Vulnerabilities in microsoft

12,270 results
CVE-2026-45455LOWMicrosoft Excel Information Disclosure VulnerabilityEPSS 0.8%CVE-2026-59113HIGHVisual Studio Code Remote Code Execution VulnerabilityEPSS 0.8%CVE-2025-27483HIGHNTFS Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2026-78462HIGHVisual Studio Code Security Feature Bypass VulnerabilityEPSS 0.8%CVE-2026-47645HIGHMicrosoft 365 Copilot's Business Chat Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2025-21193MEDIUMActive Directory Federation Server Spoofing VulnerabilityEPSS 0.8%CVE-2026-83891HIGHMicrosoft Office Word Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-97769HIGHMicrosoft Office Excel Remote Code Execution VulnerabilityEPSS 0.8%CVE-2024-20682HIGHWindows Cryptographic Services Remote Code Execution VulnerabilityEPSS 0.8%CVE-2024-21309HIGHWindows Kernel-Mode Driver Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2020-0631—An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search IndEPSS 0.8%CVE-2021-1727HIGHWindows Installer Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2020-0867—An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka 'WindowsEPSS 0.8%CVE-2024-38034HIGHWindows Filtering Platform Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2020-0844—An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, akaEPSS 0.8%CVE-2024-38119HIGHWindows Network Address Translation (NAT) Remote Code Execution VulnerabilityEPSS 0.8%CVE-2022-29125HIGHWindows Push Notifications Apps Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2026-62801MEDIUMMicrosoft PowerShell Security Feature Bypass VulnerabilityEPSS 0.8%CVE-2020-1279—An elevation of privilege vulnerability exists when Windows Lockscreen fails to properly load spotlight images from a secure location, aka 'EPSS 0.8%CVE-2020-0868—An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka 'WindowsEPSS 0.8%