FEDRAMP CATALOG › Office 365 Multi-Tenant & Supporting Services
Office 365 Multi-Tenant & Supporting Services
Microsoft · package MSO365MT
Current status
Authorized · Moderate impact · since 2026-07-07
Service modelSaaS
MarketplaceRev5 · source: marketplace
Security posture
127 critical
312 high
383 on KEV
· 444 correlated CVEs
CMMC DOMAINS ADDRESSED
STATUS TIMELINE · SCD2
| STATUS | FROM | TO |
|---|---|---|
| Authorized | 2026-07-07 | current |
AUTHORIZATIONS
| AGENCY | TYPE | DATE |
|---|---|---|
| Department of Health and Human Services | Agency | 2021-04-22 |
EXPOSED CVEs · CORRELATED TO THIS PRODUCT
all exposures
| SEVERITY | CVE | TITLE |
|---|---|---|
| HIGH | CVE-2026-65768 | CVE-2026-65768: Improper limitation of a pathname to a restricted directory ('path traversal') i |
| HIGH | CVE-2026-68820 | Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability |
| HIGH | CVE-2026-62836 | CVE-2026-62836: Improper restriction of communication channel to intended endpoints in Azure SQL |
| HIGH | CVE-2026-66321 | CVE-2026-66321: Access of resource using incompatible type ('type confusion') in Microsoft Edge |
| HIGH | CVE-2026-50522 | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability |
| HIGH | CVE-2026-13448 | CVE-2026-13448: IBM Langflow OSS 1.0.0 through 1.10.1 Lanflow OSS contains an unauthenticated re |
| HIGH | CVE-2026-13473 | CVE-2026-13473: IBM Storage Protect Client 8.1.0.0 through 8.1.27.0, 8.1.27.1, and 8.2.0.0 throu |
| HIGH | CVE-2026-58644 | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability |
| HIGH | CVE-2026-47304 | CVE-2026-47304: Improper verification of cryptographic signature in .NET allows an unauthorized |
| HIGH | CVE-2026-49164 | CVE-2026-49164: Heap-based buffer overflow in Active Directory Domain Services allows an unautho |
| HIGH | CVE-2026-49181 | CVE-2026-49181: Integer underflow (wrap or wraparound) in Windows DHCP Client allows an unauthor |
| HIGH | CVE-2026-50330 | CVE-2026-50330: Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attac |
| HIGH | CVE-2026-50439 | CVE-2026-50439: Use after free in Microsoft Message Queuing Queue Manager allows an unauthorized |
| HIGH | CVE-2026-50487 | CVE-2026-50487: Use after free in Microsoft Windows DNS allows an unauthorized attacker to eleva |
| HIGH | CVE-2026-50694 | CVE-2026-50694: Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unau |
| HIGH | CVE-2026-54995 | CVE-2026-54995: Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unautho |
| HIGH | CVE-2026-56155 | Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability |
| HIGH | CVE-2026-56164 | Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability |
| MEDIUM | CVE-2026-56164 | CVE-2026-56164: Missing authentication for critical function in Microsoft Office SharePoint allo |
| HIGH | CVE-2026-57089 | CVE-2026-57089: Use after free in Windows SMB Server Network Transport Driver (srvnet.sys) allow |
| HIGH | CVE-2026-57090 | CVE-2026-57090: Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unaut |
| HIGH | CVE-2026-58594 | CVE-2026-58594: Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to |
| HIGH | CVE-2026-58617 | CVE-2026-58617: Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized |
| MEDIUM | CVE-2026-57211 | CVE-2026-57211: RabbitMQ is a messaging and streaming broker. Prior to 4.1.11 and 4.2.6 on Windo |
| HIGH | CVE-2026-13020 | CVE-2026-13020: A Weak Password Recovery Mechanism for Forgotten Password exists in Esri Portal |
| MEDIUM | CVE-2026-9182 | CVE-2026-9182: ArcGIS Server contains an unrestricted file upload vulnerability. An unauthentic |
| HIGH | CVE-2026-57983 | CVE-2026-57983: Improper authorization in Microsoft Edge (Chromium-based) allows an unauthorized |
| MEDIUM | CVE-2026-26145 | CVE-2026-26145: Improper access control in Azure Synapse allows an authorized attacker to elevat |
| CRITICAL | CVE-2026-41106 | CVE-2026-41106: Url redirection to untrusted site ('open redirect') in M365 Copilot allows an un |
| HIGH | CVE-2026-45659 | Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability |
| CRITICAL | CVE-2026-13775 | CVE-2026-13775: Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote a |
| CRITICAL | CVE-2026-13776 | CVE-2026-13776: Type Confusion in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote |
| CRITICAL | CVE-2026-13780 | CVE-2026-13780: Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 15 |
| CRITICAL | CVE-2026-13781 | CVE-2026-13781: Insufficient validation of untrusted input in Skia in Google Chrome prior to 150 |
| CRITICAL | CVE-2026-13782 | CVE-2026-13782: Use after free in Browser in Google Chrome prior to 150.0.7871.47 allowed a remo |
| CRITICAL | CVE-2026-34691 | CVE-2026-34691: Adobe Experience Manager Forms JEE versions LTS SP1, 6.5.24.0 and earlier are af |
| CRITICAL | CVE-2026-10971 | CVE-2026-10971: Insufficient validation of untrusted input in Printing in Google Chrome on Windo |
| CRITICAL | CVE-2026-48567 | CVE-2026-48567: Authentication bypass by spoofing in Azure HorizonDB allows an unauthorized atta |
| CRITICAL | CVE-2026-9874 | CVE-2026-9874: Use after free in Dawn in Google Chrome prior to 148.0.7778.216 allowed a remote |
| HIGH | CVE-2026-8855 | CVE-2026-8855: IBM HTTP Server 8.5, and 9.0 is vulnerable to remote code execution and denial o |
| HIGH | CVE-2026-8856 | CVE-2026-8856: IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service in configuration |
| CRITICAL | CVE-2026-23652 | CVE-2026-23652: Improper neutralization of special elements used in a command ('command injectio |
| CRITICAL | CVE-2026-33843 | CVE-2026-33843: Authentication bypass using an alternate path or channel in Microsoft Azure Acti |
| CRITICAL | CVE-2026-40412 | CVE-2026-40412: Unrestricted upload of file with dangerous type in Azure Orbital Spatio allows a |
| CRITICAL | CVE-2026-47280 | CVE-2026-47280: Improper authentication in Azure Resource Manager (ARM) allows an unauthorized a |
| MEDIUM | CVE-2026-8673 | CVE-2026-8673: Unprotected transport of credentials vulnerability in syslink software AG Avantr |
| HIGH | CVE-2008-4250 | Microsoft Windows Buffer Overflow Vulnerability |
| HIGH | CVE-2009-1537 | Microsoft DirectX NULL Byte Overwrite Vulnerability |
| HIGH | CVE-2010-0249 | Microsoft Internet Explorer Use-After-Free Vulnerability |
| HIGH | CVE-2010-0806 | Microsoft Internet Explorer Use-After-Free Vulnerability |
| HIGH | CVE-2026-41091 | Microsoft Defender Link Following Vulnerability |
| HIGH | CVE-2026-45498 | Microsoft Defender Denial of Service Vulnerability |
| HIGH | CVE-2026-42897 | Microsoft Exchange Server Cross-Site Scripting Vulnerability |
| HIGH | CVE-2026-32202 | Microsoft Windows Protection Mechanism Failure Vulnerability |
| CRITICAL | CVE-2026-33825 | Microsoft Defender Insufficient Granularity of Access Control Vulnerability |
| HIGH | CVE-2009-0238 | Microsoft Office Remote Code Execution |
| HIGH | CVE-2026-32201 | Microsoft SharePoint Server Improper Input Validation Vulnerability |
| CRITICAL | CVE-2026-34615 | CVE-2026-34615: Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Deserializati |
| HIGH | CVE-2012-1854 | Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability |
| CRITICAL | CVE-2023-21529 | Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability |
| HIGH | CVE-2023-36424 | Microsoft Windows Out-of-Bounds Read Vulnerability |
| HIGH | CVE-2025-60710 | Microsoft Windows Link Following Vulnerability |
| CRITICAL | CVE-2026-32186 | CVE-2026-32186: Server-side request forgery (ssrf) in Microsoft Bing allows an unauthorized atta |
| CRITICAL | CVE-2026-32213 | CVE-2026-32213: Improper authorization in Azure AI Foundry allows an unauthorized attacker to el |
| CRITICAL | CVE-2026-33105 | CVE-2026-33105: Improper authorization in Microsoft Azure Kubernetes Service allows an unauthori |
| CRITICAL | CVE-2026-33107 | CVE-2026-33107: Server-side request forgery (ssrf) in Azure Databricks allows an unauthorized at |
| HIGH | CVE-2026-35561 | CVE-2026-35561: Insufficient authentication security controls in the browser-based authenticatio |
| HIGH | CVE-2026-20963 | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability |
| HIGH | CVE-2008-0015 | Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability |
| HIGH | CVE-2024-43468 | Microsoft Configuration Manager SQL Injection Vulnerability |
| HIGH | CVE-2026-21510 | Microsoft Windows Shell Protection Mechanism Failure Vulnerability |
| HIGH | CVE-2026-21513 | Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability |
| HIGH | CVE-2026-21514 | Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability |
| HIGH | CVE-2026-21519 | Microsoft Windows Type Confusion Vulnerability |
| HIGH | CVE-2026-21525 | Microsoft Windows NULL Pointer Dereference Vulnerability |
| HIGH | CVE-2026-21533 | Microsoft Windows Improper Privilege Management Vulnerability |
| HIGH | CVE-2026-21509 | Microsoft Office Security Feature Bypass Vulnerability |
| CRITICAL | CVE-2026-24304 | CVE-2026-24304: Improper access control in Azure Resource Manager allows an authorized attacker |
| HIGH | CVE-2026-20805 | Microsoft Windows Information Disclosure Vulnerability |
| HIGH | CVE-2009-0556 | Microsoft Office PowerPoint Code Injection Vulnerability |
| HIGH | CVE-2025-62221 | Microsoft Windows Use After Free Vulnerability |
| HIGH | CVE-2025-62215 | Microsoft Windows Race Condition Vulnerability |
| HIGH | CVE-2025-59287 | Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability |
| HIGH | CVE-2025-33073 | Microsoft Windows SMB Client Improper Access Control Vulnerability |
| HIGH | CVE-2025-24990 | Microsoft Windows Untrusted Pointer Dereference Vulnerability |
| HIGH | CVE-2025-59230 | Microsoft Windows Improper Access Control Vulnerability |
| HIGH | CVE-2010-3962 | Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability |
| HIGH | CVE-2011-3402 | Microsoft Windows Remote Code Execution Vulnerability |
| HIGH | CVE-2013-3918 | Microsoft Windows Out-of-Bounds Write Vulnerability |
| HIGH | CVE-2021-43226 | Microsoft Windows Privilege Escalation Vulnerability |
| HIGH | CVE-2007-0671 | Microsoft Office Excel Remote Code Execution Vulnerability |
| HIGH | CVE-2013-3893 | Microsoft Internet Explorer Resource Management Errors Vulnerability |
| CRITICAL | CVE-2025-49704 | Microsoft SharePoint Code Injection Vulnerability |
