Vendor CVEs

Microsoft

All CVEs

15,666 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2023-33137	Microsoft Excel	Hig	0.54	7.8	0.03		Jun 14, 2023	Microsoft Excel Remote Code Execution Vulnerability
CVE-2023-33133	Microsoft Excel	Hig	0.54	7.8	0.44		Jun 14, 2023	Microsoft Excel Remote Code Execution Vulnerability
CVE-2023-28311	Microsoft Word	Hig	0.54	7.8	0.03		Apr 11, 2023	Microsoft Word Remote Code Execution Vulnerability
CVE-2023-28293	Microsoft Windows Kernel	Hig	0.54	7.8	0.03		Apr 11, 2023	Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-28285	Microsoft Office	Hig	0.54	7.8	0.03		Apr 11, 2023	Microsoft Office Remote Code Execution Vulnerability
CVE-2023-28220	Microsoft Layer 2 Tunneling Protocol	Hig	0.54	8.1	0.15		Apr 11, 2023	Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
CVE-2023-28219	Microsoft Layer 2 Tunneling Protocol	Hig	0.54	8.1	0.15		Apr 11, 2023	Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
CVE-2023-23399	Microsoft Excel	Hig	0.54	7.8	0.03		Mar 14, 2023	Microsoft Excel Remote Code Execution Vulnerability
CVE-2023-23383	Microsoft Service Fabric Explorer	Hig	0.54	8.2	0.12		Mar 14, 2023	Service Fabric Explorer Spoofing Vulnerability
CVE-2023-23374	Microsoft Edge	Hig	0.54	8.3	0.01		Feb 14, 2023	Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2023-21796	Microsoft Edge	Hig	0.54	8.3	0.01		Jan 24, 2023	Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2023-21795	Microsoft Edge	Hig	0.54	8.3	0.01		Jan 24, 2023	Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2023-21775	Microsoft Edge	Hig	0.54	8.3	0.01		Jan 24, 2023	Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2022-44708	Microsoft Edge	Hig	0.54	8.3	0.02		Dec 13, 2022	Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-44666	Microsoft Windows Contacts	Hig	0.54	7.8	0.41		Dec 13, 2022	Windows Contacts Remote Code Execution Vulnerability
CVE-2022-37954	Microsoft DirectX Graphics Kernel	Hig	0.54	7.8	0.45		Sep 13, 2022	DirectX Graphics Kernel Elevation of Privilege Vulnerability
CVE-2022-33636	Microsoft Edge	Hig	0.54	8.3	0.01		Aug 9, 2022	Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2022-33674	Microsoft Azure Site Recovery	Hig	0.54	8.3	0.01		Jul 12, 2022	Azure Site Recovery Elevation of Privilege Vulnerability
CVE-2022-33680	Microsoft Edge	Hig	0.54	8.3	0.02		Jul 7, 2022	Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-33639	Microsoft Edge Chromium	Hig	0.54	8.3	0.03		Jun 29, 2022	Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-33638	Microsoft Edge Chromium	Hig	0.54	8.3	0.02		Jun 29, 2022	Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-30192	Microsoft Edge	Hig	0.54	8.3	0.03		Jun 29, 2022	Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-22021	Microsoft Edge	Hig	0.54	8.3	0.03		Jun 15, 2022	Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2022-30128	Microsoft Edge	Hig	0.54	8.3	0.02		Jun 1, 2022	Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-30127	Microsoft Edge	Hig	0.54	8.3	0.02		Jun 1, 2022	Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-30129	Visual Studio Code Visual Studio Code	Hig	0.54	8.8	0.41		May 10, 2022	Visual Studio Code Remote Code Execution Vulnerability
CVE-2022-26912	Microsoft Edge	Hig	0.54	8.3	0.02		Apr 5, 2022	Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-26909	Microsoft Edge	Hig	0.54	8.3	0.02		Apr 5, 2022	Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-26908	Microsoft Edge	Hig	0.54	8.3	0.02		Apr 5, 2022	Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-26900	Microsoft Edge	Hig	0.54	8.3	0.02		Apr 5, 2022	Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-26895	Microsoft Edge	Hig	0.54	8.3	0.02		Apr 5, 2022	Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-26894	Microsoft Edge	Hig	0.54	8.3	0.02		Apr 5, 2022	Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-26891	Microsoft Edge	Hig	0.54	8.3	0.02		Apr 5, 2022	Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-24475	Microsoft Edge	Hig	0.54	8.3	0.02		Apr 5, 2022	Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-21837	Microsoft Sharepoint Server	Hig	0.54	8.3	0.03		Jan 11, 2022	Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2021-34469	Microsoft Office	Hig	0.54	8.2	0.04		Jul 14, 2021	Microsoft Office Security Feature Bypass Vulnerability
CVE-2021-33741	Microsoft Edge	Hig	0.54	8.2	0.03		Jun 8, 2021	Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2021-31955	Microsoft Windows Kernel	Med	0.54	5.5	0.81	KEV	Jun 8, 2021	Windows Kernel Information Disclosure Vulnerability
CVE-2020-17140	Microsoft Windows SMB	Hig	0.54	8.1	0.12		Dec 10, 2020	Windows SMB Information Disclosure Vulnerability
CVE-2019-1476	Microsoft Windows AppX Deployment Service	Hig	0.54	7.8	0.05		Dec 10, 2019	An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1483.
CVE-2019-1471	Microsoft Windows Hyper-V	Hig	0.54	8.2	0.08		Dec 10, 2019	A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'.
CVE-2019-1364	Microsoft Windows	Hig	0.54	7.8	0.03		Oct 10, 2019	An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1362.
CVE-2019-1089	Microsoft Windows	Hig	0.54	7.8	0.06		Jul 15, 2019	An elevation of privilege vulnerability exists in rpcss.dll when the RPC service Activation Kernel improperly handles an RPC request. To exploit this vulnerability, a low level authenticated attacker could run a specially crafted application. The security update addresses this…
CVE-2019-0943	Microsoft Windows	Hig	0.54	7.8	0.03		Jun 12, 2019	An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC). An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system. An attacker could then…
CVE-2019-0881	Microsoft Windows Kernel	Hig	0.54	7.8	0.03		May 16, 2019	An elevation of privilege vulnerability exists when the Windows Kernel improperly handles key enumeration, aka 'Windows Kernel Elevation of Privilege Vulnerability'.
CVE-2019-0836	Microsoft Windows	Hig	0.54	7.8	0.05		Apr 9, 2019	An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0841.
CVE-2019-0805	Microsoft Windows	Hig	0.54	7.8	0.03		Apr 9, 2019	An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0836, CVE-2019-0841.
CVE-2019-0735	Microsoft Windows	Hig	0.54	7.8	0.05		Apr 9, 2019	An elevation of privilege vulnerability exists when the Windows Client Server Run-Time Subsystem (CSRSS) fails to properly handle objects in memory, aka 'Windows CSRSS Elevation of Privilege Vulnerability'.
CVE-2019-0732	Microsoft Windows	Hig	0.54	7.8	0.05		Apr 9, 2019	A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Security Feature Bypass Vulnerability'.
CVE-2019-0731	Microsoft Windows	Hig	0.54	7.8	0.05		Apr 9, 2019	An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0796, CVE-2019-0805, CVE-2019-0836, CVE-2019-0841.

