Skip to content
OpenAdvisories

Vendor

Microsoft

14,257 known vulnerabilities.

Products

Windows Server 2019 6,362 Windows Server 2019 (Server Core installation) 6,265 Windows 10 Version 1809 5,907 Windows Server 2022 5,762 Windows Server 2016 5,572 Windows Server 2016 (Server Core installation) 5,368 Windows 10 Version 21H2 5,141 Windows 10 Version 1607 4,987 Windows 10 Version 22H2 4,643 Windows Server 2025 4,336 Windows Server 2025 (Server Core installation) 4,334 Windows 11 Version 24H2 4,232 Windows Server 2012 R2 4,119 Windows 11 version 23H2 4,056 Windows Server 2012 R2 (Server Core installation) 3,974 Windows Server 2012 3,881 Windows Server 2012 (Server Core installation) 3,748 Windows 11 Version 25H2 3,497 Windows 11 version 26H1 3,230 Windows 10 Version 1507 2,323 Windows Server 2008 R2 Service Pack 1 1,900 Windows Server 2008 R2 Service Pack 1 (Server Core installation) 1,886 Windows 11 version 22H2 1,776 Windows Server 2022, 23H2 Edition (Server Core installation) 1,723 Windows Server 2008 Service Pack 2 1,694 Windows Server 2008 Service Pack 2 (Server Core installation) 1,689 Windows 11 Version 26H2 1,663 Windows 11 version 21H2 1,560 Windows 11 version 22H3 1,276 Windows 10 Version 20H2 1,259 Windows 8.1 1,117 Microsoft 365 Apps for Enterprise 1,105 Windows 10 Version 1903 for x64-based Systems 1,069 Windows Server, version 1903 (Server Core installation) 1,055 Windows 10 Version 1909 1,045 Windows 10 Version 1903 for ARM64-based Systems 1,037 Windows 10 Version 1903 for 32-bit Systems 1,034 Windows Server, version 1909 (Server Core installation) 989 Windows Server version 20H2 965 Microsoft Office LTSC 2021 953
All Critical High Medium Low Exploited only Public exploit

882 results · Clear filters · Feed

  • Unscored —
    CVE-2018-0823 Public exploit

    The Named Pipe File System in Windows 10 version 1709 and Windows Server, version 1709 allows an elevation of privilege…

    Microsoft Named Pipe File System
  • High 8.8
    CVE-2018-0798 Exploited Public exploit EPSS 95%

    Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow…

    Microsoft Equation Editor
    KEV Nov 3, 2021
  • High 7.8
    CVE-2018-0802 Exploited · Ransomware Public exploit EPSS 93%

    Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow…

    Microsoft Equation Editor
    KEV Nov 3, 2021
  • Unscored —
    CVE-2018-0780 Public exploit EPSS 59%

    Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obta…

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2018-0744 Public exploit EPSS 15%

    The Windows kernel in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, W…

    Microsoft Windows kernel Windows
  • Unscored —
    CVE-2018-0748 Public exploit

    The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 an…

    Microsoft Windows kernel Windows
  • Unscored —
    CVE-2018-0775 Public exploit EPSS 68%

    Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due …

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2018-0769 Public exploit EPSS 79%

    Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitr…

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2018-0777 Public exploit EPSS 78%

    Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitr…

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2018-0758 Public exploit EPSS 81%

    Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitr…

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2018-0776 Public exploit EPSS 78%

    Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitr…

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2018-0752 Public exploit

    The Windows Kernel API in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 170…

    Microsoft Windows kernel Windows
  • Unscored —
    CVE-2018-0746 Public exploit

    The Windows kernel in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, W…

    Microsoft Windows kernel Windows
  • Unscored —
    CVE-2018-0774 Public exploit EPSS 68%

    Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due …

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2018-0745 Public exploit

    The Windows kernel in Windows 10 version 1703. Windows 10 version 1709, and Windows Server, version 1709 allows an info…

    Microsoft Windows kernel Windows
  • Unscored —
    CVE-2018-0767 Public exploit EPSS 65%

    Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain inf…

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2018-0743 Public exploit

    Windows Subsystem for Linux in Windows 10 version 1703, Windows 10 version 1709, and Windows Server, version 1709 allow…

    Microsoft Windows Subsystem for Linux Linux Windows
  • Unscored —
    CVE-2018-0749 Public exploit

    The Microsoft Server Message Block (SMB) Server in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R…

    Microsoft SMB Server
  • Unscored —
    CVE-2018-0770 Public exploit EPSS 78%

    Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitr…

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2018-0751 Public exploit

    The Windows Kernel API in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 170…

    Microsoft Windows Windows
  • Unscored —
    CVE-2017-11918 Public exploit EPSS 63%

    ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to…

    Microsoft ChakraCore, Microsoft Edge Browsers
  • High 7.5
    CVE-2017-11911 Public exploit EPSS 65%

    ChakraCore RCE Vulnerability

    ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulne…

    Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • Unscored —
    CVE-2017-11906 Public exploit EPSS 25%

    Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows S…

    Microsoft Internet Explorer
  • High 7.5
    CVE-2017-11909 Public exploit EPSS 65%

    ChakraCore vulnerable to remote code execution

    ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulne…

    Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • Unscored —
    CVE-2017-11907 Public exploit EPSS 65%

    Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows S…

    Microsoft Internet Explorer
  • Unscored —
    CVE-2017-11885 Public exploit EPSS 46%

    Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold,…

    Microsoft Microsoft Windows Windows
  • Unscored —
    CVE-2017-11890 Public exploit EPSS 50%

    Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Wi…

    Microsoft Internet Explorer
  • High 7.5
    CVE-2017-11914 Public exploit EPSS 63%

    ChakraCore vulnerable to privilege escalation due to exposure from scriptFunction

    ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption…

    Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2017-11893 Public exploit EPSS 68%

    ChakraCore vulnerable to remote code execution

    ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memor…

    Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • Unscored —
    CVE-2017-11903 Public exploit EPSS 47%

    Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows S…

    Microsoft Internet Explorer
  • High 7.8
    CVE-2017-11882 Exploited · Ransomware Public exploit EPSS 100%

    Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and M…

    Microsoft Microsoft Office
    KEV Nov 3, 2021
  • High 7.5
    CVE-2017-11870 Public exploit EPSS 60%

    Chakra Core vulnerable to privilege escalation when writing to JavaScript null scope objects

    ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vu…

    Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • Unscored —
    CVE-2017-11841 Public exploit EPSS 60%

    ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, versi…

    Microsoft ChakraCore, Microsoft Edge Browsers
  • Unscored —
    CVE-2017-11831 Public exploit

    Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2…

    Microsoft Windows kernel Windows
  • Unscored —
    CVE-2017-11855 Public exploit EPSS 49%

    Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windo…

    Microsoft Internet Explorer
  • Unscored —
    CVE-2017-11861 Public exploit EPSS 64%

    Microsoft Edge in Windows 10 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker …

    Microsoft ChakraCore, Microsoft Edge Browsers
  • Unscored —
    CVE-2017-11830 Public exploit

    Device Guard in Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allo…

    Microsoft Device Guard
  • Unscored —
    CVE-2017-11873 Public exploit EPSS 70%

    ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 170…

    Microsoft ChakraCore, Microsoft Edge Browsers
  • Unscored —
    CVE-2017-11840 Public exploit EPSS 60%

    ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, versi…

    Microsoft ChakraCore, Microsoft Edge Browsers
  • Unscored —
    CVE-2017-11793 Public exploit EPSS 50%

    Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windo…

    Microsoft Internet Explorer