| CRITICAL | CVE-2025-49706 | Microsoft SharePoint Improper Authentication Vulnerability |
| CRITICAL | CVE-2025-53770 | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability |
| HIGH | CVE-2025-33053 | Microsoft Windows External Control of File Name or Path Vulnerability |
| HIGH | CVE-2025-30397 | Microsoft Windows Scripting Engine Type Confusion Vulnerability |
| HIGH | CVE-2025-30400 | Microsoft Windows DWM Core Library Use-After-Free Vulnerability |
| HIGH | CVE-2025-32701 | Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability |
| HIGH | CVE-2025-32706 | Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability |
| HIGH | CVE-2025-32709 | Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability |
| HIGH | CVE-2025-24054 | Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability |
| CRITICAL | CVE-2025-29824 | Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability |
| HIGH | CVE-2025-24983 | Microsoft Windows Win32k Use-After-Free Vulnerability |
| HIGH | CVE-2025-24984 | Microsoft Windows NTFS Information Disclosure Vulnerability |
| HIGH | CVE-2025-24985 | Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability |
| HIGH | CVE-2025-24991 | Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability |
| HIGH | CVE-2025-24993 | Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability |
| CRITICAL | CVE-2025-26633 | Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability |
| CRITICAL | CVE-2018-8639 | Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability |
| HIGH | CVE-2024-49035 | Microsoft Partner Center Improper Access Control Vulnerability |
| HIGH | CVE-2025-24989 | Microsoft Power Pages Improper Access Control Vulnerability |
| HIGH | CVE-2025-21391 | Microsoft Windows Storage Link Following Vulnerability |
| HIGH | CVE-2025-21418 | Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability |
| HIGH | CVE-2024-21413 | Microsoft Outlook Improper Input Validation Vulnerability |
| HIGH | CVE-2024-29059 | Microsoft .NET Framework Information Disclosure Vulnerability |
| HIGH | CVE-2025-21333 | Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability |
| HIGH | CVE-2025-21334 | Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability |
| HIGH | CVE-2025-21335 | Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability |
| HIGH | CVE-2024-35250 | Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability |
| HIGH | CVE-2024-49138 | Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability |
| HIGH | CVE-2024-43451 | Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability |
| CRITICAL | CVE-2024-49039 | Microsoft Windows Task Scheduler Privilege Escalation Vulnerability |
| CRITICAL | CVE-2024-38094 | Microsoft SharePoint Deserialization Vulnerability |
| CRITICAL | CVE-2024-30088 | Microsoft Windows Kernel TOCTOU Race Condition Vulnerability |
| HIGH | CVE-2024-43572 | Microsoft Windows Management Console Remote Code Execution Vulnerability |
| HIGH | CVE-2024-43573 | Microsoft Windows MSHTML Platform Spoofing Vulnerability |
| HIGH | CVE-2020-0618 | Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability |
| HIGH | CVE-2024-43461 | Microsoft Windows MSHTML Platform Spoofing Vulnerability |
| HIGH | CVE-2024-21416 | CVE-2024-21416: Windows TCP/IP Remote Code Execution Vulnerability |
| HIGH | CVE-2024-37341 | CVE-2024-37341: Microsoft SQL Server Elevation of Privilege Vulnerability |
| HIGH | CVE-2024-37980 | CVE-2024-37980: Microsoft SQL Server Elevation of Privilege Vulnerability |
| HIGH | CVE-2024-38014 | Microsoft Windows Installer Improper Privilege Management Vulnerability |
| HIGH | CVE-2024-38194 | CVE-2024-38194: An authenticated attacker can exploit an improper authorization vulnerability in |
| HIGH | CVE-2024-38216 | CVE-2024-38216: Azure Stack Hub Elevation of Privilege Vulnerability |
| HIGH | CVE-2024-38217 | Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability |
| HIGH | CVE-2024-38225 | CVE-2024-38225: Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability |
| HIGH | CVE-2024-38226 | Microsoft Publisher Protection Mechanism Failure Vulnerability |
| HIGH | CVE-2024-38240 | CVE-2024-38240: Windows Remote Access Connection Manager Elevation of Privilege Vulnerability |
| HIGH | CVE-2024-43455 | CVE-2024-43455: Windows Remote Desktop Licensing Service Spoofing Vulnerability |
| HIGH | CVE-2021-31196 | Microsoft Exchange Server Information Disclosure Vulnerability |
| HIGH | CVE-2024-38106 | Microsoft Windows Kernel Privilege Escalation Vulnerability |
| HIGH | CVE-2024-38107 | Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability |
| HIGH | CVE-2024-38178 | Microsoft Windows Scripting Engine Memory Corruption Vulnerability |
| HIGH | CVE-2024-38189 | Microsoft Project Remote Code Execution Vulnerability |
| HIGH | CVE-2024-38193 | Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability |
| HIGH | CVE-2024-38213 | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability |
| HIGH | CVE-2018-0824 | Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability |
| HIGH | CVE-2012-4792 | Microsoft Internet Explorer Use-After-Free Vulnerability |
| HIGH | CVE-2024-38080 | Microsoft Windows Hyper-V Privilege Escalation Vulnerability |
