Vendor

Microsoft

14,257 known vulnerabilities.

Products

Windows Server 2019 6,362 Windows Server 2019 (Server Core installation) 6,265 Windows 10 Version 1809 5,907 Windows Server 2022 5,762 Windows Server 2016 5,572 Windows Server 2016 (Server Core installation) 5,368 Windows 10 Version 21H2 5,141 Windows 10 Version 1607 4,987 Windows 10 Version 22H2 4,643 Windows Server 2025 4,336 Windows Server 2025 (Server Core installation) 4,334 Windows 11 Version 24H2 4,232 Windows Server 2012 R2 4,119 Windows 11 version 23H2 4,056 Windows Server 2012 R2 (Server Core installation) 3,974 Windows Server 2012 3,881 Windows Server 2012 (Server Core installation) 3,748 Windows 11 Version 25H2 3,497 Windows 11 version 26H1 3,230 Windows 10 Version 1507 2,323 Windows Server 2008 R2 Service Pack 1 1,900 Windows Server 2008 R2 Service Pack 1 (Server Core installation) 1,886 Windows 11 version 22H2 1,776 Windows Server 2022, 23H2 Edition (Server Core installation) 1,723 Windows Server 2008 Service Pack 2 1,694 Windows Server 2008 Service Pack 2 (Server Core installation) 1,689 Windows 11 Version 26H2 1,663 Windows 11 version 21H2 1,560 Windows 11 version 22H3 1,276 Windows 10 Version 20H2 1,259 Windows 8.1 1,117 Microsoft 365 Apps for Enterprise 1,105 Windows 10 Version 1903 for x64-based Systems 1,069 Windows Server, version 1903 (Server Core installation) 1,055 Windows 10 Version 1909 1,045 Windows 10 Version 1903 for ARM64-based Systems 1,037 Windows 10 Version 1903 for 32-bit Systems 1,034 Windows Server, version 1909 (Server Core installation) 989 Windows Server version 20H2 965 Microsoft Office LTSC 2021 953

All Critical High Medium Low Exploited only Public exploit

882 results · Clear filters · Feed

Unscored —

CVE-2019-0836 Public exploit

An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), a…

Microsoft Windows Windows Server Windows

Apr 9, 2019
Unscored —

CVE-2019-0805 Public exploit

An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), a…

Microsoft Windows Windows Server Windows

Apr 9, 2019
High 7.8

CVE-2019-0803 Exploited · Ransomware Public exploit EPSS 45%

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

Microsoft Windows Windows Server Windows

Apr 9, 2019
KEV Nov 3, 2021
Unscored —

CVE-2019-0796 Public exploit

An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), a…

Microsoft Windows Windows Server Windows

Apr 9, 2019
Unscored —

CVE-2019-0730 Public exploit

An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), a…

Microsoft Windows Windows Server Windows

Apr 9, 2019
Unscored —

CVE-2019-0731 Public exploit

An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), a…

Microsoft Windows Windows Server Windows

Apr 9, 2019
Unscored —

CVE-2019-0735 Public exploit

An elevation of privilege vulnerability exists when the Windows Client Server Run-Time Subsystem (CSRSS) fails to prope…

Microsoft Windows Windows Server Windows

Apr 9, 2019
High 7.5

CVE-2019-0752 Exploited · Ransomware Public exploit EPSS 82%

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…

Microsoft Internet Explorer 11 Internet Explorer 10

Apr 9, 2019
KEV Feb 15, 2022
Unscored —

CVE-2019-0732 Public exploit

A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard when Win…

Microsoft Windows Windows Server Windows

Apr 9, 2019
High 7.8

CVE-2019-0808 Exploited Public exploit EPSS 53%

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

Microsoft Windows Windows Server Windows

Apr 9, 2019
KEV Nov 3, 2021
Unscored —

CVE-2019-0768 Public exploit EPSS 49%

A security feature bypass vulnerability exists when Internet Explorer VBScript execution policy does not properly restr…

Microsoft Internet Explorer 11

Apr 9, 2019
Unscored —

CVE-2019-0678 Public exploit

An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, whi…

Microsoft Microsoft Edge Browsers

Apr 8, 2019
Unscored —

CVE-2019-0667 Public exploit EPSS 31%

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Window…

Microsoft Internet Explorer 11 Internet Explorer 9 Internet Explorer 10

Apr 8, 2019
Unscored —

CVE-2019-0612 Public exploit EPSS 11%

A security feature bypass vulnerability exists when Click2Play protection in Microsoft Edge improperly handles flash ob…

