Microsoft: known exploited vulnerabilities
Entries389No. 1
Ransomware-linked117
Products71
Latest2026-09-25
Added per year
By product
174
36
29
25
17
10
5
5
4
4
3
3
3
3
2
Entries
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2026-65660 | Microsoft SharePoint | 2026-09-25 | 2.1% | Unknown |
| CVE-2026-85880 | Microsoft Windows | 2026-09-08 | 3.6% | Unknown |
| CVE-2026-81963 | Microsoft Windows | 2026-09-08 | 0.3% | Unknown |
| CVE-2019-1068 | Microsoft SQL Server | 2026-08-26 | 57.2% | Unknown |
| CVE-2026-55040 | Microsoft SharePoint | 2026-08-18 | 69.5% | Unknown |
| CVE-2026-33824 | Microsoft Internet Key Exchange (IKE) Service Extensions | 2026-08-18 | 1.6% | Unknown |
| CVE-2026-68820 | Microsoft Windows Ancillary Function Driver for WinSock | 2026-08-11 | 0.3% | Unknown |
| CVE-2026-50522 | Microsoft SharePoint | 2026-07-22 | 3.0% | Unknown |
| CVE-2026-58644 | Microsoft SharePoint | 2026-07-16 | 15.8% | Unknown |
| CVE-2026-56164 | Microsoft SharePoint Server | 2026-07-14 | 1.0% | Unknown |
| CVE-2026-56155 | Microsoft Active Directory Federation Services | 2026-07-14 | 0.3% | Unknown |
| CVE-2026-45659 | Microsoft SharePoint Server | 2026-07-01 | 2.7% | Known |
| CVE-2026-45498 | Microsoft Defender | 2026-05-20 | 1.2% | Unknown |
| CVE-2026-41091 | Microsoft Defender | 2026-05-20 | 0.4% | Unknown |
| CVE-2010-0806 | Microsoft Internet Explorer | 2026-05-20 | 82.2% | Unknown |
| CVE-2010-0249 | Microsoft Internet Explorer | 2026-05-20 | 91.9% | Unknown |
| CVE-2009-1537 | Microsoft DirectX | 2026-05-20 | 51.2% | Unknown |
| CVE-2008-4250 | Microsoft Windows | 2026-05-20 | 98.7% | Unknown |
| CVE-2026-42897 | Microsoft Microsoft | 2026-05-15 | 0.5% | Unknown |
| CVE-2026-32202 | Microsoft Windows | 2026-04-28 | 4.9% | Unknown |
| CVE-2026-33825 | Microsoft Defender | 2026-04-22 | 0.3% | Known |
| CVE-2026-32201 | Microsoft SharePoint Server | 2026-04-14 | 43.3% | Unknown |
| CVE-2009-0238 | Microsoft Office | 2026-04-14 | 43.2% | Unknown |
| CVE-2025-60710 | Microsoft Windows | 2026-04-13 | 4.5% | Known |
| CVE-2023-36424 | Microsoft Windows | 2026-04-13 | 12.1% | Unknown |
| CVE-2023-21529 | Microsoft Exchange Server | 2026-04-13 | 59.2% | Known |
| CVE-2012-1854 | Microsoft Visual Basic for Applications (VBA) | 2026-04-13 | 21.0% | Unknown |
| CVE-2026-20963 | Microsoft SharePoint | 2026-03-18 | 29.5% | Unknown |
| CVE-2008-0015 | Microsoft Windows | 2026-02-17 | 76.5% | Unknown |
| CVE-2024-43468 | Microsoft Configuration Manager | 2026-02-12 | 81.0% | Unknown |
| CVE-2026-21533 | Microsoft Windows | 2026-02-10 | 4.1% | Unknown |
| CVE-2026-21525 | Microsoft Windows | 2026-02-10 | 4.8% | Unknown |
| CVE-2026-21519 | Microsoft Windows | 2026-02-10 | 2.4% | Unknown |
| CVE-2026-21514 | Microsoft Office | 2026-02-10 | 1.6% | Unknown |
| CVE-2026-21513 | Microsoft Windows | 2026-02-10 | 15.8% | Unknown |
| CVE-2026-21510 | Microsoft Windows | 2026-02-10 | 24.5% | Unknown |
| CVE-2026-21509 | Microsoft Office | 2026-01-26 | 70.7% | Unknown |
| CVE-2026-20805 | Microsoft Windows | 2026-01-13 | 7.2% | Unknown |
| CVE-2009-0556 | Microsoft Office | 2026-01-07 | 67.3% | Unknown |
| CVE-2025-62221 | Microsoft Windows | 2025-12-09 | 2.5% | Unknown |
| CVE-2025-62215 | Microsoft Windows | 2025-11-12 | 5.9% | Unknown |
| CVE-2025-59287 | Microsoft Windows | 2025-10-24 | 99.9% | Unknown |
| CVE-2025-33073 | Microsoft Windows | 2025-10-20 | 82.6% | Unknown |
| CVE-2025-59230 | Microsoft Windows | 2025-10-14 | 2.6% | Unknown |
| CVE-2025-24990 | Microsoft Windows | 2025-10-14 | 6.3% | Unknown |
| CVE-2021-43226 | Microsoft Windows | 2025-10-06 | 3.2% | Known |
| CVE-2013-3918 | Microsoft Windows | 2025-10-06 | 73.6% | Unknown |
| CVE-2011-3402 | Microsoft Windows | 2025-10-06 | 78.1% | Unknown |
| CVE-2010-3962 | Microsoft Internet Explorer | 2025-10-06 | 96.8% | Unknown |
| CVE-2013-3893 | Microsoft Internet Explorer | 2025-08-12 | 87.5% | Unknown |
| CVE-2007-0671 | Microsoft Office | 2025-08-12 | 43.2% | Unknown |
| CVE-2025-49706 | Microsoft SharePoint | 2025-07-22 | 99.0% | Known |
| CVE-2025-49704 | Microsoft SharePoint | 2025-07-22 | 99.9% | Known |
| CVE-2025-53770 | Microsoft SharePoint | 2025-07-20 | 99.9% | Known |
| CVE-2025-33053 | Microsoft Windows | 2025-06-10 | 87.0% | Unknown |
| CVE-2025-32709 | Microsoft Windows | 2025-05-13 | 2.1% | Unknown |
| CVE-2025-32706 | Microsoft Windows | 2025-05-13 | 2.3% | Unknown |
| CVE-2025-32701 | Microsoft Windows | 2025-05-13 | 1.4% | Unknown |
| CVE-2025-30400 | Microsoft Windows | 2025-05-13 | 1.9% | Unknown |
| CVE-2025-30397 | Microsoft Windows | 2025-05-13 | 26.8% | Unknown |
| CVE-2025-24054 | Microsoft Windows | 2025-04-17 | 58.9% | Unknown |
| CVE-2025-29824 | Microsoft Windows | 2025-04-08 | 13.9% | Known |
| CVE-2025-26633 | Microsoft Windows | 2025-03-11 | 30.3% | Known |
| CVE-2025-24993 | Microsoft Windows | 2025-03-11 | 2.2% | Unknown |
| CVE-2025-24991 | Microsoft Windows | 2025-03-11 | 2.0% | Unknown |
| CVE-2025-24985 | Microsoft Windows | 2025-03-11 | 3.9% | Unknown |
| CVE-2025-24984 | Microsoft Windows | 2025-03-11 | 1.9% | Unknown |
| CVE-2025-24983 | Microsoft Windows | 2025-03-11 | 1.3% | Unknown |
| CVE-2018-8639 | Microsoft Windows | 2025-03-03 | 22.1% | Known |
| CVE-2024-49035 | Microsoft Partner Center | 2025-02-25 | 1.3% | Unknown |
| CVE-2025-24989 | Microsoft Power Pages | 2025-02-21 | 1.6% | Unknown |
| CVE-2025-21418 | Microsoft Windows | 2025-02-11 | 1.5% | Unknown |
| CVE-2025-21391 | Microsoft Windows | 2025-02-11 | 2.3% | Unknown |
| CVE-2024-21413 | Microsoft Office Outlook | 2025-02-06 | 94.6% | Unknown |
| CVE-2024-29059 | Microsoft .NET Framework | 2025-02-04 | 98.6% | Unknown |
| CVE-2025-21335 | Microsoft Windows | 2025-01-14 | 1.3% | Unknown |
| CVE-2025-21334 | Microsoft Windows | 2025-01-14 | 1.5% | Unknown |
| CVE-2025-21333 | Microsoft Windows | 2025-01-14 | 9.9% | Unknown |
| CVE-2024-35250 | Microsoft Windows | 2024-12-16 | 25.2% | Unknown |
| CVE-2024-49138 | Microsoft Windows | 2024-12-10 | 26.2% | Unknown |
| CVE-2024-49039 | Microsoft Windows | 2024-11-12 | 14.1% | Known |
| CVE-2024-43451 | Microsoft Windows | 2024-11-12 | 84.1% | Unknown |
| CVE-2024-38094 | Microsoft SharePoint | 2024-10-22 | 50.8% | Known |
| CVE-2024-30088 | Microsoft Windows | 2024-10-15 | 68.2% | Known |
| CVE-2024-43573 | Microsoft Windows | 2024-10-08 | 46.1% | Unknown |
| CVE-2024-43572 | Microsoft Windows | 2024-10-08 | 66.6% | Unknown |
| CVE-2020-0618 | Microsoft SQL Server | 2024-09-18 | 99.0% | Known |
| CVE-2024-43461 | Microsoft Windows | 2024-09-16 | 54.4% | Unknown |
| CVE-2024-38226 | Microsoft Publisher | 2024-09-10 | 2.6% | Unknown |
| CVE-2024-38217 | Microsoft Windows | 2024-09-10 | 10.0% | Unknown |
| CVE-2024-38014 | Microsoft Windows | 2024-09-10 | 6.2% | Unknown |
| CVE-2021-31196 | Microsoft Exchange Server | 2024-08-21 | 54.0% | Unknown |
| CVE-2024-38213 | Microsoft Windows | 2024-08-13 | 13.6% | Unknown |
| CVE-2024-38193 | Microsoft Windows | 2024-08-13 | 28.7% | Unknown |
| CVE-2024-38189 | Microsoft Project | 2024-08-13 | 8.1% | Unknown |
| CVE-2024-38178 | Microsoft Windows | 2024-08-13 | 41.3% | Unknown |
| CVE-2024-38107 | Microsoft Windows | 2024-08-13 | 1.6% | Unknown |
| CVE-2024-38106 | Microsoft Windows | 2024-08-13 | 6.3% | Unknown |
| CVE-2018-0824 | Microsoft Windows | 2024-08-05 | 73.1% | Unknown |
| CVE-2012-4792 | Microsoft Internet Explorer | 2024-07-23 | 78.8% | Unknown |
| CVE-2024-38112 | Microsoft Windows | 2024-07-09 | 84.2% | Unknown |
| CVE-2024-38080 | Microsoft Windows | 2024-07-09 | 7.1% | Unknown |
| CVE-2024-26169 | Microsoft Windows | 2024-06-13 | 4.0% | Known |
| CVE-2024-30051 | Microsoft DWM Core Library | 2024-05-14 | 5.6% | Known |
| CVE-2024-30040 | Microsoft Windows | 2024-05-14 | 3.9% | Unknown |
| CVE-2024-29988 | Microsoft SmartScreen Prompt | 2024-04-30 | 44.8% | Unknown |
| CVE-2022-38028 | Microsoft Windows | 2024-04-23 | 14.9% | Unknown |
| CVE-2023-24955 | Microsoft SharePoint Server | 2024-03-26 | 84.9% | Known |
| CVE-2024-21338 | Microsoft Windows | 2024-03-04 | 59.8% | Known |
| CVE-2023-29360 | Microsoft Streaming Service | 2024-02-29 | 21.6% | Unknown |
| CVE-2024-21410 | Microsoft Exchange Server | 2024-02-15 | 12.5% | Unknown |
| CVE-2024-21412 | Microsoft Windows | 2024-02-13 | 99.4% | Known |
| CVE-2024-21351 | Microsoft Windows | 2024-02-13 | 27.7% | Unknown |
| CVE-2023-29357 | Microsoft SharePoint Server | 2024-01-10 | 99.9% | Known |
| CVE-2023-36584 | Microsoft Windows | 2023-11-16 | 3.0% | Unknown |
| CVE-2023-36036 | Microsoft Windows | 2023-11-14 | 16.6% | Unknown |
| CVE-2023-36033 | Microsoft Windows | 2023-11-14 | 10.9% | Unknown |
| CVE-2023-36025 | Microsoft Windows | 2023-11-14 | 88.0% | Unknown |
| CVE-2023-41763 | Microsoft Skype for Business | 2023-10-10 | 90.3% | Unknown |
| CVE-2023-36563 | Microsoft WordPad | 2023-10-10 | 20.7% | Unknown |
| CVE-2023-28229 | Microsoft Windows CNG Key Isolation Service | 2023-10-04 | 1.6% | Unknown |
| CVE-2023-36802 | Microsoft Streaming Service Proxy | 2023-09-12 | 27.9% | Unknown |
| CVE-2023-36761 | Microsoft Word | 2023-09-12 | 19.5% | Unknown |
| CVE-2023-38180 | Microsoft .NET Core and Visual Studio | 2023-08-09 | 14.0% | Unknown |
| CVE-2023-36884 | Microsoft Windows | 2023-07-17 | 98.9% | Known |
| CVE-2023-36874 | Microsoft Windows | 2023-07-11 | 42.5% | Unknown |
| CVE-2023-35311 | Microsoft Outlook | 2023-07-11 | 15.5% | Unknown |
| CVE-2023-32049 | Microsoft Windows | 2023-07-11 | 4.1% | Unknown |
| CVE-2023-32046 | Microsoft Windows | 2023-07-11 | 10.0% | Unknown |
| CVE-2016-0165 | Microsoft Win32k | 2023-06-22 | 13.7% | Unknown |
| CVE-2023-29336 | Microsoft Win32k | 2023-05-09 | 41.1% | Unknown |
| CVE-2023-28252 | Microsoft Windows | 2023-04-11 | 48.9% | Known |
| CVE-2019-1388 | Microsoft Windows | 2023-04-07 | 8.5% | Known |
| CVE-2013-3163 | Microsoft Internet Explorer | 2023-03-30 | 70.6% | Unknown |
| CVE-2023-24880 | Microsoft Windows | 2023-03-14 | 78.0% | Known |
| CVE-2023-23397 | Microsoft Office | 2023-03-14 | 97.1% | Unknown |
| CVE-2023-23376 | Microsoft Windows | 2023-02-14 | 10.8% | Known |
| CVE-2023-21823 | Microsoft Windows | 2023-02-14 | 5.5% | Unknown |
| CVE-2023-21715 | Microsoft Office | 2023-02-14 | 12.0% | Unknown |
| CVE-2023-21674 | Microsoft Windows | 2023-01-10 | 40.9% | Unknown |
| CVE-2022-41080 | Microsoft Exchange Server | 2023-01-10 | 77.3% | Known |
| CVE-2022-44698 | Microsoft Defender | 2022-12-13 | 76.2% | Known |
| CVE-2022-41049 | Microsoft Windows | 2022-11-14 | 2.4% | Unknown |
| CVE-2022-41128 | Microsoft Windows | 2022-11-08 | 24.6% | Unknown |
| CVE-2022-41125 | Microsoft Windows | 2022-11-08 | 3.0% | Unknown |
| CVE-2022-41091 | Microsoft Windows | 2022-11-08 | 1.8% | Known |
| CVE-2022-41073 | Microsoft Windows | 2022-11-08 | 2.2% | Known |
| CVE-2022-41033 | Microsoft Windows COM+ Event System Service | 2022-10-11 | 1.8% | Unknown |
| CVE-2022-41082 | Microsoft Exchange Server | 2022-09-30 | 99.9% | Known |
| CVE-2022-41040 | Microsoft Exchange Server | 2022-09-30 | 99.9% | Known |
| CVE-2010-2568 | Microsoft Windows | 2022-09-15 | 91.3% | Unknown |
| CVE-2022-37969 | Microsoft Windows | 2022-09-14 | 28.2% | Known |
| CVE-2022-26923 | Microsoft Active Directory | 2022-08-18 | 83.5% | Unknown |
| CVE-2022-21971 | Microsoft Windows | 2022-08-18 | 53.9% | Unknown |
| CVE-2022-34713 | Microsoft Windows | 2022-08-09 | 67.7% | Unknown |
| CVE-2022-22047 | Microsoft Windows | 2022-07-12 | 18.7% | Unknown |
| CVE-2022-26925 | Microsoft Windows | 2022-07-01 | 10.4% | Unknown |
| CVE-2022-30190 | Microsoft Windows | 2022-06-14 | 99.1% | Known |
| CVE-2013-1331 | Microsoft Office | 2022-06-08 | 79.8% | Unknown |
| CVE-2012-4969 | Microsoft Internet Explorer | 2022-06-08 | 80.2% | Unknown |
| CVE-2012-1889 | Microsoft XML Core Services | 2022-06-08 | 83.5% | Unknown |
| CVE-2012-0151 | Microsoft Windows | 2022-06-08 | 87.7% | Unknown |
| CVE-2010-2572 | Microsoft PowerPoint | 2022-06-08 | 58.6% | Unknown |
| CVE-2009-0563 | Microsoft Office | 2022-06-08 | 62.8% | Unknown |
| CVE-2009-0557 | Microsoft Office | 2022-06-08 | 53.0% | Unknown |
| CVE-2006-2492 | Microsoft Word | 2022-06-08 | 48.1% | Unknown |
| CVE-2016-7256 | Microsoft Windows | 2022-05-25 | 64.5% | Unknown |
| CVE-2016-3393 | Microsoft Windows | 2022-05-25 | 68.4% | Unknown |
| CVE-2016-0034 | Microsoft Silverlight | 2022-05-25 | 69.3% | Known |
| CVE-2015-6175 | Microsoft Windows | 2022-05-25 | 5.1% | Unknown |
| CVE-2015-2425 | Microsoft Internet Explorer | 2022-05-25 | 44.7% | Unknown |
| CVE-2015-2360 | Microsoft Win32k | 2022-05-25 | 14.8% | Unknown |
| CVE-2015-1769 | Microsoft Windows | 2022-05-25 | 4.0% | Unknown |
| CVE-2015-1671 | Microsoft Windows | 2022-05-25 | 48.9% | Unknown |
| CVE-2015-0071 | Microsoft Internet Explorer | 2022-05-25 | 33.5% | Unknown |
| CVE-2015-0016 | Microsoft Windows | 2022-05-25 | 75.7% | Unknown |
| CVE-2014-4148 | Microsoft Windows | 2022-05-25 | 59.8% | Unknown |
| CVE-2014-4123 | Microsoft Internet Explorer | 2022-05-25 | 47.1% | Unknown |
| CVE-2014-4077 | Microsoft Input Method Editor (IME) Japanese | 2022-05-25 | 54.5% | Unknown |
| CVE-2014-2817 | Microsoft Internet Explorer | 2022-05-25 | 26.3% | Unknown |
| CVE-2013-7331 | Microsoft Internet Explorer | 2022-05-25 | 50.2% | Unknown |
| CVE-2013-3896 | Microsoft Silverlight | 2022-05-25 | 67.9% | Unknown |
| CVE-2013-0074 | Microsoft Silverlight | 2022-05-25 | 78.8% | Known |
| CVE-2018-8611 | Microsoft Windows | 2022-05-24 | 4.1% | Unknown |
| CVE-2017-8543 | Microsoft Windows | 2022-05-24 | 74.1% | Unknown |
| CVE-2017-0210 | Microsoft Internet Explorer | 2022-05-24 | 22.3% | Unknown |
| CVE-2017-0149 | Microsoft Internet Explorer | 2022-05-24 | 29.1% | Unknown |
| CVE-2017-0147 | Microsoft SMBv1 server | 2022-05-24 | 99.6% | Known |
| CVE-2017-0022 | Microsoft XML Core Services | 2022-05-24 | 18.0% | Unknown |
| CVE-2017-0005 | Microsoft Windows | 2022-05-24 | 11.0% | Unknown |
| CVE-2016-3351 | Microsoft Internet Explorer and Edge | 2022-05-24 | 26.4% | Known |
| CVE-2016-3298 | Microsoft Internet Explorer | 2022-05-24 | 33.3% | Unknown |
| CVE-2016-0162 | Microsoft Internet Explorer | 2022-05-24 | 22.0% | Unknown |
| CVE-2020-1027 | Microsoft Windows | 2022-05-23 | 4.5% | Unknown |
| CVE-2020-0638 | Microsoft Update Notification Manager | 2022-05-23 | 2.3% | Known |
| CVE-2019-1385 | Microsoft Windows | 2022-05-23 | 3.6% | Known |
| CVE-2019-1130 | Microsoft Windows | 2022-05-23 | 1.7% | Known |
| CVE-2019-0880 | Microsoft Windows | 2022-05-23 | 2.3% | Unknown |
| CVE-2019-0703 | Microsoft Windows | 2022-05-23 | 9.6% | Unknown |
| CVE-2019-0676 | Microsoft Internet Explorer | 2022-05-23 | 8.1% | Unknown |
| CVE-2018-8589 | Microsoft Win32k | 2022-05-23 | 3.0% | Unknown |
| CVE-2014-4113 | Microsoft Win32k | 2022-05-04 | 86.9% | Unknown |
| CVE-2014-0322 | Microsoft Internet Explorer | 2022-05-04 | 85.1% | Unknown |
| CVE-2022-26904 | Microsoft Windows | 2022-04-25 | 16.9% | Unknown |
| CVE-2022-21919 | Microsoft Windows | 2022-04-25 | 2.4% | Unknown |
| CVE-2021-41357 | Microsoft Win32k | 2022-04-25 | 1.5% | Unknown |
| CVE-2021-40450 | Microsoft Win32k | 2022-04-25 | 1.5% | Unknown |
| CVE-2022-22718 | Microsoft Windows | 2022-04-19 | 18.4% | Unknown |
| CVE-2022-24521 | Microsoft Windows | 2022-04-13 | 7.0% | Known |
| CVE-2015-2502 | Microsoft Internet Explorer | 2022-04-13 | 51.0% | Unknown |
| CVE-2021-42287 | Microsoft Active Directory | 2022-04-11 | 77.1% | Known |
| CVE-2021-42278 | Microsoft Active Directory | 2022-04-11 | 73.2% | Known |
| CVE-2021-31166 | Microsoft HTTP Protocol Stack | 2022-04-06 | 99.8% | Unknown |
| CVE-2017-0148 | Microsoft SMBv1 server | 2022-04-06 | 99.3% | Known |
| CVE-2021-34484 | Microsoft Windows | 2022-03-31 | 21.8% | Unknown |
| CVE-2021-38646 | Microsoft Office | 2022-03-28 | 7.9% | Known |
| CVE-2021-34486 | Microsoft Windows | 2022-03-28 | 9.2% | Unknown |
| CVE-2018-8440 | Microsoft Windows | 2022-03-28 | 18.3% | Known |
| CVE-2018-8406 | Microsoft DirectX Graphics Kernel (DXGKRNL) | 2022-03-28 | 3.4% | Known |
| CVE-2018-8405 | Microsoft DirectX Graphics Kernel (DXGKRNL) | 2022-03-28 | 3.4% | Known |
| CVE-2017-0213 | Microsoft Windows | 2022-03-28 | 84.1% | Known |
| CVE-2017-0059 | Microsoft Internet Explorer | 2022-03-28 | 61.9% | Unknown |
| CVE-2017-0037 | Microsoft Edge and Internet Explorer | 2022-03-28 | 80.3% | Unknown |
| CVE-2016-7201 | Microsoft Edge | 2022-03-28 | 80.0% | Unknown |
| CVE-2016-7200 | Microsoft Edge | 2022-03-28 | 82.7% | Unknown |
| CVE-2016-0189 | Microsoft Internet Explorer | 2022-03-28 | 94.0% | Known |
| CVE-2016-0151 | Microsoft Client-Server Run-time Subsystem (CSRSS) | 2022-03-28 | 62.9% | Known |
| CVE-2016-0040 | Microsoft Windows | 2022-03-28 | 24.4% | Unknown |
| CVE-2015-2426 | Microsoft Windows | 2022-03-28 | 86.5% | Unknown |
| CVE-2015-2419 | Microsoft Internet Explorer | 2022-03-28 | 53.1% | Unknown |
| CVE-2015-1770 | Microsoft Office | 2022-03-28 | 34.9% | Unknown |
| CVE-2013-3660 | Microsoft Win32k | 2022-03-28 | 39.3% | Unknown |
| CVE-2013-2551 | Microsoft Internet Explorer | 2022-03-28 | 73.9% | Known |
| CVE-2012-2539 | Microsoft Word | 2022-03-28 | 53.0% | Unknown |
| CVE-2011-2005 | Microsoft Ancillary Function Driver (afd.sys) | 2022-03-28 | 31.7% | Unknown |
| CVE-2010-4398 | Microsoft Windows | 2022-03-28 | 8.6% | Unknown |
| CVE-2022-21999 | Microsoft Windows | 2022-03-25 | 41.0% | Known |
| CVE-2019-0903 | Microsoft Graphics Device Interface (GDI) | 2022-03-25 | 21.7% | Unknown |
| CVE-2018-8414 | Microsoft Windows | 2022-03-25 | 72.9% | Unknown |
| CVE-2018-8373 | Microsoft Internet Explorer Scripting Engine | 2022-03-25 | 61.9% | Unknown |
| CVE-2017-0146 | Microsoft Windows | 2022-03-25 | 89.8% | Known |
| CVE-2014-6332 | Microsoft Windows | 2022-03-25 | 94.9% | Unknown |
| CVE-2014-6324 | Microsoft Kerberos Key Distribution Center (KDC) | 2022-03-25 | 87.3% | Unknown |
| CVE-2019-1405 | Microsoft Windows | 2022-03-15 | 30.1% | Known |
| CVE-2019-1322 | Microsoft Windows | 2022-03-15 | 19.2% | Known |
| CVE-2019-1315 | Microsoft Windows | 2022-03-15 | 3.4% | Known |
| CVE-2019-1253 | Microsoft Windows | 2022-03-15 | 11.6% | Known |
| CVE-2019-1132 | Microsoft Win32k | 2022-03-15 | 9.8% | Unknown |
| CVE-2019-1129 | Microsoft Windows | 2022-03-15 | 1.7% | Known |
| CVE-2019-1069 | Microsoft Task Scheduler | 2022-03-15 | 6.1% | Known |
| CVE-2019-1064 | Microsoft Windows | 2022-03-15 | 6.8% | Known |
| CVE-2019-0841 | Microsoft Windows | 2022-03-15 | 41.4% | Known |
| CVE-2019-0543 | Microsoft Windows | 2022-03-15 | 4.7% | Known |
| CVE-2018-8120 | Microsoft Win32k | 2022-03-15 | 73.4% | Known |
| CVE-2017-0101 | Microsoft Windows | 2022-03-15 | 57.4% | Known |
| CVE-2016-3309 | Microsoft Windows | 2022-03-15 | 20.4% | Known |
| CVE-2015-2546 | Microsoft Win32k | 2022-03-15 | 10.1% | Known |
| CVE-2021-41379 | Microsoft Windows | 2022-03-03 | 19.4% | Known |
| CVE-2019-1297 | Microsoft Excel | 2022-03-03 | 21.8% | Unknown |
| CVE-2018-8581 | Microsoft Exchange Server | 2022-03-03 | 27.3% | Known |
| CVE-2017-8540 | Microsoft Malware Protection Engine | 2022-03-03 | 71.8% | Unknown |
| CVE-2017-11826 | Microsoft Office | 2022-03-03 | 81.1% | Unknown |
| CVE-2017-0261 | Microsoft Office | 2022-03-03 | 78.1% | Unknown |
| CVE-2017-0001 | Microsoft Graphics Device Interface (GDI) | 2022-03-03 | 3.1% | Unknown |
| CVE-2016-7262 | Microsoft Excel | 2022-03-03 | 57.7% | Unknown |
| CVE-2016-7193 | Microsoft Office | 2022-03-03 | 57.5% | Unknown |
| CVE-2016-0099 | Microsoft Windows | 2022-03-03 | 37.0% | Known |
| CVE-2015-2545 | Microsoft Office | 2022-03-03 | 85.9% | Unknown |
| CVE-2015-2424 | Microsoft PowerPoint | 2022-03-03 | 40.3% | Unknown |
| CVE-2015-2387 | Microsoft ATM Font Driver | 2022-03-03 | 34.8% | Unknown |
| CVE-2015-1701 | Microsoft Win32k | 2022-03-03 | 55.9% | Known |
| CVE-2015-1642 | Microsoft Office | 2022-03-03 | 53.0% | Unknown |
| CVE-2014-4114 | Microsoft Windows | 2022-03-03 | 81.6% | Unknown |
| CVE-2013-5065 | Microsoft Windows | 2022-03-03 | 34.6% | Unknown |
| CVE-2013-3897 | Microsoft Internet Explorer | 2022-03-03 | 77.3% | Unknown |
| CVE-2013-1347 | Microsoft Internet Explorer | 2022-03-03 | 77.7% | Unknown |
| CVE-2012-1856 | Microsoft Office | 2022-03-03 | 72.0% | Unknown |
| CVE-2011-1889 | Microsoft Forefront Threat Management Gateway (TMG) | 2022-03-03 | 49.0% | Unknown |
| CVE-2010-3333 | Microsoft Office | 2022-03-03 | 89.4% | Unknown |
| CVE-2010-0232 | Microsoft Windows | 2022-03-03 | 28.7% | Unknown |
| CVE-2009-3129 | Microsoft Excel | 2022-03-03 | 84.0% | Unknown |
| CVE-2009-1123 | Microsoft Windows | 2022-03-03 | 4.8% | Unknown |
| CVE-2004-0210 | Microsoft Windows | 2022-03-03 | 7.2% | Unknown |
| CVE-2002-0367 | Microsoft Windows | 2022-03-03 | 4.9% | Unknown |
| CVE-2017-8570 | Microsoft Office | 2022-02-25 | 89.8% | Unknown |
| CVE-2017-0222 | Microsoft Internet Explorer | 2022-02-25 | 29.6% | Unknown |
| CVE-2014-6352 | Microsoft Windows | 2022-02-25 | 77.4% | Unknown |
| CVE-2019-0752 | Microsoft Internet Explorer | 2022-02-15 | 81.6% | Known |
| CVE-2018-8174 | Microsoft Windows | 2022-02-15 | 88.3% | Known |
| CVE-2014-1761 | Microsoft Word | 2022-02-15 | 77.4% | Unknown |
| CVE-2013-3906 | Microsoft Graphics Component | 2022-02-15 | 84.8% | Unknown |
| CVE-2021-36934 | Microsoft Windows | 2022-02-10 | 67.2% | Unknown |
| CVE-2020-0796 | Microsoft SMBv3 | 2022-02-10 | 99.8% | Known |
| CVE-2017-8464 | Microsoft Windows | 2022-02-10 | 90.0% | Unknown |
| CVE-2017-0263 | Microsoft Win32k | 2022-02-10 | 10.0% | Unknown |
| CVE-2017-0262 | Microsoft Office | 2022-02-10 | 81.0% | Unknown |
| CVE-2017-0145 | Microsoft SMBv1 | 2022-02-10 | 89.8% | Known |
| CVE-2017-0144 | Microsoft SMBv1 | 2022-02-10 | 99.2% | Known |
| CVE-2015-1635 | Microsoft HTTP.sys | 2022-02-10 | 99.9% | Unknown |
| CVE-2022-21882 | Microsoft Win32k | 2022-02-04 | 59.2% | Known |
| CVE-2020-0787 | Microsoft Windows | 2022-01-28 | 42.5% | Known |
| CVE-2014-1776 | Microsoft Internet Explorer | 2022-01-28 | 82.6% | Unknown |
| CVE-2018-8453 | Microsoft Win32k | 2022-01-21 | 70.0% | Known |
| CVE-2021-33766 | Microsoft Exchange Server | 2022-01-18 | 98.1% | Unknown |
| CVE-2019-1458 | Microsoft Win32k | 2022-01-10 | 74.4% | Known |
| CVE-2013-3900 | Microsoft WinVerifyTrust function | 2022-01-10 | 44.6% | Unknown |
| CVE-2021-43890 | Microsoft Windows | 2021-12-15 | 11.2% | Known |
| CVE-2021-42321 | Microsoft Exchange | 2021-11-17 | 91.7% | Known |
| CVE-2021-42292 | Microsoft Office | 2021-11-17 | 43.0% | Unknown |
| CVE-2021-40449 | Microsoft Windows | 2021-11-17 | 74.1% | Known |
| CVE-2021-40444 | Microsoft MSHTML | 2021-11-03 | 97.4% | Known |
| CVE-2021-38649 | Microsoft Open Management Infrastructure (OMI) | 2021-11-03 | 2.8% | Unknown |
| CVE-2021-38648 | Microsoft Open Management Infrastructure (OMI) | 2021-11-03 | 11.4% | Unknown |
| CVE-2021-38647 | Microsoft Open Management Infrastructure (OMI) | 2021-11-03 | 99.9% | Known |
| CVE-2021-38645 | Microsoft Open Management Infrastructure (OMI) | 2021-11-03 | 2.7% | Unknown |
| CVE-2021-36955 | Microsoft Windows | 2021-11-03 | 4.0% | Known |
| CVE-2021-36948 | Microsoft Windows | 2021-11-03 | 23.2% | Unknown |
| CVE-2021-36942 | Microsoft Windows | 2021-11-03 | 66.0% | Known |
| CVE-2021-34527 | Microsoft Windows | 2021-11-03 | 99.7% | Known |
| CVE-2021-34523 | Microsoft Exchange Server | 2021-11-03 | 99.9% | Known |
| CVE-2021-34473 | Microsoft Exchange Server | 2021-11-03 | 99.9% | Known |
| CVE-2021-34448 | Microsoft Windows | 2021-11-03 | 40.0% | Unknown |
| CVE-2021-33771 | Microsoft Windows | 2021-11-03 | 10.1% | Unknown |
| CVE-2021-33742 | Microsoft Windows | 2021-11-03 | 59.4% | Unknown |
| CVE-2021-33739 | Microsoft Windows | 2021-11-03 | 6.5% | Unknown |
| CVE-2021-31979 | Microsoft Windows | 2021-11-03 | 4.5% | Unknown |
| CVE-2021-31956 | Microsoft Windows | 2021-11-03 | 22.2% | Unknown |
| CVE-2021-31955 | Microsoft Windows | 2021-11-03 | 81.1% | Unknown |
| CVE-2021-31207 | Microsoft Exchange Server | 2021-11-03 | 99.7% | Known |
| CVE-2021-31201 | Microsoft Enhanced Cryptographic Provider | 2021-11-03 | 2.6% | Unknown |
| CVE-2021-31199 | Microsoft Enhanced Cryptographic Provider | 2021-11-03 | 2.9% | Unknown |
| CVE-2021-28310 | Microsoft Win32k | 2021-11-03 | 8.3% | Unknown |
| CVE-2021-27085 | Microsoft Internet Explorer | 2021-11-03 | 5.4% | Unknown |
| CVE-2021-27065 | Microsoft Exchange Server | 2021-11-03 | 99.8% | Known |
| CVE-2021-27059 | Microsoft Office | 2021-11-03 | 6.0% | Unknown |
| CVE-2021-26858 | Microsoft Exchange Server | 2021-11-03 | 93.6% | Known |
| CVE-2021-26857 | Microsoft Exchange Server | 2021-11-03 | 95.7% | Known |
| CVE-2021-26855 | Microsoft Exchange Server | 2021-11-03 | 99.9% | Known |
| CVE-2021-26411 | Microsoft Internet Explorer | 2021-11-03 | 80.7% | Known |
| CVE-2021-1732 | Microsoft Win32k | 2021-11-03 | 78.3% | Known |
| CVE-2021-1675 | Microsoft Windows | 2021-11-03 | 85.3% | Known |
