Microsoft

293 results · Clear filters · Feed

• High 7.8
  CVE-2021-36948 Exploited EPSS 23%

  Windows Update Medic Service Elevation of Privilege Vulnerability

  Windows Update Medic Service Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Aug 12, 2021

  KEV Nov 3, 2021
• High 7.5
  CVE-2021-36942 Exploited · Ransomware Public exploit EPSS 66%

  Windows LSA Spoofing Vulnerability

  Windows LSA Spoofing Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2016 Windows
  Aug 12, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-34486 Exploited Public exploit

  Windows Event Tracing Elevation of Privilege Vulnerability

  Windows Event Tracing Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Aug 12, 2021

  KEV Mar 28, 2022
• High 7.8
  CVE-2021-34484 Exploited EPSS 22%

  Windows User Profile Service Elevation of Privilege Vulnerability

  Windows User Profile Service Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Aug 12, 2021

  KEV Mar 31, 2022
• High 7.8
  CVE-2021-36934 Exploited Public exploit EPSS 67%

  Windows Elevation of Privilege Vulnerability

  An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Security Accounts Manager (SAM) database. An attacker who successfully exploited this vulnerability could run arbit…

  Microsoft Windows 10 Version 1809 Windows 10 Version 20H2 Windows 10 Version 1909 Windows
  Jul 22, 2021

  KEV Feb 10, 2022
• Medium 6.8
  CVE-2021-34448 Exploited EPSS 40%

  Scripting Engine Memory Corruption Vulnerability

  Scripting Engine Memory Corruption Vulnerability

  Microsoft Windows Server 2019 Windows 10 Version 1809 Windows Server 2016 Windows
  Jul 16, 2021

  KEV Nov 3, 2021
• Critical 9.0
  CVE-2021-34523 Exploited · Ransomware Public exploit EPSS 100%

  Microsoft Exchange Server Elevation of Privilege Vulnerability

  Microsoft Exchange Server Elevation of Privilege Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 8 Microsoft Exchange Server 2016 Cumulative Update 19
  Jul 14, 2021

  KEV Nov 3, 2021
• Critical 9.1
  CVE-2021-34473 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2016 Cumulative Update 19 Microsoft Exchange Server 2019 Cumulative Update 8
  Jul 14, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-33771 Exploited EPSS 10%

  Windows Kernel Elevation of Privilege Vulnerability

  Windows Kernel Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jul 14, 2021

  KEV Nov 3, 2021
• High 7.3
  CVE-2021-33766 Exploited Public exploit Scanner template EPSS 98%

  Microsoft Exchange Server Information Disclosure Vulnerability

  Microsoft Exchange Server Information Disclosure Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2016 Cumulative Update 19 Microsoft Exchange Server 2019 Cumulative Update 8
  Jul 14, 2021

  KEV Jan 18, 2022
• High 7.8
  CVE-2021-31979 Exploited

  Windows Kernel Elevation of Privilege Vulnerability

  Windows Kernel Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jul 14, 2021

  KEV Nov 3, 2021
• High 7.2
  CVE-2021-31196 Exploited EPSS 54%

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 10 Microsoft Exchange Server 2016 Cumulative Update 21
  Jul 14, 2021

  KEV Aug 21, 2024
• High 8.8
  CVE-2021-34527 Exploited · Ransomware Public exploit EPSS 100%

  Windows Print Spooler Remote Code Execution Vulnerability

  A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could th…

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jul 2, 2021

  KEV Nov 3, 2021
• High 7.5
  CVE-2021-33742 Exploited EPSS 59%

  Windows MSHTML Platform Remote Code Execution Vulnerability

  Windows MSHTML Platform Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows 10 Version 1809 Windows Server 2016 Windows
  Jun 8, 2021

  KEV Nov 3, 2021
• High 8.4
  CVE-2021-33739 Exploited Public exploit

  Microsoft DWM Core Library Elevation of Privilege Vulnerability

  Microsoft DWM Core Library Elevation of Privilege Vulnerability

  Microsoft Windows 10 Version 20H2 Windows 10 Version 1909 Windows Server version 20H2 Windows
  Jun 8, 2021

  KEV Nov 3, 2021
• Medium 5.5
  CVE-2021-31955 Exploited Public exploit EPSS 81%

  Windows Kernel Information Disclosure Vulnerability

  Windows Kernel Information Disclosure Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jun 8, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-31956 Exploited Public exploit EPSS 22%

  Windows NTFS Elevation of Privilege Vulnerability

  Windows NTFS Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jun 8, 2021

  KEV Nov 3, 2021
• Medium 5.2
  CVE-2021-31199 Exploited

  Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

  Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jun 8, 2021

  KEV Nov 3, 2021
• Medium 5.2
  CVE-2021-31201 Exploited

  Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

  Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jun 8, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-1675 Exploited · Ransomware Public exploit EPSS 85%

  Windows Print Spooler Remote Code Execution Vulnerability

  Windows Print Spooler Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jun 8, 2021

  KEV Nov 3, 2021
• Medium 6.6
  CVE-2021-31207 Exploited · Ransomware Public exploit EPSS 100%

