Microsoft Vulnerabilities and Affected Products

Products

Windows Server 20194,131 vulnerabilities
Windows Server 2019 (Server Core installation)4,034 vulnerabilities
Windows 10 Version 18093,762 vulnerabilities
Windows Server 20163,677 vulnerabilities
Windows Server 20223,485 vulnerabilities
Windows Server 2016 (Server Core installation)3,473 vulnerabilities
Windows 10 Version 16073,184 vulnerabilities
Windows 10 Version 21H23,063 vulnerabilities
Windows Server 2012 R22,998 vulnerabilities
Windows Server 2012 R2 (Server Core installation)2,853 vulnerabilities
Windows Server 20122,824 vulnerabilities
Windows Server 2012 (Server Core installation)2,691 vulnerabilities
Windows 10 Version 22H22,565 vulnerabilities
Windows 10 Version 15072,277 vulnerabilities
Windows 11 Version 24H21,924 vulnerabilities
Windows Server 20251,917 vulnerabilities
Windows Server 2025 (Server Core installation)1,917 vulnerabilities
Windows Server 2008 R2 Service Pack 11,874 vulnerabilities
Windows Server 2008 R2 Service Pack 1 (Server Core installation)1,860 vulnerabilities
Windows 11 Version 23H21,845 vulnerabilities
Windows 11 version 22H21,776 vulnerabilities
Windows Server 2022, 23H2 Edition (Server Core installation)1,725 vulnerabilities
Windows Server 2008 Service Pack 2 (Server Core installation)1,667 vulnerabilities
Windows Server 2008 Service Pack 21,664 vulnerabilities
Windows 11 version 21H21,560 vulnerabilities

Microsoft vulnerability results
Vulnerability	Title and context	CVSS	EPSS	PoCs	Signals	STIX action
CVE-2022-35759MEDIUM	Windows Local Security Authority (LSA) Denial of Service Vulnerability Windows Local Security Authority (LSA) Denial of Service Vulnerability May 31, 2023	CVSS6.5v3.1	EPSS1.7%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2022-35758MEDIUM	Windows Kernel Memory Information Disclosure Vulnerability Windows Kernel Memory Information Disclosure Vulnerability May 31, 2023	CVSS5.5v3.1	EPSS0.497%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2022-35756HIGH	Windows Kerberos Elevation of Privilege Vulnerability Windows Kerberos Elevation of Privilege Vulnerability May 31, 2023	CVSS7.8v3.1	EPSS11.3%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2022-35755HIGH	Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Elevation of Privilege Vulnerability May 31, 2023	CVSS7.3v3.1	EPSS9.8%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2022-35754MEDIUM	Unified Write Filter Elevation of Privilege Vulnerability Unified Write Filter Elevation of Privilege Vulnerability May 31, 2023	CVSS6.7v3.1	EPSS0.41%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2022-35753HIGH	Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability May 31, 2023	CVSS8.1v3.1	EPSS1.23%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2022-35752HIGH	Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability May 31, 2023	CVSS8.1v3.1	EPSS1.23%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2022-35751HIGH	Windows Hyper-V Elevation of Privilege Vulnerability Windows Hyper-V Elevation of Privilege Vulnerability May 31, 2023	CVSS7.8v3.1	EPSS5.46%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2022-35750HIGH	Win32k Elevation of Privilege Vulnerability Win32k Elevation of Privilege Vulnerability May 31, 2023	CVSS7.8v3.1	EPSS6.48%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2022-35749HIGH	Windows Digital Media Receiver Elevation of Privilege Vulnerability Windows Digital Media Receiver Elevation of Privilege Vulnerability May 31, 2023	CVSS7.8v3.1	EPSS0.545%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2022-35747MEDIUM	Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability May 31, 2023	CVSS5.9v3.1	EPSS1.68%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2022-35746HIGH	Windows Digital Media Receiver Elevation of Privilege Vulnerability Windows Digital Media Receiver Elevation of Privilege Vulnerability May 31, 2023	CVSS7.8v3.1	EPSS0.545%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2022-35745HIGH	Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability May 31, 2023	CVSS8.1v3.1	EPSS1.23%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2022-35744CRITICAL	Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability May 31, 2023	CVSS9.8v3.1	EPSS1.98%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2022-35743HIGH	Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability CWE-94May 31, 2023	CVSS7.8v3.1	EPSS1.45%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2023-21712HIGH	Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability CWE-362Apr 27, 2023	CVSS8.1v3.1	EPSS0.993%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2023-21677HIGH	Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability. This CVE ID is unique from CVE-2023-21683, CVE-2023-21758. CWE-822Jan 10, 2023	CVSS7.5v3.1	EPSS1.98%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2023-21674HIGH	Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability. CWE-416Jan 10, 2023	CVSS8.8v3.1	EPSS41.8%	PoCs1	SignalsListed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2023-21556HIGH	Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2023-21543, CVE-2023-21546, CVE-2023-21555, CVE-2023-21679. CWE-191Jan 10, 2023	CVSS8.1v3.1	EPSS1.46%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2023-21748HIGH	Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2023-21675, CVE-2023-21747, CVE-2023-21749, CVE-2023-21750, CVE-2023-21754, CVE-2023-21755, CVE-2023-21772, CVE-2023-21773, CVE-2023-21774. Jan 10, 2023	CVSS7.8v3.1	EPSS0.826%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2023-21535HIGH	Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2023-21548. CWE-362 CWE-591Jan 10, 2023	CVSS8.1v3.1	EPSS1.08%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2023-21682MEDIUM	Windows Point-to-Point Protocol (PPP) Information Disclosure Vulnerability Windows Point-to-Point Protocol (PPP) Information Disclosure Vulnerability. CWE-125Jan 10, 2023	CVSS5.3v3.1	EPSS1.37%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2023-21773HIGH	Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2023-21675, CVE-2023-21747, CVE-2023-21748, CVE-2023-21749, CVE-2023-21750, CVE-2023-21754, CVE-2023-21755, CVE-2023-21772, CVE-2023-21774. CWE-269 CWE-416Jan 10, 2023	CVSS7.8v3.1	EPSS0.702%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2023-21557HIGH	Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability. CWE-190 CWE-400Jan 10, 2023	CVSS7.5v3.1	EPSS2.03%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2023-21678HIGH	Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2023-21760, CVE-2023-21765. CWE-59Jan 10, 2023	CVSS7.8v3.1	EPSS0.58%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX