Microsoft: every exploited CVE on CISA KEV

All 390 Microsoft bugs attackers are confirmed to be using, with attack scores and free detection rules.

Generated by VEDAS. Scores as of 2026-11-01 19:19 UTC. Rebuilt every few hours from cve-scores, CISA KEV and vedas-signatures. How this works and its limits.

390

Microsoft bugs on CISA’s exploited list

40 added in 2026.

15 of 187

remotely exploitable ones have a free VEDAS detection rule

172 don’t yet; see detection gaps.

117

are linked to ransomware

Every Microsoft vulnerability the US government has confirmed attackers are using, newest first, with each bug’s EPSS (predicted attack chance) and VEDAS (exploit evidence) scores and any free Nuclei or Suricata detection rule. US federal agencies must fix KEV-listed bugs by a deadline; everyone else should treat the list as “patch first”.

AddedCVEProductBugEPSSVEDASDetection ruleRansomware
2026-10-13CVE-2026-96951Microsoft WindowsMicrosoft Windows Command Injection Vulnerability0.100.97None yetNo
2026-09-25CVE-2026-65660Microsoft SharePointMicrosoft SharePoint Code Injection Vulnerability0.080.98SuricataNo
2026-09-08CVE-2026-85880Microsoft WindowsMicrosoft Windows Heap-Based Buffer Overflow Vulnerability0.000.52Out of scope (local)No
2026-09-08CVE-2026-81963Microsoft WindowsMicrosoft Windows Link Following Vulnerability0.000.51Out of scope (local)No
2026-08-26CVE-2019-1068Microsoft SQL ServerMicrosoft SQL Server Remote Code Execution Vulnerability0.570.98None yetNo
2026-08-18CVE-2026-55040Microsoft SharePointMicrosoft SharePoint Weak Authentication Vulnerability0.700.98None yetNo
2026-08-18CVE-2026-33824Microsoft Internet Key Exchange (IKE) Service ExtensionsMicrosoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability0.770.92None yetNo
2026-08-11CVE-2026-68820Microsoft Windows Ancillary Function Driver for WinSock Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability0.090.53Out of scope (local)No
2026-07-22CVE-2026-50522Microsoft SharePointMicrosoft SharePoint Deserialization of Untrusted Data Vulnerability 0.030.98None yetNo
2026-07-16CVE-2026-58644Microsoft SharePointMicrosoft SharePoint Deserialization of Untrusted Data Vulnerability0.160.98Nuclei · SuricataNo
2026-07-14CVE-2026-56164Microsoft SharePoint ServerMicrosoft SharePoint Server Missing Authentication for Critical Function Vulnerability0.010.51None yetNo
2026-07-14CVE-2026-56155Microsoft Active Directory Federation ServicesMicrosoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability 0.000.52Out of scope (local)No
2026-07-01CVE-2026-45659Microsoft SharePoint ServerMicrosoft SharePoint Server Deserialization of Untrusted Data Vulnerability0.800.81None yetYes
2026-05-20CVE-2026-45498Microsoft DefenderMicrosoft Defender Denial of Service Vulnerability0.630.66None yetNo
2026-05-20CVE-2026-41091Microsoft DefenderMicrosoft Defender Link Following Vulnerability0.080.97Out of scope (local)No
2026-05-20CVE-2010-0806Microsoft Internet ExplorerMicrosoft Internet Explorer Use-After-Free Vulnerability0.820.99None yetNo
2026-05-20CVE-2010-0249Microsoft Internet ExplorerMicrosoft Internet Explorer Use-After-Free Vulnerability0.920.98None yetNo
2026-05-20CVE-2009-1537Microsoft DirectXMicrosoft DirectX NULL Byte Overwrite Vulnerability0.510.95None yetNo
2026-05-20CVE-2008-4250Microsoft WindowsMicrosoft Windows Buffer Overflow Vulnerability0.990.98None yetNo
2026-05-15CVE-2026-42897Microsoft MicrosoftMicrosoft Exchange Server Cross-Site Scripting Vulnerability0.710.68None yetNo
2026-04-28CVE-2026-32202Microsoft WindowsMicrosoft Windows Protection Mechanism Failure Vulnerability0.710.98None yetNo
2026-04-22CVE-2026-33825Microsoft DefenderMicrosoft Defender Insufficient Granularity of Access Control Vulnerability0.070.52Out of scope (local)Yes
2026-04-14CVE-2026-32201Microsoft SharePoint ServerMicrosoft SharePoint Server Improper Input Validation Vulnerability0.430.61None yetNo
2026-04-14CVE-2009-0238Microsoft OfficeMicrosoft Office Remote Code Execution0.430.98None yetNo
2026-04-13CVE-2025-60710Microsoft WindowsMicrosoft Windows Link Following Vulnerability0.050.75Out of scope (local)Yes
2026-04-13CVE-2023-36424Microsoft WindowsMicrosoft Windows Out-of-Bounds Read Vulnerability0.120.98None yetNo
2026-04-13CVE-2023-21529Microsoft Exchange ServerMicrosoft Exchange Server Deserialization of Untrusted Data Vulnerability0.590.98None yetYes
2026-04-13CVE-2012-1854Microsoft Visual Basic for Applications (VBA)Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability0.210.56Out of scope (local)No
2026-03-18CVE-2026-20963Microsoft SharePointMicrosoft SharePoint Deserialization of Untrusted Data Vulnerability0.290.58None yetNo
2026-02-17CVE-2008-0015Microsoft Windows Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability0.770.98None yetNo
2026-02-12CVE-2024-43468Microsoft Configuration ManagerMicrosoft Configuration Manager SQL Injection Vulnerability0.810.83None yetNo
2026-02-10CVE-2026-21533Microsoft WindowsMicrosoft Windows Improper Privilege Management Vulnerability0.040.52Out of scope (local)No
2026-02-10CVE-2026-21525Microsoft WindowsMicrosoft Windows NULL Pointer Dereference Vulnerability0.050.52Out of scope (local)No
2026-02-10CVE-2026-21519Microsoft WindowsMicrosoft Windows Type Confusion Vulnerability0.020.52Out of scope (local)No
2026-02-10CVE-2026-21514Microsoft OfficeMicrosoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability0.020.51Out of scope (local)No
2026-02-10CVE-2026-21513Microsoft WindowsMicrosoft MSHTML Framework Protection Mechanism Failure Vulnerability0.160.98None yetNo
2026-02-10CVE-2026-21510Microsoft WindowsMicrosoft Windows Shell Protection Mechanism Failure Vulnerability0.610.66None yetNo
2026-01-26CVE-2026-21509Microsoft OfficeMicrosoft Office Security Feature Bypass Vulnerability0.710.98Out of scope (local)No
2026-01-13CVE-2026-20805Microsoft WindowsMicrosoft Windows Information Disclosure Vulnerability0.070.98Out of scope (local)No
2026-01-07CVE-2009-0556Microsoft OfficeMicrosoft Office PowerPoint Code Injection Vulnerability0.670.98None yetNo
2025-12-09CVE-2025-62221Microsoft WindowsMicrosoft Windows Use After Free Vulnerability0.030.52Out of scope (local)No
2025-11-12CVE-2025-62215Microsoft WindowsMicrosoft Windows Race Condition Vulnerability0.040.98Out of scope (local)No
2025-10-24CVE-2025-59287Microsoft WindowsMicrosoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability1.000.98Nuclei · SuricataNo
2025-10-20CVE-2025-33073Microsoft WindowsMicrosoft Windows SMB Client Improper Access Control Vulnerability0.830.98Out of scope (local)No
