microsoft
3,712 known vulnerabilities affecting microsoft products.
Products
windows_server_2019 1452
windows_server_2016 1310
windows_server_2022 1272
windows_server_2025 1131
windows_10_1809 1131
windows_11_24h2 1111
windows_11_25h2 1081
windows_10_22h2 1066
windows_10_21h2 1061
windows_11_26h1 1009
windows 990
windows_10_1607 980
windows_server_2012 977
windows_11_23h2 761
windows_10 343
windows_server_2008 326
365_apps 277
office_2021 225
office_2024 225
office_2019 217
windows_8.1 192
microsoft_365 185
windows_rt_8.1 170
windows_7 169
Vulnerabilities by priority
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2021-26863 | Medium | 11.8% | 7.0 | Windows Win32k Elevation of Privilege Vulnerability | |
| CVE-2021-26897 | Medium | 11.6% | 9.8 | Windows DNS Server Remote Code Execution Vulnerability | |
| CVE-2026-50656 | Medium | 11.4% | 7.8 | Microsoft is aware of an elevation of privilege in the Microsoft Malware Protect… | |
| CVE-2021-26432 | Medium | 11.3% | 9.8 | Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability | |
| CVE-2024-21378 | Medium | 11.0% | 8.8 | Microsoft Outlook Remote Code Execution Vulnerability | |
| CVE-2024-21371 | Medium | 10.9% | 7.0 | Windows Kernel Elevation of Privilege Vulnerability | |
| CVE-2023-38181 | Medium | 10.8% | 8.8 | Microsoft Exchange Server Spoofing Vulnerability | |
| CVE-2023-36900 | Medium | 10.6% | 7.8 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | |
| CVE-2023-35359 | Medium | 9.9% | 7.8 | Windows Kernel Elevation of Privilege Vulnerability | |
| CVE-2022-41113 | Medium | 8.7% | 7.8 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability | |
| CVE-2026-20860 | Medium | 8.4% | 7.8 | Access of resource using incompatible type ('type confusion') in Windows Ancilla… | |
| CVE-2022-41109 | Medium | 8.1% | 7.8 | Windows Win32k Elevation of Privilege Vulnerability | |
| CVE-2021-36947 | Medium | 7.5% | 8.8 | Windows Print Spooler Remote Code Execution Vulnerability | |
| CVE-2021-36936 | Medium | 7.4% | 8.8 | Windows Print Spooler Remote Code Execution Vulnerability | |
| CVE-2021-26896 | Medium | 7.4% | 7.5 | Windows DNS Server Denial of Service Vulnerability | |
| CVE-2021-26894 | Medium | 7.3% | 9.8 | Windows DNS Server Remote Code Execution Vulnerability | |
| CVE-2021-26895 | Medium | 7.3% | 9.8 | Windows DNS Server Remote Code Execution Vulnerability | |
| CVE-2021-26893 | Medium | 7.0% | 9.8 | Windows DNS Server Remote Code Execution Vulnerability | |
| CVE-2021-38665 | Medium | 7.0% | 7.4 | Remote Desktop Protocol Client Information Disclosure Vulnerability | |
| CVE-2026-42980 | Medium | 6.9% | 7.8 | Integer underflow (wrap or wraparound) in Windows NT OS Kernel allows an authori… | |
| CVE-2023-35388 | Medium | 6.8% | 8.0 | Microsoft Exchange Server Remote Code Execution Vulnerability | |
| CVE-2021-43209 | Medium | 6.8% | 7.8 | 3D Viewer Remote Code Execution Vulnerability | |
| CVE-2021-38656 | Medium | 6.7% | 7.8 | Microsoft Word Remote Code Execution Vulnerability | |
| CVE-2021-34467 | Medium | 6.6% | 7.1 | Microsoft SharePoint Server Remote Code Execution Vulnerability | |
| CVE-2021-38655 | Medium | 6.3% | 7.8 | Microsoft Excel Remote Code Execution Vulnerability | |
| CVE-2021-38653 | Medium | 6.3% | 7.8 | Microsoft Office Visio Remote Code Execution Vulnerability | |
| CVE-2021-38654 | Medium | 6.3% | 7.8 | Microsoft Office Visio Remote Code Execution Vulnerability | |
| CVE-2021-38658 | Medium | 6.3% | 7.8 | Microsoft Office Graphics Remote Code Execution Vulnerability | |
| CVE-2021-38659 | Medium | 6.3% | 7.8 | Microsoft Office Graphics Remote Code Execution Vulnerability | |
| CVE-2021-27063 | Medium | 6.3% | 7.5 | Windows DNS Server Denial of Service Vulnerability | |
| CVE-2020-1108 | Medium | 6.3% | 7.5 | A denial of service vulnerability exists when .NET Core or .NET Framework improp… | |
| CVE-2020-1062 | Medium | 6.2% | 7.5 | A remote code execution vulnerability exists when Internet Explorer improperly a… | |
| CVE-2024-38244 | Medium | 6.2% | 7.8 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability | |
| CVE-2024-38241 | Medium | 6.0% | 7.8 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability | |
| CVE-2023-38182 | Medium | 5.9% | 8.0 | Microsoft Exchange Server Remote Code Execution Vulnerability | |
| CVE-2021-42298 | Medium | 5.8% | 7.8 | Microsoft Defender Remote Code Execution Vulnerability | |
| CVE-2023-35382 | Medium | 5.6% | 7.8 | Windows Kernel Elevation of Privilege Vulnerability | |
| CVE-2023-35386 | Medium | 5.5% | 7.8 | Windows Kernel Elevation of Privilege Vulnerability | |
| CVE-2026-20817 | Medium | 5.5% | 7.8 | Improper handling of insufficient permissions or privileges in Windows Error Rep… | |
| CVE-2021-26902 | Medium | 5.5% | 7.8 | HEVC Video Extensions Remote Code Execution Vulnerability | |
| CVE-2021-26435 | Medium | 5.3% | 8.1 | Windows Scripting Engine Memory Corruption Vulnerability | |
| CVE-2026-66804 | Medium | 5.3% | 7.8 | Improper access control in Windows Cross Device Service allows an authorized att… | |
| CVE-2020-1102 | Medium | 5.2% | 8.8 | A remote code execution vulnerability exists in Microsoft SharePoint when the so… | |
| CVE-2020-1161 | Medium | 5.1% | 7.5 | A denial of service vulnerability exists when ASP.NET Core improperly handles we… | |
| CVE-2021-34529 | Medium | 5.1% | 7.8 | Visual Studio Code Remote Code Execution Vulnerability | |
| CVE-2020-1171 | Medium | 5.0% | 8.8 | A remote code execution vulnerability exists in Visual Studio Code when the Pyth… | |
| CVE-2026-20840 | Medium | 4.7% | 7.8 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to exec… | |
| CVE-2021-36965 | Medium | 4.6% | 8.8 | Windows WLAN AutoConfig Service Remote Code Execution Vulnerability | |
| CVE-2020-0909 | Medium | 4.6% | 7.5 | A denial of service vulnerability exists when Hyper-V on a Windows Server fails … | |
| CVE-2021-27053 | Medium | 4.6% | 7.8 | Microsoft Excel Remote Code Execution Vulnerability |