microsoft
3,712 known vulnerabilities affecting microsoft products.
Products
windows_server_2019 1452
windows_server_2016 1310
windows_server_2022 1272
windows_server_2025 1131
windows_10_1809 1131
windows_11_24h2 1111
windows_11_25h2 1081
windows_10_22h2 1066
windows_10_21h2 1061
windows_11_26h1 1009
windows 990
windows_10_1607 980
windows_server_2012 977
windows_11_23h2 761
windows_10 343
windows_server_2008 326
365_apps 277
office_2021 225
office_2024 225
office_2019 217
windows_8.1 192
microsoft_365 185
windows_rt_8.1 170
windows_7 169
Vulnerabilities by priority
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2024-38257 | Medium | 4.5% | 7.5 | Microsoft AllJoyn API Information Disclosure Vulnerability | |
| CVE-2021-34520 | Medium | 4.4% | 8.1 | Microsoft SharePoint Server Remote Code Execution Vulnerability | |
| CVE-2021-34470 | Medium | 4.4% | 8.0 | Microsoft Exchange Server Elevation of Privilege Vulnerability | |
| CVE-2021-24089 | Medium | 4.3% | 7.8 | HEVC Video Extensions Remote Code Execution Vulnerability | |
| CVE-2021-27061 | Medium | 4.3% | 7.8 | HEVC Video Extensions Remote Code Execution Vulnerability | |
| CVE-2020-0901 | Medium | 4.3% | 9.8 | A remote code execution vulnerability exists in Microsoft Excel software when th… | |
| CVE-2021-27081 | Medium | 4.3% | 7.8 | Visual Studio Code ESLint Extension Remote Code Execution Vulnerability | |
| CVE-2021-43208 | Medium | 4.3% | 7.8 | 3D Viewer Remote Code Execution Vulnerability | |
| CVE-2026-20871 | Medium | 4.2% | 7.8 | Use after free in Desktop Windows Manager allows an authorized attacker to eleva… | |
| CVE-2021-42282 | Medium | 4.2% | 7.5 | Active Directory Domain Services Elevation of Privilege Vulnerability | |
| CVE-2021-42291 | Medium | 4.2% | 7.5 | Active Directory Domain Services Elevation of Privilege Vulnerability | |
| CVE-2022-37967 | Medium | 4.1% | 7.2 | Windows Kerberos Elevation of Privilege Vulnerability | |
| CVE-2024-21346 | Medium | 4.1% | 7.8 | Win32k Elevation of Privilege Vulnerability | |
| CVE-2020-1192 | Medium | 4.1% | 7.8 | A remote code execution vulnerability exists in Visual Studio Code when the Pyth… | |
| CVE-2023-21706 | Medium | 4.1% | 8.8 | Microsoft Exchange Server Remote Code Execution Vulnerability | |
| CVE-2021-27054 | Medium | 4.0% | 7.8 | Microsoft Excel Remote Code Execution Vulnerability | |
| CVE-2021-27057 | Medium | 4.0% | 7.8 | Microsoft Office Remote Code Execution Vulnerability | |
| CVE-2021-27056 | Medium | 4.0% | 7.8 | Microsoft PowerPoint Remote Code Execution Vulnerability | |
| CVE-2021-34494 | Medium | 4.0% | 8.8 | Windows DNS Server Remote Code Execution Vulnerability | |
| CVE-2020-1126 | Medium | 4.0% | 8.8 | A memory corruption vulnerability exists when Windows Media Foundation improperl… | |
| CVE-2021-36940 | Medium | 4.0% | 7.6 | Microsoft SharePoint Server Spoofing Vulnerability | |
| CVE-2020-1069 | Medium | 4.0% | 8.8 | A remote code execution vulnerability exists in Microsoft SharePoint Server when… | |
| CVE-2020-1117 | Medium | 4.0% | 8.8 | A remote code execution vulnerability exists in the way that the Color Managemen… | |
| CVE-2021-27082 | Medium | 3.9% | 7.8 | Quantum Development Kit for Visual Studio Code Remote Code Execution Vulnerabili… | |
| CVE-2021-26423 | Medium | 3.9% | 7.5 | .NET Core and Visual Studio Denial of Service Vulnerability | |
| CVE-2021-27070 | Medium | 3.9% | 7.3 | Windows 10 Update Assistant Elevation of Privilege Vulnerability | |
| CVE-2020-1153 | Medium | 3.8% | 7.8 | A remote code execution vulnerability exists in the way that Microsoft Graphics … | |
| CVE-2021-31183 | Medium | 3.8% | 7.5 | Windows TCP/IP Driver Denial of Service Vulnerability | |
| CVE-2020-1028 | Medium | 3.8% | 7.8 | A memory corruption vulnerability exists when Windows Media Foundation improperl… | |
| CVE-2020-1136 | Medium | 3.8% | 7.8 | A memory corruption vulnerability exists when Windows Media Foundation improperl… | |
| CVE-2020-1023 | Medium | 3.7% | 8.8 | A remote code execution vulnerability exists in Microsoft SharePoint when the so… | |
| CVE-2020-1024 | Medium | 3.7% | 8.8 | A remote code execution vulnerability exists in Microsoft SharePoint when the so… | |
| CVE-2026-61358 | Medium | 3.7% | 7.8 | Improper link resolution before file access ('link following') in Windows Access… | |
| CVE-2020-1051 | Medium | 3.7% | 7.8 | A remote code execution vulnerability exists when the Windows Jet Database Engin… | |
| CVE-2020-1174 | Medium | 3.7% | 7.8 | A remote code execution vulnerability exists when the Windows Jet Database Engin… | |
| CVE-2020-1175 | Medium | 3.7% | 7.8 | A remote code execution vulnerability exists when the Windows Jet Database Engin… | |
| CVE-2020-1176 | Medium | 3.7% | 7.8 | A remote code execution vulnerability exists when the Windows Jet Database Engin… | |
| CVE-2021-34469 | Medium | 3.7% | 8.2 | Microsoft Office Security Feature Bypass Vulnerability | |
| CVE-2026-45586 | Medium | 3.6% | 7.8 | Improper link resolution before file access ('link following') in Windows Collab… | |
| CVE-2023-21688 | Medium | 3.6% | 7.8 | NT OS Kernel Elevation of Privilege Vulnerability | |
| CVE-2021-26879 | Medium | 3.6% | 7.5 | Windows Network Address Translation (NAT) Denial of Service Vulnerability | |
| CVE-2021-34524 | Medium | 3.6% | 8.1 | Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability | |
| CVE-2023-35380 | Medium | 3.5% | 7.8 | Windows Kernel Elevation of Privilege Vulnerability | |
| CVE-2021-26433 | Medium | 3.5% | 7.5 | Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability | |
| CVE-2021-27058 | Medium | 3.5% | 7.8 | Microsoft Office ClickToRun Remote Code Execution Vulnerability | |
| CVE-2026-50509 | Medium | 3.5% | 7.8 | Deserialization of untrusted data in Windows Wireless Wide Area Network Service … | |
| CVE-2026-20843 | Medium | 3.5% | 7.8 | Improper access control in Windows Routing and Remote Access Service (RRAS) allo… | |
| CVE-2021-24090 | Medium | 3.5% | 7.8 | Windows Error Reporting Elevation of Privilege Vulnerability | |
| CVE-2021-36926 | Medium | 3.5% | 7.5 | Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability | |
| CVE-2021-36932 | Medium | 3.5% | 7.5 | Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability |