Microsoft

293 results · Clear filters · Feed

• High 7.8
  CVE-2022-41073 Exploited · Ransomware

  Windows Print Spooler Elevation of Privilege Vulnerability

  Windows Print Spooler Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Nov 9, 2022

  KEV Nov 8, 2022
• High 7.8
  CVE-2022-41125 Exploited

  Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

  Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Nov 9, 2022

  KEV Nov 8, 2022
• High 8.8
  CVE-2022-41128 Exploited EPSS 25%

  Windows Scripting Languages Remote Code Execution Vulnerability

  Windows Scripting Languages Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows 10 Version 1809 Windows Server 2022 Windows
  Nov 9, 2022

  KEV Nov 8, 2022
• Medium 5.4
  CVE-2022-41049 Exploited

  Windows Mark of the Web Security Feature Bypass Vulnerability

  Windows Mark of the Web Security Feature Bypass Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Nov 9, 2022

  KEV Nov 14, 2022
• Medium 5.4
  CVE-2022-41091 Exploited · Ransomware

  Windows Mark of the Web Security Feature Bypass Vulnerability

  Windows Mark of the Web Security Feature Bypass Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Nov 9, 2022

  KEV Nov 8, 2022
• High 8.8
  CVE-2022-41080 Exploited · Ransomware Public exploit EPSS 77%

  Microsoft Exchange Server Elevation of Privilege Vulnerability

  Microsoft Exchange Server Elevation of Privilege Vulnerability

  Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 12
  Nov 9, 2022

  KEV Jan 10, 2023
• High 7.8
  CVE-2022-38028 Exploited EPSS 15%

  Windows Print Spooler Elevation of Privilege Vulnerability

  Windows Print Spooler Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Oct 11, 2022

  KEV Apr 23, 2024
• High 7.8
  CVE-2022-41033 Exploited

  Windows COM+ Event System Service Elevation of Privilege Vulnerability

  Windows COM+ Event System Service Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Oct 11, 2022

  KEV Oct 11, 2022
• High 8.8
  CVE-2022-41040 Exploited · Ransomware Public exploit EPSS 100%

  Microsoft Exchange Server Elevation of Privilege Vulnerability

  Microsoft Exchange Server Elevation of Privilege Vulnerability

  Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 12
  Oct 3, 2022

  KEV Sep 30, 2022
• High 8.0
  CVE-2022-41082 Exploited · Ransomware Public exploit EPSS 100%

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 12
  Oct 3, 2022

  KEV Sep 30, 2022
• High 7.8
  CVE-2022-37969 Exploited · Ransomware Public exploit EPSS 28%

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Sep 13, 2022

  KEV Sep 14, 2022
• High 7.8
  CVE-2022-34713 Exploited EPSS 68%

  Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

  Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Aug 9, 2022

  KEV Aug 9, 2022
• High 7.8
  CVE-2022-22047 Exploited EPSS 18%

  Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

  Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jul 12, 2022

  KEV Jul 12, 2022
• High 7.8
  CVE-2022-30190 Exploited · Ransomware Public exploit EPSS 99%

  Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

  A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. Th…

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jun 1, 2022

  KEV Jun 14, 2022
• High 8.1
  CVE-2022-26925 Exploited EPSS 10%

  Windows LSA Spoofing Vulnerability

  Windows LSA Spoofing Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  May 10, 2022

  KEV Jul 1, 2022
• High 8.8
  CVE-2022-26923 Exploited Public exploit EPSS 84%

  Active Directory Domain Services Elevation of Privilege Vulnerability

  Active Directory Domain Services Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  May 10, 2022

  KEV Aug 18, 2022
• High 7.0
  CVE-2022-26904 Exploited Public exploit EPSS 17%

  Windows User Profile Service Elevation of Privilege Vulnerability

  Windows User Profile Service Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 15, 2022

  KEV Apr 25, 2022
• High 7.8
  CVE-2022-24521 Exploited · Ransomware Public exploit

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 15, 2022

  KEV Apr 13, 2022
• High 7.8
  CVE-2022-22718 Exploited Public exploit EPSS 18%

  Windows Print Spooler Elevation of Privilege Vulnerability

  Windows Print Spooler Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Feb 9, 2022

  KEV Apr 19, 2022
• High 7.8
  CVE-2022-21999 Exploited · Ransomware Public exploit EPSS 41%

  Windows Print Spooler Elevation of Privilege Vulnerability

  Windows Print Spooler Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Feb 9, 2022

  KEV Mar 25, 2022
• High 7.8
  CVE-2022-21971 Exploited Public exploit EPSS 54%

  Windows Runtime Remote Code Execution Vulnerability

  Windows Runtime Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Feb 9, 2022

  KEV Aug 18, 2022
• High 7.0
  CVE-2022-21919 Exploited

  Windows User Profile Service Elevation of Privilege Vulnerability

  Windows User Profile Service Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jan 11, 2022

