Vendor CVEs

Microsoft

All CVEs

15,658 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2020-0796	Microsoft Windows	Cri	0.94	10.0	1.00	KEV	Mar 12, 2020	A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Remote Code Execution Vulnerability'.
CVE-2025-53770	Microsoft Sharepoint Server	Cri	0.93	9.8	1.00	KEV	Jul 20, 2025	Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. Microsoft is aware that an exploit for CVE-2025-53770 exists in the wild. Microsoft is preparing and fully testing a comprehensive update…
CVE-2023-29357	Microsoft Sharepoint Server	Cri	0.93	9.8	1.00	KEV	Jun 14, 2023	Microsoft SharePoint Server Elevation of Privilege Vulnerability
CVE-2021-38647	Microsoft Open Management Infrastructure	Cri	0.93	9.8	1.00	KEV	Sep 15, 2021	Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
CVE-2019-0708	Microsoft Remote Desktop Services	Cri	0.93	9.8	1.00	KEV	May 16, 2019	A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution…
CVE-2019-0604	Microsoft Sharepoint Server	Cri	0.93	9.8	1.00	KEV	Mar 5, 2019	A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0594.
CVE-2021-34473	Microsoft Exchange Server	Cri	0.88	9.1	1.00	KEV	Jul 14, 2021	Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-26855	Microsoft Exchange Server	Cri	0.88	9.1	1.00	KEV	Mar 3, 2021	Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2025-59287	Microsoft Windows Server 2003	Cri	0.87	9.8	1.00	KEV	Oct 14, 2025	Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.
CVE-2021-34523	Microsoft Exchange Server	Cri	0.87	9.0	1.00	KEV	Jul 14, 2021	Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2021-31166	Microsoft HTTP Protocol Stack	Cri	0.87	9.8	1.00	KEV	May 11, 2021	HTTP Protocol Stack Remote Code Execution Vulnerability
CVE-2020-0646	Microsoft .net Framework	Cri	0.87	9.8	0.99	KEV	Jan 14, 2020	A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote Code Execution Injection Vulnerability'.
CVE-2015-1635	Microsoft Windows Server 2008	Cri	0.87	9.8	1.00	KEV	Apr 14, 2015	HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted HTTP requests, aka "HTTP.sys Remote Code Execution Vulnerability."
CVE-2008-4250	Microsoft Windows 2000	Cri	0.87	9.8	0.99	KEV	Oct 23, 2008	The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that triggers the overflow during path canonicalization, as…
CVE-2025-49704	Microsoft Office SharePoint	Hig	0.86	8.8	1.00	KEV	Jul 8, 2025	Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2022-41040	Microsoft Exchange Server	Hig	0.86	8.8	1.00	KEV	Oct 3, 2022	Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2021-40444	Microsoft Office	Hig	0.86	8.8	0.97	KEV	Sep 15, 2021	Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks that attempt to exploit this vulnerability by using specially-crafted Microsoft Office documents. An attacker could craft…
CVE-2021-34527	Microsoft Windows Server 2012	Hig	0.86	8.8	1.00	KEV	Jul 2, 2021	A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs;…
CVE-2020-0688	Microsoft Exchange Server	Hig	0.86	8.8	1.00	KEV	Feb 11, 2020	A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'.
CVE-2020-0618	Microsoft SQL Server	Hig	0.86	8.8	0.99	KEV	Feb 11, 2020	A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability'.
CVE-2017-0144	Microsoft Windows	Hig	0.86	8.8	0.99	KEV	Mar 17, 2017	The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via…
CVE-2017-0143	Microsoft Windows	Hig	0.86	8.8	0.93	KEV	Mar 17, 2017	The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via…
CVE-2015-0313	Microsoft Internet Explorer	Cri	0.86	9.8	0.96	KEV	Feb 2, 2015	Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2015,…
CVE-2015-0311	Microsoft Internet Explorer	Cri	0.86	9.8	0.86	KEV	Jan 23, 2015	Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in January 2015.
CVE-2021-42321	Microsoft Exchange Server	Hig	0.85	8.8	0.92	KEV	Nov 10, 2021	Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2017-0146	Microsoft Windows	Hig	0.85	8.8	0.90	KEV	Mar 17, 2017	The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via…
CVE-2017-0145	Microsoft Windows	Hig	0.85	8.8	0.90	KEV	Mar 17, 2017	The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via…
CVE-2020-1350	Microsoft Windows	Cri	0.84	10.0	0.91	KEV	Jul 14, 2020	A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server Remote Code Execution Vulnerability'.
