Vulnerabilities in Microsoft

12,297 results
CVE-2019-1349—A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code EEPSS 34.0%CVE-2021-26412CRITICALMicrosoft Exchange Server Remote Code Execution VulnerabilityEPSS 33.8%CVE-2020-16947HIGHMicrosoft Outlook Remote Code Execution VulnerabilityEPSS 33.7%CVE-2026-45484HIGHMicrosoft SharePoint Elevation of Privilege VulnerabilityEPSS 33.5%CVE-2018-8172—A remote code execution vulnerability exists in Visual Studio software when the software does not check the source markup of a file for an uEPSS 33.5%CVE-2022-24491CRITICALWindows Network File System Remote Code Execution VulnerabilityEPSS 33.5%CVE-2022-24502MEDIUMWindows HTML Platforms Security Feature Bypass VulnerabilityEPSS 33.1%CVE-2019-0697—A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, akaEPSS 32.9%CVE-2022-22025HIGHWindows Internet Information Services Cachuri Module Denial of Service VulnerabilityEPSS 32.7%CVE-2024-38144HIGHKernel Streaming WOW Thunk Service Driver Elevation of Privilege VulnerabilityEPSS 32.3%CVE-2018-8423—A remote code execution vulnerability exists in the Microsoft JET Database Engine, aka "Microsoft JET Database Engine Remote Code Execution EPSS 32.2%CVE-2024-38148HIGHWindows Secure Channel Denial of Service VulnerabilityEPSS 31.8%CVE-2022-24463MEDIUMMicrosoft Exchange Server Spoofing VulnerabilityEPSS 31.8%CVE-2025-50154MEDIUMMicrosoft Windows File Explorer Spoofing VulnerabilityEPSS 31.8%CVE-2019-0667—A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine RemEPSS 31.3%CVE-2018-8273—A buffer overflow vulnerability exists in the Microsoft SQL Server that could allow remote code execution on an affected system, aka "MicrosEPSS 31.2%CVE-2026-33112HIGHMicrosoft SharePoint Server Remote Code Execution VulnerabilityEPSS 31.1%CVE-2020-0729—A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attaEPSS 30.9%CVE-2023-21819HIGHWindows Secure Channel Denial of Service VulnerabilityEPSS 30.8%CVE-2024-21318HIGHMicrosoft SharePoint Server Remote Code Execution VulnerabilityEPSS 30.8%