Vendor

Microsoft

14,257 known vulnerabilities.

Products

Windows Server 2019 6,362 Windows Server 2019 (Server Core installation) 6,265 Windows 10 Version 1809 5,907 Windows Server 2022 5,762 Windows Server 2016 5,572 Windows Server 2016 (Server Core installation) 5,368 Windows 10 Version 21H2 5,141 Windows 10 Version 1607 4,987 Windows 10 Version 22H2 4,643 Windows Server 2025 4,336 Windows Server 2025 (Server Core installation) 4,334 Windows 11 Version 24H2 4,232 Windows Server 2012 R2 4,119 Windows 11 version 23H2 4,056 Windows Server 2012 R2 (Server Core installation) 3,974 Windows Server 2012 3,881 Windows Server 2012 (Server Core installation) 3,748 Windows 11 Version 25H2 3,497 Windows 11 version 26H1 3,230 Windows 10 Version 1507 2,323 Windows Server 2008 R2 Service Pack 1 1,900 Windows Server 2008 R2 Service Pack 1 (Server Core installation) 1,886 Windows 11 version 22H2 1,776 Windows Server 2022, 23H2 Edition (Server Core installation) 1,723 Windows Server 2008 Service Pack 2 1,694 Windows Server 2008 Service Pack 2 (Server Core installation) 1,689 Windows 11 Version 26H2 1,663 Windows 11 version 21H2 1,560 Windows 11 version 22H3 1,276 Windows 10 Version 20H2 1,259 Windows 8.1 1,117 Microsoft 365 Apps for Enterprise 1,105 Windows 10 Version 1903 for x64-based Systems 1,069 Windows Server, version 1903 (Server Core installation) 1,055 Windows 10 Version 1909 1,045 Windows 10 Version 1903 for ARM64-based Systems 1,037 Windows 10 Version 1903 for 32-bit Systems 1,034 Windows Server, version 1909 (Server Core installation) 989 Windows Server version 20H2 965 Microsoft Office LTSC 2021 953

All Critical High Medium Low Exploited only Public exploit

93 results · Clear filters · Feed

Medium 5.5

CVE-2024-26160 Public exploit EPSS 11%

Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability

Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability

Microsoft Windows 11 version 23H2 Windows 11 version 22H2 Windows Server 2022, 23H2 Edition (Server Core installation) Windows

Mar 12, 2024
Medium 6.1

CVE-2024-0590 Public exploit

Microsoft Clarity <= 0.9.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The Microsoft Clarity plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.9.3. This is due to missing nonce validation on the edit_clarity_project_id() function. This makes it possible for unauthenticated a…

Microsoft Microsoft Clarity Web / CMS

Feb 20, 2024
Medium 6.5

CVE-2024-21388 Public exploit EPSS 36%

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Jan 30, 2024
Medium 6.5

CVE-2024-21320 Public exploit EPSS 23%

Windows Themes Spoofing Vulnerability

Windows Themes Spoofing Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 9, 2024
Medium 5.7

CVE-2024-21306 Public exploit

Microsoft Bluetooth Driver Spoofing Vulnerability

Microsoft Bluetooth Driver Spoofing Vulnerability

Microsoft Windows Server 2022 Windows 10 Version 21H2 Windows 10 Version 22H2 Windows

Jan 9, 2024
Medium 4.4

CVE-2024-21305 Public exploit

Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability

Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 9, 2024
Medium 6.6

CVE-2024-20666 Public exploit

BitLocker Security Feature Bypass Vulnerability

BitLocker Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 9, 2024
Medium 6.5

CVE-2023-35636 Public exploit EPSS 18%

Microsoft Outlook Information Disclosure Vulnerability

Microsoft Outlook Information Disclosure Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office 2019

Dec 12, 2023
Medium 6.7

CVE-2023-36003 Public exploit

XAML Diagnostics Elevation of Privilege Vulnerability

XAML Diagnostics Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 12, 2023
Medium 6.5

CVE-2023-33145 Public exploit

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Jun 13, 2023
Medium 6.7

CVE-2023-24932 Public exploit EPSS 12%

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

May 9, 2023
Medium 6.5

CVE-2023-29324 Public exploit

Windows MSHTML Platform Security Feature Bypass Vulnerability

Windows MSHTML Platform Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

May 9, 2023
Medium 4.5

CVE-2023-23408 Public exploit

Azure Apache Ambari Spoofing Vulnerability

Azure Apache Ambari Spoofing Vulnerability

Microsoft Azure HDInsight

Mar 14, 2023
Medium 6.5

CVE-2023-23396 Public exploit

Microsoft Excel Denial of Service Vulnerability

Microsoft Excel Denial of Service Vulnerability

Microsoft Microsoft Office Online Server Microsoft Office Web Apps Server 2013 Service Pack 1

Mar 14, 2023
Medium 4.7

CVE-2023-21766 Public exploit

Windows Overlay Filter Information Disclosure Vulnerability

Windows Overlay Filter Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 10, 2023
Medium 6.8