2025-10-14CVE-2025-59230Microsoft WindowsMicrosoft Windows Improper Access Control Vulnerability0.030.74Out of scope (local)No
2025-10-14CVE-2025-24990Microsoft WindowsMicrosoft Windows Untrusted Pointer Dereference Vulnerability0.060.76Out of scope (local)No
2025-10-06CVE-2021-43226Microsoft WindowsMicrosoft Windows Privilege Escalation Vulnerability0.030.97Out of scope (local)Yes
2025-10-06CVE-2013-3918Microsoft WindowsMicrosoft Windows Out-of-Bounds Write Vulnerability0.740.99None yetNo
2025-10-06CVE-2011-3402Microsoft WindowsMicrosoft Windows Remote Code Execution Vulnerability0.780.98None yetNo
2025-10-06CVE-2010-3962Microsoft Internet ExplorerMicrosoft Internet Explorer Uninitialized Memory Corruption Vulnerability0.970.98None yetNo
2025-08-12CVE-2013-3893Microsoft Internet ExplorerMicrosoft Internet Explorer Resource Management Errors Vulnerability0.880.99None yetNo
2025-08-12CVE-2007-0671Microsoft OfficeMicrosoft Office Excel Remote Code Execution Vulnerability0.440.61None yetNo
2025-07-22CVE-2025-49706Microsoft SharePointMicrosoft SharePoint Improper Authentication Vulnerability0.990.98Nuclei · SuricataYes
2025-07-22CVE-2025-49704Microsoft SharePointMicrosoft SharePoint Code Injection Vulnerability1.000.98Nuclei · SuricataYes
2025-07-20CVE-2025-53770Microsoft SharePointMicrosoft SharePoint Deserialization of Untrusted Data Vulnerability1.000.99None yetYes
2025-06-10CVE-2025-33053Microsoft Windows Microsoft Windows External Control of File Name or Path Vulnerability0.870.98None yetNo
2025-05-13CVE-2025-32709Microsoft WindowsMicrosoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability0.020.69Out of scope (local)No
2025-05-13CVE-2025-32706Microsoft WindowsMicrosoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability0.020.69Out of scope (local)No
2025-05-13CVE-2025-32701Microsoft WindowsMicrosoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability0.010.70Out of scope (local)No
2025-05-13CVE-2025-30400Microsoft WindowsMicrosoft Windows DWM Core Library Use-After-Free Vulnerability0.020.98Out of scope (local)No
2025-05-13CVE-2025-30397Microsoft WindowsMicrosoft Windows Scripting Engine Type Confusion Vulnerability0.270.98None yetNo
2025-04-17CVE-2025-24054Microsoft WindowsMicrosoft Windows NTLM Hash Disclosure Spoofing Vulnerability0.620.99None yetNo
2025-04-08CVE-2025-29824Microsoft WindowsMicrosoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability0.190.97Out of scope (local)Yes
2025-03-11CVE-2025-26633Microsoft WindowsMicrosoft Windows Management Console (MMC) Improper Neutralization Vulnerability0.300.98Out of scope (local)Yes
2025-03-11CVE-2025-24993Microsoft WindowsMicrosoft Windows NTFS Heap-Based Buffer Overflow Vulnerability0.020.70Out of scope (local)No
2025-03-11CVE-2025-24991Microsoft WindowsMicrosoft Windows NTFS Out-Of-Bounds Read Vulnerability0.020.69Out of scope (local)No
2025-03-11CVE-2025-24985Microsoft WindowsMicrosoft Windows Fast FAT File System Driver Integer Overflow Vulnerability0.040.70Out of scope (local)No
2025-03-11CVE-2025-24984Microsoft WindowsMicrosoft Windows NTFS Information Disclosure Vulnerability0.020.70None yetNo
2025-03-11CVE-2025-24983Microsoft WindowsMicrosoft Windows Win32k Use-After-Free Vulnerability0.020.69Out of scope (local)No
2025-03-03CVE-2018-8639Microsoft WindowsMicrosoft Windows Win32k Improper Resource Shutdown or Release Vulnerability0.220.97Out of scope (local)Yes
2025-02-25CVE-2024-49035Microsoft Partner CenterMicrosoft Partner Center Improper Access Control Vulnerability0.010.69Out of scope (local)No
2025-02-21CVE-2025-24989Microsoft Power PagesMicrosoft Power Pages Improper Access Control Vulnerability0.020.70None yetNo
2025-02-11CVE-2025-21418Microsoft WindowsMicrosoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability0.020.75Out of scope (local)No
2025-02-11CVE-2025-21391Microsoft WindowsMicrosoft Windows Storage Link Following Vulnerability0.020.74Out of scope (local)No
2025-02-06CVE-2024-21413Microsoft Office OutlookMicrosoft Outlook Improper Input Validation Vulnerability0.950.98None yetNo
2025-02-04CVE-2024-29059Microsoft .NET FrameworkMicrosoft .NET Framework Information Disclosure Vulnerability0.990.98Nuclei · SuricataNo
2025-01-14CVE-2025-21335Microsoft WindowsMicrosoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability0.010.70Out of scope (local)No
2025-01-14CVE-2025-21334Microsoft WindowsMicrosoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability0.020.69Out of scope (local)No
2025-01-14CVE-2025-21333Microsoft WindowsMicrosoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability0.100.98Out of scope (local)No
2024-12-16CVE-2024-35250Microsoft WindowsMicrosoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability 0.250.98Out of scope (local)No
2024-12-10CVE-2024-49138Microsoft WindowsMicrosoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability0.260.99Out of scope (local)No
2024-11-12CVE-2024-49039Microsoft WindowsMicrosoft Windows Task Scheduler Privilege Escalation Vulnerability0.140.76Out of scope (local)Yes
2024-11-12CVE-2024-43451Microsoft WindowsMicrosoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability0.840.99None yetNo
2024-10-22CVE-2024-38094Microsoft SharePointMicrosoft SharePoint Deserialization Vulnerability0.510.77None yetYes
2024-10-15CVE-2024-30088Microsoft Windows Microsoft Windows Kernel TOCTOU Race Condition Vulnerability0.680.98Out of scope (local)Yes
2024-10-08CVE-2024-43573Microsoft WindowsMicrosoft Windows MSHTML Platform Spoofing Vulnerability0.460.76None yetNo
2024-10-08CVE-2024-43572Microsoft WindowsMicrosoft Windows Management Console Remote Code Execution Vulnerability0.670.79None yetNo
2024-09-18CVE-2020-0618Microsoft SQL ServerMicrosoft SQL Server Reporting Services Remote Code Execution Vulnerability0.990.99Nuclei · SuricataYes
2024-09-16CVE-2024-43461Microsoft WindowsMicrosoft Windows MSHTML Platform Spoofing Vulnerability0.540.98None yetNo
2024-09-10CVE-2024-38226Microsoft PublisherMicrosoft Publisher Protection Mechanism Failure Vulnerability0.030.52None yetNo
2024-09-10CVE-2024-38217Microsoft WindowsMicrosoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability0.100.70None yetNo
2024-09-10CVE-2024-38014Microsoft WindowsMicrosoft Windows Installer Improper Privilege Management Vulnerability0.060.93None yetNo
2024-08-21CVE-2021-31196Microsoft Exchange ServerMicrosoft Exchange Server Information Disclosure Vulnerability0.540.98None yetNo
