Vendor scorecard
CISA lists 391 Microsoft vulnerabilities as exploited in the wild, 42 of them added in the last 12 months (up from 40 in the 12 months before). 117 (30%) are known to be used in ransomware campaigns. For entries added in the last two years, the median time from CVE publication to the KEV listing was 0 days. Most affected: Windows (175), Internet Explorer (36), Office (30).
| Product | KEV entries |
|---|---|
| Windows | 175 |
| Internet Explorer | 36 |
| Office | 30 |
| Win32k | 25 |
| Exchange Server | 17 |
| SharePoint | 10 |
| SharePoint Server | 5 |
| Defender | 5 |
| Word | 4 |
| Open Management Infrastructure (OMI) | 4 |
| .NET Framework | 3 |
| Active Directory | 3 |
| CVE | Vulnerability | Added |
|---|---|---|
| CVE-2026-124194 | Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action VulnerabilityOffice | |
| CVE-2026-96951 | Microsoft Windows Command Injection VulnerabilityWindows | |
| CVE-2026-65660 | Microsoft SharePoint Code Injection VulnerabilitySharePoint | |
| CVE-2026-85880 | Microsoft Windows Heap-Based Buffer Overflow VulnerabilityWindows | |
| CVE-2026-81963 | Microsoft Windows Link Following VulnerabilityWindows | |
| CVE-2019-1068 | Microsoft SQL Server Remote Code Execution VulnerabilitySQL Server | |
| CVE-2026-55040 | Microsoft SharePoint Weak Authentication VulnerabilitySharePoint | |
| CVE-2026-33824 | Microsoft Internet Key Exchange (IKE) Service Extensions Double Free VulnerabilityInternet Key Exchange (IKE) Service Extensions | |
| CVE-2026-68820 | Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free VulnerabilityWindows Ancillary Function Driver for WinSock | |
| CVE-2026-50522 | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability SharePoint | |
| CVE-2026-58644 | Microsoft SharePoint Deserialization of Untrusted Data VulnerabilitySharePoint | |
| CVE-2026-56164 | Microsoft SharePoint Server Missing Authentication for Critical Function VulnerabilitySharePoint Server | |
| CVE-2026-56155 | Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability Active Directory Federation Services | |
| CVE-2026-45659 | Microsoft SharePoint Server Deserialization of Untrusted Data VulnerabilityRANSOMWARESharePoint Server | |
| CVE-2026-45498 | Microsoft Defender Denial of Service VulnerabilityDefender | |
| CVE-2026-41091 | Microsoft Defender Link Following VulnerabilityDefender | |
| CVE-2010-0806 | Microsoft Internet Explorer Use-After-Free VulnerabilityInternet Explorer | |
| CVE-2010-0249 | Microsoft Internet Explorer Use-After-Free VulnerabilityInternet Explorer | |
| CVE-2009-1537 | Microsoft DirectX NULL Byte Overwrite VulnerabilityDirectX | |
| CVE-2008-4250 | Microsoft Windows Buffer Overflow VulnerabilityWindows | |
| CVE-2026-42897 | Microsoft Exchange Server Cross-Site Scripting VulnerabilityMicrosoft | |
| CVE-2026-32202 | Microsoft Windows Protection Mechanism Failure VulnerabilityWindows | |
| CVE-2026-33825 | Microsoft Defender Insufficient Granularity of Access Control VulnerabilityRANSOMWAREDefender | |
| CVE-2026-32201 | Microsoft SharePoint Server Improper Input Validation VulnerabilitySharePoint Server | |
| CVE-2009-0238 | Microsoft Office Remote Code ExecutionOffice | |
| CVE-2025-60710 | Microsoft Windows Link Following VulnerabilityRANSOMWAREWindows | |
| CVE-2023-36424 | Microsoft Windows Out-of-Bounds Read VulnerabilityWindows | |
| CVE-2023-21529 | Microsoft Exchange Server Deserialization of Untrusted Data VulnerabilityRANSOMWAREExchange Server | |
| CVE-2012-1854 | Microsoft Visual Basic for Applications Insecure Library Loading VulnerabilityVisual Basic for Applications (VBA) | |
| CVE-2026-20963 | Microsoft SharePoint Deserialization of Untrusted Data VulnerabilitySharePoint | |
| CVE-2008-0015 | Microsoft Windows Video ActiveX Control Remote Code Execution VulnerabilityWindows | |
| CVE-2024-43468 | Microsoft Configuration Manager SQL Injection VulnerabilityConfiguration Manager | |
| CVE-2026-21533 | Microsoft Windows Improper Privilege Management VulnerabilityWindows | |
| CVE-2026-21525 | Microsoft Windows NULL Pointer Dereference VulnerabilityWindows | |
| CVE-2026-21519 | Microsoft Windows Type Confusion VulnerabilityWindows | |
| CVE-2026-21514 | Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision VulnerabilityOffice | |
| CVE-2026-21513 | Microsoft MSHTML Framework Protection Mechanism Failure VulnerabilityWindows | |
| CVE-2026-21510 | Microsoft Windows Shell Protection Mechanism Failure VulnerabilityWindows | |
| CVE-2026-21509 | Microsoft Office Security Feature Bypass VulnerabilityOffice | |
| CVE-2026-20805 | Microsoft Windows Information Disclosure VulnerabilityWindows | |
| CVE-2009-0556 | Microsoft Office PowerPoint Code Injection VulnerabilityOffice | |
| CVE-2025-62221 | Microsoft Windows Use After Free VulnerabilityWindows | |
| CVE-2025-62215 | Microsoft Windows Race Condition VulnerabilityWindows | |
| CVE-2025-59287 | Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data VulnerabilityWindows | |
| CVE-2025-33073 | Microsoft Windows SMB Client Improper Access Control VulnerabilityWindows | |
