ZeusQA
Start free

Known exploited vulnerabilities

Microsoft vulnerabilities attackers have used

Every Microsoft vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 391 Microsoft vulnerabilities as exploited in the wild, 43 of them added in the last 12 months and 117 used in ransomware campaigns. The most recent is CVE-2026-124194, added Nov 10, 2026. Windows has the most entries (175).

In KEV, all time
391
Added, last 12 months
43
Used in ransomware
117
New CVEs this week
79

By product

Windows (175), Internet Explorer (36), Office (30), Win32k (25), Exchange Server (17), SharePoint (10), Defender (5), SharePoint Server (5), Open Management Infrastructure (OMI) (4), Word (4), .NET Framework (3), Active Directory (3), and 59 more.

New Critical and High Microsoft CVEs this week

  • CVE-2026-94513highHeap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
  • CVE-2026-88240highHeap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network.
  • CVE-2026-88187highHeap-based buffer overflow in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network.
  • CVE-2026-88176highMissing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
  • CVE-2026-85923highAuthorization bypass through user-controlled key in Azure DevOps Server allows an authorized attacker to elevate privileges over a network.
  • CVE-2026-84010highExposed dangerous method or function in SQL Server allows an authorized attacker to elevate privileges over a network.
  • CVE-2026-80095criticalImproper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
  • CVE-2026-80094highUse after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network.
  • CVE-2026-70003highImproper verification of cryptographic signature in JDBC Driver for SQL Server allows an unauthorized attacker to bypass a security feature over a network.
  • CVE-2026-122177highImproper link resolution before file access ('link following') in Windows iSCSI allows an unauthorized attacker to elevate privileges over a network.
  • CVE-2026-122169highInsufficient granularity of access control in Windows IKE Extension allows an authorized attacker to perform spoofing locally.
  • CVE-2026-122164highWeak authentication in Windows Kerberos allows an authorized attacker to elevate privileges over a network.
  • CVE-2026-121680highExposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
  • CVE-2026-121668highMissing authorization in Azure Confidential Clean Rooms allows an authorized attacker to perform tampering over a network.
  • CVE-2026-121665highTrust boundary violation in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
  • CVE-2026-121663highIncomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
  • CVE-2026-121661highIncomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
  • CVE-2026-120780highImproper access control in Visual Studio Code allows an unauthorized attacker to execute code over a network.
  • CVE-2026-120779criticalImproper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.
  • CVE-2026-120778highCreation of temporary file in directory with insecure permissions in .NET Aspire allows an authorized attacker to elevate privileges locally.
  • CVE-2026-120005highHeap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
  • CVE-2026-120003highHeap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
  • CVE-2026-120002criticalIncorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
  • CVE-2026-120001highHeap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
  • CVE-2026-120000highDeserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
  • CVE-2026-119997highHeap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code locally.
  • CVE-2026-119996highHeap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
  • CVE-2026-119995highHeap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
  • CVE-2026-119992highDouble free in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
  • CVE-2026-119989highImproper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an authorized attacker to execute code over a network.
  • CVE-2026-119988highNumeric truncation error in Windows SMB allows an authorized attacker to execute code over a network.
  • CVE-2026-119987highUntrusted search path in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally.
  • CVE-2026-119986highHeap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
  • CVE-2026-119985highIncorrect authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.
  • CVE-2026-119983highServer-side request forgery (ssrf) in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
  • CVE-2026-119981highMissing authentication for critical function in Visual Studio Code allows an authorized attacker to elevate privileges locally.
  • CVE-2026-119975highImproper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to execute code over a network.
  • CVE-2026-119974highTime-of-check time-of-use (toctou) race condition in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
  • CVE-2026-119969highHeap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
  • CVE-2026-119967highUse after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.
  • CVE-2026-119966highInteger overflow or wraparound in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
  • CVE-2026-119964highDouble free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
  • CVE-2026-119963highDouble free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
  • CVE-2026-119962highDouble free in Windows Cred SSProvider Protocol allows an unauthorized attacker to execute code over a network.
  • CVE-2026-119961highConcurrent execution using shared resource with improper synchronization ('race condition') in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.
  • CVE-2026-119960highUse of uninitialized resource in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
  • CVE-2026-119957highDouble free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
  • CVE-2026-119954highAbsolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
  • CVE-2026-119953highUse after free in Windows DNS allows an authorized attacker to elevate privileges locally.
  • CVE-2026-119952highObservable timing discrepancy in Windows Schannel allows an unauthorized attacker to execute code over a network.
  • CVE-2026-119951highUse after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.
  • CVE-2026-119950highHeap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to elevate privileges over a network.
  • CVE-2026-119948highStack-based buffer overflow in Windows Active Directory allows an authorized attacker to execute code over a network.
  • CVE-2026-119947highUse after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
  • CVE-2026-119945highUse after free in Windows Modern Device Management (MDM) allows an unauthorized attacker to execute code over a network.
  • CVE-2026-119944highHeap-based buffer overflow in Windows Mobile Device Management allows an unauthorized attacker to elevate privileges over a network.
  • CVE-2026-119943highBuffer over-read in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
  • CVE-2026-119941highUntrusted pointer dereference in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges locally.
  • CVE-2026-119939highImproper privilege management in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
  • CVE-2026-119938highHeap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.
  • CVE-2026-119934highDouble free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
  • CVE-2026-119933highUse of uninitialized resource in Windows NTFS allows an authorized attacker to elevate privileges locally.
  • CVE-2026-119932highNull pointer dereference in Windows Remote Desktop allows an unauthorized attacker to deny service over a network.
  • CVE-2026-119931highTime-of-check time-of-use (toctou) race condition in Windows Text Services Framework allows an authorized attacker to elevate privileges locally.
  • CVE-2026-119929highUse after free in Windows Installer allows an authorized attacker to elevate privileges locally.
  • CVE-2026-119928highUse after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.
  • CVE-2026-119925highOut-of-bounds read in Windows Text Services Framework allows an authorized attacker to elevate privileges locally.
  • CVE-2026-119921highHeap-based buffer overflow in Windows Microsoft Account Sign-in Assistant allows an authorized attacker to elevate privileges locally.
  • CVE-2026-119919highHeap-based buffer overflow in Windows Distributed Transaction Coordinator allows an authorized attacker to elevate privileges locally.
  • CVE-2026-119917highHeap-based buffer overflow in Windows Distributed Transaction Coordinator allows an authorized attacker to elevate privileges locally.
  • CVE-2026-119916highHeap-based buffer overflow in Windows Input System allows an authorized attacker to elevate privileges locally.
  • CVE-2026-119913highImproper link resolution before file access ('link following') in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
  • CVE-2026-119908highInteger underflow (wrap or wraparound) in Windows Storage Spaces Controller allows an unauthorized attacker to execute code over a network.
  • CVE-2026-119907highUntrusted pointer dereference in Windows Function Discovery Resource Publication allows an authorized attacker to elevate privileges locally.
  • CVE-2026-119906highImproper neutralization of special elements used in an os command ('os command injection') in Windows Sandbox allows an authorized attacker to elevate privileges locally.
  • CVE-2026-119904highImproper control of generation of code ('code injection') in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.
  • CVE-2026-119903highImproper access control in Windows Installer allows an authorized attacker to elevate privileges locally.
  • CVE-2026-119900highOut-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
  • CVE-2026-119899highImproper access control in Windows Win32K allows an authorized attacker to elevate privileges locally.

Every Microsoft entry in CISA KEV

  1. CVE-2026-124194

    Added · due

    Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability

    Microsoft Office Outlook contains a missing user interaction for potentially unsafe action vulnerability that allows an unauthorized attacker to perform spoofing over a network.

  2. CVE-2026-96951

    Added · due

    Microsoft Windows Command Injection Vulnerability

    Microsoft Windows Shell contains a command injection vulnerability that allows an unauthorized attacker to bypass a security feature over a network.

  3. CVE-2026-65660

    Added · due

    Microsoft SharePoint Code Injection Vulnerability

    Microsoft SharePoint contains a code injection vulnerability which could allow an authorized attacker to execute code over a network.

  4. CVE-2026-85880

    Added · due

    Microsoft Windows Heap-Based Buffer Overflow Vulnerability

    Microsoft Windows Advanced Local Procedure Call contains a heap-based buffer overflow vulnerability that allows an attacker to elevate privileges locally.

  5. CVE-2026-81963

    Added · due

    Microsoft Windows Link Following Vulnerability

    Microsoft Windows Update Stack contains a link following vulnerability that allows a local attacker to escalate privileges locally up to SYSTEM.

  6. CVE-2019-1068

    Added · due

    Microsoft SQL Server Remote Code Execution Vulnerability

    Microsoft SQL Server contains a remote code execution vulnerability that could allow an attacker to execute code in the context of the SQL Server Database Engine service account.

  7. CVE-2026-55040

    Added · due

    Microsoft SharePoint Weak Authentication Vulnerability

    Microsoft SharePoint contains a weak authentication vulnerability which allows an unauthorized attacker to bypass a security feature over a network.

  8. CVE-2026-33824

    Added · due

    Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability

    Microsoft Internet Key Exchange (IKE) Service Extensions contains a double free vulnerability that could enable remote code execution.

  9. CVE-2026-68820

    Added · due

    Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

    Microsoft Windows Ancillary Function Driver for WinSock contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.

  10. CVE-2026-50522

    Added · due

    Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

    Microsoft SharePoint contains a deserialization of untrusted data vulnerability which could allow an unauthorized attacker to execute code over a network.

  11. CVE-2026-58644

    Added · due

    Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

    Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute code over a network.

  12. CVE-2026-56164

    Added · due

    Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability

    Microsoft SharePoint contains a missing authentication for critical function vulnerability that allows an unauthorized attacker to elevate privileges over a network.

  13. CVE-2026-56155

    Added · due

    Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability

    Microsoft Active Directory Federation Services contains an insufficient granularity of access control vulnerability that allows an authorized attacker to elevate privileges locally.

  14. CVE-2026-45659

    RansomwareAdded · due

    Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability

    Microsoft SharePoint Server contains a deserialization of untrusted data vulnerability which allows an authorized attacker to execute code over a network.

  15. CVE-2026-45498

    Added · due

    Microsoft Defender Denial of Service Vulnerability

    Microsoft Defender contains an unspecified vulnerability that allows for denial of service.

  16. CVE-2026-41091

    Added · due

    Microsoft Defender Link Following Vulnerability

    Microsoft Defender contains a link following vulnerability that allows an authorized attacker to elevate privileges locally.