2024-08-13CVE-2024-38213Microsoft WindowsMicrosoft Windows SmartScreen Security Feature Bypass Vulnerability0.140.98None yetNo
2024-08-13CVE-2024-38193Microsoft WindowsMicrosoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability0.290.98Out of scope (local)No
2024-08-13CVE-2024-38189Microsoft ProjectMicrosoft Project Remote Code Execution Vulnerability 0.080.97None yetNo
2024-08-13CVE-2024-38178Microsoft WindowsMicrosoft Windows Scripting Engine Memory Corruption Vulnerability0.410.76None yetNo
2024-08-13CVE-2024-38107Microsoft WindowsMicrosoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability0.020.69Out of scope (local)No
2024-08-13CVE-2024-38106Microsoft WindowsMicrosoft Windows Kernel Privilege Escalation Vulnerability0.060.71Out of scope (local)No
2024-08-05CVE-2018-0824Microsoft WindowsMicrosoft COM for Windows Deserialization of Untrusted Data Vulnerability0.730.98None yetNo
2024-07-23CVE-2012-4792Microsoft Internet ExplorerMicrosoft Internet Explorer Use-After-Free Vulnerability0.790.99None yetNo
2024-07-09CVE-2024-38112Microsoft WindowsMicrosoft Windows MSHTML Platform Spoofing Vulnerability0.840.81None yetNo
2024-07-09CVE-2024-38080Microsoft Windows Microsoft Windows Hyper-V Privilege Escalation Vulnerability0.070.98Out of scope (local)No
2024-06-13CVE-2024-26169Microsoft WindowsMicrosoft Windows Error Reporting Service Improper Privilege Management Vulnerability0.040.70Out of scope (local)Yes
2024-05-14CVE-2024-30051Microsoft DWM Core Library Microsoft DWM Core Library Privilege Escalation Vulnerability0.060.98Out of scope (local)Yes
2024-05-14CVE-2024-30040Microsoft WindowsMicrosoft Windows MSHTML Platform Security Feature Bypass Vulnerability0.040.69None yetNo
2024-04-30CVE-2024-29988Microsoft SmartScreen PromptMicrosoft SmartScreen Prompt Security Feature Bypass Vulnerability0.450.98None yetNo
2024-04-23CVE-2022-38028Microsoft WindowsMicrosoft Windows Print Spooler Privilege Escalation Vulnerability 0.150.72Out of scope (local)No
2024-03-26CVE-2023-24955Microsoft SharePoint ServerMicrosoft SharePoint Server Code Injection Vulnerability0.850.98None yetYes
2024-03-04CVE-2024-21338Microsoft WindowsMicrosoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability0.600.98Out of scope (local)Yes
2024-02-29CVE-2023-29360Microsoft Streaming ServiceMicrosoft Streaming Service Untrusted Pointer Dereference Vulnerability0.220.98Out of scope (local)No
2024-02-15CVE-2024-21410Microsoft Exchange ServerMicrosoft Exchange Server Privilege Escalation Vulnerability0.130.71Out of scope (local)No
2024-02-13CVE-2024-21412Microsoft WindowsMicrosoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability0.990.99None yetYes
2024-02-13CVE-2024-21351Microsoft WindowsMicrosoft Windows SmartScreen Security Feature Bypass Vulnerability0.280.74None yetNo
2024-01-10CVE-2023-29357Microsoft SharePoint ServerMicrosoft SharePoint Server Privilege Escalation Vulnerability1.000.99Nuclei · SuricataYes
2023-11-16CVE-2023-36584Microsoft WindowsMicrosoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability0.030.51None yetNo
2023-11-14CVE-2023-36036Microsoft WindowsMicrosoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability0.170.55Out of scope (local)No
2023-11-14CVE-2023-36033Microsoft WindowsMicrosoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability0.110.98Out of scope (local)No
2023-11-14CVE-2023-36025Microsoft WindowsMicrosoft Windows SmartScreen Security Feature Bypass Vulnerability0.880.98None yetNo
2023-10-10CVE-2023-41763Microsoft Skype for BusinessMicrosoft Skype for Business Privilege Escalation Vulnerability0.900.98Nuclei · SuricataNo
2023-10-10CVE-2023-36563Microsoft WordPadMicrosoft WordPad Information Disclosure Vulnerability0.200.76None yetNo
2023-10-04CVE-2023-28229Microsoft Windows CNG Key Isolation ServiceMicrosoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability0.020.98Out of scope (local)No
2023-09-12CVE-2023-36802Microsoft Streaming Service ProxyMicrosoft Streaming Service Proxy Privilege Escalation Vulnerability0.280.98Out of scope (local)No
2023-09-12CVE-2023-36761Microsoft WordMicrosoft Word Information Disclosure Vulnerability0.200.77None yetNo
2023-08-09CVE-2023-38180Microsoft .NET Core and Visual StudioMicrosoft .NET Core and Visual Studio Denial-of-Service Vulnerability0.140.98None yetNo
2023-07-17CVE-2023-36884Microsoft WindowsMicrosoft Windows Search Remote Code Execution Vulnerability0.990.98None yetYes
2023-07-11CVE-2023-36874Microsoft WindowsMicrosoft Windows Error Reporting Service Privilege Escalation Vulnerability0.430.99Out of scope (local)No
2023-07-11CVE-2023-35311Microsoft OutlookMicrosoft Outlook Security Feature Bypass Vulnerability0.160.54None yetNo
2023-07-11CVE-2023-32049Microsoft WindowsMicrosoft Windows Defender SmartScreen Security Feature Bypass Vulnerability0.040.52None yetNo
2023-07-11CVE-2023-32046Microsoft WindowsMicrosoft Windows MSHTML Platform Privilege Escalation Vulnerability0.100.54Out of scope (local)No
2023-06-22CVE-2016-0165Microsoft Win32kMicrosoft Win32k Privilege Escalation Vulnerability0.140.98Out of scope (local)No
2023-05-09CVE-2023-29336Microsoft Win32kMicrosoft Win32K Privilege Escalation Vulnerability0.410.98Out of scope (local)No
2023-04-11CVE-2023-28252Microsoft WindowsMicrosoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability0.490.98Out of scope (local)Yes
2023-04-07CVE-2019-1388Microsoft WindowsMicrosoft Windows Certificate Dialog Privilege Escalation Vulnerability0.090.98Out of scope (local)Yes
2023-03-30CVE-2013-3163Microsoft Internet ExplorerMicrosoft Internet Explorer Memory Corruption Vulnerability0.710.98None yetNo
2023-03-14CVE-2023-24880Microsoft WindowsMicrosoft Windows SmartScreen Security Feature Bypass Vulnerability0.780.98None yetYes
2023-03-14CVE-2023-23397Microsoft OfficeMicrosoft Office Outlook Privilege Escalation Vulnerability0.970.99Out of scope (local)No
2023-02-14CVE-2023-23376Microsoft WindowsMicrosoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability0.110.54Out of scope (local)Yes
2023-02-14CVE-2023-21823Microsoft WindowsMicrosoft Windows Graphic Component Privilege Escalation Vulnerability0.060.98Out of scope (local)No
2023-02-14CVE-2023-21715Microsoft OfficeMicrosoft Office Publisher Security Feature Bypass Vulnerability0.120.55None yetNo
2023-01-10CVE-2023-21674Microsoft WindowsMicrosoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability0.340.97Out of scope (local)No
2023-01-10CVE-2022-41080Microsoft Exchange ServerMicrosoft Exchange Server Privilege Escalation Vulnerability0.770.98Out of scope (local)Yes
