Vendor
Microsoft vulnerabilities under active attack
388 Microsoft vulnerabilities have confirmed evidence of exploitation in the wild, and 117 are used in ransomware campaigns.
388
confirmed exploited
117
used in ransomware
386
past fix deadline
- CVE-2019-0541 Microsoft MSHTML Remote Code Execution Vulnerability Microsoft · MSHTML
- CVE-2017-11882 Microsoft Office Memory Corruption Vulnerability Microsoft · Office
- CVE-2020-0674 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Microsoft · Internet Explorer
- CVE-2021-27059 Microsoft Office Remote Code Execution Vulnerability Microsoft · Office
- CVE-2019-1367 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Microsoft · Internet Explorer
- CVE-2017-0199 Microsoft Office and WordPad Remote Code Execution Vulnerability Microsoft · Office and WordPad
- CVE-2020-1380 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Microsoft · Internet Explorer
- CVE-2019-1429 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Microsoft · Internet Explorer
- CVE-2017-11774 Microsoft Office Outlook Security Feature Bypass Vulnerability Microsoft · Office
- CVE-2020-0968 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Microsoft · Internet Explorer
- CVE-2020-1472 Microsoft Netlogon Privilege Escalation Vulnerability Microsoft · Netlogon
- CVE-2021-26855 Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft · Exchange Server
- CVE-2021-26858 Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft · Exchange Server
- CVE-2021-27065 Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft · Exchange Server
- CVE-2020-1054 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2021-1675 Microsoft Windows Print Spooler Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2021-34448 Microsoft Windows Scripting Engine Memory Corruption Vulnerability Microsoft · Windows
- CVE-2020-0601 Microsoft Windows CryptoAPI Spoofing Vulnerability Microsoft · Windows
- CVE-2019-0604 Microsoft SharePoint Remote Code Execution Vulnerability Microsoft · SharePoint
- CVE-2020-0646 Microsoft .NET Framework Remote Code Execution Vulnerability Microsoft · .NET Framework
- CVE-2019-0808 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2021-26857 Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft · Exchange Server
- CVE-2020-1147 Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability Microsoft · .NET Framework, SharePoint, Visual Studio
- CVE-2019-1214 Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability Microsoft · Windows
- CVE-2016-3235 Microsoft Office OLE DLL Side Loading Vulnerability Microsoft · Office
- CVE-2019-0863 Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2021-36955 Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2021-38648 Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability Microsoft · Open Management Infrastructure (OMI)