  Microsoft Exchange Server Security Feature Bypass Vulnerability

  Microsoft Exchange Server Security Feature Bypass Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 8 Microsoft Exchange Server 2016 Cumulative Update 19
  May 11, 2021

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2021-31166 Exploited Public exploit EPSS 100%

  HTTP Protocol Stack Remote Code Execution Vulnerability

  HTTP Protocol Stack Remote Code Execution Vulnerability

  Microsoft Windows 10 Version 20H2 Windows Server version 20H2 Windows 10 Version 2004 Windows
  May 11, 2021

  KEV Apr 6, 2022
• High 7.8
  CVE-2021-28310 Exploited Public exploit

  Win32k Elevation of Privilege Vulnerability

  Win32k Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 13, 2021

  KEV Nov 3, 2021
• High 7.6
  CVE-2021-27059 Exploited

  Microsoft Office Remote Code Execution Vulnerability

  Microsoft Office Remote Code Execution Vulnerability

  Microsoft Microsoft Office 2016 Microsoft Office 2013 Service Pack 1 Microsoft Office 2010 Service Pack 2
  Mar 11, 2021

  KEV Nov 3, 2021
• High 8.8
  CVE-2021-27085 Exploited

  Internet Explorer Remote Code Execution Vulnerability

  Internet Explorer Remote Code Execution Vulnerability

  Microsoft Internet Explorer 11
  Mar 11, 2021

  KEV Nov 3, 2021
• High 8.8
  CVE-2021-26411 Exploited · Ransomware Public exploit EPSS 82%

  Internet Explorer Memory Corruption Vulnerability

  Internet Explorer Memory Corruption Vulnerability

  Microsoft Internet Explorer 11 Internet Explorer 9 Microsoft Edge (EdgeHTML-based) Browsers
  Mar 11, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-27065 Exploited · Ransomware Public exploit EPSS 100%

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2016 Cumulative Update 19 Microsoft Exchange Server 2019 Cumulative Update 8
  Mar 2, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-26858 Exploited · Ransomware EPSS 94%

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2016 Cumulative Update 19 Microsoft Exchange Server 2019 Cumulative Update 8
  Mar 2, 2021

  KEV Nov 3, 2021
• Critical 9.1
  CVE-2021-26855 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2016 Cumulative Update 19 Microsoft Exchange Server 2019 Cumulative Update 8
  Mar 2, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-26857 Exploited · Ransomware Public exploit EPSS 96%

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2016 Cumulative Update 19 Microsoft Exchange Server 2019 Cumulative Update 8
  Mar 2, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-1732 Exploited · Ransomware Public exploit EPSS 78%

  Windows Win32k Elevation of Privilege Vulnerability

  Windows Win32k Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Feb 25, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-1647 Exploited Public exploit EPSS 40%

  Microsoft Defender Remote Code Execution Vulnerability

  Microsoft Defender Remote Code Execution Vulnerability

  Microsoft Microsoft Security Essentials Windows Defender Microsoft System Center Endpoint Protection Windows
  Jan 12, 2021

  KEV Nov 3, 2021
• High 8.4
  CVE-2020-17144 Exploited Public exploit EPSS 37%

  Microsoft Exchange Remote Code Execution Vulnerability

  Microsoft Exchange Remote Code Execution Vulnerability

  Microsoft Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 31
  Dec 9, 2020

  KEV Nov 3, 2021
• High 7.8
  CVE-2020-17087 Exploited Public exploit

  Windows Kernel Local Elevation of Privilege Vulnerability

  Windows Kernel Local Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Nov 11, 2020

  KEV Nov 3, 2021
• Medium 4.2
  CVE-2020-0878 Exploited · Ransomware

  Microsoft Browser Memory Corruption Vulnerability

  <p>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker…

  Microsoft ChakraCore Internet Explorer 11 Internet Explorer 9 Browsers
  Sep 11, 2020

  KEV Nov 3, 2021
• Medium 5.5
  CVE-2020-1472 Exploited · Ransomware Public exploit EPSS 99%

  Netlogon Elevation of Privilege Vulnerability

  An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC). An attacker who successfully exploited the vulnerability could ru…

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2016 Windows Debian Ubuntu Azure Linux Alpine
  Aug 17, 2020

  KEV Nov 3, 2021
• High 7.8
  CVE-2020-1464 Exploited EPSS 39%

  Windows Spoofing Vulnerability

  A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and load improperly signed files. In an attack scenario, an attacker could bypass secu…

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Aug 17, 2020

  KEV Nov 3, 2021
• High 7.8
  CVE-2020-1380 Exploited EPSS 24%

  Scripting Engine Memory Corruption Vulnerability

  A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current …

  Microsoft Internet Explorer 11
  Aug 17, 2020

  KEV Nov 3, 2021
• Critical 10.0
  CVE-2020-1350 Exploited Public exploit EPSS 97%

  A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle re…

  Microsoft Windows Server, version 1903 (Server Core installation) Windows Server, version 1909 (Server Core installation) Windows Server Windows
  Jul 14, 2020

  KEV Nov 3, 2021
• High 7.8
  CVE-2020-1147 Exploited Public exploit EPSS 96%

  .NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability

  A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulne…

  Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) Windows NuGet
  Jul 14, 2020

  KEV Nov 3, 2021