2022CVE-2017-0263Win32kMicrosoft Win32k Privilege Escalation Vulnerability
  297. 10 February 2022CVE-2017-0262OfficeMicrosoft Office Remote Code Execution Vulnerability
  298. 10 February 2022CVE-2017-0145SMBv1Microsoft SMBv1 Remote Code Execution VulnerabilityRansomware
  299. 10 February 2022CVE-2017-0144SMBv1Microsoft SMBv1 Remote Code Execution VulnerabilityRansomware
  300. 10 February 2022CVE-2015-1635HTTP.sysMicrosoft HTTP.sys Remote Code Execution Vulnerability
  301. 4 February 2022CVE-2022-21882Win32kMicrosoft Win32k Privilege Escalation VulnerabilityRansomware
  302. 28 January 2022CVE-2020-0787WindowsMicrosoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management VulnerabilityRansomware
  303. 28 January 2022CVE-2014-1776Internet ExplorerMicrosoft Internet Explorer Memory Corruption Vulnerability
  304. 21 January 2022CVE-2018-8453Win32kMicrosoft Win32k Privilege Escalation VulnerabilityRansomware
  305. 18 January 2022CVE-2021-33766Exchange ServerMicrosoft Exchange Server Information Disclosure
  306. 10 January 2022CVE-2019-1458Win32kMicrosoft Win32k Privilege Escalation VulnerabilityRansomware
  307. 10 January 2022CVE-2013-3900WinVerifyTrust functionMicrosoft WinVerifyTrust function Remote Code Execution
  308. 15 December 2021CVE-2021-43890WindowsMicrosoft Windows AppX Installer Spoofing VulnerabilityRansomware
  309. 17 November 2021CVE-2021-42321ExchangeMicrosoft Exchange Server Remote Code Execution VulnerabilityRansomware
  310. 17 November 2021CVE-2021-42292OfficeMicrosoft Excel Security Feature Bypass
  311. 17 November 2021CVE-2021-40449WindowsMicrosoft Windows Win32k Privilege Escalation VulnerabilityRansomware
  312. 3 November 2021CVE-2021-40444MSHTMLMicrosoft MSHTML Remote Code Execution VulnerabilityRansomware
  313. 3 November 2021CVE-2021-38649Open Management Infrastructure (OMI)Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability
  314. 3 November 2021CVE-2021-38648Open Management Infrastructure (OMI)Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability
  315. 3 November 2021CVE-2021-38647Open Management Infrastructure (OMI)Microsoft Open Management Infrastructure (OMI) Remote Code Execution VulnerabilityRansomware
  316. 3 November 2021CVE-2021-38645Open Management Infrastructure (OMI)Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability
  317. 3 November 2021CVE-2021-36955WindowsMicrosoft Windows Common Log File System (CLFS) Driver Privilege Escalation VulnerabilityRansomware
  318. 3 November 2021CVE-2021-36948WindowsMicrosoft Windows Update Medic Service Privilege Escalation Vulnerability
  319. 3 November 2021CVE-2021-36942WindowsMicrosoft Windows Local Security Authority (LSA) Spoofing VulnerabilityRansomware
  320. 3 November 2021CVE-2021-34527WindowsMicrosoft Windows Print Spooler Remote Code Execution VulnerabilityRansomware
  321. 3 November 2021CVE-2021-34523Exchange ServerMicrosoft Exchange Server Privilege Escalation VulnerabilityRansomware
  322. 3 November 2021CVE-2021-34473Exchange ServerMicrosoft Exchange Server Remote Code Execution VulnerabilityRansomware
  323. 3 November 2021CVE-2021-34448WindowsMicrosoft Windows Scripting Engine Memory Corruption Vulnerability
  324. 3 November 2021CVE-2021-33771WindowsMicrosoft Windows Kernel Privilege Escalation Vulnerability
  325. 3 November 2021CVE-2021-33742WindowsMicrosoft Windows MSHTML Platform Remote Code Execution Vulnerability
  326. 3 November 2021CVE-2021-33739WindowsMicrosoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability
  327. 3 November 2021CVE-2021-31979WindowsMicrosoft Windows Kernel Privilege Escalation Vulnerability
