Vendor

Microsoft

14,257 known vulnerabilities.

Products

Windows Server 2019 6,362 Windows Server 2019 (Server Core installation) 6,265 Windows 10 Version 1809 5,907 Windows Server 2022 5,762 Windows Server 2016 5,572 Windows Server 2016 (Server Core installation) 5,368 Windows 10 Version 21H2 5,141 Windows 10 Version 1607 4,987 Windows 10 Version 22H2 4,643 Windows Server 2025 4,336 Windows Server 2025 (Server Core installation) 4,334 Windows 11 Version 24H2 4,232 Windows Server 2012 R2 4,119 Windows 11 version 23H2 4,056 Windows Server 2012 R2 (Server Core installation) 3,974 Windows Server 2012 3,881 Windows Server 2012 (Server Core installation) 3,748 Windows 11 Version 25H2 3,497 Windows 11 version 26H1 3,230 Windows 10 Version 1507 2,323 Windows Server 2008 R2 Service Pack 1 1,900 Windows Server 2008 R2 Service Pack 1 (Server Core installation) 1,886 Windows 11 version 22H2 1,776 Windows Server 2022, 23H2 Edition (Server Core installation) 1,723 Windows Server 2008 Service Pack 2 1,694 Windows Server 2008 Service Pack 2 (Server Core installation) 1,689 Windows 11 Version 26H2 1,663 Windows 11 version 21H2 1,560 Windows 11 version 22H3 1,276 Windows 10 Version 20H2 1,259 Windows 8.1 1,117 Microsoft 365 Apps for Enterprise 1,105 Windows 10 Version 1903 for x64-based Systems 1,069 Windows Server, version 1903 (Server Core installation) 1,055 Windows 10 Version 1909 1,045 Windows 10 Version 1903 for ARM64-based Systems 1,037 Windows 10 Version 1903 for 32-bit Systems 1,034 Windows Server, version 1909 (Server Core installation) 989 Windows Server version 20H2 965 Microsoft Office LTSC 2021 953

All Critical High Medium Low Exploited only Public exploit

8,209 results · Clear filters · Feed

High 7.8

CVE-2023-36407 Public exploit

Windows Hyper-V Elevation of Privilege Vulnerability

Windows Hyper-V Elevation of Privilege Vulnerability

Microsoft Windows Server 2022 Windows 11 version 23H2 Windows 11 version 22H2 Windows

Nov 14, 2023
High 8.0

CVE-2023-36439

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 12 Microsoft Exchange Server 2019 Cumulative Update 13

Nov 14, 2023
High 8.8

CVE-2023-36017 EPSS 25%

Windows Scripting Engine Memory Corruption Vulnerability

Windows Scripting Engine Memory Corruption Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 14, 2023
High 7.8

CVE-2023-36036 Exploited EPSS 17%

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 14, 2023
KEV Nov 14, 2023
High 8.6

CVE-2023-36052 EPSS 21%

Azure CLI REST Command Information Disclosure Vulnerability

Azure CLI REST Command Information Disclosure Vulnerability

Microsoft Azure App Service Azure Logic App Azure Function App

Nov 14, 2023
High 7.6

CVE-2023-36410

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft Microsoft Dynamics 365 (on-premises) version 9.1

Nov 14, 2023
High 7.8

CVE-2023-36422

Microsoft Windows Defender Elevation of Privilege Vulnerability

Microsoft Windows Defender Elevation of Privilege Vulnerability

Microsoft Windows Defender Antimalware Platform Windows

Nov 14, 2023
High 8.8

CVE-2023-36423

Microsoft Remote Registry Service Remote Code Execution Vulnerability

Microsoft Remote Registry Service Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 14, 2023
High 8.0

CVE-2023-36425

Windows Distributed File System (DFS) Remote Code Execution Vulnerability

Windows Distributed File System (DFS) Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 14, 2023
High 7.8

CVE-2023-36424 Exploited Public exploit EPSS 12%

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 14, 2023
KEV Apr 13, 2026
High 7.0

CVE-2023-36427 Public exploit

Windows Hyper-V Elevation of Privilege Vulnerability

Windows Hyper-V Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 14, 2023
High 7.8

CVE-2023-36705

Windows Installer Elevation of Privilege Vulnerability

Windows Installer Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 14, 2023
High 8.8

CVE-2023-36560

ASP.NET Security Feature Bypass Vulnerability

ASP.NET Security Feature Bypass Vulnerability

Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 AND 4.8 Microsoft .NET Framework 3.5 AND 4.7.2

Nov 14, 2023
High 7.8

CVE-2023-36719

Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability

Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 14, 2023
High 8.8

CVE-2023-38151

Microsoft Host Integration Server 2020 Remote Code Execution Vulnerability

Microsoft Host Integration Server 2020 Remote Code Execution Vulnerability

Microsoft Host Integration Server 2020

Nov 14, 2023
High 7.1

CVE-2023-36027

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Microsoft Edge (Chromium-based) Microsoft Edge (Chromium-based) Extended Stable Browsers

