Skip to content
OpenAdvisories

Vendor

Microsoft

14,257 known vulnerabilities.

Products

Windows Server 2019 6,362 Windows Server 2019 (Server Core installation) 6,265 Windows 10 Version 1809 5,907 Windows Server 2022 5,762 Windows Server 2016 5,572 Windows Server 2016 (Server Core installation) 5,368 Windows 10 Version 21H2 5,141 Windows 10 Version 1607 4,987 Windows 10 Version 22H2 4,643 Windows Server 2025 4,336 Windows Server 2025 (Server Core installation) 4,334 Windows 11 Version 24H2 4,232 Windows Server 2012 R2 4,119 Windows 11 version 23H2 4,056 Windows Server 2012 R2 (Server Core installation) 3,974 Windows Server 2012 3,881 Windows Server 2012 (Server Core installation) 3,748 Windows 11 Version 25H2 3,497 Windows 11 version 26H1 3,230 Windows 10 Version 1507 2,323 Windows Server 2008 R2 Service Pack 1 1,900 Windows Server 2008 R2 Service Pack 1 (Server Core installation) 1,886 Windows 11 version 22H2 1,776 Windows Server 2022, 23H2 Edition (Server Core installation) 1,723 Windows Server 2008 Service Pack 2 1,694 Windows Server 2008 Service Pack 2 (Server Core installation) 1,689 Windows 11 Version 26H2 1,663 Windows 11 version 21H2 1,560 Windows 11 version 22H3 1,276 Windows 10 Version 20H2 1,259 Windows 8.1 1,117 Microsoft 365 Apps for Enterprise 1,105 Windows 10 Version 1903 for x64-based Systems 1,069 Windows Server, version 1903 (Server Core installation) 1,055 Windows 10 Version 1909 1,045 Windows 10 Version 1903 for ARM64-based Systems 1,037 Windows 10 Version 1903 for 32-bit Systems 1,034 Windows Server, version 1909 (Server Core installation) 989 Windows Server version 20H2 965 Microsoft Office LTSC 2021 953
All Critical High Medium Low Exploited only Public exploit

882 results · Clear filters · Feed

  • Unscored —
    CVE-2017-8479 Public exploit

    The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2…

    Microsoft Microsoft Windows Windows
  • Unscored —
    CVE-2017-8476 Public exploit

    The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2…

    Microsoft Microsoft Windows Windows
  • Unscored —
    CVE-2017-8480 Public exploit

    The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2…

    Microsoft Microsoft Windows Windows
  • Unscored —
    CVE-2017-8496 Public exploit EPSS 51%

    Microsoft Edge in Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context o…

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2017-8538 Public exploit EPSS 50%

    The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serv…

    Microsoft Malware Protection Engine
  • High 7.8
    CVE-2017-8540 Exploited Public exploit EPSS 72%

    The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serv…

    Microsoft Malware Protection Engine
    KEV Mar 3, 2022
  • Unscored —
    CVE-2017-8537 Public exploit EPSS 17%

    The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serv…

    Microsoft Malware Protection Engine
  • Unscored —
    CVE-2017-8536 Public exploit EPSS 17%

    The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serv…

    Microsoft Malware Protection Engine
  • Unscored —
    CVE-2017-8535 Public exploit EPSS 17%

    The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serv…

    Microsoft Malware Protection Engine
  • Unscored —
    CVE-2017-8541 Public exploit EPSS 48%

    The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serv…

    Microsoft Malware Protection Engine
  • Unscored —
    CVE-2017-0175 Public exploit

    The Windows kernel in Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows authenticated attackers to obtain se…

    Microsoft Microsoft Windows Windows
  • Unscored —
    CVE-2017-0214 Public exploit

    Windows COM in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R…

    Microsoft Windows COM Windows
  • Medium —
    CVE-2017-0248 Public exploit

    Moderate severity vulnerability that affects Microsoft.AspNetCore.Mvc and Microsoft.AspNetCore.Mvc.Core

    Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to bypass Enhanced Security Usage taggings when they present a certificate that is invalid for a specific use, aka ".NET Security Feature Bypass Vulnerability."

