Microsoft
Microsoft known exploited vulnerabilities
Every Microsoft vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first. 117 of them are known to be used by ransomware.
389 CVEs
- CVE-2026-65660Microsoft SharePoint Code Injection Vulnerability · added September 25, 2026
- CVE-2026-85880Microsoft Windows Heap-Based Buffer Overflow Vulnerability · added September 8, 2026
- CVE-2026-81963Microsoft Windows Link Following Vulnerability · added September 8, 2026
- CVE-2019-1068Microsoft SQL Server Remote Code Execution Vulnerability · added August 26, 2026
- CVE-2026-55040Microsoft SharePoint Weak Authentication Vulnerability · added August 18, 2026
- CVE-2026-33824Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability · added August 18, 2026
- CVE-2026-68820Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability · added August 11, 2026
- CVE-2026-50522Microsoft SharePoint Deserialization of Untrusted Data Vulnerability · added July 22, 2026
- CVE-2026-58644Microsoft SharePoint Deserialization of Untrusted Data Vulnerability · added July 16, 2026
- CVE-2026-56164Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability · added July 14, 2026
- CVE-2026-56155Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability · added July 14, 2026
- CVE-2026-45659 ransomwareMicrosoft SharePoint Server Deserialization of Untrusted Data Vulnerability · added July 1, 2026
- CVE-2026-45498Microsoft Defender Denial of Service Vulnerability · added May 20, 2026
- CVE-2026-41091Microsoft Defender Link Following Vulnerability · added May 20, 2026
- CVE-2010-0806Microsoft Internet Explorer Use-After-Free Vulnerability · added May 20, 2026
- CVE-2010-0249Microsoft Internet Explorer Use-After-Free Vulnerability · added May 20, 2026
- CVE-2009-1537Microsoft DirectX NULL Byte Overwrite Vulnerability · added May 20, 2026
- CVE-2008-4250Microsoft Windows Buffer Overflow Vulnerability · added May 20, 2026
- CVE-2026-42897Microsoft Exchange Server Cross-Site Scripting Vulnerability · added May 15, 2026
- CVE-2026-32202Microsoft Windows Protection Mechanism Failure Vulnerability · added April 28, 2026
- CVE-2026-33825 ransomwareMicrosoft Defender Insufficient Granularity of Access Control Vulnerability · added April 22, 2026
- CVE-2026-32201Microsoft SharePoint Server Improper Input Validation Vulnerability · added April 14, 2026
- CVE-2009-0238Microsoft Office Remote Code Execution · added April 14, 2026
- CVE-2025-60710 ransomwareMicrosoft Windows Link Following Vulnerability · added April 13, 2026
- CVE-2023-36424Microsoft Windows Out-of-Bounds Read Vulnerability · added April 13, 2026
- CVE-2023-21529 ransomwareMicrosoft Exchange Server Deserialization of Untrusted Data Vulnerability · added April 13, 2026
- CVE-2012-1854Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability · added April 13, 2026
- CVE-2026-20963Microsoft SharePoint Deserialization of Untrusted Data Vulnerability · added March 18, 2026
- CVE-2008-0015 Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability · added February 17, 2026
- CVE-2024-43468Microsoft Configuration Manager SQL Injection Vulnerability · added February 12, 2026
- CVE-2026-21533Microsoft Windows Improper Privilege Management Vulnerability · added February 10, 2026
- CVE-2026-21525Microsoft Windows NULL Pointer Dereference Vulnerability · added February 10, 2026
- CVE-2026-21519Microsoft Windows Type Confusion Vulnerability · added February 10, 2026
- CVE-2026-21514Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability · added February 10, 2026
- CVE-2026-21513Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability · added February 10, 2026
- CVE-2026-21510Microsoft Windows Shell Protection Mechanism Failure Vulnerability · added February 10, 2026
- CVE-2026-21509Microsoft Office Security Feature Bypass Vulnerability · added January 26, 2026
- CVE-2026-20805Microsoft Windows Information Disclosure Vulnerability · added January 13, 2026
- CVE-2009-0556Microsoft Office PowerPoint Code Injection Vulnerability · added January 7, 2026
- CVE-2025-62221Microsoft Windows Use After Free Vulnerability · added December 9, 2025
- CVE-2025-62215Microsoft Windows Race Condition Vulnerability · added November 12, 2025
- CVE-2025-59287Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability · added October 24, 2025
- CVE-2025-33073Microsoft Windows SMB Client Improper Access Control Vulnerability · added October 20, 2025
- CVE-2025-59230Microsoft Windows Improper Access Control Vulnerability · added October 14, 2025
- CVE-2025-24990Microsoft Windows Untrusted Pointer Dereference Vulnerability · added October 14, 2025
- CVE-2021-43226 ransomwareMicrosoft Windows Privilege Escalation Vulnerability · added October 6, 2025
- CVE-2013-3918Microsoft Windows Out-of-Bounds Write Vulnerability · added October 6, 2025
- CVE-2011-3402Microsoft Windows Remote Code Execution Vulnerability · added October 6, 2025