  17. CVE-2010-0806

    Added · due

    Microsoft Internet Explorer Use-After-Free Vulnerability

    Microsoft Internet Explorer contains an use-after-free vulnerability that could allow remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object. The impacted product could…

  18. CVE-2010-0249

    Added · due

    Microsoft Internet Explorer Use-After-Free Vulnerability

    Microsoft Internet Explorer contains an use-after-free vulnerability that could allow remote attackers to execute arbitrary code by accessing a pointer associated with a deleted object. The impacted product could be end-of-life (EoL)…

  19. CVE-2009-1537

    Added · due

    Microsoft DirectX NULL Byte Overwrite Vulnerability

    Microsoft DirectX contains a NULL byte overwrite vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow which could allow remote attackers to execute arbitrary code via a crafted QuickTime media file.

  20. CVE-2008-4250

    Added · due

    Microsoft Windows Buffer Overflow Vulnerability

    Microsoft Windows contains a buffer overflow vulnerability in the Windows Server Service that allows remote attackers to execute arbitrary code via a crafted RPC request that triggers an overflow during path canonicalization.

  21. CVE-2026-42897

    Added · due

    Microsoft Exchange Server Cross-Site Scripting Vulnerability

    Microsoft Exchange Server contains a cross-site scripting vulnerability during web page generation in Outlook Web Access and when certain interaction conditions are met, arbitrary JavaScript can be executed in the browser context.

  22. CVE-2026-32202

    Added · due

    Microsoft Windows Protection Mechanism Failure Vulnerability

    Microsoft Windows Shell contains a protection mechanism failure vulnerability that allows an unauthorized attacker to perform spoofing over a network.

  23. CVE-2026-33825

    RansomwareAdded · due

    Microsoft Defender Insufficient Granularity of Access Control Vulnerability

    Microsoft Defender contains an insufficient granularity of access control vulnerability that could allow an authorized attacker to escalate privileges locally.

  24. CVE-2026-32201

    Added · due

    Microsoft SharePoint Server Improper Input Validation Vulnerability

    Microsoft SharePoint Server contains an improper input validation vulnerability that allows an unauthorized attacker to perform spoofing over a network.

  25. CVE-2009-0238

    Added · due

    Microsoft Office Remote Code Execution

    Microsoft Office Excel contains a remote code execution vulnerability that could allow an attacker to take complete control of an affected system if a user opens a specially crafted Excel file that includes a malformed object.

  26. CVE-2025-60710

    RansomwareAdded · due

    Microsoft Windows Link Following Vulnerability

    Microsoft Windows contains a link following vulnerability that allows for privilege escalation

  27. CVE-2023-36424

    Added · due

    Microsoft Windows Out-of-Bounds Read Vulnerability

    Microsoft Windows Common Log File System Driver contains an out-of-bounds read vulnerability that could allow a threat actor for privileges escalation

  28. CVE-2023-21529

    RansomwareAdded · due

    Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability

    Microsoft Exchange Server contains a deserialization of untrusted data that allows an authenticated attacker to achieve remote code execution.

  29. CVE-2012-1854

    Added · due

    Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability

    Microsoft Visual Basic for Applications (VBA) contains an insecure library loading vulnerability that could allow for remote code execution.

  30. CVE-2026-20963

    Added · due

    Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

    Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute code over a network.

  31. CVE-2008-0015

    Added · due

    Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability

    Microsoft Windows Video ActiveX Control contains a remote code execution vulnerability. An attacker could exploit the vulnerability by constructing a specially crafted Web page. When a user views the Web page, the vulnerability could allow…

  32. CVE-2024-43468

    Added · due

    Microsoft Configuration Manager SQL Injection Vulnerability

    Microsoft Configuration Manager contains an SQL injection vulnerability. An unauthenticated attacker could exploit this vulnerability by sending specially crafted requests to the target environment which are processed in an unsafe manner…

  33. CVE-2026-21533

    Added · due

    Microsoft Windows Improper Privilege Management Vulnerability

    Microsoft Windows Remote Desktop Services contains an improper privilege management vulnerability that could allow an authorized attacker to elevate privileges locally.

  34. CVE-2026-21525

    Added · due

    Microsoft Windows NULL Pointer Dereference Vulnerability

    Microsoft Windows Remote Access Connection Manager contains a NULL pointer dereference that could allow an unauthorized attacker to deny service locally.

  35. CVE-2026-21519

    Added · due

    Microsoft Windows Type Confusion Vulnerability

    Microsoft Desktop Windows Manager contains a type confusion vulnerability that could allow an authorized attacker to elevate privileges locally.

  36. CVE-2026-21514

    Added · due

    Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability

    Microsoft Office Word contains a reliance on untrusted inputs in a security decision vulnerability that could allow an authorized attacker to elevate privileges locally.

  37. CVE-2026-21513

    Added · due

    Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability

    Microsoft MSHTML Framework contains a protection mechanism failure vulnerability that could allow an unauthorized attacker to bypass a security feature over a network.

  38. CVE-2026-21510

    Added · due

    Microsoft Windows Shell Protection Mechanism Failure Vulnerability

    Microsoft Windows Shell contains a protection mechanism failure vulnerability that could allow an unauthorized attacker to bypass a security feature over a network.

  39. CVE-2026-21509

    Added · due

    Microsoft Office Security Feature Bypass Vulnerability

    Microsoft Office contains a security feature bypass vulnerability in which reliance on untrusted inputs in a security decision in Microsoft Office could allow an unauthorized attacker to bypass a security feature locally. Some of the…

  40. CVE-2026-20805

    Added · due

    Microsoft Windows Information Disclosure Vulnerability

    Microsoft Windows Desktop Windows Manager contains an information disclosure vulnerability that allows an authorized attacker to disclose information locally.

  41. CVE-2009-0556

    Added · due

    Microsoft Office PowerPoint Code Injection Vulnerability

    Microsoft Office PowerPoint contains a code injection vulnerability that allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an invalid index value that triggers memory corruption.

  42. CVE-2025-62221

    Added · due

    Microsoft Windows Use After Free Vulnerability

    Microsoft Windows Cloud Files Mini Filter Driver contains a use after free vulnerability that can allow an authorized attacker to elevate privileges locally.

  43. CVE-2025-62215

    Added · due

    Microsoft Windows Race Condition Vulnerability

    Microsoft Windows Kernel contains a race condition vulnerability that allows a local attacker with low-level privileges to escalate privileges. Successful exploitation of this vulnerability could enable the attacker to gain SYSTEM-level…

  44. CVE-2025-59287

    Added · due

    Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability

    Microsoft Windows Server Update Service (WSUS) contains a deserialization of untrusted data vulnerability that allows for remote code execution.

  45. CVE-2025-33073

    Added · due

    Microsoft Windows SMB Client Improper Access Control Vulnerability

    Microsoft Windows SMB Client contains an improper access control vulnerability that could allow for privilege escalation. An attacker could execute a specially crafted malicious script to coerce the victim machine to connect back to the…

  46. CVE-2025-59230

    Added · due

    Microsoft Windows Improper Access Control Vulnerability

    Microsoft Windows contains an improper access control vulnerability in Windows Remote Access Connection Manager which could allow an authorized attacker to elevate privileges locally.

  47. CVE-2025-24990

    Added · due

    Microsoft Windows Untrusted Pointer Dereference Vulnerability

    Microsoft Windows Agere Modem Driver contains an untrusted pointer dereference vulnerability that allows for privilege escalation. An attacker who successfully exploited this vulnerability could gain administrator privileges.

  48. CVE-2021-43226

    RansomwareAdded · due

    Microsoft Windows Privilege Escalation Vulnerability

    Microsoft Windows Common Log File System Driver contains a privilege escalation vulnerability that could allow a local, privileged attacker to bypass certain security mechanisms.

  49. CVE-2013-3918

    Added · due

    Microsoft Windows Out-of-Bounds Write Vulnerability

    Microsoft Windows contains an out-of-bounds write vulnerability in the InformationCardSigninHelper Class ActiveX control, icardie.dll. An attacker could exploit the vulnerability by constructing a specially crafted webpage. When a user…

  50. CVE-2011-3402

    Added · due

    Microsoft Windows Remote Code Execution Vulnerability

    Microsoft Windows Kernel contains an unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers that allows remote attackers to execute arbitrary code via crafted font data in a Word document or…

  51. CVE-2010-3962

    Added · due

    Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability

    Microsoft Internet Explorer contains an uninitialized memory corruption vulnerability that could allow for remote code execution. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product…

  52. CVE-2013-3893

    Added · due

    Microsoft Internet Explorer Resource Management Errors Vulnerability

    Microsoft Internet Explorer contains a memory corruption vulnerability that allows for remote code execution. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

  53. CVE-2007-0671

    Added · due

    Microsoft Office Excel Remote Code Execution Vulnerability

    Microsoft Office Excel contains a remote code execution vulnerability that can be exploited when a specially crafted Excel file is opened. This malicious file could be delivered as an email attachment or hosted on a malicious website. An…

  54. CVE-2025-49706

    RansomwareAdded · due

    Microsoft SharePoint Improper Authentication Vulnerability

    Microsoft SharePoint contains an improper authentication vulnerability that allows an authorized attacker to perform spoofing over a network. Successfully exploitation could allow an attacker to view sensitive information and make some…

  55. CVE-2025-49704

    RansomwareAdded · due

    Microsoft SharePoint Code Injection Vulnerability

    Microsoft SharePoint contains a code injection vulnerability that could allow an authorized attacker to execute code over a network. This vulnerability could be chained with CVE-2025-49706. CVE-2025-53770 is a patch bypass for…

  56. CVE-2025-53770

    RansomwareAdded · due

    Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

    Microsoft SharePoint Server on-premises contains a deserialization of untrusted data vulnerability that could allow an unauthorized attacker to execute code over a network. This vulnerability could be chained with CVE-2025-53771…

  57. CVE-2025-33053

    Added · due

    Microsoft Windows External Control of File Name or Path Vulnerability

    Microsoft Windows contains an external control of file name or path vulnerability that could allow an attacker to execute code from a remote WebDAV location specified by the WorkingDirectory attribute of Internet Shortcut files.

  58. CVE-2025-32709

    Added · due

    Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

    Microsoft Windows Ancillary Function Driver for WinSock contains a use-after-free vulnerability that allows an authorized attacker to escalate privileges to administrator.

  59. CVE-2025-32706

    Added · due

    Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability

    Microsoft Windows Common Log File System (CLFS) Driver contains a heap-based buffer overflow vulnerability that allows an authorized attacker to elevate privileges locally.

  60. CVE-2025-32701

    Added · due

    Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability

    Microsoft Windows Common Log File System (CLFS) Driver contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.

  61. CVE-2025-30400

    Added · due

    Microsoft Windows DWM Core Library Use-After-Free Vulnerability

    Microsoft Windows DWM Core Library contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.

  62. CVE-2025-30397

    Added · due

    Microsoft Windows Scripting Engine Type Confusion Vulnerability

    Microsoft Windows Scripting Engine contains a type confusion vulnerability that allows an unauthorized attacker to execute code over a network via a specially crafted URL.

  63. CVE-2025-24054

    Added · due

    Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability

    Microsoft Windows NTLM contains an external control of file name or path vulnerability that allows an unauthorized attacker to perform spoofing over a network.

  64. CVE-2025-29824

    RansomwareAdded · due

    Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability

    Microsoft Windows Common Log File System (CLFS) Driver contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.

  65. CVE-2025-26633

    RansomwareAdded · due

    Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability

    Microsoft Windows Management Console (MMC) contains an improper neutralization vulnerability that allows an unauthorized attacker to bypass a security feature locally.

  66. CVE-2025-24993

    Added · due

    Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability

    Microsoft Windows New Technology File System (NTFS) contains a heap-based buffer overflow vulnerability that allows an unauthorized attacker to execute code locally.

  67. CVE-2025-24991

    Added · due

    Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability

    Microsoft Windows New Technology File System (NTFS) contains an out-of-bounds read vulnerability that allows an authorized attacker to disclose information locally.

  68. CVE-2025-24985

    Added · due

    Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability

    Microsoft Windows Fast FAT File System Driver contains an integer overflow or wraparound vulnerability that allows an unauthorized attacker to execute code locally.

  69. CVE-2025-24984

    Added · due

    Microsoft Windows NTFS Information Disclosure Vulnerability

    Microsoft Windows New Technology File System (NTFS) contains an insertion of sensitive Information into log file vulnerability that allows an unauthorized attacker to disclose information with a physical attack. An attacker who…

  70. CVE-2025-24983

    Added · due

    Microsoft Windows Win32k Use-After-Free Vulnerability

    Microsoft Windows Win32 Kernel Subsystem contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.

  71. CVE-2018-8639

    RansomwareAdded · due

    Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability

    Microsoft Windows Win32k contains an improper resource shutdown or release vulnerability that allows for local, authenticated privilege escalation. An attacker who successfully exploited this vulnerability could run arbitrary code in…

  72. CVE-2024-49035

    Added · due

    Microsoft Partner Center Improper Access Control Vulnerability

    Microsoft Partner Center contains an improper access control vulnerability that allows an attacker to escalate privileges.

  73. CVE-2025-24989

    Added · due

    Microsoft Power Pages Improper Access Control Vulnerability

    Microsoft Power Pages contains an improper access control vulnerability that allows an unauthorized attacker to elevate privileges over a network potentially bypassing the user registration control.

  74. CVE-2025-21418

    Added · due

    Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability

    Microsoft Windows Ancillary Function Driver for WinSock contains a heap-based buffer overflow vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges.

  75. CVE-2025-21391

    Added · due

    Microsoft Windows Storage Link Following Vulnerability

    Microsoft Windows Storage contains a link following vulnerability that could allow for privilege escalation. This vulnerability could allow an attacker to delete data including data that results in the service being unavailable.

  76. CVE-2024-21413

    Added · due

    Microsoft Outlook Improper Input Validation Vulnerability

    Microsoft Outlook contains an improper input validation vulnerability that allows for remote code execution. Successful exploitation of this vulnerability would allow an attacker to bypass the Office Protected View and open in editing mode…

  77. CVE-2024-29059

    Added · due

    Microsoft .NET Framework Information Disclosure Vulnerability

    Microsoft .NET Framework contains an information disclosure vulnerability that exposes the ObjRef URI to an attacker, ultimately enabling remote code execution.

  78. CVE-2025-21335

    Added · due

    Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

    Microsoft Windows Hyper-V NT Kernel Integration VSP contains a use-after-free vulnerability that allows a local attacker to gain SYSTEM privileges.

  79. CVE-2025-21334

    Added · due

    Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

    Microsoft Windows Hyper-V NT Kernel Integration VSP contains a use-after-free vulnerability that allows a local attacker to gain SYSTEM privileges.

  80. CVE-2025-21333

    Added · due

    Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability

    Microsoft Windows Hyper-V NT Kernel Integration VSP contains a heap-based buffer overflow vulnerability that allows a local attacker to gain SYSTEM privileges.

  81. CVE-2024-35250

    Added · due

    Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability

    Microsoft Windows Kernel-Mode Driver contains an untrusted pointer dereference vulnerability that allows a local attacker to escalate privileges.

  82. CVE-2024-49138

    Added · due

    Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability

    Microsoft Windows Common Log File System (CLFS) driver contains a heap-based buffer overflow vulnerability that allows a local attacker to escalate privileges.

  83. CVE-2024-49039

    RansomwareAdded · due

    Microsoft Windows Task Scheduler Privilege Escalation Vulnerability

    Microsoft Windows Task Scheduler contains a privilege escalation vulnerability that can allow an attacker-provided, local application to escalate privileges outside of its AppContainer, and access privileged RPC functions.

  84. CVE-2024-43451

    Added · due

    Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability

    Microsoft Windows contains an NTLMv2 hash spoofing vulnerability that could result in disclosing a user's NTLMv2 hash to an attacker via a file open operation. The attacker could then leverage this hash to impersonate that user.

  85. CVE-2024-38094

    RansomwareAdded · due

    Microsoft SharePoint Deserialization Vulnerability

    Microsoft SharePoint contains a deserialization vulnerability that allows for remote code execution.

  86. CVE-2024-30088

    RansomwareAdded · due

    Microsoft Windows Kernel TOCTOU Race Condition Vulnerability

    Microsoft Windows Kernel contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability that could allow for privilege escalation.

  87. CVE-2024-43573

    Added · due

    Microsoft Windows MSHTML Platform Spoofing Vulnerability

    Microsoft Windows MSHTML Platform contains an unspecified spoofing vulnerability which can lead to a loss of confidentiality.

  88. CVE-2024-43572

    Added · due

    Microsoft Windows Management Console Remote Code Execution Vulnerability

    Microsoft Windows Management Console contains unspecified vulnerability that allows for remote code execution.

  89. CVE-2020-0618

    RansomwareAdded · due

    Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability

    Microsoft SQL Server Reporting Services contains a deserialization vulnerability when handling page requests incorrectly. An authenticated attacker can exploit this vulnerability to execute code in the context of the Report Server service…

  90. CVE-2024-43461

    Added · due

    Microsoft Windows MSHTML Platform Spoofing Vulnerability

    Microsoft Windows MSHTML Platform contains a user interface (UI) misrepresentation of critical information vulnerability that allows an attacker to spoof a web page. This vulnerability was exploited in conjunction with CVE-2024-38112.

  91. CVE-2024-38226

    Added · due

    Microsoft Publisher Protection Mechanism Failure Vulnerability

    Microsoft Publisher contains a protection mechanism failure vulnerability that allows attacker to bypass Office macro policies used to block untrusted or malicious files.

  92. CVE-2024-38217

    Added · due

    Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability

    Microsoft Windows Mark of the Web (MOTW) contains a protection mechanism failure vulnerability that allows an attacker to bypass MOTW-based defenses. This can result in a limited loss of integrity and availability of security features such…

  93. CVE-2024-38014

    Added · due

    Microsoft Windows Installer Improper Privilege Management Vulnerability

    Microsoft Windows Installer contains an improper privilege management vulnerability that could allow an attacker to gain SYSTEM privileges.

  94. CVE-2021-31196

    Added · due

    Microsoft Exchange Server Information Disclosure Vulnerability

    Microsoft Exchange Server contains an information disclosure vulnerability that allows for remote code execution.

  95. CVE-2024-38213

    Added · due

    Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

    Microsoft Windows SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the SmartScreen user experience via a malicious file.

  96. CVE-2024-38193

    Added · due

    Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability

    Microsoft Windows Ancillary Function Driver for WinSock contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges.

  97. CVE-2024-38189

    Added · due

    Microsoft Project Remote Code Execution Vulnerability

    Microsoft Project contains an unspecified vulnerability that allows for remote code execution via a malicious file.

  98. CVE-2024-38178

    Added · due

    Microsoft Windows Scripting Engine Memory Corruption Vulnerability

    Microsoft Windows Scripting Engine contains a memory corruption vulnerability that allows unauthenticated attacker to initiate remote code execution via a specially crafted URL.

  99. CVE-2024-38107

    Added · due

    Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability

    Microsoft Windows Power Dependency Coordinator contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to obtain SYSTEM privileges.

  100. CVE-2024-38106

    Added · due

    Microsoft Windows Kernel Privilege Escalation Vulnerability

    Microsoft Windows Kernel contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges. Successful exploitation of this vulnerability requires an attacker to win a race…

  101. CVE-2018-0824

    Added · due

    Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability

    Microsoft COM for Windows contains a deserialization of untrusted data vulnerability that allows for privilege escalation and remote code execution via a specially crafted file or script.

  102. CVE-2012-4792

    Added · due

    Microsoft Internet Explorer Use-After-Free Vulnerability

    Microsoft Internet Explorer contains a use-after-free vulnerability that allows a remote attacker to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as…

  103. CVE-2024-38112

    Added · due

    Microsoft Windows MSHTML Platform Spoofing Vulnerability

    Microsoft Windows MSHTML Platform contains a spoofing vulnerability that has a high impact to confidentiality, integrity, and availability.

  104. CVE-2024-38080

    Added · due

    Microsoft Windows Hyper-V Privilege Escalation Vulnerability

    Microsoft Windows Hyper-V contains a privilege escalation vulnerability that allows a local attacker with user permissions to gain SYSTEM privileges.

  105. CVE-2024-26169

    RansomwareAdded · due

    Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability

    Microsoft Windows Error Reporting Service contains an improper privilege management vulnerability that allows a local attacker with user permissions to gain SYSTEM privileges.

  106. CVE-2024-30051

    RansomwareAdded · due

    Microsoft DWM Core Library Privilege Escalation Vulnerability

    Microsoft DWM Core Library contains a privilege escalation vulnerability that allows an attacker to gain SYSTEM privileges.

  107. CVE-2024-30040

    Added · due

    Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability

    Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for a security feature bypass.

  108. CVE-2024-29988

    Added · due

    Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability

    Microsoft SmartScreen Prompt contains a security feature bypass vulnerability that allows an attacker to bypass the Mark of the Web (MotW) feature. This vulnerability can be chained with CVE-2023-38831 and CVE-2024-21412 to execute a…

  109. CVE-2022-38028

    Added · due

    Microsoft Windows Print Spooler Privilege Escalation Vulnerability

    Microsoft Windows Print Spooler service contains a privilege escalation vulnerability. An attacker may modify a JavaScript constraints file and execute it with SYSTEM-level permissions.

  110. CVE-2023-24955

    RansomwareAdded · due

    Microsoft SharePoint Server Code Injection Vulnerability

    Microsoft SharePoint Server contains a code injection vulnerability that allows an authenticated attacker with Site Owner privileges to execute code remotely.

  111. CVE-2024-21338

    RansomwareAdded · due

    Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability

    Microsoft Windows Kernel contains an exposed IOCTL with insufficient access control vulnerability within the IOCTL (input and output control) dispatcher in appid.sys that allows a local attacker to achieve privilege escalation.

  112. CVE-2023-29360

    Added · due

    Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability

    Microsoft Streaming Service contains an untrusted pointer dereference vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges.

  113. CVE-2024-21410

    Added · due

    Microsoft Exchange Server Privilege Escalation Vulnerability

    Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation.

  114. CVE-2024-21412

    RansomwareAdded · due

    Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability

    Microsoft Windows Internet Shortcut Files contains an unspecified vulnerability that allows for a security feature bypass.

  115. CVE-2024-21351

    Added · due

    Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

    Microsoft Windows SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the SmartScreen user experience and inject code to potentially gain code execution, which could lead to some data exposure…

  116. CVE-2023-29357

    RansomwareAdded · due

    Microsoft SharePoint Server Privilege Escalation Vulnerability

    Microsoft SharePoint Server contains an unspecified vulnerability that allows an unauthenticated attacker, who has gained access to spoofed JWT authentication tokens, to use them for executing a network attack. This attack bypasses…

  117. CVE-2023-36584

    Added · due

    Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability

    Microsoft Windows Mark of the Web (MOTW) contains a security feature bypass vulnerability resulting in a limited loss of integrity and availability of security features.

  118. CVE-2023-36036

    Added · due

    Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability

    Microsoft Windows Cloud Files Mini Filter Driver contains a privilege escalation vulnerability that could allow an attacker to gain SYSTEM privileges.

  119. CVE-2023-36033

    Added · due

    Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability

    Microsoft Windows Desktop Window Manager (DWM) Core Library contains an unspecified vulnerability that allows for privilege escalation.

  120. CVE-2023-36025

    Added · due

    Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

    Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to bypass Windows Defender SmartScreen checks and their associated prompts.

  121. CVE-2023-41763

    Added · due

    Microsoft Skype for Business Privilege Escalation Vulnerability

    Microsoft Skype for Business contains an unspecified vulnerability that allows for privilege escalation.

  122. CVE-2023-36563

    Added · due

    Microsoft WordPad Information Disclosure Vulnerability

    Microsoft WordPad contains an unspecified vulnerability that allows for information disclosure.

  123. CVE-2023-28229

    Added · due

    Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability

    Microsoft Windows Cryptographic Next Generation (CNG) Key Isolation Service contains an unspecified vulnerability that allows an attacker to gain specific limited SYSTEM privileges.

  124. CVE-2023-36802

    Added · due

    Microsoft Streaming Service Proxy Privilege Escalation Vulnerability

    Microsoft Streaming Service Proxy contains an unspecified vulnerability that allows for privilege escalation.

  125. CVE-2023-36761

    Added · due

    Microsoft Word Information Disclosure Vulnerability

    Microsoft Word contains an unspecified vulnerability that allows for information disclosure.

  126. CVE-2023-38180

    Added · due

    Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability

    Microsoft .NET Core and Visual Studio contain an unspecified vulnerability that allows for denial-of-service (DoS).

  127. CVE-2023-36884

    RansomwareAdded · due

    Microsoft Windows Search Remote Code Execution Vulnerability

    Microsoft Windows Search contains an unspecified vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file, leading to remote code execution.

  128. CVE-2023-36874

    Added · due

    Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability

    Microsoft Windows Error Reporting Service contains an unspecified vulnerability that allows for privilege escalation.

  129. CVE-2023-35311

    Added · due

    Microsoft Outlook Security Feature Bypass Vulnerability

    Microsoft Outlook contains a security feature bypass vulnerability that allows an attacker to bypass the Microsoft Outlook Security Notice prompt.

  130. CVE-2023-32049

    Added · due

    Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability

    Microsoft Windows Defender SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the Open File - Security Warning prompt.

  131. CVE-2023-32046

    Added · due

    Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability

    Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for privilege escalation.

  132. CVE-2016-0165

    Added · due

    Microsoft Win32k Privilege Escalation Vulnerability

    Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.

  133. CVE-2023-29336

    Added · due

    Microsoft Win32K Privilege Escalation Vulnerability

    Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation up to SYSTEM privileges.

  134. CVE-2023-28252

    RansomwareAdded · due

    Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

    Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.

  135. CVE-2019-1388

    RansomwareAdded · due

    Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability

    Microsoft Windows Certificate Dialog contains a privilege escalation vulnerability, allowing attackers to run processes in an elevated context.

  136. CVE-2013-3163

    Added · due

    Microsoft Internet Explorer Memory Corruption Vulnerability

    Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause a denial of service via a crafted website.

  137. CVE-2023-24880

    RansomwareAdded · due

    Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

    Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file.

  138. CVE-2023-23397

    Added · due

    Microsoft Office Outlook Privilege Escalation Vulnerability

    Microsoft Office Outlook contains a privilege escalation vulnerability that allows for a NTLM Relay attack against another service to authenticate as the user.

  139. CVE-2023-23376

    RansomwareAdded · due

    Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

    Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.

  140. CVE-2023-21823

    Added · due

    Microsoft Windows Graphic Component Privilege Escalation Vulnerability

    Microsoft Windows Graphic Component contains an unspecified vulnerability that allows for privilege escalation.

  141. CVE-2023-21715

    Added · due

    Microsoft Office Publisher Security Feature Bypass Vulnerability

    Microsoft Office Publisher contains a security feature bypass vulnerability that allows for a local, authenticated attack on a targeted system.

  142. CVE-2023-21674

    Added · due

    Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability

    Microsoft Windows Advanced Local Procedure Call (ALPC) contains an unspecified vulnerability that allows for privilege escalation.

  143. CVE-2022-41080

    RansomwareAdded · due

    Microsoft Exchange Server Privilege Escalation Vulnerability

    Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. This vulnerability is chainable with CVE-2022-41082, which allows for remote code execution.

  144. CVE-2022-44698

    RansomwareAdded · due

    Microsoft Defender SmartScreen Security Feature Bypass Vulnerability

    Microsoft Defender SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file.

  145. CVE-2022-41049

    Added · due

    Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability

    Microsoft Windows Mark of the Web (MOTW) contains a security feature bypass vulnerability resulting in a limited loss of integrity and availability of security features.

  146. CVE-2022-41128

    Added · due

    Microsoft Windows Scripting Languages Remote Code Execution Vulnerability

    Microsoft Windows contains an unspecified vulnerability in the JScript9 scripting language which allows for remote code execution.

  147. CVE-2022-41125

    Added · due

    Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability

    Microsoft Windows Cryptographic Next Generation (CNG) Key Isolation Service contains an unspecified vulnerability that allows an attacker to gain SYSTEM-level privileges.

  148. CVE-2022-41091

    RansomwareAdded · due

    Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability

    Microsoft Windows Mark of the Web (MOTW) contains a security feature bypass vulnerability resulting in a limited loss of integrity and availability of security features.

  149. CVE-2022-41073

    RansomwareAdded · due

    Microsoft Windows Print Spooler Privilege Escalation Vulnerability

    Microsoft Windows Print Spooler contains an unspecified vulnerability that allows an attacker to gain SYSTEM-level privileges.

  150. CVE-2022-41033

    Added · due

    Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability

    Microsoft Windows COM+ Event System Service contains an unspecified vulnerability that allows for privilege escalation.

  151. CVE-2022-41082

    RansomwareAdded · due

    Microsoft Exchange Server Remote Code Execution Vulnerability

    Microsoft Exchange Server contains an unspecified vulnerability that allows for authenticated remote code execution. Dubbed "ProxyNotShell," this vulnerability is chainable with CVE-2022-41040 which allows for the remote code execution.

  152. CVE-2022-41040

    RansomwareAdded · due

    Microsoft Exchange Server Server-Side Request Forgery Vulnerability

    Microsoft Exchange Server allows for server-side request forgery. Dubbed "ProxyNotShell," this vulnerability is chainable with CVE-2022-41082 which allows for remote code execution.

  153. CVE-2010-2568

    Added · due

    Microsoft Windows Remote Code Execution Vulnerability

    Microsoft Windows incorrectly parses shortcuts in such a way that malicious code may be executed when the operating system displays the icon of a malicious shortcut file. An attacker who successfully exploited this vulnerability could…

  154. CVE-2022-37969

    RansomwareAdded · due

    Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

    Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.

  155. CVE-2022-26923

    Added · due

    Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

    An authenticated user could manipulate attributes on computer accounts they own or manage, and acquire a certificate from Active Directory Certificate Services that would allow for privilege escalation to SYSTEM.

  156. CVE-2022-21971

    Added · due

    Microsoft Windows Runtime Remote Code Execution Vulnerability

    Microsoft Windows Runtime contains an unspecified vulnerability that allows for remote code execution.

  157. CVE-2022-34713

    Added · due

    Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

    A remote code execution vulnerability exists when Microsoft Windows MSDT is called using the URL protocol from a calling application.

  158. CVE-2022-22047

    Added · due

    Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability

    Microsoft Windows CSRSS contains an unspecified vulnerability that allows for privilege escalation to SYSTEM privileges.

  159. CVE-2022-26925

    Added · due

    Microsoft Windows LSA Spoofing Vulnerability

    Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability where an attacker can coerce the domain controller to authenticate to the attacker using NTLM.

  160. CVE-2022-30190

    RansomwareAdded · due

    Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

    A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run code with the privileges of the calling…

  161. CVE-2013-1331

    Added · due

    Microsoft Office Buffer Overflow Vulnerability

    Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via crafted PNG data in an Office document.

  162. CVE-2012-4969

    Added · due

    Microsoft Internet Explorer Use-After-Free Vulnerability

    Microsoft Internet Explorer contains a use-after-free vulnerability that allows remote attackers to execute code via a crafted web site.

  163. CVE-2012-1889

    Added · due

    Microsoft XML Core Services Memory Corruption Vulnerability

    Microsoft XML Core Services contains a memory corruption vulnerability which could allow for remote code execution.

  164. CVE-2012-0151

    Added · due

    Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability

    The Authenticode Signature Verification function in Microsoft Windows (WinVerifyTrust) does not properly validate the digest of a signed portable executable (PE) file, which allows user-assisted remote attackers to execute code.

  165. CVE-2010-2572

    Added · due

    Microsoft PowerPoint Buffer Overflow Vulnerability

    Microsoft PowerPoint contains a buffer overflow vulnerability that alllows for remote code execution.

  166. CVE-2009-0563

    Added · due

    Microsoft Office Buffer Overflow Vulnerability

    Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via a Word document with a crafted tag containing an invalid length field.

  167. CVE-2009-0557

    Added · due

    Microsoft Office Object Record Corruption Vulnerability

    Microsoft Office contains an object record corruption vulnerability that allows remote attackers to execute code via a crafted Excel file with a malformed record object.

  168. CVE-2006-2492

    Added · due

    Microsoft Word Malformed Object Pointer Vulnerability

    Microsoft Word and Microsoft Works Suites contain a malformed object pointer which allows attackers to execute code.

  169. CVE-2016-7256

    Added · due

    Microsoft Windows Open Type Font Remote Code Execution Vulnerability

    A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploits this vulnerability could take control of the affected system.

