Vendor
Microsoft Corporation
863 known vulnerabilities in products by Microsoft Corporation, 30 of them actively exploited (CISA KEV).
Key figures
863
Vulnerabilities
30
Actively exploited (KEV)
11
Used by ransomware
38
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2017-0144 | Microsoft SMBv1 Remote Code Execution Vulnerability In CISA KEVRansomware | 8.8 | |
| Critical | CVE-2017-0143 | Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability In CISA KEVRansomware | 8.8 | |
| Critical | CVE-2017-0146 | Microsoft Windows SMB Remote Code Execution Vulnerability In CISA KEVRansomware | 8.8 | |
| Critical | CVE-2017-0145 | Microsoft SMBv1 Remote Code Execution Vulnerability In CISA KEVRansomware | 8.8 | |
| Critical | CVE-2017-0148 | Microsoft SMBv1 Server Remote Code Execution Vulnerability In CISA KEVRansomware | 8.1 | |
| Critical | CVE-2017-11882 | Microsoft Office Memory Corruption Vulnerability In CISA KEVRansomware | 7.8 | |
| Critical | CVE-2017-0199 | Microsoft Office and WordPad Remote Code Execution Vulnerability In CISA KEVRansomware | 7.8 | |
| Critical | CVE-2018-0802 | Microsoft Office Memory Corruption Vulnerability In CISA KEVRansomware | 7.8 | |
| Critical | CVE-2017-0101 | Microsoft Windows Transaction Manager Privilege Escalation Vulnerability In CISA KEVRansomware | 7.8 | |
| Critical | CVE-2017-0147 | Microsoft Windows SMBv1 Information Disclosure Vulnerability In CISA KEVRansomware | 7.5 | |
| Critical | CVE-2017-0213 | Microsoft Windows Privilege Escalation Vulnerability In CISA KEVRansomware | 7.3 | |
| Critical | CVE-2017-8543 | Microsoft Windows Search Remote Code Execution Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2018-0798 | Microsoft Office Memory Corruption Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2017-8464 | Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2017-0222 | Microsoft Internet Explorer Remote Code Execution Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2017-0149 | Microsoft Internet Explorer Memory Corruption Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2017-0210 | Microsoft Internet Explorer Privilege Escalation Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2017-0037 | Microsoft Edge and Internet Explorer Type Confusion Vulnerability In CISA KEV | 8.1 | |
| Critical | CVE-2017-8570 | Microsoft Office Remote Code Execution Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2017-8759 | Microsoft .NET Framework Remote Code Execution Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2017-11826 | Microsoft Office Remote Code Execution Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2017-0262 | Microsoft Office Remote Code Execution Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2017-0261 | Microsoft Office Use-After-Free Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2017-8540 | Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2017-11774 | Microsoft Office Outlook Security Feature Bypass Vulnerability In CISA KEV | 7.8 |