Vendor CVEs
Microsoft
All CVEs
18,147 total · sorted by risk| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-29117 | Hig | 0.49 | 7.5 | 0.06 | May 10, 2022 | .NET and Visual Studio Denial of Service Vulnerability | ||
| CVE-2022-26931 | Hig | 0.49 | 7.5 | 0.03 | May 10, 2022 | Windows Kerberos Elevation of Privilege Vulnerability | ||
| CVE-2022-26915 | Hig | 0.49 | 7.5 | 0.04 | Apr 15, 2022 | Windows Secure Channel Denial of Service Vulnerability | ||
| CVE-2022-26832 | Hig | 0.49 | 7.5 | 0.04 | Apr 15, 2022 | .NET Framework Denial of Service Vulnerability | ||
| CVE-2022-26831 | Hig | 0.49 | 7.5 | 0.03 | Apr 15, 2022 | Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability | ||
| CVE-2022-26830 | Hig | 0.49 | 7.5 | 0.02 | Apr 15, 2022 | DiskUsage.exe Remote Code Execution Vulnerability | ||
| CVE-2022-24534 | Hig | 0.49 | 7.5 | 0.02 | Apr 15, 2022 | Win32 Stream Enumeration Remote Code Execution Vulnerability | ||
| CVE-2022-24485 | Hig | 0.49 | 7.5 | 0.02 | Apr 15, 2022 | Win32 File Enumeration Remote Code Execution Vulnerability | ||
| CVE-2022-21983 | Hig | 0.49 | 7.5 | 0.02 | Apr 15, 2022 | Win32 Stream Enumeration Remote Code Execution Vulnerability | ||
| CVE-2022-0280 | Hig | 0.49 | 7.5 | 0.00 | Mar 10, 2022 | A race condition vulnerability exists in the QuickClean feature of McAfee Total Protection for Windows prior to 16.0.43 that allows a local user to gain privilege elevation and perform an arbitrary file delete. This could lead to sensitive files being deleted and potentially… | ||
| CVE-2022-24464 | Hig | 0.49 | 7.5 | 0.04 | Mar 9, 2022 | .NET and Visual Studio Denial of Service Vulnerability | ||
| CVE-2022-21986 | Hig | 0.49 | 7.5 | 0.04 | Feb 9, 2022 | .NET Denial of Service Vulnerability | ||
| CVE-2022-21965 | Hig | 0.49 | 7.5 | 0.03 | Feb 9, 2022 | Microsoft Teams Denial of Service Vulnerability | ||
| CVE-2020-23315 | Hig | 0.49 | 7.5 | 0.02 | Jan 20, 2022 | There is an ASSERTION (pFuncBody->GetYieldRegister() == oldYieldRegister) failed in Js::DebugContext::RundownSourcesAndReparse in ChakraCore version 1.12.0.0-beta. | ||
| CVE-2022-21932 | Hig | 0.49 | 7.6 | 0.01 | Jan 11, 2022 | Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability | ||
| CVE-2022-21911 | Hig | 0.49 | 7.5 | 0.03 | Jan 11, 2022 | .NET Framework Denial of Service Vulnerability | ||
| CVE-2022-21904 | Hig | 0.49 | 7.5 | 0.04 | Jan 11, 2022 | Windows GDI Information Disclosure Vulnerability | ||
| CVE-2022-21890 | Hig | 0.49 | 7.5 | 0.03 | Jan 11, 2022 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | ||
| CVE-2022-21889 | Hig | 0.49 | 7.5 | 0.03 | Jan 11, 2022 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | ||
| CVE-2022-21883 | Hig | 0.49 | 7.5 | 0.04 | Jan 11, 2022 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | ||
| CVE-2022-21880 | Hig | 0.49 | 7.5 | 0.04 | Jan 11, 2022 | Windows GDI+ Information Disclosure Vulnerability | ||
| CVE-2022-21848 | Hig | 0.49 | 7.5 | 0.04 | Jan 11, 2022 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | ||
| CVE-2022-21843 | Hig | 0.49 | 7.5 | 0.03 | Jan 11, 2022 | Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability | ||
| CVE-2021-43893 | Hig | 0.49 | 7.5 | 0.07 | Dec 15, 2021 | Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability | ||
| CVE-2021-43888 | Hig | 0.49 | 7.5 | 0.03 | Dec 15, 2021 | Microsoft Defender for IoT Information Disclosure Vulnerability | ||
| CVE-2021-43236 | Hig | 0.49 | 7.5 | 0.03 | Dec 15, 2021 | Microsoft Message Queuing Information Disclosure Vulnerability | ||
| CVE-2021-43233 | Hig | 0.49 | 7.5 | 0.02 | Dec 15, 2021 | Remote Desktop Client Remote Code Execution Vulnerability | ||
| CVE-2021-43228 | Hig | 0.49 | 7.5 | 0.04 | Dec 15, 2021 | SymCrypt Denial of Service Vulnerability | ||
| CVE-2021-43225 | Hig | 0.49 | 7.5 | 0.03 | Dec 15, 2021 | Bot Framework SDK Remote Code Execution Vulnerability | ||
| CVE-2021-43222 | Hig | 0.49 | 7.5 | 0.03 | Dec 15, 2021 | Microsoft Message Queuing Information Disclosure Vulnerability | ||
