Vendor
Microsoft vulnerabilities under active attack
382 Microsoft vulnerabilities have confirmed evidence of exploitation in the wild, and 104 are used in ransomware campaigns.
382
confirmed exploited
104
used in ransomware
382
past fix deadline
- CVE-2019-1132 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2019-1129 Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2019-1069 Microsoft Task Scheduler Privilege Escalation Vulnerability Microsoft · Task Scheduler
- CVE-2019-1064 Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2019-0841 Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2019-0543 Microsoft Windows Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2018-8120 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2017-0101 Microsoft Windows Transaction Manager Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2016-3309 Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2015-2546 Microsoft Win32k Memory Corruption Vulnerability Microsoft · Win32k
- CVE-2021-41379 Microsoft Windows Installer Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2019-1297 Microsoft Excel Remote Code Execution Vulnerability Microsoft · Excel
- CVE-2018-8581 Microsoft Exchange Server Privilege Escalation Vulnerability Microsoft · Exchange Server
- CVE-2017-8540 Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability Microsoft · Malware Protection Engine
- CVE-2017-11826 Microsoft Office Remote Code Execution Vulnerability Microsoft · Office
- CVE-2017-0261 Microsoft Office Use-After-Free Vulnerability Microsoft · Office
- CVE-2017-0001 Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability Microsoft · Graphics Device Interface (GDI)
- CVE-2016-7262 Microsoft Office Security Feature Bypass Vulnerability Microsoft · Excel
- CVE-2016-7193 Microsoft Office Memory Corruption Vulnerability Microsoft · Office
- CVE-2016-0099 Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2015-2545 Microsoft Office Malformed EPS File Vulnerability Microsoft · Office
- CVE-2015-2424 Microsoft PowerPoint Memory Corruption Vulnerability Microsoft · PowerPoint
- CVE-2015-2387 Microsoft ATM Font Driver Privilege Escalation Vulnerability Microsoft · ATM Font Driver
- CVE-2015-1701 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2015-1642 Microsoft Office Memory Corruption Vulnerability Microsoft · Office
- CVE-2014-4114 Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2013-5065 Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2013-3897 Microsoft Internet Explorer Use-After-Free Vulnerability Microsoft · Internet Explorer
- CVE-2013-1347 Microsoft Internet Explorer Remote Code Execution Vulnerability Microsoft · Internet Explorer
- CVE-2012-1856 Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability Microsoft · Office
- CVE-2011-1889 Microsoft Forefront TMG Remote Code Execution Vulnerability Microsoft · Forefront Threat Management Gateway (TMG)
- CVE-2010-3333 Microsoft Office Stack-based Buffer Overflow Vulnerability Microsoft · Office
- CVE-2010-0232 Microsoft Windows Kernel Exception Handler Vulnerability Microsoft · Windows
- CVE-2009-3129 Microsoft Excel Featheader Record Memory Corruption Vulnerability Microsoft · Excel
- CVE-2009-1123 Microsoft Windows Improper Input Validation Vulnerability Microsoft · Windows
- CVE-2004-0210 Microsoft Windows Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2002-0367 Microsoft Windows Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2017-8570 Microsoft Office Remote Code Execution Vulnerability Microsoft · Office
- CVE-2017-0222 Microsoft Internet Explorer Remote Code Execution Vulnerability Microsoft · Internet Explorer
- CVE-2014-6352 Microsoft Windows Code Injection Vulnerability Microsoft · Windows
- CVE-2019-0752 Microsoft Internet Explorer Type Confusion Vulnerability Microsoft · Internet Explorer
- CVE-2018-8174 Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability Microsoft · Windows
- CVE-2014-1761 Microsoft Word Memory Corruption Vulnerability Microsoft · Word
- CVE-2013-3906 Microsoft Graphics Component Memory Corruption Vulnerability Microsoft · Graphics Component
- CVE-2021-36934 Microsoft Windows SAM Local Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2020-0796 Microsoft SMBv3 Remote Code Execution Vulnerability Microsoft · SMBv3
- CVE-2017-8464 Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2017-0263 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2017-0262 Microsoft Office Remote Code Execution Vulnerability Microsoft · Office
- CVE-2017-0145 Microsoft SMBv1 Remote Code Execution Vulnerability Microsoft · SMBv1
- CVE-2017-0144 Microsoft SMBv1 Remote Code Execution Vulnerability Microsoft · SMBv1
- CVE-2015-1635 Microsoft HTTP.sys Remote Code Execution Vulnerability Microsoft · HTTP.sys
- CVE-2022-21882 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2020-0787 Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability Microsoft · Windows
- CVE-2014-1776 Microsoft Internet Explorer Memory Corruption Vulnerability Microsoft · Internet Explorer
- CVE-2018-8453 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2021-33766 Microsoft Exchange Server Information Disclosure Microsoft · Exchange Server
- CVE-2019-1458 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2013-3900 Microsoft WinVerifyTrust function Remote Code Execution Microsoft · WinVerifyTrust function
- CVE-2021-43890 Microsoft Windows AppX Installer Spoofing Vulnerability Microsoft · Windows
- CVE-2021-40449 Microsoft Windows Win32k Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2021-42321 Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft · Exchange
- CVE-2021-42292 Microsoft Excel Security Feature Bypass Microsoft · Office
- CVE-2014-1812 Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2021-38647 Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability Microsoft · Open Management Infrastructure (OMI)
- CVE-2016-0167 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2020-0878 Microsoft Edge and Internet Explorer Memory Corruption Vulnerability Microsoft · Edge and Internet Explorer
- CVE-2021-31955 Microsoft Windows Kernel Information Disclosure Vulnerability Microsoft · Windows
- CVE-2021-1647 Microsoft Defender Remote Code Execution Vulnerability Microsoft · Defender
- CVE-2021-33739 Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2016-0185 Microsoft Windows Media Center Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2020-0683 Microsoft Windows Installer Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2020-17087 Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2021-33742 Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2021-31199 Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability Microsoft · Enhanced Cryptographic Provider
- CVE-2021-33771 Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2021-31956 Microsoft Windows NTFS Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2021-31201 Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability Microsoft · Enhanced Cryptographic Provider
- CVE-2021-31979 Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2020-0938 Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2020-17144 Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft · Exchange Server
- CVE-2020-0986 Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2020-1020 Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2021-38645 Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability Microsoft · Open Management Infrastructure (OMI)
- CVE-2021-34523 Microsoft Exchange Server Privilege Escalation Vulnerability Microsoft · Exchange Server
- CVE-2017-7269 Microsoft Windows Server Buffer Overflow Vulnerability Microsoft · Internet Information Services (IIS)
- CVE-2021-36948 Microsoft Windows Update Medic Service Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2021-38649 Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability Microsoft · Open Management Infrastructure (OMI)
- CVE-2020-0688 Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability Microsoft · Exchange Server
- CVE-2017-0143 Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2016-7255 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2019-0708 Microsoft Remote Desktop Services Remote Code Execution Vulnerability Microsoft · Remote Desktop Services
- CVE-2021-34473 Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft · Exchange Server
- CVE-2020-1464 Microsoft Windows Spoofing Vulnerability Microsoft · Windows
- CVE-2021-1732 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2021-34527 Microsoft Windows Print Spooler Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2021-31207 Microsoft Exchange Server Security Feature Bypass Vulnerability Microsoft · Exchange Server
- CVE-2019-0803 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2020-1040 Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability Microsoft · Hyper-V RemoteFX
- CVE-2021-28310 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2020-1350 Microsoft Windows DNS Server Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2021-26411 Microsoft Internet Explorer Memory Corruption Vulnerability Microsoft · Internet Explorer
- CVE-2019-0859 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2021-40444 Microsoft MSHTML Remote Code Execution Vulnerability Microsoft · MSHTML
- CVE-2017-8759 Microsoft .NET Framework Remote Code Execution Vulnerability Microsoft · .NET Framework
- CVE-2018-8653 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Microsoft · Internet Explorer
- CVE-2019-0797 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2021-36942 Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability Microsoft · Windows
- CVE-2019-1215 Microsoft Windows Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2018-0798 Microsoft Office Memory Corruption Vulnerability Microsoft · Office
- CVE-2018-0802 Microsoft Office Memory Corruption Vulnerability Microsoft · Office
- CVE-2012-0158 Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability Microsoft · MSCOMCTL.OCX
- CVE-2015-1641 Microsoft Office Memory Corruption Vulnerability Microsoft · Office
- CVE-2021-27085 Microsoft Internet Explorer Remote Code Execution Vulnerability Microsoft · Internet Explorer
- CVE-2019-0541 Microsoft MSHTML Remote Code Execution Vulnerability Microsoft · MSHTML
- CVE-2017-11882 Microsoft Office Memory Corruption Vulnerability Microsoft · Office
- CVE-2020-0674 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Microsoft · Internet Explorer
- CVE-2021-27059 Microsoft Office Remote Code Execution Vulnerability Microsoft · Office
- CVE-2019-1367 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Microsoft · Internet Explorer
- CVE-2017-0199 Microsoft Office and WordPad Remote Code Execution Vulnerability Microsoft · Office and WordPad