IT
56.932 CVE tracked
777 Exploited now
183 Used by ransomware
Last sync

Microsoft vulnerabilities

15.479 CVE

Microsoft vulnerabilities
Identifier Severity, sort descending Product and flaw EPSS, sort descending In KEV since, sort descending
CVE-2025-53808 MED 6.7 microsoft windows_10_1507 Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally. 0.5%
CVE-2025-48807 MED 6.7 microsoft windows_10_1607 Improper restriction of communication channel to intended endpoints in Windows Hyper-V allows an authorized attacker to execute code locally. 0.5%
CVE-2025-49691 HIGH 8.0 microsoft windows_10_1507 Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over an adjacent network. 0.5%
CVE-2022-35765 HIGH 7.8 microsoft windows_10 Storage Spaces Direct Elevation of Privilege Vulnerability 0.5%
CVE-2022-35764 HIGH 7.8 microsoft windows_10 Storage Spaces Direct Elevation of Privilege Vulnerability 0.5%
CVE-2022-35763 HIGH 7.8 microsoft windows_10 Storage Spaces Direct Elevation of Privilege Vulnerability 0.5%
CVE-2026-47305 HIGH 7.8 microsoft visual_studio_2022 Protection mechanism failure in Visual Studio allows an unauthorized attacker to execute code locally. 0.5%
CVE-2026-56156 HIGH 7.8 microsoft 365_apps Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 0.5%
CVE-2026-55949 HIGH 7.8 microsoft 365_apps Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 0.5%
CVE-2026-55947 HIGH 7.8 microsoft 365_apps Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 0.5%
CVE-2026-55141 HIGH 7.8 microsoft 365_apps Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 0.5%
CVE-2026-55140 HIGH 7.8 microsoft 365_apps Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. 0.5%
CVE-2026-55137 HIGH 7.8 microsoft 365_apps Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 0.5%
CVE-2026-55136 HIGH 7.8 microsoft 365_apps Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 0.5%
CVE-2026-55133 HIGH 7.8 microsoft 365_apps Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code locally. 0.5%
CVE-2026-55131 HIGH 7.8 microsoft 365_apps Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 0.5%
CVE-2026-55129 HIGH 7.8 microsoft 365_apps Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. 0.5%
CVE-2026-55123 HIGH 7.8 microsoft 365_apps Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. 0.5%
CVE-2026-55120 HIGH 7.8 microsoft 365_apps Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. 0.5%
CVE-2026-55058 HIGH 7.8 microsoft 365_apps Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 0.5%
CVE-2026-55056 HIGH 7.8 microsoft 365_apps Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. 0.5%
CVE-2026-55053 HIGH 7.8 microsoft 365_apps Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 0.5%
CVE-2026-55049 HIGH 7.8 microsoft 365_apps Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. 0.5%
CVE-2026-55048 HIGH 7.8 microsoft 365_apps Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 0.5%
CVE-2026-55044 HIGH 7.8 microsoft 365_apps Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 0.5%