Vulnerabilities in microsoft
12,236 resultsCVE-2022-30157HIGHMicrosoft SharePoint Server Remote Code Execution VulnerabilityEPSS 7.0%CVE-2021-26893CRITICALWindows DNS Server Remote Code Execution VulnerabilityEPSS 7.0%CVE-2021-38665HIGHRemote Desktop Protocol Client Information Disclosure VulnerabilityEPSS 7.0%CVE-2019-0786—An elevation of privilege vulnerability exists in the Microsoft Server Message Block (SMB) Server when an attacker with valid credentials atEPSS 7.0%CVE-2025-21204HIGHWindows Process Activation Elevation of Privilege VulnerabilityEPSS 7.0%CVE-2019-0882—An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows EPSS 7.0%CVE-2019-0774—An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows EPSS 7.0%CVE-2019-0961—An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows EPSS 7.0%CVE-2020-1238—A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory CoEPSS 7.0%CVE-2019-0815—A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service VulnerabilitEPSS 7.0%CVE-2020-0690—An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege VulnerEPSS 7.0%CVE-2024-38052HIGHKernel Streaming WOW Thunk Service Driver Elevation of Privilege VulnerabilityEPSS 7.0%CVE-2018-8278—A spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content, aka "Microsoft Edge Spoofing Vulnerability." TEPSS 6.9%CVE-2018-8595—An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows EPSS 6.9%CVE-2020-1375—An elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Server Elevation of PriEPSS 6.9%CVE-2019-1361—An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft GraphiEPSS 6.9%CVE-2019-1064HIGHWindows Elevation of Privilege VulnerabilityEPSS 6.9%KEVCVE-2024-30034MEDIUMWindows Cloud Files Mini Filter Driver Information Disclosure VulnerabilityEPSS 6.9%CVE-2020-1284—A denial of service vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests,EPSS 6.9%CVE-2018-8378—An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, whEPSS 6.8%