microsoft

15,045 tracked vulnerabilities.

CVE-2024-20679 MEDIUM
Azure Stack Hub < 1.2311.1.22 - Spoofing
Feb 13, 2024
CVSS 6.5
EPSS 0.01
CVE-2024-20673 HIGH
Microsoft Office - Remote Code Execution
Feb 13, 2024
CVSS 7.8
EPSS 0.01
CVE-2024-20667 HIGH
Azure DevOps Server - Remote Code Execution
Feb 13, 2024
CVSS 7.5
EPSS 0.01
CVE-2024-25110 CRITICAL
Microsoft azure-uamqp < 2024-02-01 - Remote Code Execution via open_get_offered_capabilities Use-After-Free
Feb 12, 2024
CVSS 9.8
EPSS 0.07
CVE-2024-21399 HIGH
Microsoft Edge Chromium < 121.0.2277.98 - Remote Code Execution via Use-After-Free
Feb 02, 2024
CVSS 8.3
EPSS 0.01
CVE-2024-21388 MEDIUM
Microsoft Edge Chromium < 121.0.2277.83 - Elevation of Privilege
Jan 30, 2024
CVSS 6.5
EPSS 0.32
CVE-2024-21336 LOW
Microsoft Edge Chromium < 121.0.2277.83 - Spoofing via Insufficient UI Warning
Jan 26, 2024
CVSS 2.5
EPSS 0.01
CVE-2024-21387 MEDIUM
Microsoft Edge Chromium < 120.0.2210.160 and < 121.0.2277.83 - Spoofing via Insufficient UI Warning
Jan 26, 2024
CVSS 5.3
EPSS 0.01
CVE-2024-21385 HIGH
Microsoft Edge Chromium < 121.0.2277.83 - Elevation of Privilege via Use-After-Free
Jan 26, 2024
CVSS 8.3
EPSS 0.01
CVE-2024-21383 LOW
Microsoft Edge Chromium < 121.0.2277.83 - Spoofing via Cryptographic Signature Verification Bypass
Jan 26, 2024
CVSS 3.3
EPSS 0.00
CVE-2024-21382 MEDIUM
Microsoft Edge Chromium < 121.0.2277.83 - Information Disclosure via Permissive Cross-domain Security Policy
Jan 26, 2024
CVSS 4.3
EPSS 0.01
CVE-2024-21326 CRITICAL
Microsoft Edge Chromium < 121.0.2277.83 - Elevation of Privilege via Use-After-Free
Jan 26, 2024
CVSS 9.6
EPSS 0.01
CVE-2024-20721 MEDIUM
Acrobat Reader T5 (MSFT Edge) <120.0.2210.91 - DoS
Jan 15, 2024
CVSS 5.5
EPSS 0.01
CVE-2024-20709 MEDIUM
Acrobat Reader T5 (MSFT Edge) <120.0.2210.91 - DoS
Jan 15, 2024
CVSS 5.5
EPSS 0.01
CVE-2024-21337 MEDIUM
Microsoft Edge Chromium < 120.0.2210.133 - Elevation of Privilege via Heap-based Buffer Overflow
Jan 11, 2024
CVSS 5.2
EPSS 0.00
CVE-2024-20675 MEDIUM
Microsoft Edge - Privilege Escalation
Jan 11, 2024
CVSS 6.3
EPSS 0.00
CVE-2024-21638 CRITICAL
Azure IPAM < 3.0.0 - Unauthenticated Privilege Escalation via Token Validation Bypass
Jan 10, 2024
CVSS 9.1
EPSS 0.02
CVE-2024-21643 HIGH
Microsoft IdentityModel Extensions < 6.34.0 - Remote Code Execution via SignedHttpRequest Protocol
Jan 10, 2024
CVSS 7.1
EPSS 0.02
CVE-2024-21319 MEDIUM
.NET 6.0.0-6.0.25 and IdentityModel 5.0.0-5.6.9 - Denial of Service
Jan 09, 2024
CVSS 6.8
EPSS 0.03
CVE-2024-21325 HIGH
Microsoft Printer Metadata Troubleshooter Tool < 1.0.0.1 - Remote Code Execution
Jan 09, 2024
CVSS 7.8
EPSS 0.01
CVE-2024-21320 MEDIUM
Windows 10/11, Server 2012-2022 - Sensitive Info Exposure via Theme Spoofing
Jan 09, 2024
CVSS 6.5
EPSS 0.23
CVE-2024-21318 HIGH
Microsoft SharePoint Server - Remote Code Execution via Untrusted Data Deserialization
Jan 09, 2024
CVSS 8.8
EPSS 0.31
CVE-2024-21316 MEDIUM
Windows Server Key Distribution Service - Security Feature Bypass via Improper Input Validation
Jan 09, 2024
CVSS 6.1
EPSS 0.01
CVE-2024-21314 MEDIUM
Microsoft Windows - Out-of-bounds Read in Message Queuing
Jan 09, 2024
CVSS 6.5
EPSS 0.02
CVE-2024-21313 MEDIUM
Windows 10 1507-23H2 and Windows Server 2008-2022 - Information Disclosure via TCP/IP Error Messages
Jan 09, 2024
CVSS 5.3
EPSS 0.01
Products
windows_server_2016 4,912 windows_server_2019 4,724 windows_server_2012 4,064 windows_server_2008 3,554 windows_server_2022 3,114 windows_10 2,974 windows_7 2,368 windows_10_21h2 2,322 windows_10_22h2 2,320 windows_10_1809 2,310 windows_8.1 2,216 windows_rt_8.1 2,020 windows_10_1607 1,961 windows_11_24h2 1,698 windows_server_2022_23h2 1,676 windows_11_23h2 1,673 windows_server_2025 1,671 windows_11_22h2 1,652 internet_explorer 1,635 windows_10_1507 1,230 Windows 11 Version 24H2 1,088 Windows Server 2025 1,058 Windows Server 2025 (Server Core installation) 1,058 Windows Server 2022 1,043 office 1,034 Windows Server 2019 1,030 Windows Server 2019 (Server Core installation) 1,027 windows_11_21h2 1,001 Windows 10 Version 21H2 989 Windows 10 Version 22H2 986
Quick Filters
Critical CVEs With Exploits In CISA KEV