| HIGH | CVE-2024-38112 | Microsoft Windows MSHTML Platform Spoofing Vulnerability |
| HIGH | CVE-2024-35260 | CVE-2024-35260: An authenticated attacker can exploit an untrusted search path vulnerability in |
| CRITICAL | CVE-2024-26169 | Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability |
| HIGH | CVE-2024-30040 | Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability |
| CRITICAL | CVE-2024-30051 | Microsoft DWM Core Library Privilege Escalation Vulnerability |
| HIGH | CVE-2024-29988 | Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability |
| HIGH | CVE-2022-38028 | Microsoft Windows Print Spooler Privilege Escalation Vulnerability |
| CRITICAL | CVE-2023-24955 | Microsoft SharePoint Server Code Injection Vulnerability |
| CRITICAL | CVE-2024-21338 | Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability |
| HIGH | CVE-2023-29360 | Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability |
| HIGH | CVE-2024-21410 | Microsoft Exchange Server Privilege Escalation Vulnerability |
| HIGH | CVE-2024-21351 | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability |
| CRITICAL | CVE-2024-21412 | Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability |
| CRITICAL | CVE-2023-29357 | Microsoft SharePoint Server Privilege Escalation Vulnerability |
| HIGH | CVE-2023-36584 | Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability |
| HIGH | CVE-2023-36025 | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability |
| HIGH | CVE-2023-36033 | Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability |
| HIGH | CVE-2023-36036 | Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability |
| HIGH | CVE-2023-36563 | Microsoft WordPad Information Disclosure Vulnerability |
| HIGH | CVE-2023-41763 | Microsoft Skype for Business Privilege Escalation Vulnerability |
| HIGH | CVE-2023-28229 | Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability |
| HIGH | CVE-2023-36761 | Microsoft Word Information Disclosure Vulnerability |
| HIGH | CVE-2023-36802 | Microsoft Streaming Service Proxy Privilege Escalation Vulnerability |
| HIGH | CVE-2023-38180 | Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability |
| HIGH | CVE-2023-36903 | CVE-2023-36903: Windows System Assessment Tool Elevation of Privilege Vulnerability |
| HIGH | CVE-2023-38186 | CVE-2023-38186: Windows Mobile Device Management Elevation of Privilege Vulnerability |
| CRITICAL | CVE-2023-36884 | Microsoft Windows Search Remote Code Execution Vulnerability |
| HIGH | CVE-2023-32046 | Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability |
| HIGH | CVE-2023-32049 | Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability |
| HIGH | CVE-2023-35311 | Microsoft Outlook Security Feature Bypass Vulnerability |
| HIGH | CVE-2023-36874 | Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability |
| HIGH | CVE-2016-0165 | Microsoft Win32k Privilege Escalation Vulnerability |
| HIGH | CVE-2023-29336 | Microsoft Win32K Privilege Escalation Vulnerability |
| CRITICAL | CVE-2023-28252 | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability |
| CRITICAL | CVE-2019-1388 | Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability |
| HIGH | CVE-2013-3163 | Microsoft Internet Explorer Memory Corruption Vulnerability |
| HIGH | CVE-2023-23397 | Microsoft Office Outlook Privilege Escalation Vulnerability |
| CRITICAL | CVE-2023-24880 | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability |
| HIGH | CVE-2023-21715 | Microsoft Office Publisher Security Feature Bypass Vulnerability |
| HIGH | CVE-2023-21823 | Microsoft Windows Graphic Component Privilege Escalation Vulnerability |
| CRITICAL | CVE-2023-23376 | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability |
| CRITICAL | CVE-2022-41080 | Microsoft Exchange Server Privilege Escalation Vulnerability |
| HIGH | CVE-2023-21674 | Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability |
| CRITICAL | CVE-2022-44698 | Microsoft Defender SmartScreen Security Feature Bypass Vulnerability |
| HIGH | CVE-2022-41049 | Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability |
| CRITICAL | CVE-2022-41073 | Microsoft Windows Print Spooler Privilege Escalation Vulnerability |
| CRITICAL | CVE-2022-41091 | Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability |
| HIGH | CVE-2022-41125 | Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability |
| HIGH | CVE-2022-41128 | Microsoft Windows Scripting Languages Remote Code Execution Vulnerability |
| HIGH | CVE-2022-41033 | Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability |
| CRITICAL | CVE-2022-41040 | Microsoft Exchange Server Server-Side Request Forgery Vulnerability |
| CRITICAL | CVE-2022-41082 | Microsoft Exchange Server Remote Code Execution Vulnerability |
| HIGH | CVE-2010-2568 | Microsoft Windows Remote Code Execution Vulnerability |
| HIGH | CVE-2022-37969 | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability |
| HIGH | CVE-2022-21971 | Microsoft Windows Runtime Remote Code Execution Vulnerability |
| HIGH | CVE-2022-26923 | Microsoft Active Directory Domain Services Privilege Escalation Vulnerability |
| HIGH | CVE-2022-34713 | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability |
| HIGH | CVE-2022-22047 | Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability |
| HIGH | CVE-2022-26925 | Microsoft Windows LSA Spoofing Vulnerability |
| CRITICAL | CVE-2022-30190 | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability |
| HIGH | CVE-2006-2492 | Microsoft Word Malformed Object Pointer Vulnerability |
| HIGH | CVE-2009-0557 | Microsoft Office Object Record Corruption Vulnerability |
| HIGH | CVE-2009-0563 | Microsoft Office Buffer Overflow Vulnerability |
| HIGH | CVE-2010-2572 | Microsoft PowerPoint Buffer Overflow Vulnerability |
| HIGH | CVE-2012-0151 | Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability |
| HIGH | CVE-2012-1889 | Microsoft XML Core Services Memory Corruption Vulnerability |
| HIGH | CVE-2012-4969 | Microsoft Internet Explorer Use-After-Free Vulnerability |
| HIGH | CVE-2013-1331 | Microsoft Office Buffer Overflow Vulnerability |
| CRITICAL | CVE-2013-0074 | Microsoft Silverlight Double Dereference Vulnerability |
| HIGH | CVE-2013-3896 | Microsoft Silverlight Information Disclosure Vulnerability |
| HIGH | CVE-2013-7331 | Microsoft Internet Explorer Information Disclosure Vulnerability |
| HIGH | CVE-2014-2817 | Microsoft Internet Explorer Privilege Escalation Vulnerability |
| HIGH | CVE-2014-4077 | Microsoft IME Japanese Privilege Escalation Vulnerability |
| HIGH | CVE-2014-4123 | Microsoft Internet Explorer Privilege Escalation Vulnerability |
| HIGH | CVE-2014-4148 | Microsoft Windows Remote Code Execution Vulnerability |
| HIGH | CVE-2015-0016 | Microsoft Windows TS WebProxy Directory Traversal Vulnerability |
| HIGH | CVE-2015-0071 | Microsoft Internet Explorer ASLR Bypass Vulnerability |
| HIGH | CVE-2015-1671 | Microsoft Windows Remote Code Execution Vulnerability |
| HIGH | CVE-2015-1769 | Microsoft Windows Mount Manager Privilege Escalation Vulnerability |
| HIGH | CVE-2015-2360 | Microsoft Win32k Privilege Escalation Vulnerability |
| HIGH | CVE-2015-2425 | Microsoft Internet Explorer Memory Corruption Vulnerability |
| HIGH | CVE-2015-6175 | Microsoft Windows Kernel Privilege Escalation Vulnerability |
| CRITICAL | CVE-2016-0034 | Microsoft Silverlight Runtime Remote Code Execution Vulnerability |
| HIGH | CVE-2016-3393 | Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability |
| HIGH | CVE-2016-7256 | Microsoft Windows Open Type Font Remote Code Execution Vulnerability |
| HIGH | CVE-2016-0162 | Microsoft Internet Explorer Information Disclosure Vulnerability |
| HIGH | CVE-2016-3298 | Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability |
| CRITICAL | CVE-2016-3351 | Microsoft Internet Explorer and Edge Information Disclosure Vulnerability |
| HIGH | CVE-2017-0005 | Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability |
| HIGH | CVE-2017-0022 | Microsoft XML Core Services Information Disclosure Vulnerability |
| CRITICAL | CVE-2017-0147 | Microsoft Windows SMBv1 Information Disclosure Vulnerability |
| HIGH | CVE-2017-0149 | Microsoft Internet Explorer Memory Corruption Vulnerability |
| HIGH | CVE-2017-0210 | Microsoft Internet Explorer Privilege Escalation Vulnerability |
| HIGH | CVE-2017-8543 | Microsoft Windows Search Remote Code Execution Vulnerability |
| HIGH | CVE-2018-8611 | Microsoft Windows Kernel Privilege Escalation Vulnerability |
| HIGH | CVE-2018-8589 | Microsoft Win32k Privilege Escalation Vulnerability |
| HIGH | CVE-2019-0676 | Microsoft Internet Explorer Information Disclosure Vulnerability |
| HIGH | CVE-2019-0703 | Microsoft Windows SMB Information Disclosure Vulnerability |
| HIGH | CVE-2019-0880 | Microsoft Windows Privilege Escalation Vulnerability |
| CRITICAL | CVE-2019-1130 | Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability |
| CRITICAL | CVE-2019-1385 | Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability |
| CRITICAL | CVE-2020-0638 | Microsoft Update Notification Manager Privilege Escalation Vulnerability |
| HIGH | CVE-2020-1027 | Microsoft Windows Kernel Privilege Escalation Vulnerability |
| HIGH | CVE-2014-0322 | Microsoft Internet Explorer Use-After-Free Vulnerability |
| HIGH | CVE-2014-4113 | Microsoft Win32k Privilege Escalation Vulnerability |
| HIGH | CVE-2021-40450 | Microsoft Win32k Privilege Escalation Vulnerability |
| HIGH | CVE-2021-41357 | Microsoft Win32k Privilege Escalation Vulnerability |
| HIGH | CVE-2022-21919 | Microsoft Windows User Profile Service Privilege Escalation Vulnerability |
| HIGH | CVE-2022-26904 | Microsoft Windows User Profile Service Privilege Escalation Vulnerability |
| HIGH | CVE-2022-22718 | Microsoft Windows Print Spooler Privilege Escalation Vulnerability |
| HIGH | CVE-2015-2502 | Microsoft Internet Explorer Memory Corruption Vulnerability |
| CRITICAL | CVE-2022-24521 | Microsoft Windows CLFS Driver Privilege Escalation Vulnerability |
| CRITICAL | CVE-2021-42278 | Microsoft Active Directory Domain Services Privilege Escalation Vulnerability |
| CRITICAL | CVE-2021-42287 | Microsoft Active Directory Domain Services Privilege Escalation Vulnerability |
| CRITICAL | CVE-2017-0148 | Microsoft SMBv1 Server Remote Code Execution Vulnerability |
| HIGH | CVE-2021-31166 | Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability |
| HIGH | CVE-2021-34484 | Microsoft Windows User Profile Service Privilege Escalation Vulnerability |
| HIGH | CVE-2010-4398 | Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability |
| HIGH | CVE-2011-2005 | Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability |
| HIGH | CVE-2012-2539 | Microsoft Word Remote Code Execution Vulnerability |
| CRITICAL | CVE-2013-2551 | Microsoft Internet Explorer Use-After-Free Vulnerability |
| HIGH | CVE-2013-3660 | Microsoft Win32k Privilege Escalation Vulnerability |
| HIGH | CVE-2015-1770 | Microsoft Office Uninitialized Memory Use Vulnerability |
| HIGH | CVE-2015-2419 | Microsoft Internet Explorer Memory Corruption Vulnerability |
| HIGH | CVE-2015-2426 | Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability |
| HIGH | CVE-2016-0040 | Microsoft Windows Kernel Privilege Escalation Vulnerability |
| CRITICAL | CVE-2016-0151 | Microsoft Windows CSRSS Security Feature Bypass Vulnerability |
| HIGH | CVE-2016-0189 | Microsoft Internet Explorer Memory Corruption Vulnerability |
| HIGH | CVE-2016-7200 | Microsoft Edge Memory Corruption Vulnerability |
| HIGH | CVE-2016-7201 | Microsoft Edge Memory Corruption Vulnerability |
| HIGH | CVE-2017-0037 | Microsoft Edge and Internet Explorer Type Confusion Vulnerability |
| HIGH | CVE-2017-0059 | Microsoft Internet Explorer Information Disclosure Vulnerability |
| CRITICAL | CVE-2017-0213 | Microsoft Windows Privilege Escalation Vulnerability |
| CRITICAL | CVE-2018-8405 | Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability |
| CRITICAL | CVE-2018-8406 | Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability |
| CRITICAL | CVE-2018-8440 | Microsoft Windows Privilege Escalation Vulnerability |
| HIGH | CVE-2021-34486 | Microsoft Windows Event Tracing Privilege Escalation Vulnerability |
| CRITICAL | CVE-2021-38646 | Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability |
| HIGH | CVE-2014-6324 | Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability |
| HIGH | CVE-2014-6332 | Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability |
| CRITICAL | CVE-2017-0146 | Microsoft Windows SMB Remote Code Execution Vulnerability |
| HIGH | CVE-2018-8373 | Microsoft Scripting Engine Memory Corruption Vulnerability |
| HIGH | CVE-2018-8414 | Microsoft Windows Shell Remote Code Execution Vulnerability |
| HIGH | CVE-2019-0903 | Microsoft GDI Remote Code Execution Vulnerability |
| CRITICAL | CVE-2022-21999 | Microsoft Windows Print Spooler Privilege Escalation Vulnerability |
| CRITICAL | CVE-2015-2546 | Microsoft Win32k Memory Corruption Vulnerability |
| CRITICAL | CVE-2016-3309 | Microsoft Windows Kernel Privilege Escalation Vulnerability |
| CRITICAL | CVE-2017-0101 | Microsoft Windows Transaction Manager Privilege Escalation Vulnerability |
| CRITICAL | CVE-2018-8120 | Microsoft Win32k Privilege Escalation Vulnerability |
| CRITICAL | CVE-2019-0543 | Microsoft Windows Privilege Escalation Vulnerability |
| CRITICAL | CVE-2019-0841 | Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability |
| CRITICAL | CVE-2019-1064 | Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability |
| CRITICAL | CVE-2019-1069 | Microsoft Task Scheduler Privilege Escalation Vulnerability |
| CRITICAL | CVE-2019-1129 | Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability |
| HIGH | CVE-2019-1132 | Microsoft Win32k Privilege Escalation Vulnerability |
| CRITICAL | CVE-2019-1253 | Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability |
| CRITICAL | CVE-2019-1315 | Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability |
| CRITICAL | CVE-2019-1322 | Microsoft Windows Privilege Escalation Vulnerability |
| CRITICAL | CVE-2019-1405 | Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability |
| HIGH | CVE-2002-0367 | Microsoft Windows Privilege Escalation Vulnerability |
| HIGH | CVE-2004-0210 | Microsoft Windows Privilege Escalation Vulnerability |
| HIGH | CVE-2009-1123 | Microsoft Windows Improper Input Validation Vulnerability |
| HIGH | CVE-2009-3129 | Microsoft Excel Featheader Record Memory Corruption Vulnerability |
| HIGH | CVE-2010-0232 | Microsoft Windows Kernel Exception Handler Vulnerability |
| HIGH | CVE-2010-3333 | Microsoft Office Stack-based Buffer Overflow Vulnerability |
| HIGH | CVE-2011-1889 | Microsoft Forefront TMG Remote Code Execution Vulnerability |
| HIGH | CVE-2012-1856 | Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability |
| HIGH | CVE-2013-1347 | Microsoft Internet Explorer Remote Code Execution Vulnerability |
| HIGH | CVE-2013-3897 | Microsoft Internet Explorer Use-After-Free Vulnerability |
| HIGH | CVE-2013-5065 | Microsoft Windows Kernel Privilege Escalation Vulnerability |
| HIGH | CVE-2014-4114 | Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability |
| HIGH | CVE-2015-1642 | Microsoft Office Memory Corruption Vulnerability |
| CRITICAL | CVE-2015-1701 | Microsoft Win32k Privilege Escalation Vulnerability |
| HIGH | CVE-2015-2387 | Microsoft ATM Font Driver Privilege Escalation Vulnerability |
| HIGH | CVE-2015-2424 | Microsoft PowerPoint Memory Corruption Vulnerability |
