Skip to content
THREATWIRE

CVE Tracker · Microsoft

Microsoft Other CVEs

132 Other CVEs in the tracker, 131 in the CISA KEV catalogue.

All Microsoft CVEs · RSS feed for Microsoft Other · Tracker data last updated 18 Oct 2026. Ranges come from the product data in KEV and NVD and can overlap when a CVE names several products.

Showing 50 of 132

  1. CVE-2026-65660CVSS 8.8 highEPSS 2.10%KEV2026-08-11

    SharePoint. Microsoft SharePoint Code Injection Vulnerability

  2. CVE-2026-55040CVSS 9.1 criticalEPSS 69.5%KEV2026-07-14

    SharePoint. Microsoft SharePoint Weak Authentication Vulnerability

  3. CVE-2026-50522CVSS 9.8 criticalEPSS 3.04%KEV2026-07-14

    SharePoint. Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

  4. CVE-2026-33824CVSS 9.8 criticalEPSS 1.62%KEV2026-04-14

    Internet Key Exchange (IKE) Service Extensions. Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability

  5. CVE-2025-53771CVSS 6.5 mediumEPSS 100%2025-07-20

    sharepoint server. Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing ov…

  6. CVE-2025-53770CVSS 9.8 criticalEPSS 100%KEV2025-07-20

    SharePoint. Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

  7. CVE-2025-49706CVSS 6.5 mediumEPSS 99.1%KEV2025-07-08

    SharePoint. Microsoft SharePoint Improper Authentication Vulnerability

  8. CVE-2025-49704CVSS 8.8 highEPSS 100%KEV2025-07-08

    SharePoint. Microsoft SharePoint Code Injection Vulnerability

  9. CVE-2024-29059CVSS 7.5 highEPSS 98.6%KEV2024-03-23

    .NET Framework. Microsoft .NET Framework Information Disclosure Vulnerability

  10. CVE-2023-29357CVSS 9.8 criticalEPSS 100%KEV2023-06-14

    SharePoint Server. Microsoft SharePoint Server Privilege Escalation Vulnerability

  11. CVE-2022-41082CVSS 8.0 highEPSS 100%KEV2022-10-03

    Exchange Server. Microsoft Exchange Server Remote Code Execution Vulnerability

  12. CVE-2022-41040CVSS 8.8 highEPSS 100%KEV2022-10-03

    Exchange Server. Microsoft Exchange Server Server-Side Request Forgery Vulnerability

  13. CVE-2021-38647CVSS 9.8 criticalEPSS 100%KEV2021-09-15

    Open Management Infrastructure (OMI). Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

  14. CVE-2021-34523CVSS 9.0 criticalEPSS 100%KEV2021-07-14

    Exchange Server. Microsoft Exchange Server Privilege Escalation Vulnerability

  15. CVE-2021-34473CVSS 9.1 criticalEPSS 100%KEV2021-07-14

    Exchange Server. Microsoft Exchange Server Remote Code Execution Vulnerability

  16. CVE-2021-33766CVSS 7.3 highEPSS 98.2%KEV2021-07-14

    Exchange Server. Microsoft Exchange Server Information Disclosure

  17. CVE-2021-31207CVSS 6.6 mediumEPSS 100%KEV2021-05-11

    Exchange Server. Microsoft Exchange Server Security Feature Bypass Vulnerability

  18. CVE-2021-31166CVSS 9.8 criticalEPSS 100%KEV2021-05-11

    HTTP Protocol Stack. Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability

  19. CVE-2021-27065CVSS 7.8 highEPSS 100%KEV2021-03-03

    Exchange Server. Microsoft Exchange Server Remote Code Execution Vulnerability

  20. CVE-2021-26855CVSS 9.1 criticalEPSS 100%KEV2021-03-03

    Exchange Server. Microsoft Exchange Server Remote Code Execution Vulnerability

  21. CVE-2020-1472CVSS 5.5 mediumEPSS 99.4%KEV2020-08-17

    Netlogon. Microsoft Netlogon Privilege Escalation Vulnerability

  22. CVE-2020-0796CVSS 10.0 criticalEPSS 100%KEV2020-03-12

    SMBv3. Microsoft SMBv3 Remote Code Execution Vulnerability

  23. CVE-2020-0688CVSS 8.8 highEPSS 100%KEV2020-02-11

    Exchange Server. Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability

  24. CVE-2020-0618CVSS 8.8 highEPSS 99.0%KEV2020-02-11

    SQL Server. Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability

  25. CVE-2020-0646CVSS 9.8 criticalEPSS 99.2%KEV2020-01-14

    .NET Framework. Microsoft .NET Framework Remote Code Execution Vulnerability

  26. CVE-2019-1068CVSS 8.8 highEPSS 57.3%KEV2019-07-15

    SQL Server. Microsoft SQL Server Remote Code Execution Vulnerability

  27. CVE-2019-0708CVSS 9.8 criticalEPSS 100%KEV2019-05-16

    Remote Desktop Services. Microsoft Remote Desktop Services Remote Code Execution Vulnerability

  28. CVE-2019-0604CVSS 9.8 criticalEPSS 100%KEV2019-03-05

    SharePoint. Microsoft SharePoint Remote Code Execution Vulnerability

  29. CVE-2017-7269CVSS 9.8 criticalEPSS 100%KEV2017-03-27

    Internet Information Services (IIS). Microsoft Windows Server Buffer Overflow Vulnerability

  30. CVE-2015-1635CVSS 9.8 criticalEPSS 100%KEV2015-04-14

    HTTP.sys. Microsoft HTTP.sys Remote Code Execution Vulnerability

  31. CVE-2026-58644No CVSSEPSS 15.9%KEV

    SharePoint. Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

  32. CVE-2026-56164No CVSSEPSS 1.01%KEV

    SharePoint Server. Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability

  33. CVE-2026-56155No CVSSEPSS 0.35%KEV

    Active Directory Federation Services. Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability

  34. CVE-2026-45659No CVSSEPSS 2.70%KEV

    SharePoint Server. Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability

  35. CVE-2026-45498No CVSSEPSS 1.27%KEV

    Defender. Microsoft Defender Denial of Service Vulnerability

  36. CVE-2026-41091No CVSSEPSS 0.44%KEV

    Defender. Microsoft Defender Link Following Vulnerability

  37. CVE-2026-33825No CVSSEPSS 0.40%KEV

    Defender. Microsoft Defender Insufficient Granularity of Access Control Vulnerability

  38. CVE-2026-32201No CVSSEPSS 43.4%KEV

    SharePoint Server. Microsoft SharePoint Server Improper Input Validation Vulnerability

  39. CVE-2026-20963No CVSSEPSS 29.2%KEV

    SharePoint. Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

  40. CVE-2025-24989No CVSSEPSS 1.62%KEV

    Power Pages. Microsoft Power Pages Improper Access Control Vulnerability

  41. CVE-2024-49035No CVSSEPSS 1.30%KEV

    Partner Center. Microsoft Partner Center Improper Access Control Vulnerability

  42. CVE-2024-43468No CVSSEPSS 81.0%KEV

    Configuration Manager. Microsoft Configuration Manager SQL Injection Vulnerability

  43. CVE-2024-38226No CVSSEPSS 2.67%KEV

    Publisher. Microsoft Publisher Protection Mechanism Failure Vulnerability

  44. CVE-2024-38189No CVSSEPSS 8.19%KEV

    Project. Microsoft Project Remote Code Execution Vulnerability

  45. CVE-2024-38094No CVSSEPSS 50.9%KEV

    SharePoint. Microsoft SharePoint Deserialization Vulnerability

  46. CVE-2024-30051No CVSSEPSS 5.69%KEV

    DWM Core Library. Microsoft DWM Core Library Privilege Escalation Vulnerability

  47. CVE-2024-29988No CVSSEPSS 45.2%KEV

    SmartScreen Prompt. Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability

  48. CVE-2024-21410No CVSSEPSS 12.6%KEV

    Exchange Server. Microsoft Exchange Server Privilege Escalation Vulnerability

  49. CVE-2023-41763No CVSSEPSS 90.5%KEV

    Skype for Business. Microsoft Skype for Business Privilege Escalation Vulnerability

  50. CVE-2023-38180No CVSSEPSS 14.0%KEV

    .NET Core and Visual Studio. Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability