microsoft
3,712 known vulnerabilities affecting microsoft products.
Products
windows_server_2019 1452
windows_server_2016 1310
windows_server_2022 1272
windows_server_2025 1131
windows_10_1809 1131
windows_11_24h2 1111
windows_11_25h2 1081
windows_10_22h2 1066
windows_10_21h2 1061
windows_11_26h1 1009
windows 990
windows_10_1607 980
windows_server_2012 977
windows_11_23h2 761
windows_10 343
windows_server_2008 326
365_apps 277
office_2021 225
office_2024 225
office_2019 217
windows_8.1 192
microsoft_365 185
windows_rt_8.1 170
windows_7 169
Vulnerabilities by priority
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2024-26186 | Medium | 1.6% | 8.8 | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability | |
| CVE-2024-26191 | Medium | 1.6% | 8.8 | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability | |
| CVE-2024-37335 | Medium | 1.6% | 8.8 | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability | |
| CVE-2024-37338 | Medium | 1.6% | 8.8 | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability | |
| CVE-2024-37339 | Medium | 1.6% | 8.8 | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability | |
| CVE-2024-37340 | Medium | 1.6% | 8.8 | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability | |
| CVE-2024-38260 | Medium | 1.6% | 8.8 | Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability | |
| CVE-2023-36903 | Medium | 1.6% | 7.8 | Windows System Assessment Tool Elevation of Privilege Vulnerability | |
| CVE-2021-38650 | Medium | 1.6% | 7.6 | Microsoft Office Spoofing Vulnerability | |
| CVE-2024-43469 | Medium | 1.6% | 8.8 | Azure CycleCloud Remote Code Execution Vulnerability | |
| CVE-2026-61348 | Medium | 1.6% | 7.0 | Use after free in Windows Ancillary Function Driver for WinSock allows an author… | |
| CVE-2026-76195 | Medium | 1.6% | 10.0 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Specia… | |
| CVE-2026-76197 | Medium | 1.6% | 10.0 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Specia… | |
| CVE-2026-20875 | Medium | 1.6% | 7.5 | Null pointer dereference in Windows Local Security Authority Subsystem Service (… | |
| CVE-2026-69836 | Medium | 1.6% | 10.0 | Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized a… | |
| CVE-2021-41378 | Medium | 1.6% | 7.8 | Windows NTFS Remote Code Execution Vulnerability | |
| CVE-2022-41047 | Medium | 1.6% | 8.8 | Microsoft ODBC Driver Remote Code Execution Vulnerability | |
| CVE-2022-41048 | Medium | 1.6% | 8.8 | Microsoft ODBC Driver Remote Code Execution Vulnerability | |
| CVE-2024-21369 | Medium | 1.5% | 8.8 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerabilit… | |
| CVE-2026-66805 | Medium | 1.5% | 8.8 | Deserialization of untrusted data in Microsoft Office SharePoint allows an autho… | |
| CVE-2026-55944 | Medium | 1.5% | 9.8 | Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthoriz… | |
| CVE-2026-62766 | Medium | 1.5% | 7.0 | Double free in Windows Kerberos allows an authorized attacker to elevate privile… | |
| CVE-2026-63514 | Medium | 1.5% | 8.8 | Deserialization of untrusted data in Microsoft Office SharePoint allows an autho… | |
| CVE-2024-26192 | Medium | 1.5% | 8.2 | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability | |
| CVE-2023-36873 | Medium | 1.5% | 7.4 | .NET Framework Spoofing Vulnerability | |
| CVE-2024-38240 | Medium | 1.5% | 8.1 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | |
| CVE-2024-21350 | Medium | 1.5% | 8.8 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerabilit… | |
| CVE-2023-38184 | Medium | 1.5% | 7.5 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulne… | |
| CVE-2024-21401 | Medium | 1.5% | 9.8 | Microsoft Entra Jira Single-Sign-On Plugin Elevation of Privilege Vulnerability | |
| CVE-2024-37341 | Medium | 1.4% | 8.8 | Microsoft SQL Server Elevation of Privilege Vulnerability | |
| CVE-2021-27077 | Medium | 1.4% | 7.8 | Windows Win32k Elevation of Privilege Vulnerability | |
| CVE-2024-38045 | Medium | 1.4% | 8.1 | Windows TCP/IP Remote Code Execution Vulnerability | |
| CVE-2023-21691 | Medium | 1.4% | 7.5 | Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclo… | |
| CVE-2021-26871 | Medium | 1.4% | 7.8 | Windows WalletService Elevation of Privilege Vulnerability | |
| CVE-2026-20868 | Medium | 1.4% | 8.8 | Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) a… | |
| CVE-2023-21553 | Medium | 1.4% | 7.5 | Azure DevOps Server Remote Code Execution Vulnerability | |
| CVE-2023-36882 | Medium | 1.4% | 8.8 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerabilit… | |
| CVE-2026-20846 | Medium | 1.4% | 7.5 | Buffer over-read in Windows GDI+ allows an unauthorized attacker to deny service… | |
| CVE-2021-36949 | Medium | 1.4% | 7.1 | Microsoft Azure Active Directory Connect Authentication Bypass Vulnerability | |
| CVE-2026-65658 | Medium | 1.4% | 8.8 | Deserialization of untrusted data in Microsoft Office SharePoint allows an autho… | |
| CVE-2026-65663 | Medium | 1.4% | 8.8 | Deserialization of untrusted data in Microsoft Office SharePoint allows an autho… | |
| CVE-2023-38167 | Medium | 1.4% | 7.2 | Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability | |
| CVE-2024-21416 | Medium | 1.4% | 8.1 | Windows TCP/IP Remote Code Execution Vulnerability | |
| CVE-2024-21347 | Medium | 1.4% | 7.5 | Microsoft ODBC Driver Remote Code Execution Vulnerability | |
| CVE-2024-37980 | Medium | 1.4% | 8.8 | Microsoft SQL Server Elevation of Privilege Vulnerability | |
| CVE-2024-38225 | Medium | 1.4% | 8.8 | Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability | |
| CVE-2024-20667 | Medium | 1.4% | 7.5 | Azure DevOps Server Remote Code Execution Vulnerability | |
| CVE-2021-38639 | Medium | 1.4% | 7.8 | Win32k Elevation of Privilege Vulnerability | |
| CVE-2024-21403 | Medium | 1.3% | 9.0 | Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege… | |
| CVE-2021-38651 | Medium | 1.3% | 7.6 | Microsoft SharePoint Server Spoofing Vulnerability |