Vendor
Microsoft
18,943 known vulnerabilities in products by Microsoft, 408 of them actively exploited (CISA KEV).
Key figures
18,943
Vulnerabilities
408
Actively exploited (KEV)
117
Used by ransomware
1,071
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2025-53770 | Microsoft SharePoint Server Remote Code Execution Vulnerability In CISA KEVRansomware | 9.8 | |
| Critical | CVE-2025-49704 | Microsoft SharePoint Remote Code Execution Vulnerability In CISA KEVRansomware | 8.8 | |
| Critical | CVE-2023-29357 | Microsoft SharePoint Server Elevation of Privilege Vulnerability In CISA KEVRansomware | 9.8 | |
| Critical | CVE-2020-0796 | Microsoft SMBv3 Remote Code Execution Vulnerability In CISA KEVRansomware | 10.0 | |
| Critical | CVE-2019-0708 | Microsoft Remote Desktop Services Remote Code Execution Vulnerability In CISA KEVRansomware | 9.8 | |
| Critical | CVE-2021-38647 | Open Management Infrastructure (OMI) Remote Code Execution Vulnerability In CISA KEVRansomware | 9.8 | |
| Critical | CVE-2019-0604 | Microsoft SharePoint Remote Code Execution Vulnerability In CISA KEVRansomware | 9.8 | |
| Critical | CVE-2024-49039 | Windows Task Scheduler Elevation of Privilege Vulnerability In CISA KEVRansomware | 8.8 | |
| Critical | CVE-2022-41040 | Microsoft Exchange Server Elevation of Privilege Vulnerability In CISA KEVRansomware | 8.8 | |
| Critical | CVE-2021-34473 | Microsoft Exchange Server Remote Code Execution Vulnerability In CISA KEVRansomware | 9.1 | |
| Critical | CVE-2021-26855 | Microsoft Exchange Server Remote Code Execution Vulnerability In CISA KEVRansomware | 9.1 | |
| Critical | CVE-2022-41080 | Microsoft Exchange Server Elevation of Privilege Vulnerability In CISA KEVRansomware | 8.8 | |
| Critical | CVE-2021-34523 | Microsoft Exchange Server Elevation of Privilege Vulnerability In CISA KEVRansomware | 9.0 | |
| Critical | CVE-2024-21412 | Internet Shortcut Files Security Feature Bypass Vulnerability In CISA KEVRansomware | 8.1 | |
| Critical | CVE-2023-21529 | Microsoft Exchange Server Remote Code Execution Vulnerability In CISA KEVRansomware | 8.8 | |
| Critical | CVE-2020-0688 | Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability In CISA KEVRansomware | 8.8 | |
| Critical | CVE-2012-0158 | Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability In CISA KEVRansomware | 8.8 | |
| Critical | CVE-2021-34527 | Windows Print Spooler Remote Code Execution Vulnerability In CISA KEVRansomware | 8.8 | |
| Critical | CVE-2017-0144 | Microsoft SMBv1 Remote Code Execution Vulnerability In CISA KEVRansomware | 8.8 | |
| Critical | CVE-2020-0618 | Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability In CISA KEVRansomware | 8.8 | |
| Critical | CVE-2021-40444 | Microsoft MSHTML Remote Code Execution Vulnerability In CISA KEVRansomware | 8.8 | |
| Critical | CVE-2017-0143 | Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability In CISA KEVRansomware | 8.8 | |
| Critical | CVE-2021-42321 | Microsoft Exchange Server Remote Code Execution Vulnerability In CISA KEVRansomware | 8.8 | |
| Critical | CVE-2017-0146 | Microsoft Windows SMB Remote Code Execution Vulnerability In CISA KEVRansomware | 8.8 | |
| Critical | CVE-2017-0145 | Microsoft SMBv1 Remote Code Execution Vulnerability In CISA KEVRansomware | 8.8 |
News
- Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Daysecurityweek,
- October Patch Tuesday roundup: Over 1,400 Microsoft holes to be plugged, including three zero dayscsoonline,
- Multiples vulnérabilités dans Microsoft Windows (14 octobre 2026)cert-fr,
- NCSC-2026-0426 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Developer Toolsncsc-nl,
- NCSC-2026-0425 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft System Centerncsc-nl,
- NCSC-2026-0424 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Dynamicsncsc-nl,