Microsoft: every exploited CVE on CISA KEV
All 390 Microsoft bugs attackers are confirmed to be using, with attack scores and free detection rules.
Generated by VEDAS. Scores as of 2026-11-01 19:19 UTC. Rebuilt every few hours from cve-scores, CISA KEV and vedas-signatures. How this works and its limits.
390
Microsoft bugs on CISA’s exploited list
40 added in 2026.
15 of 187
remotely exploitable ones have a free VEDAS detection rule
172 don’t yet; see detection gaps.
117
are linked to ransomware
Every Microsoft vulnerability the US government has confirmed attackers are using, newest first, with each bug’s EPSS (predicted attack chance) and VEDAS (exploit evidence) scores and any free Nuclei or Suricata detection rule. US federal agencies must fix KEV-listed bugs by a deadline; everyone else should treat the list as “patch first”.
| Added | CVE | Product | Bug | EPSS | VEDAS | Detection rule | Ransomware |
|---|---|---|---|---|---|---|---|
| 2026-10-13 | CVE-2026-96951 | Microsoft Windows | Microsoft Windows Command Injection Vulnerability | 0.10 | 0.97 | None yet | No |
| 2026-09-25 | CVE-2026-65660 | Microsoft SharePoint | Microsoft SharePoint Code Injection Vulnerability | 0.08 | 0.98 | Suricata | No |
| 2026-09-08 | CVE-2026-85880 | Microsoft Windows | Microsoft Windows Heap-Based Buffer Overflow Vulnerability | 0.00 | 0.52 | Out of scope (local) | No |
| 2026-09-08 | CVE-2026-81963 | Microsoft Windows | Microsoft Windows Link Following Vulnerability | 0.00 | 0.51 | Out of scope (local) | No |
| 2026-08-26 | CVE-2019-1068 | Microsoft SQL Server | Microsoft SQL Server Remote Code Execution Vulnerability | 0.57 | 0.98 | None yet | No |
| 2026-08-18 | CVE-2026-55040 | Microsoft SharePoint | Microsoft SharePoint Weak Authentication Vulnerability | 0.70 | 0.98 | None yet | No |
| 2026-08-18 | CVE-2026-33824 | Microsoft Internet Key Exchange (IKE) Service Extensions | Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability | 0.77 | 0.92 | None yet | No |
| 2026-08-11 | CVE-2026-68820 | Microsoft Windows Ancillary Function Driver for WinSock | Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability | 0.09 | 0.53 | Out of scope (local) | No |
| 2026-07-22 | CVE-2026-50522 | Microsoft SharePoint | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 0.03 | 0.98 | None yet | No |
| 2026-07-16 | CVE-2026-58644 | Microsoft SharePoint | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 0.16 | 0.98 | Nuclei · Suricata | No |
| 2026-07-14 | CVE-2026-56164 | Microsoft SharePoint Server | Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability | 0.01 | 0.51 | None yet | No |
| 2026-07-14 | CVE-2026-56155 | Microsoft Active Directory Federation Services | Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability | 0.00 | 0.52 | Out of scope (local) | No |
| 2026-07-01 | CVE-2026-45659 | Microsoft SharePoint Server | Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability | 0.80 | 0.81 | None yet | Yes |
| 2026-05-20 | CVE-2026-45498 | Microsoft Defender | Microsoft Defender Denial of Service Vulnerability | 0.63 | 0.66 | None yet | No |
| 2026-05-20 | CVE-2026-41091 | Microsoft Defender | Microsoft Defender Link Following Vulnerability | 0.08 | 0.97 | Out of scope (local) | No |
| 2026-05-20 | CVE-2010-0806 | Microsoft Internet Explorer | Microsoft Internet Explorer Use-After-Free Vulnerability | 0.82 | 0.99 | None yet | No |
| 2026-05-20 | CVE-2010-0249 | Microsoft Internet Explorer | Microsoft Internet Explorer Use-After-Free Vulnerability | 0.92 | 0.98 | None yet | No |
| 2026-05-20 | CVE-2009-1537 | Microsoft DirectX | Microsoft DirectX NULL Byte Overwrite Vulnerability | 0.51 | 0.95 | None yet | No |
| 2026-05-20 | CVE-2008-4250 | Microsoft Windows | Microsoft Windows Buffer Overflow Vulnerability | 0.99 | 0.98 | None yet | No |
| 2026-05-15 | CVE-2026-42897 | Microsoft Microsoft | Microsoft Exchange Server Cross-Site Scripting Vulnerability | 0.71 | 0.68 | None yet | No |
| 2026-04-28 | CVE-2026-32202 | Microsoft Windows | Microsoft Windows Protection Mechanism Failure Vulnerability | 0.71 | 0.98 | None yet | No |
| 2026-04-22 | CVE-2026-33825 | Microsoft Defender | Microsoft Defender Insufficient Granularity of Access Control Vulnerability | 0.07 | 0.52 | Out of scope (local) | Yes |
| 2026-04-14 | CVE-2026-32201 | Microsoft SharePoint Server | Microsoft SharePoint Server Improper Input Validation Vulnerability | 0.43 | 0.61 | None yet | No |
| 2026-04-14 | CVE-2009-0238 | Microsoft Office | Microsoft Office Remote Code Execution | 0.43 | 0.98 | None yet | No |
| 2026-04-13 | CVE-2025-60710 | Microsoft Windows | Microsoft Windows Link Following Vulnerability | 0.05 | 0.75 | Out of scope (local) | Yes |
| 2026-04-13 | CVE-2023-36424 | Microsoft Windows | Microsoft Windows Out-of-Bounds Read Vulnerability | 0.12 | 0.98 | None yet | No |
| 2026-04-13 | CVE-2023-21529 | Microsoft Exchange Server | Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability | 0.59 | 0.98 | None yet | Yes |
| 2026-04-13 | CVE-2012-1854 | Microsoft Visual Basic for Applications (VBA) | Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability | 0.21 | 0.56 | Out of scope (local) | No |
| 2026-03-18 | CVE-2026-20963 | Microsoft SharePoint | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 0.29 | 0.58 | None yet | No |
| 2026-02-17 | CVE-2008-0015 | Microsoft Windows | Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability | 0.77 | 0.98 | None yet | No |
| 2026-02-12 | CVE-2024-43468 | Microsoft Configuration Manager | Microsoft Configuration Manager SQL Injection Vulnerability | 0.81 | 0.83 | None yet | No |
| 2026-02-10 | CVE-2026-21533 | Microsoft Windows | Microsoft Windows Improper Privilege Management Vulnerability | 0.04 | 0.52 | Out of scope (local) | No |
| 2026-02-10 | CVE-2026-21525 | Microsoft Windows | Microsoft Windows NULL Pointer Dereference Vulnerability | 0.05 | 0.52 | Out of scope (local) | No |
| 2026-02-10 | CVE-2026-21519 | Microsoft Windows | Microsoft Windows Type Confusion Vulnerability | 0.02 | 0.52 | Out of scope (local) | No |
| 2026-02-10 | CVE-2026-21514 | Microsoft Office | Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability | 0.02 | 0.51 | Out of scope (local) | No |
| 2026-02-10 | CVE-2026-21513 | Microsoft Windows | Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability | 0.16 | 0.98 | None yet | No |
| 2026-02-10 | CVE-2026-21510 | Microsoft Windows | Microsoft Windows Shell Protection Mechanism Failure Vulnerability | 0.61 | 0.66 | None yet | No |
| 2026-01-26 | CVE-2026-21509 | Microsoft Office | Microsoft Office Security Feature Bypass Vulnerability | 0.71 | 0.98 | Out of scope (local) | No |
| 2026-01-13 | CVE-2026-20805 | Microsoft Windows | Microsoft Windows Information Disclosure Vulnerability | 0.07 | 0.98 | Out of scope (local) | No |
| 2026-01-07 | CVE-2009-0556 | Microsoft Office | Microsoft Office PowerPoint Code Injection Vulnerability | 0.67 | 0.98 | None yet | No |
| 2025-12-09 | CVE-2025-62221 | Microsoft Windows | Microsoft Windows Use After Free Vulnerability | 0.03 | 0.52 | Out of scope (local) | No |
| 2025-11-12 | CVE-2025-62215 | Microsoft Windows | Microsoft Windows Race Condition Vulnerability | 0.04 | 0.98 | Out of scope (local) | No |
| 2025-10-24 | CVE-2025-59287 | Microsoft Windows | Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability | 1.00 | 0.98 | Nuclei · Suricata | No |
| 2025-10-20 | CVE-2025-33073 | Microsoft Windows | Microsoft Windows SMB Client Improper Access Control Vulnerability | 0.83 | 0.98 | Out of scope (local) | No |
| 2025-10-14 | CVE-2025-59230 | Microsoft Windows | Microsoft Windows Improper Access Control Vulnerability | 0.03 | 0.74 | Out of scope (local) | No |
| 2025-10-14 | CVE-2025-24990 | Microsoft Windows | Microsoft Windows Untrusted Pointer Dereference Vulnerability | 0.06 | 0.76 | Out of scope (local) | No |
| 2025-10-06 | CVE-2021-43226 | Microsoft Windows | Microsoft Windows Privilege Escalation Vulnerability | 0.03 | 0.97 | Out of scope (local) | Yes |
| 2025-10-06 | CVE-2013-3918 | Microsoft Windows | Microsoft Windows Out-of-Bounds Write Vulnerability | 0.74 | 0.99 | None yet | No |
| 2025-10-06 | CVE-2011-3402 | Microsoft Windows | Microsoft Windows Remote Code Execution Vulnerability | 0.78 | 0.98 | None yet | No |
| 2025-10-06 | CVE-2010-3962 | Microsoft Internet Explorer | Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability | 0.97 | 0.98 | None yet | No |
| 2025-08-12 | CVE-2013-3893 | Microsoft Internet Explorer | Microsoft Internet Explorer Resource Management Errors Vulnerability | 0.88 | 0.99 | None yet | No |
| 2025-08-12 | CVE-2007-0671 | Microsoft Office | Microsoft Office Excel Remote Code Execution Vulnerability | 0.44 | 0.61 | None yet | No |
| 2025-07-22 | CVE-2025-49706 | Microsoft SharePoint | Microsoft SharePoint Improper Authentication Vulnerability | 0.99 | 0.98 | Nuclei · Suricata | Yes |
| 2025-07-22 | CVE-2025-49704 | Microsoft SharePoint | Microsoft SharePoint Code Injection Vulnerability | 1.00 | 0.98 | Nuclei · Suricata | Yes |
| 2025-07-20 | CVE-2025-53770 | Microsoft SharePoint | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 1.00 | 0.99 | None yet | Yes |
| 2025-06-10 | CVE-2025-33053 | Microsoft Windows | Microsoft Windows External Control of File Name or Path Vulnerability | 0.87 | 0.98 | None yet | No |
| 2025-05-13 | CVE-2025-32709 | Microsoft Windows | Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability | 0.02 | 0.69 | Out of scope (local) | No |
| 2025-05-13 | CVE-2025-32706 | Microsoft Windows | Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability | 0.02 | 0.69 | Out of scope (local) | No |
| 2025-05-13 | CVE-2025-32701 | Microsoft Windows | Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability | 0.01 | 0.70 | Out of scope (local) | No |
| 2025-05-13 | CVE-2025-30400 | Microsoft Windows | Microsoft Windows DWM Core Library Use-After-Free Vulnerability | 0.02 | 0.98 | Out of scope (local) | No |
| 2025-05-13 | CVE-2025-30397 | Microsoft Windows | Microsoft Windows Scripting Engine Type Confusion Vulnerability | 0.27 | 0.98 | None yet | No |
| 2025-04-17 | CVE-2025-24054 | Microsoft Windows | Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability | 0.62 | 0.99 | None yet | No |
| 2025-04-08 | CVE-2025-29824 | Microsoft Windows | Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability | 0.19 | 0.97 | Out of scope (local) | Yes |
| 2025-03-11 | CVE-2025-26633 | Microsoft Windows | Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability | 0.30 | 0.98 | Out of scope (local) | Yes |
| 2025-03-11 | CVE-2025-24993 | Microsoft Windows | Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability | 0.02 | 0.70 | Out of scope (local) | No |
| 2025-03-11 | CVE-2025-24991 | Microsoft Windows | Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability | 0.02 | 0.69 | Out of scope (local) | No |
| 2025-03-11 | CVE-2025-24985 | Microsoft Windows | Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability | 0.04 | 0.70 | Out of scope (local) | No |
| 2025-03-11 | CVE-2025-24984 | Microsoft Windows | Microsoft Windows NTFS Information Disclosure Vulnerability | 0.02 | 0.70 | None yet | No |
| 2025-03-11 | CVE-2025-24983 | Microsoft Windows | Microsoft Windows Win32k Use-After-Free Vulnerability | 0.02 | 0.69 | Out of scope (local) | No |
| 2025-03-03 | CVE-2018-8639 | Microsoft Windows | Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability | 0.22 | 0.97 | Out of scope (local) | Yes |
| 2025-02-25 | CVE-2024-49035 | Microsoft Partner Center | Microsoft Partner Center Improper Access Control Vulnerability | 0.01 | 0.69 | Out of scope (local) | No |
| 2025-02-21 | CVE-2025-24989 | Microsoft Power Pages | Microsoft Power Pages Improper Access Control Vulnerability | 0.02 | 0.70 | None yet | No |
| 2025-02-11 | CVE-2025-21418 | Microsoft Windows | Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability | 0.02 | 0.75 | Out of scope (local) | No |
| 2025-02-11 | CVE-2025-21391 | Microsoft Windows | Microsoft Windows Storage Link Following Vulnerability | 0.02 | 0.74 | Out of scope (local) | No |
| 2025-02-06 | CVE-2024-21413 | Microsoft Office Outlook | Microsoft Outlook Improper Input Validation Vulnerability | 0.95 | 0.98 | None yet | No |
| 2025-02-04 | CVE-2024-29059 | Microsoft .NET Framework | Microsoft .NET Framework Information Disclosure Vulnerability | 0.99 | 0.98 | Nuclei · Suricata | No |
| 2025-01-14 | CVE-2025-21335 | Microsoft Windows | Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability | 0.01 | 0.70 | Out of scope (local) | No |
| 2025-01-14 | CVE-2025-21334 | Microsoft Windows | Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability | 0.02 | 0.69 | Out of scope (local) | No |
| 2025-01-14 | CVE-2025-21333 | Microsoft Windows | Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability | 0.10 | 0.98 | Out of scope (local) | No |
| 2024-12-16 | CVE-2024-35250 | Microsoft Windows | Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability | 0.25 | 0.98 | Out of scope (local) | No |
| 2024-12-10 | CVE-2024-49138 | Microsoft Windows | Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability | 0.26 | 0.99 | Out of scope (local) | No |
| 2024-11-12 | CVE-2024-49039 | Microsoft Windows | Microsoft Windows Task Scheduler Privilege Escalation Vulnerability | 0.14 | 0.76 | Out of scope (local) | Yes |
| 2024-11-12 | CVE-2024-43451 | Microsoft Windows | Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability | 0.84 | 0.99 | None yet | No |
| 2024-10-22 | CVE-2024-38094 | Microsoft SharePoint | Microsoft SharePoint Deserialization Vulnerability | 0.51 | 0.77 | None yet | Yes |
| 2024-10-15 | CVE-2024-30088 | Microsoft Windows | Microsoft Windows Kernel TOCTOU Race Condition Vulnerability | 0.68 | 0.98 | Out of scope (local) | Yes |
| 2024-10-08 | CVE-2024-43573 | Microsoft Windows | Microsoft Windows MSHTML Platform Spoofing Vulnerability | 0.46 | 0.76 | None yet | No |
| 2024-10-08 | CVE-2024-43572 | Microsoft Windows | Microsoft Windows Management Console Remote Code Execution Vulnerability | 0.67 | 0.79 | None yet | No |
| 2024-09-18 | CVE-2020-0618 | Microsoft SQL Server | Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability | 0.99 | 0.99 | Nuclei · Suricata | Yes |
| 2024-09-16 | CVE-2024-43461 | Microsoft Windows | Microsoft Windows MSHTML Platform Spoofing Vulnerability | 0.54 | 0.98 | None yet | No |
| 2024-09-10 | CVE-2024-38226 | Microsoft Publisher | Microsoft Publisher Protection Mechanism Failure Vulnerability | 0.03 | 0.52 | None yet | No |
| 2024-09-10 | CVE-2024-38217 | Microsoft Windows | Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability | 0.10 | 0.70 | None yet | No |
| 2024-09-10 | CVE-2024-38014 | Microsoft Windows | Microsoft Windows Installer Improper Privilege Management Vulnerability | 0.06 | 0.93 | None yet | No |
| 2024-08-21 | CVE-2021-31196 | Microsoft Exchange Server | Microsoft Exchange Server Information Disclosure Vulnerability | 0.54 | 0.98 | None yet | No |
| 2024-08-13 | CVE-2024-38213 | Microsoft Windows | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | 0.14 | 0.98 | None yet | No |
| 2024-08-13 | CVE-2024-38193 | Microsoft Windows | Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability | 0.29 | 0.98 | Out of scope (local) | No |
| 2024-08-13 | CVE-2024-38189 | Microsoft Project | Microsoft Project Remote Code Execution Vulnerability | 0.08 | 0.97 | None yet | No |
| 2024-08-13 | CVE-2024-38178 | Microsoft Windows | Microsoft Windows Scripting Engine Memory Corruption Vulnerability | 0.41 | 0.76 | None yet | No |
| 2024-08-13 | CVE-2024-38107 | Microsoft Windows | Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability | 0.02 | 0.69 | Out of scope (local) | No |
| 2024-08-13 | CVE-2024-38106 | Microsoft Windows | Microsoft Windows Kernel Privilege Escalation Vulnerability | 0.06 | 0.71 | Out of scope (local) | No |
| 2024-08-05 | CVE-2018-0824 | Microsoft Windows | Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability | 0.73 | 0.98 | None yet | No |
| 2024-07-23 | CVE-2012-4792 | Microsoft Internet Explorer | Microsoft Internet Explorer Use-After-Free Vulnerability | 0.79 | 0.99 | None yet | No |
| 2024-07-09 | CVE-2024-38112 | Microsoft Windows | Microsoft Windows MSHTML Platform Spoofing Vulnerability | 0.84 | 0.81 | None yet | No |
| 2024-07-09 | CVE-2024-38080 | Microsoft Windows | Microsoft Windows Hyper-V Privilege Escalation Vulnerability | 0.07 | 0.98 | Out of scope (local) | No |
| 2024-06-13 | CVE-2024-26169 | Microsoft Windows | Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability | 0.04 | 0.70 | Out of scope (local) | Yes |
| 2024-05-14 | CVE-2024-30051 | Microsoft DWM Core Library | Microsoft DWM Core Library Privilege Escalation Vulnerability | 0.06 | 0.98 | Out of scope (local) | Yes |
| 2024-05-14 | CVE-2024-30040 | Microsoft Windows | Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability | 0.04 | 0.69 | None yet | No |
| 2024-04-30 | CVE-2024-29988 | Microsoft SmartScreen Prompt | Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability | 0.45 | 0.98 | None yet | No |
| 2024-04-23 | CVE-2022-38028 | Microsoft Windows | Microsoft Windows Print Spooler Privilege Escalation Vulnerability | 0.15 | 0.72 | Out of scope (local) | No |
| 2024-03-26 | CVE-2023-24955 | Microsoft SharePoint Server | Microsoft SharePoint Server Code Injection Vulnerability | 0.85 | 0.98 | None yet | Yes |
| 2024-03-04 | CVE-2024-21338 | Microsoft Windows | Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability | 0.60 | 0.98 | Out of scope (local) | Yes |
| 2024-02-29 | CVE-2023-29360 | Microsoft Streaming Service | Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability | 0.22 | 0.98 | Out of scope (local) | No |
| 2024-02-15 | CVE-2024-21410 | Microsoft Exchange Server | Microsoft Exchange Server Privilege Escalation Vulnerability | 0.13 | 0.71 | Out of scope (local) | No |
| 2024-02-13 | CVE-2024-21412 | Microsoft Windows | Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability | 0.99 | 0.99 | None yet | Yes |
| 2024-02-13 | CVE-2024-21351 | Microsoft Windows | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | 0.28 | 0.74 | None yet | No |
| 2024-01-10 | CVE-2023-29357 | Microsoft SharePoint Server | Microsoft SharePoint Server Privilege Escalation Vulnerability | 1.00 | 0.99 | Nuclei · Suricata | Yes |
| 2023-11-16 | CVE-2023-36584 | Microsoft Windows | Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | 0.03 | 0.51 | None yet | No |
| 2023-11-14 | CVE-2023-36036 | Microsoft Windows | Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability | 0.17 | 0.55 | Out of scope (local) | No |
| 2023-11-14 | CVE-2023-36033 | Microsoft Windows | Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability | 0.11 | 0.98 | Out of scope (local) | No |
| 2023-11-14 | CVE-2023-36025 | Microsoft Windows | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | 0.88 | 0.98 | None yet | No |
| 2023-10-10 | CVE-2023-41763 | Microsoft Skype for Business | Microsoft Skype for Business Privilege Escalation Vulnerability | 0.90 | 0.98 | Nuclei · Suricata | No |
| 2023-10-10 | CVE-2023-36563 | Microsoft WordPad | Microsoft WordPad Information Disclosure Vulnerability | 0.20 | 0.76 | None yet | No |
| 2023-10-04 | CVE-2023-28229 | Microsoft Windows CNG Key Isolation Service | Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability | 0.02 | 0.98 | Out of scope (local) | No |
| 2023-09-12 | CVE-2023-36802 | Microsoft Streaming Service Proxy | Microsoft Streaming Service Proxy Privilege Escalation Vulnerability | 0.28 | 0.98 | Out of scope (local) | No |
| 2023-09-12 | CVE-2023-36761 | Microsoft Word | Microsoft Word Information Disclosure Vulnerability | 0.20 | 0.77 | None yet | No |
| 2023-08-09 | CVE-2023-38180 | Microsoft .NET Core and Visual Studio | Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability | 0.14 | 0.98 | None yet | No |
| 2023-07-17 | CVE-2023-36884 | Microsoft Windows | Microsoft Windows Search Remote Code Execution Vulnerability | 0.99 | 0.98 | None yet | Yes |
| 2023-07-11 | CVE-2023-36874 | Microsoft Windows | Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability | 0.43 | 0.99 | Out of scope (local) | No |
| 2023-07-11 | CVE-2023-35311 | Microsoft Outlook | Microsoft Outlook Security Feature Bypass Vulnerability | 0.16 | 0.54 | None yet | No |
| 2023-07-11 | CVE-2023-32049 | Microsoft Windows | Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability | 0.04 | 0.52 | None yet | No |
| 2023-07-11 | CVE-2023-32046 | Microsoft Windows | Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability | 0.10 | 0.54 | Out of scope (local) | No |
| 2023-06-22 | CVE-2016-0165 | Microsoft Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 0.14 | 0.98 | Out of scope (local) | No |
| 2023-05-09 | CVE-2023-29336 | Microsoft Win32k | Microsoft Win32K Privilege Escalation Vulnerability | 0.41 | 0.98 | Out of scope (local) | No |
| 2023-04-11 | CVE-2023-28252 | Microsoft Windows | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | 0.49 | 0.98 | Out of scope (local) | Yes |
| 2023-04-07 | CVE-2019-1388 | Microsoft Windows | Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability | 0.09 | 0.98 | Out of scope (local) | Yes |
| 2023-03-30 | CVE-2013-3163 | Microsoft Internet Explorer | Microsoft Internet Explorer Memory Corruption Vulnerability | 0.71 | 0.98 | None yet | No |
| 2023-03-14 | CVE-2023-24880 | Microsoft Windows | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | 0.78 | 0.98 | None yet | Yes |
| 2023-03-14 | CVE-2023-23397 | Microsoft Office | Microsoft Office Outlook Privilege Escalation Vulnerability | 0.97 | 0.99 | Out of scope (local) | No |
| 2023-02-14 | CVE-2023-23376 | Microsoft Windows | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | 0.11 | 0.54 | Out of scope (local) | Yes |
| 2023-02-14 | CVE-2023-21823 | Microsoft Windows | Microsoft Windows Graphic Component Privilege Escalation Vulnerability | 0.06 | 0.98 | Out of scope (local) | No |
| 2023-02-14 | CVE-2023-21715 | Microsoft Office | Microsoft Office Publisher Security Feature Bypass Vulnerability | 0.12 | 0.55 | None yet | No |
| 2023-01-10 | CVE-2023-21674 | Microsoft Windows | Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability | 0.34 | 0.97 | Out of scope (local) | No |
| 2023-01-10 | CVE-2022-41080 | Microsoft Exchange Server | Microsoft Exchange Server Privilege Escalation Vulnerability | 0.77 | 0.98 | Out of scope (local) | Yes |
| 2022-12-13 | CVE-2022-44698 | Microsoft Defender | Microsoft Defender SmartScreen Security Feature Bypass Vulnerability | 0.76 | 0.69 | None yet | Yes |
| 2022-11-14 | CVE-2022-41049 | Microsoft Windows | Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | 0.03 | 0.97 | None yet | No |
| 2022-11-08 | CVE-2022-41128 | Microsoft Windows | Microsoft Windows Scripting Languages Remote Code Execution Vulnerability | 0.25 | 0.97 | None yet | No |
| 2022-11-08 | CVE-2022-41125 | Microsoft Windows | Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability | 0.03 | 0.51 | Out of scope (local) | No |
| 2022-11-08 | CVE-2022-41091 | Microsoft Windows | Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | 0.02 | 0.97 | None yet | Yes |
| 2022-11-08 | CVE-2022-41073 | Microsoft Windows | Microsoft Windows Print Spooler Privilege Escalation Vulnerability | 0.02 | 0.98 | Out of scope (local) | Yes |
| 2022-10-11 | CVE-2022-41033 | Microsoft Windows COM+ Event System Service | Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability | 0.02 | 0.97 | Out of scope (local) | No |
| 2022-09-30 | CVE-2022-41082 | Microsoft Exchange Server | Microsoft Exchange Server Remote Code Execution Vulnerability | 1.00 | 0.99 | None yet | Yes |
| 2022-09-30 | CVE-2022-41040 | Microsoft Exchange Server | Microsoft Exchange Server Server-Side Request Forgery Vulnerability | 1.00 | 0.99 | Nuclei · Suricata | Yes |
| 2022-09-15 | CVE-2010-2568 | Microsoft Windows | Microsoft Windows Remote Code Execution Vulnerability | 0.90 | 0.98 | Out of scope (local) | No |
| 2022-09-14 | CVE-2022-37969 | Microsoft Windows | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | 0.28 | 0.98 | Out of scope (local) | Yes |
| 2022-08-18 | CVE-2022-26923 | Microsoft Active Directory | Microsoft Active Directory Domain Services Privilege Escalation Vulnerability | 0.83 | 0.99 | Out of scope (local) | No |
| 2022-08-18 | CVE-2022-21971 | Microsoft Windows | Microsoft Windows Runtime Remote Code Execution Vulnerability | 0.54 | 0.97 | None yet | No |
| 2022-08-09 | CVE-2022-34713 | Microsoft Windows | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability | 0.68 | 0.98 | None yet | No |
| 2022-07-12 | CVE-2022-22047 | Microsoft Windows | Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability | 0.19 | 0.55 | Out of scope (local) | No |
| 2022-07-01 | CVE-2022-26925 | Microsoft Windows | Microsoft Windows LSA Spoofing Vulnerability | 0.10 | 0.53 | None yet | No |
| 2022-06-14 | CVE-2022-30190 | Microsoft Windows | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability | 0.99 | 0.99 | None yet | Yes |
| 2022-06-08 | CVE-2013-1331 | Microsoft Office | Microsoft Office Buffer Overflow Vulnerability | 0.80 | 0.70 | Out of scope (local) | No |
| 2022-06-08 | CVE-2012-4969 | Microsoft Internet Explorer | Microsoft Internet Explorer Use-After-Free Vulnerability | 0.80 | 0.98 | None yet | No |
| 2022-06-08 | CVE-2012-1889 | Microsoft XML Core Services | Microsoft XML Core Services Memory Corruption Vulnerability | 0.84 | 0.99 | None yet | No |
| 2022-06-08 | CVE-2012-0151 | Microsoft Windows | Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability | 0.88 | 0.90 | Out of scope (local) | No |
| 2022-06-08 | CVE-2010-2572 | Microsoft PowerPoint | Microsoft PowerPoint Buffer Overflow Vulnerability | 0.59 | 0.88 | Out of scope (local) | No |
| 2022-06-08 | CVE-2009-0563 | Microsoft Office | Microsoft Office Buffer Overflow Vulnerability | 0.60 | 0.98 | Out of scope (local) | No |
| 2022-06-08 | CVE-2009-0557 | Microsoft Office | Microsoft Office Object Record Corruption Vulnerability | 0.53 | 0.87 | Out of scope (local) | No |
| 2022-06-08 | CVE-2006-2492 | Microsoft Word | Microsoft Word Malformed Object Pointer Vulnerability | 0.48 | 0.62 | None yet | No |
| 2022-05-25 | CVE-2016-7256 | Microsoft Windows | Microsoft Windows Open Type Font Remote Code Execution Vulnerability | 0.65 | 0.66 | None yet | No |
| 2022-05-25 | CVE-2016-3393 | Microsoft Windows | Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability | 0.68 | 0.67 | Out of scope (local) | No |
| 2022-05-25 | CVE-2016-0034 | Microsoft Silverlight | Microsoft Silverlight Runtime Remote Code Execution Vulnerability | 0.69 | 0.98 | None yet | Yes |
| 2022-05-25 | CVE-2015-6175 | Microsoft Windows | Microsoft Windows Kernel Privilege Escalation Vulnerability | 0.05 | 0.52 | Out of scope (local) | No |
| 2022-05-25 | CVE-2015-2425 | Microsoft Internet Explorer | Microsoft Internet Explorer Memory Corruption Vulnerability | 0.45 | 0.89 | None yet | No |
| 2022-05-25 | CVE-2015-2360 | Microsoft Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 0.15 | 0.55 | None yet | No |
| 2022-05-25 | CVE-2015-1769 | Microsoft Windows | Microsoft Windows Mount Manager Privilege Escalation Vulnerability | 0.04 | 0.97 | Out of scope (local) | No |
| 2022-05-25 | CVE-2015-1671 | Microsoft Windows | Microsoft Windows Remote Code Execution Vulnerability | 0.49 | 0.63 | Out of scope (local) | No |
| 2022-05-25 | CVE-2015-0071 | Microsoft Internet Explorer | Microsoft Internet Explorer ASLR Bypass Vulnerability | 0.34 | 0.59 | None yet | No |
| 2022-05-25 | CVE-2015-0016 | Microsoft Windows | Microsoft Windows TS WebProxy Directory Traversal Vulnerability | 0.76 | 0.98 | Out of scope (local) | No |
| 2022-05-25 | CVE-2014-4148 | Microsoft Windows | Microsoft Windows Remote Code Execution Vulnerability | 0.60 | 0.64 | None yet | No |
| 2022-05-25 | CVE-2014-4123 | Microsoft Internet Explorer | Microsoft Internet Explorer Privilege Escalation Vulnerability | 0.47 | 0.80 | None yet | No |
| 2022-05-25 | CVE-2014-4077 | Microsoft Input Method Editor (IME) Japanese | Microsoft IME Japanese Privilege Escalation Vulnerability | 0.55 | 0.64 | Out of scope (local) | No |
| 2022-05-25 | CVE-2014-2817 | Microsoft Internet Explorer | Microsoft Internet Explorer Privilege Escalation Vulnerability | 0.26 | 0.57 | None yet | No |
| 2022-05-25 | CVE-2013-7331 | Microsoft Internet Explorer | Microsoft Internet Explorer Information Disclosure Vulnerability | 0.50 | 0.98 | None yet | No |
| 2022-05-25 | CVE-2013-3896 | Microsoft Silverlight | Microsoft Silverlight Information Disclosure Vulnerability | 0.68 | 0.97 | Out of scope (local) | No |
| 2022-05-25 | CVE-2013-0074 | Microsoft Silverlight | Microsoft Silverlight Double Dereference Vulnerability | 0.79 | 0.99 | Out of scope (local) | Yes |
| 2022-05-24 | CVE-2018-8611 | Microsoft Windows | Microsoft Windows Kernel Privilege Escalation Vulnerability | 0.04 | 0.98 | Out of scope (local) | No |
| 2022-05-24 | CVE-2017-8543 | Microsoft Windows | Microsoft Windows Search Remote Code Execution Vulnerability | 0.74 | 0.98 | None yet | No |
| 2022-05-24 | CVE-2017-0210 | Microsoft Internet Explorer | Microsoft Internet Explorer Privilege Escalation Vulnerability | 0.22 | 0.56 | None yet | No |
| 2022-05-24 | CVE-2017-0149 | Microsoft Internet Explorer | Microsoft Internet Explorer Memory Corruption Vulnerability | 0.29 | 0.98 | None yet | No |
| 2022-05-24 | CVE-2017-0147 | Microsoft SMBv1 server | Microsoft Windows SMBv1 Information Disclosure Vulnerability | 1.00 | 0.98 | None yet | Yes |
| 2022-05-24 | CVE-2017-0022 | Microsoft XML Core Services | Microsoft XML Core Services Information Disclosure Vulnerability | 0.18 | 0.55 | None yet | No |
| 2022-05-24 | CVE-2017-0005 | Microsoft Windows | Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability | 0.11 | 0.97 | Out of scope (local) | No |
| 2022-05-24 | CVE-2016-3351 | Microsoft Internet Explorer and Edge | Microsoft Internet Explorer and Edge Information Disclosure Vulnerability | 0.26 | 0.58 | None yet | Yes |
| 2022-05-24 | CVE-2016-3298 | Microsoft Internet Explorer | Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability | 0.33 | 0.58 | None yet | No |
| 2022-05-24 | CVE-2016-0162 | Microsoft Internet Explorer | Microsoft Internet Explorer Information Disclosure Vulnerability | 0.22 | 0.57 | None yet | No |
| 2022-05-23 | CVE-2020-1027 | Microsoft Windows | Microsoft Windows Kernel Privilege Escalation Vulnerability | 0.05 | 0.98 | Out of scope (local) | No |
| 2022-05-23 | CVE-2020-0638 | Microsoft Update Notification Manager | Microsoft Update Notification Manager Privilege Escalation Vulnerability | 0.02 | 0.97 | Out of scope (local) | Yes |
| 2022-05-23 | CVE-2019-1385 | Microsoft Windows | Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability | 0.04 | 0.98 | Out of scope (local) | Yes |
| 2022-05-23 | CVE-2019-1130 | Microsoft Windows | Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability | 0.02 | 0.97 | Out of scope (local) | Yes |
| 2022-05-23 | CVE-2019-0880 | Microsoft Windows | Microsoft Windows Privilege Escalation Vulnerability | 0.02 | 0.83 | Out of scope (local) | No |
| 2022-05-23 | CVE-2019-0703 | Microsoft Windows | Microsoft Windows SMB Information Disclosure Vulnerability | 0.09 | 0.86 | None yet | No |
| 2022-05-23 | CVE-2019-0676 | Microsoft Internet Explorer | Microsoft Internet Explorer Information Disclosure Vulnerability | 0.08 | 0.53 | None yet | No |
| 2022-05-23 | CVE-2018-8589 | Microsoft Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 0.03 | 0.52 | Out of scope (local) | No |
| 2022-05-04 | CVE-2014-4113 | Microsoft Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 0.87 | 0.98 | Out of scope (local) | No |
| 2022-05-04 | CVE-2014-0322 | Microsoft Internet Explorer | Microsoft Internet Explorer Use-After-Free Vulnerability | 0.85 | 0.99 | None yet | No |
| 2022-04-25 | CVE-2022-26904 | Microsoft Windows | Microsoft Windows User Profile Service Privilege Escalation Vulnerability | 0.17 | 0.98 | Out of scope (local) | No |
| 2022-04-25 | CVE-2022-21919 | Microsoft Windows | Microsoft Windows User Profile Service Privilege Escalation Vulnerability | 0.02 | 0.97 | Out of scope (local) | No |
| 2022-04-25 | CVE-2021-41357 | Microsoft Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 0.02 | 0.51 | Out of scope (local) | No |
| 2022-04-25 | CVE-2021-40450 | Microsoft Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 0.02 | 0.51 | Out of scope (local) | No |
| 2022-04-19 | CVE-2022-22718 | Microsoft Windows | Microsoft Windows Print Spooler Privilege Escalation Vulnerability | 0.18 | 0.98 | Out of scope (local) | No |
| 2022-04-13 | CVE-2022-24521 | Microsoft Windows | Microsoft Windows CLFS Driver Privilege Escalation Vulnerability | 0.07 | 0.98 | Out of scope (local) | Yes |
| 2022-04-13 | CVE-2015-2502 | Microsoft Internet Explorer | Microsoft Internet Explorer Memory Corruption Vulnerability | 0.51 | 0.87 | None yet | No |
| 2022-04-11 | CVE-2021-42287 | Microsoft Active Directory | Microsoft Active Directory Domain Services Privilege Escalation Vulnerability | 0.77 | 0.98 | Out of scope (local) | Yes |
| 2022-04-11 | CVE-2021-42278 | Microsoft Active Directory | Microsoft Active Directory Domain Services Privilege Escalation Vulnerability | 0.73 | 0.97 | Out of scope (local) | Yes |
| 2022-04-06 | CVE-2021-31166 | Microsoft HTTP Protocol Stack | Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability | 1.00 | 0.98 | None yet | No |
| 2022-04-06 | CVE-2017-0148 | Microsoft SMBv1 server | Microsoft SMBv1 Server Remote Code Execution Vulnerability | 0.99 | 0.99 | None yet | Yes |
| 2022-03-31 | CVE-2021-34484 | Microsoft Windows | Microsoft Windows User Profile Service Privilege Escalation Vulnerability | 0.22 | 0.99 | Out of scope (local) | No |
| 2022-03-28 | CVE-2021-38646 | Microsoft Office | Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability | 0.08 | 0.71 | None yet | Yes |
| 2022-03-28 | CVE-2021-34486 | Microsoft Windows | Microsoft Windows Event Tracing Privilege Escalation Vulnerability | 0.09 | 0.97 | Out of scope (local) | No |
| 2022-03-28 | CVE-2018-8440 | Microsoft Windows | Microsoft Windows Privilege Escalation Vulnerability | 0.19 | 0.99 | Out of scope (local) | Yes |
| 2022-03-28 | CVE-2018-8406 | Microsoft DirectX Graphics Kernel (DXGKRNL) | Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability | 0.03 | 0.97 | Out of scope (local) | Yes |
| 2022-03-28 | CVE-2018-8405 | Microsoft DirectX Graphics Kernel (DXGKRNL) | Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability | 0.03 | 0.98 | Out of scope (local) | Yes |
| 2022-03-28 | CVE-2017-0213 | Microsoft Windows | Microsoft Windows Privilege Escalation Vulnerability | 0.84 | 0.99 | Out of scope (local) | Yes |
| 2022-03-28 | CVE-2017-0059 | Microsoft Internet Explorer | Microsoft Internet Explorer Information Disclosure Vulnerability | 0.62 | 0.98 | None yet | No |
| 2022-03-28 | CVE-2017-0037 | Microsoft Edge and Internet Explorer | Microsoft Edge and Internet Explorer Type Confusion Vulnerability | 0.80 | 0.98 | None yet | No |
| 2022-03-28 | CVE-2016-7201 | Microsoft Edge | Microsoft Edge Memory Corruption Vulnerability | 0.80 | 0.98 | None yet | No |
| 2022-03-28 | CVE-2016-7200 | Microsoft Edge | Microsoft Edge Memory Corruption Vulnerability | 0.83 | 0.98 | None yet | No |
| 2022-03-28 | CVE-2016-0189 | Microsoft Internet Explorer | Microsoft Internet Explorer Memory Corruption Vulnerability | 0.94 | 0.98 | None yet | Yes |
| 2022-03-28 | CVE-2016-0151 | Microsoft Client-Server Run-time Subsystem (CSRSS) | Microsoft Windows CSRSS Security Feature Bypass Vulnerability | 0.63 | 0.98 | Out of scope (local) | Yes |
| 2022-03-28 | CVE-2016-0040 | Microsoft Windows | Microsoft Windows Kernel Privilege Escalation Vulnerability | 0.24 | 0.99 | Out of scope (local) | No |
| 2022-03-28 | CVE-2015-2426 | Microsoft Windows | Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability | 0.87 | 0.98 | None yet | No |
| 2022-03-28 | CVE-2015-2419 | Microsoft Internet Explorer | Microsoft Internet Explorer Memory Corruption Vulnerability | 0.53 | 0.99 | None yet | No |
| 2022-03-28 | CVE-2015-1770 | Microsoft Office | Microsoft Office Uninitialized Memory Use Vulnerability | 0.35 | 0.59 | None yet | No |
| 2022-03-28 | CVE-2013-3660 | Microsoft Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 0.39 | 0.98 | Out of scope (local) | No |
| 2022-03-28 | CVE-2013-2551 | Microsoft Internet Explorer | Microsoft Internet Explorer Use-After-Free Vulnerability | 0.74 | 0.98 | None yet | Yes |
| 2022-03-28 | CVE-2012-2539 | Microsoft Word | Microsoft Word Remote Code Execution Vulnerability | 0.53 | 0.87 | Out of scope (local) | No |
| 2022-03-28 | CVE-2011-2005 | Microsoft Ancillary Function Driver (afd.sys) | Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability | 0.32 | 0.98 | Out of scope (local) | No |
| 2022-03-28 | CVE-2010-4398 | Microsoft Windows | Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability | 0.09 | 0.98 | Out of scope (local) | No |
| 2022-03-25 | CVE-2022-21999 | Microsoft Windows | Microsoft Windows Print Spooler Privilege Escalation Vulnerability | 0.41 | 0.99 | Out of scope (local) | Yes |
| 2022-03-25 | CVE-2019-0903 | Microsoft Graphics Device Interface (GDI) | Microsoft GDI Remote Code Execution Vulnerability | 0.22 | 0.98 | None yet | No |
| 2022-03-25 | CVE-2018-8414 | Microsoft Windows | Microsoft Windows Shell Remote Code Execution Vulnerability | 0.73 | 0.98 | None yet | No |
| 2022-03-25 | CVE-2018-8373 | Microsoft Internet Explorer Scripting Engine | Microsoft Scripting Engine Memory Corruption Vulnerability | 0.62 | 0.98 | None yet | No |
| 2022-03-25 | CVE-2017-0146 | Microsoft Windows | Microsoft Windows SMB Remote Code Execution Vulnerability | 0.90 | 0.98 | None yet | Yes |
| 2022-03-25 | CVE-2014-6332 | Microsoft Windows | Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability | 0.95 | 0.99 | None yet | No |
| 2022-03-25 | CVE-2014-6324 | Microsoft Kerberos Key Distribution Center (KDC) | Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability | 0.87 | 0.99 | None yet | No |
| 2022-03-15 | CVE-2019-1405 | Microsoft Windows | Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability | 0.30 | 0.98 | Out of scope (local) | Yes |
| 2022-03-15 | CVE-2019-1322 | Microsoft Windows | Microsoft Windows Privilege Escalation Vulnerability | 0.19 | 0.97 | Out of scope (local) | Yes |
| 2022-03-15 | CVE-2019-1315 | Microsoft Windows | Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability | 0.03 | 0.97 | Out of scope (local) | Yes |
| 2022-03-15 | CVE-2019-1253 | Microsoft Windows | Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability | 0.12 | 0.98 | Out of scope (local) | Yes |
| 2022-03-15 | CVE-2019-1132 | Microsoft Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 0.10 | 0.98 | Out of scope (local) | No |
| 2022-03-15 | CVE-2019-1129 | Microsoft Windows | Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability | 0.02 | 0.97 | Out of scope (local) | Yes |
| 2022-03-15 | CVE-2019-1069 | Microsoft Task Scheduler | Microsoft Task Scheduler Privilege Escalation Vulnerability | 0.06 | 0.97 | Out of scope (local) | Yes |
| 2022-03-15 | CVE-2019-1064 | Microsoft Windows | Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability | 0.07 | 0.97 | Out of scope (local) | Yes |
| 2022-03-15 | CVE-2019-0841 | Microsoft Windows | Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability | 0.41 | 0.98 | Out of scope (local) | Yes |
| 2022-03-15 | CVE-2019-0543 | Microsoft Windows | Microsoft Windows Privilege Escalation Vulnerability | 0.05 | 0.98 | Out of scope (local) | Yes |
| 2022-03-15 | CVE-2018-8120 | Microsoft Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 0.73 | 0.99 | Out of scope (local) | Yes |
| 2022-03-15 | CVE-2017-0101 | Microsoft Windows | Microsoft Windows Transaction Manager Privilege Escalation Vulnerability | 0.57 | 0.99 | Out of scope (local) | Yes |
| 2022-03-15 | CVE-2016-3309 | Microsoft Windows | Microsoft Windows Kernel Privilege Escalation Vulnerability | 0.20 | 0.98 | Out of scope (local) | Yes |
| 2022-03-15 | CVE-2015-2546 | Microsoft Win32k | Microsoft Win32k Memory Corruption Vulnerability | 0.10 | 0.98 | Out of scope (local) | Yes |
| 2022-03-03 | CVE-2021-41379 | Microsoft Windows | Microsoft Windows Installer Privilege Escalation Vulnerability | 0.19 | 0.98 | Out of scope (local) | Yes |
| 2022-03-03 | CVE-2019-1297 | Microsoft Excel | Microsoft Excel Remote Code Execution Vulnerability | 0.22 | 0.99 | None yet | No |
| 2022-03-03 | CVE-2018-8581 | Microsoft Exchange Server | Microsoft Exchange Server Privilege Escalation Vulnerability | 0.28 | 0.98 | None yet | Yes |
| 2022-03-03 | CVE-2017-8540 | Microsoft Malware Protection Engine | Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability | 0.72 | 0.98 | Out of scope (local) | No |
| 2022-03-03 | CVE-2017-11826 | Microsoft Office | Microsoft Office Remote Code Execution Vulnerability | 0.81 | 0.98 | Out of scope (local) | No |
| 2022-03-03 | CVE-2017-0261 | Microsoft Office | Microsoft Office Use-After-Free Vulnerability | 0.78 | 0.98 | Out of scope (local) | No |
| 2022-03-03 | CVE-2017-0001 | Microsoft Graphics Device Interface (GDI) | Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability | 0.03 | 0.98 | Out of scope (local) | No |
| 2022-03-03 | CVE-2016-7262 | Microsoft Excel | Microsoft Office Security Feature Bypass Vulnerability | 0.58 | 0.77 | Out of scope (local) | No |
| 2022-03-03 | CVE-2016-7193 | Microsoft Office | Microsoft Office Memory Corruption Vulnerability | 0.58 | 0.65 | Out of scope (local) | No |
| 2022-03-03 | CVE-2016-0099 | Microsoft Windows | Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability | 0.37 | 0.99 | Out of scope (local) | Yes |
| 2022-03-03 | CVE-2015-2545 | Microsoft Office | Microsoft Office Malformed EPS File Vulnerability | 0.86 | 0.98 | Out of scope (local) | No |
| 2022-03-03 | CVE-2015-2424 | Microsoft PowerPoint | Microsoft PowerPoint Memory Corruption Vulnerability | 0.40 | 0.60 | None yet | No |
| 2022-03-03 | CVE-2015-2387 | Microsoft ATM Font Driver | Microsoft ATM Font Driver Privilege Escalation Vulnerability | 0.35 | 0.60 | Out of scope (local) | No |
| 2022-03-03 | CVE-2015-1701 | Microsoft Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 0.56 | 0.99 | Out of scope (local) | Yes |
| 2022-03-03 | CVE-2015-1642 | Microsoft Office | Microsoft Office Memory Corruption Vulnerability | 0.53 | 0.63 | Out of scope (local) | No |
| 2022-03-03 | CVE-2014-4114 | Microsoft Windows | Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability | 0.82 | 0.98 | Out of scope (local) | No |
| 2022-03-03 | CVE-2013-5065 | Microsoft Windows | Microsoft Windows Kernel Privilege Escalation Vulnerability | 0.35 | 0.98 | Out of scope (local) | No |
| 2022-03-03 | CVE-2013-3897 | Microsoft Internet Explorer | Microsoft Internet Explorer Use-After-Free Vulnerability | 0.77 | 0.98 | None yet | No |
| 2022-03-03 | CVE-2013-1347 | Microsoft Internet Explorer | Microsoft Internet Explorer Remote Code Execution Vulnerability | 0.78 | 0.98 | None yet | No |
| 2022-03-03 | CVE-2012-1856 | Microsoft Office | Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability | 0.72 | 0.96 | None yet | No |
| 2022-03-03 | CVE-2011-1889 | Microsoft Forefront Threat Management Gateway (TMG) | Microsoft Forefront TMG Remote Code Execution Vulnerability | 0.49 | 0.87 | None yet | No |
| 2022-03-03 | CVE-2010-3333 | Microsoft Office | Microsoft Office Stack-based Buffer Overflow Vulnerability | 0.89 | 0.98 | Out of scope (local) | No |
| 2022-03-03 | CVE-2010-0232 | Microsoft Windows | Microsoft Windows Kernel Exception Handler Vulnerability | 0.29 | 0.99 | Out of scope (local) | No |
| 2022-03-03 | CVE-2009-3129 | Microsoft Excel | Microsoft Excel Featheader Record Memory Corruption Vulnerability | 0.84 | 0.98 | Out of scope (local) | No |
| 2022-03-03 | CVE-2009-1123 | Microsoft Windows | Microsoft Windows Improper Input Validation Vulnerability | 0.05 | 0.84 | Out of scope (local) | No |
| 2022-03-03 | CVE-2004-0210 | Microsoft Windows | Microsoft Windows Privilege Escalation Vulnerability | 0.07 | 0.99 | Out of scope (local) | No |
| 2022-03-03 | CVE-2002-0367 | Microsoft Windows | Microsoft Windows Privilege Escalation Vulnerability | 0.05 | 0.98 | Out of scope (local) | No |
| 2022-02-25 | CVE-2017-8570 | Microsoft Office | Microsoft Office Remote Code Execution Vulnerability | 0.90 | 0.99 | Out of scope (local) | No |
| 2022-02-25 | CVE-2017-0222 | Microsoft Internet Explorer | Microsoft Internet Explorer Remote Code Execution Vulnerability | 0.30 | 0.78 | None yet | No |
| 2022-02-25 | CVE-2014-6352 | Microsoft Windows | Microsoft Windows Code Injection Vulnerability | 0.77 | 0.98 | Out of scope (local) | No |
| 2022-02-15 | CVE-2019-0752 | Microsoft Internet Explorer | Microsoft Internet Explorer Type Confusion Vulnerability | 0.82 | 0.98 | None yet | Yes |
| 2022-02-15 | CVE-2018-8174 | Microsoft Windows | Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability | 0.88 | 0.99 | None yet | Yes |
| 2022-02-15 | CVE-2014-1761 | Microsoft Word | Microsoft Word Memory Corruption Vulnerability | 0.78 | 0.99 | Out of scope (local) | No |
| 2022-02-15 | CVE-2013-3906 | Microsoft Graphics Component | Microsoft Graphics Component Memory Corruption Vulnerability | 0.85 | 0.99 | Out of scope (local) | No |
| 2022-02-10 | CVE-2021-36934 | Microsoft Windows | Microsoft Windows SAM Local Privilege Escalation Vulnerability | 0.67 | 0.97 | Out of scope (local) | No |
| 2022-02-10 | CVE-2020-0796 | Microsoft SMBv3 | Microsoft SMBv3 Remote Code Execution Vulnerability | 1.00 | 0.98 | Nuclei · Suricata | Yes |
| 2022-02-10 | CVE-2017-8464 | Microsoft Windows | Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability | 0.90 | 0.98 | None yet | No |
| 2022-02-10 | CVE-2017-0263 | Microsoft Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 0.10 | 0.98 | Out of scope (local) | No |
| 2022-02-10 | CVE-2017-0262 | Microsoft Office | Microsoft Office Remote Code Execution Vulnerability | 0.81 | 0.98 | Out of scope (local) | No |
| 2022-02-10 | CVE-2017-0145 | Microsoft SMBv1 | Microsoft SMBv1 Remote Code Execution Vulnerability | 0.90 | 0.98 | None yet | Yes |
| 2022-02-10 | CVE-2017-0144 | Microsoft SMBv1 | Microsoft SMBv1 Remote Code Execution Vulnerability | 0.99 | 0.98 | None yet | Yes |
| 2022-02-10 | CVE-2015-1635 | Microsoft HTTP.sys | Microsoft HTTP.sys Remote Code Execution Vulnerability | 1.00 | 0.99 | Nuclei · Suricata | No |
| 2022-02-04 | CVE-2022-21882 | Microsoft Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 0.59 | 0.98 | Out of scope (local) | Yes |
| 2022-01-28 | CVE-2020-0787 | Microsoft Windows | Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability | 0.43 | 0.98 | Out of scope (local) | Yes |
| 2022-01-28 | CVE-2014-1776 | Microsoft Internet Explorer | Microsoft Internet Explorer Memory Corruption Vulnerability | 0.83 | 0.99 | None yet | No |
| 2022-01-21 | CVE-2018-8453 | Microsoft Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 0.70 | 0.98 | Out of scope (local) | Yes |
| 2022-01-18 | CVE-2021-33766 | Microsoft Exchange Server | Microsoft Exchange Server Information Disclosure | 0.98 | 0.99 | Nuclei · Suricata | No |
| 2022-01-10 | CVE-2019-1458 | Microsoft Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 0.74 | 0.98 | Out of scope (local) | Yes |
| 2022-01-10 | CVE-2013-3900 | Microsoft WinVerifyTrust function | Microsoft WinVerifyTrust function Remote Code Execution | 0.45 | 0.97 | None yet | No |
| 2021-12-15 | CVE-2021-43890 | Microsoft Windows | Microsoft Windows AppX Installer Spoofing Vulnerability | 0.11 | 0.76 | None yet | Yes |
| 2021-11-17 | CVE-2021-42321 | Microsoft Exchange | Microsoft Exchange Server Remote Code Execution Vulnerability | 0.92 | 0.98 | None yet | Yes |
| 2021-11-17 | CVE-2021-42292 | Microsoft Office | Microsoft Excel Security Feature Bypass | 0.43 | 0.98 | Out of scope (local) | No |
| 2021-11-17 | CVE-2021-40449 | Microsoft Windows | Microsoft Windows Win32k Privilege Escalation Vulnerability | 0.82 | 0.98 | Out of scope (local) | Yes |
| 2021-11-03 | CVE-2021-40444 | Microsoft MSHTML | Microsoft MSHTML Remote Code Execution Vulnerability | 0.98 | 0.98 | None yet | Yes |
| 2021-11-03 | CVE-2021-38649 | Microsoft Open Management Infrastructure (OMI) | Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | 0.03 | 0.52 | Out of scope (local) | No |
| 2021-11-03 | CVE-2021-38648 | Microsoft Open Management Infrastructure (OMI) | Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | 0.11 | 0.99 | Out of scope (local) | No |
| 2021-11-03 | CVE-2021-38647 | Microsoft Open Management Infrastructure (OMI) | Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability | 1.00 | 0.98 | Nuclei · Suricata | Yes |
| 2021-11-03 | CVE-2021-38645 | Microsoft Open Management Infrastructure (OMI) | Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | 0.03 | 0.52 | Out of scope (local) | No |
| 2021-11-03 | CVE-2021-36955 | Microsoft Windows | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | 0.04 | 0.98 | Out of scope (local) | Yes |
| 2021-11-03 | CVE-2021-36948 | Microsoft Windows | Microsoft Windows Update Medic Service Privilege Escalation Vulnerability | 0.23 | 0.57 | Out of scope (local) | No |
| 2021-11-03 | CVE-2021-36942 | Microsoft Windows | Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability | 0.66 | 0.98 | None yet | Yes |
| 2021-11-03 | CVE-2021-34527 | Microsoft Windows | Microsoft Windows Print Spooler Remote Code Execution Vulnerability | 1.00 | 0.98 | None yet | Yes |
| 2021-11-03 | CVE-2021-34523 | Microsoft Exchange Server | Microsoft Exchange Server Privilege Escalation Vulnerability | 1.00 | 0.98 | Out of scope (local) | Yes |
| 2021-11-03 | CVE-2021-34473 | Microsoft Exchange Server | Microsoft Exchange Server Remote Code Execution Vulnerability | 1.00 | 0.99 | Nuclei · Suricata | Yes |
| 2021-11-03 | CVE-2021-34448 | Microsoft Windows | Microsoft Windows Scripting Engine Memory Corruption Vulnerability | 0.40 | 0.61 | None yet | No |
| 2021-11-03 | CVE-2021-33771 | Microsoft Windows | Microsoft Windows Kernel Privilege Escalation Vulnerability | 0.10 | 0.54 | Out of scope (local) | No |
| 2021-11-03 | CVE-2021-33742 | Microsoft Windows | Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability | 0.59 | 0.98 | None yet | No |
| 2021-11-03 | CVE-2021-33739 | Microsoft Windows | Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability | 0.07 | 0.97 | Out of scope (local) | No |
| 2021-11-03 | CVE-2021-31979 | Microsoft Windows | Microsoft Windows Kernel Privilege Escalation Vulnerability | 0.05 | 0.52 | Out of scope (local) | No |
| 2021-11-03 | CVE-2021-31956 | Microsoft Windows | Microsoft Windows NTFS Privilege Escalation Vulnerability | 0.22 | 0.97 | Out of scope (local) | No |
| 2021-11-03 | CVE-2021-31955 | Microsoft Windows | Microsoft Windows Kernel Information Disclosure Vulnerability | 0.81 | 0.98 | None yet | No |
| 2021-11-03 | CVE-2021-31207 | Microsoft Exchange Server | Microsoft Exchange Server Security Feature Bypass Vulnerability | 1.00 | 0.98 | None yet | Yes |
| 2021-11-03 | CVE-2021-31201 | Microsoft Enhanced Cryptographic Provider | Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability | 0.03 | 0.52 | Out of scope (local) | No |
| 2021-11-03 | CVE-2021-31199 | Microsoft Enhanced Cryptographic Provider | Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability | 0.03 | 0.51 | Out of scope (local) | No |
| 2021-11-03 | CVE-2021-28310 | Microsoft Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 0.08 | 0.97 | Out of scope (local) | No |
| 2021-11-03 | CVE-2021-27085 | Microsoft Internet Explorer | Microsoft Internet Explorer Remote Code Execution Vulnerability | 0.05 | 0.52 | None yet | No |
| 2021-11-03 | CVE-2021-27065 | Microsoft Exchange Server | Microsoft Exchange Server Remote Code Execution Vulnerability | 1.00 | 0.99 | None yet | Yes |
| 2021-11-03 | CVE-2021-27059 | Microsoft Office | Microsoft Office Remote Code Execution Vulnerability | 0.06 | 0.52 | None yet | No |
| 2021-11-03 | CVE-2021-26858 | Microsoft Exchange Server | Microsoft Exchange Server Remote Code Execution Vulnerability | 0.94 | 0.98 | None yet | Yes |
| 2021-11-03 | CVE-2021-26857 | Microsoft Exchange Server | Microsoft Exchange Server Remote Code Execution Vulnerability | 0.96 | 0.98 | None yet | Yes |
| 2021-11-03 | CVE-2021-26855 | Microsoft Exchange Server | Microsoft Exchange Server Remote Code Execution Vulnerability | 1.00 | 0.99 | Nuclei · Suricata | Yes |
| 2021-11-03 | CVE-2021-26411 | Microsoft Internet Explorer | Microsoft Internet Explorer Memory Corruption Vulnerability | 0.82 | 0.98 | None yet | Yes |
| 2021-11-03 | CVE-2021-1732 | Microsoft Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 0.78 | 0.98 | Out of scope (local) | Yes |
| 2021-11-03 | CVE-2021-1675 | Microsoft Windows | Microsoft Windows Print Spooler Remote Code Execution Vulnerability | 0.85 | 0.98 | None yet | Yes |
| 2021-11-03 | CVE-2021-1647 | Microsoft Defender | Microsoft Defender Remote Code Execution Vulnerability | 0.40 | 0.98 | None yet | No |
| 2021-11-03 | CVE-2020-17144 | Microsoft Exchange Server | Microsoft Exchange Server Remote Code Execution Vulnerability | 0.37 | 0.98 | None yet | No |
| 2021-11-03 | CVE-2020-17087 | Microsoft Windows | Microsoft Windows Kernel Privilege Escalation Vulnerability | 0.05 | 0.97 | Out of scope (local) | No |
| 2021-11-03 | CVE-2020-1472 | Microsoft Netlogon | Microsoft Netlogon Privilege Escalation Vulnerability | 0.99 | 0.98 | Out of scope (local) | Yes |
| 2021-11-03 | CVE-2020-1464 | Microsoft Windows | Microsoft Windows Spoofing Vulnerability | 0.39 | 0.75 | None yet | No |
| 2021-11-03 | CVE-2020-1380 | Microsoft Internet Explorer | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | 0.24 | 0.98 | None yet | No |
| 2021-11-03 | CVE-2020-1350 | Microsoft Windows | Microsoft Windows DNS Server Remote Code Execution Vulnerability | 0.97 | 0.98 | None yet | No |
| 2021-11-03 | CVE-2020-1147 | Microsoft .NET Framework, SharePoint, Visual Studio | Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability | 0.96 | 0.99 | Nuclei · Suricata | No |
| 2021-11-03 | CVE-2020-1054 | Microsoft Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 0.54 | 0.98 | Out of scope (local) | No |
| 2021-11-03 | CVE-2020-1040 | Microsoft Hyper-V RemoteFX | Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability | 0.07 | 0.93 | None yet | No |
| 2021-11-03 | CVE-2020-1020 | Microsoft Windows | Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability | 0.65 | 0.98 | None yet | No |
| 2021-11-03 | CVE-2020-0986 | Microsoft Windows | Microsoft Windows Kernel Privilege Escalation Vulnerability | 0.16 | 0.98 | Out of scope (local) | No |
| 2021-11-03 | CVE-2020-0968 | Microsoft Internet Explorer | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | 0.31 | 0.74 | None yet | Yes |
| 2021-11-03 | CVE-2020-0938 | Microsoft Windows | Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability | 0.69 | 0.98 | Out of scope (local) | No |
| 2021-11-03 | CVE-2020-0878 | Microsoft Edge and Internet Explorer | Microsoft Edge and Internet Explorer Memory Corruption Vulnerability | 0.03 | 0.52 | None yet | Yes |
| 2021-11-03 | CVE-2020-0688 | Microsoft Exchange Server | Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability | 1.00 | 0.98 | None yet | Yes |
| 2021-11-03 | CVE-2020-0683 | Microsoft Windows | Microsoft Windows Installer Privilege Escalation Vulnerability | 0.08 | 0.98 | Out of scope (local) | No |
| 2021-11-03 | CVE-2020-0674 | Microsoft Internet Explorer | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | 0.87 | 0.98 | None yet | No |
| 2021-11-03 | CVE-2020-0646 | Microsoft .NET Framework | Microsoft .NET Framework Remote Code Execution Vulnerability | 0.99 | 0.99 | None yet | No |
| 2021-11-03 | CVE-2020-0601 | Microsoft Windows | Microsoft Windows CryptoAPI Spoofing Vulnerability | 0.89 | 0.99 | None yet | No |
| 2021-11-03 | CVE-2019-1429 | Microsoft Internet Explorer | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | 0.77 | 0.99 | None yet | No |
| 2021-11-03 | CVE-2019-1367 | Microsoft Internet Explorer | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | 0.52 | 0.98 | None yet | Yes |
| 2021-11-03 | CVE-2019-1215 | Microsoft Windows | Microsoft Windows Privilege Escalation Vulnerability | 0.19 | 0.99 | Out of scope (local) | Yes |
| 2021-11-03 | CVE-2019-1214 | Microsoft Windows | Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability | 0.01 | 0.52 | Out of scope (local) | No |
| 2021-11-03 | CVE-2019-0863 | Microsoft Windows | Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability | 0.05 | 0.98 | Out of scope (local) | No |
| 2021-11-03 | CVE-2019-0859 | Microsoft Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 0.04 | 0.98 | Out of scope (local) | Yes |
| 2021-11-03 | CVE-2019-0808 | Microsoft Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 0.53 | 0.99 | Out of scope (local) | No |
| 2021-11-03 | CVE-2019-0803 | Microsoft Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 0.45 | 0.97 | Out of scope (local) | Yes |
| 2021-11-03 | CVE-2019-0797 | Microsoft Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 0.02 | 0.98 | Out of scope (local) | No |
| 2021-11-03 | CVE-2019-0708 | Microsoft Remote Desktop Services | Microsoft Remote Desktop Services Remote Code Execution Vulnerability | 1.00 | 0.99 | None yet | Yes |
| 2021-11-03 | CVE-2019-0604 | Microsoft SharePoint | Microsoft SharePoint Remote Code Execution Vulnerability | 1.00 | 0.98 | None yet | Yes |
| 2021-11-03 | CVE-2019-0541 | Microsoft MSHTML | Microsoft MSHTML Remote Code Execution Vulnerability | 0.53 | 0.98 | None yet | No |
| 2021-11-03 | CVE-2018-8653 | Microsoft Internet Explorer | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | 0.30 | 0.77 | None yet | No |
| 2021-11-03 | CVE-2018-0802 | Microsoft Office | Microsoft Office Memory Corruption Vulnerability | 0.93 | 0.98 | Out of scope (local) | Yes |
| 2021-11-03 | CVE-2018-0798 | Microsoft Office | Microsoft Office Memory Corruption Vulnerability | 0.95 | 0.98 | None yet | No |
| 2021-11-03 | CVE-2017-8759 | Microsoft .NET Framework | Microsoft .NET Framework Remote Code Execution Vulnerability | 0.89 | 0.98 | Out of scope (local) | No |
| 2021-11-03 | CVE-2017-7269 | Microsoft Internet Information Services (IIS) | Microsoft Windows Server Buffer Overflow Vulnerability | 1.00 | 0.98 | Nuclei · Suricata | No |
| 2021-11-03 | CVE-2017-11882 | Microsoft Office | Microsoft Office Memory Corruption Vulnerability | 1.00 | 0.99 | Out of scope (local) | Yes |
| 2021-11-03 | CVE-2017-11774 | Microsoft Office | Microsoft Office Outlook Security Feature Bypass Vulnerability | 0.60 | 0.98 | Out of scope (local) | No |
| 2021-11-03 | CVE-2017-0199 | Microsoft Office and WordPad | Microsoft Office and WordPad Remote Code Execution Vulnerability | 0.99 | 0.99 | Out of scope (local) | Yes |
| 2021-11-03 | CVE-2017-0143 | Microsoft Windows | Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability | 0.93 | 0.98 | None yet | Yes |
| 2021-11-03 | CVE-2016-7255 | Microsoft Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 0.81 | 0.98 | Out of scope (local) | Yes |
| 2021-11-03 | CVE-2016-3235 | Microsoft Office | Microsoft Office OLE DLL Side Loading Vulnerability | 0.43 | 0.97 | Out of scope (local) | No |
| 2021-11-03 | CVE-2016-0185 | Microsoft Windows | Microsoft Windows Media Center Remote Code Execution Vulnerability | 0.70 | 0.98 | Out of scope (local) | No |
| 2021-11-03 | CVE-2016-0167 | Microsoft Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 0.06 | 0.98 | Out of scope (local) | Yes |
| 2021-11-03 | CVE-2015-1641 | Microsoft Office | Microsoft Office Memory Corruption Vulnerability | 0.97 | 0.98 | Out of scope (local) | No |
| 2021-11-03 | CVE-2014-1812 | Microsoft Windows | Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability | 0.65 | 0.98 | None yet | Yes |
| 2021-11-03 | CVE-2012-0158 | Microsoft MSCOMCTL.OCX | Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability | 1.00 | 0.98 | None yet | Yes |