Vendor
Microsoft vulnerabilities under active attack
390 Microsoft vulnerabilities have confirmed evidence of exploitation in the wild, and 117 are used in ransomware campaigns.
390
confirmed exploited
117
used in ransomware
390
past fix deadline
- CVE-2026-96951 Microsoft Windows Command Injection Vulnerability Microsoft · Windows
- CVE-2026-65660 Microsoft SharePoint Code Injection Vulnerability Microsoft · SharePoint
- CVE-2026-81963 Microsoft Windows Link Following Vulnerability Microsoft · Windows
- CVE-2026-85880 Microsoft Windows Heap-Based Buffer Overflow Vulnerability Microsoft · Windows
- CVE-2019-1068 Microsoft SQL Server Remote Code Execution Vulnerability Microsoft · SQL Server
- CVE-2026-33824 Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability Microsoft · Internet Key Exchange (IKE) Service Extensions
- CVE-2026-55040 Microsoft SharePoint Weak Authentication Vulnerability Microsoft · SharePoint
- CVE-2026-68820 Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability Microsoft · Windows Ancillary Function Driver for WinSock
- CVE-2026-50522 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability Microsoft · SharePoint
- CVE-2026-58644 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability Microsoft · SharePoint
- CVE-2026-56155 Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability Microsoft · Active Directory Federation Services
- CVE-2026-56164 Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability Microsoft · SharePoint Server
- CVE-2026-45659 Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability Microsoft · SharePoint Server
- CVE-2008-4250 Microsoft Windows Buffer Overflow Vulnerability Microsoft · Windows
- CVE-2009-1537 Microsoft DirectX NULL Byte Overwrite Vulnerability Microsoft · DirectX
- CVE-2010-0249 Microsoft Internet Explorer Use-After-Free Vulnerability Microsoft · Internet Explorer
- CVE-2010-0806 Microsoft Internet Explorer Use-After-Free Vulnerability Microsoft · Internet Explorer
- CVE-2026-41091 Microsoft Defender Link Following Vulnerability Microsoft · Defender
- CVE-2026-45498 Microsoft Defender Denial of Service Vulnerability Microsoft · Defender
- CVE-2026-42897 Microsoft Exchange Server Cross-Site Scripting Vulnerability Microsoft · Microsoft
- CVE-2026-32202 Microsoft Windows Protection Mechanism Failure Vulnerability Microsoft · Windows
- CVE-2026-33825 Microsoft Defender Insufficient Granularity of Access Control Vulnerability Microsoft · Defender
- CVE-2009-0238 Microsoft Office Remote Code Execution Microsoft · Office
- CVE-2026-32201 Microsoft SharePoint Server Improper Input Validation Vulnerability Microsoft · SharePoint Server
- CVE-2012-1854 Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability Microsoft · Visual Basic for Applications (VBA)
- CVE-2025-60710 Microsoft Windows Link Following Vulnerability Microsoft · Windows
- CVE-2023-21529 Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability Microsoft · Exchange Server
- CVE-2023-36424 Microsoft Windows Out-of-Bounds Read Vulnerability Microsoft · Windows
- CVE-2026-20963 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability Microsoft · SharePoint
- CVE-2008-0015 Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2024-43468 Microsoft Configuration Manager SQL Injection Vulnerability Microsoft · Configuration Manager
- CVE-2026-21513 Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability Microsoft · Windows
- CVE-2026-21525 Microsoft Windows NULL Pointer Dereference Vulnerability Microsoft · Windows
- CVE-2026-21510 Microsoft Windows Shell Protection Mechanism Failure Vulnerability Microsoft · Windows
- CVE-2026-21533 Microsoft Windows Improper Privilege Management Vulnerability Microsoft · Windows
- CVE-2026-21519 Microsoft Windows Type Confusion Vulnerability Microsoft · Windows
- CVE-2026-21514 Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability Microsoft · Office
- CVE-2026-21509 Microsoft Office Security Feature Bypass Vulnerability Microsoft · Office
- CVE-2026-20805 Microsoft Windows Information Disclosure Vulnerability Microsoft · Windows
- CVE-2009-0556 Microsoft Office PowerPoint Code Injection Vulnerability Microsoft · Office
- CVE-2025-62221 Microsoft Windows Use After Free Vulnerability Microsoft · Windows
- CVE-2025-62215 Microsoft Windows Race Condition Vulnerability Microsoft · Windows
- CVE-2025-59287 Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability Microsoft · Windows
- CVE-2025-33073 Microsoft Windows SMB Client Improper Access Control Vulnerability Microsoft · Windows
- CVE-2025-24990 Microsoft Windows Untrusted Pointer Dereference Vulnerability Microsoft · Windows
- CVE-2025-59230 Microsoft Windows Improper Access Control Vulnerability Microsoft · Windows
- CVE-2010-3962 Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability Microsoft · Internet Explorer
- CVE-2021-43226 Microsoft Windows Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2013-3918 Microsoft Windows Out-of-Bounds Write Vulnerability Microsoft · Windows
- CVE-2011-3402 Microsoft Windows Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2007-0671 Microsoft Office Excel Remote Code Execution Vulnerability Microsoft · Office
- CVE-2013-3893 Microsoft Internet Explorer Resource Management Errors Vulnerability Microsoft · Internet Explorer
- CVE-2025-49704 Microsoft SharePoint Code Injection Vulnerability Microsoft · SharePoint
- CVE-2025-49706 Microsoft SharePoint Improper Authentication Vulnerability Microsoft · SharePoint
- CVE-2025-53770 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability Microsoft · SharePoint
- CVE-2025-33053 Microsoft Windows External Control of File Name or Path Vulnerability Microsoft · Windows
- CVE-2025-32709 Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability Microsoft · Windows
- CVE-2025-30397 Microsoft Windows Scripting Engine Type Confusion Vulnerability Microsoft · Windows
- CVE-2025-32706 Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability Microsoft · Windows
- CVE-2025-32701 Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability Microsoft · Windows
- CVE-2025-30400 Microsoft Windows DWM Core Library Use-After-Free Vulnerability Microsoft · Windows
- CVE-2025-24054 Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability Microsoft · Windows
- CVE-2025-29824 Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability Microsoft · Windows
- CVE-2025-24993 Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability Microsoft · Windows
- CVE-2025-24991 Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability Microsoft · Windows
- CVE-2025-24985 Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability Microsoft · Windows
- CVE-2025-24984 Microsoft Windows NTFS Information Disclosure Vulnerability Microsoft · Windows
- CVE-2025-24983 Microsoft Windows Win32k Use-After-Free Vulnerability Microsoft · Windows
- CVE-2025-26633 Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability Microsoft · Windows
- CVE-2018-8639 Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability Microsoft · Windows
- CVE-2024-49035 Microsoft Partner Center Improper Access Control Vulnerability Microsoft · Partner Center
- CVE-2025-24989 Microsoft Power Pages Improper Access Control Vulnerability Microsoft · Power Pages
- CVE-2025-21418 Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability Microsoft · Windows
- CVE-2025-21391 Microsoft Windows Storage Link Following Vulnerability Microsoft · Windows
- CVE-2024-21413 Microsoft Outlook Improper Input Validation Vulnerability Microsoft · Office Outlook
- CVE-2024-29059 Microsoft .NET Framework Information Disclosure Vulnerability Microsoft · .NET Framework
- CVE-2025-21335 Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability Microsoft · Windows
- CVE-2025-21334 Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability Microsoft · Windows
- CVE-2025-21333 Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability Microsoft · Windows
- CVE-2024-35250 Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability Microsoft · Windows
- CVE-2024-49138 Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability Microsoft · Windows
- CVE-2024-43451 Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability Microsoft · Windows
- CVE-2024-49039 Microsoft Windows Task Scheduler Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2024-38094 Microsoft SharePoint Deserialization Vulnerability Microsoft · SharePoint
- CVE-2024-30088 Microsoft Windows Kernel TOCTOU Race Condition Vulnerability Microsoft · Windows
- CVE-2024-43573 Microsoft Windows MSHTML Platform Spoofing Vulnerability Microsoft · Windows
- CVE-2024-43572 Microsoft Windows Management Console Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2020-0618 Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability Microsoft · SQL Server
- CVE-2024-43461 Microsoft Windows MSHTML Platform Spoofing Vulnerability Microsoft · Windows
- CVE-2024-38217 Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability Microsoft · Windows
- CVE-2024-38014 Microsoft Windows Installer Improper Privilege Management Vulnerability Microsoft · Windows
- CVE-2024-38226 Microsoft Publisher Protection Mechanism Failure Vulnerability Microsoft · Publisher
- CVE-2021-31196 Microsoft Exchange Server Information Disclosure Vulnerability Microsoft · Exchange Server
- CVE-2024-38107 Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2024-38106 Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2024-38193 Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2024-38213 Microsoft Windows SmartScreen Security Feature Bypass Vulnerability Microsoft · Windows
- CVE-2024-38178 Microsoft Windows Scripting Engine Memory Corruption Vulnerability Microsoft · Windows
- CVE-2024-38189 Microsoft Project Remote Code Execution Vulnerability Microsoft · Project
- CVE-2018-0824 Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability Microsoft · Windows
- CVE-2012-4792 Microsoft Internet Explorer Use-After-Free Vulnerability Microsoft · Internet Explorer
- CVE-2024-38080 Microsoft Windows Hyper-V Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2024-38112 Microsoft Windows MSHTML Platform Spoofing Vulnerability Microsoft · Windows
- CVE-2024-26169 Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability Microsoft · Windows
- CVE-2024-30040 Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability Microsoft · Windows
- CVE-2024-30051 Microsoft DWM Core Library Privilege Escalation Vulnerability Microsoft · DWM Core Library
- CVE-2024-29988 Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability Microsoft · SmartScreen Prompt
- CVE-2022-38028 Microsoft Windows Print Spooler Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2023-24955 Microsoft SharePoint Server Code Injection Vulnerability Microsoft · SharePoint Server
- CVE-2024-21338 Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability Microsoft · Windows
- CVE-2023-29360 Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability Microsoft · Streaming Service
- CVE-2024-21410 Microsoft Exchange Server Privilege Escalation Vulnerability Microsoft · Exchange Server
- CVE-2024-21412 Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability Microsoft · Windows
- CVE-2024-21351 Microsoft Windows SmartScreen Security Feature Bypass Vulnerability Microsoft · Windows
- CVE-2023-29357 Microsoft SharePoint Server Privilege Escalation Vulnerability Microsoft · SharePoint Server
- CVE-2023-36584 Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability Microsoft · Windows
- CVE-2023-36033 Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2023-36025 Microsoft Windows SmartScreen Security Feature Bypass Vulnerability Microsoft · Windows
- CVE-2023-36036 Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2023-41763 Microsoft Skype for Business Privilege Escalation Vulnerability Microsoft · Skype for Business