  328. 3 November 2021CVE-2021-31956WindowsMicrosoft Windows NTFS Privilege Escalation Vulnerability
  329. 3 November 2021CVE-2021-31955WindowsMicrosoft Windows Kernel Information Disclosure Vulnerability
  330. 3 November 2021CVE-2021-31207Exchange ServerMicrosoft Exchange Server Security Feature Bypass VulnerabilityRansomware
  331. 3 November 2021CVE-2021-31201Enhanced Cryptographic ProviderMicrosoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability
  332. 3 November 2021CVE-2021-31199Enhanced Cryptographic ProviderMicrosoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability
  333. 3 November 2021CVE-2021-28310Win32kMicrosoft Win32k Privilege Escalation Vulnerability
  334. 3 November 2021CVE-2021-27085Internet ExplorerMicrosoft Internet Explorer Remote Code Execution Vulnerability
  335. 3 November 2021CVE-2021-27065Exchange ServerMicrosoft Exchange Server Remote Code Execution VulnerabilityRansomware
  336. 3 November 2021CVE-2021-27059OfficeMicrosoft Office Remote Code Execution Vulnerability
  337. 3 November 2021CVE-2021-26858Exchange ServerMicrosoft Exchange Server Remote Code Execution VulnerabilityRansomware
  338. 3 November 2021CVE-2021-26857Exchange ServerMicrosoft Exchange Server Remote Code Execution VulnerabilityRansomware
  339. 3 November 2021CVE-2021-26855Exchange ServerMicrosoft Exchange Server Remote Code Execution VulnerabilityRansomware
  340. 3 November 2021CVE-2021-26411Internet ExplorerMicrosoft Internet Explorer Memory Corruption VulnerabilityRansomware
  341. 3 November 2021CVE-2021-1732Win32kMicrosoft Win32k Privilege Escalation VulnerabilityRansomware
  342. 3 November 2021CVE-2021-1675WindowsMicrosoft Windows Print Spooler Remote Code Execution VulnerabilityRansomware
  343. 3 November 2021CVE-2021-1647DefenderMicrosoft Defender Remote Code Execution Vulnerability
  344. 3 November 2021CVE-2020-17144Exchange ServerMicrosoft Exchange Server Remote Code Execution Vulnerability
  345. 3 November 2021CVE-2020-17087WindowsMicrosoft Windows Kernel Privilege Escalation Vulnerability
  346. 3 November 2021CVE-2020-1472NetlogonMicrosoft Netlogon Privilege Escalation VulnerabilityRansomware
  347. 3 November 2021CVE-2020-1464WindowsMicrosoft Windows Spoofing Vulnerability
  348. 3 November 2021CVE-2020-1380Internet ExplorerMicrosoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
  349. 3 November 2021CVE-2020-1350WindowsMicrosoft Windows DNS Server Remote Code Execution Vulnerability
  350. 3 November 2021CVE-2020-1147.NET Framework, SharePoint, Visual StudioMicrosoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability
  351. 3 November 2021CVE-2020-1054Win32kMicrosoft Win32k Privilege Escalation Vulnerability
  352. 3 November 2021CVE-2020-1040Hyper-V RemoteFXMicrosoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability
  353. 3 November 2021CVE-2020-1020WindowsMicrosoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability
  354. 3 November 2021CVE-2020-0986WindowsMicrosoft Windows Kernel Privilege Escalation Vulnerability
  355. 3 November 2021CVE-2020-0968Internet ExplorerMicrosoft Internet Explorer Scripting Engine Memory Corruption VulnerabilityRansomware
  356. 3 November 2021CVE-2020-0938WindowsMicrosoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability
  357. 3 November 2021CVE-2020-0878Edge and Internet ExplorerMicrosoft Edge and Internet Explorer Memory Corruption VulnerabilityRansomware
  358. 3 November 2021CVE-2020-0688Exchange ServerMicrosoft Exchange Server Validation Key Remote Code Execution VulnerabilityRansomware
  359. 3 November 2021CVE-2020-0683WindowsMicrosoft Windows Installer Privilege Escalation Vulnerability