CVE-2023-21563 Public exploit

BitLocker Security Feature Bypass Vulnerability

BitLocker Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 10, 2023
Medium 6.6

CVE-2023-21560 Public exploit

Windows Boot Manager Security Feature Bypass Vulnerability

Windows Boot Manager Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 10, 2023
Medium 4.6

CVE-2022-41099 Public exploit

BitLocker Security Feature Bypass Vulnerability

BitLocker Security Feature Bypass Vulnerability

Microsoft Windows 10 Version 1809 Windows 10 Version 21H2 Windows 10 Version 1607 Windows

Nov 9, 2022
Medium 5.5

CVE-2022-24483 Public exploit

Windows Kernel Information Disclosure Vulnerability

Windows Kernel Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 15, 2022
Medium 6.5

CVE-2022-23253 Public exploit EPSS 56%

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 9, 2022
Medium 6.1

CVE-2022-21970 Public exploit

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Jan 11, 2022
Medium 4.4

CVE-2022-21894 Public exploit

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 11, 2022
Medium 5.5

CVE-2022-21877 Public exploit

Storage Spaces Controller Information Disclosure Vulnerability

Storage Spaces Controller Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 11, 2022
Medium 6.1

CVE-2022-21839 Public exploit

Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability

Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 11, 2022
Medium 4.3

CVE-2021-43908 Public exploit

Visual Studio Code Spoofing Vulnerability

Visual Studio Code Spoofing Vulnerability

Microsoft Visual Studio Code

Dec 15, 2021
Medium 5.5

CVE-2021-43224 Public exploit

Windows Common Log File System Driver Information Disclosure Vulnerability

Windows Common Log File System Driver Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 15, 2021
Medium 4.3

CVE-2021-41351 Public exploit

Microsoft Edge (Chrome based) Spoofing on IE Mode

Microsoft Edge (Chrome based) Spoofing on IE Mode

Microsoft Microsoft Edge (Chromium-based) in IE Mode Browsers

Nov 10, 2021
Medium 6.5

CVE-2021-41349 Public exploit EPSS 93%

Microsoft Exchange Server Spoofing Vulnerability

Microsoft Exchange Server Spoofing Vulnerability

Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 11 Microsoft Exchange Server 2016 Cumulative Update 22

Nov 10, 2021
Medium 5.5

CVE-2021-41338 Public exploit

Windows AppContainer Firewall Rules Security Feature Bypass Vulnerability

Windows AppContainer Firewall Rules Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Oct 13, 2021
Medium 5.5

CVE-2021-31955 Exploited Public exploit EPSS 81%

Windows Kernel Information Disclosure Vulnerability

Windows Kernel Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jun 8, 2021
KEV Nov 3, 2021
Medium 4.8

CVE-2021-26414 Public exploit EPSS 50%

Windows DCOM Server Security Feature Bypass

Windows DCOM Server Security Feature Bypass

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jun 8, 2021
Medium 6.6

CVE-2021-31207 Exploited · Ransomware Public exploit EPSS 100%

Microsoft Exchange Server Security Feature Bypass Vulnerability

Microsoft Exchange Server Security Feature Bypass Vulnerability

Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2016 Cumulative Update 19 Microsoft Exchange Server 2019 Cumulative Update 8

May 11, 2021
KEV Nov 3, 2021
Medium 5.5

CVE-2021-31184 Public exploit

Microsoft Windows Infrared Data Association (IrDA) Information Disclosure Vulnerability

Microsoft Windows Infrared Data Association (IrDA) Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

May 11, 2021
Medium 5.5

CVE-2021-24098 Public exploit

Windows Console Driver Denial of Service Vulnerability

Windows Console Driver Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Feb 25, 2021
Medium 6.5

CVE-2021-24085 Public exploit

Microsoft Exchange Server Spoofing Vulnerability

Microsoft Exchange Server Spoofing Vulnerability

Microsoft Microsoft Exchange Server 2016 Cumulative Update 19 Microsoft Exchange Server 2019 Cumulative Update 8 Microsoft Exchange Server 2016 Cumulative Update 18

Feb 25, 2021
Medium 5.5

CVE-2021-24084 Public exploit

Windows Mobile Device Management Information Disclosure Vulnerability

Windows Mobile Device Management Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Feb 25, 2021
Medium 5.5

CVE-2021-1699 Public exploit

Windows (modem.sys) Information Disclosure Vulnerability

Windows (modem.sys) Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 12, 2021
Medium 5.5

CVE-2021-1656 Public exploit

TPM Device Driver Information Disclosure Vulnerability

TPM Device Driver Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 12, 2021
Medium 5.5

CVE-2020-16938 Public exploit

Windows Kernel Information Disclosure Vulnerability

<p>An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p> <p>To exploit this …

Microsoft Windows 10 Version 2004 Windows Server version 2004 Windows

Oct 16, 2020
Medium 6.8

CVE-2020-1034 Public exploit

Windows Kernel Elevation of Privilege Vulnerability

<p>An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.</p> <p>To exploit the vulnerability, a local…

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Sep 11, 2020