Vendor

Microsoft

14,257 known vulnerabilities.

Products

Windows Server 2019 6,362 Windows Server 2019 (Server Core installation) 6,265 Windows 10 Version 1809 5,907 Windows Server 2022 5,762 Windows Server 2016 5,572 Windows Server 2016 (Server Core installation) 5,368 Windows 10 Version 21H2 5,141 Windows 10 Version 1607 4,987 Windows 10 Version 22H2 4,643 Windows Server 2025 4,336 Windows Server 2025 (Server Core installation) 4,334 Windows 11 Version 24H2 4,232 Windows Server 2012 R2 4,119 Windows 11 version 23H2 4,056 Windows Server 2012 R2 (Server Core installation) 3,974 Windows Server 2012 3,881 Windows Server 2012 (Server Core installation) 3,748 Windows 11 Version 25H2 3,497 Windows 11 version 26H1 3,230 Windows 10 Version 1507 2,323 Windows Server 2008 R2 Service Pack 1 1,900 Windows Server 2008 R2 Service Pack 1 (Server Core installation) 1,886 Windows 11 version 22H2 1,776 Windows Server 2022, 23H2 Edition (Server Core installation) 1,723 Windows Server 2008 Service Pack 2 1,694 Windows Server 2008 Service Pack 2 (Server Core installation) 1,689 Windows 11 Version 26H2 1,663 Windows 11 version 21H2 1,560 Windows 11 version 22H3 1,276 Windows 10 Version 20H2 1,259 Windows 8.1 1,117 Microsoft 365 Apps for Enterprise 1,105 Windows 10 Version 1903 for x64-based Systems 1,069 Windows Server, version 1903 (Server Core installation) 1,055 Windows 10 Version 1909 1,045 Windows 10 Version 1903 for ARM64-based Systems 1,037 Windows 10 Version 1903 for 32-bit Systems 1,034 Windows Server, version 1909 (Server Core installation) 989 Windows Server version 20H2 965 Microsoft Office LTSC 2021 953

All Critical High Medium Low Exploited only Public exploit

420 results · Clear filters · Feed

High 7.8

CVE-2023-28311 Public exploit

Microsoft Word Remote Code Execution Vulnerability

Microsoft Word Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC for Mac 2021 Microsoft Office 2019 for Mac

Apr 11, 2023
High 7.8

CVE-2023-28293 Public exploit

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 11, 2023
High 7.8

CVE-2023-28252 Exploited · Ransomware Public exploit EPSS 49%

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 11, 2023
KEV Apr 11, 2023
High 8.1

CVE-2023-28244 Public exploit

Windows Kerberos Elevation of Privilege Vulnerability

Windows Kerberos Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Apr 11, 2023
High 8.8

CVE-2023-28231 Public exploit EPSS 37%

DHCP Server Service Remote Code Execution Vulnerability

DHCP Server Service Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Apr 11, 2023
High 7.0

CVE-2023-28229 Exploited Public exploit

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 11, 2023
KEV Oct 4, 2023
High 8.1

CVE-2023-28288 Public exploit

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition

Apr 11, 2023
High 7.8

CVE-2023-28285 Public exploit

Microsoft Office Remote Code Execution Vulnerability

Microsoft Office Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC for Mac 2021 Microsoft Office 2019 for Mac

Apr 11, 2023
High 7.0

CVE-2023-28218 Public exploit EPSS 12%

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 11, 2023
High 8.2

CVE-2023-24892 Public exploit

Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability

Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Mar 14, 2023
High 8.8

CVE-2023-24871 Public exploit

Windows Bluetooth Service Remote Code Execution Vulnerability

Windows Bluetooth Service Remote Code Execution Vulnerability

Microsoft Windows Server 2022 Windows 10 Version 21H2 Windows 10 Version 22H2 Windows

Mar 14, 2023
High 7.8

CVE-2023-23399 Public exploit

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC for Mac 2021

Mar 14, 2023
High 8.8

CVE-2023-23388 Public exploit

Windows Bluetooth Driver Elevation of Privilege Vulnerability

Windows Bluetooth Driver Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 14, 2023
High 7.8

CVE-2023-21823 Exploited Public exploit

Windows Graphics Component Remote Code Execution Vulnerability

Windows Graphics Component Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows Android iOS

Feb 14, 2023
KEV Feb 14, 2023
High 7.8

CVE-2023-21688 Public exploit

NT OS Kernel Elevation of Privilege Vulnerability

NT OS Kernel Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Feb 14, 2023
High 7.8

CVE-2023-21817 Public exploit

Windows Kerberos Elevation of Privilege Vulnerability

Windows Kerberos Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Feb 14, 2023
High 8.8

CVE-2023-21707 Public exploit EPSS 80%

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 12

Feb 14, 2023
High 7.1

CVE-2023-21752 Public exploit

Windows Backup Service Elevation of Privilege Vulnerability

Windows Backup Service Elevation of Privilege Vulnerability

Microsoft Windows 10 Version 1809 Windows 10 Version 21H2 Windows 10 Version 1607 Windows

Jan 10, 2023
High 7.8

CVE-2023-21746 Public exploit

Windows NTLM Elevation of Privilege Vulnerability

Windows NTLM Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 10, 2023
High 7.8

CVE-2023-21537 Public exploit

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 10, 2023
High 8.8

CVE-2023-21742 Public exploit EPSS 56%

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition

Jan 10, 2023
High 8.8

CVE-2023-21674 Exploited Public exploit EPSS 34%

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 10, 2023
KEV Jan 10, 2023
High 7.0

CVE-2023-21739 Public exploit

Windows Bluetooth Driver Elevation of Privilege Vulnerability

Windows Bluetooth Driver Elevation of Privilege Vulnerability

Microsoft Windows 10 Version 1809 Windows 10 Version 21H2 Windows 10 Version 1607 Windows

Jan 10, 2023
High 7.8

CVE-2023-21768 Public exploit EPSS 65%

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Microsoft Windows Server 2022 Windows 11 version 22H2 Windows 11 version 21H2 Windows

Jan 10, 2023
High 7.8

CVE-2022-44666 Public exploit EPSS 41%

Windows Contacts Remote Code Execution Vulnerability

Windows Contacts Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 13, 2022
High 8.8

CVE-2022-41080 Exploited · Ransomware Public exploit EPSS 77%

Microsoft Exchange Server Elevation of Privilege Vulnerability

Microsoft Exchange Server Elevation of Privilege Vulnerability

Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 12

Nov 9, 2022
KEV Jan 10, 2023
High 7.0

CVE-2022-41114 Public exploit

Windows Bind Filter Driver Elevation of Privilege Vulnerability

Windows Bind Filter Driver Elevation of Privilege Vulnerability

Microsoft Windows Server 2022 Windows 10 Version 21H2 Windows 10 Version 22H2 Windows

Nov 9, 2022
High 7.0

CVE-2022-38029 Public exploit

Windows ALPC Elevation of Privilege Vulnerability

Windows ALPC Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Oct 11, 2022
High 7.8

CVE-2022-41032 Public exploit

NuGet Client Elevation of Privilege Vulnerability

NuGet Client Elevation of Privilege Vulnerability

Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Microsoft Visual Studio 2022 version 17.2 .NET 6.0 Ubuntu Alpine NuGet

Oct 11, 2022
High 7.8

CVE-2022-41034 Public exploit EPSS 67%

Visual Studio Code Remote Code Execution Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

Microsoft Visual Studio Code

Oct 11, 2022
High 8.8

CVE-2022-41040 Exploited · Ransomware Public exploit EPSS 100%

Microsoft Exchange Server Elevation of Privilege Vulnerability

Microsoft Exchange Server Elevation of Privilege Vulnerability

Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 12

Oct 3, 2022
KEV Sep 30, 2022
High 8.0

CVE-2022-41082 Exploited · Ransomware Public exploit EPSS 100%

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 12

Oct 3, 2022
KEV Sep 30, 2022
High 7.8

CVE-2022-37969 Exploited · Ransomware Public exploit EPSS 28%

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Sep 13, 2022
KEV Sep 14, 2022
High 8.8

CVE-2022-35841 Public exploit

Windows Enterprise App Management Service Remote Code Execution Vulnerability

Windows Enterprise App Management Service Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Sep 13, 2022
High 8.1

CVE-2022-33679 Public exploit EPSS 12%

Windows Kerberos Elevation of Privilege Vulnerability

Windows Kerberos Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Sep 13, 2022
High 8.8

CVE-2022-30216 Public exploit EPSS 88%

Windows Server Service Tampering Vulnerability

Windows Server Service Tampering Vulnerability

Microsoft Windows Server 2022 Windows 10 Version 21H2 Windows 11 version 21H2 Windows

Jul 12, 2022
High 7.8

CVE-2022-30206 Public exploit

Windows Print Spooler Elevation of Privilege Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 12, 2022
High 7.4

CVE-2022-30203 Public exploit

Windows Boot Manager Security Feature Bypass Vulnerability

Windows Boot Manager Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 12, 2022
High 8.1

CVE-2022-22029 Public exploit

Windows Network File System Remote Code Execution Vulnerability

Windows Network File System Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Jul 12, 2022
High 7.8

CVE-2022-30190 Exploited · Ransomware Public exploit EPSS 99%

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. Th…

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jun 1, 2022
KEV Jun 14, 2022