| CVE-2025-59230 | Microsoft Windows Improper Access Control VulnerabilityWindows | |
| CVE-2025-24990 | Microsoft Windows Untrusted Pointer Dereference VulnerabilityWindows | |
| CVE-2021-43226 | Microsoft Windows Privilege Escalation VulnerabilityRANSOMWAREWindows | |
| CVE-2013-3918 | Microsoft Windows Out-of-Bounds Write VulnerabilityWindows | |
| CVE-2011-3402 | Microsoft Windows Remote Code Execution VulnerabilityWindows | |
| CVE-2010-3962 | Microsoft Internet Explorer Uninitialized Memory Corruption VulnerabilityInternet Explorer | |
| CVE-2013-3893 | Microsoft Internet Explorer Resource Management Errors VulnerabilityInternet Explorer | |
| CVE-2007-0671 | Microsoft Office Excel Remote Code Execution VulnerabilityOffice | |
| CVE-2025-49706 | Microsoft SharePoint Improper Authentication VulnerabilityRANSOMWARESharePoint | |
| CVE-2025-49704 | Microsoft SharePoint Code Injection VulnerabilityRANSOMWARESharePoint | |
| CVE-2025-53770 | Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityRANSOMWARESharePoint | |
| CVE-2025-33053 | Microsoft Windows External Control of File Name or Path VulnerabilityWindows | |
| CVE-2025-32709 | Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free VulnerabilityWindows | |
| CVE-2025-32706 | Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow VulnerabilityWindows | |
| CVE-2025-32701 | Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free VulnerabilityWindows | |
| CVE-2025-30400 | Microsoft Windows DWM Core Library Use-After-Free VulnerabilityWindows | |
| CVE-2025-30397 | Microsoft Windows Scripting Engine Type Confusion VulnerabilityWindows | |
| CVE-2025-24054 | Microsoft Windows NTLM Hash Disclosure Spoofing VulnerabilityWindows | |
| CVE-2025-29824 | Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free VulnerabilityRANSOMWAREWindows | |
| CVE-2025-26633 | Microsoft Windows Management Console (MMC) Improper Neutralization VulnerabilityRANSOMWAREWindows | |
| CVE-2025-24993 | Microsoft Windows NTFS Heap-Based Buffer Overflow VulnerabilityWindows | |
| CVE-2025-24991 | Microsoft Windows NTFS Out-Of-Bounds Read VulnerabilityWindows | |
| CVE-2025-24985 | Microsoft Windows Fast FAT File System Driver Integer Overflow VulnerabilityWindows | |
| CVE-2025-24984 | Microsoft Windows NTFS Information Disclosure VulnerabilityWindows | |
| CVE-2025-24983 | Microsoft Windows Win32k Use-After-Free VulnerabilityWindows | |
| CVE-2018-8639 | Microsoft Windows Win32k Improper Resource Shutdown or Release VulnerabilityRANSOMWAREWindows | |
| CVE-2024-49035 | Microsoft Partner Center Improper Access Control VulnerabilityPartner Center | |
| CVE-2025-24989 | Microsoft Power Pages Improper Access Control VulnerabilityPower Pages | |
| CVE-2025-21418 | Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow VulnerabilityWindows | |
| CVE-2025-21391 | Microsoft Windows Storage Link Following VulnerabilityWindows | |
| CVE-2024-21413 | Microsoft Outlook Improper Input Validation VulnerabilityOffice Outlook | |
| CVE-2024-29059 | Microsoft .NET Framework Information Disclosure Vulnerability.NET Framework | |
| CVE-2025-21335 | Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free VulnerabilityWindows | |
| CVE-2025-21334 | Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free VulnerabilityWindows | |
| CVE-2025-21333 | Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow VulnerabilityWindows | |
| CVE-2024-35250 | Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability Windows | |
| CVE-2024-49138 | Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow VulnerabilityWindows | |
| CVE-2024-49039 | Microsoft Windows Task Scheduler Privilege Escalation VulnerabilityRANSOMWAREWindows | |
| CVE-2024-43451 | Microsoft Windows NTLMv2 Hash Disclosure Spoofing VulnerabilityWindows | |
| CVE-2024-38094 | Microsoft SharePoint Deserialization VulnerabilityRANSOMWARESharePoint | |
| CVE-2024-30088 | Microsoft Windows Kernel TOCTOU Race Condition VulnerabilityRANSOMWAREWindows | |
| CVE-2024-43573 | Microsoft Windows MSHTML Platform Spoofing VulnerabilityWindows | |
| CVE-2024-43572 | Microsoft Windows Management Console Remote Code Execution VulnerabilityWindows | |
| CVE-2020-0618 | Microsoft SQL Server Reporting Services Remote Code Execution VulnerabilityRANSOMWARESQL Server | |
| CVE-2024-43461 | Microsoft Windows MSHTML Platform Spoofing VulnerabilityWindows | |
| CVE-2024-38226 | Microsoft Publisher Protection Mechanism Failure VulnerabilityPublisher | |
| CVE-2024-38217 | Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure VulnerabilityWindows | |
| CVE-2024-38014 | Microsoft Windows Installer Improper Privilege Management VulnerabilityWindows | |
| CVE-2021-31196 | Microsoft Exchange Server Information Disclosure VulnerabilityExchange Server | |
| CVE-2024-38213 | Microsoft Windows SmartScreen Security Feature Bypass VulnerabilityWindows | |
| CVE-2024-38193 | Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation VulnerabilityWindows | |
| CVE-2024-38189 | Microsoft Project Remote Code Execution Vulnerability Project | |
| CVE-2024-38178 | Microsoft Windows Scripting Engine Memory Corruption VulnerabilityWindows | |
| CVE-2024-38107 | Microsoft Windows Power Dependency Coordinator Privilege Escalation VulnerabilityWindows | |
| CVE-2024-38106 | Microsoft Windows Kernel Privilege Escalation VulnerabilityWindows | |
| CVE-2018-0824 | Microsoft COM for Windows Deserialization of Untrusted Data VulnerabilityWindows | |
| CVE-2012-4792 | Microsoft Internet Explorer Use-After-Free VulnerabilityInternet Explorer | |
| CVE-2024-38112 | Microsoft Windows MSHTML Platform Spoofing VulnerabilityWindows | |
| CVE-2024-38080 | Microsoft Windows Hyper-V Privilege Escalation VulnerabilityWindows | |
| CVE-2024-26169 | Microsoft Windows Error Reporting Service Improper Privilege Management VulnerabilityRANSOMWAREWindows | |
| CVE-2024-30051 | Microsoft DWM Core Library Privilege Escalation VulnerabilityRANSOMWAREDWM Core Library | |
| CVE-2024-30040 | Microsoft Windows MSHTML Platform Security Feature Bypass VulnerabilityWindows | |
| CVE-2024-29988 | Microsoft SmartScreen Prompt Security Feature Bypass VulnerabilitySmartScreen Prompt | |
| CVE-2022-38028 | Microsoft Windows Print Spooler Privilege Escalation Vulnerability Windows | |
| CVE-2023-24955 | Microsoft SharePoint Server Code Injection VulnerabilityRANSOMWARESharePoint Server | |
| CVE-2024-21338 | Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control VulnerabilityRANSOMWAREWindows | |
| CVE-2023-29360 | Microsoft Streaming Service Untrusted Pointer Dereference VulnerabilityStreaming Service | |
| CVE-2024-21410 | Microsoft Exchange Server Privilege Escalation VulnerabilityExchange Server | |
| CVE-2024-21412 | Microsoft Windows Internet Shortcut Files Security Feature Bypass VulnerabilityRANSOMWAREWindows | |
| CVE-2024-21351 | Microsoft Windows SmartScreen Security Feature Bypass VulnerabilityWindows | |
| CVE-2023-29357 | Microsoft SharePoint Server Privilege Escalation VulnerabilityRANSOMWARESharePoint Server | |
| CVE-2023-36584 | Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass VulnerabilityWindows | |
| CVE-2023-36036 | Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation VulnerabilityWindows | |
| CVE-2023-36033 | Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation VulnerabilityWindows | |
| CVE-2023-36025 | Microsoft Windows SmartScreen Security Feature Bypass VulnerabilityWindows | |
| CVE-2023-41763 | Microsoft Skype for Business Privilege Escalation VulnerabilitySkype for Business | |
| CVE-2023-36563 | Microsoft WordPad Information Disclosure VulnerabilityWordPad | |
| CVE-2023-28229 | Microsoft Windows CNG Key Isolation Service Privilege Escalation VulnerabilityWindows CNG Key Isolation Service | |
| CVE-2023-36802 | Microsoft Streaming Service Proxy Privilege Escalation VulnerabilityStreaming Service Proxy | |
| CVE-2023-36761 | Microsoft Word Information Disclosure VulnerabilityWord | |
| CVE-2023-38180 | Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability.NET Core and Visual Studio | |
| CVE-2023-36884 | Microsoft Windows Search Remote Code Execution VulnerabilityRANSOMWAREWindows | |
| CVE-2023-36874 | Microsoft Windows Error Reporting Service Privilege Escalation VulnerabilityWindows | |
| CVE-2023-35311 | Microsoft Outlook Security Feature Bypass VulnerabilityOutlook | |
| CVE-2023-32049 | Microsoft Windows Defender SmartScreen Security Feature Bypass VulnerabilityWindows | |
| CVE-2023-32046 | Microsoft Windows MSHTML Platform Privilege Escalation VulnerabilityWindows | |
| CVE-2016-0165 | Microsoft Win32k Privilege Escalation VulnerabilityWin32k | |
| CVE-2023-29336 | Microsoft Win32K Privilege Escalation VulnerabilityWin32k | |
| CVE-2023-28252 | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation VulnerabilityRANSOMWAREWindows | |
| CVE-2019-1388 | Microsoft Windows Certificate Dialog Privilege Escalation VulnerabilityRANSOMWAREWindows | |
| CVE-2013-3163 | Microsoft Internet Explorer Memory Corruption VulnerabilityInternet Explorer | |
| CVE-2023-24880 | Microsoft Windows SmartScreen Security Feature Bypass VulnerabilityRANSOMWAREWindows | |
| CVE-2023-23397 | Microsoft Office Outlook Privilege Escalation VulnerabilityOffice | |
| CVE-2023-23376 | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation VulnerabilityRANSOMWAREWindows | |
| CVE-2023-21823 | Microsoft Windows Graphic Component Privilege Escalation VulnerabilityWindows | |
| CVE-2023-21715 | Microsoft Office Publisher Security Feature Bypass VulnerabilityOffice | |
| CVE-2023-21674 | Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation VulnerabilityWindows | |
| CVE-2022-41080 | Microsoft Exchange Server Privilege Escalation VulnerabilityRANSOMWAREExchange Server | |
| CVE-2022-44698 | Microsoft Defender SmartScreen Security Feature Bypass VulnerabilityRANSOMWAREDefender | |
| CVE-2022-41049 | Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass VulnerabilityWindows | |
| CVE-2022-41128 | Microsoft Windows Scripting Languages Remote Code Execution VulnerabilityWindows | |
| CVE-2022-41125 | Microsoft Windows CNG Key Isolation Service Privilege Escalation VulnerabilityWindows | |
| CVE-2022-41091 | Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass VulnerabilityRANSOMWAREWindows | |
| CVE-2022-41073 | Microsoft Windows Print Spooler Privilege Escalation VulnerabilityRANSOMWAREWindows | |
| CVE-2022-41033 | Microsoft Windows COM+ Event System Service Privilege Escalation VulnerabilityWindows COM+ Event System Service | |
| CVE-2022-41082 | Microsoft Exchange Server Remote Code Execution VulnerabilityRANSOMWAREExchange Server | |
| CVE-2022-41040 | Microsoft Exchange Server Server-Side Request Forgery VulnerabilityRANSOMWAREExchange Server | |
| CVE-2010-2568 | Microsoft Windows Remote Code Execution VulnerabilityWindows | |
| CVE-2022-37969 | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation VulnerabilityRANSOMWAREWindows | |
| CVE-2022-26923 | Microsoft Active Directory Domain Services Privilege Escalation VulnerabilityActive Directory | |
| CVE-2022-21971 | Microsoft Windows Runtime Remote Code Execution VulnerabilityWindows | |
| CVE-2022-34713 | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution VulnerabilityWindows | |
| CVE-2022-22047 | Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation VulnerabilityWindows | |
| CVE-2022-26925 | Microsoft Windows LSA Spoofing VulnerabilityWindows | |
| CVE-2022-30190 | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution VulnerabilityRANSOMWAREWindows | |
| CVE-2013-1331 | Microsoft Office Buffer Overflow VulnerabilityOffice | |
| CVE-2012-4969 | Microsoft Internet Explorer Use-After-Free VulnerabilityInternet Explorer | |
| CVE-2012-1889 | Microsoft XML Core Services Memory Corruption VulnerabilityXML Core Services | |
| CVE-2012-0151 | Microsoft Windows Authenticode Signature Verification Remote Code Execution VulnerabilityWindows | |
| CVE-2010-2572 | Microsoft PowerPoint Buffer Overflow VulnerabilityPowerPoint | |
| CVE-2009-0563 | Microsoft Office Buffer Overflow VulnerabilityOffice | |
| CVE-2009-0557 | Microsoft Office Object Record Corruption VulnerabilityOffice | |
| CVE-2006-2492 | Microsoft Word Malformed Object Pointer VulnerabilityWord | |
| CVE-2016-7256 | Microsoft Windows Open Type Font Remote Code Execution VulnerabilityWindows | |
| CVE-2016-3393 | Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution VulnerabilityWindows | |
| CVE-2016-0034 | Microsoft Silverlight Runtime Remote Code Execution VulnerabilityRANSOMWARESilverlight | |
| CVE-2015-6175 | Microsoft Windows Kernel Privilege Escalation VulnerabilityWindows | |
| CVE-2015-2425 | Microsoft Internet Explorer Memory Corruption VulnerabilityInternet Explorer | |
| CVE-2015-2360 | Microsoft Win32k Privilege Escalation VulnerabilityWin32k | |
| CVE-2015-1769 | Microsoft Windows Mount Manager Privilege Escalation VulnerabilityWindows | |
| CVE-2015-1671 | Microsoft Windows Remote Code Execution VulnerabilityWindows | |
| CVE-2015-0071 | Microsoft Internet Explorer ASLR Bypass VulnerabilityInternet Explorer | |
| CVE-2015-0016 | Microsoft Windows TS WebProxy Directory Traversal VulnerabilityWindows | |
| CVE-2014-4148 | Microsoft Windows Remote Code Execution VulnerabilityWindows | |
| CVE-2014-4123 | Microsoft Internet Explorer Privilege Escalation VulnerabilityInternet Explorer | |
| CVE-2014-4077 | Microsoft IME Japanese Privilege Escalation VulnerabilityInput Method Editor (IME) Japanese | |
| CVE-2014-2817 | Microsoft Internet Explorer Privilege Escalation VulnerabilityInternet Explorer | |
| CVE-2013-7331 | Microsoft Internet Explorer Information Disclosure VulnerabilityInternet Explorer | |
| CVE-2013-3896 | Microsoft Silverlight Information Disclosure VulnerabilitySilverlight | |
| CVE-2013-0074 | Microsoft Silverlight Double Dereference VulnerabilityRANSOMWARESilverlight | |
| CVE-2018-8611 | Microsoft Windows Kernel Privilege Escalation VulnerabilityWindows | |
| CVE-2017-8543 | Microsoft Windows Search Remote Code Execution VulnerabilityWindows | |
| CVE-2017-0210 | Microsoft Internet Explorer Privilege Escalation VulnerabilityInternet Explorer | |
| CVE-2017-0149 | Microsoft Internet Explorer Memory Corruption VulnerabilityInternet Explorer | |
| CVE-2017-0147 | Microsoft Windows SMBv1 Information Disclosure VulnerabilityRANSOMWARESMBv1 server | |
| CVE-2017-0022 | Microsoft XML Core Services Information Disclosure VulnerabilityXML Core Services | |
| CVE-2017-0005 | Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation VulnerabilityWindows | |
| CVE-2016-3351 | Microsoft Internet Explorer and Edge Information Disclosure VulnerabilityRANSOMWAREInternet Explorer and Edge | |
| CVE-2016-3298 | Microsoft Internet Explorer Messaging API Information Disclosure VulnerabilityInternet Explorer | |
| CVE-2016-0162 | Microsoft Internet Explorer Information Disclosure VulnerabilityInternet Explorer | |
| CVE-2020-1027 | Microsoft Windows Kernel Privilege Escalation VulnerabilityWindows | |
| CVE-2020-0638 | Microsoft Update Notification Manager Privilege Escalation VulnerabilityRANSOMWAREUpdate Notification Manager | |
| CVE-2019-1385 | Microsoft Windows AppX Deployment Extensions Privilege Escalation VulnerabilityRANSOMWAREWindows | |
| CVE-2019-1130 | Microsoft Windows AppX Deployment Service Privilege Escalation VulnerabilityRANSOMWAREWindows | |
| CVE-2019-0880 | Microsoft Windows Privilege Escalation VulnerabilityWindows | |
| CVE-2019-0703 | Microsoft Windows SMB Information Disclosure VulnerabilityWindows | |
| CVE-2019-0676 | Microsoft Internet Explorer Information Disclosure VulnerabilityInternet Explorer | |
| CVE-2018-8589 | Microsoft Win32k Privilege Escalation VulnerabilityWin32k | |
| CVE-2014-4113 | Microsoft Win32k Privilege Escalation VulnerabilityWin32k | |
| CVE-2014-0322 | Microsoft Internet Explorer Use-After-Free VulnerabilityInternet Explorer | |
| CVE-2022-26904 | Microsoft Windows User Profile Service Privilege Escalation VulnerabilityWindows | |
| CVE-2022-21919 | Microsoft Windows User Profile Service Privilege Escalation VulnerabilityWindows | |
| CVE-2021-41357 | Microsoft Win32k Privilege Escalation VulnerabilityWin32k | |
| CVE-2021-40450 | Microsoft Win32k Privilege Escalation VulnerabilityWin32k | |
| CVE-2022-22718 | Microsoft Windows Print Spooler Privilege Escalation VulnerabilityWindows | |
| CVE-2022-24521 | Microsoft Windows CLFS Driver Privilege Escalation VulnerabilityRANSOMWAREWindows | |
| CVE-2015-2502 | Microsoft Internet Explorer Memory Corruption VulnerabilityInternet Explorer | |
| CVE-2021-42287 | Microsoft Active Directory Domain Services Privilege Escalation VulnerabilityRANSOMWAREActive Directory | |
| CVE-2021-42278 | Microsoft Active Directory Domain Services Privilege Escalation VulnerabilityRANSOMWAREActive Directory | |
| CVE-2021-31166 | Microsoft HTTP Protocol Stack Remote Code Execution VulnerabilityHTTP Protocol Stack | |
| CVE-2017-0148 | Microsoft SMBv1 Server Remote Code Execution VulnerabilityRANSOMWARESMBv1 server | |
| CVE-2021-34484 | Microsoft Windows User Profile Service Privilege Escalation VulnerabilityWindows | |
| CVE-2021-38646 | Microsoft Office Access Connectivity Engine Remote Code Execution VulnerabilityRANSOMWAREOffice | |
| CVE-2021-34486 | Microsoft Windows Event Tracing Privilege Escalation VulnerabilityWindows | |
| CVE-2018-8440 | Microsoft Windows Privilege Escalation VulnerabilityRANSOMWAREWindows | |
| CVE-2018-8406 | Microsoft DirectX Graphics Kernel Privilege Escalation VulnerabilityRANSOMWAREDirectX Graphics Kernel (DXGKRNL) | |
| CVE-2018-8405 | Microsoft DirectX Graphics Kernel Privilege Escalation VulnerabilityRANSOMWAREDirectX Graphics Kernel (DXGKRNL) | |
| CVE-2017-0213 | Microsoft Windows Privilege Escalation VulnerabilityRANSOMWAREWindows | |
| CVE-2017-0059 | Microsoft Internet Explorer Information Disclosure VulnerabilityInternet Explorer | |
| CVE-2017-0037 | Microsoft Edge and Internet Explorer Type Confusion VulnerabilityEdge and Internet Explorer | |
| CVE-2016-7201 | Microsoft Edge Memory Corruption VulnerabilityEdge | |
| CVE-2016-7200 | Microsoft Edge Memory Corruption VulnerabilityEdge | |
| CVE-2016-0189 | Microsoft Internet Explorer Memory Corruption VulnerabilityRANSOMWAREInternet Explorer | |
| CVE-2016-0151 | Microsoft Windows CSRSS Security Feature Bypass VulnerabilityRANSOMWAREClient-Server Run-time Subsystem (CSRSS) | |
| CVE-2016-0040 | Microsoft Windows Kernel Privilege Escalation VulnerabilityWindows | |
| CVE-2015-2426 | Microsoft Windows Adobe Type Manager Library Remote Code Execution VulnerabilityWindows | |
| CVE-2015-2419 | Microsoft Internet Explorer Memory Corruption VulnerabilityInternet Explorer | |
| CVE-2015-1770 | Microsoft Office Uninitialized Memory Use VulnerabilityOffice | |
| CVE-2013-3660 | Microsoft Win32k Privilege Escalation VulnerabilityWin32k | |
| CVE-2013-2551 | Microsoft Internet Explorer Use-After-Free VulnerabilityRANSOMWAREInternet Explorer | |
| CVE-2012-2539 | Microsoft Word Remote Code Execution VulnerabilityWord | |
| CVE-2011-2005 | Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation VulnerabilityAncillary Function Driver (afd.sys) | |
| CVE-2010-4398 | Microsoft Windows Kernel Stack-Based Buffer Overflow VulnerabilityWindows | |
| CVE-2022-21999 | Microsoft Windows Print Spooler Privilege Escalation VulnerabilityRANSOMWAREWindows | |
| CVE-2019-0903 | Microsoft GDI Remote Code Execution VulnerabilityGraphics Device Interface (GDI) | |
| CVE-2018-8414 | Microsoft Windows Shell Remote Code Execution VulnerabilityWindows | |
| CVE-2018-8373 | Microsoft Scripting Engine Memory Corruption VulnerabilityInternet Explorer Scripting Engine | |
| CVE-2017-0146 | Microsoft Windows SMB Remote Code Execution VulnerabilityRANSOMWAREWindows | |
| CVE-2014-6332 | Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution VulnerabilityWindows | |
| CVE-2014-6324 | Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation VulnerabilityKerberos Key Distribution Center (KDC) | |
| CVE-2019-1405 | Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation VulnerabilityRANSOMWAREWindows | |
| CVE-2019-1322 | Microsoft Windows Privilege Escalation VulnerabilityRANSOMWAREWindows | |
| CVE-2019-1315 | Microsoft Windows Error Reporting Manager Privilege Escalation VulnerabilityRANSOMWAREWindows | |
| CVE-2019-1253 | Microsoft Windows AppX Deployment Server Privilege Escalation VulnerabilityRANSOMWAREWindows | |
| CVE-2019-1132 | Microsoft Win32k Privilege Escalation VulnerabilityWin32k | |
| CVE-2019-1129 | Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation VulnerabilityRANSOMWAREWindows | |
| CVE-2019-1069 | Microsoft Task Scheduler Privilege Escalation VulnerabilityRANSOMWARETask Scheduler | |
| CVE-2019-1064 | Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation VulnerabilityRANSOMWAREWindows | |
| CVE-2019-0841 | Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation VulnerabilityRANSOMWAREWindows | |
| CVE-2019-0543 | Microsoft Windows Privilege Escalation VulnerabilityRANSOMWAREWindows | |
| CVE-2018-8120 | Microsoft Win32k Privilege Escalation VulnerabilityRANSOMWAREWin32k | |
| CVE-2017-0101 | Microsoft Windows Transaction Manager Privilege Escalation VulnerabilityRANSOMWAREWindows | |
| CVE-2016-3309 | Microsoft Windows Kernel Privilege Escalation VulnerabilityRANSOMWAREWindows | |
| CVE-2015-2546 | Microsoft Win32k Memory Corruption VulnerabilityRANSOMWAREWin32k | |
| CVE-2021-41379 | Microsoft Windows Installer Privilege Escalation VulnerabilityRANSOMWAREWindows | |
| CVE-2019-1297 | Microsoft Excel Remote Code Execution VulnerabilityExcel | |
| CVE-2018-8581 | Microsoft Exchange Server Privilege Escalation VulnerabilityRANSOMWAREExchange Server | |
| CVE-2017-8540 | Microsoft Malware Protection Engine Improper Restriction of Operations VulnerabilityMalware Protection Engine | |
| CVE-2017-11826 | Microsoft Office Remote Code Execution VulnerabilityOffice | |
| CVE-2017-0261 | Microsoft Office Use-After-Free VulnerabilityOffice | |
| CVE-2017-0001 | Microsoft Graphics Device Interface (GDI) Privilege Escalation VulnerabilityGraphics Device Interface (GDI) | |
| CVE-2016-7262 | Microsoft Office Security Feature Bypass VulnerabilityExcel | |
| CVE-2016-7193 | Microsoft Office Memory Corruption VulnerabilityOffice | |
| CVE-2016-0099 | Microsoft Windows Secondary Logon Service Privilege Escalation VulnerabilityRANSOMWAREWindows | |
| CVE-2015-2545 | Microsoft Office Malformed EPS File VulnerabilityOffice | |
| CVE-2015-2424 | Microsoft PowerPoint Memory Corruption VulnerabilityPowerPoint | |
| CVE-2015-2387 | Microsoft ATM Font Driver Privilege Escalation VulnerabilityATM Font Driver | |
| CVE-2015-1701 | Microsoft Win32k Privilege Escalation VulnerabilityRANSOMWAREWin32k | |
| CVE-2015-1642 | Microsoft Office Memory Corruption VulnerabilityOffice | |
| CVE-2014-4114 | Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution VulnerabilityWindows | |
| CVE-2013-5065 | Microsoft Windows Kernel Privilege Escalation VulnerabilityWindows | |
| CVE-2013-3897 | Microsoft Internet Explorer Use-After-Free VulnerabilityInternet Explorer | |
| CVE-2013-1347 | Microsoft Internet Explorer Remote Code Execution VulnerabilityInternet Explorer | |
| CVE-2012-1856 | Microsoft Office MSCOMCTL.OCX Remote Code Execution VulnerabilityOffice | |
| CVE-2011-1889 | Microsoft Forefront TMG Remote Code Execution VulnerabilityForefront Threat Management Gateway (TMG) | |
| CVE-2010-3333 | Microsoft Office Stack-based Buffer Overflow VulnerabilityOffice | |
| CVE-2010-0232 | Microsoft Windows Kernel Exception Handler VulnerabilityWindows | |
| CVE-2009-3129 | Microsoft Excel Featheader Record Memory Corruption VulnerabilityExcel | |
| CVE-2009-1123 | Microsoft Windows Improper Input Validation VulnerabilityWindows | |
| CVE-2004-0210 | Microsoft Windows Privilege Escalation VulnerabilityWindows | |
| CVE-2002-0367 | Microsoft Windows Privilege Escalation VulnerabilityWindows | |
| CVE-2017-8570 | Microsoft Office Remote Code Execution VulnerabilityOffice | |
| CVE-2017-0222 | Microsoft Internet Explorer Remote Code Execution VulnerabilityInternet Explorer | |
| CVE-2014-6352 | Microsoft Windows Code Injection VulnerabilityWindows | |
| CVE-2019-0752 | Microsoft Internet Explorer Type Confusion VulnerabilityRANSOMWAREInternet Explorer | |
| CVE-2018-8174 | Microsoft Windows VBScript Engine Out-of-Bounds Write VulnerabilityRANSOMWAREWindows | |
| CVE-2014-1761 | Microsoft Word Memory Corruption VulnerabilityWord | |
| CVE-2013-3906 | Microsoft Graphics Component Memory Corruption VulnerabilityGraphics Component | |
| CVE-2021-36934 | Microsoft Windows SAM Local Privilege Escalation VulnerabilityWindows | |
| CVE-2020-0796 | Microsoft SMBv3 Remote Code Execution VulnerabilityRANSOMWARESMBv3 | |
| CVE-2017-8464 | Microsoft Windows Shell (.lnk) Remote Code Execution VulnerabilityWindows | |
| CVE-2017-0263 | Microsoft Win32k Privilege Escalation VulnerabilityWin32k | |
| CVE-2017-0262 | Microsoft Office Remote Code Execution VulnerabilityOffice | |
| CVE-2017-0145 | Microsoft SMBv1 Remote Code Execution VulnerabilityRANSOMWARESMBv1 | |
| CVE-2017-0144 | Microsoft SMBv1 Remote Code Execution VulnerabilityRANSOMWARESMBv1 | |
| CVE-2015-1635 | Microsoft HTTP.sys Remote Code Execution VulnerabilityHTTP.sys | |
| CVE-2022-21882 | Microsoft Win32k Privilege Escalation VulnerabilityRANSOMWAREWin32k | |
| CVE-2020-0787 | Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management VulnerabilityRANSOMWAREWindows | |
| CVE-2014-1776 | Microsoft Internet Explorer Memory Corruption VulnerabilityInternet Explorer | |
| CVE-2018-8453 | Microsoft Win32k Privilege Escalation VulnerabilityRANSOMWAREWin32k | |
| CVE-2021-33766 | Microsoft Exchange Server Information DisclosureExchange Server | |
| CVE-2019-1458 | Microsoft Win32k Privilege Escalation VulnerabilityRANSOMWAREWin32k | |
| CVE-2013-3900 | Microsoft WinVerifyTrust function Remote Code ExecutionWinVerifyTrust function | |
| CVE-2021-43890 | Microsoft Windows AppX Installer Spoofing VulnerabilityRANSOMWAREWindows | |
| CVE-2021-42321 | Microsoft Exchange Server Remote Code Execution VulnerabilityRANSOMWAREExchange | |
| CVE-2021-42292 | Microsoft Excel Security Feature BypassOffice | |
| CVE-2021-40449 | Microsoft Windows Win32k Privilege Escalation VulnerabilityRANSOMWAREWindows | |
| CVE-2021-40444 | Microsoft MSHTML Remote Code Execution VulnerabilityRANSOMWAREMSHTML | |
| CVE-2021-38649 | Microsoft Open Management Infrastructure (OMI) Privilege Escalation VulnerabilityOpen Management Infrastructure (OMI) | |
| CVE-2021-38648 | Microsoft Open Management Infrastructure (OMI) Privilege Escalation VulnerabilityOpen Management Infrastructure (OMI) | |
| CVE-2021-38647 | Microsoft Open Management Infrastructure (OMI) Remote Code Execution VulnerabilityRANSOMWAREOpen Management Infrastructure (OMI) | |
| CVE-2021-38645 | Microsoft Open Management Infrastructure (OMI) Privilege Escalation VulnerabilityOpen Management Infrastructure (OMI) | |
| CVE-2021-36955 | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation VulnerabilityRANSOMWAREWindows | |
| CVE-2021-36948 | Microsoft Windows Update Medic Service Privilege Escalation VulnerabilityWindows | |
| CVE-2021-36942 | Microsoft Windows Local Security Authority (LSA) Spoofing VulnerabilityRANSOMWAREWindows | |
| CVE-2021-34527 | Microsoft Windows Print Spooler Remote Code Execution VulnerabilityRANSOMWAREWindows | |
| CVE-2021-34523 | Microsoft Exchange Server Privilege Escalation VulnerabilityRANSOMWAREExchange Server | |
| CVE-2021-34473 | Microsoft Exchange Server Remote Code Execution VulnerabilityRANSOMWAREExchange Server | |
| CVE-2021-34448 | Microsoft Windows Scripting Engine Memory Corruption VulnerabilityWindows | |
| CVE-2021-33771 | Microsoft Windows Kernel Privilege Escalation VulnerabilityWindows | |
| CVE-2021-33742 | Microsoft Windows MSHTML Platform Remote Code Execution VulnerabilityWindows | |
| CVE-2021-33739 | Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation VulnerabilityWindows | |
| CVE-2021-31979 | Microsoft Windows Kernel Privilege Escalation VulnerabilityWindows | |
| CVE-2021-31956 | Microsoft Windows NTFS Privilege Escalation VulnerabilityWindows | |
| CVE-2021-31955 | Microsoft Windows Kernel Information Disclosure VulnerabilityWindows | |
| CVE-2021-31207 | Microsoft Exchange Server Security Feature Bypass VulnerabilityRANSOMWAREExchange Server | |
| CVE-2021-31201 | Microsoft Enhanced Cryptographic Provider Privilege Escalation VulnerabilityEnhanced Cryptographic Provider | |
| CVE-2021-31199 | Microsoft Enhanced Cryptographic Provider Privilege Escalation VulnerabilityEnhanced Cryptographic Provider | |
| CVE-2021-28310 | Microsoft Win32k Privilege Escalation VulnerabilityWin32k | |
| CVE-2021-27085 | Microsoft Internet Explorer Remote Code Execution VulnerabilityInternet Explorer | |
| CVE-2021-27065 | Microsoft Exchange Server Remote Code Execution VulnerabilityRANSOMWAREExchange Server | |
| CVE-2021-27059 | Microsoft Office Remote Code Execution VulnerabilityOffice | |
| CVE-2021-26858 | Microsoft Exchange Server Remote Code Execution VulnerabilityRANSOMWAREExchange Server | |
| CVE-2021-26857 | Microsoft Exchange Server Remote Code Execution VulnerabilityRANSOMWAREExchange Server | |
| CVE-2021-26855 | Microsoft Exchange Server Remote Code Execution VulnerabilityRANSOMWAREExchange Server | |
| CVE-2021-26411 | Microsoft Internet Explorer Memory Corruption VulnerabilityRANSOMWAREInternet Explorer | |
| CVE-2021-1732 | Microsoft Win32k Privilege Escalation VulnerabilityRANSOMWAREWin32k | |
| CVE-2021-1675 | Microsoft Windows Print Spooler Remote Code Execution VulnerabilityRANSOMWAREWindows | |
| CVE-2021-1647 | Microsoft Defender Remote Code Execution VulnerabilityDefender | |
| CVE-2020-17144 | Microsoft Exchange Server Remote Code Execution VulnerabilityExchange Server | |
| CVE-2020-17087 | Microsoft Windows Kernel Privilege Escalation VulnerabilityWindows | |
| CVE-2020-1472 | Microsoft Netlogon Privilege Escalation VulnerabilityRANSOMWARENetlogon | |
| CVE-2020-1464 | Microsoft Windows Spoofing VulnerabilityWindows | |
| CVE-2020-1380 | Microsoft Internet Explorer Scripting Engine Memory Corruption VulnerabilityInternet Explorer | |
