microsoft

15,045 tracked vulnerabilities.

CVE-2024-20672 HIGH
.NET 6.0.0-6.0.25 - Denial of Service via Uncontrolled Resource Consumption
Jan 09, 2024
CVSS 7.5
EPSS 0.03
CVE-2024-20666 MEDIUM
Windows 10 1507-22H2 and Windows 11 21H2-23H2 - BitLocker Security Feature Bypass
Jan 09, 2024
CVSS 6.6
EPSS 0.03
CVE-2024-20664 MEDIUM
Microsoft Message Queuing - Info Disclosure
Jan 09, 2024
CVSS 6.5
EPSS 0.02
CVE-2024-20663 MEDIUM
Windows 10 1507-22H2 and Windows 11 21H2-22H2 - Information Disclosure via MSMQC
Jan 09, 2024
CVSS 6.5
EPSS 0.02
CVE-2024-20662 MEDIUM
Windows Server 2008, 2012, 2016, 2019, 2022, 2022 23H2 - Information Disclosure via OCSP Type Confusion
Jan 09, 2024
CVSS 4.9
EPSS 0.02
CVE-2024-20661 HIGH
Windows 10 1507-22H2 and Windows 11 21H2-23H2 - Denial of Service in Microsoft Message Queuing
Jan 09, 2024
CVSS 7.5
EPSS 0.03
CVE-2024-20660 MEDIUM
Microsoft Message Queuing - Info Disclosure
Jan 09, 2024
CVSS 6.5
EPSS 0.02
CVE-2024-20658 HIGH
Microsoft Virtual Hard Disk - Privilege Escalation
Jan 09, 2024
CVSS 7.8
EPSS 0.01
CVE-2024-20657 HIGH
Windows Group Policy - Privilege Escalation
Jan 09, 2024
CVSS 7.0
EPSS 0.01
CVE-2024-20656 HIGH
Visual Studio - Privilege Escalation
Jan 09, 2024
CVSS 7.8
EPSS 0.04
CVE-2024-20655 MEDIUM
Microsoft Windows OCSP - Remote Code Execution
Jan 09, 2024
CVSS 6.6
EPSS 0.01
CVE-2024-20654 HIGH
Microsoft ODBC Driver - Remote Code Execution via Integer Overflow
Jan 09, 2024
CVSS 8.0
EPSS 0.02
CVE-2024-20653 HIGH
Microsoft Common Log File System - Privilege Escalation
Jan 09, 2024
CVSS 7.8
EPSS 0.04
CVE-2024-20652 HIGH
Windows HTML Platforms < - Privilege Escalation
Jan 09, 2024
CVSS 8.1
EPSS 0.02
CVE-2024-0057 CRITICAL
PowerShell 7.2-7.2.17 - Security Feature Bypass via Improper Input Validation
Jan 09, 2024
CVSS 9.1
EPSS 0.03
CVE-2024-0056 HIGH
Microsoft.Data.SqlClient 2.1-2.1.7 and System.Data.SqlClient <4.8.6 - Cleartext Transmission of Sensitive Information
Jan 09, 2024
CVSS 8.7
EPSS 0.01
CVE-2024-21646 CRITICAL
Azure uAMQP < 2024-01-01 - Remote Code Execution via Crafted Binary Type Data
Jan 09, 2024
CVSS 9.8
EPSS 0.05
CVE-2023-50387 HIGH
Redhat Enterprise Linux < 2.90 - Resource Allocation Without Limits
Feb 14, 2024
CVSS 7.5
EPSS 1.00
CVE-2023-36878 MEDIUM
Microsoft Edge < - Privilege Escalation
Dec 15, 2023
CVSS 4.3
EPSS 0.01
CVE-2023-6702 HIGH
Google Chrome < 120.0.6099.109 - Remote Code Execution via V8 Type Confusion
Dec 14, 2023
CVSS 8.8
EPSS 0.44
CVE-2023-21751 MEDIUM
Azure DevOps Server - Open Redirect
Dec 14, 2023
CVSS 6.5
EPSS 0.01
CVE-2023-36696 HIGH
Windows Cloud Files Mini Filter Driver - Privilege Escalation
Dec 12, 2023
CVSS 7.8
EPSS 0.01
CVE-2023-36391 HIGH
Local Security Authority Subsystem Service - Privilege Escalation
Dec 12, 2023
CVSS 7.8
EPSS 0.07
CVE-2023-36020 HIGH
Microsoft Dynamics 365 (on-premises) - XSS
Dec 12, 2023
CVSS 7.6
EPSS 0.01
CVE-2023-36019 CRITICAL
Microsoft Power Platform Connector - Open Redirect
Dec 12, 2023
CVSS 9.6
EPSS 0.16
Products
windows_server_2016 4,923 windows_server_2019 4,737 windows_server_2012 4,070 windows_server_2008 3,554 windows_server_2022 3,126 windows_10 2,974 windows_7 2,368 windows_10_21h2 2,334 windows_10_22h2 2,332 windows_10_1809 2,323 windows_8.1 2,216 windows_rt_8.1 2,020 windows_10_1607 1,972 windows_11_24h2 1,712 windows_server_2025 1,686 windows_server_2022_23h2 1,676 windows_11_23h2 1,673 windows_11_22h2 1,652 internet_explorer 1,635 windows_10_1507 1,230 Windows 11 Version 24H2 1,088 Windows Server 2025 1,058 Windows Server 2025 (Server Core installation) 1,058 Windows Server 2022 1,043 office 1,034 Windows Server 2019 1,030 Windows Server 2019 (Server Core installation) 1,027 windows_11_21h2 1,001 Windows 10 Version 21H2 989 Windows 10 Version 22H2 986
Quick Filters
Critical CVEs With Exploits In CISA KEV