Vendor CVEs
Microsoft
All CVEs
18,146 total · sorted by risk| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-23261 | Med | 0.35 | 5.3 | 0.02 | Feb 7, 2022 | Microsoft Edge (Chromium-based) Tampering Vulnerability | ||
| CVE-2022-21925 | Med | 0.35 | 5.3 | 0.03 | Jan 11, 2022 | Windows BackupKey Remote Protocol Security Feature Bypass Vulnerability | ||
| CVE-2022-21924 | Med | 0.35 | 5.3 | 0.03 | Jan 11, 2022 | Workstation Service Remote Protocol Security Feature Bypass Vulnerability | ||
| CVE-2022-21913 | Med | 0.35 | 5.3 | 0.03 | Jan 11, 2022 | Local Security Authority (Domain Policy) Remote Protocol Security Feature Bypass | ||
| CVE-2021-33850 | Med | 0.35 | 5.4 | 0.02 | Nov 19, 2021 | There is a Cross-Site Scripting vulnerability in Microsoft Clarity version 0.3. The XSS payload executes whenever the user changes the clarity configuration in Microsoft Clarity version 0.3. The payload is stored on the configuring project Id page. | ||
| CVE-2021-41361 | Med | 0.35 | 5.4 | 0.01 | Oct 13, 2021 | Active Directory Federation Server Spoofing Vulnerability | ||
| CVE-2021-41354 | Med | 0.35 | 5.4 | 0.01 | Oct 13, 2021 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | ||
| CVE-2021-41353 | Med | 0.35 | 5.4 | 0.01 | Oct 13, 2021 | Microsoft Dynamics 365 (on-premises) Spoofing Vulnerability | ||
| CVE-2021-40482 | Med | 0.35 | 5.3 | 0.02 | Oct 13, 2021 | Microsoft SharePoint Server Information Disclosure Vulnerability | ||
| CVE-2021-40456 | Med | 0.35 | 5.3 | 0.02 | Oct 13, 2021 | Windows AD FS Security Feature Bypass Vulnerability | ||
| CVE-2021-40440 | Med | 0.35 | 5.4 | 0.01 | Sep 15, 2021 | Microsoft Dynamics Business Central Cross-site Scripting Vulnerability | ||
| CVE-2021-36930 | Med | 0.35 | 5.3 | 0.01 | Sep 2, 2021 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | ||
| CVE-2021-36950 | Med | 0.35 | 5.4 | 0.01 | Aug 12, 2021 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | ||
| CVE-2021-36946 | Med | 0.35 | 5.4 | 0.01 | Aug 12, 2021 | Microsoft Dynamics Business Central Cross-site Scripting Vulnerability | ||
| CVE-2021-34451 | Med | 0.35 | 5.3 | 0.02 | Jul 16, 2021 | Microsoft Office Online Server Spoofing Vulnerability | ||
| CVE-2021-34519 | Med | 0.35 | 5.3 | 0.06 | Jul 14, 2021 | Microsoft SharePoint Server Information Disclosure Vulnerability | ||
| CVE-2021-34517 | Med | 0.35 | 5.3 | 0.02 | Jul 14, 2021 | Microsoft SharePoint Server Spoofing Vulnerability | ||
| CVE-2021-33757 | Med | 0.35 | 5.3 | 0.03 | Jul 14, 2021 | Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability | ||
| CVE-2021-33744 | Med | 0.35 | 5.3 | 0.01 | Jul 14, 2021 | Windows Secure Kernel Mode Security Feature Bypass Vulnerability | ||
| CVE-2021-26414 | Med | 0.35 | 4.8 | 0.50 | Jun 8, 2021 | Windows DCOM Server Security Feature Bypass | ||
| CVE-2021-31173 | Med | 0.35 | 5.3 | 0.02 | May 11, 2021 | Microsoft SharePoint Server Information Disclosure Vulnerability | ||
| CVE-2021-27052 | Med | 0.35 | 5.3 | 0.03 | Mar 11, 2021 | Microsoft SharePoint Server Information Disclosure Vulnerability | ||
| CVE-2021-24113 | Med | 0.35 | 5.4 | 0.01 | Feb 25, 2021 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability | ||
| CVE-2021-24071 | Med | 0.35 | 5.3 | 0.03 | Feb 25, 2021 | Microsoft SharePoint Information Disclosure Vulnerability | ||
| CVE-2021-1730 | Med | 0.35 | 5.4 | 0.02 | Feb 25, 2021 | A spoofing vulnerability exists in Microsoft Exchange Server which could result in an attack that would allow a malicious actor to impersonate the user. This update addresses this vulnerability. To prevent these types of attacks, Microsoft recommends customers… | ||
| CVE-2020-17145 | Med | 0.35 | 5.4 | 0.02 | Dec 10, 2020 | Azure DevOps Server and Team Foundation Services Spoofing Vulnerability | ||
| CVE-2020-17120 | Med | 0.35 | 5.3 | 0.03 | Dec 10, 2020 | Microsoft SharePoint Information Disclosure Vulnerability | ||
| CVE-2020-1325 | Med | 0.35 | 5.4 | 0.02 | Nov 11, 2020 | Azure DevOps Server and Team Foundation Services Spoofing Vulnerability | ||
