Vendor

Microsoft

14,257 known vulnerabilities.

Products

Windows Server 2019 6,362 Windows Server 2019 (Server Core installation) 6,265 Windows 10 Version 1809 5,907 Windows Server 2022 5,762 Windows Server 2016 5,572 Windows Server 2016 (Server Core installation) 5,368 Windows 10 Version 21H2 5,141 Windows 10 Version 1607 4,987 Windows 10 Version 22H2 4,643 Windows Server 2025 4,336 Windows Server 2025 (Server Core installation) 4,334 Windows 11 Version 24H2 4,232 Windows Server 2012 R2 4,119 Windows 11 version 23H2 4,056 Windows Server 2012 R2 (Server Core installation) 3,974 Windows Server 2012 3,881 Windows Server 2012 (Server Core installation) 3,748 Windows 11 Version 25H2 3,497 Windows 11 version 26H1 3,230 Windows 10 Version 1507 2,323 Windows Server 2008 R2 Service Pack 1 1,900 Windows Server 2008 R2 Service Pack 1 (Server Core installation) 1,886 Windows 11 version 22H2 1,776 Windows Server 2022, 23H2 Edition (Server Core installation) 1,723 Windows Server 2008 Service Pack 2 1,694 Windows Server 2008 Service Pack 2 (Server Core installation) 1,689 Windows 11 Version 26H2 1,663 Windows 11 version 21H2 1,560 Windows 11 version 22H3 1,276 Windows 10 Version 20H2 1,259 Windows 8.1 1,117 Microsoft 365 Apps for Enterprise 1,105 Windows 10 Version 1903 for x64-based Systems 1,069 Windows Server, version 1903 (Server Core installation) 1,055 Windows 10 Version 1909 1,045 Windows 10 Version 1903 for ARM64-based Systems 1,037 Windows 10 Version 1903 for 32-bit Systems 1,034 Windows Server, version 1909 (Server Core installation) 989 Windows Server version 20H2 965 Microsoft Office LTSC 2021 953

All Critical High Medium Low Exploited only Public exploit

3,075 results · Clear filters · Feed

Medium 5.5

CVE-2024-28902

Windows Remote Access Connection Manager Information Disclosure Vulnerability

Windows Remote Access Connection Manager Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 9, 2024
Medium 5.5

CVE-2024-28901

Windows Remote Access Connection Manager Information Disclosure Vulnerability

Windows Remote Access Connection Manager Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 9, 2024
Medium 6.3

CVE-2024-28898

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 9, 2024
Medium 6.4

CVE-2024-28923

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 9, 2024
Medium 6.7

CVE-2024-28919

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 9, 2024
Medium 6.7

CVE-2024-28921

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 9, 2024
Medium 4.1

CVE-2024-28922

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 9, 2024
Medium 5.5

CVE-2024-26172

Windows DWM Core Library Information Disclosure Vulnerability

Windows DWM Core Library Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 9, 2024
Medium 5.5

CVE-2024-26255

Windows Remote Access Connection Manager Information Disclosure Vulnerability

Windows Remote Access Connection Manager Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 9, 2024
Medium 6.8

CVE-2024-26253

Windows rndismp6.sys Remote Code Execution Vulnerability

Windows rndismp6.sys Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 9, 2024
Medium 6.8

CVE-2024-26252

Windows rndismp6.sys Remote Code Execution Vulnerability

Windows rndismp6.sys Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 9, 2024
Medium 6.7

CVE-2024-26250

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 9, 2024
Medium 6.5

CVE-2024-21424

Azure Compute Gallery Elevation of Privilege Vulnerability

Azure Compute Gallery Elevation of Privilege Vulnerability

Microsoft Azure Compute Gallery

Apr 9, 2024
Medium 6.7

CVE-2024-20669

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 9, 2024
Medium 4.1

CVE-2024-29049

Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability

Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability

Microsoft Microsoft Edge (Chromium-based) Microsoft Edge (Chromium-based) Extended Stable Browsers

Apr 4, 2024
Medium 4.3

CVE-2024-29981

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Microsoft Microsoft Edge (Chromium-based) Microsoft Edge (Chromium-based) Extended Stable Browsers

Apr 4, 2024
Medium 4.3

CVE-2024-29057

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Mar 22, 2024
Medium 4.7

CVE-2024-26247

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Mar 22, 2024
Medium 4.7

CVE-2024-26163

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

Microsoft Microsoft Edge (Chromium-based) Microsoft Edge (Chromium-based) Extended Stable Browsers

Mar 14, 2024
Medium 6.5

CVE-2024-26185 EPSS 30%

Windows Compressed Folder Tampering Vulnerability

Windows Compressed Folder Tampering Vulnerability

Microsoft Windows 11 version 23H2 Windows 11 version 22H2 Windows 11 version 22H3 Windows

Mar 12, 2024
Medium 5.5

CVE-2024-26181

Windows Kernel Denial of Service Vulnerability

Windows Kernel Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 12, 2024
Medium 5.5

CVE-2024-26177

Windows Kernel Information Disclosure Vulnerability

Windows Kernel Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 12, 2024
Medium 5.5

CVE-2024-26174

Windows Kernel Information Disclosure Vulnerability

Windows Kernel Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 12, 2024
Medium 5.0

CVE-2024-21448

Microsoft Teams for Android Information Disclosure Vulnerability

Microsoft Teams for Android Information Disclosure Vulnerability

Microsoft Microsoft Teams for Android Android

Mar 12, 2024
Medium 5.5

CVE-2024-26160 Public exploit EPSS 11%

Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability

Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability

Microsoft Windows 11 version 23H2 Windows 11 version 22H2 Windows Server 2022, 23H2 Edition (Server Core installation) Windows

Mar 12, 2024
Medium 5.5

CVE-2024-21408

Windows Hyper-V Denial of Service Vulnerability

Windows Hyper-V Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 12, 2024
Medium 6.6

CVE-2024-26201

Microsoft Intune Linux Agent Elevation of Privilege Vulnerability

Microsoft Intune Linux Agent Elevation of Privilege Vulnerability

Microsoft Intune Company Portal for Android Android

Mar 12, 2024
Medium 6.5

CVE-2024-26197

Windows Standards-Based Storage Management Service Denial of Service Vulnerability

Windows Standards-Based Storage Management Service Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Mar 12, 2024
Medium 5.7

CVE-2024-21430

Windows USB Attached SCSI (UAS) Protocol Remote Code Execution Vulnerability

Windows USB Attached SCSI (UAS) Protocol Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 12, 2024
Medium 6.8

CVE-2024-21429

Windows USB Hub Driver Remote Code Execution Vulnerability

Windows USB Hub Driver Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 12, 2024
Medium 5.5

CVE-2024-20671

Microsoft Defender Security Feature Bypass Vulnerability

Microsoft Defender Security Feature Bypass Vulnerability

Microsoft Windows Defender Antimalware Platform Windows

Mar 12, 2024
Medium 4.3

CVE-2024-26167

Microsoft Edge for Android Spoofing Vulnerability

Microsoft Edge for Android Spoofing Vulnerability

Microsoft Microsoft Edge for Android Android Browsers

Mar 7, 2024
Medium 4.3

CVE-2024-26196

Microsoft Edge for Android (Chromium-based) Information Disclosure Vulnerability

Microsoft Edge for Android (Chromium-based) Information Disclosure Vulnerability

Microsoft Microsoft Edge for Android Android Browsers

Feb 29, 2024
Medium 4.3

CVE-2024-26188

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Microsoft Microsoft Edge for Android Android Browsers

Feb 23, 2024
Medium 4.8

CVE-2024-21423

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Feb 23, 2024
Medium 6.1

CVE-2024-0590 Public exploit

Microsoft Clarity <= 0.9.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The Microsoft Clarity plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.9.3. This is due to missing nonce validation on the edit_clarity_project_id() function. This makes it possible for unauthenticated a…

Microsoft Microsoft Clarity Web / CMS

Feb 20, 2024
Medium 5.3

CVE-2024-21397

Microsoft Azure File Sync Elevation of Privilege Vulnerability

Microsoft Azure File Sync Elevation of Privilege Vulnerability

Microsoft Azure File Sync

Feb 13, 2024
Medium 5.5

CVE-2024-21377

Windows DNS Information Disclosure Vulnerability

Windows DNS Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Feb 13, 2024
Medium 5.0

CVE-2024-21374

Microsoft Teams for Android Information Disclosure Vulnerability

Microsoft Teams for Android Information Disclosure Vulnerability

Microsoft Microsoft Teams for Android Android

Feb 13, 2024
Medium 5.5

CVE-2024-21362

Windows Kernel Security Feature Bypass Vulnerability

Windows Kernel Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Feb 13, 2024