2022-12-13CVE-2022-44698Microsoft DefenderMicrosoft Defender SmartScreen Security Feature Bypass Vulnerability0.760.69None yetYes
2022-11-14CVE-2022-41049Microsoft WindowsMicrosoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability0.030.97None yetNo
2022-11-08CVE-2022-41128Microsoft WindowsMicrosoft Windows Scripting Languages Remote Code Execution Vulnerability0.250.97None yetNo
2022-11-08CVE-2022-41125Microsoft WindowsMicrosoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability0.030.51Out of scope (local)No
2022-11-08CVE-2022-41091Microsoft WindowsMicrosoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability0.020.97None yetYes
2022-11-08CVE-2022-41073Microsoft WindowsMicrosoft Windows Print Spooler Privilege Escalation Vulnerability0.020.98Out of scope (local)Yes
2022-10-11CVE-2022-41033Microsoft Windows COM+ Event System ServiceMicrosoft Windows COM+ Event System Service Privilege Escalation Vulnerability0.020.97Out of scope (local)No
2022-09-30CVE-2022-41082Microsoft Exchange ServerMicrosoft Exchange Server Remote Code Execution Vulnerability1.000.99None yetYes
2022-09-30CVE-2022-41040Microsoft Exchange ServerMicrosoft Exchange Server Server-Side Request Forgery Vulnerability1.000.99Nuclei · SuricataYes
2022-09-15CVE-2010-2568Microsoft WindowsMicrosoft Windows Remote Code Execution Vulnerability0.900.98Out of scope (local)No
2022-09-14CVE-2022-37969Microsoft WindowsMicrosoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability0.280.98Out of scope (local)Yes
2022-08-18CVE-2022-26923Microsoft Active DirectoryMicrosoft Active Directory Domain Services Privilege Escalation Vulnerability0.830.99Out of scope (local)No
2022-08-18CVE-2022-21971Microsoft WindowsMicrosoft Windows Runtime Remote Code Execution Vulnerability0.540.97None yetNo
2022-08-09CVE-2022-34713Microsoft WindowsMicrosoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability0.680.98None yetNo
2022-07-12CVE-2022-22047Microsoft WindowsMicrosoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability0.190.55Out of scope (local)No
2022-07-01CVE-2022-26925Microsoft WindowsMicrosoft Windows LSA Spoofing Vulnerability0.100.53None yetNo
2022-06-14CVE-2022-30190Microsoft WindowsMicrosoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability0.990.99None yetYes
2022-06-08CVE-2013-1331Microsoft OfficeMicrosoft Office Buffer Overflow Vulnerability0.800.70Out of scope (local)No
2022-06-08CVE-2012-4969Microsoft Internet ExplorerMicrosoft Internet Explorer Use-After-Free Vulnerability0.800.98None yetNo
2022-06-08CVE-2012-1889Microsoft XML Core ServicesMicrosoft XML Core Services Memory Corruption Vulnerability0.840.99None yetNo
2022-06-08CVE-2012-0151Microsoft WindowsMicrosoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability0.880.90Out of scope (local)No
2022-06-08CVE-2010-2572Microsoft PowerPointMicrosoft PowerPoint Buffer Overflow Vulnerability0.590.88Out of scope (local)No
2022-06-08CVE-2009-0563Microsoft OfficeMicrosoft Office Buffer Overflow Vulnerability0.600.98Out of scope (local)No
2022-06-08CVE-2009-0557Microsoft OfficeMicrosoft Office Object Record Corruption Vulnerability0.530.87Out of scope (local)No
2022-06-08CVE-2006-2492Microsoft WordMicrosoft Word Malformed Object Pointer Vulnerability0.480.62None yetNo
2022-05-25CVE-2016-7256Microsoft WindowsMicrosoft Windows Open Type Font Remote Code Execution Vulnerability0.650.66None yetNo
2022-05-25CVE-2016-3393Microsoft WindowsMicrosoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability0.680.67Out of scope (local)No
2022-05-25CVE-2016-0034Microsoft SilverlightMicrosoft Silverlight Runtime Remote Code Execution Vulnerability0.690.98None yetYes
2022-05-25CVE-2015-6175Microsoft WindowsMicrosoft Windows Kernel Privilege Escalation Vulnerability0.050.52Out of scope (local)No
2022-05-25CVE-2015-2425Microsoft Internet ExplorerMicrosoft Internet Explorer Memory Corruption Vulnerability0.450.89None yetNo
2022-05-25CVE-2015-2360Microsoft Win32kMicrosoft Win32k Privilege Escalation Vulnerability0.150.55None yetNo
2022-05-25CVE-2015-1769Microsoft WindowsMicrosoft Windows Mount Manager Privilege Escalation Vulnerability0.040.97Out of scope (local)No
2022-05-25CVE-2015-1671Microsoft WindowsMicrosoft Windows Remote Code Execution Vulnerability0.490.63Out of scope (local)No
2022-05-25CVE-2015-0071Microsoft Internet ExplorerMicrosoft Internet Explorer ASLR Bypass Vulnerability0.340.59None yetNo
2022-05-25CVE-2015-0016Microsoft WindowsMicrosoft Windows TS WebProxy Directory Traversal Vulnerability0.760.98Out of scope (local)No
2022-05-25CVE-2014-4148Microsoft WindowsMicrosoft Windows Remote Code Execution Vulnerability0.600.64None yetNo
2022-05-25CVE-2014-4123Microsoft Internet ExplorerMicrosoft Internet Explorer Privilege Escalation Vulnerability0.470.80None yetNo
2022-05-25CVE-2014-4077Microsoft Input Method Editor (IME) JapaneseMicrosoft IME Japanese Privilege Escalation Vulnerability0.550.64Out of scope (local)No
2022-05-25CVE-2014-2817Microsoft Internet ExplorerMicrosoft Internet Explorer Privilege Escalation Vulnerability0.260.57None yetNo
2022-05-25CVE-2013-7331Microsoft Internet ExplorerMicrosoft Internet Explorer Information Disclosure Vulnerability0.500.98None yetNo
2022-05-25CVE-2013-3896Microsoft SilverlightMicrosoft Silverlight Information Disclosure Vulnerability0.680.97Out of scope (local)No
2022-05-25CVE-2013-0074Microsoft SilverlightMicrosoft Silverlight Double Dereference Vulnerability0.790.99Out of scope (local)Yes
2022-05-24CVE-2018-8611Microsoft WindowsMicrosoft Windows Kernel Privilege Escalation Vulnerability0.040.98Out of scope (local)No
2022-05-24CVE-2017-8543Microsoft WindowsMicrosoft Windows Search Remote Code Execution Vulnerability0.740.98None yetNo
2022-05-24CVE-2017-0210Microsoft Internet ExplorerMicrosoft Internet Explorer Privilege Escalation Vulnerability0.220.56None yetNo
2022-05-24CVE-2017-0149Microsoft Internet ExplorerMicrosoft Internet Explorer Memory Corruption Vulnerability0.290.98None yetNo
2022-05-24CVE-2017-0147Microsoft SMBv1 serverMicrosoft Windows SMBv1 Information Disclosure Vulnerability1.000.98None yetYes
2022-05-24CVE-2017-0022Microsoft XML Core ServicesMicrosoft XML Core Services Information Disclosure Vulnerability0.180.55None yetNo
2022-05-24CVE-2017-0005Microsoft WindowsMicrosoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability0.110.97Out of scope (local)No
2022-05-24CVE-2016-3351Microsoft Internet Explorer and EdgeMicrosoft Internet Explorer and Edge Information Disclosure Vulnerability0.260.58None yetYes
