microsoft

15,045 tracked vulnerabilities.

CVE-2024-21415 HIGH
SQL Server 2016-2022 Remote Code Execution via Native Client OLE DB Provider
Jul 09, 2024
CVSS 8.8
EPSS 0.02
CVE-2024-21414 HIGH
SQL Server 2016-2022 Remote Code Execution via Native Client OLE DB Provider
Jul 09, 2024
CVSS 8.8
EPSS 0.02
CVE-2024-21398 HIGH
SQL Server 2016-2022 - Remote Code Execution via Native Client OLE DB Provider
Jul 09, 2024
CVSS 8.8
EPSS 0.02
CVE-2024-21373 HIGH
SQL Server 2016-2022 Remote Code Execution via Native Client OLE DB Provider
Jul 09, 2024
CVSS 8.8
EPSS 0.02
CVE-2024-21335 HIGH
SQL Server 2016-2022 Remote Code Execution via Heap-based Buffer Overflow
Jul 09, 2024
CVSS 8.8
EPSS 0.02
CVE-2024-21333 HIGH
SQL Server 2016-2022 Remote Code Execution via Heap-based Buffer Overflow
Jul 09, 2024
CVSS 8.8
EPSS 0.02
CVE-2024-21332 HIGH
SQL Server 2016-2022 Remote Code Execution via Use-After-Free in Native Client OLE DB Provider
Jul 09, 2024
CVSS 8.8
EPSS 0.02
CVE-2024-21331 HIGH
Microsoft SQL Server 2016-2022 Remote Code Execution via Heap-based Buffer Overflow
Jul 09, 2024
CVSS 8.8
EPSS 0.02
CVE-2024-21317 HIGH
SQL Server 2016-2022 Remote Code Execution via Native Client OLE DB Provider
Jul 09, 2024
CVSS 8.8
EPSS 0.02
CVE-2024-21308 HIGH
Microsoft SQL Server 2016-2022 Remote Code Execution via OLE DB Provider Use-After-Free
Jul 09, 2024
CVSS 8.8
EPSS 0.02
CVE-2024-21303 HIGH
Microsoft SQL Server 2016-2022 Remote Code Execution via OLE DB Provider
Jul 09, 2024
CVSS 8.8
EPSS 0.01
CVE-2024-20701 HIGH
SQL Server Native Client OLE DB Provider - Remote Code Execution
Jul 09, 2024
CVSS 8.8
EPSS 0.02
CVE-2024-35260 HIGH
Microsoft Power Platform - Authenticated Remote Code Execution via Untrusted Search Path
Jun 27, 2024
CVSS 8.0
EPSS 0.01
CVE-2024-38093 MEDIUM
Microsoft Edge < 126.0.2592.68 - Spoofing via UI Misrepresentation
Jun 20, 2024
CVSS 4.3
EPSS 0.00
CVE-2024-38082 MEDIUM
Microsoft Edge < 126.0.2592.68 - User Interface Spoofing
Jun 20, 2024
CVSS 4.7
EPSS 0.00
CVE-2024-38083 MEDIUM
Microsoft Edge Chromium < 126.0.2592.56 - Spoofing
Jun 13, 2024
CVSS 4.3
EPSS 0.00
CVE-2024-30058 MEDIUM
Microsoft Edge Chromium < 126.0.2592.56 - Spoofing
Jun 13, 2024
CVSS 5.4
EPSS 0.00
CVE-2024-30057 MEDIUM
Microsoft Edge < 126.0.2592.56 - Spoofing via Unsafe Action UI
Jun 13, 2024
CVSS 5.4
EPSS 0.00
CVE-2024-30472 HIGH
Telemetry Dashboard v1.0.0.8 - Unauthenticated Exposure of Sensitive Information
Jun 13, 2024
CVSS 7.5
EPSS 0.01
CVE-2024-37304 MEDIUM
NuGetGallery < 2024.05.28 - Cross-Site Scripting via Markdown Autolink Handling
Jun 12, 2024
CVSS 6.1
EPSS 0.01
CVE-2024-37325 HIGH
Azure Data Science Virtual Machine < 24.05.24 - Elevation of Privilege
Jun 11, 2024
CVSS 8.1
EPSS 0.01
CVE-2024-35265 HIGH
Windows Perception Service - Elevation of Privilege via Time-of-check Time-of-use Race Condition
Jun 11, 2024
CVSS 7.0
EPSS 0.00
CVE-2024-35263 MEDIUM
Microsoft Dynamics 365 (On-Premises) - Exposure of Sensitive Information to an Unauthorized Actor
Jun 11, 2024
CVSS 5.7
EPSS 0.02
CVE-2024-35255 MEDIUM
Microsoft Authentication Library and Azure Identity SDK - Elevation of Privilege via Race Condition
Jun 11, 2024
CVSS 5.5
EPSS 0.01
CVE-2024-35254 HIGH
Azure Monitor Agent < 1.26.0 - Elevation of Privilege via Improper Link Resolution
Jun 11, 2024
CVSS 7.1
EPSS 0.01