| CVE-2021-42291 | Hig | 0.49 | 7.5 | 0.04 | Nov 10, 2021 | Active Directory Domain Services Elevation of Privilege Vulnerability | ||
| CVE-2021-42282 | Hig | 0.49 | 7.5 | 0.04 | Nov 10, 2021 | Active Directory Domain Services Elevation of Privilege Vulnerability | ||
| CVE-2021-41372 | Hig | 0.49 | 7.6 | 0.01 | Nov 10, 2021 | A Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF) vulnerability exists when Power BI Report Server Template file (pbix) containing HTML files is uploaded to the server and HTML files are accessed directly by the victim. Combining these 2 vulnerabilities… | ||
| CVE-2021-41356 | Hig | 0.49 | 7.5 | 0.03 | Nov 10, 2021 | Windows Denial of Service Vulnerability | ||
| CVE-2021-38665 | Hig | 0.49 | 7.4 | 0.07 | Nov 10, 2021 | Remote Desktop Protocol Client Information Disclosure Vulnerability | ||
| CVE-2021-41352 | Hig | 0.49 | 7.5 | 0.03 | Oct 13, 2021 | SCOM Information Disclosure Vulnerability | ||
| CVE-2021-40476 | Hig | 0.49 | 7.5 | 0.02 | Oct 13, 2021 | Windows AppContainer Elevation Of Privilege Vulnerability | ||
| CVE-2021-36953 | Hig | 0.49 | 7.5 | 0.05 | Oct 13, 2021 | Windows TCP/IP Denial of Service Vulnerability | ||
| CVE-2021-34453 | Hig | 0.49 | 7.5 | 0.03 | Oct 13, 2021 | Microsoft Exchange Server Denial of Service Vulnerability | ||
| CVE-2021-36960 | Hig | 0.49 | 7.5 | 0.03 | Sep 15, 2021 | Windows SMB Information Disclosure Vulnerability | ||
| CVE-2021-36933 | Hig | 0.49 | 7.5 | 0.04 | Aug 12, 2021 | Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability | ||
| CVE-2021-36932 | Hig | 0.49 | 7.5 | 0.04 | Aug 12, 2021 | Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability | ||
| CVE-2021-36926 | Hig | 0.49 | 7.5 | 0.04 | Aug 12, 2021 | Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability | ||
| CVE-2021-26433 | Hig | 0.49 | 7.5 | 0.04 | Aug 12, 2021 | Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability | ||
| CVE-2021-26423 | Hig | 0.49 | 7.5 | 0.04 | Aug 12, 2021 | .NET Core and Visual Studio Denial of Service Vulnerability | ||
| CVE-2021-34490 | Hig | 0.49 | 7.5 | 0.03 | Jul 14, 2021 | Windows TCP/IP Driver Denial of Service Vulnerability | ||
| CVE-2021-34476 | Hig | 0.49 | 7.5 | 0.03 | Jul 14, 2021 | Bowser.sys Denial of Service Vulnerability | ||
| CVE-2021-33788 | Hig | 0.49 | 7.5 | 0.03 | Jul 14, 2021 | Windows LSA Denial of Service Vulnerability | ||
| CVE-2021-33785 | Hig | 0.49 | 7.5 | 0.03 | Jul 14, 2021 | Windows AF_UNIX Socket Provider Denial of Service Vulnerability | ||
| CVE-2021-33772 | Hig | 0.49 | 7.5 | 0.03 | Jul 14, 2021 | Windows TCP/IP Driver Denial of Service Vulnerability |
- risk 0.49cvss 7.5epss 0.06
.NET and Visual Studio Denial of Service Vulnerability
- risk 0.49cvss 7.5epss 0.03
Windows Kerberos Elevation of Privilege Vulnerability
- risk 0.49cvss 7.5epss 0.04
Windows Secure Channel Denial of Service Vulnerability
- risk 0.49cvss 7.5epss 0.04
.NET Framework Denial of Service Vulnerability
- risk 0.49cvss 7.5epss 0.03
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
- risk 0.49cvss 7.5epss 0.02
DiskUsage.exe Remote Code Execution Vulnerability
- risk 0.49cvss 7.5epss 0.02
Win32 Stream Enumeration Remote Code Execution Vulnerability
- risk 0.49cvss 7.5epss 0.02
Win32 File Enumeration Remote Code Execution Vulnerability
- risk 0.49cvss 7.5epss 0.02
Win32 Stream Enumeration Remote Code Execution Vulnerability
- risk 0.49cvss 7.5epss 0.00
A race condition vulnerability exists in the QuickClean feature of McAfee Total Protection for Windows prior to 16.0.43 that allows a local user to gain privilege elevation and perform an arbitrary file delete. This could lead to sensitive files being deleted and potentially…
- risk 0.49cvss 7.5epss 0.04
.NET and Visual Studio Denial of Service Vulnerability
- risk 0.49cvss 7.5epss 0.04
.NET Denial of Service Vulnerability
- risk 0.49cvss 7.5epss 0.03
Microsoft Teams Denial of Service Vulnerability
- risk 0.49cvss 7.5epss 0.02
There is an ASSERTION (pFuncBody->GetYieldRegister() == oldYieldRegister) failed in Js::DebugContext::RundownSourcesAndReparse in ChakraCore version 1.12.0.0-beta.
