Vulnerabilities in Microsoft

10,829 results
CVE-2024-38034HIGHWindows Filtering Platform Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2020-0857—An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search IndEPSS 0.8%CVE-2021-1727HIGHWindows Installer Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2025-24039HIGHVisual Studio Code Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2022-29125HIGHWindows Push Notifications Apps Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2020-0867—An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka 'WindowsEPSS 0.8%CVE-2020-0631—An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search IndEPSS 0.8%CVE-2026-47287MEDIUMVisual Studio Code Tampering VulnerabilityEPSS 0.8%CVE-2024-38057HIGHKernel Streaming WOW Thunk Service Driver Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2024-28902MEDIUMWindows Remote Access Connection Manager Information Disclosure VulnerabilityEPSS 0.8%CVE-2025-21363HIGHMicrosoft Word Remote Code Execution VulnerabilityEPSS 0.8%CVE-2024-26207MEDIUMWindows Remote Access Connection Manager Information Disclosure VulnerabilityEPSS 0.8%CVE-2020-17137HIGHDirectX Graphics Kernel Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2024-26255MEDIUMWindows Remote Access Connection Manager Information Disclosure VulnerabilityEPSS 0.8%CVE-2026-71328HIGH.NET and Visual Studio Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-36398MEDIUMWindows NTFS Information Disclosure VulnerabilityEPSS 0.8%CVE-2023-28240HIGHWindows Network Load Balancing Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-36406MEDIUMWindows Hyper-V Information Disclosure VulnerabilityEPSS 0.8%CVE-2020-0854—An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka 'WiEPSS 0.8%CVE-2023-36428MEDIUMMicrosoft Local Security Authority Subsystem Service Information Disclosure VulnerabilityEPSS 0.8%