| HIGH | CVE-2015-2545 | Microsoft Office Malformed EPS File Vulnerability |
| CRITICAL | CVE-2016-0099 | Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability |
| HIGH | CVE-2016-7193 | Microsoft Office Memory Corruption Vulnerability |
| HIGH | CVE-2016-7262 | Microsoft Office Security Feature Bypass Vulnerability |
| HIGH | CVE-2017-0001 | Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability |
| HIGH | CVE-2017-0261 | Microsoft Office Use-After-Free Vulnerability |
| HIGH | CVE-2017-11826 | Microsoft Office Remote Code Execution Vulnerability |
| HIGH | CVE-2017-8540 | Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability |
| CRITICAL | CVE-2018-8581 | Microsoft Exchange Server Privilege Escalation Vulnerability |
| HIGH | CVE-2019-1297 | Microsoft Excel Remote Code Execution Vulnerability |
| CRITICAL | CVE-2021-41379 | Microsoft Windows Installer Privilege Escalation Vulnerability |
| HIGH | CVE-2014-6352 | Microsoft Windows Code Injection Vulnerability |
| HIGH | CVE-2017-0222 | Microsoft Internet Explorer Remote Code Execution Vulnerability |
| HIGH | CVE-2017-8570 | Microsoft Office Remote Code Execution Vulnerability |
| HIGH | CVE-2013-3906 | Microsoft Graphics Component Memory Corruption Vulnerability |
| HIGH | CVE-2014-1761 | Microsoft Word Memory Corruption Vulnerability |
| CRITICAL | CVE-2018-8174 | Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability |
| CRITICAL | CVE-2019-0752 | Microsoft Internet Explorer Type Confusion Vulnerability |
| HIGH | CVE-2015-1635 | Microsoft HTTP.sys Remote Code Execution Vulnerability |
| CRITICAL | CVE-2017-0144 | Microsoft SMBv1 Remote Code Execution Vulnerability |
| CRITICAL | CVE-2017-0145 | Microsoft SMBv1 Remote Code Execution Vulnerability |
| HIGH | CVE-2017-0262 | Microsoft Office Remote Code Execution Vulnerability |
| HIGH | CVE-2017-0263 | Microsoft Win32k Privilege Escalation Vulnerability |
| HIGH | CVE-2017-8464 | Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability |
| CRITICAL | CVE-2020-0796 | Microsoft SMBv3 Remote Code Execution Vulnerability |
| HIGH | CVE-2021-36934 | Microsoft Windows SAM Local Privilege Escalation Vulnerability |
| HIGH | CVE-2022-21882 | Microsoft Win32k Privilege Escalation Vulnerability |
| HIGH | CVE-2014-1776 | Microsoft Internet Explorer Memory Corruption Vulnerability |
| CRITICAL | CVE-2020-0787 | Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability |
| CRITICAL | CVE-2018-8453 | Microsoft Win32k Privilege Escalation Vulnerability |
| HIGH | CVE-2021-33766 | Microsoft Exchange Server Information Disclosure |
| HIGH | CVE-2013-3900 | Microsoft WinVerifyTrust function Remote Code Execution |
| CRITICAL | CVE-2019-1458 | Microsoft Win32k Privilege Escalation Vulnerability |
| CRITICAL | CVE-2021-43890 | Microsoft Windows AppX Installer Spoofing Vulnerability |
| CRITICAL | CVE-2021-40449 | Microsoft Windows Win32k Privilege Escalation Vulnerability |
| HIGH | CVE-2021-42292 | Microsoft Excel Security Feature Bypass |
| CRITICAL | CVE-2021-42321 | Microsoft Exchange Server Remote Code Execution Vulnerability |
| HIGH | CVE-2012-0158 | Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability |
| CRITICAL | CVE-2014-1812 | Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability |
| HIGH | CVE-2015-1641 | Microsoft Office Memory Corruption Vulnerability |
| CRITICAL | CVE-2016-0167 | Microsoft Win32k Privilege Escalation Vulnerability |
| HIGH | CVE-2016-0185 | Microsoft Windows Media Center Remote Code Execution Vulnerability |
| HIGH | CVE-2016-3235 | Microsoft Office OLE DLL Side Loading Vulnerability |
| HIGH | CVE-2016-7255 | Microsoft Win32k Privilege Escalation Vulnerability |
| CRITICAL | CVE-2017-0143 | Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability |
| CRITICAL | CVE-2017-0199 | Microsoft Office and WordPad Remote Code Execution Vulnerability |
| HIGH | CVE-2017-11774 | Microsoft Office Outlook Security Feature Bypass Vulnerability |
| CRITICAL | CVE-2017-11882 | Microsoft Office Memory Corruption Vulnerability |
| HIGH | CVE-2017-7269 | Microsoft Windows Server Buffer Overflow Vulnerability |
| HIGH | CVE-2017-8759 | Microsoft .NET Framework Remote Code Execution Vulnerability |
| HIGH | CVE-2018-0798 | Microsoft Office Memory Corruption Vulnerability |
| HIGH | CVE-2018-0802 | Microsoft Office Memory Corruption Vulnerability |
| HIGH | CVE-2018-8653 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability |
| HIGH | CVE-2019-0541 | Microsoft MSHTML Remote Code Execution Vulnerability |
| CRITICAL | CVE-2019-0604 | Microsoft SharePoint Remote Code Execution Vulnerability |
| CRITICAL | CVE-2019-0708 | Microsoft Remote Desktop Services Remote Code Execution Vulnerability |
| HIGH | CVE-2019-0797 | Microsoft Win32k Privilege Escalation Vulnerability |
| HIGH | CVE-2019-0803 | Microsoft Win32k Privilege Escalation Vulnerability |
| HIGH | CVE-2019-0808 | Microsoft Win32k Privilege Escalation Vulnerability |
| HIGH | CVE-2019-0859 | Microsoft Win32k Privilege Escalation Vulnerability |
| HIGH | CVE-2019-0863 | Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability |
| HIGH | CVE-2019-1214 | Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability |
| CRITICAL | CVE-2019-1215 | Microsoft Windows Privilege Escalation Vulnerability |
| CRITICAL | CVE-2019-1367 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability |
| HIGH | CVE-2019-1429 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability |
| HIGH | CVE-2020-0601 | Microsoft Windows CryptoAPI Spoofing Vulnerability |
| HIGH | CVE-2020-0646 | Microsoft .NET Framework Remote Code Execution Vulnerability |
| HIGH | CVE-2020-0674 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability |
| HIGH | CVE-2020-0683 | Microsoft Windows Installer Privilege Escalation Vulnerability |
| CRITICAL | CVE-2020-0688 | Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability |
| CRITICAL | CVE-2020-0878 | Microsoft Edge and Internet Explorer Memory Corruption Vulnerability |
| HIGH | CVE-2020-0938 | Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability |
| HIGH | CVE-2020-0968 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability |
| HIGH | CVE-2020-0986 | Microsoft Windows Kernel Privilege Escalation Vulnerability |
| HIGH | CVE-2020-1020 | Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability |
| HIGH | CVE-2020-1040 | Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability |
| HIGH | CVE-2020-1054 | Microsoft Win32k Privilege Escalation Vulnerability |
| HIGH | CVE-2020-1147 | Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability |
| HIGH | CVE-2020-1350 | Microsoft Windows DNS Server Remote Code Execution Vulnerability |
| HIGH | CVE-2020-1380 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability |
| HIGH | CVE-2020-1464 | Microsoft Windows Spoofing Vulnerability |
| CRITICAL | CVE-2020-1472 | Microsoft Netlogon Privilege Escalation Vulnerability |
| HIGH | CVE-2020-17087 | Microsoft Windows Kernel Privilege Escalation Vulnerability |
| HIGH | CVE-2020-17144 | Microsoft Exchange Server Remote Code Execution Vulnerability |
| HIGH | CVE-2021-1647 | Microsoft Defender Remote Code Execution Vulnerability |
| CRITICAL | CVE-2021-1675 | Microsoft Windows Print Spooler Remote Code Execution Vulnerability |
| CRITICAL | CVE-2021-1732 | Microsoft Win32k Privilege Escalation Vulnerability |
| CRITICAL | CVE-2021-26411 | Microsoft Internet Explorer Memory Corruption Vulnerability |
| CRITICAL | CVE-2021-26855 | Microsoft Exchange Server Remote Code Execution Vulnerability |
| CRITICAL | CVE-2021-26857 | Microsoft Exchange Server Remote Code Execution Vulnerability |
| CRITICAL | CVE-2021-26858 | Microsoft Exchange Server Remote Code Execution Vulnerability |
| HIGH | CVE-2021-27059 | Microsoft Office Remote Code Execution Vulnerability |
| CRITICAL | CVE-2021-27065 | Microsoft Exchange Server Remote Code Execution Vulnerability |
| HIGH | CVE-2021-27085 | Microsoft Internet Explorer Remote Code Execution Vulnerability |
| HIGH | CVE-2021-28310 | Microsoft Win32k Privilege Escalation Vulnerability |
| HIGH | CVE-2021-31199 | Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability |
| HIGH | CVE-2021-31201 | Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability |
| CRITICAL | CVE-2021-31207 | Microsoft Exchange Server Security Feature Bypass Vulnerability |
| HIGH | CVE-2021-31955 | Microsoft Windows Kernel Information Disclosure Vulnerability |
| HIGH | CVE-2021-31956 | Microsoft Windows NTFS Privilege Escalation Vulnerability |
| HIGH | CVE-2021-31979 | Microsoft Windows Kernel Privilege Escalation Vulnerability |
| HIGH | CVE-2021-33739 | Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability |
| HIGH | CVE-2021-33742 | Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability |
| HIGH | CVE-2021-33771 | Microsoft Windows Kernel Privilege Escalation Vulnerability |
| HIGH | CVE-2021-34448 | Microsoft Windows Scripting Engine Memory Corruption Vulnerability |
| CRITICAL | CVE-2021-34473 | Microsoft Exchange Server Remote Code Execution Vulnerability |
| CRITICAL | CVE-2021-34523 | Microsoft Exchange Server Privilege Escalation Vulnerability |
| CRITICAL | CVE-2021-34527 | Microsoft Windows Print Spooler Remote Code Execution Vulnerability |
| CRITICAL | CVE-2021-36942 | Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability |
| HIGH | CVE-2021-36948 | Microsoft Windows Update Medic Service Privilege Escalation Vulnerability |
| CRITICAL | CVE-2021-36955 | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability |
| HIGH | CVE-2021-38645 | Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability |
| CRITICAL | CVE-2021-38647 | Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability |
| HIGH | CVE-2021-38648 | Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability |
| HIGH | CVE-2021-38649 | Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability |
| CRITICAL | CVE-2021-40444 | Microsoft MSHTML Remote Code Execution Vulnerability |
| CRITICAL | CVE-2021-20021 | CVE-2021-20021: A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attac |
| CRITICAL | CVE-2020-0796 | CVE-2020-0796: A remote code execution vulnerability exists in the way that the Microsoft Serve |
| CRITICAL | CVE-2016-1019 | CVE-2016-1019: Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a den |