2022-05-24CVE-2016-3298Microsoft Internet ExplorerMicrosoft Internet Explorer Messaging API Information Disclosure Vulnerability0.330.58None yetNo
2022-05-24CVE-2016-0162Microsoft Internet ExplorerMicrosoft Internet Explorer Information Disclosure Vulnerability0.220.57None yetNo
2022-05-23CVE-2020-1027Microsoft WindowsMicrosoft Windows Kernel Privilege Escalation Vulnerability0.050.98Out of scope (local)No
2022-05-23CVE-2020-0638Microsoft Update Notification ManagerMicrosoft Update Notification Manager Privilege Escalation Vulnerability0.020.97Out of scope (local)Yes
2022-05-23CVE-2019-1385Microsoft WindowsMicrosoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability0.040.98Out of scope (local)Yes
2022-05-23CVE-2019-1130Microsoft WindowsMicrosoft Windows AppX Deployment Service Privilege Escalation Vulnerability0.020.97Out of scope (local)Yes
2022-05-23CVE-2019-0880Microsoft WindowsMicrosoft Windows Privilege Escalation Vulnerability0.020.83Out of scope (local)No
2022-05-23CVE-2019-0703Microsoft WindowsMicrosoft Windows SMB Information Disclosure Vulnerability0.090.86None yetNo
2022-05-23CVE-2019-0676Microsoft Internet ExplorerMicrosoft Internet Explorer Information Disclosure Vulnerability0.080.53None yetNo
2022-05-23CVE-2018-8589Microsoft Win32kMicrosoft Win32k Privilege Escalation Vulnerability0.030.52Out of scope (local)No
2022-05-04CVE-2014-4113Microsoft Win32kMicrosoft Win32k Privilege Escalation Vulnerability0.870.98Out of scope (local)No
2022-05-04CVE-2014-0322Microsoft Internet ExplorerMicrosoft Internet Explorer Use-After-Free Vulnerability0.850.99None yetNo
2022-04-25CVE-2022-26904Microsoft WindowsMicrosoft Windows User Profile Service Privilege Escalation Vulnerability0.170.98Out of scope (local)No
2022-04-25CVE-2022-21919Microsoft WindowsMicrosoft Windows User Profile Service Privilege Escalation Vulnerability0.020.97Out of scope (local)No
2022-04-25CVE-2021-41357Microsoft Win32kMicrosoft Win32k Privilege Escalation Vulnerability0.020.51Out of scope (local)No
2022-04-25CVE-2021-40450Microsoft Win32kMicrosoft Win32k Privilege Escalation Vulnerability0.020.51Out of scope (local)No
2022-04-19CVE-2022-22718Microsoft WindowsMicrosoft Windows Print Spooler Privilege Escalation Vulnerability0.180.98Out of scope (local)No
2022-04-13CVE-2022-24521Microsoft WindowsMicrosoft Windows CLFS Driver Privilege Escalation Vulnerability0.070.98Out of scope (local)Yes
2022-04-13CVE-2015-2502Microsoft Internet ExplorerMicrosoft Internet Explorer Memory Corruption Vulnerability0.510.87None yetNo
2022-04-11CVE-2021-42287Microsoft Active DirectoryMicrosoft Active Directory Domain Services Privilege Escalation Vulnerability0.770.98Out of scope (local)Yes
2022-04-11CVE-2021-42278Microsoft Active DirectoryMicrosoft Active Directory Domain Services Privilege Escalation Vulnerability0.730.97Out of scope (local)Yes
2022-04-06CVE-2021-31166Microsoft HTTP Protocol StackMicrosoft HTTP Protocol Stack Remote Code Execution Vulnerability1.000.98None yetNo
2022-04-06CVE-2017-0148Microsoft SMBv1 serverMicrosoft SMBv1 Server Remote Code Execution Vulnerability0.990.99None yetYes
2022-03-31CVE-2021-34484Microsoft WindowsMicrosoft Windows User Profile Service Privilege Escalation Vulnerability0.220.99Out of scope (local)No
2022-03-28CVE-2021-38646Microsoft OfficeMicrosoft Office Access Connectivity Engine Remote Code Execution Vulnerability0.080.71None yetYes
2022-03-28CVE-2021-34486Microsoft WindowsMicrosoft Windows Event Tracing Privilege Escalation Vulnerability0.090.97Out of scope (local)No
2022-03-28CVE-2018-8440Microsoft WindowsMicrosoft Windows Privilege Escalation Vulnerability0.190.99Out of scope (local)Yes
2022-03-28CVE-2018-8406Microsoft DirectX Graphics Kernel (DXGKRNL)Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability0.030.97Out of scope (local)Yes
2022-03-28CVE-2018-8405Microsoft DirectX Graphics Kernel (DXGKRNL)Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability0.030.98Out of scope (local)Yes
2022-03-28CVE-2017-0213Microsoft WindowsMicrosoft Windows Privilege Escalation Vulnerability0.840.99Out of scope (local)Yes
2022-03-28CVE-2017-0059Microsoft Internet ExplorerMicrosoft Internet Explorer Information Disclosure Vulnerability0.620.98None yetNo
2022-03-28CVE-2017-0037Microsoft Edge and Internet ExplorerMicrosoft Edge and Internet Explorer Type Confusion Vulnerability0.800.98None yetNo
2022-03-28CVE-2016-7201Microsoft EdgeMicrosoft Edge Memory Corruption Vulnerability0.800.98None yetNo
2022-03-28CVE-2016-7200Microsoft EdgeMicrosoft Edge Memory Corruption Vulnerability0.830.98None yetNo
2022-03-28CVE-2016-0189Microsoft Internet ExplorerMicrosoft Internet Explorer Memory Corruption Vulnerability0.940.98None yetYes
2022-03-28CVE-2016-0151Microsoft Client-Server Run-time Subsystem (CSRSS)Microsoft Windows CSRSS Security Feature Bypass Vulnerability0.630.98Out of scope (local)Yes
2022-03-28CVE-2016-0040Microsoft WindowsMicrosoft Windows Kernel Privilege Escalation Vulnerability0.240.99Out of scope (local)No
2022-03-28CVE-2015-2426Microsoft WindowsMicrosoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability0.870.98None yetNo
2022-03-28CVE-2015-2419Microsoft Internet ExplorerMicrosoft Internet Explorer Memory Corruption Vulnerability0.530.99None yetNo
2022-03-28CVE-2015-1770Microsoft OfficeMicrosoft Office Uninitialized Memory Use Vulnerability0.350.59None yetNo
2022-03-28CVE-2013-3660Microsoft Win32kMicrosoft Win32k Privilege Escalation Vulnerability0.390.98Out of scope (local)No
2022-03-28CVE-2013-2551Microsoft Internet ExplorerMicrosoft Internet Explorer Use-After-Free Vulnerability0.740.98None yetYes
2022-03-28CVE-2012-2539Microsoft WordMicrosoft Word Remote Code Execution Vulnerability0.530.87Out of scope (local)No
2022-03-28CVE-2011-2005Microsoft Ancillary Function Driver (afd.sys)Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability0.320.98Out of scope (local)No
2022-03-28CVE-2010-4398Microsoft WindowsMicrosoft Windows Kernel Stack-Based Buffer Overflow Vulnerability0.090.98Out of scope (local)No
2022-03-25CVE-2022-21999Microsoft WindowsMicrosoft Windows Print Spooler Privilege Escalation Vulnerability0.410.99Out of scope (local)Yes
2022-03-25CVE-2019-0903Microsoft Graphics Device Interface (GDI)Microsoft GDI Remote Code Execution Vulnerability0.220.98None yetNo
2022-03-25CVE-2018-8414Microsoft WindowsMicrosoft Windows Shell Remote Code Execution Vulnerability0.730.98None yetNo
2022-03-25CVE-2018-8373Microsoft Internet Explorer Scripting EngineMicrosoft Scripting Engine Memory Corruption Vulnerability0.620.98None yetNo
2022-03-25CVE-2017-0146Microsoft WindowsMicrosoft Windows SMB Remote Code Execution Vulnerability0.900.98None yetYes
2022-03-25CVE-2014-6332Microsoft WindowsMicrosoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability0.950.99None yetNo
2022-03-25CVE-2014-6324Microsoft Kerberos Key Distribution Center (KDC)Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability0.870.99None yetNo
2022-03-15CVE-2019-1405Microsoft WindowsMicrosoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability0.300.98Out of scope (local)Yes
2022-03-15CVE-2019-1322Microsoft WindowsMicrosoft Windows Privilege Escalation Vulnerability0.190.97Out of scope (local)Yes
2022-03-15CVE-2019-1315Microsoft WindowsMicrosoft Windows Error Reporting Manager Privilege Escalation Vulnerability0.030.97Out of scope (local)Yes
2022-03-15CVE-2019-1253Microsoft WindowsMicrosoft Windows AppX Deployment Server Privilege Escalation Vulnerability0.120.98Out of scope (local)Yes
2022-03-15CVE-2019-1132Microsoft Win32kMicrosoft Win32k Privilege Escalation Vulnerability0.100.98Out of scope (local)No
2022-03-15CVE-2019-1129Microsoft WindowsMicrosoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability0.020.97Out of scope (local)Yes
2022-03-15CVE-2019-1069Microsoft Task SchedulerMicrosoft Task Scheduler Privilege Escalation Vulnerability0.060.97Out of scope (local)Yes
2022-03-15CVE-2019-1064Microsoft WindowsMicrosoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability0.070.97Out of scope (local)Yes
2022-03-15CVE-2019-0841Microsoft WindowsMicrosoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability0.410.98Out of scope (local)Yes
2022-03-15CVE-2019-0543Microsoft WindowsMicrosoft Windows Privilege Escalation Vulnerability0.050.98Out of scope (local)Yes
2022-03-15CVE-2018-8120Microsoft Win32kMicrosoft Win32k Privilege Escalation Vulnerability0.730.99Out of scope (local)Yes
2022-03-15CVE-2017-0101Microsoft WindowsMicrosoft Windows Transaction Manager Privilege Escalation Vulnerability0.570.99Out of scope (local)Yes
2022-03-15CVE-2016-3309Microsoft WindowsMicrosoft Windows Kernel Privilege Escalation Vulnerability0.200.98Out of scope (local)Yes
2022-03-15CVE-2015-2546Microsoft Win32kMicrosoft Win32k Memory Corruption Vulnerability0.100.98Out of scope (local)Yes
2022-03-03CVE-2021-41379Microsoft WindowsMicrosoft Windows Installer Privilege Escalation Vulnerability0.190.98Out of scope (local)Yes
2022-03-03CVE-2019-1297Microsoft ExcelMicrosoft Excel Remote Code Execution Vulnerability0.220.99None yetNo
2022-03-03CVE-2018-8581Microsoft Exchange ServerMicrosoft Exchange Server Privilege Escalation Vulnerability0.280.98None yetYes
2022-03-03CVE-2017-8540Microsoft Malware Protection EngineMicrosoft Malware Protection Engine Improper Restriction of Operations Vulnerability0.720.98Out of scope (local)No
2022-03-03CVE-2017-11826Microsoft OfficeMicrosoft Office Remote Code Execution Vulnerability0.810.98Out of scope (local)No
2022-03-03CVE-2017-0261Microsoft OfficeMicrosoft Office Use-After-Free Vulnerability0.780.98Out of scope (local)No
2022-03-03CVE-2017-0001Microsoft Graphics Device Interface (GDI)Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability0.030.98Out of scope (local)No
2022-03-03CVE-2016-7262Microsoft ExcelMicrosoft Office Security Feature Bypass Vulnerability0.580.77Out of scope (local)No
2022-03-03CVE-2016-7193Microsoft OfficeMicrosoft Office Memory Corruption Vulnerability0.580.65Out of scope (local)No
2022-03-03CVE-2016-0099Microsoft WindowsMicrosoft Windows Secondary Logon Service Privilege Escalation Vulnerability0.370.99Out of scope (local)Yes
2022-03-03CVE-2015-2545Microsoft OfficeMicrosoft Office Malformed EPS File Vulnerability0.860.98Out of scope (local)No
2022-03-03CVE-2015-2424Microsoft PowerPointMicrosoft PowerPoint Memory Corruption Vulnerability0.400.60None yetNo
2022-03-03CVE-2015-2387Microsoft ATM Font DriverMicrosoft ATM Font Driver Privilege Escalation Vulnerability0.350.60Out of scope (local)No
2022-03-03CVE-2015-1701Microsoft Win32kMicrosoft Win32k Privilege Escalation Vulnerability0.560.99Out of scope (local)Yes
2022-03-03CVE-2015-1642Microsoft OfficeMicrosoft Office Memory Corruption Vulnerability0.530.63Out of scope (local)No
2022-03-03CVE-2014-4114Microsoft WindowsMicrosoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability0.820.98Out of scope (local)No
2022-03-03CVE-2013-5065Microsoft WindowsMicrosoft Windows Kernel Privilege Escalation Vulnerability0.350.98Out of scope (local)No
2022-03-03CVE-2013-3897Microsoft Internet ExplorerMicrosoft Internet Explorer Use-After-Free Vulnerability0.770.98None yetNo
2022-03-03CVE-2013-1347Microsoft Internet ExplorerMicrosoft Internet Explorer Remote Code Execution Vulnerability0.780.98None yetNo
2022-03-03CVE-2012-1856Microsoft OfficeMicrosoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability0.720.96None yetNo
2022-03-03CVE-2011-1889Microsoft Forefront Threat Management Gateway (TMG)Microsoft Forefront TMG Remote Code Execution Vulnerability0.490.87None yetNo
2022-03-03CVE-2010-3333Microsoft OfficeMicrosoft Office Stack-based Buffer Overflow Vulnerability0.890.98Out of scope (local)No
2022-03-03CVE-2010-0232Microsoft WindowsMicrosoft Windows Kernel Exception Handler Vulnerability0.290.99Out of scope (local)No
2022-03-03CVE-2009-3129Microsoft ExcelMicrosoft Excel Featheader Record Memory Corruption Vulnerability0.840.98Out of scope (local)No
2022-03-03CVE-2009-1123Microsoft WindowsMicrosoft Windows Improper Input Validation Vulnerability0.050.84Out of scope (local)No
2022-03-03CVE-2004-0210Microsoft WindowsMicrosoft Windows Privilege Escalation Vulnerability0.070.99Out of scope (local)No
2022-03-03CVE-2002-0367Microsoft WindowsMicrosoft Windows Privilege Escalation Vulnerability0.050.98Out of scope (local)No
2022-02-25CVE-2017-8570Microsoft OfficeMicrosoft Office Remote Code Execution Vulnerability0.900.99Out of scope (local)No
2022-02-25CVE-2017-0222Microsoft Internet ExplorerMicrosoft Internet Explorer Remote Code Execution Vulnerability0.300.78None yetNo
2022-02-25CVE-2014-6352Microsoft WindowsMicrosoft Windows Code Injection Vulnerability0.770.98Out of scope (local)No
2022-02-15CVE-2019-0752Microsoft Internet ExplorerMicrosoft Internet Explorer Type Confusion Vulnerability0.820.98None yetYes
2022-02-15CVE-2018-8174Microsoft WindowsMicrosoft Windows VBScript Engine Out-of-Bounds Write Vulnerability0.880.99None yetYes
2022-02-15CVE-2014-1761Microsoft WordMicrosoft Word Memory Corruption Vulnerability0.780.99Out of scope (local)No
2022-02-15CVE-2013-3906Microsoft Graphics ComponentMicrosoft Graphics Component Memory Corruption Vulnerability0.850.99Out of scope (local)No
2022-02-10CVE-2021-36934Microsoft WindowsMicrosoft Windows SAM Local Privilege Escalation Vulnerability0.670.97Out of scope (local)No
2022-02-10CVE-2020-0796Microsoft SMBv3Microsoft SMBv3 Remote Code Execution Vulnerability1.000.98Nuclei · SuricataYes
2022-02-10CVE-2017-8464Microsoft WindowsMicrosoft Windows Shell (.lnk) Remote Code Execution Vulnerability0.900.98None yetNo
2022-02-10CVE-2017-0263Microsoft Win32kMicrosoft Win32k Privilege Escalation Vulnerability0.100.98Out of scope (local)No
2022-02-10CVE-2017-0262Microsoft OfficeMicrosoft Office Remote Code Execution Vulnerability0.810.98Out of scope (local)No
2022-02-10CVE-2017-0145Microsoft SMBv1Microsoft SMBv1 Remote Code Execution Vulnerability0.900.98None yetYes
2022-02-10CVE-2017-0144Microsoft SMBv1Microsoft SMBv1 Remote Code Execution Vulnerability0.990.98None yetYes
2022-02-10CVE-2015-1635Microsoft HTTP.sysMicrosoft HTTP.sys Remote Code Execution Vulnerability1.000.99Nuclei · SuricataNo
2022-02-04CVE-2022-21882Microsoft Win32kMicrosoft Win32k Privilege Escalation Vulnerability0.590.98Out of scope (local)Yes
2022-01-28CVE-2020-0787Microsoft WindowsMicrosoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability0.430.98Out of scope (local)Yes
2022-01-28CVE-2014-1776Microsoft Internet ExplorerMicrosoft Internet Explorer Memory Corruption Vulnerability0.830.99None yetNo
2022-01-21CVE-2018-8453Microsoft Win32kMicrosoft Win32k Privilege Escalation Vulnerability0.700.98Out of scope (local)Yes
2022-01-18CVE-2021-33766Microsoft Exchange ServerMicrosoft Exchange Server Information Disclosure0.980.99Nuclei · SuricataNo
2022-01-10CVE-2019-1458Microsoft Win32kMicrosoft Win32k Privilege Escalation Vulnerability0.740.98Out of scope (local)Yes
2022-01-10CVE-2013-3900Microsoft WinVerifyTrust functionMicrosoft WinVerifyTrust function Remote Code Execution0.450.97None yetNo
2021-12-15CVE-2021-43890Microsoft WindowsMicrosoft Windows AppX Installer Spoofing Vulnerability0.110.76None yetYes
2021-11-17CVE-2021-42321Microsoft ExchangeMicrosoft Exchange Server Remote Code Execution Vulnerability0.920.98None yetYes
2021-11-17CVE-2021-42292Microsoft OfficeMicrosoft Excel Security Feature Bypass0.430.98Out of scope (local)No
2021-11-17CVE-2021-40449Microsoft WindowsMicrosoft Windows Win32k Privilege Escalation Vulnerability0.820.98Out of scope (local)Yes
2021-11-03CVE-2021-40444Microsoft MSHTMLMicrosoft MSHTML Remote Code Execution Vulnerability0.980.98None yetYes
2021-11-03CVE-2021-38649Microsoft Open Management Infrastructure (OMI)Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability0.030.52Out of scope (local)No
2021-11-03CVE-2021-38648Microsoft Open Management Infrastructure (OMI)Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability0.110.99Out of scope (local)No
2021-11-03CVE-2021-38647Microsoft Open Management Infrastructure (OMI)Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability1.000.98Nuclei · SuricataYes
2021-11-03CVE-2021-38645Microsoft Open Management Infrastructure (OMI)Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability0.030.52Out of scope (local)No
2021-11-03CVE-2021-36955Microsoft WindowsMicrosoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability0.040.98Out of scope (local)Yes
2021-11-03CVE-2021-36948Microsoft WindowsMicrosoft Windows Update Medic Service Privilege Escalation Vulnerability0.230.57Out of scope (local)No
2021-11-03CVE-2021-36942Microsoft WindowsMicrosoft Windows Local Security Authority (LSA) Spoofing Vulnerability0.660.98None yetYes
2021-11-03CVE-2021-34527Microsoft WindowsMicrosoft Windows Print Spooler Remote Code Execution Vulnerability1.000.98None yetYes
2021-11-03CVE-2021-34523Microsoft Exchange ServerMicrosoft Exchange Server Privilege Escalation Vulnerability1.000.98Out of scope (local)Yes
2021-11-03CVE-2021-34473Microsoft Exchange ServerMicrosoft Exchange Server Remote Code Execution Vulnerability1.000.99Nuclei · SuricataYes
2021-11-03CVE-2021-34448Microsoft WindowsMicrosoft Windows Scripting Engine Memory Corruption Vulnerability0.400.61None yetNo
2021-11-03CVE-2021-33771Microsoft WindowsMicrosoft Windows Kernel Privilege Escalation Vulnerability0.100.54Out of scope (local)No
2021-11-03CVE-2021-33742Microsoft WindowsMicrosoft Windows MSHTML Platform Remote Code Execution Vulnerability0.590.98None yetNo
2021-11-03CVE-2021-33739Microsoft WindowsMicrosoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability0.070.97Out of scope (local)No
2021-11-03CVE-2021-31979Microsoft WindowsMicrosoft Windows Kernel Privilege Escalation Vulnerability0.050.52Out of scope (local)No
2021-11-03CVE-2021-31956Microsoft WindowsMicrosoft Windows NTFS Privilege Escalation Vulnerability0.220.97Out of scope (local)No
2021-11-03CVE-2021-31955Microsoft WindowsMicrosoft Windows Kernel Information Disclosure Vulnerability0.810.98None yetNo
2021-11-03CVE-2021-31207Microsoft Exchange ServerMicrosoft Exchange Server Security Feature Bypass Vulnerability1.000.98None yetYes
2021-11-03CVE-2021-31201Microsoft Enhanced Cryptographic ProviderMicrosoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability0.030.52Out of scope (local)No
2021-11-03CVE-2021-31199Microsoft Enhanced Cryptographic ProviderMicrosoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability0.030.51Out of scope (local)No
2021-11-03CVE-2021-28310Microsoft Win32kMicrosoft Win32k Privilege Escalation Vulnerability0.080.97Out of scope (local)No
2021-11-03CVE-2021-27085Microsoft Internet ExplorerMicrosoft Internet Explorer Remote Code Execution Vulnerability0.050.52None yetNo
2021-11-03CVE-2021-27065Microsoft Exchange ServerMicrosoft Exchange Server Remote Code Execution Vulnerability1.000.99None yetYes
2021-11-03CVE-2021-27059Microsoft OfficeMicrosoft Office Remote Code Execution Vulnerability0.060.52None yetNo
2021-11-03CVE-2021-26858Microsoft Exchange ServerMicrosoft Exchange Server Remote Code Execution Vulnerability0.940.98None yetYes
2021-11-03CVE-2021-26857Microsoft Exchange ServerMicrosoft Exchange Server Remote Code Execution Vulnerability0.960.98None yetYes
2021-11-03CVE-2021-26855Microsoft Exchange ServerMicrosoft Exchange Server Remote Code Execution Vulnerability1.000.99Nuclei · SuricataYes
2021-11-03CVE-2021-26411Microsoft Internet ExplorerMicrosoft Internet Explorer Memory Corruption Vulnerability0.820.98None yetYes