Microsoft Microsoft Edge Browsers

Apr 8, 2019
Unscored —

CVE-2019-0623 Public exploit

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

Microsoft Windows Windows Server Windows

Mar 6, 2019
Unscored —

CVE-2019-0724 Public exploit EPSS 24%

An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation o…

Microsoft Microsoft Exchange Server 2019 Microsoft Exchange Server 2016 Microsoft Exchange Server 2013

Mar 6, 2019
Critical 9.8

CVE-2019-0604 Exploited · Ransomware Public exploit EPSS 100%

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup…

Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation

Mar 6, 2019
KEV Nov 3, 2021
Unscored —

CVE-2019-0571 Public exploit EPSS 16%

An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations…

Microsoft Windows Server 2019 Windows Server 2016 Windows 10 Windows

Jan 8, 2019
High 7.5

CVE-2019-0567 Public exploit EPSS 80%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Jan 8, 2019
Unscored —

CVE-2019-0574 Public exploit EPSS 19%

An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations…

Microsoft Windows Server 2019 Windows Server 2016 Windows 10 Windows

Jan 8, 2019
Unscored —

CVE-2019-0572 Public exploit EPSS 25%

An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations…

Microsoft Windows Server 2019 Windows Server 2016 Windows 10 Windows

Jan 8, 2019
Unscored —

CVE-2019-0566 Public exploit EPSS 19%

An elevation of privilege vulnerability exists in Microsoft Edge Browser Broker COM object, aka "Microsoft Edge Elevati…

Microsoft Microsoft Edge Browsers

Jan 8, 2019
Unscored —

CVE-2019-0552 Public exploit

An elevation of privilege exists in Windows COM Desktop Broker, aka "Windows COM Elevation of Privilege Vulnerability."…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Jan 8, 2019
High 7.5

CVE-2019-0568 Public exploit EPSS 69%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Jan 8, 2019
High 8.8

CVE-2019-0541 Exploited Public exploit EPSS 53%

A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML …

Microsoft Microsoft Office Internet Explorer 11 Internet Explorer 9

Jan 8, 2019
KEV Nov 3, 2021
Unscored —

CVE-2019-0573 Public exploit EPSS 20%

An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations…

Microsoft Windows Server 2019 Windows Server 2016 Windows 10 Windows

Jan 8, 2019
High 7.5

CVE-2019-0539 Public exploit EPSS 83%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Jan 8, 2019
Unscored —

CVE-2019-0570 Public exploit

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka "Wind…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Jan 8, 2019
Unscored —

CVE-2018-8625 Public exploit EPSS 44%

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Window…

Microsoft Internet Explorer 11 Internet Explorer 9 Internet Explorer 10

Dec 12, 2018
High 8.4

CVE-2018-8639 Exploited · Ransomware Public exploit EPSS 22%

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Dec 12, 2018
KEV Mar 3, 2025
Unscored —

CVE-2018-8587 Public exploit EPSS 29%

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in …

Microsoft Microsoft Office Office Microsoft Outlook

Dec 12, 2018
Unscored —

CVE-2018-8619 Public exploit EPSS 45%

A remote code execution vulnerability exists when the Internet Explorer VBScript execution policy does not properly res…

Microsoft Internet Explorer 11 Internet Explorer 9 Internet Explorer 10

Dec 12, 2018
High 7.8

CVE-2018-8611 Exploited Public exploit

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka …

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Dec 12, 2018
KEV May 24, 2022
Unscored —

CVE-2018-8631 Public exploit EPSS 68%

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Interne…

Microsoft Internet Explorer 11 Internet Explorer 9 Internet Explorer 10

Dec 12, 2018
High 7.5

CVE-2018-8617 Public exploit EPSS 62%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Dec 12, 2018
High 7.4

CVE-2018-8581 Exploited · Ransomware Public exploit EPSS 28%

An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation o…

Microsoft Microsoft Exchange Server

Nov 14, 2018
KEV Mar 3, 2022
Unscored —

CVE-2018-8552 Public exploit EPSS 51%

An information disclosure vulnerability exists when VBScript improperly discloses the contents of its memory, which cou…

Microsoft Internet Explorer 11 Internet Explorer 9 Internet Explorer 10

Nov 14, 2018
Unscored —

CVE-2018-8584 Public exploit

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (…

Microsoft Windows Server 2019 Windows Server 2016 Windows 10 Windows

Nov 14, 2018
Unscored —

CVE-2018-8544 Public exploit EPSS 48%

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Window…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Nov 14, 2018
Unscored —

CVE-2018-8532 Public exploit EPSS 23%

An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a maliciou…

Microsoft SQL Server Management Studio 17.9 SQL Server Management Studio 18.0

Oct 10, 2018