| CVE-2020-17090 | Med | 0.35 | 5.3 | 0.03 | Nov 11, 2020 | Microsoft Defender for Endpoint Security Feature Bypass Vulnerability | ||
| CVE-2020-17060 | Med | 0.35 | 5.4 | 0.02 | Nov 11, 2020 | Microsoft SharePoint Server Spoofing Vulnerability | ||
| CVE-2020-17021 | Med | 0.35 | 5.4 | 0.01 | Nov 11, 2020 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | ||
| CVE-2020-17018 | Med | 0.35 | 5.4 | 0.01 | Nov 11, 2020 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | ||
| CVE-2020-17017 | Med | 0.35 | 5.3 | 0.04 | Nov 11, 2020 | Microsoft SharePoint Information Disclosure Vulnerability | ||
| CVE-2020-17006 | Med | 0.35 | 5.4 | 0.01 | Nov 11, 2020 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | ||
| CVE-2020-17005 | Med | 0.35 | 5.4 | 0.01 | Nov 11, 2020 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | ||
| CVE-2020-16993 | Med | 0.35 | 5.4 | 0.01 | Nov 11, 2020 | Azure Sphere Elevation of Privilege Vulnerability | ||
| CVE-2020-16989 | Med | 0.35 | 5.4 | 0.01 | Nov 11, 2020 | Azure Sphere Elevation of Privilege Vulnerability | ||
| CVE-2020-16979 | Med | 0.35 | 5.3 | 0.03 | Nov 11, 2020 | Microsoft SharePoint Information Disclosure Vulnerability | ||
| CVE-2020-16978 | Med | 0.35 | 5.4 | 0.01 | Oct 16, 2020 | A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to… | ||
| CVE-2020-16956 | Med | 0.35 | 5.4 | 0.01 | Oct 16, 2020 | A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to… | ||
| CVE-2020-16922 | Med | 0.35 | 5.3 | 0.01 | Oct 16, 2020 | A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and load improperly signed files. In an attack scenario, an attacker could bypass security… | ||
| CVE-2020-16904 | Med | 0.35 | 5.3 | 0.03 | Oct 16, 2020 | An elevation of privilege vulnerability exists in the way Azure Functions validate access keys. An unauthenticated attacker who successfully exploited this vulnerability could invoke an HTTP Function without proper authorization. This security update addresses… | ||
| CVE-2020-16886 | Med | 0.35 | 5.3 | 0.01 | Oct 16, 2020 | A security feature bypass vulnerability exists in the PowerShellGet V2 module. An attacker who successfully exploited this vulnerability could bypass WDAC (Windows Defender Application Control) policy and execute arbitrary code on a policy locked-down machine. An… | ||
| CVE-2020-1596 | Med | 0.35 | 5.4 | 0.01 | Sep 11, 2020 | A information disclosure vulnerability exists when TLS components use weak hash algorithms. An attacker who successfully exploited this vulnerability could obtain information to further compromise a users's encrypted transmission channel. To exploit the vulnerability,… | ||
| CVE-2020-1575 | Med | 0.35 | 5.4 | 0.02 | Sep 11, 2020 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to… | ||
| CVE-2020-1514 | Med | 0.35 | 5.4 | 0.02 | Sep 11, 2020 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to… | ||
| CVE-2020-1227 | Med | 0.35 | 5.4 | 0.02 | Sep 11, 2020 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to… | ||
| CVE-2020-16878 | Med | 0.35 | 5.4 | 0.02 | Sep 11, 2020 | A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to… | ||
| CVE-2020-16871 | Med | 0.35 | 5.4 | 0.02 | Sep 11, 2020 | A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to… | ||
| CVE-2020-16864 | Med | 0.35 | 5.4 | 0.02 | Sep 11, 2020 | A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to… |
- risk 0.35cvss 5.3epss 0.02
Microsoft Edge (Chromium-based) Tampering Vulnerability
- risk 0.35cvss 5.3epss 0.03
Windows BackupKey Remote Protocol Security Feature Bypass Vulnerability
- risk 0.35cvss 5.3epss 0.03
Workstation Service Remote Protocol Security Feature Bypass Vulnerability
- risk 0.35cvss 5.3epss 0.03
Local Security Authority (Domain Policy) Remote Protocol Security Feature Bypass
- risk 0.35cvss 5.4epss 0.02
There is a Cross-Site Scripting vulnerability in Microsoft Clarity version 0.3. The XSS payload executes whenever the user changes the clarity configuration in Microsoft Clarity version 0.3. The payload is stored on the configuring project Id page.
