[ Vendor · 1,865 CVEs ]

Microsoft

CVEs affecting Microsoft published in the last 30 days, plus any Microsoft CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2022-30190 1 Jun 2022 CVSS 7.8 Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code ExecutionA remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who… ExploitedFix
CVE-2022-26923 10 May 2022 CVSS 8.8 Microsoft Active Directory Domain Services Privilege EscalationActive Directory Domain Services Elevation of Privilege Vulnerability ExploitedFix
CVE-2022-26925 10 May 2022 CVSS 5.9 Microsoft Windows LSA SpoofingWindows LSA Spoofing Vulnerability ExploitedFix
CVE-2022-26904 15 Apr 2022 CVSS 7.0 Microsoft Windows User Profile Service Privilege EscalationWindows User Profile Service Elevation of Privilege Vulnerability ExploitedFix
CVE-2022-24521 15 Apr 2022 CVSS 7.8 Microsoft Windows CLFS Driver Privilege EscalationWindows Common Log File System Driver Elevation of Privilege Vulnerability ExploitedFix
CVE-2022-22718 9 Feb 2022 CVSS 7.8 Microsoft Windows Print Spooler Privilege EscalationWindows Print Spooler Elevation of Privilege Vulnerability ExploitedFix
CVE-2022-21999 9 Feb 2022 CVSS 7.8 Microsoft Windows Print Spooler Privilege EscalationWindows Print Spooler Elevation of Privilege Vulnerability ExploitedFix
CVE-2022-21971 9 Feb 2022 CVSS 7.8 Microsoft Windows Runtime Remote Code ExecutionWindows Runtime Remote Code Execution Vulnerability ExploitedFix
CVE-2022-21919 11 Jan 2022 CVSS 7.0 Microsoft Windows User Profile Service Privilege EscalationWindows User Profile Service Elevation of Privilege Vulnerability ExploitedFix
CVE-2022-21882 11 Jan 2022 CVSS 7.8 Microsoft Win32k Privilege EscalationWin32k Elevation of Privilege Vulnerability ExploitedFix
CVE-2021-43890 15 Dec 2021 CVSS 7.1 Microsoft Windows AppX Installer SpoofingWe have investigated reports of a spoofing vulnerability in AppX installer that affects Microsoft Windows. Microsoft is aware of attacks that attempt… ExploitedFix
CVE-2021-43226 15 Dec 2021 CVSS 7.8 Microsoft Windows Privilege EscalationWindows Common Log File System Driver Elevation of Privilege Vulnerability ExploitedFix
CVE-2021-42321 10 Nov 2021 CVSS 8.8 Microsoft Exchange Server Remote Code ExecutionMicrosoft Exchange Server Remote Code Execution Vulnerability ExploitedFix
CVE-2021-42292 10 Nov 2021 CVSS 7.8 Microsoft Excel Security Feature BypassMicrosoft Excel Security Feature Bypass Vulnerability ExploitedFix
CVE-2021-42287 10 Nov 2021 CVSS 7.5 Microsoft Active Directory Domain Services Privilege EscalationActive Directory Domain Services Elevation of Privilege Vulnerability ExploitedFix
CVE-2021-42278 10 Nov 2021 CVSS 7.5 Microsoft Active Directory Domain Services Privilege EscalationActive Directory Domain Services Elevation of Privilege Vulnerability ExploitedFix
CVE-2021-41379 10 Nov 2021 CVSS 5.5 Microsoft Windows Installer Privilege EscalationWindows Installer Elevation of Privilege Vulnerability ExploitedFix
CVE-2021-41357 13 Oct 2021 CVSS 7.8 Microsoft Win32k Privilege EscalationWin32k Elevation of Privilege Vulnerability ExploitedFix
CVE-2021-40449 13 Oct 2021 CVSS 7.8 Microsoft Windows Win32k Privilege EscalationWin32k Elevation of Privilege Vulnerability ExploitedFix
CVE-2021-40450 13 Oct 2021 CVSS 7.8 Microsoft Win32k Privilege EscalationWin32k Elevation of Privilege Vulnerability ExploitedFix
CVE-2021-40444 15 Sep 2021 CVSS 8.8 Microsoft MSHTML Remote Code ExecutionMicrosoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted… ExploitedFix
CVE-2021-38646 15 Sep 2021 CVSS 7.8 Microsoft Office Access Connectivity Engine Remote Code ExecutionMicrosoft Office Access Connectivity Engine Remote Code Execution Vulnerability ExploitedFix
CVE-2021-38647 15 Sep 2021 CVSS 9.8 Microsoft Open Management Infrastructure (OMI) Remote Code ExecutionOpen Management Infrastructure (OMI) Remote Code Execution Vulnerability ExploitedFix
CVE-2021-38648 15 Sep 2021 CVSS 7.8 Microsoft Open Management Infrastructure (OMI) Privilege EscalationOpen Management Infrastructure Elevation of Privilege Vulnerability ExploitedFix