2021-11-03CVE-2021-1732Microsoft Win32kMicrosoft Win32k Privilege Escalation Vulnerability0.780.98Out of scope (local)Yes
2021-11-03CVE-2021-1675Microsoft WindowsMicrosoft Windows Print Spooler Remote Code Execution Vulnerability0.850.98None yetYes
2021-11-03CVE-2021-1647Microsoft DefenderMicrosoft Defender Remote Code Execution Vulnerability0.400.98None yetNo
2021-11-03CVE-2020-17144Microsoft Exchange ServerMicrosoft Exchange Server Remote Code Execution Vulnerability0.370.98None yetNo
2021-11-03CVE-2020-17087Microsoft WindowsMicrosoft Windows Kernel Privilege Escalation Vulnerability0.050.97Out of scope (local)No
2021-11-03CVE-2020-1472Microsoft NetlogonMicrosoft Netlogon Privilege Escalation Vulnerability0.990.98Out of scope (local)Yes
2021-11-03CVE-2020-1464Microsoft WindowsMicrosoft Windows Spoofing Vulnerability0.390.75None yetNo
2021-11-03CVE-2020-1380Microsoft Internet ExplorerMicrosoft Internet Explorer Scripting Engine Memory Corruption Vulnerability0.240.98None yetNo
2021-11-03CVE-2020-1350Microsoft WindowsMicrosoft Windows DNS Server Remote Code Execution Vulnerability0.970.98None yetNo
2021-11-03CVE-2020-1147Microsoft .NET Framework, SharePoint, Visual StudioMicrosoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability0.960.99Nuclei · SuricataNo
2021-11-03CVE-2020-1054Microsoft Win32kMicrosoft Win32k Privilege Escalation Vulnerability0.540.98Out of scope (local)No
2021-11-03CVE-2020-1040Microsoft Hyper-V RemoteFXMicrosoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability0.070.93None yetNo
2021-11-03CVE-2020-1020Microsoft WindowsMicrosoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability0.650.98None yetNo
2021-11-03CVE-2020-0986Microsoft WindowsMicrosoft Windows Kernel Privilege Escalation Vulnerability0.160.98Out of scope (local)No
2021-11-03CVE-2020-0968Microsoft Internet ExplorerMicrosoft Internet Explorer Scripting Engine Memory Corruption Vulnerability0.310.74None yetYes
2021-11-03CVE-2020-0938Microsoft WindowsMicrosoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability0.690.98Out of scope (local)No
2021-11-03CVE-2020-0878Microsoft Edge and Internet ExplorerMicrosoft Edge and Internet Explorer Memory Corruption Vulnerability0.030.52None yetYes
2021-11-03CVE-2020-0688Microsoft Exchange ServerMicrosoft Exchange Server Validation Key Remote Code Execution Vulnerability1.000.98None yetYes
2021-11-03CVE-2020-0683Microsoft WindowsMicrosoft Windows Installer Privilege Escalation Vulnerability0.080.98Out of scope (local)No
2021-11-03CVE-2020-0674Microsoft Internet ExplorerMicrosoft Internet Explorer Scripting Engine Memory Corruption Vulnerability0.870.98None yetNo
2021-11-03CVE-2020-0646Microsoft .NET FrameworkMicrosoft .NET Framework Remote Code Execution Vulnerability0.990.99None yetNo
2021-11-03CVE-2020-0601Microsoft WindowsMicrosoft Windows CryptoAPI Spoofing Vulnerability0.890.99None yetNo
2021-11-03CVE-2019-1429Microsoft Internet ExplorerMicrosoft Internet Explorer Scripting Engine Memory Corruption Vulnerability0.770.99None yetNo
2021-11-03CVE-2019-1367Microsoft Internet ExplorerMicrosoft Internet Explorer Scripting Engine Memory Corruption Vulnerability0.520.98None yetYes
2021-11-03CVE-2019-1215Microsoft WindowsMicrosoft Windows Privilege Escalation Vulnerability0.190.99Out of scope (local)Yes
2021-11-03CVE-2019-1214Microsoft WindowsMicrosoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability0.010.52Out of scope (local)No
2021-11-03CVE-2019-0863Microsoft WindowsMicrosoft Windows Error Reporting (WER) Privilege Escalation Vulnerability0.050.98Out of scope (local)No
2021-11-03CVE-2019-0859Microsoft Win32kMicrosoft Win32k Privilege Escalation Vulnerability0.040.98Out of scope (local)Yes
2021-11-03CVE-2019-0808Microsoft Win32kMicrosoft Win32k Privilege Escalation Vulnerability0.530.99Out of scope (local)No
2021-11-03CVE-2019-0803Microsoft Win32kMicrosoft Win32k Privilege Escalation Vulnerability0.450.97Out of scope (local)Yes
2021-11-03CVE-2019-0797Microsoft Win32kMicrosoft Win32k Privilege Escalation Vulnerability0.020.98Out of scope (local)No
2021-11-03CVE-2019-0708Microsoft Remote Desktop ServicesMicrosoft Remote Desktop Services Remote Code Execution Vulnerability1.000.99None yetYes
2021-11-03CVE-2019-0604Microsoft SharePointMicrosoft SharePoint Remote Code Execution Vulnerability1.000.98None yetYes
2021-11-03CVE-2019-0541Microsoft MSHTMLMicrosoft MSHTML Remote Code Execution Vulnerability0.530.98None yetNo
2021-11-03CVE-2018-8653Microsoft Internet ExplorerMicrosoft Internet Explorer Scripting Engine Memory Corruption Vulnerability0.300.77None yetNo
2021-11-03CVE-2018-0802Microsoft OfficeMicrosoft Office Memory Corruption Vulnerability0.930.98Out of scope (local)Yes
2021-11-03CVE-2018-0798Microsoft OfficeMicrosoft Office Memory Corruption Vulnerability0.950.98None yetNo
2021-11-03CVE-2017-8759Microsoft .NET FrameworkMicrosoft .NET Framework Remote Code Execution Vulnerability0.890.98Out of scope (local)No
2021-11-03CVE-2017-7269Microsoft Internet Information Services (IIS)Microsoft Windows Server Buffer Overflow Vulnerability1.000.98Nuclei · SuricataNo
2021-11-03CVE-2017-11882Microsoft OfficeMicrosoft Office Memory Corruption Vulnerability1.000.99Out of scope (local)Yes
2021-11-03CVE-2017-11774Microsoft OfficeMicrosoft Office Outlook Security Feature Bypass Vulnerability0.600.98Out of scope (local)No
2021-11-03CVE-2017-0199Microsoft Office and WordPadMicrosoft Office and WordPad Remote Code Execution Vulnerability0.990.99Out of scope (local)Yes
2021-11-03CVE-2017-0143Microsoft WindowsMicrosoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability0.930.98None yetYes
2021-11-03CVE-2016-7255Microsoft Win32kMicrosoft Win32k Privilege Escalation Vulnerability0.810.98Out of scope (local)Yes
2021-11-03CVE-2016-3235Microsoft OfficeMicrosoft Office OLE DLL Side Loading Vulnerability0.430.97Out of scope (local)No
2021-11-03CVE-2016-0185Microsoft WindowsMicrosoft Windows Media Center Remote Code Execution Vulnerability0.700.98Out of scope (local)No
2021-11-03CVE-2016-0167Microsoft Win32kMicrosoft Win32k Privilege Escalation Vulnerability0.060.98Out of scope (local)Yes
2021-11-03CVE-2015-1641Microsoft OfficeMicrosoft Office Memory Corruption Vulnerability0.970.98Out of scope (local)No
2021-11-03CVE-2014-1812Microsoft WindowsMicrosoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability0.650.98None yetYes
2021-11-03CVE-2012-0158Microsoft MSCOMCTL.OCXMicrosoft MSCOMCTL.OCX Remote Code Execution Vulnerability1.000.98None yetYes

Industry partners

Feasible SecurityAskealGoTrust