Vendor
Microsoft
14,257 known vulnerabilities.
Products
14,257 results · Feed
-
Medium 6.5
Role: DNS Server Denial of Service Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
-
Medium 5.5
Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
-
High 8.8
Microsoft Office Excel Remote Code Execution Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
High 7.5
Microsoft Office SharePoint Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
-
Critical 9.8
Microsoft PostScript Printer Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.
-
Critical 9.4
ASP.NET Core Tampering Vulnerability
Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network.
-
High 8.8
Windows Domain Name Service Remote Code Execution Vulnerability
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
-
High 8.8
Windows Domain Name Service Remote Code Execution Vulnerability
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
-
High 8.1
Windows DHCP Server Remote Code Execution Vulnerability
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
-
High 8.1
Windows DHCP Server Remote Code Execution Vulnerability
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
-
High 8.8
Windows Domain Name Service Remote Code Execution Vulnerability
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
-
High 7.8
Desktop Window Manager Elevation of Privilege Vulnerability
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
-
High 8.8
Microsoft Exchange Server Elevation of Privilege Vulnerability
Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
-
Medium 6.5
Skype for Business Elevation of Privilege Vulnerability
Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.
-
High 8.1
Skype for Business Elevation of Privilege Vulnerability
Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.
-
High 8.8
Configuration Manager Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.
-
High 7.8
Microsoft Exchange Server Elevation of Privilege Vulnerability
Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.
-
High 7.8
Microsoft Exchange Server Elevation of Privilege Vulnerability
Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.
-
High 7.5
Microsoft Exchange Server Elevation of Privilege Vulnerability
Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
-
High 8.1
Microsoft Exchange Server Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.
-
Critical 9.3
Microsoft Exchange Server Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
-
High 8.8
Skype for Business Remote Code Execution Vulnerability
Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network.
-
High 8.2
Azure Key Vault Client SDK Elevation of Privilege Vulnerability
Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network.
-
High 7.4
Azure Key Vault Security Feature Bypass Vulnerability
Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network.
-
Medium 5.5
Microsoft Trace Data Helper Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.
-
Medium 5.5
Microsoft Trace Data Helper Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.
-
High 7.8
Desktop Window Manager Elevation of Privilege Vulnerability
Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Microsoft Defender Information Disclosure Vulnerability
Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to disclose information locally.
-
High 8.1
Windows Active Directory Domain Services Remote Code Execution Vulnerability
Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.
-
High 7.8
Windows Backup Engine Elevation of Privilege Vulnerability
Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
-
High 8.8
Windows DHCP Client Remote Code Execution Vulnerability
Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network.
-
Medium 5.5
Windows Device Association Service Information Disclosure Vulnerability
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.
-
High 7.0
Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
High 8.1
Windows Kernel Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network.
-
High 7.0
Windows NTFS Elevation of Privilege Vulnerability
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Network File System Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally.
-
High 7.8
Windows Spaceport.sys Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally.
-
High 7.8CVE-2026-70054 Public exploit
Windows NetBIOS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally.
-
Medium 6.5
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.