CVE-2023-33137HigJun 14, 2023
Microsoft
Excel
risk 0.54cvss 7.8epss 0.03
Microsoft Excel Remote Code Execution Vulnerability
CVE-2023-33133HigJun 14, 2023
Microsoft
Excel
risk 0.54cvss 7.8epss 0.44
Microsoft Excel Remote Code Execution Vulnerability
CVE-2023-28311HigApr 11, 2023
Microsoft
Word
risk 0.54cvss 7.8epss 0.03
Microsoft Word Remote Code Execution Vulnerability
CVE-2023-28293HigApr 11, 2023
Microsoft
Windows Kernel
risk 0.54cvss 7.8epss 0.03
Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-28285HigApr 11, 2023
Microsoft
Office
risk 0.54cvss 7.8epss 0.03
Microsoft Office Remote Code Execution Vulnerability
CVE-2023-28220HigApr 11, 2023
Microsoft
Layer 2 Tunneling Protocol
risk 0.54cvss 8.1epss 0.15
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
CVE-2023-28219HigApr 11, 2023
Microsoft
Layer 2 Tunneling Protocol
risk 0.54cvss 8.1epss 0.15
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
CVE-2023-23399HigMar 14, 2023
Microsoft
Excel
risk 0.54cvss 7.8epss 0.03
Microsoft Excel Remote Code Execution Vulnerability
CVE-2023-23383HigMar 14, 2023
Microsoft
Service Fabric Explorer
risk 0.54cvss 8.2epss 0.12
Service Fabric Explorer Spoofing Vulnerability
CVE-2023-23374HigFeb 14, 2023
Microsoft
Edge
risk 0.54cvss 8.3epss 0.01
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2023-21796HigJan 24, 2023
Microsoft
Edge
risk 0.54cvss 8.3epss 0.01
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2023-21795HigJan 24, 2023
Microsoft
Edge
risk 0.54cvss 8.3epss 0.01
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2023-21775HigJan 24, 2023
Microsoft
Edge
risk 0.54cvss 8.3epss 0.01
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2022-44708HigDec 13, 2022
Microsoft
Edge
risk 0.54cvss 8.3epss 0.02
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-44666HigDec 13, 2022
Microsoft
Windows Contacts
risk 0.54cvss 7.8epss 0.41
Windows Contacts Remote Code Execution Vulnerability
CVE-2022-37954HigSep 13, 2022
Microsoft
DirectX Graphics Kernel
risk 0.54cvss 7.8epss 0.45
DirectX Graphics Kernel Elevation of Privilege Vulnerability
CVE-2022-33636HigAug 9, 2022
Microsoft
Edge
risk 0.54cvss 8.3epss 0.01
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2022-33674HigJul 12, 2022
Microsoft
Azure Site Recovery
risk 0.54cvss 8.3epss 0.01
Azure Site Recovery Elevation of Privilege Vulnerability
CVE-2022-33680HigJul 7, 2022
Microsoft
Edge
risk 0.54cvss 8.3epss 0.02
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-33639HigJun 29, 2022
Microsoft
Edge Chromium
risk 0.54cvss 8.3epss 0.03
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-33638HigJun 29, 2022
Microsoft
Edge Chromium
risk 0.54cvss 8.3epss 0.02
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-30192HigJun 29, 2022
Microsoft
Edge
risk 0.54cvss 8.3epss 0.03
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-22021HigJun 15, 2022
Microsoft
Edge
risk 0.54cvss 8.3epss 0.03
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2022-30128HigJun 1, 2022
Microsoft
Edge
risk 0.54cvss 8.3epss 0.02
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-30127HigJun 1, 2022
Microsoft
Edge
risk 0.54cvss 8.3epss 0.02
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-30129HigMay 10, 2022
Visual Studio Code
Visual Studio Code
risk 0.54cvss 8.8epss 0.41
Visual Studio Code Remote Code Execution Vulnerability
CVE-2022-26912HigApr 5, 2022
Microsoft
Edge
risk 0.54cvss 8.3epss 0.02
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-26909HigApr 5, 2022
Microsoft
Edge
risk 0.54cvss 8.3epss 0.02