| CVE-2021-1647 | Microsoft Defender | 2021-11-03 | 39.3% | Unknown |
| CVE-2020-17144 | Microsoft Exchange Server | 2021-11-03 | 36.5% | Unknown |
| CVE-2020-17087 | Microsoft Windows | 2021-11-03 | 5.4% | Unknown |
| CVE-2020-1472 | Microsoft Netlogon | 2021-11-03 | 99.3% | Known |
| CVE-2020-1464 | Microsoft Windows | 2021-11-03 | 38.9% | Unknown |
| CVE-2020-1380 | Microsoft Internet Explorer | 2021-11-03 | 24.1% | Unknown |
| CVE-2020-1350 | Microsoft Windows | 2021-11-03 | 96.7% | Unknown |
| CVE-2020-1147 | Microsoft .NET Framework, SharePoint, Visual Studio | 2021-11-03 | 93.9% | Unknown |
| CVE-2020-1054 | Microsoft Win32k | 2021-11-03 | 54.1% | Unknown |
| CVE-2020-1040 | Microsoft Hyper-V RemoteFX | 2021-11-03 | 7.3% | Unknown |
| CVE-2020-1020 | Microsoft Windows | 2021-11-03 | 65.0% | Unknown |
| CVE-2020-0986 | Microsoft Windows | 2021-11-03 | 16.4% | Unknown |
| CVE-2020-0968 | Microsoft Internet Explorer | 2021-11-03 | 30.6% | Known |
| CVE-2020-0938 | Microsoft Windows | 2021-11-03 | 68.9% | Unknown |
| CVE-2020-0878 | Microsoft Edge and Internet Explorer | 2021-11-03 | 2.6% | Known |
| CVE-2020-0688 | Microsoft Exchange Server | 2021-11-03 | 99.9% | Known |
| CVE-2020-0683 | Microsoft Windows | 2021-11-03 | 7.6% | Unknown |
| CVE-2020-0674 | Microsoft Internet Explorer | 2021-11-03 | 86.8% | Unknown |
| CVE-2020-0646 | Microsoft .NET Framework | 2021-11-03 | 99.2% | Unknown |
| CVE-2020-0601 | Microsoft Windows | 2021-11-03 | 89.4% | Unknown |
| CVE-2019-1429 | Microsoft Internet Explorer | 2021-11-03 | 77.2% | Unknown |
| CVE-2019-1367 | Microsoft Internet Explorer | 2021-11-03 | 52.4% | Known |
| CVE-2019-1215 | Microsoft Windows | 2021-11-03 | 19.2% | Known |
| CVE-2019-1214 | Microsoft Windows | 2021-11-03 | 1.4% | Unknown |
| CVE-2019-0863 | Microsoft Windows | 2021-11-03 | 5.2% | Unknown |
| CVE-2019-0859 | Microsoft Win32k | 2021-11-03 | 4.1% | Known |
| CVE-2019-0808 | Microsoft Win32k | 2021-11-03 | 53.0% | Unknown |
| CVE-2019-0803 | Microsoft Win32k | 2021-11-03 | 45.2% | Known |
| CVE-2019-0797 | Microsoft Win32k | 2021-11-03 | 1.8% | Unknown |
| CVE-2019-0708 | Microsoft Remote Desktop Services | 2021-11-03 | 99.9% | Known |
| CVE-2019-0604 | Microsoft SharePoint | 2021-11-03 | 99.9% | Known |
| CVE-2019-0541 | Microsoft MSHTML | 2021-11-03 | 53.2% | Unknown |
| CVE-2018-8653 | Microsoft Internet Explorer | 2021-11-03 | 29.6% | Unknown |
| CVE-2018-0802 | Microsoft Office | 2021-11-03 | 93.2% | Known |
| CVE-2018-0798 | Microsoft Office | 2021-11-03 | 95.1% | Unknown |
| CVE-2017-8759 | Microsoft .NET Framework | 2021-11-03 | 88.6% | Unknown |
| CVE-2017-7269 | Microsoft Internet Information Services (IIS) | 2021-11-03 | 99.8% | Unknown |
| CVE-2017-11882 | Microsoft Office | 2021-11-03 | 99.9% | Known |
| CVE-2017-11774 | Microsoft Office | 2021-11-03 | 59.6% | Unknown |
| CVE-2017-0199 | Microsoft Office and WordPad | 2021-11-03 | 99.4% | Known |
| CVE-2017-0143 | Microsoft Windows | 2021-11-03 | 93.3% | Known |
| CVE-2016-7255 | Microsoft Win32k | 2021-11-03 | 80.9% | Known |
| CVE-2016-3235 | Microsoft Office | 2021-11-03 | 43.3% | Unknown |
| CVE-2016-0185 | Microsoft Windows | 2021-11-03 | 69.8% | Unknown |
| CVE-2016-0167 | Microsoft Win32k | 2021-11-03 | 5.6% | Known |
| CVE-2015-1641 | Microsoft Office | 2021-11-03 | 96.6% | Unknown |
| CVE-2014-1812 | Microsoft Windows | 2021-11-03 | 64.8% | Known |
| CVE-2012-0158 | Microsoft MSCOMCTL.OCX | 2021-11-03 | 99.9% | Known |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
CISA KEV lists 389 Microsoft vulnerabilities (No. 1 of 288 vendors).