  170. CVE-2016-3393

    Added · due

    Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability

    A remote code execution vulnerability exists due to the way the Windows GDI component handles objects in the memory. An attacker who successfully exploits this vulnerability could take control of the affected system.

  171. CVE-2016-0034

    RansomwareAdded · due

    Microsoft Silverlight Runtime Remote Code Execution Vulnerability

    Microsoft Silverlight mishandles negative offsets during decoding, which allows attackers to execute remote code or cause a denial-of-service (DoS).

  172. CVE-2015-6175

    Added · due

    Microsoft Windows Kernel Privilege Escalation Vulnerability

    The kernel in Microsoft Windows contains a vulnerability that allows local users to gain privileges via a crafted application.

  173. CVE-2015-2425

    Added · due

    Microsoft Internet Explorer Memory Corruption Vulnerability

    Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).

  174. CVE-2015-2360

    Added · due

    Microsoft Win32k Privilege Escalation Vulnerability

    Win32k.sys in the kernel-mode drivers in Microsoft Windows allows local users to gain privileges or cause denial-of-service (DoS).

  175. CVE-2015-1769

    Added · due

    Microsoft Windows Mount Manager Privilege Escalation Vulnerability

    A privilege escalation vulnerability exists when the Windows Mount Manager component improperly processes symbolic links.

  176. CVE-2015-1671

    Added · due

    Microsoft Windows Remote Code Execution Vulnerability

    A remote code execution vulnerability exists when components of Windows, .NET Framework, Office, Lync, and Silverlight fail to properly handle TrueType fonts.

  177. CVE-2015-0071

    Added · due

    Microsoft Internet Explorer ASLR Bypass Vulnerability

    Microsoft Internet Explorer allows remote attackers to bypass the address space layout randomization (ASLR) protection mechanism via a crafted web site.

  178. CVE-2015-0016

    Added · due

    Microsoft Windows TS WebProxy Directory Traversal Vulnerability

    Directory traversal vulnerability in the TS WebProxy (TSWbPrxy) component in Microsoft Windows allows remote attackers to escalate privileges.

  179. CVE-2014-4148

    Added · due

    Microsoft Windows Remote Code Execution Vulnerability

    A remote code execution vulnerability exists when the Windows kernel-mode driver improperly handles TrueType fonts.

  180. CVE-2014-4123

    Added · due

    Microsoft Internet Explorer Privilege Escalation Vulnerability

    Microsoft Internet Explorer contains an unspecified vulnerability that allows remote attackers to gain privileges via a crafted web site.

  181. CVE-2014-4077

    Added · due

    Microsoft IME Japanese Privilege Escalation Vulnerability

    Microsoft Input Method Editor (IME) Japanese is a keyboard with Japanese characters that can be enabled on Windows systems as it is included by default (with the default set as disabled). IME Japanese contains an unspecified vulnerability…

  182. CVE-2014-2817

    Added · due

    Microsoft Internet Explorer Privilege Escalation Vulnerability

    Microsoft Internet Explorer cotains an unspecified vulnerability that allows remote attackers to gain privileges via a crafted web site.

  183. CVE-2013-7331

    Added · due

    Microsoft Internet Explorer Information Disclosure Vulnerability

    An information disclosure vulnerability exists in Internet Explorer which allows resources loaded into memory to be queried. This vulnerability could allow an attacker to detect anti-malware applications.

  184. CVE-2013-3896

    Added · due

    Microsoft Silverlight Information Disclosure Vulnerability

    Microsoft Silverlight does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application.

  185. CVE-2013-0074

    RansomwareAdded · due

    Microsoft Silverlight Double Dereference Vulnerability

    Microsoft Silverlight does not properly validate pointers during HTML object rendering, which allows remote attackers to execute code via a crafted Silverlight application.

  186. CVE-2018-8611

    Added · due

    Microsoft Windows Kernel Privilege Escalation Vulnerability

    A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory.

  187. CVE-2017-8543

    Added · due

    Microsoft Windows Search Remote Code Execution Vulnerability

    Microsoft Windows allows an attacker to take control of the affected system when Windows Search fails to handle objects in memory.

  188. CVE-2017-0210

    Added · due

    Microsoft Internet Explorer Privilege Escalation Vulnerability

    A privilege escalation vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information.

  189. CVE-2017-0149

    Added · due

    Microsoft Internet Explorer Memory Corruption Vulnerability

    Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause a denial-of-service (DoS) via a crafted website.

  190. CVE-2017-0147

    RansomwareAdded · due

    Microsoft Windows SMBv1 Information Disclosure Vulnerability

    The SMBv1 server in Microsoft Windows allows remote attackers to obtain sensitive information from process memory via a crafted packet.

  191. CVE-2017-0022

    Added · due

    Microsoft XML Core Services Information Disclosure Vulnerability

    Microsoft XML Core Services (MSXML) improperly handles objects in memory, allowing attackers to test for files on disk via a crafted web site.

  192. CVE-2017-0005

    Added · due

    Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability

    The Graphics Device Interface (GDI) in Microsoft Windows allows local users to gain privileges via a crafted application.

  193. CVE-2016-3351

    RansomwareAdded · due

    Microsoft Internet Explorer and Edge Information Disclosure Vulnerability

    An information disclosure vulnerability exists in the way that certain functions in Internet Explorer and Edge handle objects in memory. The vulnerability could allow an attacker to detect specific files on the user's computer.

  194. CVE-2016-3298

    Added · due

    Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability

    An information disclosure vulnerability exists when the Microsoft Internet Messaging API improperly handles objects in memory. An attacker who successfully exploited this vulnerability could allow the attacker to test for the presence of…

  195. CVE-2016-0162

    Added · due

    Microsoft Internet Explorer Information Disclosure Vulnerability

    An information disclosure vulnerability exists when Internet Explorer does not properly handle JavaScript. The vulnerability could allow an attacker to detect specific files on the user's computer.

  196. CVE-2020-1027

    Added · due

    Microsoft Windows Kernel Privilege Escalation Vulnerability

    An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.

  197. CVE-2020-0638

    RansomwareAdded · due

    Microsoft Update Notification Manager Privilege Escalation Vulnerability

    Microsoft Update Notification Manager contains an unspecified vulnerability that allows for privilege escalation.

  198. CVE-2019-1385

    RansomwareAdded · due

    Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability

    A privilege escalation vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.

  199. CVE-2019-1130

    RansomwareAdded · due

    Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability

    A privilege escalation vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links.

  200. CVE-2019-0880

    Added · due

    Microsoft Windows Privilege Escalation Vulnerability

    A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited the vulnerability could elevate privileges on an affected system from low-integrity to medium-integrity.

  201. CVE-2019-0703

    Added · due

    Microsoft Windows SMB Information Disclosure Vulnerability

    An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, which could lead to information disclosure from the server.

  202. CVE-2019-0676

    Added · due

    Microsoft Internet Explorer Information Disclosure Vulnerability

    An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory. An attacker who successfully exploited this vulnerability could test for the presence of files on disk.

  203. CVE-2018-8589

    Added · due

    Microsoft Win32k Privilege Escalation Vulnerability

    A privilege escalation vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited this vulnerability could run remote code in the security context of the local system.

  204. CVE-2014-4113

    Added · due

    Microsoft Win32k Privilege Escalation Vulnerability

    Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.

  205. CVE-2014-0322

    Added · due

    Microsoft Internet Explorer Use-After-Free Vulnerability

    Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute code.

  206. CVE-2022-26904

    Added · due

    Microsoft Windows User Profile Service Privilege Escalation Vulnerability

    Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.

  207. CVE-2022-21919

    Added · due

    Microsoft Windows User Profile Service Privilege Escalation Vulnerability

    Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.

  208. CVE-2021-41357

    Added · due

    Microsoft Win32k Privilege Escalation Vulnerability

    Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.

  209. CVE-2021-40450

    Added · due

    Microsoft Win32k Privilege Escalation Vulnerability

    Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.

  210. CVE-2022-22718

    Added · due

    Microsoft Windows Print Spooler Privilege Escalation Vulnerability

    Microsoft Windows Print Spooler contains an unspecified vulnerability which allow for privilege escalation.

  211. CVE-2022-24521

    RansomwareAdded · due

    Microsoft Windows CLFS Driver Privilege Escalation Vulnerability

    Microsoft Windows Common Log File System (CLFS) Driver contains an unspecified vulnerability that allows for privilege escalation.

  212. CVE-2015-2502

    Added · due

    Microsoft Internet Explorer Memory Corruption Vulnerability

    Microsoft Internet Explorer contains a memory corruption vulnerability that allows an attacker to execute code or cause a denial-of-service (DoS).

  213. CVE-2021-42287

    RansomwareAdded · due

    Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

    Microsoft Active Directory Domain Services contains an unspecified vulnerability that allows for privilege escalation.

  214. CVE-2021-42278

    RansomwareAdded · due

    Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

    Microsoft Active Directory Domain Services contains an unspecified vulnerability that allows for privilege escalation.

  215. CVE-2021-31166

    Added · due

    Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability

    Microsoft HTTP Protocol Stack contains a vulnerability in http.sys that allows for remote code execution.

  216. CVE-2017-0148

    RansomwareAdded · due

    Microsoft SMBv1 Server Remote Code Execution Vulnerability

    The SMBv1 server in Microsoft allows remote attackers to execute arbitrary code via crafted packets.

  217. CVE-2021-34484

    Added · due

    Microsoft Windows User Profile Service Privilege Escalation Vulnerability

    Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.

  218. CVE-2021-38646

    RansomwareAdded · due

    Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

    Microsoft Office Access Connectivity Engine contains an unspecified vulnerability which can allow for remote code execution.

  219. CVE-2021-34486

    Added · due

    Microsoft Windows Event Tracing Privilege Escalation Vulnerability

    Microsoft Windows Event Tracing contains an unspecified vulnerability which can allow for privilege escalation.

  220. CVE-2018-8440

    RansomwareAdded · due

    Microsoft Windows Privilege Escalation Vulnerability

    An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).

  221. CVE-2018-8406

    RansomwareAdded · due

    Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability

    An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory.

  222. CVE-2018-8405

    RansomwareAdded · due

    Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability

    An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory.

  223. CVE-2017-0213

    RansomwareAdded · due

    Microsoft Windows Privilege Escalation Vulnerability

    Microsoft Windows COM Aggregate Marshaler allows for privilege escalation when an attacker runs a specially crafted application.

  224. CVE-2017-0059

    Added · due

    Microsoft Internet Explorer Information Disclosure Vulnerability

    Microsoft Internet Explorer allow remote attackers to obtain sensitive information from process memory via a crafted web site.

  225. CVE-2017-0037

    Added · due

    Microsoft Edge and Internet Explorer Type Confusion Vulnerability

    Microsoft Edge and Internet Explorer have a type confusion vulnerability in mshtml.dll, which allows remote code execution.