CVE-2013-2551	Microsoft Internet Explorer	Hig	0.84	8.8	0.74	KEV	Mar 11, 2013	Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2013, aka "Internet…
CVE-2024-21413	Microsoft Outlook	Cri	0.83	9.8	0.95	KEV	Feb 13, 2024	Microsoft Outlook Remote Code Execution Vulnerability
CVE-2023-23397	Microsoft Outlook	Cri	0.83	9.8	0.97	KEV	Mar 14, 2023	Microsoft Outlook Elevation of Privilege Vulnerability
CVE-2014-1812	Microsoft Windows	Hig	0.83	8.8	0.65	KEV	May 14, 2014	The Group Policy implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 does not properly handle distribution of passwords, which allows remote authenticated users to obtain…
CVE-2014-1776	Microsoft Internet Explorer	Cri	0.83	9.8	0.88	KEV	Apr 27, 2014	Use-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to the CMarkup::IsConnectedToPrimaryMarkup function, as exploited in the wild in April…
CVE-2021-26411	Microsoft Internet Explorer	Hig	0.82	8.8	0.81	KEV	Mar 11, 2021	Internet Explorer Memory Corruption Vulnerability
CVE-2017-8543	Microsoft Windows Server 2008	Cri	0.82	9.8	0.74	KEV	Jun 15, 2017	Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an…
CVE-2017-0148	Microsoft Windows	Hig	0.82	8.1	0.99	KEV	Mar 17, 2017	The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via…
CVE-2024-43468	Microsoft Configuration Manager	Cri	0.81	9.8	0.82	KEV	Oct 8, 2024	Microsoft Configuration Manager Remote Code Execution Vulnerability
CVE-2022-41080	Microsoft Exchange Server	Hig	0.81	8.8	0.77	KEV	Nov 9, 2022	Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2022-41082	Microsoft Exchange Server	Hig	0.81	8.0	1.00	KEV	Oct 3, 2022	Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2026-33824	Microsoft Windows IKE Extension	Cri	0.80	9.8	0.73	KEV	Apr 14, 2026	Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.
CVE-2023-21529	Microsoft Exchange Server	Hig	0.80	8.8	0.62	KEV	Feb 14, 2023	Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2022-30190	Microsoft MSDT	Hig	0.80	7.8	0.99	KEV	Jun 1, 2022	A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. The attacker can then…
CVE-2021-27065	Microsoft Exchange Server	Hig	0.80	7.8	1.00	KEV	Mar 3, 2021	Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2017-11882	Microsoft Office	Hig	0.80	7.8	1.00	KEV	Nov 15, 2017	Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Microsoft Office 2016 allow an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka "Microsoft…
CVE-2017-0199	Microsoft Office	Hig	0.80	7.8	1.00	KEV	Apr 12, 2017	Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft…
CVE-2017-7269	Microsoft Internet Information Server	Cri	0.80	9.8	1.00	KEV	Mar 27, 2017	Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: <http://" in a PROPFIND request, as…
CVE-2016-0034	Microsoft Silverlight	Hig	0.80	8.8	0.70	KEV	Jan 13, 2016	Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers to execute arbitrary code or cause a denial of service (object-header corruption) via a crafted web site, aka "Silverlight Runtime Remote Code Execution…
CVE-2014-6332	Microsoft Windows	Hig	0.80	8.8	0.95	KEV	Nov 11, 2014	OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted…
CVE-2012-0158	Microsoft Office	Hig	0.80	8.8	1.00	KEV	Apr 10, 2012	The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common Controls in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2003 Web Components SP3; SQL Server 2000 SP4, 2005 SP4, and 2008 SP2, SP3, and…
CVE-2011-1889	Microsoft Forefront Threat Management Gateway	Cri	0.80	9.8	0.48	KEV	Jun 16, 2011	The NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway (TMG) 2010 allows remote attackers to execute arbitrary code via vectors involving unspecified requests, aka "TMG Firewall Client Memory Corruption Vulnerability."

CVE-2020-0796CriKEVMar 12, 2020
Microsoft
Windows
risk 0.94cvss 10.0epss 1.00
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Remote Code Execution Vulnerability'.
