microsoft

15,045 tracked vulnerabilities.

CVE-2024-38115 HIGH
Windows IP Routing Management Snapin - Remote Code Execution
Aug 13, 2024
CVSS 8.8
EPSS 0.02
CVE-2024-38114 HIGH
Windows IP Routing Management Snapin - Remote Code Execution
Aug 13, 2024
CVSS 8.8
EPSS 0.02
CVE-2024-38109 CRITICAL
Microsoft Azure Health Bot - Authenticated Server-Side Request Forgery
Aug 13, 2024
CVSS 9.1
EPSS 0.02
CVE-2024-38108 CRITICAL
Azure Stack Hub < 1.2311.1.22 - Spoofing
Aug 13, 2024
CVSS 9.3
EPSS 0.01
CVE-2024-38107 HIGH KEV
Windows Power Dependency Coordinator - Privilege Escalation
Aug 13, 2024
CVSS 7.8
EPSS 0.02
CVE-2024-38106 HIGH KEV
Windows Kernel - Privilege Escalation
Aug 13, 2024
CVSS 7.0
EPSS 0.06
CVE-2024-38098 HIGH
Azure Connected Machine Agent - Privilege Escalation
Aug 13, 2024
CVSS 7.8
EPSS 0.01
CVE-2024-38084 HIGH
Microsoft OfficePlus - Privilege Escalation
Aug 13, 2024
CVSS 7.8
EPSS 0.01
CVE-2024-38063 CRITICAL
Windows TCP/IP - Remote Code Execution
Aug 13, 2024
CVSS 9.8
EPSS 0.71
CVE-2024-37968 HIGH
Windows Server DNS Spoofing (2008, 2012, 2016, 2019, 2022, 23H2)
Aug 13, 2024
CVSS 7.5
EPSS 0.01
CVE-2024-29995 HIGH
Windows Kerberos - Privilege Escalation
Aug 13, 2024
CVSS 8.1
EPSS 0.01
CVE-2024-6768 MEDIUM
Windows 10, 11, Server 2016, 2019, 2022 - Authenticated Denial of Service via CLFS.sys KeBugCheckEx Call
Aug 12, 2024
EPSS 0.03
CVE-2024-38219 MEDIUM
Microsoft Edge Chromium < 127.0.2651.98 - Remote Code Execution
Aug 12, 2024
CVSS 6.5
EPSS 0.01
CVE-2024-38218 HIGH
Microsoft Edge Chromium < 127.0.2651.98 - Memory Corruption
Aug 12, 2024
CVSS 8.4
EPSS 0.01
CVE-2024-38200 MEDIUM
Microsoft 365 Apps and Office - Exposure of Sensitive Information via Spoofing
Aug 12, 2024
CVSS 6.5
EPSS 0.20
CVE-2024-38202 HIGH
Windows Update - Privilege Escalation
Aug 08, 2024
CVSS 7.3
EPSS 0.02
CVE-2024-21302 MEDIUM
Windows 10/11, Server 2016-2018 EoP via Virtualization-Based Security Rollback
Aug 08, 2024
CVSS 6.7
EPSS 0.02
CVE-2024-38206 HIGH
Microsoft Copilot Studio - Authenticated Server-Side Request Forgery
Aug 06, 2024
CVSS 8.5
EPSS 0.12
CVE-2024-38166 HIGH
Microsoft Dynamics 365 - Unauthenticated Cross-Site Scripting
Aug 06, 2024
CVSS 8.2
EPSS 0.01
CVE-2024-38182 CRITICAL
Microsoft Dynamics 365 - Privilege Escalation
Jul 31, 2024
CVSS 9.0
EPSS 0.01
CVE-2024-38103 MEDIUM
Microsoft Edge < 127.0.2651.74 - Information Disclosure
Jul 25, 2024
CVSS 5.9
EPSS 0.00
CVE-2024-38176 HIGH
GroupMe - Unauthenticated Privilege Escalation via Excessive Authentication Attempts
Jul 23, 2024
CVSS 8.1
EPSS 0.01
CVE-2024-38164 CRITICAL
GroupMe - Unauthenticated Privilege Escalation via Malicious Link
Jul 23, 2024
CVSS 9.6
EPSS 0.01
CVE-2024-38156 MEDIUM
Microsoft Edge < 126.0.2592.102 - Spoofing
Jul 19, 2024
CVSS 6.1
EPSS 0.00
CVE-2024-21417 HIGH
Windows Text Services Framework - Elevation of Privilege via Missing Authorization
Jul 10, 2024
CVSS 8.8
EPSS 0.00
Products
windows_server_2016 4,773 windows_server_2019 4,547 windows_server_2012 3,957 windows_server_2008 3,554 windows_10 2,974 windows_server_2022 2,927 windows_7 2,368 windows_8.1 2,216 windows_10_21h2 2,142 windows_10_22h2 2,140 windows_10_1809 2,133 windows_rt_8.1 2,020 windows_10_1607 1,821 windows_server_2022_23h2 1,676 windows_11_23h2 1,669 windows_11_22h2 1,652 internet_explorer 1,635 windows_11_24h2 1,481 windows_server_2025 1,451 windows_10_1507 1,230 Windows 11 Version 24H2 1,087 Windows Server 2025 1,058 Windows Server 2025 (Server Core installation) 1,058 office 1,034 Windows Server 2022 1,014 windows_11_21h2 1,001 Windows Server 2019 1,000 Windows Server 2019 (Server Core installation) 997 Windows 10 Version 21H2 962 Windows 10 Version 22H2 959
Quick Filters
Critical CVEs With Exploits In CISA KEV