microsoft

15,045 tracked vulnerabilities.

CVE-2024-37976 MEDIUM
Windows 10/11, Server 2012 Security Feature Bypass via Resume EFI
Oct 08, 2024
CVSS 6.7
EPSS 0.01
CVE-2024-30092 HIGH
Windows Hyper-V - Remote Code Execution
Oct 08, 2024
CVSS 8.0
EPSS 0.01
CVE-2024-20659 HIGH
Windows Hyper-V < - Privilege Escalation
Oct 08, 2024
CVSS 7.1
EPSS 0.01
CVE-2024-47604 HIGH
NuGetGallery 2024.06.21-2024.09.25 - Stored Cross-Site Scripting via HTML Attribute Handling
Oct 01, 2024
CVSS 8.2
EPSS 0.01
CVE-2024-6769 MEDIUM
Microsoft Windows <2022 - Privilege Escalation
Sep 26, 2024
CVSS 6.7
EPSS 0.01
CVE-2024-47083 HIGH
Power Platform Terraform Provider <3.0.0 - Info Disclosure
Sep 25, 2024
CVSS 7.5
EPSS 0.02
CVE-2024-43496 MEDIUM
Microsoft Edge Chromium < 129.0.2792.52 - Remote Code Execution via Out-of-bounds Write
Sep 19, 2024
CVSS 6.5
EPSS 0.01
CVE-2024-43489 MEDIUM
Microsoft Edge Chromium < 129.0.2792.52 - Remote Code Execution via Type Confusion
Sep 19, 2024
CVSS 6.5
EPSS 0.01
CVE-2024-38221 MEDIUM
Microsoft Edge Chromium < 129.0.2792.52 - Spoofing
Sep 19, 2024
CVSS 4.3
EPSS 0.00
CVE-2024-38016 HIGH
Microsoft Office Visio - Remote Code Execution
Sep 19, 2024
CVSS 7.8
EPSS 0.01
CVE-2024-37985 MEDIUM
Windows 11 22H2 < 10.0.22621.3880 and 23H2 < 10.0.22631.3880 - Kernel Information Disclosure
Sep 17, 2024
CVSS 5.9
EPSS 0.01
CVE-2024-43460 HIGH
Dynamics 365 Business Central - Authenticated Privilege Escalation
Sep 17, 2024
CVSS 8.1
EPSS 0.01
CVE-2024-38183 CRITICAL
GroupMe - Unauthenticated Privilege Escalation
Sep 17, 2024
CVSS 9.8
EPSS 0.01
CVE-2024-45383 MEDIUM
Microsoft High Definition Audio Bus Driver 10.0.19041.3636 - DoS
Sep 12, 2024
CVSS 5.0
EPSS 0.02
CVE-2024-38222 MEDIUM
Microsoft Edge < 128.0.2739.42 - Information Disclosure via Incorrect Default Permissions
Sep 12, 2024
CVSS 6.5
EPSS 0.01
CVE-2024-43495 HIGH
Windows 11/23H2 & Server 2022 23H2 < 10.0.22621.3880/10.0.22631.3880/10.0.25398.1009 RCE via libarchive Integer Overflow
Sep 10, 2024
CVSS 7.3
EPSS 0.01
CVE-2024-43492 HIGH
Microsoft AutoUpdate < 4.72 - Elevation of Privilege
Sep 10, 2024
CVSS 7.8
EPSS 0.00
CVE-2024-43491 CRITICAL
Windows 10 1507 < 10.0.10240.20766 - Use-After-Free in Servicing Stack
Sep 10, 2024
CVSS 9.8
EPSS 0.12
CVE-2024-43487 MEDIUM
Windows Mark of the Web - Privilege Escalation
Sep 10, 2024
CVSS 6.5
EPSS 0.01
CVE-2024-43482 MEDIUM
Microsoft Outlook for iOS < 4.2435.0 - Information Disclosure
Sep 10, 2024
CVSS 6.5
EPSS 0.01
CVE-2024-43479 HIGH
Microsoft Power Automate 2.41-2.41.178.24249 - Remote Code Execution
Sep 10, 2024
CVSS 8.5
EPSS 0.01
CVE-2024-43476 HIGH
Microsoft Dynamics 365 < 9.1.32 - Cross-Site Scripting
Sep 10, 2024
CVSS 7.6
EPSS 0.01
CVE-2024-43475 HIGH
Windows Server 2008 - Information Disclosure via Buffer Over-read
Sep 10, 2024
CVSS 7.3
EPSS 0.02
CVE-2024-43474 HIGH
Microsoft SQL Server 2017/2019 Information Disclosure via Improper Null Termination
Sep 10, 2024
CVSS 7.6
EPSS 0.01
CVE-2024-43470 HIGH
Azure Network Watcher Agent 1.4.3320.1-1.4.3422.1 - Elevation of Privilege via Improper Link Resolution
Sep 10, 2024
CVSS 7.3
EPSS 0.01
Products
windows_server_2016 4,773 windows_server_2019 4,547 windows_server_2012 3,957 windows_server_2008 3,554 windows_10 2,974 windows_server_2022 2,927 windows_7 2,368 windows_8.1 2,216 windows_10_21h2 2,142 windows_10_22h2 2,140 windows_10_1809 2,133 windows_rt_8.1 2,020 windows_10_1607 1,821 windows_server_2022_23h2 1,676 windows_11_23h2 1,669 windows_11_22h2 1,652 internet_explorer 1,635 windows_11_24h2 1,481 windows_server_2025 1,451 windows_10_1507 1,230 Windows 11 Version 24H2 1,087 Windows Server 2025 1,058 Windows Server 2025 (Server Core installation) 1,058 office 1,034 Windows Server 2022 1,014 windows_11_21h2 1,001 Windows Server 2019 1,000 Windows Server 2019 (Server Core installation) 997 Windows 10 Version 21H2 962 Windows 10 Version 22H2 959
Quick Filters
Critical CVEs With Exploits In CISA KEV