microsoft

15,062 tracked vulnerabilities.

CVE-2021-1637 MEDIUM
Windows DNS - Information Disclosure via Query Handling
Jan 12, 2021
CVSS 5.5
EPSS 0.01
CVE-2021-1636 HIGH
Microsoft SQL Server - SQL Injection
Jan 12, 2021
CVSS 8.8
EPSS 0.06
CVE-2020-17163 HIGH
Visual Studio Code Python Extension - RCE
Dec 29, 2023
CVSS 7.8
EPSS 0.01
CVE-2020-19725 HIGH
Microsoft Z3 < 4.8.8 - Use After Free
Aug 22, 2023
CVSS 7.8
EPSS 0.01
CVE-2020-23315 HIGH
ChakraCore <1.12.0.0-beta - Info Disclosure
Jan 20, 2022
CVSS 7.5
EPSS 0.02
CVE-2020-24588 LOW
IEEE 802.11 - Unauthenticated Packet Injection via A-MSDU Flag Manipulation
May 11, 2021
CVSS 3.5
EPSS 0.04
CVE-2020-36327 HIGH
Bundler 1.16.0-2.2.9, 2.2.11-2.2.16 - Info Disclosure
Apr 29, 2021
CVSS 8.8
EPSS 0.06
CVE-2020-17162 HIGH
Microsoft Windows - Privilege Escalation
Feb 25, 2021
CVSS 8.8
EPSS 0.02
CVE-2020-8567 MEDIUM
Google Secret Manager Provider For Secret Store Csi Driver < 0.2.0 - Path Traversal
Jan 21, 2021
CVSS 4.9
EPSS 0.01
CVE-2020-24003 LOW
Microsoft Skype <8.59.0.77 - Privilege Escalation
Jan 11, 2021
CVSS 3.3
EPSS 0.01
CVE-2020-35609 MEDIUM
Microsoft Azure Sphere 20.05 - Denial of Service via Asynchronous ioctl Calls
Dec 22, 2020
CVSS 5.5
EPSS 0.01
CVE-2020-35608 HIGH
Microsoft Azure Sphere 20.07 - Remote Code Execution via AF_PACKET Socket
Dec 22, 2020
CVSS 7.8
EPSS 0.04
CVE-2020-17159 HIGH
Visual Studio Code Java Extension Pack - RCE
Dec 10, 2020
CVSS 7.8
EPSS 0.03
CVE-2020-17158 HIGH
Microsoft Dynamics 365 for Finance and Operations - RCE
Dec 10, 2020
CVSS 8.8
EPSS 0.03
CVE-2020-17156 HIGH
Visual Studio 2017 15.0-15.8 and 2019 16.0-16.7 - Remote Code Execution
Dec 10, 2020
CVSS 7.8
EPSS 0.03
CVE-2020-17153 MEDIUM
Microsoft Edge for Android - Spoofing
Dec 10, 2020
CVSS 4.3
EPSS 0.02
CVE-2020-17152 HIGH
Microsoft Dynamics 365 for Finance and Operations - RCE
Dec 10, 2020
CVSS 8.8
EPSS 0.03
CVE-2020-17150 HIGH
tslint < 1.3.0 - Remote Code Execution
Dec 10, 2020
CVSS 7.8
EPSS 0.03
CVE-2020-17148 HIGH
Visual Studio Code Remote Development Extension - RCE
Dec 10, 2020
CVSS 7.8
EPSS 0.04
CVE-2020-17147 HIGH
Dynamics 365 - Cross-Site Scripting in Webclient
Dec 10, 2020
CVSS 8.7
EPSS 0.01
CVE-2020-17145 MEDIUM
Azure DevOps Server and Team Foundation Server - Spoofing
Dec 10, 2020
CVSS 5.4
EPSS 0.01
CVE-2020-17144 HIGH KEV
Microsoft Exchange Server - Remote Code Execution via Untrusted Data Deserialization
Dec 10, 2020
CVSS 8.4
EPSS 0.37
CVE-2020-17143 HIGH
Microsoft Exchange Server - Info Disclosure
Dec 10, 2020
CVSS 8.8
EPSS 0.71
CVE-2020-17142 CRITICAL
Microsoft Exchange Server - Remote Code Execution
Dec 10, 2020
CVSS 9.1
EPSS 0.03
CVE-2020-17141 HIGH
Microsoft Exchange Server - Remote Code Execution
Dec 10, 2020
CVSS 8.4
EPSS 0.07
Products
windows_server_2016 4,934 windows_server_2019 4,749 windows_server_2012 4,080 windows_server_2008 3,554 windows_server_2022 3,138 windows_10 2,974 windows_7 2,368 windows_10_21h2 2,344 windows_10_22h2 2,342 windows_10_1809 2,335 windows_8.1 2,216 windows_rt_8.1 2,020 windows_10_1607 1,983 windows_11_24h2 1,728 windows_server_2025 1,702 windows_server_2022_23h2 1,676 windows_11_23h2 1,673 windows_11_22h2 1,652 internet_explorer 1,635 windows_10_1507 1,230 Windows 11 Version 24H2 1,088 Windows Server 2025 1,058 Windows Server 2025 (Server Core installation) 1,058 Windows Server 2022 1,043 office 1,034 Windows Server 2019 1,030 Windows Server 2019 (Server Core installation) 1,027 windows_11_21h2 1,001 windows_11_25h2 996 Windows 10 Version 21H2 989
Quick Filters
Critical CVEs With Exploits In CISA KEV