cve.bz

microsoft vulnerabilities, newest first, page 112

Filter
  1. 6.6CVE-2025-21227EPSS 0.8%

    Windows Digital Media Elevation of Privilege Vulnerability

  2. 6.6CVE-2025-21226EPSS 0.9%

    Windows Digital Media Elevation of Privilege Vulnerability

  3. 5.9CVE-2025-21225EPSS 1.7%

    Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

  4. 8.1CVE-2025-21224EPSS 1.9%

    Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability

  5. 8.8CVE-2025-21223EPSS 1.6%

    Windows Telephony Service Remote Code Execution Vulnerability

  6. 7.5CVE-2025-21220EPSS 2.1%

    Microsoft Message Queuing Information Disclosure Vulnerability

  7. 4.3CVE-2025-21219EPSS 3.0%

    MapUrlToZone Security Feature Bypass Vulnerability

  8. 7.5CVE-2025-21218EPSS 2.6%

    Windows Kerberos Denial of Service Vulnerability

  9. 6.5CVE-2025-21217EPSS 2.0%

    Windows NTLM Spoofing Vulnerability

  10. 4.6CVE-2025-21215EPSS 0.8%

    Secure Boot Security Feature Bypass Vulnerability

  11. 4.2CVE-2025-21214EPSS 0.7%

    Windows BitLocker Information Disclosure Vulnerability

  12. 4.6CVE-2025-21213EPSS 0.7%

    Secure Boot Security Feature Bypass Vulnerability

  13. 6.8CVE-2025-21211EPSS 0.8%

    Secure Boot Security Feature Bypass Vulnerability

  14. 4.2CVE-2025-21210EPSS 1.1%

    Windows BitLocker Information Disclosure Vulnerability

  15. 7.5CVE-2025-21207EPSS 2.1%

    Windows Connected Devices Platform Service (Cdpsvc) Denial of Service Vulnerability

  16. 6.1CVE-2025-21202EPSS 0.9%

    Windows Recovery Environment Agent Elevation of Privilege Vulnerability

  17. 6.5CVE-2025-21193EPSS 0.7%

    Active Directory Federation Server Spoofing Vulnerability

  18. 4.3CVE-2025-21189EPSS 2.9%

    MapUrlToZone Security Feature Bypass Vulnerability

  19. 7.8CVE-2025-21187EPSS 0.8%

    Microsoft Power Automate Remote Code Execution Vulnerability

  20. 7.8CVE-2025-21186EPSS 1.2%

    Microsoft Access Remote Code Execution Vulnerability

  21. 8.8CVE-2025-21178EPSS 1.6%

    Visual Studio Remote Code Execution Vulnerability

  22. 8.8CVE-2025-21176EPSS 2.4%

    .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

  23. 7.3CVE-2025-21173EPSS 1.3%

    .NET Elevation of Privilege Vulnerability

  24. 7.5CVE-2025-21172EPSS 1.8%

    .NET and Visual Studio Remote Code Execution Vulnerability

  25. 7.5CVE-2025-21171EPSS 1.7%

    .NET Remote Code Execution Vulnerability

  26. 6.5CVE-2025-21380EPSS 1.5%

    Improper access control in Azure SaaS Resources allows an authorized attacker to disclose information over a network.

  27. 6.5CVE-2025-21385EPSS 28%

    A Server-Side Request Forgery (SSRF) vulnerability in Microsoft Purview allows an authorized attacker to disclose information over a network.

  28. 9.1CVE-2024-43106EPSS 0.7%

    A library injection vulnerability exists in Microsoft Excel 16.83 for macOS. A specially crafted library can leverage Excel's access privileges, leading to a permission bypass. A malicious application could inject a library and start the p…

  29. 9.1CVE-2024-42220EPSS 0.7%

    A library injection vulnerability exists in Microsoft Outlook 16.83.3 for macOS. A specially crafted library can leverage Outlook's access privileges, leading to a permission bypass. A malicious application could inject a library and start…

  30. 9.8CVE-2024-42004EPSS 0.8%

    A library injection vulnerability exists in Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could …

  31. 9.1CVE-2024-41165EPSS 0.7%

    A library injection vulnerability exists in Microsoft Word 16.83 for macOS. A specially crafted library can leverage Word's access privileges, leading to a permission bypass. A malicious application could inject a library and start the pro…

  32. 7.1CVE-2024-41159EPSS 0.8%

    A library injection vulnerability exists in Microsoft OneNote 16.83 for macOS. A specially crafted library can leverage OneNote's access privileges, leading to a permission bypass. A malicious application could inject a library and start t…

  33. 9.8CVE-2024-41145EPSS 0.8%

    A library injection vulnerability exists in the WebView.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. …

  34. 9.8CVE-2024-41138EPSS 0.9%

    A library injection vulnerability exists in the com.microsoft.teams2.modulehost.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading …

  35. 9.1CVE-2024-39804EPSS 0.9%

    A library injection vulnerability exists in Microsoft PowerPoint 16.83 for macOS. A specially crafted library can leverage PowerPoint's access privileges, leading to a permission bypass. A malicious application could inject a library and s…

  36. 6.5CVE-2022-40733EPSS 0.8%

    An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.64…

  37. 7.5CVE-2022-40732EPSS 0.8%

    An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.64…

  38. 9.8CVE-2024-49147EPSS 1.3%

    Deserialization of untrusted data in Microsoft Update Catalog allows an unauthorized attacker to elevate privileges on the website’s webserver.

  39. 6.5CVE-2024-49071EPSS 1.1%

    Improper authorization of an index that contains sensitive information from a Global Files search in Windows Defender allows an authorized attacker to disclose information over a network.

  40. 7.8CVE-2024-49142EPSS 1.1%

    Microsoft Access Remote Code Execution Vulnerability

  41. 7.8CVE-2024-49138KEVExploitEPSS 26%

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

  42. 8.1CVE-2024-49132EPSS 1.1%

    Windows Remote Desktop Services Remote Code Execution Vulnerability

  43. 7.5CVE-2024-49129EPSS 0.8%

    Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

  44. 8.1CVE-2024-49128EPSS 1.2%

    Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

  45. 8.1CVE-2024-49127EPSS 1.3%

    Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

  46. 8.1CVE-2024-49126EPSS 1.3%

    Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability

  47. 8.8CVE-2024-49125EPSS 1.5%

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  48. 8.1CVE-2024-49124EPSS 1.4%

    Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability

  49. 8.1CVE-2024-49123EPSS 1.1%

    Windows Remote Desktop Services Remote Code Execution Vulnerability

  50. 8.1CVE-2024-49122EPSS 21%

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability