Microsoft

881 results · Clear filters · Feed

• High 7.8
  CVE-2022-21974 Public exploit

  Roaming Security Rights Management Services Remote Code Execution Vulnerability

  Roaming Security Rights Management Services Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Feb 9, 2022
• High 7.8
  CVE-2022-21971 Exploited Public exploit EPSS 54%

  Windows Runtime Remote Code Execution Vulnerability

  Windows Runtime Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Feb 9, 2022

  KEV Aug 18, 2022
• Medium 6.1
  CVE-2022-21970 Public exploit

  Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

  Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

  Microsoft Microsoft Edge (Chromium-based) Browsers
  Jan 11, 2022
• Critical 9.8
  CVE-2022-21907 Public exploit EPSS 93%

  HTTP Protocol Stack Remote Code Execution Vulnerability

  HTTP Protocol Stack Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jan 11, 2022
• Medium 4.4
  CVE-2022-21894 Public exploit

  Secure Boot Security Feature Bypass Vulnerability

  Secure Boot Security Feature Bypass Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jan 11, 2022
• High 7.0
  CVE-2022-21882 Exploited · Ransomware Public exploit EPSS 59%

  Win32k Elevation of Privilege Vulnerability

  Win32k Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jan 11, 2022

  KEV Feb 4, 2022
• High 7.0
  CVE-2022-21881 Public exploit EPSS 25%

  Windows Kernel Elevation of Privilege Vulnerability

  Windows Kernel Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jan 11, 2022
• Medium 5.5
  CVE-2022-21877 Public exploit

  Storage Spaces Controller Information Disclosure Vulnerability

  Storage Spaces Controller Information Disclosure Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jan 11, 2022
• Medium 6.1
  CVE-2022-21839 Public exploit

  Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability

  Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jan 11, 2022
• Medium 4.3
  CVE-2021-43908 Public exploit

  Visual Studio Code Spoofing Vulnerability

  Visual Studio Code Spoofing Vulnerability

  Microsoft Visual Studio Code
  Dec 15, 2021
• High 7.5
  CVE-2021-43893 Public exploit

  Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability

  Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Dec 15, 2021
• High 7.8
  CVE-2021-43891 Public exploit EPSS 12%

  Visual Studio Code Remote Code Execution Vulnerability

  Visual Studio Code Remote Code Execution Vulnerability

  Microsoft Visual Studio Code
  Dec 15, 2021
• High 7.8
  CVE-2021-43883 Public exploit EPSS 12%

  Windows Installer Elevation of Privilege Vulnerability

  Windows Installer Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Dec 15, 2021
• High 7.8
  CVE-2021-43229 Public exploit

  Windows NTFS Elevation of Privilege Vulnerability

  Windows NTFS Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Dec 15, 2021
• High 7.8
  CVE-2021-43226 Exploited · Ransomware Public exploit

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Dec 15, 2021

  KEV Oct 6, 2025
• Medium 5.5
  CVE-2021-43224 Public exploit

  Windows Common Log File System Driver Information Disclosure Vulnerability

  Windows Common Log File System Driver Information Disclosure Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Dec 15, 2021
• High 8.1
  CVE-2021-43217 Public exploit

  Windows Encrypting File System (EFS) Remote Code Execution Vulnerability

  Windows Encrypting File System (EFS) Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Dec 15, 2021
• High 8.8
  CVE-2021-42321 Exploited · Ransomware Public exploit EPSS 92%

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Microsoft Exchange Server 2019 Cumulative Update 11 Microsoft Exchange Server 2016 Cumulative Update 22 Microsoft Exchange Server 2016 Cumulative Update 21
  Nov 10, 2021

  KEV Nov 17, 2021
• High 7.8
  CVE-2021-42292 Exploited Public exploit EPSS 43%

  Microsoft Excel Security Feature Bypass Vulnerability

  Microsoft Excel Security Feature Bypass Vulnerability

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC for Mac 2021
  Nov 10, 2021

  KEV Nov 17, 2021
• High 7.5
  CVE-2021-42287 Exploited · Ransomware Public exploit EPSS 77%

  Active Directory Domain Services Elevation of Privilege Vulnerability

  Active Directory Domain Services Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows
  Nov 10, 2021

  KEV Apr 11, 2022
• High 7.5
  CVE-2021-42278 Exploited · Ransomware Public exploit EPSS 73%

  Active Directory Domain Services Elevation of Privilege Vulnerability

  Active Directory Domain Services Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows
  Nov 10, 2021

  KEV Apr 11, 2022
• Medium 4.3
  CVE-2021-41351 Public exploit

  Microsoft Edge (Chrome based) Spoofing on IE Mode

  Microsoft Edge (Chrome based) Spoofing on IE Mode

  Microsoft Microsoft Edge (Chromium-based) in IE Mode Browsers
  Nov 10, 2021
• Medium 6.5
  CVE-2021-41349 Public exploit Scanner template EPSS 93%

  Microsoft Exchange Server Spoofing Vulnerability

  Microsoft Exchange Server Spoofing Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 11 Microsoft Exchange Server 2016 Cumulative Update 22
  Nov 10, 2021
• High 8.8
  CVE-2021-38666 Public exploit EPSS 15%

  Remote Desktop Client Remote Code Execution Vulnerability

  Remote Desktop Client Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Nov 10, 2021
• Medium 5.5
  CVE-2021-41338 Public exploit

  Windows AppContainer Firewall Rules Security Feature Bypass Vulnerability

  Windows AppContainer Firewall Rules Security Feature Bypass Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Oct 13, 2021
• High 7.8
  CVE-2021-40449 Exploited · Ransomware Public exploit EPSS 82%

  Win32k Elevation of Privilege Vulnerability

  Win32k Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Oct 13, 2021

  KEV Nov 17, 2021
• High 8.8
  CVE-2021-40444 Exploited · Ransomware Public exploit EPSS 98%

  Microsoft MSHTML Remote Code Execution Vulnerability

  Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks that attempt to exploit this vulnerability by using specially-crafted Microsoft Office documents. An a…

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Sep 15, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-38648 Exploited Public exploit EPSS 11%

  Open Management Infrastructure Elevation of Privilege Vulnerability

  Open Management Infrastructure Elevation of Privilege Vulnerability

  Microsoft Azure Stack Hub Open Management Infrastructure Container Monitoring Solution
  Sep 15, 2021

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2021-38647 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

  Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

  Microsoft Azure Stack Hub Open Management Infrastructure Azure Sentinel
  Sep 15, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-38639 Public exploit

  Win32k Elevation of Privilege Vulnerability

  Win32k Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Sep 15, 2021
• High 7.8
  CVE-2021-36955 Exploited · Ransomware Public exploit

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Sep 15, 2021

  KEV Nov 3, 2021
• High 7.1
  CVE-2021-36949 Public exploit

  Microsoft Azure Active Directory Connect Authentication Bypass Vulnerability

  Microsoft Azure Active Directory Connect Authentication Bypass Vulnerability

  Microsoft Azure Active Directory Connect Provisioning Agent Microsoft Azure Active Directory Connect 2.0.X.Y Microsoft Azure Active Directory Connect 1.X.Y.Z
  Aug 12, 2021
• High 7.5
  CVE-2021-36942 Exploited · Ransomware Public exploit EPSS 66%

  Windows LSA Spoofing Vulnerability

  Windows LSA Spoofing Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2016 Windows
  Aug 12, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-34486 Exploited Public exploit

  Windows Event Tracing Elevation of Privilege Vulnerability

  Windows Event Tracing Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Aug 12, 2021

  KEV Mar 28, 2022
• High 7.8
  CVE-2021-36934 Exploited Public exploit EPSS 67%

  Windows Elevation of Privilege Vulnerability

  An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Security Accounts Manager (SAM) database. An attacker who successfully exploited this vulnerability could run arbit…

  Microsoft Windows 10 Version 1809 Windows 10 Version 20H2 Windows 10 Version 1909 Windows
  Jul 22, 2021

  KEV Feb 10, 2022
• High 8.8
  CVE-2021-34481 Public exploit EPSS 48%

  Windows Print Spooler Remote Code Execution Vulnerability

  A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could th…

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jul 16, 2021
• Critical 9.0
  CVE-2021-34523 Exploited · Ransomware Public exploit EPSS 100%

  Microsoft Exchange Server Elevation of Privilege Vulnerability

  Microsoft Exchange Server Elevation of Privilege Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 8 Microsoft Exchange Server 2016 Cumulative Update 19
  Jul 14, 2021

  KEV Nov 3, 2021
• Critical 9.1
  CVE-2021-34473 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 8 Microsoft Exchange Server 2016 Cumulative Update 19
  Jul 14, 2021

  KEV Nov 3, 2021
• High 8.0
  CVE-2021-34470 Public exploit

  Microsoft Exchange Server Elevation of Privilege Vulnerability

  Microsoft Exchange Server Elevation of Privilege Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2016 Cumulative Update 21 Microsoft Exchange Server 2019 Cumulative Update 10
  Jul 14, 2021
• High 7.3
  CVE-2021-33766 Exploited Public exploit Scanner template EPSS 98%

  Microsoft Exchange Server Information Disclosure Vulnerability

  Microsoft Exchange Server Information Disclosure Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 8 Microsoft Exchange Server 2016 Cumulative Update 19
  Jul 14, 2021

  KEV Jan 18, 2022