Vendor
Microsoft vulnerabilities under active attack
382 Microsoft vulnerabilities have confirmed evidence of exploitation in the wild, and 104 are used in ransomware campaigns.
382
confirmed exploited
104
used in ransomware
382
past fix deadline
- CVE-2023-35311 Microsoft Outlook Security Feature Bypass Vulnerability Microsoft · Outlook
- CVE-2023-36874 Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2016-0165 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2023-29336 Microsoft Win32K Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2023-28252 Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2019-1388 Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2013-3163 Microsoft Internet Explorer Memory Corruption Vulnerability Microsoft · Internet Explorer
- CVE-2023-23397 Microsoft Office Outlook Privilege Escalation Vulnerability Microsoft · Office
- CVE-2023-24880 Microsoft Windows SmartScreen Security Feature Bypass Vulnerability Microsoft · Windows
- CVE-2023-21715 Microsoft Office Publisher Security Feature Bypass Vulnerability Microsoft · Office
- CVE-2023-23376 Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2023-21823 Microsoft Windows Graphic Component Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2022-41080 Microsoft Exchange Server Privilege Escalation Vulnerability Microsoft · Exchange Server
- CVE-2023-21674 Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2022-44698 Microsoft Defender SmartScreen Security Feature Bypass Vulnerability Microsoft · Defender
- CVE-2022-41049 Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability Microsoft · Windows
- CVE-2022-41091 Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability Microsoft · Windows
- CVE-2022-41073 Microsoft Windows Print Spooler Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2022-41125 Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2022-41128 Microsoft Windows Scripting Languages Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2022-41033 Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability Microsoft · Windows COM+ Event System Service
- CVE-2022-41082 Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft · Exchange Server
- CVE-2022-41040 Microsoft Exchange Server Server-Side Request Forgery Vulnerability Microsoft · Exchange Server
- CVE-2010-2568 Microsoft Windows Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2022-37969 Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2022-26923 Microsoft Active Directory Domain Services Privilege Escalation Vulnerability Microsoft · Active Directory
- CVE-2022-21971 Microsoft Windows Runtime Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2022-34713 Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2022-22047 Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2022-26925 Microsoft Windows LSA Spoofing Vulnerability Microsoft · Windows
- CVE-2022-30190 Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2013-1331 Microsoft Office Buffer Overflow Vulnerability Microsoft · Office
- CVE-2012-4969 Microsoft Internet Explorer Use-After-Free Vulnerability Microsoft · Internet Explorer
- CVE-2012-1889 Microsoft XML Core Services Memory Corruption Vulnerability Microsoft · XML Core Services
- CVE-2012-0151 Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2010-2572 Microsoft PowerPoint Buffer Overflow Vulnerability Microsoft · PowerPoint
- CVE-2009-0563 Microsoft Office Buffer Overflow Vulnerability Microsoft · Office
- CVE-2009-0557 Microsoft Office Object Record Corruption Vulnerability Microsoft · Office
- CVE-2006-2492 Microsoft Word Malformed Object Pointer Vulnerability Microsoft · Word
- CVE-2016-3393 Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2016-7256 Microsoft Windows Open Type Font Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2016-0034 Microsoft Silverlight Runtime Remote Code Execution Vulnerability Microsoft · Silverlight
- CVE-2015-0016 Microsoft Windows TS WebProxy Directory Traversal Vulnerability Microsoft · Windows
- CVE-2015-0071 Microsoft Internet Explorer ASLR Bypass Vulnerability Microsoft · Internet Explorer
- CVE-2015-2360 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2015-2425 Microsoft Internet Explorer Memory Corruption Vulnerability Microsoft · Internet Explorer
- CVE-2015-1769 Microsoft Windows Mount Manager Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2015-6175 Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2015-1671 Microsoft Windows Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2014-4148 Microsoft Windows Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2014-4123 Microsoft Internet Explorer Privilege Escalation Vulnerability Microsoft · Internet Explorer
- CVE-2014-2817 Microsoft Internet Explorer Privilege Escalation Vulnerability Microsoft · Internet Explorer
- CVE-2014-4077 Microsoft IME Japanese Privilege Escalation Vulnerability Microsoft · Input Method Editor (IME) Japanese
- CVE-2013-7331 Microsoft Internet Explorer Information Disclosure Vulnerability Microsoft · Internet Explorer
- CVE-2013-3896 Microsoft Silverlight Information Disclosure Vulnerability Microsoft · Silverlight
- CVE-2013-0074 Microsoft Silverlight Double Dereference Vulnerability Microsoft · Silverlight
- CVE-2018-8611 Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2017-0147 Microsoft Windows SMBv1 Information Disclosure Vulnerability Microsoft · SMBv1 server
- CVE-2017-0022 Microsoft XML Core Services Information Disclosure Vulnerability Microsoft · XML Core Services
- CVE-2017-0005 Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2017-0149 Microsoft Internet Explorer Memory Corruption Vulnerability Microsoft · Internet Explorer
- CVE-2017-0210 Microsoft Internet Explorer Privilege Escalation Vulnerability Microsoft · Internet Explorer
- CVE-2017-8543 Microsoft Windows Search Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2016-0162 Microsoft Internet Explorer Information Disclosure Vulnerability Microsoft · Internet Explorer
- CVE-2016-3351 Microsoft Internet Explorer and Edge Information Disclosure Vulnerability Microsoft · Internet Explorer and Edge
- CVE-2016-3298 Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability Microsoft · Internet Explorer
- CVE-2020-1027 Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2020-0638 Microsoft Update Notification Manager Privilege Escalation Vulnerability Microsoft · Update Notification Manager
- CVE-2019-0676 Microsoft Internet Explorer Information Disclosure Vulnerability Microsoft · Internet Explorer
- CVE-2019-0703 Microsoft Windows SMB Information Disclosure Vulnerability Microsoft · Windows
- CVE-2019-0880 Microsoft Windows Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2019-1385 Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2019-1130 Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2018-8589 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2014-4113 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2014-0322 Microsoft Internet Explorer Use-After-Free Vulnerability Microsoft · Internet Explorer
- CVE-2022-26904 Microsoft Windows User Profile Service Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2022-21919 Microsoft Windows User Profile Service Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2021-41357 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2021-40450 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2022-22718 Microsoft Windows Print Spooler Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2022-24521 Microsoft Windows CLFS Driver Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2015-2502 Microsoft Internet Explorer Memory Corruption Vulnerability Microsoft · Internet Explorer
- CVE-2021-42287 Microsoft Active Directory Domain Services Privilege Escalation Vulnerability Microsoft · Active Directory
- CVE-2021-42278 Microsoft Active Directory Domain Services Privilege Escalation Vulnerability Microsoft · Active Directory
- CVE-2021-31166 Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability Microsoft · HTTP Protocol Stack
- CVE-2017-0148 Microsoft SMBv1 Server Remote Code Execution Vulnerability Microsoft · SMBv1 server
- CVE-2021-34484 Microsoft Windows User Profile Service Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2021-38646 Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability Microsoft · Office
- CVE-2021-34486 Microsoft Windows Event Tracing Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2018-8440 Microsoft Windows Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2018-8406 Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability Microsoft · DirectX Graphics Kernel (DXGKRNL)
- CVE-2018-8405 Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability Microsoft · DirectX Graphics Kernel (DXGKRNL)
- CVE-2017-0213 Microsoft Windows Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2017-0059 Microsoft Internet Explorer Information Disclosure Vulnerability Microsoft · Internet Explorer
- CVE-2017-0037 Microsoft Edge and Internet Explorer Type Confusion Vulnerability Microsoft · Edge and Internet Explorer
- CVE-2016-7201 Microsoft Edge Memory Corruption Vulnerability Microsoft · Edge
- CVE-2016-7200 Microsoft Edge Memory Corruption Vulnerability Microsoft · Edge
- CVE-2016-0189 Microsoft Internet Explorer Memory Corruption Vulnerability Microsoft · Internet Explorer
- CVE-2016-0151 Microsoft Windows CSRSS Security Feature Bypass Vulnerability Microsoft · Client-Server Run-time Subsystem (CSRSS)
- CVE-2016-0040 Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2015-2426 Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2015-2419 Microsoft Internet Explorer Memory Corruption Vulnerability Microsoft · Internet Explorer
- CVE-2015-1770 Microsoft Office Uninitialized Memory Use Vulnerability Microsoft · Office
- CVE-2013-3660 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2013-2551 Microsoft Internet Explorer Use-After-Free Vulnerability Microsoft · Internet Explorer
- CVE-2012-2539 Microsoft Word Remote Code Execution Vulnerability Microsoft · Word
- CVE-2011-2005 Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability Microsoft · Ancillary Function Driver (afd.sys)
- CVE-2010-4398 Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability Microsoft · Windows
- CVE-2022-21999 Microsoft Windows Print Spooler Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2019-0903 Microsoft GDI Remote Code Execution Vulnerability Microsoft · Graphics Device Interface (GDI)
- CVE-2018-8414 Microsoft Windows Shell Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2018-8373 Microsoft Scripting Engine Memory Corruption Vulnerability Microsoft · Internet Explorer Scripting Engine
- CVE-2017-0146 Microsoft Windows SMB Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2014-6332 Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2014-6324 Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability Microsoft · Kerberos Key Distribution Center (KDC)
- CVE-2019-1405 Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2019-1322 Microsoft Windows Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2019-1315 Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2019-1253 Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability Microsoft · Windows