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-26908HigApr 5, 2022
Microsoft
Edge
risk 0.54cvss 8.3epss 0.02
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-26900HigApr 5, 2022
Microsoft
Edge
risk 0.54cvss 8.3epss 0.02
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-26895HigApr 5, 2022
Microsoft
Edge
risk 0.54cvss 8.3epss 0.02
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-26894HigApr 5, 2022
Microsoft
Edge
risk 0.54cvss 8.3epss 0.02
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-26891HigApr 5, 2022
Microsoft
Edge
risk 0.54cvss 8.3epss 0.02
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-24475HigApr 5, 2022
Microsoft
Edge
risk 0.54cvss 8.3epss 0.02
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-21837HigJan 11, 2022
Microsoft
Sharepoint Server
risk 0.54cvss 8.3epss 0.03
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2021-34469HigJul 14, 2021
Microsoft
Office
risk 0.54cvss 8.2epss 0.04
Microsoft Office Security Feature Bypass Vulnerability
CVE-2021-33741HigJun 8, 2021
Microsoft
Edge
risk 0.54cvss 8.2epss 0.03
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2021-31955MedKEVJun 8, 2021
Microsoft
Windows Kernel
risk 0.54cvss 5.5epss 0.81
Windows Kernel Information Disclosure Vulnerability
CVE-2020-17140HigDec 10, 2020
Microsoft
Windows SMB
risk 0.54cvss 8.1epss 0.12
Windows SMB Information Disclosure Vulnerability
CVE-2019-1476HigDec 10, 2019
Microsoft
Windows AppX Deployment Service
risk 0.54cvss 7.8epss 0.05
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1483.
CVE-2019-1471HigDec 10, 2019
Microsoft
Windows Hyper-V
risk 0.54cvss 8.2epss 0.08
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'.
CVE-2019-1364HigOct 10, 2019
Microsoft
Windows
risk 0.54cvss 7.8epss 0.03
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1362.
CVE-2019-1089HigJul 15, 2019
Microsoft
Windows
risk 0.54cvss 7.8epss 0.06
An elevation of privilege vulnerability exists in rpcss.dll when the RPC service Activation Kernel improperly handles an RPC request. To exploit this vulnerability, a low level authenticated attacker could run a specially crafted application. The security update addresses this…
CVE-2019-0943HigJun 12, 2019
Microsoft
Windows
risk 0.54cvss 7.8epss 0.03
An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC). An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system. An attacker could then…
CVE-2019-0881HigMay 16, 2019
Microsoft
Windows Kernel
risk 0.54cvss 7.8epss 0.03
An elevation of privilege vulnerability exists when the Windows Kernel improperly handles key enumeration, aka 'Windows Kernel Elevation of Privilege Vulnerability'.
CVE-2019-0836HigApr 9, 2019
Microsoft
Windows
risk 0.54cvss 7.8epss 0.05
An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0841.
CVE-2019-0805HigApr 9, 2019
Microsoft
Windows
risk 0.54cvss 7.8epss 0.03
An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0836, CVE-2019-0841.
CVE-2019-0735HigApr 9, 2019
Microsoft
Windows
risk 0.54cvss 7.8epss 0.05
An elevation of privilege vulnerability exists when the Windows Client Server Run-Time Subsystem (CSRSS) fails to properly handle objects in memory, aka 'Windows CSRSS Elevation of Privilege Vulnerability'.
CVE-2019-0732HigApr 9, 2019
Microsoft
Windows
risk 0.54cvss 7.8epss 0.05
A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Security Feature Bypass Vulnerability'.
CVE-2019-0731HigApr 9, 2019
Microsoft
Windows
risk 0.54cvss 7.8epss 0.05
An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0796, CVE-2019-0805, CVE-2019-0836, CVE-2019-0841.

Page 46 of 314