- CVE-2010-3962Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability · added October 6, 2025
- CVE-2013-3893Microsoft Internet Explorer Resource Management Errors Vulnerability · added August 12, 2025
- CVE-2007-0671Microsoft Office Excel Remote Code Execution Vulnerability · added August 12, 2025
- CVE-2025-49706 ransomwareMicrosoft SharePoint Improper Authentication Vulnerability · added July 22, 2025
- CVE-2025-49704 ransomwareMicrosoft SharePoint Code Injection Vulnerability · added July 22, 2025
- CVE-2025-53770 ransomwareMicrosoft SharePoint Deserialization of Untrusted Data Vulnerability · added July 20, 2025
- CVE-2025-33053 Microsoft Windows External Control of File Name or Path Vulnerability · added June 10, 2025
- CVE-2025-32709Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability · added May 13, 2025
- CVE-2025-32706Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability · added May 13, 2025
- CVE-2025-32701Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability · added May 13, 2025
- CVE-2025-30400Microsoft Windows DWM Core Library Use-After-Free Vulnerability · added May 13, 2025
- CVE-2025-30397Microsoft Windows Scripting Engine Type Confusion Vulnerability · added May 13, 2025
- CVE-2025-24054Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability · added April 17, 2025
- CVE-2025-29824 ransomwareMicrosoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability · added April 8, 2025
- CVE-2025-26633 ransomwareMicrosoft Windows Management Console (MMC) Improper Neutralization Vulnerability · added March 11, 2025
- CVE-2025-24993Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability · added March 11, 2025
- CVE-2025-24991Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability · added March 11, 2025
- CVE-2025-24985Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability · added March 11, 2025
- CVE-2025-24984Microsoft Windows NTFS Information Disclosure Vulnerability · added March 11, 2025
- CVE-2025-24983Microsoft Windows Win32k Use-After-Free Vulnerability · added March 11, 2025
- CVE-2018-8639 ransomwareMicrosoft Windows Win32k Improper Resource Shutdown or Release Vulnerability · added March 3, 2025
- CVE-2024-49035Microsoft Partner Center Improper Access Control Vulnerability · added February 25, 2025
- CVE-2025-24989Microsoft Power Pages Improper Access Control Vulnerability · added February 21, 2025
- CVE-2025-21418Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability · added February 11, 2025
- CVE-2025-21391Microsoft Windows Storage Link Following Vulnerability · added February 11, 2025
- CVE-2024-21413Microsoft Outlook Improper Input Validation Vulnerability · added February 6, 2025
- CVE-2024-29059Microsoft .NET Framework Information Disclosure Vulnerability · added February 4, 2025
- CVE-2025-21335Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability · added January 14, 2025
- CVE-2025-21334Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability · added January 14, 2025
- CVE-2025-21333Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability · added January 14, 2025
- CVE-2024-35250Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability · added December 16, 2024
- CVE-2024-49138Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability · added December 10, 2024
- CVE-2024-49039 ransomwareMicrosoft Windows Task Scheduler Privilege Escalation Vulnerability · added November 12, 2024
- CVE-2024-43451Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability · added November 12, 2024
- CVE-2024-38094 ransomwareMicrosoft SharePoint Deserialization Vulnerability · added October 22, 2024
- CVE-2024-30088 ransomwareMicrosoft Windows Kernel TOCTOU Race Condition Vulnerability · added October 15, 2024
- CVE-2024-43573Microsoft Windows MSHTML Platform Spoofing Vulnerability · added October 8, 2024
- CVE-2024-43572Microsoft Windows Management Console Remote Code Execution Vulnerability · added October 8, 2024
- CVE-2020-0618 ransomwareMicrosoft SQL Server Reporting Services Remote Code Execution Vulnerability · added September 18, 2024
- CVE-2024-43461Microsoft Windows MSHTML Platform Spoofing Vulnerability · added September 16, 2024
- CVE-2024-38226Microsoft Publisher Protection Mechanism Failure Vulnerability · added September 10, 2024
- CVE-2024-38217Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability · added September 10, 2024
- CVE-2024-38014Microsoft Windows Installer Improper Privilege Management Vulnerability · added September 10, 2024
- CVE-2021-31196Microsoft Exchange Server Information Disclosure Vulnerability · added August 21, 2024
- CVE-2024-38213Microsoft Windows SmartScreen Security Feature Bypass Vulnerability · added August 13, 2024
- CVE-2024-38193Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability · added August 13, 2024
- CVE-2024-38189Microsoft Project Remote Code Execution Vulnerability · added August 13, 2024
- CVE-2024-38178Microsoft Windows Scripting Engine Memory Corruption Vulnerability · added August 13, 2024
- CVE-2024-38107Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability · added August 13, 2024
- CVE-2024-38106Microsoft Windows Kernel Privilege Escalation Vulnerability · added August 13, 2024
- CVE-2018-0824Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability · added August 5, 2024
- CVE-2012-4792Microsoft Internet Explorer Use-After-Free Vulnerability · added July 23, 2024
- CVE-2024-38112Microsoft Windows MSHTML Platform Spoofing Vulnerability · added July 9, 2024
- CVE-2024-38080Microsoft Windows Hyper-V Privilege Escalation Vulnerability · added July 9, 2024
- CVE-2024-26169 ransomwareMicrosoft Windows Error Reporting Service Improper Privilege Management Vulnerability · added June 13, 2024
- CVE-2024-30051 ransomware Microsoft DWM Core Library Privilege Escalation Vulnerability · added May 14, 2024
- CVE-2024-30040Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability · added May 14, 2024
- CVE-2024-29988Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability · added April 30, 2024
- CVE-2022-38028Microsoft Windows Print Spooler Privilege Escalation Vulnerability · added April 23, 2024
- CVE-2023-24955 ransomwareMicrosoft SharePoint Server Code Injection Vulnerability · added March 26, 2024
- CVE-2024-21338 ransomwareMicrosoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability · added March 4, 2024
- CVE-2023-29360Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability · added February 29, 2024
- CVE-2024-21410Microsoft Exchange Server Privilege Escalation Vulnerability · added February 15, 2024
- CVE-2024-21412 ransomwareMicrosoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability · added February 13, 2024
- CVE-2024-21351Microsoft Windows SmartScreen Security Feature Bypass Vulnerability · added February 13, 2024
- CVE-2023-29357 ransomwareMicrosoft SharePoint Server Privilege Escalation Vulnerability · added January 10, 2024
- CVE-2023-36584Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability · added November 16, 2023
- CVE-2023-36036Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability · added November 14, 2023
- CVE-2023-36033Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability · added November 14, 2023
- CVE-2023-36025Microsoft Windows SmartScreen Security Feature Bypass Vulnerability · added November 14, 2023
- CVE-2023-41763Microsoft Skype for Business Privilege Escalation Vulnerability · added October 10, 2023
- CVE-2023-36563Microsoft WordPad Information Disclosure Vulnerability · added October 10, 2023
- CVE-2023-28229Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability · added October 4, 2023
- CVE-2023-36802Microsoft Streaming Service Proxy Privilege Escalation Vulnerability · added September 12, 2023
- CVE-2023-36761Microsoft Word Information Disclosure Vulnerability · added September 12, 2023
- CVE-2023-38180Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability · added August 9, 2023
- CVE-2023-36884 ransomwareMicrosoft Windows Search Remote Code Execution Vulnerability · added July 17, 2023
- CVE-2023-36874Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability · added July 11, 2023
- CVE-2023-35311Microsoft Outlook Security Feature Bypass Vulnerability · added July 11, 2023
- CVE-2023-32049Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability · added July 11, 2023
- CVE-2023-32046Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability · added July 11, 2023
- CVE-2016-0165Microsoft Win32k Privilege Escalation Vulnerability · added June 22, 2023
- CVE-2023-29336Microsoft Win32K Privilege Escalation Vulnerability · added May 9, 2023
- CVE-2023-28252 ransomwareMicrosoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability · added April 11, 2023
- CVE-2019-1388 ransomwareMicrosoft Windows Certificate Dialog Privilege Escalation Vulnerability · added April 7, 2023
- CVE-2013-3163Microsoft Internet Explorer Memory Corruption Vulnerability · added March 30, 2023
- CVE-2023-24880 ransomwareMicrosoft Windows SmartScreen Security Feature Bypass Vulnerability · added March 14, 2023
- CVE-2023-23397Microsoft Office Outlook Privilege Escalation Vulnerability · added March 14, 2023
- CVE-2023-23376 ransomwareMicrosoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability · added February 14, 2023
- CVE-2023-21823Microsoft Windows Graphic Component Privilege Escalation Vulnerability · added February 14, 2023
- CVE-2023-21715Microsoft Office Publisher Security Feature Bypass Vulnerability · added February 14, 2023
- CVE-2023-21674Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability · added January 10, 2023
- CVE-2022-41080 ransomwareMicrosoft Exchange Server Privilege Escalation Vulnerability · added January 10, 2023
- CVE-2022-44698 ransomwareMicrosoft Defender SmartScreen Security Feature Bypass Vulnerability · added December 13, 2022
- CVE-2022-41049Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability · added November 14, 2022
- CVE-2022-41128Microsoft Windows Scripting Languages Remote Code Execution Vulnerability · added November 8, 2022
- CVE-2022-41125Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability · added November 8, 2022
- CVE-2022-41091 ransomwareMicrosoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability · added November 8, 2022
- CVE-2022-41073 ransomwareMicrosoft Windows Print Spooler Privilege Escalation Vulnerability · added November 8, 2022
- CVE-2022-41033Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability · added October 11, 2022
- CVE-2022-41082 ransomwareMicrosoft Exchange Server Remote Code Execution Vulnerability · added September 30, 2022
- CVE-2022-41040 ransomwareMicrosoft Exchange Server Server-Side Request Forgery Vulnerability · added September 30, 2022
- CVE-2010-2568Microsoft Windows Remote Code Execution Vulnerability · added September 15, 2022
- CVE-2022-37969 ransomwareMicrosoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability · added September 14, 2022
- CVE-2022-26923Microsoft Active Directory Domain Services Privilege Escalation Vulnerability · added August 18, 2022
- CVE-2022-21971Microsoft Windows Runtime Remote Code Execution Vulnerability · added August 18, 2022
- CVE-2022-34713Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability · added August 9, 2022
- CVE-2022-22047Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability · added July 12, 2022
- CVE-2022-26925Microsoft Windows LSA Spoofing Vulnerability · added July 1, 2022
- CVE-2022-30190 ransomwareMicrosoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability · added June 14, 2022
- CVE-2013-1331Microsoft Office Buffer Overflow Vulnerability · added June 8, 2022
- CVE-2012-4969Microsoft Internet Explorer Use-After-Free Vulnerability · added June 8, 2022
- CVE-2012-1889Microsoft XML Core Services Memory Corruption Vulnerability · added June 8, 2022
- CVE-2012-0151Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability · added June 8, 2022
- CVE-2010-2572Microsoft PowerPoint Buffer Overflow Vulnerability · added June 8, 2022
- CVE-2009-0563Microsoft Office Buffer Overflow Vulnerability · added June 8, 2022
- CVE-2009-0557Microsoft Office Object Record Corruption Vulnerability · added June 8, 2022
- CVE-2006-2492Microsoft Word Malformed Object Pointer Vulnerability · added June 8, 2022
- CVE-2016-7256Microsoft Windows Open Type Font Remote Code Execution Vulnerability · added May 25, 2022
- CVE-2016-3393Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability · added May 25, 2022
- CVE-2016-0034 ransomwareMicrosoft Silverlight Runtime Remote Code Execution Vulnerability · added May 25, 2022
- CVE-2015-6175Microsoft Windows Kernel Privilege Escalation Vulnerability · added May 25, 2022
- CVE-2015-2425Microsoft Internet Explorer Memory Corruption Vulnerability · added May 25, 2022
- CVE-2015-2360Microsoft Win32k Privilege Escalation Vulnerability · added May 25, 2022
- CVE-2015-1769Microsoft Windows Mount Manager Privilege Escalation Vulnerability · added May 25, 2022
- CVE-2015-1671Microsoft Windows Remote Code Execution Vulnerability · added May 25, 2022
- CVE-2015-0071Microsoft Internet Explorer ASLR Bypass Vulnerability · added May 25, 2022
- CVE-2015-0016Microsoft Windows TS WebProxy Directory Traversal Vulnerability · added May 25, 2022
- CVE-2014-4148Microsoft Windows Remote Code Execution Vulnerability · added May 25, 2022
- CVE-2014-4123Microsoft Internet Explorer Privilege Escalation Vulnerability · added May 25, 2022
- CVE-2014-4077Microsoft IME Japanese Privilege Escalation Vulnerability · added May 25, 2022
- CVE-2014-2817Microsoft Internet Explorer Privilege Escalation Vulnerability · added May 25, 2022
- CVE-2013-7331Microsoft Internet Explorer Information Disclosure Vulnerability · added May 25, 2022
- CVE-2013-3896Microsoft Silverlight Information Disclosure Vulnerability · added May 25, 2022
- CVE-2013-0074 ransomwareMicrosoft Silverlight Double Dereference Vulnerability · added May 25, 2022
- CVE-2018-8611Microsoft Windows Kernel Privilege Escalation Vulnerability · added May 24, 2022
- CVE-2017-8543Microsoft Windows Search Remote Code Execution Vulnerability · added May 24, 2022
- CVE-2017-0210Microsoft Internet Explorer Privilege Escalation Vulnerability · added May 24, 2022
- CVE-2017-0149Microsoft Internet Explorer Memory Corruption Vulnerability · added May 24, 2022
- CVE-2017-0147 ransomwareMicrosoft Windows SMBv1 Information Disclosure Vulnerability · added May 24, 2022
- CVE-2017-0022Microsoft XML Core Services Information Disclosure Vulnerability · added May 24, 2022
- CVE-2017-0005Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability · added May 24, 2022
- CVE-2016-3351 ransomwareMicrosoft Internet Explorer and Edge Information Disclosure Vulnerability · added May 24, 2022
- CVE-2016-3298Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability · added May 24, 2022
- CVE-2016-0162Microsoft Internet Explorer Information Disclosure Vulnerability · added May 24, 2022
- CVE-2020-1027Microsoft Windows Kernel Privilege Escalation Vulnerability · added May 23, 2022
- CVE-2020-0638 ransomwareMicrosoft Update Notification Manager Privilege Escalation Vulnerability · added May 23, 2022
- CVE-2019-1385 ransomwareMicrosoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability · added May 23, 2022
- CVE-2019-1130 ransomwareMicrosoft Windows AppX Deployment Service Privilege Escalation Vulnerability · added May 23, 2022
- CVE-2019-0880Microsoft Windows Privilege Escalation Vulnerability · added May 23, 2022
- CVE-2019-0703Microsoft Windows SMB Information Disclosure Vulnerability · added May 23, 2022
- CVE-2019-0676Microsoft Internet Explorer Information Disclosure Vulnerability · added May 23, 2022
- CVE-2018-8589Microsoft Win32k Privilege Escalation Vulnerability · added May 23, 2022
- CVE-2014-4113Microsoft Win32k Privilege Escalation Vulnerability · added May 4, 2022
- CVE-2014-0322Microsoft Internet Explorer Use-After-Free Vulnerability · added May 4, 2022
- CVE-2022-26904Microsoft Windows User Profile Service Privilege Escalation Vulnerability · added April 25, 2022
- CVE-2022-21919Microsoft Windows User Profile Service Privilege Escalation Vulnerability · added April 25, 2022
- CVE-2021-41357Microsoft Win32k Privilege Escalation Vulnerability · added April 25, 2022
- CVE-2021-40450Microsoft Win32k Privilege Escalation Vulnerability · added April 25, 2022
- CVE-2022-22718Microsoft Windows Print Spooler Privilege Escalation Vulnerability · added April 19, 2022
- CVE-2022-24521 ransomwareMicrosoft Windows CLFS Driver Privilege Escalation Vulnerability · added April 13, 2022
- CVE-2015-2502Microsoft Internet Explorer Memory Corruption Vulnerability · added April 13, 2022
- CVE-2021-42287 ransomwareMicrosoft Active Directory Domain Services Privilege Escalation Vulnerability · added April 11, 2022
- CVE-2021-42278 ransomwareMicrosoft Active Directory Domain Services Privilege Escalation Vulnerability · added April 11, 2022
- CVE-2021-31166Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability · added April 6, 2022
- CVE-2017-0148 ransomwareMicrosoft SMBv1 Server Remote Code Execution Vulnerability · added April 6, 2022
- CVE-2021-34484Microsoft Windows User Profile Service Privilege Escalation Vulnerability · added March 31, 2022
- CVE-2021-38646 ransomwareMicrosoft Office Access Connectivity Engine Remote Code Execution Vulnerability · added March 28, 2022
- CVE-2021-34486Microsoft Windows Event Tracing Privilege Escalation Vulnerability · added March 28, 2022
- CVE-2018-8440 ransomwareMicrosoft Windows Privilege Escalation Vulnerability · added March 28, 2022
- CVE-2018-8406 ransomwareMicrosoft DirectX Graphics Kernel Privilege Escalation Vulnerability · added March 28, 2022
- CVE-2018-8405 ransomwareMicrosoft DirectX Graphics Kernel Privilege Escalation Vulnerability · added March 28, 2022
- CVE-2017-0213 ransomwareMicrosoft Windows Privilege Escalation Vulnerability · added March 28, 2022
- CVE-2017-0059Microsoft Internet Explorer Information Disclosure Vulnerability · added March 28, 2022
- CVE-2017-0037Microsoft Edge and Internet Explorer Type Confusion Vulnerability · added March 28, 2022
- CVE-2016-7201Microsoft Edge Memory Corruption Vulnerability · added March 28, 2022
- CVE-2016-7200Microsoft Edge Memory Corruption Vulnerability · added March 28, 2022
- CVE-2016-0189 ransomwareMicrosoft Internet Explorer Memory Corruption Vulnerability · added March 28, 2022
- CVE-2016-0151 ransomwareMicrosoft Windows CSRSS Security Feature Bypass Vulnerability · added March 28, 2022
- CVE-2016-0040Microsoft Windows Kernel Privilege Escalation Vulnerability · added March 28, 2022
- CVE-2015-2426Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability · added March 28, 2022
- CVE-2015-2419Microsoft Internet Explorer Memory Corruption Vulnerability · added March 28, 2022
- CVE-2015-1770Microsoft Office Uninitialized Memory Use Vulnerability · added March 28, 2022
- CVE-2013-3660Microsoft Win32k Privilege Escalation Vulnerability · added March 28, 2022
- CVE-2013-2551 ransomwareMicrosoft Internet Explorer Use-After-Free Vulnerability · added March 28, 2022
- CVE-2012-2539Microsoft Word Remote Code Execution Vulnerability · added March 28, 2022
- CVE-2011-2005Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability · added March 28, 2022
- CVE-2010-4398Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability · added March 28, 2022
- CVE-2022-21999 ransomwareMicrosoft Windows Print Spooler Privilege Escalation Vulnerability · added March 25, 2022
- CVE-2019-0903Microsoft GDI Remote Code Execution Vulnerability · added March 25, 2022
- CVE-2018-8414Microsoft Windows Shell Remote Code Execution Vulnerability · added March 25, 2022
- CVE-2018-8373Microsoft Scripting Engine Memory Corruption Vulnerability · added March 25, 2022
- CVE-2017-0146 ransomwareMicrosoft Windows SMB Remote Code Execution Vulnerability · added March 25, 2022
- CVE-2014-6332Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability · added March 25, 2022
- CVE-2014-6324Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability · added March 25, 2022
- CVE-2019-1405 ransomwareMicrosoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability · added March 15, 2022
- CVE-2019-1322 ransomwareMicrosoft Windows Privilege Escalation Vulnerability · added March 15, 2022
- CVE-2019-1315 ransomwareMicrosoft Windows Error Reporting Manager Privilege Escalation Vulnerability · added March 15, 2022
- CVE-2019-1253 ransomwareMicrosoft Windows AppX Deployment Server Privilege Escalation Vulnerability · added March 15, 2022
- CVE-2019-1132Microsoft Win32k Privilege Escalation Vulnerability · added March 15, 2022
- CVE-2019-1129 ransomwareMicrosoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability · added March 15, 2022
- CVE-2019-1069 ransomwareMicrosoft Task Scheduler Privilege Escalation Vulnerability · added March 15, 2022
- CVE-2019-1064 ransomwareMicrosoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability · added March 15, 2022
- CVE-2019-0841 ransomwareMicrosoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability · added March 15, 2022
- CVE-2019-0543 ransomwareMicrosoft Windows Privilege Escalation Vulnerability · added March 15, 2022
- CVE-2018-8120 ransomwareMicrosoft Win32k Privilege Escalation Vulnerability · added March 15, 2022
- CVE-2017-0101 ransomwareMicrosoft Windows Transaction Manager Privilege Escalation Vulnerability · added March 15, 2022
- CVE-2016-3309 ransomwareMicrosoft Windows Kernel Privilege Escalation Vulnerability · added March 15, 2022
- CVE-2015-2546 ransomwareMicrosoft Win32k Memory Corruption Vulnerability · added March 15, 2022
- CVE-2021-41379 ransomwareMicrosoft Windows Installer Privilege Escalation Vulnerability · added March 3, 2022
- CVE-2019-1297Microsoft Excel Remote Code Execution Vulnerability · added March 3, 2022
- CVE-2018-8581 ransomwareMicrosoft Exchange Server Privilege Escalation Vulnerability · added March 3, 2022
- CVE-2017-11826Microsoft Office Remote Code Execution Vulnerability · added March 3, 2022
- CVE-2017-8540Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability · added March 3, 2022
- CVE-2017-0261Microsoft Office Use-After-Free Vulnerability · added March 3, 2022
- CVE-2017-0001Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability · added March 3, 2022
- CVE-2016-7262Microsoft Office Security Feature Bypass Vulnerability · added March 3, 2022
- CVE-2016-7193Microsoft Office Memory Corruption Vulnerability · added March 3, 2022
- CVE-2016-0099 ransomwareMicrosoft Windows Secondary Logon Service Privilege Escalation Vulnerability · added March 3, 2022
- CVE-2015-2545Microsoft Office Malformed EPS File Vulnerability · added March 3, 2022
- CVE-2015-2424Microsoft PowerPoint Memory Corruption Vulnerability · added March 3, 2022
- CVE-2015-2387Microsoft ATM Font Driver Privilege Escalation Vulnerability · added March 3, 2022
- CVE-2015-1701 ransomwareMicrosoft Win32k Privilege Escalation Vulnerability · added March 3, 2022
- CVE-2015-1642Microsoft Office Memory Corruption Vulnerability · added March 3, 2022
- CVE-2014-4114Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability · added March 3, 2022
- CVE-2013-5065Microsoft Windows Kernel Privilege Escalation Vulnerability · added March 3, 2022
- CVE-2013-3897Microsoft Internet Explorer Use-After-Free Vulnerability · added March 3, 2022
- CVE-2013-1347Microsoft Internet Explorer Remote Code Execution Vulnerability · added March 3, 2022
- CVE-2012-1856Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability · added March 3, 2022
- CVE-2011-1889Microsoft Forefront TMG Remote Code Execution Vulnerability · added March 3, 2022
- CVE-2010-3333Microsoft Office Stack-based Buffer Overflow Vulnerability · added March 3, 2022
- CVE-2010-0232Microsoft Windows Kernel Exception Handler Vulnerability · added March 3, 2022
- CVE-2009-3129Microsoft Excel Featheader Record Memory Corruption Vulnerability · added March 3, 2022
- CVE-2009-1123Microsoft Windows Improper Input Validation Vulnerability · added March 3, 2022
- CVE-2004-0210Microsoft Windows Privilege Escalation Vulnerability · added March 3, 2022
- CVE-2002-0367Microsoft Windows Privilege Escalation Vulnerability · added March 3, 2022
- CVE-2017-8570Microsoft Office Remote Code Execution Vulnerability · added February 25, 2022
- CVE-2017-0222Microsoft Internet Explorer Remote Code Execution Vulnerability · added February 25, 2022
- CVE-2014-6352Microsoft Windows Code Injection Vulnerability · added February 25, 2022
- CVE-2019-0752 ransomwareMicrosoft Internet Explorer Type Confusion Vulnerability · added February 15, 2022
- CVE-2018-8174 ransomwareMicrosoft Windows VBScript Engine Out-of-Bounds Write Vulnerability · added February 15, 2022
- CVE-2014-1761Microsoft Word Memory Corruption Vulnerability · added February 15, 2022
- CVE-2013-3906Microsoft Graphics Component Memory Corruption Vulnerability · added February 15, 2022
- CVE-2021-36934Microsoft Windows SAM Local Privilege Escalation Vulnerability · added February 10, 2022
- CVE-2020-0796 ransomwareMicrosoft SMBv3 Remote Code Execution Vulnerability · added February 10, 2022
- CVE-2017-8464Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability · added February 10, 2022
- CVE-2017-0263Microsoft Win32k Privilege Escalation Vulnerability · added February 10, 2022
- CVE-2017-0262Microsoft Office Remote Code Execution Vulnerability · added February 10, 2022
- CVE-2017-0145 ransomwareMicrosoft SMBv1 Remote Code Execution Vulnerability · added February 10, 2022
- CVE-2017-0144 ransomwareMicrosoft SMBv1 Remote Code Execution Vulnerability · added February 10, 2022
- CVE-2015-1635Microsoft HTTP.sys Remote Code Execution Vulnerability · added February 10, 2022
- CVE-2022-21882 ransomwareMicrosoft Win32k Privilege Escalation Vulnerability · added February 4, 2022
- CVE-2020-0787 ransomwareMicrosoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability · added January 28, 2022
- CVE-2014-1776Microsoft Internet Explorer Memory Corruption Vulnerability · added January 28, 2022
- CVE-2018-8453 ransomwareMicrosoft Win32k Privilege Escalation Vulnerability · added January 21, 2022
- CVE-2021-33766Microsoft Exchange Server Information Disclosure · added January 18, 2022
- CVE-2019-1458 ransomwareMicrosoft Win32k Privilege Escalation Vulnerability · added January 10, 2022
- CVE-2013-3900Microsoft WinVerifyTrust function Remote Code Execution · added January 10, 2022
- CVE-2021-43890 ransomwareMicrosoft Windows AppX Installer Spoofing Vulnerability · added December 15, 2021
- CVE-2021-42321 ransomwareMicrosoft Exchange Server Remote Code Execution Vulnerability · added November 17, 2021
- CVE-2021-42292Microsoft Excel Security Feature Bypass · added November 17, 2021
- CVE-2021-40449 ransomwareMicrosoft Windows Win32k Privilege Escalation Vulnerability · added November 17, 2021
- CVE-2021-40444 ransomwareMicrosoft MSHTML Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2021-38649Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability · added November 3, 2021
- CVE-2021-38648Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability · added November 3, 2021
- CVE-2021-38647 ransomwareMicrosoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2021-38645Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability · added November 3, 2021
- CVE-2021-36955 ransomwareMicrosoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability · added November 3, 2021
- CVE-2021-36948Microsoft Windows Update Medic Service Privilege Escalation Vulnerability · added November 3, 2021
- CVE-2021-36942 ransomwareMicrosoft Windows Local Security Authority (LSA) Spoofing Vulnerability · added November 3, 2021
- CVE-2021-34527 ransomwareMicrosoft Windows Print Spooler Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2021-34523 ransomwareMicrosoft Exchange Server Privilege Escalation Vulnerability · added November 3, 2021
- CVE-2021-34473 ransomwareMicrosoft Exchange Server Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2021-34448Microsoft Windows Scripting Engine Memory Corruption Vulnerability · added November 3, 2021
- CVE-2021-33771Microsoft Windows Kernel Privilege Escalation Vulnerability · added November 3, 2021
- CVE-2021-33742Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2021-33739Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability · added November 3, 2021
- CVE-2021-31979Microsoft Windows Kernel Privilege Escalation Vulnerability · added November 3, 2021
- CVE-2021-31956Microsoft Windows NTFS Privilege Escalation Vulnerability · added November 3, 2021
- CVE-2021-31955Microsoft Windows Kernel Information Disclosure Vulnerability · added November 3, 2021
- CVE-2021-31207 ransomwareMicrosoft Exchange Server Security Feature Bypass Vulnerability · added November 3, 2021
- CVE-2021-31201Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability · added November 3, 2021
- CVE-2021-31199Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability · added November 3, 2021
- CVE-2021-28310Microsoft Win32k Privilege Escalation Vulnerability · added November 3, 2021
- CVE-2021-27085Microsoft Internet Explorer Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2021-27065 ransomwareMicrosoft Exchange Server Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2021-27059Microsoft Office Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2021-26858 ransomwareMicrosoft Exchange Server Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2021-26857 ransomwareMicrosoft Exchange Server Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2021-26855 ransomwareMicrosoft Exchange Server Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2021-26411 ransomwareMicrosoft Internet Explorer Memory Corruption Vulnerability · added November 3, 2021
- CVE-2021-1732 ransomwareMicrosoft Win32k Privilege Escalation Vulnerability · added November 3, 2021
- CVE-2021-1675 ransomwareMicrosoft Windows Print Spooler Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2021-1647Microsoft Defender Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2020-17144Microsoft Exchange Server Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2020-17087Microsoft Windows Kernel Privilege Escalation Vulnerability · added November 3, 2021
- CVE-2020-1472 ransomwareMicrosoft Netlogon Privilege Escalation Vulnerability · added November 3, 2021
- CVE-2020-1464Microsoft Windows Spoofing Vulnerability · added November 3, 2021
- CVE-2020-1380Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability · added November 3, 2021
- CVE-2020-1350Microsoft Windows DNS Server Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2020-1147Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2020-1054Microsoft Win32k Privilege Escalation Vulnerability · added November 3, 2021
- CVE-2020-1040Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2020-1020Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2020-0986Microsoft Windows Kernel Privilege Escalation Vulnerability · added November 3, 2021
- CVE-2020-0968 ransomwareMicrosoft Internet Explorer Scripting Engine Memory Corruption Vulnerability · added November 3, 2021
- CVE-2020-0938Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2020-0878 ransomwareMicrosoft Edge and Internet Explorer Memory Corruption Vulnerability · added November 3, 2021
- CVE-2020-0688 ransomwareMicrosoft Exchange Server Validation Key Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2020-0683Microsoft Windows Installer Privilege Escalation Vulnerability · added November 3, 2021
- CVE-2020-0674Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability · added November 3, 2021
- CVE-2020-0646Microsoft .NET Framework Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2020-0601Microsoft Windows CryptoAPI Spoofing Vulnerability · added November 3, 2021
- CVE-2019-1429Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability · added November 3, 2021
- CVE-2019-1367 ransomwareMicrosoft Internet Explorer Scripting Engine Memory Corruption Vulnerability · added November 3, 2021
- CVE-2019-1215 ransomwareMicrosoft Windows Privilege Escalation Vulnerability · added November 3, 2021
- CVE-2019-1214Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability · added November 3, 2021
- CVE-2019-0863Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability · added November 3, 2021
- CVE-2019-0859 ransomwareMicrosoft Win32k Privilege Escalation Vulnerability · added November 3, 2021
- CVE-2019-0808Microsoft Win32k Privilege Escalation Vulnerability · added November 3, 2021
- CVE-2019-0803 ransomwareMicrosoft Win32k Privilege Escalation Vulnerability · added November 3, 2021
- CVE-2019-0797Microsoft Win32k Privilege Escalation Vulnerability · added November 3, 2021
- CVE-2019-0708 ransomwareMicrosoft Remote Desktop Services Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2019-0604 ransomwareMicrosoft SharePoint Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2019-0541Microsoft MSHTML Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2018-8653Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability · added November 3, 2021
- CVE-2018-0802 ransomwareMicrosoft Office Memory Corruption Vulnerability · added November 3, 2021
- CVE-2018-0798Microsoft Office Memory Corruption Vulnerability · added November 3, 2021
- CVE-2017-11882 ransomwareMicrosoft Office Memory Corruption Vulnerability · added November 3, 2021
- CVE-2017-11774Microsoft Office Outlook Security Feature Bypass Vulnerability · added November 3, 2021
- CVE-2017-8759Microsoft .NET Framework Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2017-7269Microsoft Windows Server Buffer Overflow Vulnerability · added November 3, 2021
- CVE-2017-0199 ransomwareMicrosoft Office and WordPad Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2017-0143 ransomwareMicrosoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2016-7255 ransomwareMicrosoft Win32k Privilege Escalation Vulnerability · added November 3, 2021
- CVE-2016-3235Microsoft Office OLE DLL Side Loading Vulnerability · added November 3, 2021
- CVE-2016-0185Microsoft Windows Media Center Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2016-0167 ransomwareMicrosoft Win32k Privilege Escalation Vulnerability · added November 3, 2021
- CVE-2015-1641Microsoft Office Memory Corruption Vulnerability · added November 3, 2021
- CVE-2014-1812 ransomwareMicrosoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability · added November 3, 2021
- CVE-2012-0158 ransomwareMicrosoft MSCOMCTL.OCX Remote Code Execution Vulnerability · added November 3, 2021
Source: CISA Known Exploited Vulnerabilities Catalog (public domain).