CVE-2025-53770CriKEVJul 20, 2025
Microsoft
Sharepoint Server
risk 0.93cvss 9.8epss 1.00
Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. Microsoft is aware that an exploit for CVE-2025-53770 exists in the wild. Microsoft is preparing and fully testing a comprehensive update…
CVE-2023-29357CriKEVJun 14, 2023
Microsoft
Sharepoint Server
risk 0.93cvss 9.8epss 1.00
Microsoft SharePoint Server Elevation of Privilege Vulnerability
CVE-2021-38647CriKEVSep 15, 2021
Microsoft
Open Management Infrastructure
risk 0.93cvss 9.8epss 1.00
Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
CVE-2019-0708CriKEVMay 16, 2019
Microsoft
Remote Desktop Services
risk 0.93cvss 9.8epss 1.00
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution…
CVE-2019-0604CriKEVMar 5, 2019
Microsoft
Sharepoint Server
risk 0.93cvss 9.8epss 1.00
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0594.
CVE-2021-34473CriKEVJul 14, 2021
Microsoft
Exchange Server
risk 0.88cvss 9.1epss 1.00
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-26855CriKEVMar 3, 2021
Microsoft
Exchange Server
risk 0.88cvss 9.1epss 1.00
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2025-59287CriKEVOct 14, 2025
Microsoft
Windows Server 2003
risk 0.87cvss 9.8epss 1.00
Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.
CVE-2021-34523CriKEVJul 14, 2021
Microsoft
Exchange Server
risk 0.87cvss 9.0epss 1.00
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2021-31166CriKEVMay 11, 2021
Microsoft
HTTP Protocol Stack
risk 0.87cvss 9.8epss 1.00
HTTP Protocol Stack Remote Code Execution Vulnerability
CVE-2020-0646CriKEVJan 14, 2020
Microsoft
.net Framework
risk 0.87cvss 9.8epss 0.99
A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote Code Execution Injection Vulnerability'.
CVE-2015-1635CriKEVApr 14, 2015
Microsoft
Windows Server 2008
risk 0.87cvss 9.8epss 1.00
HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted HTTP requests, aka "HTTP.sys Remote Code Execution Vulnerability."
CVE-2008-4250CriKEVOct 23, 2008
Microsoft
Windows 2000
risk 0.87cvss 9.8epss 0.99
The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that triggers the overflow during path canonicalization, as…
CVE-2025-49704HigKEVJul 8, 2025
Microsoft
Office SharePoint
risk 0.86cvss 8.8epss 1.00
Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2022-41040HigKEVOct 3, 2022
Microsoft
Exchange Server
risk 0.86cvss 8.8epss 1.00
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2021-40444HigKEVSep 15, 2021
Microsoft
Office
risk 0.86cvss 8.8epss 0.97
Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks that attempt to exploit this vulnerability by using specially-crafted Microsoft Office documents. An attacker could craft…
CVE-2021-34527HigKEVJul 2, 2021
Microsoft
Windows Server 2012
risk 0.86cvss 8.8epss 1.00
A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs;…
CVE-2020-0688HigKEVFeb 11, 2020
Microsoft
Exchange Server
risk 0.86cvss 8.8epss 1.00
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'.
CVE-2020-0618HigKEVFeb 11, 2020
Microsoft
SQL Server
risk 0.86cvss 8.8epss 0.99
A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability'.
CVE-2017-0144HigKEVMar 17, 2017
Microsoft
Windows
risk 0.86cvss 8.8epss 0.99
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via…
CVE-2017-0143HigKEVMar 17, 2017
Microsoft
Windows
risk 0.86cvss 8.8epss 0.93
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via…
CVE-2015-0313CriKEVFeb 2, 2015
Microsoft
Internet Explorer
risk 0.86cvss 9.8epss 0.96
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2015,…
CVE-2015-0311CriKEVJan 23, 2015
Microsoft
Internet Explorer
risk 0.86cvss 9.8epss 0.86
Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in January 2015.
CVE-2021-42321HigKEVNov 10, 2021
Microsoft
Exchange Server
risk 0.85cvss 8.8epss 0.92
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2017-0146HigKEVMar 17, 2017
Microsoft
Windows
risk 0.85cvss 8.8epss 0.90
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via…
CVE-2017-0145HigKEVMar 17, 2017
Microsoft
Windows
risk 0.85cvss 8.8epss 0.90
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via…
CVE-2020-1350CriKEVJul 14, 2020
Microsoft
Windows
risk 0.84cvss 10.0epss 0.91
A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server Remote Code Execution Vulnerability'.