    Microsoft Microsoft .NET Framework Microsoft.AspNetCore.Mvc.Core System.Text.Encodings.Web NuGet
  • Unscored —
    CVE-2017-0259 Public exploit

    The Windows kernel in Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703,…

    Microsoft Microsoft Windows Windows
  • High 7.8
    CVE-2017-0261 Exploited Public exploit EPSS 78%

    Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the softwa…

    Microsoft Microsoft Office
    KEV Mar 3, 2022
  • High 7.3
    CVE-2017-0213 Exploited · Ransomware Public exploit EPSS 84%

    Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Se…

    Microsoft Windows COM Windows
    KEV Mar 28, 2022
  • Unscored —
    CVE-2017-0220 Public exploit

    The Windows kernel in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows Server 2012 Gold allows authentica…

    Microsoft Microsoft Windows Windows
  • High 7.8
    CVE-2017-0263 Exploited Public exploit EPSS 10%

    The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 201…

    Microsoft Microsoft Windows Windows
    KEV Feb 10, 2022
  • Unscored —
    CVE-2017-0245 Public exploit

    The kernel-mode drivers in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1 and Windows Server 2012 Gold allow a local…

    Microsoft Microsoft Windows Windows
  • Unscored —
    CVE-2017-0258 Public exploit

    The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gol…

    Microsoft Microsoft Windows Windows
  • Unscored —
    CVE-2017-0290 Public exploit EPSS 81%

    The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serv…

    Microsoft Microsoft Malware Protection Engine
  • Unscored —
    CVE-2017-0204 Public exploit EPSS 19%

    Microsoft Outlook 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1, and Microsoft Outlook 2016 allow re…

    Microsoft Outlook
  • Unscored —
    CVE-2017-0202 Public exploit EPSS 46%

    A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerab…

    Microsoft Internet Explorer
  • Unscored —
    CVE-2017-0106 Public exploit EPSS 28%

    Microsoft Excel 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1, and Microsoft Outlook 2016 allow remo…

    Microsoft Office
  • High 7.8
    CVE-2017-0199 Exploited · Ransomware Public exploit EPSS 99%

    Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windo…

    Microsoft Office/WordPad
    KEV Nov 3, 2021
  • Unscored —
    CVE-2017-0167 Public exploit

    An information disclosure vulnerability exists in Windows 8.1, Windows RT 8.1, Windows Server 2012 R2, Windows 10, and …

    Microsoft Windows Windows
  • Unscored —
    CVE-2017-0058 Public exploit

    A Win32k information disclosure vulnerability exists in Microsoft Windows when the win32k component improperly provides…

    Microsoft Windows Windows
  • Unscored —
    CVE-2017-0211 Public exploit EPSS 14%

    An elevation of privilege vulnerability exists in Windows 10, Windows 8.1, Windows RT 8.1, Windows Server 2012, Windows…

    Microsoft Windows OLE Windows
  • Unscored —
    CVE-2017-0165 Public exploit

    An elevation of privilege vulnerability exists when Microsoft Windows running on Windows 10, Windows 10 1511, Windows 8…

    Microsoft Windows Windows
  • Unscored —
    CVE-2017-0160 Public exploit EPSS 18%

    Microsoft .NET Framework 2.0, 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allows an attacker with access to the local system …

    Microsoft .NET Framework
  • Unscored —
    CVE-2017-0088 Public exploit EPSS 43%

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers…

    Microsoft Windows Uniscribe Windows
  • Unscored —
    CVE-2017-0119 Public exploit EPSS 23%

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers…

    Microsoft Windows Uniscribe Windows
  • Unscored —
    CVE-2017-0112 Public exploit EPSS 23%

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers…

    Microsoft Windows Uniscribe Windows
  • Unscored —
    CVE-2017-0124 Public exploit EPSS 23%

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers…

    Microsoft Windows Uniscribe Windows
  • Unscored —
    CVE-2017-0125 Public exploit EPSS 23%

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers…

    Microsoft Windows Uniscribe Windows
  • High 7.8
    CVE-2017-0101 Exploited · Ransomware Public exploit EPSS 57%

    The kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows …

    Microsoft Windows Windows
    KEV Mar 15, 2022
  • High 7.5
    CVE-2017-0147 Exploited · Ransomware Public exploit EPSS 100%

    The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Window…

    Microsoft Windows SMB Windows
    KEV May 24, 2022
  • Unscored —
    CVE-2017-0092 Public exploit EPSS 23%

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers…

    Microsoft Windows Uniscribe Windows
  • Unscored —
    CVE-2017-0087 Public exploit EPSS 43%

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers…

    Microsoft Windows Uniscribe Windows
  • Unscored —
    CVE-2017-0083 Public exploit EPSS 43%

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers…

    Microsoft Windows Uniscribe Windows