Vulnerabilities in microsoft

10,829 results
CVE-2025-9611HIGHMicrosoft Playwright MCP Server < 0.0.40 DNS Rebinding via Missing Origin Header ValidationEPSS 1.2%CVE-2021-1637MEDIUMWindows DNS Query Information Disclosure VulnerabilityEPSS 1.2%CVE-2025-27481HIGHWindows Telephony Service Remote Code Execution VulnerabilityEPSS 1.2%CVE-2021-1663MEDIUMWindows Projected File System FS Filter Driver Information Disclosure VulnerabilityEPSS 1.2%CVE-2020-1038MEDIUMWindows Routing Utilities Denial of ServiceEPSS 1.2%CVE-2026-26127HIGH.NET Denial of Service VulnerabilityEPSS 1.2%CVE-2021-34532MEDIUMASP.NET Core and Visual Studio Information Disclosure VulnerabilityEPSS 1.2%CVE-2023-21720MEDIUMMicrosoft Edge (Chromium-based) Tampering VulnerabilityEPSS 1.2%CVE-2023-35333HIGHMediaWiki PandocUpload Extension Remote Code Execution VulnerabilityEPSS 1.2%CVE-2020-17134HIGHWindows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityEPSS 1.2%CVE-2024-49076HIGHWindows Virtualization-Based Security (VBS) Enclave Elevation of Privilege VulnerabilityEPSS 1.2%CVE-2025-55225MEDIUMWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityEPSS 1.2%CVE-2026-105795LOWKiota: Unsafe oauth_card_path references in Kiota-generated API plugin manifestsEPSS 1.2%CVE-2020-0814—An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operatioEPSS 1.2%CVE-2025-26668HIGHWindows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityEPSS 1.2%CVE-2019-1396—An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k EPSS 1.2%CVE-2022-29140MEDIUMWindows Print Spooler Information Disclosure VulnerabilityEPSS 1.2%CVE-2019-1395—An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k EPSS 1.2%CVE-2025-50156MEDIUMWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityEPSS 1.2%CVE-2019-1394—An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k EPSS 1.2%