CVE-2021-38649 15 Sep 2021 CVSS 7.0 Microsoft Open Management Infrastructure (OMI) Privilege EscalationOpen Management Infrastructure Elevation of Privilege Vulnerability ExploitedFix
CVE-2021-38645 15 Sep 2021 CVSS 7.8 Microsoft Open Management Infrastructure (OMI) Privilege EscalationOpen Management Infrastructure Elevation of Privilege Vulnerability ExploitedFix
CVE-2021-36955 15 Sep 2021 CVSS 7.8 Microsoft Windows Common Log File System (CLFS) Driver Privilege EscalationWindows Common Log File System Driver Elevation of Privilege Vulnerability ExploitedFix
CVE-2021-36942 12 Aug 2021 CVSS 7.5 Microsoft Windows Local Security Authority (LSA) SpoofingWindows LSA Spoofing Vulnerability ExploitedFix
CVE-2021-36948 12 Aug 2021 CVSS 7.8 Microsoft Windows Update Medic Service Privilege EscalationWindows Update Medic Service Elevation of Privilege Vulnerability ExploitedFix
CVE-2021-34484 12 Aug 2021 CVSS 7.8 Microsoft Windows User Profile Service Privilege EscalationWindows User Profile Service Elevation of Privilege Vulnerability ExploitedFix
CVE-2021-34486 12 Aug 2021 CVSS 7.8 Microsoft Windows Event Tracing Privilege EscalationWindows Event Tracing Elevation of Privilege Vulnerability ExploitedFix
CVE-2021-36934 22 Jul 2021 CVSS 7.8 Microsoft Windows SAM Local Privilege EscalationAn elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the… ExploitedFix
CVE-2021-34448 16 Jul 2021 CVSS 6.8 Microsoft Windows Scripting Engine Memory CorruptionScripting Engine Memory Corruption Vulnerability ExploitedFix
CVE-2021-34523 14 Jul 2021 CVSS 9.0 Microsoft Exchange Server Privilege EscalationMicrosoft Exchange Server Elevation of Privilege Vulnerability ExploitedFix
CVE-2021-34473 14 Jul 2021 CVSS 9.1 Microsoft Exchange Server Remote Code ExecutionMicrosoft Exchange Server Remote Code Execution Vulnerability ExploitedFix
CVE-2021-33766 14 Jul 2021 CVSS 7.3 Microsoft Exchange Server Information DisclosureMicrosoft Exchange Server Information Disclosure Vulnerability ExploitedFix
CVE-2021-33771 14 Jul 2021 CVSS 7.8 Microsoft Windows Kernel Privilege EscalationWindows Kernel Elevation of Privilege Vulnerability ExploitedFix
CVE-2021-31196 14 Jul 2021 CVSS 7.2 Microsoft Exchange Server Information DisclosureMicrosoft Exchange Server Remote Code Execution Vulnerability ExploitedFix
CVE-2021-31979 14 Jul 2021 CVSS 7.8 Microsoft Windows Kernel Privilege EscalationWindows Kernel Elevation of Privilege Vulnerability ExploitedFix
CVE-2021-34527 2 Jul 2021 CVSS 8.8 Microsoft Windows Print Spooler Remote Code ExecutionA remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who… ExploitedFix
CVE-2021-33739 8 Jun 2021 CVSS 8.4 Microsoft Desktop Window Manager (DWM) Core Library Privilege EscalationMicrosoft DWM Core Library Elevation of Privilege Vulnerability ExploitedFix
CVE-2021-33742 8 Jun 2021 CVSS 7.5 Microsoft Windows MSHTML Platform Remote Code ExecutionWindows MSHTML Platform Remote Code Execution Vulnerability ExploitedFix
CVE-2021-1675 8 Jun 2021 CVSS 7.8 Microsoft Windows Print Spooler Remote Code ExecutionWindows Print Spooler Remote Code Execution Vulnerability ExploitedFix
CVE-2021-31199 8 Jun 2021 CVSS 5.2 Microsoft Enhanced Cryptographic Provider Privilege EscalationMicrosoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability ExploitedFix
CVE-2021-31201 8 Jun 2021 CVSS 5.2 Microsoft Enhanced Cryptographic Provider Privilege EscalationMicrosoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability ExploitedFix
CVE-2021-31955 8 Jun 2021 CVSS 5.5 Microsoft Windows Kernel Information DisclosureWindows Kernel Information Disclosure Vulnerability ExploitedFix
CVE-2021-31956 8 Jun 2021 CVSS 7.8 Microsoft Windows NTFS Privilege EscalationWindows NTFS Elevation of Privilege Vulnerability ExploitedFix
CVE-2021-31207 11 May 2021 CVSS 6.6 Microsoft Exchange Server Security Feature BypassMicrosoft Exchange Server Security Feature Bypass Vulnerability ExploitedFix
CVE-2021-31166 11 May 2021 CVSS 9.8 Microsoft HTTP Protocol Stack Remote Code ExecutionHTTP Protocol Stack Remote Code Execution Vulnerability ExploitedFix
