Vulnerabilities in Microsoft

12,297 results
CVE-2022-24500HIGHWindows SMB Remote Code Execution VulnerabilityEPSS 38.0%CVE-2023-38146HIGHWindows Themes Remote Code Execution VulnerabilityEPSS 37.4%CVE-2022-22017HIGHRemote Desktop Client Remote Code Execution VulnerabilityEPSS 37.1%CVE-2023-36757HIGHMicrosoft Exchange Server Spoofing VulnerabilityEPSS 36.9%CVE-2023-28231HIGHDHCP Server Service Remote Code Execution VulnerabilityEPSS 36.6%CVE-2020-17144HIGHMicrosoft Exchange Remote Code Execution VulnerabilityEPSS 36.5%KEVCVE-2022-37974MEDIUMWindows Mixed Reality Developer Tools Information Disclosure VulnerabilityEPSS 36.5%CVE-2024-43464HIGHMicrosoft SharePoint Server Remote Code Execution VulnerabilityEPSS 36.3%CVE-2021-28481CRITICALMicrosoft Exchange Server Remote Code Execution VulnerabilityEPSS 36.2%CVE-2019-1311—A remote code execution vulnerability exists when the Windows Imaging API improperly handles objects in memory, aka 'Windows Imaging API RemEPSS 36.2%CVE-2024-38071HIGHWindows Remote Desktop Licensing Service Denial of Service VulnerabilityEPSS 35.9%CVE-2024-21388MEDIUMMicrosoft Edge (Chromium-based) Elevation of Privilege VulnerabilityEPSS 35.6%CVE-2020-0932—A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application paEPSS 35.5%CVE-2022-24497CRITICALWindows Network File System Remote Code Execution VulnerabilityEPSS 34.8%CVE-2025-21400HIGHMicrosoft SharePoint Server Remote Code Execution VulnerabilityEPSS 34.2%CVE-2019-0603—A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in memory. An attacker EPSS 34.2%CVE-2023-21674HIGHWindows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityEPSS 34.2%KEVCVE-2025-30394MEDIUMWindows Remote Desktop Gateway (RD Gateway) Denial of Service VulnerabilityEPSS 34.2%CVE-2021-34480MEDIUMScripting Engine Memory Corruption VulnerabilityEPSS 34.2%CVE-2018-8115—A remote code execution vulnerability exists when the Windows Host Compute Service Shim (hcsshim) library fails to properly validate input wEPSS 34.1%