microsoft
3,712 known vulnerabilities affecting microsoft products.
Products
windows_server_2019 1452
windows_server_2016 1310
windows_server_2022 1272
windows_server_2025 1131
windows_10_1809 1131
windows_11_24h2 1111
windows_11_25h2 1081
windows_10_22h2 1066
windows_10_21h2 1061
windows_11_26h1 1009
windows 990
windows_10_1607 980
windows_server_2012 977
windows_11_23h2 761
windows_10 343
windows_server_2008 326
365_apps 277
office_2021 225
office_2024 225
office_2019 217
windows_8.1 192
microsoft_365 185
windows_rt_8.1 170
windows_7 169
Vulnerabilities by priority
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2026-24301 | Medium | 2.7% | 8.8 | Improper neutralization of special elements used in a command ('command injectio… | |
| CVE-2021-34439 | Medium | 2.6% | 7.8 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | |
| CVE-2021-34464 | Medium | 2.6% | 7.8 | Microsoft Defender Remote Code Execution Vulnerability | |
| CVE-2021-34458 | Medium | 2.6% | 9.9 | Windows Kernel Remote Code Execution Vulnerability | |
| CVE-2021-26881 | Medium | 2.6% | 7.5 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | |
| CVE-2026-65775 | Medium | 2.6% | 7.8 | Use after free in Windows Win32K allows an authorized attacker to elevate privil… | |
| CVE-2026-20820 | Medium | 2.6% | 7.8 | Heap-based buffer overflow in Windows Common Log File System Driver allows an au… | |
| CVE-2023-38178 | Medium | 2.6% | 7.5 | .NET Core and Visual Studio Denial of Service Vulnerability | |
| CVE-2021-24110 | Medium | 2.5% | 7.8 | HEVC Video Extensions Remote Code Execution Vulnerability | |
| CVE-2021-31947 | Medium | 2.5% | 7.8 | HEVC Video Extensions Remote Code Execution Vulnerability | |
| CVE-2020-1067 | Medium | 2.5% | 7.8 | A remote code execution vulnerability exists in the way that Windows handles obj… | |
| CVE-2022-37966 | Medium | 2.5% | 8.1 | Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability | |
| CVE-2026-55009 | Medium | 2.5% | 7.8 | Deserialization of untrusted data in Microsoft Exchange Server allows an authori… | |
| CVE-2023-36910 | Medium | 2.5% | 9.8 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability | |
| CVE-2021-24108 | Medium | 2.5% | 7.8 | Microsoft Office Remote Code Execution Vulnerability | |
| CVE-2021-27048 | Medium | 2.5% | 7.8 | HEVC Video Extensions Remote Code Execution Vulnerability | |
| CVE-2021-27049 | Medium | 2.5% | 7.8 | HEVC Video Extensions Remote Code Execution Vulnerability | |
| CVE-2021-27050 | Medium | 2.5% | 7.8 | HEVC Video Extensions Remote Code Execution Vulnerability | |
| CVE-2021-27051 | Medium | 2.5% | 7.8 | HEVC Video Extensions Remote Code Execution Vulnerability | |
| CVE-2021-27062 | Medium | 2.5% | 7.8 | HEVC Video Extensions Remote Code Execution Vulnerability | |
| CVE-2020-1066 | Medium | 2.5% | 7.8 | An elevation of privilege vulnerability exists in .NET Framework which could all… | |
| CVE-2021-34450 | Medium | 2.5% | 8.5 | Windows Hyper-V Remote Code Execution Vulnerability | |
| CVE-2020-1139 | Medium | 2.5% | 7.8 | An elevation of privilege vulnerability exists when the Windows Runtime improper… | |
| CVE-2020-1155 | Medium | 2.5% | 7.8 | An elevation of privilege vulnerability exists when the Windows Runtime improper… | |
| CVE-2020-1156 | Medium | 2.5% | 7.8 | An elevation of privilege vulnerability exists when the Windows Runtime improper… | |
| CVE-2020-1157 | Medium | 2.5% | 7.8 | An elevation of privilege vulnerability exists when the Windows Runtime improper… | |
| CVE-2020-1158 | Medium | 2.5% | 7.8 | An elevation of privilege vulnerability exists when the Windows Runtime improper… | |
| CVE-2026-45591 | Medium | 2.5% | 7.5 | Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacke… | |
| CVE-2026-20816 | Medium | 2.5% | 7.8 | Time-of-check time-of-use (toctou) race condition in Windows Installer allows an… | |
| CVE-2023-35368 | Medium | 2.5% | 8.8 | Microsoft Exchange Remote Code Execution Vulnerability | |
| CVE-2021-42276 | Medium | 2.5% | 7.8 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | |
| CVE-2023-35385 | Medium | 2.5% | 9.8 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability | |
| CVE-2021-27055 | Medium | 2.5% | 7.0 | Microsoft Visio Security Feature Bypass Vulnerability | |
| CVE-2021-34489 | Medium | 2.5% | 7.8 | DirectWrite Remote Code Execution Vulnerability | |
| CVE-2021-26900 | Medium | 2.4% | 7.8 | Windows Win32k Elevation of Privilege Vulnerability | |
| CVE-2021-34492 | Medium | 2.4% | 8.1 | Windows Certificate Spoofing Vulnerability | |
| CVE-2022-41106 | Medium | 2.4% | 8.8 | Microsoft Excel Remote Code Execution Vulnerability | |
| CVE-2021-34530 | Medium | 2.4% | 7.8 | Windows Graphics Component Remote Code Execution Vulnerability | |
| CVE-2021-34533 | Medium | 2.4% | 7.8 | Windows Graphics Component Font Parsing Remote Code Execution Vulnerability | |
| CVE-2021-33781 | Medium | 2.4% | 8.1 | Azure AD Security Feature Bypass Vulnerability | |
| CVE-2024-21386 | Medium | 2.4% | 7.5 | .NET Denial of Service Vulnerability | |
| CVE-2021-33749 | Medium | 2.4% | 8.8 | Windows DNS Snap-in Remote Code Execution Vulnerability | |
| CVE-2021-33750 | Medium | 2.4% | 8.8 | Windows DNS Snap-in Remote Code Execution Vulnerability | |
| CVE-2021-33752 | Medium | 2.4% | 8.8 | Windows DNS Snap-in Remote Code Execution Vulnerability | |
| CVE-2021-33779 | Medium | 2.4% | 8.1 | Windows AD FS Security Feature Bypass Vulnerability | |
| CVE-2021-33756 | Medium | 2.4% | 8.8 | Windows DNS Snap-in Remote Code Execution Vulnerability | |
| CVE-2021-33775 | Medium | 2.4% | 7.8 | HEVC Video Extensions Remote Code Execution Vulnerability | |
| CVE-2021-33776 | Medium | 2.4% | 7.8 | HEVC Video Extensions Remote Code Execution Vulnerability | |
| CVE-2021-33777 | Medium | 2.4% | 7.8 | HEVC Video Extensions Remote Code Execution Vulnerability | |
| CVE-2021-33778 | Medium | 2.4% | 7.8 | HEVC Video Extensions Remote Code Execution Vulnerability |