CVE-2021-28310 13 Apr 2021 CVSS 7.8 Microsoft Win32k Privilege EscalationWin32k Elevation of Privilege Vulnerability ExploitedFix
CVE-2021-27085 11 Mar 2021 CVSS 8.8 Microsoft Internet Explorer Remote Code ExecutionInternet Explorer Remote Code Execution Vulnerability ExploitedFix
CVE-2021-27059 11 Mar 2021 CVSS 7.6 Microsoft Office Remote Code ExecutionMicrosoft Office Remote Code Execution Vulnerability ExploitedFix
CVE-2021-26411 11 Mar 2021 CVSS 8.8 Microsoft Internet Explorer Memory CorruptionInternet Explorer Memory Corruption Vulnerability ExploitedFix
CVE-2021-26855 3 Mar 2021 CVSS 9.1 Microsoft Exchange Server Remote Code ExecutionMicrosoft Exchange Server Remote Code Execution Vulnerability ExploitedFix
CVE-2021-26857 3 Mar 2021 CVSS 7.8 Microsoft Exchange Server Remote Code ExecutionMicrosoft Exchange Server Remote Code Execution Vulnerability ExploitedFix
CVE-2021-26858 3 Mar 2021 CVSS 7.8 Microsoft Exchange Server Remote Code ExecutionMicrosoft Exchange Server Remote Code Execution Vulnerability ExploitedFix
CVE-2021-27065 3 Mar 2021 CVSS 7.8 Microsoft Exchange Server Remote Code ExecutionMicrosoft Exchange Server Remote Code Execution Vulnerability ExploitedFix
CVE-2021-1732 25 Feb 2021 CVSS 7.8 Microsoft Win32k Privilege EscalationWindows Win32k Elevation of Privilege Vulnerability ExploitedFix
CVE-2021-1647 12 Jan 2021 CVSS 7.8 Microsoft Defender Remote Code ExecutionMicrosoft Defender Remote Code Execution Vulnerability ExploitedFix
CVE-2020-17144 10 Dec 2020 CVSS 8.4 Microsoft Exchange Server Remote Code ExecutionMicrosoft Exchange Remote Code Execution Vulnerability ExploitedFix
CVE-2020-17087 11 Nov 2020 CVSS 7.8 Microsoft Windows Kernel Privilege EscalationWindows Kernel Local Elevation of Privilege Vulnerability ExploitedFix
CVE-2020-0878 11 Sep 2020 CVSS 4.2 Microsoft Edge and Internet Explorer Memory Corruption<p>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory… ExploitedFix
CVE-2020-1472 17 Aug 2020 CVSS 5.5 Microsoft Netlogon Privilege EscalationAn elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller… ExploitedFix
CVE-2020-1380 17 Aug 2020 CVSS 7.8 Microsoft Internet Explorer Scripting Engine Memory CorruptionA remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability… ExploitedFix
CVE-2020-1464 17 Aug 2020 CVSS 7.8 Microsoft Windows SpoofingA spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could… ExploitedFix
CVE-2020-1350 14 Jul 2020 CVSS 10.0 Microsoft Windows DNS Server Remote Code ExecutionA remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS… ExploitedFix
CVE-2020-1147 14 Jul 2020 CVSS 7.8 Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code ExecutionA remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source… ExploitedFix
CVE-2020-1040 14 Jul 2020 CVSS 9.0 Microsoft Hyper-V RemoteFX vGPU Remote Code ExecutionA remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user… ExploitedFix
CVE-2020-0986 9 Jun 2020 CVSS 7.8 Microsoft Windows Kernel Privilege EscalationAn elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of… ExploitedFix
CVE-2020-1054 21 May 2020 CVSS 7.0 Microsoft Win32k Privilege EscalationAn elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker… ExploitedFix
CVE-2020-1027 15 Apr 2020 CVSS 7.8 Microsoft Windows Kernel Privilege EscalationAn elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of… ExploitedFix
CVE-2020-1020 15 Apr 2020 CVSS 8.8 Microsoft Windows Adobe Font Manager Library Remote Code ExecutionA remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted… ExploitedFix
CVE-2020-0968 15 Apr 2020 CVSS 7.5 Microsoft Internet Explorer Scripting Engine Memory CorruptionA remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting… ExploitedFix
CVE-2020-0938 15 Apr 2020 CVSS 7.8 Microsoft Windows Adobe Font Manager Library Remote Code ExecutionA remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted… ExploitedFix
CVE-2020-0787 12 Mar 2020 CVSS 7.8 Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege ManagementAn elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka… ExploitedFix
CVE-2020-0796 12 Mar 2020 CVSS 10.0 Microsoft SMBv3 Remote Code ExecutionA remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka… ExploitedFix