- risk 0.35cvss 5.4epss 0.01
Active Directory Federation Server Spoofing Vulnerability
- risk 0.35cvss 5.4epss 0.01
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- risk 0.35cvss 5.4epss 0.01
Microsoft Dynamics 365 (on-premises) Spoofing Vulnerability
- risk 0.35cvss 5.3epss 0.02
Microsoft SharePoint Server Information Disclosure Vulnerability
- risk 0.35cvss 5.3epss 0.02
Windows AD FS Security Feature Bypass Vulnerability
- risk 0.35cvss 5.4epss 0.01
Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
- risk 0.35cvss 5.3epss 0.01
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
- risk 0.35cvss 5.4epss 0.01
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- risk 0.35cvss 5.4epss 0.01
Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
- risk 0.35cvss 5.3epss 0.02
Microsoft Office Online Server Spoofing Vulnerability
- risk 0.35cvss 5.3epss 0.06
Microsoft SharePoint Server Information Disclosure Vulnerability
- risk 0.35cvss 5.3epss 0.02
Microsoft SharePoint Server Spoofing Vulnerability
- risk 0.35cvss 5.3epss 0.03
Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability
- risk 0.35cvss 5.3epss 0.01
Windows Secure Kernel Mode Security Feature Bypass Vulnerability
- risk 0.35cvss 4.8epss 0.50
Windows DCOM Server Security Feature Bypass
- risk 0.35cvss 5.3epss 0.02
Microsoft SharePoint Server Information Disclosure Vulnerability
- risk 0.35cvss 5.3epss 0.03
Microsoft SharePoint Server Information Disclosure Vulnerability
- risk 0.35cvss 5.4epss 0.01
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
- risk 0.35cvss 5.3epss 0.03
Microsoft SharePoint Information Disclosure Vulnerability
- risk 0.35cvss 5.4epss 0.02
A spoofing vulnerability exists in Microsoft Exchange Server which could result in an attack that would allow a malicious actor to impersonate the user. This update addresses this vulnerability. To prevent these types of attacks, Microsoft recommends customers…
- risk 0.35cvss 5.4epss 0.02
Azure DevOps Server and Team Foundation Services Spoofing Vulnerability
- risk 0.35cvss 5.3epss 0.03
Microsoft SharePoint Information Disclosure Vulnerability
- risk 0.35cvss 5.4epss 0.02
Azure DevOps Server and Team Foundation Services Spoofing Vulnerability
- risk 0.35cvss 5.3epss 0.03
Microsoft Defender for Endpoint Security Feature Bypass Vulnerability
- risk 0.35cvss 5.4epss 0.02
Microsoft SharePoint Server Spoofing Vulnerability
- risk 0.35cvss 5.4epss 0.01
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- risk 0.35cvss 5.4epss 0.01
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- risk 0.35cvss 5.3epss 0.04
Microsoft SharePoint Information Disclosure Vulnerability
- risk 0.35cvss 5.4epss 0.01
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- risk 0.35cvss 5.4epss 0.01
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- risk 0.35cvss 5.4epss 0.01
Azure Sphere Elevation of Privilege Vulnerability
- risk 0.35cvss 5.4epss 0.01
Azure Sphere Elevation of Privilege Vulnerability
- risk 0.35cvss 5.3epss 0.03
Microsoft SharePoint Information Disclosure Vulnerability
- risk 0.35cvss 5.4epss 0.01
A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to…
- risk 0.35cvss 5.4epss 0.01
A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to…
- risk 0.35cvss 5.3epss 0.01
A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and load improperly signed files. In an attack scenario, an attacker could bypass security…
- risk 0.35cvss 5.3epss 0.03
An elevation of privilege vulnerability exists in the way Azure Functions validate access keys. An unauthenticated attacker who successfully exploited this vulnerability could invoke an HTTP Function without proper authorization. This security update addresses…
- risk 0.35cvss 5.3epss 0.01
A security feature bypass vulnerability exists in the PowerShellGet V2 module. An attacker who successfully exploited this vulnerability could bypass WDAC (Windows Defender Application Control) policy and execute arbitrary code on a policy locked-down machine. An…
- risk 0.35cvss 5.4epss 0.01
A information disclosure vulnerability exists when TLS components use weak hash algorithms. An attacker who successfully exploited this vulnerability could obtain information to further compromise a users's encrypted transmission channel. To exploit the vulnerability,…
- risk 0.35cvss 5.4epss 0.02
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to…
- risk 0.35cvss 5.4epss 0.02
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to…
- risk 0.35cvss 5.4epss 0.02
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to…
- risk 0.35cvss 5.4epss 0.02
A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to…
- risk 0.35cvss 5.4epss 0.02
A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to…
- risk 0.35cvss 5.4epss 0.02
A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to…
Page 250 of 363