cve.bz

microsoft vulnerabilities, newest first, page 122

Filter
  1. 7.5CVE-2024-38126EPSS 2.7%

    Windows Network Address Translation (NAT) Denial of Service Vulnerability

  2. 7.8CVE-2024-38125EPSS 5.9%

    Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

  3. 4.4CVE-2024-38123EPSS 0.7%

    Windows Bluetooth Driver Information Disclosure Vulnerability

  4. 5.5CVE-2024-38122EPSS 0.6%

    Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability

  5. 8.8CVE-2024-38121EPSS 1.6%

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  6. 8.8CVE-2024-38120EPSS 1.6%

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  7. 5.5CVE-2024-38118EPSS 0.6%

    Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability

  8. 7.8CVE-2024-38117EPSS 0.7%

    NTFS Elevation of Privilege Vulnerability

  9. 8.8CVE-2024-38116EPSS 1.8%

    Windows IP Routing Management Snapin Remote Code Execution Vulnerability

  10. 8.8CVE-2024-38115EPSS 1.6%

    Windows IP Routing Management Snapin Remote Code Execution Vulnerability

  11. 8.8CVE-2024-38114EPSS 1.6%

    Windows IP Routing Management Snapin Remote Code Execution Vulnerability

  12. 8.8CVE-2024-38109EPSS 1.8%

    An authenticated attacker can exploit an Server-Side Request Forgery (SSRF) vulnerability in Microsoft Azure Health Bot to elevate privileges over a network.

  13. 9.3CVE-2024-38108EPSS 1.2%

    Azure Stack Hub Spoofing Vulnerability

  14. 7.8CVE-2024-38107KEVEPSS 1.6%

    Windows Power Dependency Coordinator Elevation of Privilege Vulnerability

  15. 7.0CVE-2024-38106KEVEPSS 6.3%

    Windows Kernel Elevation of Privilege Vulnerability

  16. 7.8CVE-2024-38098EPSS 0.6%

    Azure Connected Machine Agent Elevation of Privilege Vulnerability

  17. 7.8CVE-2024-38084EPSS 0.7%

    Microsoft OfficePlus Elevation of Privilege Vulnerability

  18. 9.8CVE-2024-38063EPSS 71%

    Windows TCP/IP Remote Code Execution Vulnerability

  19. 7.5CVE-2024-37968EPSS 1.0%

    Windows DNS Spoofing Vulnerability

  20. 8.1CVE-2024-29995EPSS 1.5%

    Windows Kerberos Elevation of Privilege Vulnerability

  21. 9.0CVE-2024-38219EPSS 0.9%

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  22. 7.8CVE-2024-38218EPSS 0.6%

    Microsoft Edge (HTML-based) Memory Corruption Vulnerability

  23. 6.5CVE-2024-38200ExploitEPSS 22%

    Microsoft Office Spoofing Vulnerability

  24. 7.3CVE-2024-38202EPSS 1.7%

    Summary Microsoft was notified that an elevation of privilege vulnerability exists in Windows Update, potentially enabling an attacker with basic user privileges to reintroduce previously mitigated vulnerabilities or circumvent some featur…

  25. 6.7CVE-2024-21302EPSS 1.6%

    Summary: As of July 8, 2025 Microsoft has completed mitigations to address this vulnerability. See KB5042562: Guidance for blocking rollback of virtualization-based security related updates and the Recommended Actions section of this CVE f…

  26. 6.5CVE-2024-38206EPSS 12%

    An authenticated attacker can bypass Server-Side Request Forgery (SSRF) protection in Microsoft Copilot Studio to leak sensitive information over a network.

  27. 6.1CVE-2024-38166EPSS 0.8%

    An unauthenticated attacker can exploit improper neutralization of input during web page generation in Microsoft Dynamics 365 to spoof over a network by tricking a user to click on a link.

  28. 9.8CVE-2024-38182EPSS 0.9%

    Weak authentication in Microsoft Dynamics 365 allows an unauthenticated attacker to elevate privileges over a network.

  29. 5.9CVE-2024-38103EPSS 0.5%

    Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

  30. 8.1CVE-2024-38176EPSS 0.9%

    An improper restriction of excessive authentication attempts in GroupMe allows a unauthenticated attacker to elevate privileges over a network.

  31. 8.8CVE-2024-38164EPSS 1.0%

    An improper access control vulnerability in GroupMe allows an a unauthenticated attacker to elevate privileges over a network by convincing a user to click on a malicious link.

  32. 6.1CVE-2024-38156EPSS 0.4%

    Microsoft Edge (Chromium-based) Spoofing Vulnerability

  33. 8.8CVE-2024-21417EPSS 0.4%

    Windows Text Services Framework Elevation of Privilege Vulnerability

  34. 7.5CVE-2024-38112KEVEPSS 84%

    Windows MSHTML Platform Spoofing Vulnerability

  35. 6.5CVE-2024-38105EPSS 0.8%

    Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

  36. 8.8CVE-2024-38104EPSS 1.8%

    Windows Fax Service Remote Code Execution Vulnerability

  37. 6.5CVE-2024-38102EPSS 0.8%

    Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

  38. 6.5CVE-2024-38101EPSS 0.8%

    Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

  39. 7.8CVE-2024-38100EPSS 4.5%

    Windows File Explorer Elevation of Privilege Vulnerability

  40. 5.9CVE-2024-38099EPSS 1.3%

    Windows Remote Desktop Licensing Service Denial of Service Vulnerability

  41. 7.5CVE-2024-38095EPSS 2.7%

    .NET and Visual Studio Denial of Service Vulnerability

  42. 7.2CVE-2024-38094KEVEPSS 51%

    Microsoft SharePoint Remote Code Execution Vulnerability

  43. 8.8CVE-2024-38092EPSS 1.6%

    Azure CycleCloud Elevation of Privilege Vulnerability

  44. 7.5CVE-2024-38091EPSS 1.9%

    Microsoft WS-Discovery Denial of Service Vulnerability

  45. 9.9CVE-2024-38089EPSS 1.2%

    Microsoft Defender for IoT Elevation of Privilege Vulnerability

  46. 8.8CVE-2024-38088EPSS 1.7%

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

  47. 8.8CVE-2024-38087EPSS 1.7%

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

  48. 6.4CVE-2024-38086EPSS 0.6%

    Azure Kinect SDK Remote Code Execution Vulnerability

  49. 7.8CVE-2024-38085EPSS 5.3%

    Windows Graphics Component Elevation of Privilege Vulnerability

  50. 7.3CVE-2024-38081EPSS 1.3%

    .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability