Vulnerabilities in microsoft

10,822 results
CVE-2026-59864CRITICALKiota: Path/URL injection into generated Copilot plugin manifest via x-ai-* extensionsEPSS 1.3%CVE-2025-21408HIGHMicrosoft Edge (Chromium-based) Remote Code Execution VulnerabilityEPSS 1.3%CVE-2026-23666HIGH.NET Framework Denial of Service VulnerabilityEPSS 1.3%CVE-2020-1505MEDIUMMicrosoft SharePoint Information Disclosure VulnerabilityEPSS 1.3%CVE-2020-1075MEDIUMWindows Subsystem for Linux Information Disclosure VulnerabilityEPSS 1.3%CVE-2023-29355MEDIUMDHCP Server Service Information Disclosure VulnerabilityEPSS 1.3%CVE-2020-0700—A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOpsEPSS 1.3%CVE-2024-38165MEDIUMWindows Compressed Folder Tampering VulnerabilityEPSS 1.3%CVE-2025-30384HIGHMicrosoft SharePoint Server Remote Code Execution VulnerabilityEPSS 1.3%CVE-2021-42308LOWMicrosoft Edge (Chromium-based) Spoofing VulnerabilityEPSS 1.3%CVE-2021-43220LOWMicrosoft Edge for iOS Spoofing VulnerabilityEPSS 1.3%CVE-2019-1254—An information disclosure vulnerability exists when Windows Hyper-V writes uninitialized memory to disk, aka 'Windows Hyper-V Information DiEPSS 1.3%CVE-2024-20690MEDIUMWindows Nearby Sharing Spoofing VulnerabilityEPSS 1.3%CVE-2021-36975HIGHWin32k Elevation of Privilege VulnerabilityEPSS 1.3%CVE-2023-36564MEDIUMWindows Search Security Feature Bypass VulnerabilityEPSS 1.3%CVE-2024-0590MEDIUMMicrosoft Clarity <= 0.9.3 - Cross-Site Request Forgery to Stored Cross-Site ScriptingEPSS 1.3%CVE-2019-1391—A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. TEPSS 1.3%CVE-2024-38131HIGHClipboard Virtual Channel Extension Remote Code Execution VulnerabilityEPSS 1.3%CVE-2021-28461MEDIUMDynamics Finance and Operations Cross-site Scripting VulnerabilityEPSS 1.3%CVE-2020-1424—An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory, aka 'Windows UpdateEPSS 1.3%