| CVE-2020-1350 | Microsoft Windows DNS Server Remote Code Execution VulnerabilityWindows | |
| CVE-2020-1147 | Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability.NET Framework, SharePoint, Visual Studio | |
| CVE-2020-1054 | Microsoft Win32k Privilege Escalation VulnerabilityWin32k | |
| CVE-2020-1040 | Microsoft Hyper-V RemoteFX vGPU Remote Code Execution VulnerabilityHyper-V RemoteFX | |
| CVE-2020-1020 | Microsoft Windows Adobe Font Manager Library Remote Code Execution VulnerabilityWindows | |
| CVE-2020-0986 | Microsoft Windows Kernel Privilege Escalation VulnerabilityWindows | |
| CVE-2020-0968 | Microsoft Internet Explorer Scripting Engine Memory Corruption VulnerabilityRANSOMWAREInternet Explorer | |
| CVE-2020-0938 | Microsoft Windows Adobe Font Manager Library Remote Code Execution VulnerabilityWindows | |
| CVE-2020-0878 | Microsoft Edge and Internet Explorer Memory Corruption VulnerabilityRANSOMWAREEdge and Internet Explorer | |
| CVE-2020-0688 | Microsoft Exchange Server Validation Key Remote Code Execution VulnerabilityRANSOMWAREExchange Server | |
| CVE-2020-0683 | Microsoft Windows Installer Privilege Escalation VulnerabilityWindows | |
| CVE-2020-0674 | Microsoft Internet Explorer Scripting Engine Memory Corruption VulnerabilityInternet Explorer | |
| CVE-2020-0646 | Microsoft .NET Framework Remote Code Execution Vulnerability.NET Framework | |
| CVE-2020-0601 | Microsoft Windows CryptoAPI Spoofing VulnerabilityWindows | |
| CVE-2019-1429 | Microsoft Internet Explorer Scripting Engine Memory Corruption VulnerabilityInternet Explorer | |
| CVE-2019-1367 | Microsoft Internet Explorer Scripting Engine Memory Corruption VulnerabilityRANSOMWAREInternet Explorer | |
| CVE-2019-1215 | Microsoft Windows Privilege Escalation VulnerabilityRANSOMWAREWindows | |
| CVE-2019-1214 | Microsoft Windows Privilege Common Log File System (CLFS) Escalation VulnerabilityWindows | |
| CVE-2019-0863 | Microsoft Windows Error Reporting (WER) Privilege Escalation VulnerabilityWindows | |
| CVE-2019-0859 | Microsoft Win32k Privilege Escalation VulnerabilityRANSOMWAREWin32k | |
| CVE-2019-0808 | Microsoft Win32k Privilege Escalation VulnerabilityWin32k | |
| CVE-2019-0803 | Microsoft Win32k Privilege Escalation VulnerabilityRANSOMWAREWin32k | |
| CVE-2019-0797 | Microsoft Win32k Privilege Escalation VulnerabilityWin32k | |
| CVE-2019-0708 | Microsoft Remote Desktop Services Remote Code Execution VulnerabilityRANSOMWARERemote Desktop Services | |
| CVE-2019-0604 | Microsoft SharePoint Remote Code Execution VulnerabilityRANSOMWARESharePoint | |
| CVE-2019-0541 | Microsoft MSHTML Remote Code Execution VulnerabilityMSHTML | |
| CVE-2018-8653 | Microsoft Internet Explorer Scripting Engine Memory Corruption VulnerabilityInternet Explorer | |
| CVE-2018-0802 | Microsoft Office Memory Corruption VulnerabilityRANSOMWAREOffice | |
| CVE-2018-0798 | Microsoft Office Memory Corruption VulnerabilityOffice | |
| CVE-2017-8759 | Microsoft .NET Framework Remote Code Execution Vulnerability.NET Framework | |
| CVE-2017-7269 | Microsoft Windows Server Buffer Overflow VulnerabilityInternet Information Services (IIS) | |
| CVE-2017-11882 | Microsoft Office Memory Corruption VulnerabilityRANSOMWAREOffice | |
| CVE-2017-11774 | Microsoft Office Outlook Security Feature Bypass VulnerabilityOffice | |
| CVE-2017-0199 | Microsoft Office and WordPad Remote Code Execution VulnerabilityRANSOMWAREOffice and WordPad | |
| CVE-2017-0143 | Microsoft Windows Server Message Block (SMBv1) Remote Code Execution VulnerabilityRANSOMWAREWindows | |
| CVE-2016-7255 | Microsoft Win32k Privilege Escalation VulnerabilityRANSOMWAREWin32k | |
| CVE-2016-3235 | Microsoft Office OLE DLL Side Loading VulnerabilityOffice | |
| CVE-2016-0185 | Microsoft Windows Media Center Remote Code Execution VulnerabilityWindows | |
| CVE-2016-0167 | Microsoft Win32k Privilege Escalation VulnerabilityRANSOMWAREWin32k | |
| CVE-2015-1641 | Microsoft Office Memory Corruption VulnerabilityOffice | |
| CVE-2014-1812 | Microsoft Windows Group Policy Preferences Password Privilege Escalation VulnerabilityRANSOMWAREWindows | |
| CVE-2012-0158 | Microsoft MSCOMCTL.OCX Remote Code Execution VulnerabilityRANSOMWAREMSCOMCTL.OCX |
Get an email when CISA adds the next Microsoft CVE.
How to read this: CISA KEV lists vulnerabilities with reliable evidence of exploitation; a vendor with many entries is often one with a large, internet-facing install base, not necessarily worse engineering. "Publication → KEV" is the median number of days between the CVE's publication and its addition to KEV, for entries added in the last 24 months (82 entries); it is an upper bound on how long defenders had, since exploitation usually starts before the listing. Under NIS2 article 21(2)(d), supplier security is part of your risk management; this page is a starting point for that review. Compare vendors on the scorecard index.
We assess supplier security for NIS2 and DORA, from exploited-CVE history and patch response to contract clauses and evidence packs.
Get in touch →