CVE-2020-0683 11 Feb 2020 CVSS 7.8 Microsoft Windows Installer Privilege EscalationAn elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of… ExploitedFix
CVE-2020-0688 11 Feb 2020 CVSS 8.8 Microsoft Exchange Server Validation Key Remote Code ExecutionA remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka… ExploitedFix
CVE-2020-0674 11 Feb 2020 CVSS 7.5 Microsoft Internet Explorer Scripting Engine Memory CorruptionA remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting… ExploitedFix
CVE-2020-0618 11 Feb 2020 CVSS 8.8 Microsoft SQL Server Reporting Services Remote Code ExecutionA remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL… ExploitedFix
CVE-2020-0646 14 Jan 2020 CVSS 9.8 Microsoft .NET Framework Remote Code ExecutionA remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote Code… ExploitedFix
CVE-2020-0638 14 Jan 2020 CVSS 7.8 Microsoft Update Notification Manager Privilege EscalationAn elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an attacker… ExploitedFix
CVE-2020-0601 14 Jan 2020 CVSS 8.1 Microsoft Windows CryptoAPI SpoofingA spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could… ExploitedFix
CVE-2019-1458 10 Dec 2019 CVSS 7.8 Microsoft Win32k Privilege EscalationAn elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation… ExploitedFix
CVE-2019-1429 12 Nov 2019 CVSS 7.5 Microsoft Internet Explorer Scripting Engine Memory CorruptionA remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting… ExploitedFix
CVE-2019-1405 12 Nov 2019 CVSS 7.8 Microsoft Windows Universal Plug and Play (UPnP) Service Privilege EscalationAn elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka… ExploitedFix
CVE-2019-1385 12 Nov 2019 CVSS 7.8 Microsoft Windows AppX Deployment Extensions Privilege EscalationAn elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in… ExploitedFix
CVE-2019-1388 12 Nov 2019 CVSS 7.8 Microsoft Windows Certificate Dialog Privilege EscalationAn elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka 'Windows… ExploitedFix
CVE-2019-1322 10 Oct 2019 CVSS 7.8 Microsoft Windows Privilege EscalationAn elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation of Privilege… ExploitedFix
CVE-2019-1315 10 Oct 2019 CVSS 7.8 Microsoft Windows Error Reporting Manager Privilege EscalationAn elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Reporting… ExploitedFix
CVE-2019-1367 23 Sep 2019 CVSS 7.5 Microsoft Internet Explorer Scripting Engine Memory CorruptionA remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting… ExploitedFix
CVE-2019-1297 11 Sep 2019 CVSS 8.8 Microsoft Excel Remote Code ExecutionA remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft… ExploitedFix
CVE-2019-1253 11 Sep 2019 CVSS 7.8 Microsoft Windows AppX Deployment Server Privilege EscalationAn elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerability, an… ExploitedFix
CVE-2019-1214 11 Sep 2019 CVSS 7.8 Microsoft Windows Privilege Common Log File System (CLFS) EscalationAn elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka… ExploitedFix
CVE-2019-1215 11 Sep 2019 CVSS 7.8 Microsoft Windows Privilege EscalationAn elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Windows Elevation of Privilege… ExploitedFix
CVE-2019-1130 15 Jul 2019 CVSS 7.8 Microsoft Windows AppX Deployment Service Privilege EscalationAn elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation… ExploitedFix
CVE-2019-1132 15 Jul 2019 CVSS 7.8 Microsoft Win32k Privilege EscalationAn elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation… ExploitedFix
CVE-2019-1129 15 Jul 2019 CVSS 7.8 Microsoft Windows AppX Deployment Service (AppXSVC) Privilege EscalationAn elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation… ExploitedFix
CVE-2019-1068 15 Jul 2019 CVSS 8.8 Microsoft SQL Server Remote Code ExecutionA remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL… ExploitedFix
CVE-2019-0880 15 Jul 2019 CVSS 7.8 Microsoft Windows Privilege EscalationA local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege… ExploitedFix
Page 17 of 19