  KEV Apr 25, 2022
• High 7.0
  CVE-2022-21882 Exploited · Ransomware Public exploit EPSS 59%

  Win32k Elevation of Privilege Vulnerability

  Win32k Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jan 11, 2022

  KEV Feb 4, 2022
• High 7.1
  CVE-2021-43890 Exploited · Ransomware EPSS 11%

  Windows AppX Installer Spoofing Vulnerability

  We have investigated reports of a spoofing vulnerability in AppX installer that affects Microsoft Windows. Microsoft is aware of attacks that attempt to exploit this vulnerability by using specially crafted packages that include the malware family known as Em…

  Microsoft App Installer
  Dec 15, 2021

  KEV Dec 15, 2021
• High 7.8
  CVE-2021-43226 Exploited · Ransomware Public exploit

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Dec 15, 2021

  KEV Oct 6, 2025
• High 8.8
  CVE-2021-42321 Exploited · Ransomware Public exploit EPSS 92%

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Microsoft Exchange Server 2019 Cumulative Update 11 Microsoft Exchange Server 2016 Cumulative Update 22 Microsoft Exchange Server 2016 Cumulative Update 21
  Nov 10, 2021

  KEV Nov 17, 2021
• High 7.8
  CVE-2021-42292 Exploited Public exploit EPSS 43%

  Microsoft Excel Security Feature Bypass Vulnerability

  Microsoft Excel Security Feature Bypass Vulnerability

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC for Mac 2021
  Nov 10, 2021

  KEV Nov 17, 2021
• High 7.5
  CVE-2021-42287 Exploited · Ransomware Public exploit EPSS 77%

  Active Directory Domain Services Elevation of Privilege Vulnerability

  Active Directory Domain Services Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows
  Nov 10, 2021

  KEV Apr 11, 2022
• High 7.5
  CVE-2021-42278 Exploited · Ransomware Public exploit EPSS 73%

  Active Directory Domain Services Elevation of Privilege Vulnerability

  Active Directory Domain Services Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows
  Nov 10, 2021

  KEV Apr 11, 2022
• Medium 5.5
  CVE-2021-41379 Exploited · Ransomware EPSS 19%

  Windows Installer Elevation of Privilege Vulnerability

  Windows Installer Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Nov 10, 2021

  KEV Mar 3, 2022
• High 7.8
  CVE-2021-41357 Exploited

  Win32k Elevation of Privilege Vulnerability

  Win32k Elevation of Privilege Vulnerability

  Microsoft Windows Server 2022 Windows 11 version 21H2 Windows 10 Version 20H2 Windows
  Oct 13, 2021

  KEV Apr 25, 2022
• High 7.8
  CVE-2021-40450 Exploited

  Win32k Elevation of Privilege Vulnerability

  Win32k Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Oct 13, 2021

  KEV Apr 25, 2022
• High 7.8
  CVE-2021-40449 Exploited · Ransomware Public exploit EPSS 82%

  Win32k Elevation of Privilege Vulnerability

  Win32k Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Oct 13, 2021

  KEV Nov 17, 2021
• High 8.8
  CVE-2021-40444 Exploited · Ransomware Public exploit EPSS 98%

  Microsoft MSHTML Remote Code Execution Vulnerability

  Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks that attempt to exploit this vulnerability by using specially-crafted Microsoft Office documents. An a…

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Sep 15, 2021

  KEV Nov 3, 2021
• High 7.0
  CVE-2021-38649 Exploited

  Open Management Infrastructure Elevation of Privilege Vulnerability

  Open Management Infrastructure Elevation of Privilege Vulnerability

  Microsoft Azure Stack Hub Open Management Infrastructure Log Analytics Agent
  Sep 15, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-38648 Exploited Public exploit EPSS 11%

  Open Management Infrastructure Elevation of Privilege Vulnerability

  Open Management Infrastructure Elevation of Privilege Vulnerability

  Microsoft Azure Stack Hub Open Management Infrastructure Log Analytics Agent
  Sep 15, 2021

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2021-38647 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

  Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

  Microsoft Azure Stack Hub Open Management Infrastructure Azure Automation Update Management
  Sep 15, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-38646 Exploited · Ransomware

  Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

  Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft Office 2016
  Sep 15, 2021

  KEV Mar 28, 2022
• High 7.8
  CVE-2021-38645 Exploited

  Open Management Infrastructure Elevation of Privilege Vulnerability

  Open Management Infrastructure Elevation of Privilege Vulnerability

  Microsoft Azure Stack Hub Open Management Infrastructure Azure Sentinel
  Sep 15, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-36955 Exploited · Ransomware Public exploit

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Sep 15, 2021

  KEV Nov 3, 2021