Microsoft

22 results · Clear filters · Feed

• Critical 10.0
  CVE-2026-69836 Exploited Public exploit

  Microsoft Entra ID Remote Code Execution Vulnerability

  Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft Entra
  Aug 20, 2026
• Critical 9.1
  CVE-2026-55040 Exploited Public exploit EPSS 70%

  Microsoft SharePoint Server Security Feature Bypass Vulnerability

  Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network.

  Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition
  Jul 14, 2026

  KEV Aug 18, 2026
• Critical 9.8
  CVE-2026-50522 Exploited Public exploit

  Microsoft SharePoint Remote Code Execution Vulnerability

  Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition
  Jul 14, 2026

  KEV Jul 22, 2026
• Critical 9.8
  CVE-2026-33824 Exploited Public exploit EPSS 77%

  Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability

  Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 14, 2026

  KEV Aug 18, 2026
• Critical 9.8
  CVE-2025-59287 Exploited Public exploit EPSS 100%

  Windows Server Update Service (WSUS) Remote Code Execution Vulnerability

  Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows
  Oct 14, 2025

  KEV Oct 24, 2025
• Critical 9.8
  CVE-2025-53770 Exploited · Ransomware Public exploit EPSS 100%

  Microsoft SharePoint Server Remote Code Execution Vulnerability

  Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. Microsoft is aware that an exploit for CVE-2025-53770 exists in the wild. Microsoft is preparing and fully testing a c…

  Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition
  Jul 20, 2025

  KEV Jul 20, 2025
• Critical 9.8
  CVE-2024-43468 Exploited Public exploit EPSS 81%

  Microsoft Configuration Manager Remote Code Execution Vulnerability

  Microsoft Configuration Manager Remote Code Execution Vulnerability

  Microsoft Microsoft Configuration Manager
  Oct 8, 2024

  KEV Feb 12, 2026
• Critical 9.8
  CVE-2024-21413 Exploited Public exploit EPSS 95%

  Microsoft Outlook Remote Code Execution Vulnerability

  Microsoft Outlook Remote Code Execution Vulnerability

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office 2019
  Feb 13, 2024

  KEV Feb 6, 2025
• Critical 9.8
  CVE-2023-29357 Exploited · Ransomware Public exploit EPSS 100%

  Microsoft SharePoint Server Elevation of Privilege Vulnerability

  Microsoft SharePoint Server Elevation of Privilege Vulnerability

  Microsoft Microsoft SharePoint Server 2019
  Jun 13, 2023

  KEV Jan 10, 2024
• Critical 9.8
  CVE-2023-23397 Exploited Public exploit EPSS 97%

  Microsoft Outlook Elevation of Privilege Vulnerability

  Microsoft Outlook Elevation of Privilege Vulnerability

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office 2019
  Mar 14, 2023

  KEV Mar 14, 2023
• Critical 9.8
  CVE-2021-38647 Exploited · Ransomware Public exploit EPSS 100%

  Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

  Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

  Microsoft Azure Stack Hub Open Management Infrastructure Azure Sentinel
  Sep 15, 2021

  KEV Nov 3, 2021
• Critical 9.0
  CVE-2021-34523 Exploited · Ransomware Public exploit EPSS 100%

  Microsoft Exchange Server Elevation of Privilege Vulnerability

  Microsoft Exchange Server Elevation of Privilege Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2016 Cumulative Update 19 Microsoft Exchange Server 2019 Cumulative Update 8
  Jul 14, 2021

  KEV Nov 3, 2021
• Critical 9.1
  CVE-2021-34473 Exploited · Ransomware Public exploit EPSS 100%

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 8 Microsoft Exchange Server 2016 Cumulative Update 19
  Jul 14, 2021

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2021-31166 Exploited Public exploit EPSS 100%

  HTTP Protocol Stack Remote Code Execution Vulnerability

  HTTP Protocol Stack Remote Code Execution Vulnerability

  Microsoft Windows 10 Version 20H2 Windows Server version 20H2 Windows 10 Version 2004 Windows
  May 11, 2021

  KEV Apr 6, 2022
• Critical 9.1
  CVE-2021-26855 Exploited · Ransomware Public exploit EPSS 100%

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 8 Microsoft Exchange Server 2016 Cumulative Update 19
  Mar 2, 2021

  KEV Nov 3, 2021
• Critical 10.0
  CVE-2020-1350 Exploited Public exploit EPSS 97%

  A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle re…

  Microsoft Windows Server, version 1903 (Server Core installation) Windows Server, version 1909 (Server Core installation) Windows Server Windows
  Jul 14, 2020

  KEV Nov 3, 2021
• Critical 10.0
  CVE-2020-0796 Exploited · Ransomware Public exploit EPSS 100%

  A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol …

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Mar 12, 2020

  KEV Feb 10, 2022
• Critical 9.8
  CVE-2020-0618 Exploited · Ransomware Public exploit EPSS 99%

  A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles pag…

  Microsoft Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR) Microsoft SQL Server Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (CU)
  Feb 11, 2020

  KEV Sep 18, 2024
• Critical 9.8
  CVE-2020-0646 Exploited Public exploit EPSS 99%

  A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.…

  Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 Microsoft .NET Framework 3.5.1 Windows
  Jan 14, 2020

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2019-0708 Exploited · Ransomware Public exploit EPSS 100%

  A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an una…

  Microsoft Windows Windows Server Windows
  May 16, 2019

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2019-0604 Exploited · Ransomware Public exploit EPSS 100%

  A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup…

  Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation
  Mar 6, 2019

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2017-8543 Exploited Public exploit EPSS 74%

  Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 200…

  Microsoft Microsoft Windows Windows
  Jun 15, 2017

  KEV May 24, 2022