CVE-2013-2551HigKEVMar 11, 2013
Microsoft
Internet Explorer
risk 0.84cvss 8.8epss 0.74
Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2013, aka "Internet…
CVE-2024-21413CriKEVFeb 13, 2024
Microsoft
Outlook
risk 0.83cvss 9.8epss 0.95
Microsoft Outlook Remote Code Execution Vulnerability
CVE-2023-23397CriKEVMar 14, 2023
Microsoft
Outlook
risk 0.83cvss 9.8epss 0.97
Microsoft Outlook Elevation of Privilege Vulnerability
CVE-2014-1812HigKEVMay 14, 2014
Microsoft
Windows
risk 0.83cvss 8.8epss 0.65
The Group Policy implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 does not properly handle distribution of passwords, which allows remote authenticated users to obtain…
CVE-2014-1776CriKEVApr 27, 2014
Microsoft
Internet Explorer
risk 0.83cvss 9.8epss 0.88
Use-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to the CMarkup::IsConnectedToPrimaryMarkup function, as exploited in the wild in April…
CVE-2021-26411HigKEVMar 11, 2021
Microsoft
Internet Explorer
risk 0.82cvss 8.8epss 0.81
Internet Explorer Memory Corruption Vulnerability
CVE-2017-8543CriKEVJun 15, 2017
Microsoft
Windows Server 2008
risk 0.82cvss 9.8epss 0.74
Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an…
CVE-2017-0148HigKEVMar 17, 2017
Microsoft
Windows
risk 0.82cvss 8.1epss 0.99
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via…
CVE-2024-43468CriKEVOct 8, 2024
Microsoft
Configuration Manager
risk 0.81cvss 9.8epss 0.82
Microsoft Configuration Manager Remote Code Execution Vulnerability
CVE-2022-41080HigKEVNov 9, 2022
Microsoft
Exchange Server
risk 0.81cvss 8.8epss 0.77
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2022-41082HigKEVOct 3, 2022
Microsoft
Exchange Server
risk 0.81cvss 8.0epss 1.00
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2026-33824CriKEVApr 14, 2026
Microsoft
Windows IKE Extension
risk 0.80cvss 9.8epss 0.73
Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.
CVE-2023-21529HigKEVFeb 14, 2023
Microsoft
Exchange Server
risk 0.80cvss 8.8epss 0.62
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2022-30190HigKEVJun 1, 2022
Microsoft
MSDT
risk 0.80cvss 7.8epss 0.99
A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. The attacker can then…
CVE-2021-27065HigKEVMar 3, 2021
Microsoft
Exchange Server
risk 0.80cvss 7.8epss 1.00
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2017-11882HigKEVNov 15, 2017
Microsoft
Office
risk 0.80cvss 7.8epss 1.00
Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Microsoft Office 2016 allow an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka "Microsoft…
CVE-2017-0199HigKEVApr 12, 2017
Microsoft
Office
risk 0.80cvss 7.8epss 1.00
Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft…
CVE-2017-7269CriKEVMar 27, 2017
Microsoft
Internet Information Server
risk 0.80cvss 9.8epss 1.00
Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: <http://" in a PROPFIND request, as…
CVE-2016-0034HigKEVJan 13, 2016
Microsoft
Silverlight
risk 0.80cvss 8.8epss 0.70
Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers to execute arbitrary code or cause a denial of service (object-header corruption) via a crafted web site, aka "Silverlight Runtime Remote Code Execution…
CVE-2014-6332HigKEVNov 11, 2014
Microsoft
Windows
risk 0.80cvss 8.8epss 0.95
OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted…
CVE-2012-0158HigKEVApr 10, 2012
Microsoft
Office
risk 0.80cvss 8.8epss 1.00
The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common Controls in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2003 Web Components SP3; SQL Server 2000 SP4, 2005 SP4, and 2008 SP2, SP3, and…
CVE-2011-1889CriKEVJun 16, 2011
Microsoft
Forefront Threat Management Gateway
risk 0.80cvss 9.8epss 0.48
The NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway (TMG) 2010 allows remote attackers to execute arbitrary code via vectors involving unspecified requests, aka "TMG Firewall Client Memory Corruption Vulnerability."

Page 1 of 314