Nov 10, 2023
High 7.1

CVE-2023-36024

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Microsoft Edge (Chromium-based) Microsoft Edge (Chromium-based) Extended Stable Browsers

Nov 9, 2023
High 7.3

CVE-2023-36014

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Nov 9, 2023
High 7.3

CVE-2023-36034

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Microsoft Edge (Chromium-based) Microsoft Edge (Chromium-based) Extended Stable Browsers

Nov 3, 2023
High 8.8

CVE-2023-36414

Azure Identity SDK Remote Code Execution Vulnerability

Azure Identity SDK Remote Code Execution Vulnerability

Microsoft Azure Identity SDK for .NET Azure.Identity NuGet

Oct 10, 2023
High 8.8

CVE-2023-36415

Azure Identity SDK Remote Code Execution Vulnerability

Azure Identity SDK Remote Code Execution Vulnerability

Microsoft Azure Identity SDK for .NET Azure Identity SDK for Python Azure Identity SDK for JavaScript

Oct 10, 2023
High 7.8

CVE-2023-36418

Azure RTOS GUIX Studio Remote Code Execution Vulnerability

Azure RTOS GUIX Studio Remote Code Execution Vulnerability

Microsoft Azure RTOS GUIX Studio

Oct 10, 2023
High 7.8

CVE-2023-36436

Windows MSHTML Platform Remote Code Execution Vulnerability

Windows MSHTML Platform Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Oct 10, 2023
High 7.0

CVE-2023-36565

Microsoft Office Graphics Elevation of Privilege Vulnerability

Microsoft Office Graphics Elevation of Privilege Vulnerability

Microsoft Microsoft Office LTSC for Mac 2021 Microsoft Office 2019 for Mac Microsoft Office for Android Android

Oct 10, 2023
High 7.8

CVE-2023-36743

Win32k Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Oct 10, 2023
High 7.0

CVE-2023-36776

Win32k Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Oct 10, 2023
High 8.0

CVE-2023-36778

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 12 Microsoft Exchange Server 2019 Cumulative Update 13

Oct 10, 2023
High 7.2

CVE-2023-36780

Skype for Business Remote Code Execution Vulnerability

Skype for Business Remote Code Execution Vulnerability

Microsoft Skype for Business Server 2015 CU13 Skype for Business Server 2019 CU7

Oct 10, 2023
High 7.2

CVE-2023-36786

Skype for Business Remote Code Execution Vulnerability

Skype for Business Remote Code Execution Vulnerability

Microsoft Skype for Business Server 2015 CU13 Skype for Business Server 2019 CU7

Oct 10, 2023
High 7.8

CVE-2023-36785

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR) Microsoft SQL Server 2022 (GDR) Microsoft ODBC Driver 17 for SQL Server on Windows Linux Windows macOS

Oct 10, 2023
High 7.8

CVE-2023-36790

Windows RDP Encoder Mirror Driver Elevation of Privilege Vulnerability

Windows RDP Encoder Mirror Driver Elevation of Privilege Vulnerability

Microsoft Windows Server 2008 R2 Service Pack 1 Windows Server 2008 R2 Service Pack 1 (Server Core installation) Windows Server 2008 Service Pack 2 Windows

Oct 10, 2023
High 7.2

CVE-2023-36789

Skype for Business Remote Code Execution Vulnerability

Skype for Business Remote Code Execution Vulnerability

Microsoft Skype for Business Server 2015 CU13 Skype for Business Server 2019 CU7

Oct 10, 2023
High 8.1

CVE-2023-38166

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Oct 10, 2023
High 7.0

CVE-2023-38159

Windows Graphics Component Elevation of Privilege Vulnerability

Windows Graphics Component Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Oct 10, 2023
High 7.5

CVE-2023-29348

Windows Remote Desktop Gateway (RD Gateway) Information Disclosure Vulnerability

Windows Remote Desktop Gateway (RD Gateway) Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Oct 10, 2023
High 7.8

CVE-2023-36417

Microsoft SQL OLE DB Remote Code Execution Vulnerability

Microsoft SQL OLE DB Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR) Microsoft SQL Server 2022 (GDR) Microsoft OLE DB Driver 19 for SQL Server

Oct 10, 2023
High 7.8

CVE-2023-36420

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR) Microsoft SQL Server 2022 (GDR) Microsoft ODBC Driver 18 for SQL Server on Windows Linux Windows macOS

Oct 10, 2023
High 8.8

CVE-2023-36419

Azure HDInsight Apache Oozie Workflow Scheduler XXE Elevation of Privilege Vulnerability

Azure HDInsight Apache Oozie Workflow Scheduler XXE Elevation of Privilege Vulnerability

Microsoft Azure HDInsight

Oct 10, 2023
High 7.5

CVE-2023-36431

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Oct 10, 2023
High 7.5

CVE-2023-36435

Microsoft QUIC Denial of Service Vulnerability

Microsoft QUIC Denial of Service Vulnerability

Microsoft Windows Server 2022 Windows 11 version 22H2 Windows 11 version 21H2 Windows Alpine NuGet

Oct 10, 2023