microsoft

15,043 tracked vulnerabilities.

CVE-2025-26628 HIGH
Azure Local Cluster < 2411.2 - Authenticated Information Disclosure via Insufficiently Protected Credentials
Apr 08, 2025
CVSS 7.3
EPSS 0.01
CVE-2025-25002 MEDIUM
Azure Local Cluster - Info Disclosure
Apr 08, 2025
CVSS 6.8
EPSS 0.01
CVE-2025-24074 HIGH
Windows DWM Core Library - Authenticated Privilege Escalation via Improper Input Validation
Apr 08, 2025
CVSS 7.8
EPSS 0.01
CVE-2025-24073 HIGH
Windows 10 1507-22H2 and Windows 11 22H2-24H2 - Authenticated Privilege Escalation via DWM Core Library Input Validation
Apr 08, 2025
CVSS 7.8
EPSS 0.01
CVE-2025-24062 HIGH
Windows DWM Core Library - Authenticated Privilege Escalation via Improper Input Validation
Apr 08, 2025
CVSS 7.8
EPSS 0.01
CVE-2025-24060 HIGH
Windows DWM Core Library - Authenticated Privilege Escalation via Improper Input Validation
Apr 08, 2025
CVSS 7.8
EPSS 0.01
CVE-2025-24058 HIGH
Windows DWM Core Library - Privilege Escalation via Improper Input Validation
Apr 08, 2025
CVSS 7.8
EPSS 0.01
CVE-2025-21222 HIGH
Windows 10 1507-24H2 and Windows Server 2008 - Remote Code Execution via Heap-based Buffer Overflow
Apr 08, 2025
CVSS 8.8
EPSS 0.01
CVE-2025-21221 HIGH
Windows 10 1507-24H2 and Windows Server 2008 - Remote Code Execution via Heap-based Buffer Overflow
Apr 08, 2025
CVSS 8.8
EPSS 0.01
CVE-2025-21205 HIGH
Windows Telephony Service - Remote Code Execution via Heap-based Buffer Overflow
Apr 08, 2025
CVSS 8.8
EPSS 0.01
CVE-2025-21204 HIGH
Windows 10 1507-24H2 and Windows Server 2008 - Privilege Escalation via Improper Link Resolution
Apr 08, 2025
CVSS 7.8
EPSS 0.07
CVE-2025-21203 MEDIUM
Windows Server 2008-2025 Unauthenticated Buffer Over-read in RRAS
Apr 08, 2025
CVSS 6.5
EPSS 0.02
CVE-2025-21197 MEDIUM
Windows NTFS - Authenticated Path Information Disclosure
Apr 08, 2025
CVSS 6.5
EPSS 0.03
CVE-2025-21191 HIGH
Windows 10 1507-24H2 and Windows Server 2008 - Privilege Escalation via LSA TOCTOU Race Condition
Apr 08, 2025
CVSS 7.0
EPSS 0.00
CVE-2025-21174 HIGH
Windows Server 2012, 2016, 2019, 2022, 2025 - Unauthenticated DoS via Storage Management Service
Apr 08, 2025
CVSS 7.5
EPSS 0.02
CVE-2025-29815 HIGH
Microsoft Edge Chromium < 134.0.3124.66 - Use-After-Free
Apr 04, 2025
CVSS 7.6
EPSS 0.01
CVE-2025-29796 MEDIUM
Microsoft Edge for iOS - Info Disclosure
Apr 04, 2025
CVSS 4.7
EPSS 0.01
CVE-2025-25001 MEDIUM
Microsoft Edge < 132.0.2957.118 - Cross-Site Scripting
Apr 04, 2025
CVSS 4.3
EPSS 0.01
CVE-2025-25000 HIGH
Microsoft Edge (Chromium-based) - RCE
Apr 04, 2025
CVSS 8.8
EPSS 0.01
CVE-2025-21384 HIGH
Microsoft Azure Health Bot - Authenticated Server-Side Request Forgery
Apr 01, 2025
CVSS 8.3
EPSS 0.01
CVE-2025-26683 HIGH
Azure Playwright - Unauthenticated Privilege Escalation
Mar 31, 2025
CVSS 8.1
EPSS 0.01
CVE-2025-29806 MEDIUM
Microsoft Edge Chromium < 129.0.2792.52 - Remote Code Execution via Type Confusion
Mar 23, 2025
CVSS 6.5
EPSS 0.01
CVE-2025-29795 HIGH
Microsoft Edge Update < 1.3.195.45 - Authenticated Privilege Escalation via Improper Link Resolution
Mar 23, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-29814 CRITICAL
Microsoft Partner Center - Privilege Escalation via Improper Authorization
Mar 21, 2025
CVSS 9.3
EPSS 0.02
CVE-2025-29807 HIGH
Microsoft Dataverse - Remote Code Execution via Untrusted Data Deserialization
Mar 21, 2025
CVSS 8.7
EPSS 0.01
Products
windows_server_2016 4,759 windows_server_2019 4,532 windows_server_2012 3,945 windows_server_2008 3,554 windows_10 2,974 windows_server_2022 2,912 windows_7 2,368 windows_8.1 2,216 windows_10_21h2 2,128 windows_10_22h2 2,126 windows_10_1809 2,118 windows_rt_8.1 2,020 windows_10_1607 1,807 windows_server_2022_23h2 1,676 windows_11_23h2 1,669 windows_11_22h2 1,652 internet_explorer 1,635 windows_11_24h2 1,467 windows_server_2025 1,436 windows_10_1507 1,230 Windows 11 Version 24H2 1,087 Windows Server 2025 1,058 Windows Server 2025 (Server Core installation) 1,058 office 1,034 Windows Server 2022 1,014 windows_11_21h2 1,001 Windows Server 2019 1,000 Windows Server 2019 (Server Core installation) 997 Windows 10 Version 21H2 962 Windows 10 Version 22H2 959
Quick Filters
Critical CVEs With Exploits In CISA KEV