Vendor
Microsoft
14,257 known vulnerabilities.
Products
8,209 results · Clear filters · Feed
-
High 8.8
Microsoft Office Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft PowerPoint Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
-
High 7.0
Visual Studio Code Elevation of Privilege Vulnerability
Missing authentication for critical function in Visual Studio Code allows an authorized attacker to elevate privileges locally.
-
High 8.8
Visual Studio Code Remote Code Execution Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to execute code over a network.
-
High 7.8
Windows AppX Deployment Service Elevation of Privilege Vulnerability
Incorrect authorization in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.
-
High 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
High 7.5
Microsoft Office Outlook Remote Code Execution Vulnerability
Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Outlook Remote Code Execution Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office Outlook allows an authorized attacker to execute code over a network.
-
High 7.8
Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
Improper privilege management in Microsoft Azure Kubernetes Service allows an authorized attacker to elevate privileges locally.
-
High 7.7
Azure Confidential Clean Rooms Tampering Vulnerability
Missing authorization in Azure Confidential Clean Rooms allows an authorized attacker to perform tampering over a network.
-
High 8.8
Microsoft Defender Remote Code Execution Vulnerability
Null pointer dereference in Microsoft Defender allows an unauthorized attacker to execute code over a network.
-
High 7.3
Aspire Information Disclosure Vulnerability
Insertion of sensitive information into log file in Aspire allows an authorized attacker to disclose information locally.
-
High 8.8
Visual Studio Code Security Feature Bypass Vulnerability
Trust boundary violation in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
-
High 8.3
Visual Studio Code Remote Code Execution Vulnerability
Improper access control in Visual Studio Code allows an unauthorized attacker to execute code over a network.
-
High 8.3
Visual Studio Code Remote Code Execution Vulnerability
Incorrect authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.
-
High 7.0
Windows HTTP.sys Elevation of Privilege Vulnerability
Double free in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
-
High 7.8CVE-2026-119987 Public exploit
Microsoft Windows App Store Elevation of Privilege Vulnerability
Untrusted search path in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally.
-
High 7.5
ASP.NET Core Denial of Service Vulnerability
Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.
-
High 7.5
ASP.NET Core Denial of Service Vulnerability
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
-
High 7.5
.NET Denial of Service Vulnerability
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
-
High 7.5
ASP.NET Core Denial of Service Vulnerability
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
-
High 8.8
Visual Studio Remote Code Execution Vulnerability
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
-
High 7.5
Microsoft SQL Server Elevation of Privilege Vulnerability
Exposed dangerous method or function in SQL Server allows an authorized attacker to elevate privileges over a network.
-
High 8.8
Microsoft Exchange Server Remote Code Execution Vulnerability
Improper input validation in Microsoft Exchange Server allows an authorized attacker to execute code over a network.
-
High 7.1
Microsoft Exchange Server Spoofing Vulnerability
Improper access control in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.
-
High 8.8
Microsoft Exchange Server Elevation of Privilege Vulnerability
Reliance on untrusted inputs in a security decision in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
-
High 7.2
Microsoft Exchange Server Elevation of Privilege Vulnerability
Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
-
High 7.5
Microsoft Exchange Server Denial of Service Vulnerability
Inefficient algorithmic complexity in Microsoft Exchange Server allows an unauthorized attacker to deny service over a network.
-
High 8.8
Microsoft Exchange Server Elevation of Privilege Vulnerability
Authorization bypass through user-controlled key in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
-
High 7.2
Microsoft Exchange Server Elevation of Privilege Vulnerability
External control of file name or path in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
-
High 7.8
Windows Graphics Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
-
High 8.8
Microsoft Exchange Server Remote Code Execution Vulnerability
Improper control of generation of code ('code injection') in Microsoft Exchange Server allows an authorized attacker to execute code over a network.
-
High 8.8
Windows Network Connected Devices Auto-Setup Service Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Network Connected Devices Auto-Setup Service allows an unauthorized attacker to execute code over an adjacent network.
-
High 7.8
Windows PowerShell Remote Code Execution Vulnerability
Improper control of generation of code ('code injection') in Windows PowerShell allows an unauthorized attacker to execute code locally.
-
High 8.8
Microsoft PowerShell Security Feature Bypass Vulnerability
Execution with unnecessary privileges in Windows PowerShell allows an authorized attacker to bypass a security feature locally.
-
High 7.8
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.