- risk 0.49cvss 7.6epss 0.01
Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability
- risk 0.49cvss 7.5epss 0.03
.NET Framework Denial of Service Vulnerability
- risk 0.49cvss 7.5epss 0.04
Windows GDI Information Disclosure Vulnerability
- risk 0.49cvss 7.5epss 0.03
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
- risk 0.49cvss 7.5epss 0.03
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
- risk 0.49cvss 7.5epss 0.04
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
- risk 0.49cvss 7.5epss 0.04
Windows GDI+ Information Disclosure Vulnerability
- risk 0.49cvss 7.5epss 0.04
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
- risk 0.49cvss 7.5epss 0.03
Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
- risk 0.49cvss 7.5epss 0.07
Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability
- risk 0.49cvss 7.5epss 0.03
Microsoft Defender for IoT Information Disclosure Vulnerability
- risk 0.49cvss 7.5epss 0.03
Microsoft Message Queuing Information Disclosure Vulnerability
- risk 0.49cvss 7.5epss 0.02
Remote Desktop Client Remote Code Execution Vulnerability
- risk 0.49cvss 7.5epss 0.04
SymCrypt Denial of Service Vulnerability
- risk 0.49cvss 7.5epss 0.03
Bot Framework SDK Remote Code Execution Vulnerability
- risk 0.49cvss 7.5epss 0.03
Microsoft Message Queuing Information Disclosure Vulnerability
- risk 0.49cvss 7.5epss 0.04
Active Directory Domain Services Elevation of Privilege Vulnerability
- risk 0.49cvss 7.5epss 0.04
Active Directory Domain Services Elevation of Privilege Vulnerability
- risk 0.49cvss 7.6epss 0.01
A Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF) vulnerability exists when Power BI Report Server Template file (pbix) containing HTML files is uploaded to the server and HTML files are accessed directly by the victim. Combining these 2 vulnerabilities…
- risk 0.49cvss 7.5epss 0.03
Windows Denial of Service Vulnerability
- risk 0.49cvss 7.4epss 0.07
Remote Desktop Protocol Client Information Disclosure Vulnerability
- risk 0.49cvss 7.5epss 0.03
SCOM Information Disclosure Vulnerability
- risk 0.49cvss 7.5epss 0.02
Windows AppContainer Elevation Of Privilege Vulnerability
- risk 0.49cvss 7.5epss 0.05
Windows TCP/IP Denial of Service Vulnerability
- risk 0.49cvss 7.5epss 0.03
Microsoft Exchange Server Denial of Service Vulnerability
- risk 0.49cvss 7.5epss 0.03
Windows SMB Information Disclosure Vulnerability
- risk 0.49cvss 7.5epss 0.04
Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
- risk 0.49cvss 7.5epss 0.04
Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
- risk 0.49cvss 7.5epss 0.04
Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
- risk 0.49cvss 7.5epss 0.04
Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
- risk 0.49cvss 7.5epss 0.04
.NET Core and Visual Studio Denial of Service Vulnerability
- risk 0.49cvss 7.5epss 0.03
Windows TCP/IP Driver Denial of Service Vulnerability
- risk 0.49cvss 7.5epss 0.03
Bowser.sys Denial of Service Vulnerability
- risk 0.49cvss 7.5epss 0.03
Windows LSA Denial of Service Vulnerability
- risk 0.49cvss 7.5epss 0.03
Windows AF_UNIX Socket Provider Denial of Service Vulnerability
- risk 0.49cvss 7.5epss 0.03
Windows TCP/IP Driver Denial of Service Vulnerability
Page 156 of 363