  360. 3 November 2021CVE-2020-0674Internet ExplorerMicrosoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
  361. 3 November 2021CVE-2020-0646.NET FrameworkMicrosoft .NET Framework Remote Code Execution Vulnerability
  362. 3 November 2021CVE-2020-0601WindowsMicrosoft Windows CryptoAPI Spoofing Vulnerability
  363. 3 November 2021CVE-2019-1429Internet ExplorerMicrosoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
  364. 3 November 2021CVE-2019-1367Internet ExplorerMicrosoft Internet Explorer Scripting Engine Memory Corruption VulnerabilityRansomware
  365. 3 November 2021CVE-2019-1215WindowsMicrosoft Windows Privilege Escalation VulnerabilityRansomware
  366. 3 November 2021CVE-2019-1214WindowsMicrosoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability
  367. 3 November 2021CVE-2019-0863WindowsMicrosoft Windows Error Reporting (WER) Privilege Escalation Vulnerability
  368. 3 November 2021CVE-2019-0859Win32kMicrosoft Win32k Privilege Escalation VulnerabilityRansomware
  369. 3 November 2021CVE-2019-0808Win32kMicrosoft Win32k Privilege Escalation Vulnerability
  370. 3 November 2021CVE-2019-0803Win32kMicrosoft Win32k Privilege Escalation VulnerabilityRansomware
  371. 3 November 2021CVE-2019-0797Win32kMicrosoft Win32k Privilege Escalation Vulnerability
  372. 3 November 2021CVE-2019-0708Remote Desktop ServicesMicrosoft Remote Desktop Services Remote Code Execution VulnerabilityRansomware
  373. 3 November 2021CVE-2019-0604SharePointMicrosoft SharePoint Remote Code Execution VulnerabilityRansomware
  374. 3 November 2021CVE-2019-0541MSHTMLMicrosoft MSHTML Remote Code Execution Vulnerability
  375. 3 November 2021CVE-2018-8653Internet ExplorerMicrosoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
  376. 3 November 2021CVE-2018-0802OfficeMicrosoft Office Memory Corruption VulnerabilityRansomware
  377. 3 November 2021CVE-2018-0798OfficeMicrosoft Office Memory Corruption Vulnerability
  378. 3 November 2021CVE-2017-8759.NET FrameworkMicrosoft .NET Framework Remote Code Execution Vulnerability
  379. 3 November 2021CVE-2017-7269Internet Information Services (IIS)Microsoft Windows Server Buffer Overflow Vulnerability
  380. 3 November 2021CVE-2017-11882OfficeMicrosoft Office Memory Corruption VulnerabilityRansomware
  381. 3 November 2021CVE-2017-11774OfficeMicrosoft Office Outlook Security Feature Bypass Vulnerability
  382. 3 November 2021CVE-2017-0199Office and WordPadMicrosoft Office and WordPad Remote Code Execution VulnerabilityRansomware
  383. 3 November 2021CVE-2017-0143WindowsMicrosoft Windows Server Message Block (SMBv1) Remote Code Execution VulnerabilityRansomware
  384. 3 November 2021CVE-2016-7255Win32kMicrosoft Win32k Privilege Escalation VulnerabilityRansomware
  385. 3 November 2021CVE-2016-3235OfficeMicrosoft Office OLE DLL Side Loading Vulnerability
  386. 3 November 2021CVE-2016-0185WindowsMicrosoft Windows Media Center Remote Code Execution Vulnerability
  387. 3 November 2021CVE-2016-0167Win32kMicrosoft Win32k Privilege Escalation VulnerabilityRansomware
  388. 3 November 2021CVE-2015-1641OfficeMicrosoft Office Memory Corruption Vulnerability
  389. 3 November 2021CVE-2014-1812WindowsMicrosoft Windows Group Policy Preferences Password Privilege Escalation VulnerabilityRansomware
  390. 3 November 2021CVE-2012-0158MSCOMCTL.OCXMicrosoft MSCOMCTL.OCX Remote Code Execution VulnerabilityRansomware

Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.

Alerts only on the products you use

With My Defence you receive alerts and briefings only on the products you use, Microsoft included.

Start freeMy Defence

All vendorsThe catalogue on the CISA website