Vendor History
Email, files and business apps
Microsoft (Microsoft 365, Windows) security incident history
Updated . Data gathered daily from official public sources.
As of Oct 26, 2026, Vendor History found 2 SEC cyber filings and 390 actively exploited security flaws for Microsoft (Microsoft 365, Windows), dated Nov 3, 2021 to Oct 13, 2026. The most recent breach notice or SEC filing was on Mar 8, 2024. Sources checked: the California and Washington Attorney General breach lists, SEC EDGAR (Form 8-K, Item 1.05) and CISA's Known Exploited Vulnerabilities catalog.
Breach notices and SEC cyber filings
-
Microsoft filed a Form 8-K/A with the SEC under Item 1.05, which is used to report a material cybersecurity incident.
Source: SEC EDGAR
-
Microsoft filed a Form 8-K with the SEC under Item 1.05, which is used to report a material cybersecurity incident.
Source: SEC EDGAR
Got a breach letter from Microsoft (Microsoft 365, Windows)? What to do when a vendor has a data breach.
Actively exploited security flaws
Flaws in Microsoft (Microsoft 365, Windows) products that CISA lists as exploited by attackers. If you use an affected product, check that it's updated. What a listing means.
-
Microsoft Windows Command Injection Vulnerability (CVE-2026-96951). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft SharePoint Code Injection Vulnerability (CVE-2026-65660). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Link Following Vulnerability (CVE-2026-81963). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Heap-Based Buffer Overflow Vulnerability (CVE-2026-85880). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft SQL Server Remote Code Execution Vulnerability (CVE-2019-1068). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability (CVE-2026-33824). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft SharePoint Weak Authentication Vulnerability (CVE-2026-55040). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability (CVE-2026-68820). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-50522). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-58644). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability (CVE-2026-56155). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability (CVE-2026-56164). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability (CVE-2026-45659). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows Buffer Overflow Vulnerability (CVE-2008-4250). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft DirectX NULL Byte Overwrite Vulnerability (CVE-2009-1537). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Internet Explorer Use-After-Free Vulnerability (CVE-2010-0249). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Internet Explorer Use-After-Free Vulnerability (CVE-2010-0806). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Defender Link Following Vulnerability (CVE-2026-41091). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Defender Denial of Service Vulnerability (CVE-2026-45498). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Exchange Server Cross-Site Scripting Vulnerability (CVE-2026-42897). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Protection Mechanism Failure Vulnerability (CVE-2026-32202). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Defender Insufficient Granularity of Access Control Vulnerability (CVE-2026-33825). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Office Remote Code Execution (CVE-2009-0238). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft SharePoint Server Improper Input Validation Vulnerability (CVE-2026-32201). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability (CVE-2012-1854). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability (CVE-2023-21529). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows Out-of-Bounds Read Vulnerability (CVE-2023-36424). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Link Following Vulnerability (CVE-2025-60710). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-20963). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability (CVE-2008-0015). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Configuration Manager SQL Injection Vulnerability (CVE-2024-43468). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Shell Protection Mechanism Failure Vulnerability (CVE-2026-21510). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability (CVE-2026-21513). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability (CVE-2026-21514). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Type Confusion Vulnerability (CVE-2026-21519). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows NULL Pointer Dereference Vulnerability (CVE-2026-21525). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Improper Privilege Management Vulnerability (CVE-2026-21533). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Office Security Feature Bypass Vulnerability (CVE-2026-21509). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Information Disclosure Vulnerability (CVE-2026-20805). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Office PowerPoint Code Injection Vulnerability (CVE-2009-0556). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Use After Free Vulnerability (CVE-2025-62221). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Race Condition Vulnerability (CVE-2025-62215). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability (CVE-2025-59287). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows SMB Client Improper Access Control Vulnerability (CVE-2025-33073). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Untrusted Pointer Dereference Vulnerability (CVE-2025-24990). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Improper Access Control Vulnerability (CVE-2025-59230). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability (CVE-2010-3962). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Remote Code Execution Vulnerability (CVE-2011-3402). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Out-of-Bounds Write Vulnerability (CVE-2013-3918). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Privilege Escalation Vulnerability (CVE-2021-43226). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Office Excel Remote Code Execution Vulnerability (CVE-2007-0671). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Internet Explorer Resource Management Errors Vulnerability (CVE-2013-3893). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft SharePoint Code Injection Vulnerability (CVE-2025-49704). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft SharePoint Improper Authentication Vulnerability (CVE-2025-49706). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2025-53770). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows External Control of File Name or Path Vulnerability (CVE-2025-33053). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Scripting Engine Type Confusion Vulnerability (CVE-2025-30397). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows DWM Core Library Use-After-Free Vulnerability (CVE-2025-30400). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability (CVE-2025-32701). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability (CVE-2025-32706). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability (CVE-2025-32709). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability (CVE-2025-24054). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability (CVE-2025-29824). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows Win32k Use-After-Free Vulnerability (CVE-2025-24983). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows NTFS Information Disclosure Vulnerability (CVE-2025-24984). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability (CVE-2025-24985). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability (CVE-2025-24991). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability (CVE-2025-24993). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability (CVE-2025-26633). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability (CVE-2018-8639). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Partner Center Improper Access Control Vulnerability (CVE-2024-49035). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Power Pages Improper Access Control Vulnerability (CVE-2025-24989). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Storage Link Following Vulnerability (CVE-2025-21391). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability (CVE-2025-21418). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Outlook Improper Input Validation Vulnerability (CVE-2024-21413). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft .NET Framework Information Disclosure Vulnerability (CVE-2024-29059). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability (CVE-2025-21333). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability (CVE-2025-21334). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability (CVE-2025-21335). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability (CVE-2024-35250). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability (CVE-2024-49138). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability (CVE-2024-43451). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Task Scheduler Privilege Escalation Vulnerability (CVE-2024-49039). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft SharePoint Deserialization Vulnerability (CVE-2024-38094). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows Kernel TOCTOU Race Condition Vulnerability (CVE-2024-30088). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows Management Console Remote Code Execution Vulnerability (CVE-2024-43572). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows MSHTML Platform Spoofing Vulnerability (CVE-2024-43573). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability (CVE-2020-0618). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows MSHTML Platform Spoofing Vulnerability (CVE-2024-43461). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Installer Improper Privilege Management Vulnerability (CVE-2024-38014). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability (CVE-2024-38217). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Publisher Protection Mechanism Failure Vulnerability (CVE-2024-38226). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Exchange Server Information Disclosure Vulnerability (CVE-2021-31196). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Kernel Privilege Escalation Vulnerability (CVE-2024-38106). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability (CVE-2024-38107). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Scripting Engine Memory Corruption Vulnerability (CVE-2024-38178). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Project Remote Code Execution Vulnerability (CVE-2024-38189). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability (CVE-2024-38193). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows SmartScreen Security Feature Bypass Vulnerability (CVE-2024-38213). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability (CVE-2018-0824). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Internet Explorer Use-After-Free Vulnerability (CVE-2012-4792). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Hyper-V Privilege Escalation Vulnerability (CVE-2024-38080). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows MSHTML Platform Spoofing Vulnerability (CVE-2024-38112). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability (CVE-2024-26169). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability (CVE-2024-30040). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft DWM Core Library Privilege Escalation Vulnerability (CVE-2024-30051). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability (CVE-2024-29988). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Print Spooler Privilege Escalation Vulnerability (CVE-2022-38028). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft SharePoint Server Code Injection Vulnerability (CVE-2023-24955). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability (CVE-2024-21338). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability (CVE-2023-29360). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Exchange Server Privilege Escalation Vulnerability (CVE-2024-21410). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows SmartScreen Security Feature Bypass Vulnerability (CVE-2024-21351). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability (CVE-2024-21412). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft SharePoint Server Privilege Escalation Vulnerability (CVE-2023-29357). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability (CVE-2023-36584). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows SmartScreen Security Feature Bypass Vulnerability (CVE-2023-36025). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability (CVE-2023-36033). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability (CVE-2023-36036). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft WordPad Information Disclosure Vulnerability (CVE-2023-36563). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Skype for Business Privilege Escalation Vulnerability (CVE-2023-41763). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability (CVE-2023-28229). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Word Information Disclosure Vulnerability (CVE-2023-36761). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Streaming Service Proxy Privilege Escalation Vulnerability (CVE-2023-36802). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability (CVE-2023-38180). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Search Remote Code Execution Vulnerability (CVE-2023-36884). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability (CVE-2023-32046). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability (CVE-2023-32049). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Outlook Security Feature Bypass Vulnerability (CVE-2023-35311). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability (CVE-2023-36874). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Win32k Privilege Escalation Vulnerability (CVE-2016-0165). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Win32K Privilege Escalation Vulnerability (CVE-2023-29336). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability (CVE-2023-28252). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability (CVE-2019-1388). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2013-3163). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Office Outlook Privilege Escalation Vulnerability (CVE-2023-23397). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows SmartScreen Security Feature Bypass Vulnerability (CVE-2023-24880). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Office Publisher Security Feature Bypass Vulnerability (CVE-2023-21715). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Graphic Component Privilege Escalation Vulnerability (CVE-2023-21823). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability (CVE-2023-23376). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Exchange Server Privilege Escalation Vulnerability (CVE-2022-41080). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability (CVE-2023-21674). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Defender SmartScreen Security Feature Bypass Vulnerability (CVE-2022-44698). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability (CVE-2022-41049). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Print Spooler Privilege Escalation Vulnerability (CVE-2022-41073). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability (CVE-2022-41091). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability (CVE-2022-41125). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Scripting Languages Remote Code Execution Vulnerability (CVE-2022-41128). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability (CVE-2022-41033). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Exchange Server Server-Side Request Forgery Vulnerability (CVE-2022-41040). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Exchange Server Remote Code Execution Vulnerability (CVE-2022-41082). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows Remote Code Execution Vulnerability (CVE-2010-2568). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability (CVE-2022-37969). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows Runtime Remote Code Execution Vulnerability (CVE-2022-21971). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Active Directory Domain Services Privilege Escalation Vulnerability (CVE-2022-26923). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability (CVE-2022-34713). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability (CVE-2022-22047). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows LSA Spoofing Vulnerability (CVE-2022-26925). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability (CVE-2022-30190). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Word Malformed Object Pointer Vulnerability (CVE-2006-2492). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Office Object Record Corruption Vulnerability (CVE-2009-0557). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Office Buffer Overflow Vulnerability (CVE-2009-0563). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft PowerPoint Buffer Overflow Vulnerability (CVE-2010-2572). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability (CVE-2012-0151). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft XML Core Services Memory Corruption Vulnerability (CVE-2012-1889). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Internet Explorer Use-After-Free Vulnerability (CVE-2012-4969). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Office Buffer Overflow Vulnerability (CVE-2013-1331). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Silverlight Double Dereference Vulnerability (CVE-2013-0074). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Silverlight Information Disclosure Vulnerability (CVE-2013-3896). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Internet Explorer Information Disclosure Vulnerability (CVE-2013-7331). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Internet Explorer Privilege Escalation Vulnerability (CVE-2014-2817). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft IME Japanese Privilege Escalation Vulnerability (CVE-2014-4077). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Internet Explorer Privilege Escalation Vulnerability (CVE-2014-4123). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Remote Code Execution Vulnerability (CVE-2014-4148). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows TS WebProxy Directory Traversal Vulnerability (CVE-2015-0016). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Internet Explorer ASLR Bypass Vulnerability (CVE-2015-0071). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Remote Code Execution Vulnerability (CVE-2015-1671). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Mount Manager Privilege Escalation Vulnerability (CVE-2015-1769). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Win32k Privilege Escalation Vulnerability (CVE-2015-2360). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2015-2425). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Kernel Privilege Escalation Vulnerability (CVE-2015-6175). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Silverlight Runtime Remote Code Execution Vulnerability (CVE-2016-0034). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability (CVE-2016-3393). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Open Type Font Remote Code Execution Vulnerability (CVE-2016-7256). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Internet Explorer Information Disclosure Vulnerability (CVE-2016-0162). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability (CVE-2016-3298). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Internet Explorer and Edge Information Disclosure Vulnerability (CVE-2016-3351). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability (CVE-2017-0005). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft XML Core Services Information Disclosure Vulnerability (CVE-2017-0022). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows SMBv1 Information Disclosure Vulnerability (CVE-2017-0147). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2017-0149). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Internet Explorer Privilege Escalation Vulnerability (CVE-2017-0210). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Search Remote Code Execution Vulnerability (CVE-2017-8543). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Kernel Privilege Escalation Vulnerability (CVE-2018-8611). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Win32k Privilege Escalation Vulnerability (CVE-2018-8589). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Internet Explorer Information Disclosure Vulnerability (CVE-2019-0676). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows SMB Information Disclosure Vulnerability (CVE-2019-0703). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Privilege Escalation Vulnerability (CVE-2019-0880). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability (CVE-2019-1130). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability (CVE-2019-1385). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Update Notification Manager Privilege Escalation Vulnerability (CVE-2020-0638). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows Kernel Privilege Escalation Vulnerability (CVE-2020-1027). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Internet Explorer Use-After-Free Vulnerability (CVE-2014-0322). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Win32k Privilege Escalation Vulnerability (CVE-2014-4113). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Win32k Privilege Escalation Vulnerability (CVE-2021-40450). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Win32k Privilege Escalation Vulnerability (CVE-2021-41357). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows User Profile Service Privilege Escalation Vulnerability (CVE-2022-21919). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows User Profile Service Privilege Escalation Vulnerability (CVE-2022-26904). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Print Spooler Privilege Escalation Vulnerability (CVE-2022-22718). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2015-2502). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows CLFS Driver Privilege Escalation Vulnerability (CVE-2022-24521). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Active Directory Domain Services Privilege Escalation Vulnerability (CVE-2021-42278). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Active Directory Domain Services Privilege Escalation Vulnerability (CVE-2021-42287). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft SMBv1 Server Remote Code Execution Vulnerability (CVE-2017-0148). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability (CVE-2021-31166). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows User Profile Service Privilege Escalation Vulnerability (CVE-2021-34484). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability (CVE-2010-4398). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability (CVE-2011-2005). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Word Remote Code Execution Vulnerability (CVE-2012-2539). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Internet Explorer Use-After-Free Vulnerability (CVE-2013-2551). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Win32k Privilege Escalation Vulnerability (CVE-2013-3660). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Office Uninitialized Memory Use Vulnerability (CVE-2015-1770). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2015-2419). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability (CVE-2015-2426). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Kernel Privilege Escalation Vulnerability (CVE-2016-0040). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows CSRSS Security Feature Bypass Vulnerability (CVE-2016-0151). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2016-0189). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Edge Memory Corruption Vulnerability (CVE-2016-7200). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Edge Memory Corruption Vulnerability (CVE-2016-7201). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Edge and Internet Explorer Type Confusion Vulnerability (CVE-2017-0037). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Internet Explorer Information Disclosure Vulnerability (CVE-2017-0059). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Privilege Escalation Vulnerability (CVE-2017-0213). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability (CVE-2018-8405). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability (CVE-2018-8406). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows Privilege Escalation Vulnerability (CVE-2018-8440). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows Event Tracing Privilege Escalation Vulnerability (CVE-2021-34486). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability (CVE-2021-38646). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability (CVE-2014-6324). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability (CVE-2014-6332). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows SMB Remote Code Execution Vulnerability (CVE-2017-0146). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Scripting Engine Memory Corruption Vulnerability (CVE-2018-8373). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Shell Remote Code Execution Vulnerability (CVE-2018-8414). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft GDI Remote Code Execution Vulnerability (CVE-2019-0903). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Print Spooler Privilege Escalation Vulnerability (CVE-2022-21999). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Win32k Memory Corruption Vulnerability (CVE-2015-2546). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows Kernel Privilege Escalation Vulnerability (CVE-2016-3309). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows Transaction Manager Privilege Escalation Vulnerability (CVE-2017-0101). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Win32k Privilege Escalation Vulnerability (CVE-2018-8120). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows Privilege Escalation Vulnerability (CVE-2019-0543). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability (CVE-2019-0841). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability (CVE-2019-1064). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Task Scheduler Privilege Escalation Vulnerability (CVE-2019-1069). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability (CVE-2019-1129). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Win32k Privilege Escalation Vulnerability (CVE-2019-1132). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability (CVE-2019-1253). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability (CVE-2019-1315). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows Privilege Escalation Vulnerability (CVE-2019-1322). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability (CVE-2019-1405). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows Privilege Escalation Vulnerability (CVE-2002-0367). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Privilege Escalation Vulnerability (CVE-2004-0210). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Improper Input Validation Vulnerability (CVE-2009-1123). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Excel Featheader Record Memory Corruption Vulnerability (CVE-2009-3129). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Kernel Exception Handler Vulnerability (CVE-2010-0232). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Office Stack-based Buffer Overflow Vulnerability (CVE-2010-3333). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Forefront TMG Remote Code Execution Vulnerability (CVE-2011-1889). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability (CVE-2012-1856). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Internet Explorer Remote Code Execution Vulnerability (CVE-2013-1347). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Internet Explorer Use-After-Free Vulnerability (CVE-2013-3897). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Kernel Privilege Escalation Vulnerability (CVE-2013-5065). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability (CVE-2014-4114). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Office Memory Corruption Vulnerability (CVE-2015-1642). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Win32k Privilege Escalation Vulnerability (CVE-2015-1701). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft ATM Font Driver Privilege Escalation Vulnerability (CVE-2015-2387). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft PowerPoint Memory Corruption Vulnerability (CVE-2015-2424). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Office Malformed EPS File Vulnerability (CVE-2015-2545). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability (CVE-2016-0099). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Office Memory Corruption Vulnerability (CVE-2016-7193). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Office Security Feature Bypass Vulnerability (CVE-2016-7262). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability (CVE-2017-0001). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Office Use-After-Free Vulnerability (CVE-2017-0261). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Office Remote Code Execution Vulnerability (CVE-2017-11826). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability (CVE-2017-8540). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Exchange Server Privilege Escalation Vulnerability (CVE-2018-8581). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Excel Remote Code Execution Vulnerability (CVE-2019-1297). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Installer Privilege Escalation Vulnerability (CVE-2021-41379). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows Code Injection Vulnerability (CVE-2014-6352). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Internet Explorer Remote Code Execution Vulnerability (CVE-2017-0222). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Office Remote Code Execution Vulnerability (CVE-2017-8570). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Graphics Component Memory Corruption Vulnerability (CVE-2013-3906). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Word Memory Corruption Vulnerability (CVE-2014-1761). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability (CVE-2018-8174). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Internet Explorer Type Confusion Vulnerability (CVE-2019-0752). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft HTTP.sys Remote Code Execution Vulnerability (CVE-2015-1635). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft SMBv1 Remote Code Execution Vulnerability (CVE-2017-0144). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft SMBv1 Remote Code Execution Vulnerability (CVE-2017-0145). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Office Remote Code Execution Vulnerability (CVE-2017-0262). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Win32k Privilege Escalation Vulnerability (CVE-2017-0263). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability (CVE-2017-8464). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft SMBv3 Remote Code Execution Vulnerability (CVE-2020-0796). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows SAM Local Privilege Escalation Vulnerability (CVE-2021-36934). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Win32k Privilege Escalation Vulnerability (CVE-2022-21882). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2014-1776). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability (CVE-2020-0787). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Win32k Privilege Escalation Vulnerability (CVE-2018-8453). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Exchange Server Information Disclosure (CVE-2021-33766). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft WinVerifyTrust function Remote Code Execution (CVE-2013-3900). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Win32k Privilege Escalation Vulnerability (CVE-2019-1458). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows AppX Installer Spoofing Vulnerability (CVE-2021-43890). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows Win32k Privilege Escalation Vulnerability (CVE-2021-40449). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Excel Security Feature Bypass (CVE-2021-42292). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Exchange Server Remote Code Execution Vulnerability (CVE-2021-42321). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability (CVE-2012-0158). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability (CVE-2014-1812). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Office Memory Corruption Vulnerability (CVE-2015-1641). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Win32k Privilege Escalation Vulnerability (CVE-2016-0167). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows Media Center Remote Code Execution Vulnerability (CVE-2016-0185). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Office OLE DLL Side Loading Vulnerability (CVE-2016-3235). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Win32k Privilege Escalation Vulnerability (CVE-2016-7255). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability (CVE-2017-0143). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Office and WordPad Remote Code Execution Vulnerability (CVE-2017-0199). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Office Outlook Security Feature Bypass Vulnerability (CVE-2017-11774). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Office Memory Corruption Vulnerability (CVE-2017-11882). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows Server Buffer Overflow Vulnerability (CVE-2017-7269). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft .NET Framework Remote Code Execution Vulnerability (CVE-2017-8759). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Office Memory Corruption Vulnerability (CVE-2018-0798). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Office Memory Corruption Vulnerability (CVE-2018-0802). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability (CVE-2018-8653). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft MSHTML Remote Code Execution Vulnerability (CVE-2019-0541). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft SharePoint Remote Code Execution Vulnerability (CVE-2019-0604). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Remote Desktop Services Remote Code Execution Vulnerability (CVE-2019-0708). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Win32k Privilege Escalation Vulnerability (CVE-2019-0797). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Win32k Privilege Escalation Vulnerability (CVE-2019-0803). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Win32k Privilege Escalation Vulnerability (CVE-2019-0808). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Win32k Privilege Escalation Vulnerability (CVE-2019-0859). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability (CVE-2019-0863). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability (CVE-2019-1214). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Privilege Escalation Vulnerability (CVE-2019-1215). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability (CVE-2019-1367). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability (CVE-2019-1429). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows CryptoAPI Spoofing Vulnerability (CVE-2020-0601). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft .NET Framework Remote Code Execution Vulnerability (CVE-2020-0646). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability (CVE-2020-0674). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Installer Privilege Escalation Vulnerability (CVE-2020-0683). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability (CVE-2020-0688). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Edge and Internet Explorer Memory Corruption Vulnerability (CVE-2020-0878). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability (CVE-2020-0938). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability (CVE-2020-0968). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows Kernel Privilege Escalation Vulnerability (CVE-2020-0986). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability (CVE-2020-1020). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability (CVE-2020-1040). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Win32k Privilege Escalation Vulnerability (CVE-2020-1054). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability (CVE-2020-1147). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows DNS Server Remote Code Execution Vulnerability (CVE-2020-1350). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability (CVE-2020-1380). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Spoofing Vulnerability (CVE-2020-1464). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Netlogon Privilege Escalation Vulnerability (CVE-2020-1472). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows Kernel Privilege Escalation Vulnerability (CVE-2020-17087). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Exchange Server Remote Code Execution Vulnerability (CVE-2020-17144). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Defender Remote Code Execution Vulnerability (CVE-2021-1647). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Print Spooler Remote Code Execution Vulnerability (CVE-2021-1675). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Win32k Privilege Escalation Vulnerability (CVE-2021-1732). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2021-26411). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Exchange Server Remote Code Execution Vulnerability (CVE-2021-26855). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Exchange Server Remote Code Execution Vulnerability (CVE-2021-26857). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Exchange Server Remote Code Execution Vulnerability (CVE-2021-26858). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Office Remote Code Execution Vulnerability (CVE-2021-27059). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Exchange Server Remote Code Execution Vulnerability (CVE-2021-27065). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Internet Explorer Remote Code Execution Vulnerability (CVE-2021-27085). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Win32k Privilege Escalation Vulnerability (CVE-2021-28310). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability (CVE-2021-31199). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability (CVE-2021-31201). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Exchange Server Security Feature Bypass Vulnerability (CVE-2021-31207). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows Kernel Information Disclosure Vulnerability (CVE-2021-31955). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows NTFS Privilege Escalation Vulnerability (CVE-2021-31956). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Kernel Privilege Escalation Vulnerability (CVE-2021-31979). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability (CVE-2021-33739). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability (CVE-2021-33742). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Kernel Privilege Escalation Vulnerability (CVE-2021-33771). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Scripting Engine Memory Corruption Vulnerability (CVE-2021-34448). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Exchange Server Remote Code Execution Vulnerability (CVE-2021-34473). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Exchange Server Privilege Escalation Vulnerability (CVE-2021-34523). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows Print Spooler Remote Code Execution Vulnerability (CVE-2021-34527). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability (CVE-2021-36942). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Windows Update Medic Service Privilege Escalation Vulnerability (CVE-2021-36948). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability (CVE-2021-36955). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability (CVE-2021-38645). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability (CVE-2021-38647). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability (CVE-2021-38648). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability (CVE-2021-38649). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft MSHTML Remote Code Execution Vulnerability (CVE-2021-40444). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
We check: California and Washington Attorney General breach notices, SEC cyber incident filings (Form 8-K, Item 1.05) and CISA's catalog of actively exploited security flaws. An empty section means we found nothing in those sources. It does not mean nothing happened. How it works
To cite: Vendor History, "Microsoft (Microsoft 365, Windows) security incident history," vendorhistory.com/vendor/microsoft, data checked Oct 26, 2026. Free to reuse under CC BY 4.0 with credit to Vendor History.