microsoft
3,712 known vulnerabilities affecting microsoft products.
Products
windows_server_2019 1452
windows_server_2016 1310
windows_server_2022 1272
windows_server_2025 1131
windows_10_1809 1131
windows_11_24h2 1111
windows_11_25h2 1081
windows_10_22h2 1066
windows_10_21h2 1061
windows_11_26h1 1009
windows 990
windows_10_1607 980
windows_server_2012 977
windows_11_23h2 761
windows_10 343
windows_server_2008 326
365_apps 277
office_2021 225
office_2024 225
office_2019 217
windows_8.1 192
microsoft_365 185
windows_rt_8.1 170
windows_7 169
Vulnerabilities by priority
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2021-34534 | Low | 2.2% | 6.8 | Windows MSHTML Platform Remote Code Execution Vulnerability | |
| CVE-2023-35376 | Low | 2.2% | 6.5 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability | |
| CVE-2023-35377 | Low | 2.2% | 6.5 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability | |
| CVE-2023-36893 | Low | 2.2% | 6.5 | Microsoft Outlook Spoofing Vulnerability | |
| CVE-2020-1037 | Low | 2.2% | 4.2 | A remote code execution vulnerability exists in the way that the Chakra scriptin… | |
| CVE-2020-1065 | Low | 2.2% | 4.2 | A remote code execution vulnerability exists in the way that the ChakraCore scri… | |
| CVE-2021-34497 | Low | 2.1% | 6.8 | Windows MSHTML Platform Remote Code Execution Vulnerability | |
| CVE-2020-1056 | Low | 2.1% | 5.4 | An elevation of privilege vulnerability exists when Microsoft Edge does not prop… | |
| CVE-2024-21356 | Low | 2.1% | 6.5 | Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerabi… | |
| CVE-2023-36909 | Low | 2.1% | 6.5 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability | |
| CVE-2020-1059 | Low | 2.1% | 4.3 | A spoofing vulnerability exists when Microsoft Edge does not properly parse HTTP… | |
| CVE-2021-34447 | Low | 2.0% | 6.8 | Windows MSHTML Platform Remote Code Execution Vulnerability | |
| CVE-2021-34496 | Low | 2.0% | 5.5 | Windows GDI Information Disclosure Vulnerability | |
| CVE-2020-1195 | Low | 2.0% | 3.1 | An elevation of privilege vulnerability exists in Microsoft Edge (Chromium-based… | |
| CVE-2020-1096 | Low | 2.0% | 4.2 | A remote code execution vulnerability exists when Microsoft Edge PDF Reader impr… | |
| CVE-2023-36906 | Low | 2.0% | 5.5 | Windows Cryptographic Services Information Disclosure Vulnerability | |
| CVE-2021-34517 | Low | 2.0% | 5.3 | Microsoft SharePoint Server Spoofing Vulnerability | |
| CVE-2020-1141 | Low | 1.9% | 5.5 | An information disclosure vulnerability exists in the way that the Windows Graph… | |
| CVE-2020-1145 | Low | 1.9% | 5.5 | An information disclosure vulnerability exists in the way that the Windows Graph… | |
| CVE-2021-33753 | Low | 1.9% | 4.7 | Microsoft Bing Search Spoofing Vulnerability | |
| CVE-2023-35391 | Low | 1.9% | 6.2 | ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability | |
| CVE-2024-38231 | Low | 1.9% | 6.5 | Windows Remote Desktop Licensing Service Denial of Service Vulnerability | |
| CVE-2021-38631 | Low | 1.9% | 4.4 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | |
| CVE-2024-21343 | Low | 1.8% | 5.9 | Windows Network Address Translation (NAT) Denial of Service Vulnerability | |
| CVE-2024-43481 | Low | 1.8% | 6.5 | Power BI Report Server Spoofing Vulnerability | |
| CVE-2021-34451 | Low | 1.8% | 5.3 | Microsoft Office Online Server Spoofing Vulnerability | |
| CVE-2023-36905 | Low | 1.7% | 5.5 | Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vuln… | |
| CVE-2023-36907 | Low | 1.7% | 5.5 | Windows Cryptographic Services Information Disclosure Vulnerability | |
| CVE-2020-1099 | Low | 1.7% | 5.4 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Serv… | |
| CVE-2020-1100 | Low | 1.7% | 5.4 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Serv… | |
| CVE-2020-1101 | Low | 1.7% | 5.4 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Serv… | |
| CVE-2023-36913 | Low | 1.7% | 6.5 | Microsoft Message Queuing Information Disclosure Vulnerability | |
| CVE-2024-21344 | Low | 1.7% | 5.9 | Windows Network Address Translation (NAT) Denial of Service Vulnerability | |
| CVE-2020-1104 | Low | 1.7% | 5.4 | A spoofing vulnerability exists when Microsoft SharePoint Server does not proper… | |
| CVE-2020-1105 | Low | 1.7% | 5.4 | A spoofing vulnerability exists when Microsoft SharePoint Server does not proper… | |
| CVE-2023-38254 | Low | 1.6% | 6.5 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability | |
| CVE-2021-41371 | Low | 1.6% | 4.4 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | |
| CVE-2026-45454 | Low | 1.6% | 6.5 | Improper limitation of a pathname to a restricted directory ('path traversal') i… | |
| CVE-2022-41122 | Low | 1.6% | 6.5 | Microsoft SharePoint Server Spoofing Vulnerability | |
| CVE-2022-41097 | Low | 1.6% | 6.5 | Network Policy Server (NPS) RADIUS Protocol Information Disclosure Vulnerability | |
| CVE-2023-35384 | Low | 1.6% | 5.4 | Windows HTML Platforms Security Feature Bypass Vulnerability | |
| CVE-2021-26444 | Low | 1.6% | 3.3 | Azure RTOS Information Disclosure Vulnerability | |
| CVE-2021-38624 | Low | 1.5% | 6.5 | Windows Key Storage Provider Security Feature Bypass Vulnerability | |
| CVE-2020-1063 | Low | 1.5% | 5.4 | A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-prem… | |
| CVE-2020-1107 | Low | 1.5% | 5.4 | A spoofing vulnerability exists when Microsoft SharePoint Server does not proper… | |
| CVE-2023-21703 | Low | 1.5% | 6.5 | Azure Data Box Gateway Remote Code Execution Vulnerability | |
| CVE-2021-34485 | Low | 1.5% | 5.0 | .NET Core and Visual Studio Information Disclosure Vulnerability | |
| CVE-2021-42323 | Low | 1.4% | 3.3 | Azure RTOS Information Disclosure Vulnerability | |
| CVE-2021-42297 | Low | 1.4% | 5.0 | Windows 10 Update Assistant Elevation of Privilege Vulnerability | |
| CVE-2023-35393 | Low | 1.4% | 4.5 | Azure Apache Hive Spoofing Vulnerability |