  226. CVE-2016-7201

    Added · due

    Microsoft Edge Memory Corruption Vulnerability

    The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site.

  227. CVE-2016-7200

    Added · due

    Microsoft Edge Memory Corruption Vulnerability

    The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site.

  228. CVE-2016-0189

    RansomwareAdded · due

    Microsoft Internet Explorer Memory Corruption Vulnerability

    The Microsoft JScript nd VBScript engines, as used in Internet Explorer and other products, allow attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site.

  229. CVE-2016-0151

    RansomwareAdded · due

    Microsoft Windows CSRSS Security Feature Bypass Vulnerability

    The Client-Server Run-time Subsystem (CSRSS) in Microsoft mismanages process tokens, which allows local users to gain privileges via a crafted application.

  230. CVE-2016-0040

    Added · due

    Microsoft Windows Kernel Privilege Escalation Vulnerability

    The kernel in Microsoft Windows allows local users to gain privileges via a crafted application.

  231. CVE-2015-2426

    Added · due

    Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability

    A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially crafted OpenType fonts.

  232. CVE-2015-2419

    Added · due

    Microsoft Internet Explorer Memory Corruption Vulnerability

    JScript in Microsoft Internet Explorer allows remote attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site.

  233. CVE-2015-1770

    Added · due

    Microsoft Office Uninitialized Memory Use Vulnerability

    Microsoft Office allows remote attackers to execute arbitrary code via a crafted Office document.

  234. CVE-2013-3660

    Added · due

    Microsoft Win32k Privilege Escalation Vulnerability

    The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft does not properly initialize a pointer for the next object in a certain list, which allows local users to gain privileges.

  235. CVE-2013-2551

    RansomwareAdded · due

    Microsoft Internet Explorer Use-After-Free Vulnerability

    Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute remote code via a crafted web site that triggers access to a deleted object.

  236. CVE-2012-2539

    Added · due

    Microsoft Word Remote Code Execution Vulnerability

    Microsoft Word allows attackers to execute remote code or cause a denial-of-service (DoS) via crafted RTF data.

  237. CVE-2011-2005

    Added · due

    Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability

    afd.sys in the Ancillary Function Driver in Microsoft Windows does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application.

  238. CVE-2010-4398

    Added · due

    Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability

    Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows allows local users to gain privileges, and bypass the User Account Control (UAC) feature.

  239. CVE-2022-21999

    RansomwareAdded · due

    Microsoft Windows Print Spooler Privilege Escalation Vulnerability

    Microsoft Windows Print Spooler contains an unspecified vulnerability which can allow for privilege escalation.

  240. CVE-2019-0903

    Added · due

    Microsoft GDI Remote Code Execution Vulnerability

    A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system.

  241. CVE-2018-8414

    Added · due

    Microsoft Windows Shell Remote Code Execution Vulnerability

    A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths.

  242. CVE-2018-8373

    Added · due

    Microsoft Scripting Engine Memory Corruption Vulnerability

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer.

  243. CVE-2017-0146

    RansomwareAdded · due

    Microsoft Windows SMB Remote Code Execution Vulnerability

    The SMBv1 server in Microsoft Windows allows remote attackers to perform remote code execution.

  244. CVE-2014-6332

    Added · due

    Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability

    OleAut32.dll in OLE in Microsoft Windows allows remote attackers to remotely execute code via a crafted web site.

  245. CVE-2014-6324

    Added · due

    Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability

    The Kerberos Key Distribution Center (KDC) in Microsoft allows remote authenticated domain users to obtain domain administrator privileges.

  246. CVE-2019-1405

    RansomwareAdded · due

    Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability

    A privilege escalation vulnerability exists when the Windows UPnP service improperly allows COM object creation.

  247. CVE-2019-1322

    RansomwareAdded · due

    Microsoft Windows Privilege Escalation Vulnerability

    A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.

  248. CVE-2019-1315

    RansomwareAdded · due

    Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability

    A privilege escalation vulnerability exists when Windows Error Reporting manager improperly handles hard links. An attacker who successfully exploited this vulnerability could overwrite a targeted file leading to an elevated status.

  249. CVE-2019-1253

    RansomwareAdded · due

    Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability

    A privilege escalation vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.

  250. CVE-2019-1132

    Added · due

    Microsoft Win32k Privilege Escalation Vulnerability

    A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.

  251. CVE-2019-1129

    RansomwareAdded · due

    Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

    A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.

  252. CVE-2019-1069

    RansomwareAdded · due

    Microsoft Task Scheduler Privilege Escalation Vulnerability

    A privilege escalation vulnerability exists in the way the Task Scheduler Service validates certain file operations.

  253. CVE-2019-1064

    RansomwareAdded · due

    Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

    A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.

  254. CVE-2019-0841

    RansomwareAdded · due

    Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

    A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.

  255. CVE-2019-0543

    RansomwareAdded · due

    Microsoft Windows Privilege Escalation Vulnerability

    A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.

  256. CVE-2018-8120

    RansomwareAdded · due

    Microsoft Win32k Privilege Escalation Vulnerability

    A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.

  257. CVE-2017-0101

    RansomwareAdded · due

    Microsoft Windows Transaction Manager Privilege Escalation Vulnerability

    A privilege escalation vulnerability exists when the Windows Transaction Manager improperly handles objects in memory.

  258. CVE-2016-3309

    RansomwareAdded · due

    Microsoft Windows Kernel Privilege Escalation Vulnerability

    A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.

  259. CVE-2015-2546

    RansomwareAdded · due

    Microsoft Win32k Memory Corruption Vulnerability

    The kernel-mode driver in Microsoft Windows OS and Server allows local users to gain privileges via a crafted application.

  260. CVE-2021-41379

    RansomwareAdded · due

    Microsoft Windows Installer Privilege Escalation Vulnerability

    Microsoft Windows Installer contains an unspecified vulnerability that allows for privilege escalation.

  261. CVE-2019-1297

    Added · due

    Microsoft Excel Remote Code Execution Vulnerability

    A remote code execution vulnerability exists in Microsoft Excel when the software fails to properly handle objects in memory.

  262. CVE-2018-8581

    RansomwareAdded · due

    Microsoft Exchange Server Privilege Escalation Vulnerability

    A privilege escalation vulnerability exists in Microsoft Exchange Server. An attacker who successfully exploited this vulnerability could attempt to impersonate any other user of the Exchange server.

  263. CVE-2017-8540

    Added · due

    Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability

    The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold…

  264. CVE-2017-11826

    Added · due

    Microsoft Office Remote Code Execution Vulnerability

    A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the…

  265. CVE-2017-0261

    Added · due

    Microsoft Office Use-After-Free Vulnerability

    Microsoft Office contains a use-after-free vulnerability which can allow for remote code execution.

  266. CVE-2017-0001

    Added · due

    Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability

    The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to…

  267. CVE-2016-7262

    Added · due

    Microsoft Office Security Feature Bypass Vulnerability

    A security feature bypass vulnerability exists when Microsoft Office improperly handles input. An attacker who successfully exploited the vulnerability could execute arbitrary commands.

  268. CVE-2016-7193

    Added · due

    Microsoft Office Memory Corruption Vulnerability

    Microsoft Office contains a memory corruption vulnerability which can allow for remote code execution.

  269. CVE-2016-0099

    RansomwareAdded · due

    Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability

    A privilege escalation vulnerability exists in Microsoft Windows if the Windows Secondary Logon Service fails to properly manage request handles in memory. An attacker who successfully exploited this vulnerability could run arbitrary code…

  270. CVE-2015-2545

    Added · due

    Microsoft Office Malformed EPS File Vulnerability

    Microsoft Office allows remote attackers to execute arbitrary code via a crafted EPS image.

  271. CVE-2015-2424

    Added · due

    Microsoft PowerPoint Memory Corruption Vulnerability

    Microsoft PowerPoint allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document.

  272. CVE-2015-2387

    Added · due

    Microsoft ATM Font Driver Privilege Escalation Vulnerability

    ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server allows local users to gain privileges via a crafted application.

  273. CVE-2015-1701

    RansomwareAdded · due

    Microsoft Win32k Privilege Escalation Vulnerability

    An unspecified vulnerability exists in the Win32k.sys kernel-mode driver in Microsoft Windows Server that allows a local attacker to execute arbitrary code with elevated privileges.

  274. CVE-2015-1642

    Added · due

    Microsoft Office Memory Corruption Vulnerability

    Microsoft Office contains a memory corruption vulnerability that allows remote attackers to execute arbitrary code via a crafted document.

  275. CVE-2014-4114

    Added · due

    Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability

    A vulnerability exists in Windows Object Linking & Embedding (OLE) that could allow remote code execution if a user opens a file that contains a specially crafted OLE object.

  276. CVE-2013-5065

    Added · due

    Microsoft Windows Kernel Privilege Escalation Vulnerability

    Microsoft Windows NDProxy.sys in the kernel contains an improper input validation vulnerability which can allow a local attacker to escalate privileges.

  277. CVE-2013-3897

    Added · due

    Microsoft Internet Explorer Use-After-Free Vulnerability

    A use-after-free vulnerability exists within CDisplayPointer in Microsoft Internet Explorer that allows an attacker to remotely execute arbitrary code.

  278. CVE-2013-1347

    Added · due

    Microsoft Internet Explorer Remote Code Execution Vulnerability

    This vulnerability may corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user within Internet Explorer.

  279. CVE-2012-1856

    Added · due

    Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability

    The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office allows remote attackers to execute arbitrary code via a crafted (1) document or (2) web page that triggers system-state corruption.

  280. CVE-2011-1889

    Added · due

    Microsoft Forefront TMG Remote Code Execution Vulnerability

    A remote code execution vulnerability exists in the Forefront Threat Management Gateway (TMG) Firewall Client Winsock provider that could allow code execution in the security context of the client application.

  281. CVE-2010-3333

    Added · due

    Microsoft Office Stack-based Buffer Overflow Vulnerability

    A stack-based buffer overflow vulnerability exists in the parsing of RTF data in Microsoft Office and earlier allows an attacker to perform remote code execution.

  282. CVE-2010-0232

    Added · due

    Microsoft Windows Kernel Exception Handler Vulnerability

    The kernel in Microsoft Windows, when access to 16-bit applications is enabled on a 32-bit x86 platform, does not properly validate certain BIOS calls, which allows local users to gain privileges.

  283. CVE-2009-3129

    Added · due

    Microsoft Excel Featheader Record Memory Corruption Vulnerability

    Microsoft Office Excel allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset.

  284. CVE-2009-1123

    Added · due

    Microsoft Windows Improper Input Validation Vulnerability

    The kernel in Microsoft Windows does not properly validate changes to unspecified kernel objects, which allows local users to gain privileges via a crafted application.

  285. CVE-2004-0210

    Added · due

    Microsoft Windows Privilege Escalation Vulnerability

    A privilege elevation vulnerability exists in the POSIX subsystem. This vulnerability could allow a logged on user to take complete control of the system.

  286. CVE-2002-0367

    Added · due

    Microsoft Windows Privilege Escalation Vulnerability

    smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges.

  287. CVE-2017-8570

    Added · due

    Microsoft Office Remote Code Execution Vulnerability

    A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory.

  288. CVE-2017-0222

    Added · due

    Microsoft Internet Explorer Remote Code Execution Vulnerability

    A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory.

  289. CVE-2014-6352

    Added · due

    Microsoft Windows Code Injection Vulnerability

    Microsoft Windows allow remote attackers to execute arbitrary code via a crafted OLE object.

  290. CVE-2019-0752

    RansomwareAdded · due

    Microsoft Internet Explorer Type Confusion Vulnerability

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer

  291. CVE-2018-8174

    RansomwareAdded · due

    Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability

    A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution"

  292. CVE-2014-1761

    Added · due

    Microsoft Word Memory Corruption Vulnerability

    Microsoft Word contains a memory corruption vulnerability which when exploited could allow for remote code execution.

  293. CVE-2013-3906

    Added · due

    Microsoft Graphics Component Memory Corruption Vulnerability

    Microsoft Graphics Component contains a memory corruption vulnerability which can allow for remote code execution.

  294. CVE-2021-36934

    Added · due

    Microsoft Windows SAM Local Privilege Escalation Vulnerability

    If a Volume Shadow Copy (VSS) shadow copy of the system drive is available, users can read the SAM file which would allow any user to escalate privileges to SYSTEM level.

  295. CVE-2020-0796

    RansomwareAdded · due

    Microsoft SMBv3 Remote Code Execution Vulnerability

    A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute…

  296. CVE-2017-8464

    Added · due

    Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability

    Windows Shell in multiple versions of Microsoft Windows allows local users or remote attackers to execute arbitrary code via a crafted .LNK file

  297. CVE-2017-0263

    Added · due

    Microsoft Win32k Privilege Escalation Vulnerability

    Microsoft Win32k contains a privilege escalation vulnerability due to the Windows kernel-mode driver failing to properly handle objects in memory.

  298. CVE-2017-0262

    Added · due

    Microsoft Office Remote Code Execution Vulnerability

    A remote code execution vulnerability exists in Microsoft Office.

  299. CVE-2017-0145

    RansomwareAdded · due

    Microsoft SMBv1 Remote Code Execution Vulnerability

    The SMBv1 server in multiple Microsoft Windows versions allows remote attackers to execute arbitrary code via crafted packets.

  300. CVE-2017-0144

    RansomwareAdded · due

    Microsoft SMBv1 Remote Code Execution Vulnerability

    The SMBv1 server in multiple Microsoft Windows versions allows remote attackers to execute arbitrary code via crafted packets.

  301. CVE-2015-1635

    Added · due

    Microsoft HTTP.sys Remote Code Execution Vulnerability

    Microsoft HTTP protocol stack (HTTP.sys) contains a vulnerability that allows for remote code execution.

  302. CVE-2022-21882

    RansomwareAdded · due

    Microsoft Win32k Privilege Escalation Vulnerability

    Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.

  303. CVE-2020-0787

    RansomwareAdded · due

    Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability

    Microsoft Windows BITS is vulnerable to to a privilege elevation vulnerability if it improperly handles symbolic links. An actor can exploit this vulnerability to execute arbitrary code with system-level privileges.

  304. CVE-2014-1776

    Added · due

    Microsoft Internet Explorer Memory Corruption Vulnerability

    Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code in the context of the current user.

  305. CVE-2018-8453

    RansomwareAdded · due

    Microsoft Win32k Privilege Escalation Vulnerability

    Microsoft Windows Win32k contains a vulnerability that allows an attacker to escalate privileges.

  306. CVE-2021-33766

    Added · due

    Microsoft Exchange Server Information Disclosure

    Microsoft Exchange Server contains an information disclosure vulnerability which can allow an unauthenticated attacker to steal email traffic from target.

  307. CVE-2019-1458

    RansomwareAdded · due

    Microsoft Win32k Privilege Escalation Vulnerability

    A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k EoP.

  308. CVE-2013-3900

    Added · due

    Microsoft WinVerifyTrust function Remote Code Execution

    A remote code execution vulnerability exists in the way that the WinVerifyTrust function handles Windows Authenticode signature verification for PE files.

  309. CVE-2021-43890

    RansomwareAdded · due

    Microsoft Windows AppX Installer Spoofing Vulnerability

    Microsoft Windows AppX Installer contains a spoofing vulnerability which has a high impacts to confidentiality, integrity, and availability.

  310. CVE-2021-42321

    RansomwareAdded · due

    Microsoft Exchange Server Remote Code Execution Vulnerability

    An authenticated attacker could leverage improper validation in cmdlet arguments within Microsoft Exchange and perform remote code execution.

  311. CVE-2021-42292

    Added · due

    Microsoft Excel Security Feature Bypass

    A security feature bypass vulnerability in Microsoft Excel would allow a local user to perform arbitrary code execution.

  312. CVE-2021-40449

    RansomwareAdded · due

    Microsoft Windows Win32k Privilege Escalation Vulnerability

    Unspecified vulnerability allows for an authenticated user to escalate privileges.

  313. CVE-2021-40444

    RansomwareAdded · due

    Microsoft MSHTML Remote Code Execution Vulnerability

    Microsoft MSHTML contains a unspecified vulnerability that allows for remote code execution.

  314. CVE-2021-38649

    Added · due

    Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability

    Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing privilege escalation.

  315. CVE-2021-38648

    Added · due

    Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability

    Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing privilege escalation.

  316. CVE-2021-38647

    RansomwareAdded · due

    Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

    Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing remote code execution.

  317. CVE-2021-38645

    Added · due

    Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability

    Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability that allows for privilege escalation.

  318. CVE-2021-36955

    RansomwareAdded · due

    Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

    Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.

  319. CVE-2021-36948

    Added · due

    Microsoft Windows Update Medic Service Privilege Escalation Vulnerability

    Microsoft Windows Update Medic Service contains an unspecified vulnerability that allows for privilege escalation.

  320. CVE-2021-36942

    RansomwareAdded · due

    Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability

    Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability allowing an unauthenticated attacker to call a method on the LSARPC interface and coerce the domain controller to authenticate against another server using…

  321. CVE-2021-34527

    RansomwareAdded · due

    Microsoft Windows Print Spooler Remote Code Execution Vulnerability

    Microsoft Windows Print Spooler contains an unspecified vulnerability due to the Windows Print Spooler service improperly performing privileged file operations. Successful exploitation allows an attacker to perform remote code execution…

  322. CVE-2021-34523

    RansomwareAdded · due

    Microsoft Exchange Server Privilege Escalation Vulnerability

    Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation.

  323. CVE-2021-34473

    RansomwareAdded · due

    Microsoft Exchange Server Remote Code Execution Vulnerability

    Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution.

  324. CVE-2021-34448

    Added · due

    Microsoft Windows Scripting Engine Memory Corruption Vulnerability

    Microsoft Windows Scripting Engine contains an unspecified vulnerability that allows for memory corruption.

  325. CVE-2021-33771

    Added · due

    Microsoft Windows Kernel Privilege Escalation Vulnerability

    Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.

  326. CVE-2021-33742

    Added · due

    Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability

    Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for remote code execution.

  327. CVE-2021-33739

    Added · due

    Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability

    Microsoft Desktop Window Manager (DWM) Core Library contains an unspecified vulnerability that allows for privilege escalation.

  328. CVE-2021-31979

    Added · due

    Microsoft Windows Kernel Privilege Escalation Vulnerability

    Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.

  329. CVE-2021-31956

    Added · due

    Microsoft Windows NTFS Privilege Escalation Vulnerability

    Microsoft Windows New Technology File System (NTFS) contains an unspecified vulnerability that allows attackers to escalate privileges via a specially crafted application.

  330. CVE-2021-31955

    Added · due

    Microsoft Windows Kernel Information Disclosure Vulnerability

    Microsoft Windows Kernel contains an unspecified vulnerability that allows for information disclosure. Successful exploitation allows attackers to read the contents of kernel memory from a user-mode process.

  331. CVE-2021-31207

    RansomwareAdded · due

    Microsoft Exchange Server Security Feature Bypass Vulnerability

    Microsoft Exchange Server contains an unspecified vulnerability that allows for security feature bypass.

  332. CVE-2021-31201

    Added · due

    Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability

    Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation.

  333. CVE-2021-31199

    Added · due

    Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability

    Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation.

  334. CVE-2021-28310

    Added · due

    Microsoft Win32k Privilege Escalation Vulnerability

    Microsoft Windows Win32k contains an unspecified vulnerability that allows for privilege escalation.

  335. CVE-2021-27085

    Added · due

    Microsoft Internet Explorer Remote Code Execution Vulnerability

    Microsoft Internet Explorer contains an unspecified vulnerability that allows for remote code execution.

  336. CVE-2021-27065

    RansomwareAdded · due

    Microsoft Exchange Server Remote Code Execution Vulnerability

    Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.

  337. CVE-2021-27059

    Added · due

    Microsoft Office Remote Code Execution Vulnerability

    Microsoft Office contains an unspecified vulnerability that allows for remote code execution.

  338. CVE-2021-26858

    RansomwareAdded · due

    Microsoft Exchange Server Remote Code Execution Vulnerability

    Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.

  339. CVE-2021-26857

    RansomwareAdded · due

    Microsoft Exchange Server Remote Code Execution Vulnerability

    Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.

  340. CVE-2021-26855

    RansomwareAdded · due

    Microsoft Exchange Server Remote Code Execution Vulnerability

    Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.

  341. CVE-2021-26411

    RansomwareAdded · due

    Microsoft Internet Explorer Memory Corruption Vulnerability

    Microsoft Internet Explorer contains an unspecified vulnerability that allows for memory corruption.

  342. CVE-2021-1732

    RansomwareAdded · due

    Microsoft Win32k Privilege Escalation Vulnerability

    Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.

  343. CVE-2021-1675

    RansomwareAdded · due

    Microsoft Windows Print Spooler Remote Code Execution Vulnerability

    Microsoft Windows Print Spooler contains an unspecified vulnerability that allows for remote code execution.

  344. CVE-2021-1647

    Added · due

    Microsoft Defender Remote Code Execution Vulnerability

    Microsoft Defender contains an unspecified vulnerability that allows for remote code execution.

  345. CVE-2020-17144

    Added · due

    Microsoft Exchange Server Remote Code Execution Vulnerability

    Microsoft Exchange Server improperly validates cmdlet arguments which allow an attacker to perform remote code execution.

  346. CVE-2020-17087

    Added · due

    Microsoft Windows Kernel Privilege Escalation Vulnerability

    Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.

  347. CVE-2020-1472

    RansomwareAdded · due

    Microsoft Netlogon Privilege Escalation Vulnerability

    Microsoft's Netlogon Remote Protocol (MS-NRPC) contains a privilege escalation vulnerability when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller. An attacker who successfully exploits the…

  348. CVE-2020-1464

    Added · due

    Microsoft Windows Spoofing Vulnerability

    Microsoft Windows contains a spoofing vulnerability when Windows incorrectly validates file signatures, allowing an attacker to bypass security features and load improperly signed files.

  349. CVE-2020-1380

    Added · due

    Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

    Microsoft Internet Explorer contains a memory corruption vulnerability which can allow for remote code execution in the context of the current user.

  350. CVE-2020-1350

    Added · due

    Microsoft Windows DNS Server Remote Code Execution Vulnerability

    Microsoft Windows DNS Servers fail to properly handle requests, allowing an attacker to perform remote code execution in the context of the Local System Account. The vulnerability is also known under the moniker of SIGRed.

  351. CVE-2020-1147

    Added · due

    Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability

    Microsoft .NET Framework, Microsoft SharePoint, and Visual Studio contain a remote code execution vulnerability when the software fails to check the source markup of XML file input. Successful exploitation allows an attacker to execute…

  352. CVE-2020-1054

    Added · due

    Microsoft Win32k Privilege Escalation Vulnerability

    Microsoft Win32k contains a privilege escalation vulnerability when the Windows kernel-mode driver fails to properly handle objects in memory. Successful exploitation allows an attacker to execute code in kernel mode.

  353. CVE-2020-1040

    Added · due

    Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability

    Microsoft Hyper-V RemoteFX vGPU contains an improper input validation vulnerability due to the host server failing to properly validate input from an authenticated user on a guest operating system. Successful exploitation allows for remote…

  354. CVE-2020-1020

    Added · due

    Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability

    Microsoft Windows Adobe Font Manager Library contains an unspecified vulnerability when handling specially crafted multi-master fonts (Adobe Type 1 PostScript format) that allows for remote code execution for all systems except Windows 10…

  355. CVE-2020-0986

    Added · due

    Microsoft Windows Kernel Privilege Escalation Vulnerability

    Microsoft Windows kernel contains an unspecified vulnerability when handling objects in memory that allows attackers to escalate privileges and execute code in kernel mode.

  356. CVE-2020-0968

    RansomwareAdded · due

    Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

    Microsoft Internet Explorer contains a memory corruption vulnerability due to how the Scripting Engine handles objects in memory, leading to remote code execution.

  357. CVE-2020-0938

    Added · due

    Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability

    Microsoft Windows Adobe Font Manager Library contains an unspecified vulnerability when handling specially crafted multi-master fonts (Adobe Type 1 PostScript format) that allows for remote code execution for all systems except Windows 10…

  358. CVE-2020-0878

    RansomwareAdded · due

    Microsoft Edge and Internet Explorer Memory Corruption Vulnerability

    Microsoft Edge and Internet Explorer contain a memory corruption vulnerability that allows attackers to execute code in the context of the current user.

  359. CVE-2020-0688

    RansomwareAdded · due

    Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability

    Microsoft Exchange Server Validation Key fails to properly create unique keys at install time, allowing for remote code execution.

  360. CVE-2020-0683

    Added · due

    Microsoft Windows Installer Privilege Escalation Vulnerability

    Microsoft Windows Installer contains a privilege escalation vulnerability when MSI packages process symbolic links, which allows attackers to bypass access restrictions to add or remove files.

  361. CVE-2020-0674

    Added · due

    Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

    Microsoft Internet Explorer contains a memory corruption vulnerability due to the way the Scripting Engine handles objects in memory. Successful exploitation could allow remote code execution in the context of the current user.

  362. CVE-2020-0646

    Added · due

    Microsoft .NET Framework Remote Code Execution Vulnerability

    Microsoft .NET Framework contains an improper input validation vulnerability that allows for remote code execution.

  363. CVE-2020-0601

    Added · due

    Microsoft Windows CryptoAPI Spoofing Vulnerability

    Microsoft Windows CryptoAPI (Crypt32.dll) contains a spoofing vulnerability in the way it validates Elliptic Curve Cryptography (ECC) certificates. An attacker could exploit the vulnerability by using a spoofed code-signing certificate to…

  364. CVE-2019-1429

    Added · due

    Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

    Microsoft Internet Explorer contains a memory corruption vulnerability which can allow for remote code execution in the context of the current user.

  365. CVE-2019-1367

    RansomwareAdded · due

    Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

    Microsoft Internet Explorer contains a memory corruption vulnerability in how the scripting engine handles objects in memory. Successful exploitation allows for remote code execution in the context of the current user.

  366. CVE-2019-1215

    RansomwareAdded · due

    Microsoft Windows Privilege Escalation Vulnerability

    Microsoft Windows contains an unspecified vulnerability due to the way ws2ifsl.sys (Winsock) handles objects in memory, allowing for privilege escalation. Successful exploitation allows an attacker to execute code with elevated privileges.

  367. CVE-2019-1214

    Added · due

    Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability

    Microsoft Windows Common Log File System (CLFS) driver improperly handles objects in memory which can allow for privilege escalation.

  368. CVE-2019-0863

    Added · due

    Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability

    Microsoft Windows Error Reporting (WER) contains a privilege escalation vulnerability due to the way it handles files, allowing for code execution in kernel mode.

  369. CVE-2019-0859

    RansomwareAdded · due

    Microsoft Win32k Privilege Escalation Vulnerability

    Microsoft Win32k fails to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.

  370. CVE-2019-0808

    Added · due

    Microsoft Win32k Privilege Escalation Vulnerability

    Microsoft Win32k contains a privilege escalation vulnerability due to the component failing to properly handle objects in memory. Successful exploitation allows an attacker to run code in kernel mode.

  371. CVE-2019-0803

    RansomwareAdded · due

    Microsoft Win32k Privilege Escalation Vulnerability

    Microsoft Win32k contains an unspecified vulnerability due to it failing to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.

  372. CVE-2019-0797

    Added · due

    Microsoft Win32k Privilege Escalation Vulnerability

    Microsoft Win32k contains a privilege escalation vulnerability when the Win32k component fails to properly handle objects in memory. Successful exploitation allows an attacker to execute code in kernel mode.

  373. CVE-2019-0708

    RansomwareAdded · due

    Microsoft Remote Desktop Services Remote Code Execution Vulnerability

    Microsoft Remote Desktop Services, formerly known as Terminal Service, contains an unspecified vulnerability that allows an unauthenticated attacker to connect to the target system using RDP and send specially crafted requests. Successful…

  374. CVE-2019-0604

    RansomwareAdded · due

    Microsoft SharePoint Remote Code Execution Vulnerability

    Microsoft SharePoint fails to check the source markup of an application package. An attacker who successfully exploits the vulnerability could run remote code in the context of the SharePoint application pool and the SharePoint server farm…

  375. CVE-2019-0541

    Added · due

    Microsoft MSHTML Remote Code Execution Vulnerability

    Microsoft MSHTML engine contains an improper input validation vulnerability that allows for remote code execution vulnerability.

  376. CVE-2018-8653

    Added · due

    Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

    Microsoft Internet Explorer contains a memory corruption vulnerability due to how the Scripting Engine handles objects in memory, leading to remote code execution.

  377. CVE-2018-0802

    RansomwareAdded · due

    Microsoft Office Memory Corruption Vulnerability

    Microsoft Office contains a memory corruption vulnerability due to the way objects are handled in memory. Successful exploitation allows for remote code execution in the context of the current user. This vulnerability is known to be…

  378. CVE-2018-0798

    Added · due

    Microsoft Office Memory Corruption Vulnerability

    Microsoft Office contains a memory corruption vulnerability due to the way objects are handled in memory. Successful exploitation allows for remote code execution in the context of the current user. This vulnerability is known to be…

  379. CVE-2017-8759

    Added · due

    Microsoft .NET Framework Remote Code Execution Vulnerability

    Microsoft .NET Framework contains a remote code execution vulnerability when processing untrusted input that could allow an attacker to take control of an affected system.

  380. CVE-2017-7269

    Added · due

    Microsoft Windows Server Buffer Overflow Vulnerability

    Microsoft Windows Server 2003 R2 contains a buffer overflow vulnerability in Internet Information Services (IIS) 6.0 which allows remote attackers to execute code via a long header beginning with "If: <http://" in a PROPFIND request.

  381. CVE-2017-11882

    RansomwareAdded · due

    Microsoft Office Memory Corruption Vulnerability

    Microsoft Office contains a memory corruption vulnerability that allows remote code execution in the context of the current user.

  382. CVE-2017-11774

    Added · due

    Microsoft Office Outlook Security Feature Bypass Vulnerability

    Microsoft Office Outlook contains a security feature bypass vulnerability due to improperly handling objects in memory. Successful exploitation allows an attacker to execute commands.

  383. CVE-2017-0199

    RansomwareAdded · due

    Microsoft Office and WordPad Remote Code Execution Vulnerability

    Microsoft Office and WordPad contain an unspecified vulnerability due to the way the applications parse specially crafted files. Successful exploitation allows for remote code execution.

  384. CVE-2017-0143

    RansomwareAdded · due

    Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability

    Microsoft Windows Server Message Block 1.0 (SMBv1) contains an unspecified vulnerability that allows for remote code execution.

  385. CVE-2016-7255

    RansomwareAdded · due

    Microsoft Win32k Privilege Escalation Vulnerability

    Microsoft Win32k kernel-mode driver fails to properly handle objects in memory which allows for privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.

  386. CVE-2016-3235

    Added · due

    Microsoft Office OLE DLL Side Loading Vulnerability

    Microsoft Office Object Linking & Embedding (OLE) dynamic link library (DLL) contains a side loading vulnerability due to it improperly validating input before loading libraries. Successful exploitation allows for remote code execution.

  387. CVE-2016-0185

    Added · due

    Microsoft Windows Media Center Remote Code Execution Vulnerability

    Microsoft Windows Media Center contains a remote code execution vulnerability when Windows Media Center opens a specially crafted Media Center link (.mcl) file that references malicious code.

  388. CVE-2016-0167

    RansomwareAdded · due

    Microsoft Win32k Privilege Escalation Vulnerability

    Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation via a crafted application

  389. CVE-2015-1641

    Added · due

    Microsoft Office Memory Corruption Vulnerability

    Microsoft Office contains a memory corruption vulnerability due to failure to properly handle rich text format files in memory. Successful exploitation allows for remote code execution in the context of the current user.

  390. CVE-2014-1812

    RansomwareAdded · due

    Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability

    Microsoft Windows Active Directory contains a privilege escalation vulnerability due to the way it distributes passwords that are configured using Group Policy preferences. An authenticated attacker who successfully exploits the…

  391. CVE-2012-0158

    RansomwareAdded · due

    Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability

    Microsoft MSCOMCTL.OCX contains an unspecified vulnerability that allows for remote code execution, allowing an attacker to take complete control of an affected system under the context of the current user.

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works