Vulnerabilities in microsoft

12,270 results
CVE-2023-24949HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 24.6%CVE-2026-21510HIGHWindows Shell Security Feature Bypass VulnerabilityEPSS 24.5%KEVCVE-2025-21385HIGHMicrosoft Purview Information Disclosure VulnerabilityEPSS 24.4%CVE-2018-8225—A remote code execution vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it fails to properly handle DNS responses, EPSS 24.3%CVE-2020-1380HIGHScripting Engine Memory Corruption VulnerabilityEPSS 24.2%KEVCVE-2022-21881HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 24.2%CVE-2024-26230HIGHWindows Telephony Server Elevation of Privilege VulnerabilityEPSS 24.1%CVE-2018-1030—A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka EPSS 24.1%CVE-2018-8154—A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, akEPSS 24.1%CVE-2023-38152MEDIUMDHCP Server Service Information Disclosure VulnerabilityEPSS 24.0%CVE-2019-1352—A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code EEPSS 24.0%CVE-2023-36005HIGHWindows Telephony Server Elevation of Privilege VulnerabilityEPSS 23.9%CVE-2022-35803HIGHWindows Common Log File System Driver Elevation of Privilege VulnerabilityEPSS 23.8%CVE-2024-30081HIGHWindows NTLM Spoofing VulnerabilityEPSS 23.8%CVE-2019-0724—An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege VulnerabiEPSS 23.8%CVE-2020-1400—A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database EnEPSS 23.7%CVE-2025-29793HIGHMicrosoft SharePoint Remote Code Execution VulnerabilityEPSS 23.6%CVE-2018-8176—A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly validate XML content, aka EPSS 23.6%CVE-2019-1117—A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution VEPSS 23.6%CVE-2019-1118—A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution VEPSS 23.6%