CyberSecBulletin

Microsoft vulnerabilities

We track 1,120 vulnerabilities in Microsoft products across 60+ products. 1,077 are rated high or critical, and 406 have been exploited in real attacks. The most recent was published on November 10, 2026.

1,120vulnerabilities
124critical
953high
406exploited
7.9average CVSS score

Latest Microsoft vulnerabilities

  • 7.8 High severity

    Microsoft Office Remote Code Execution Exploited

    CVE-2017-0262MicrosoftEPSS 81%

    Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0261 and

  • 7.8 High severity

    Microsoft Office Use-After-Free Exploited

    CVE-2017-0261MicrosoftEPSS 78.1%

    Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0262 and

  • 8.8 High severity

    Microsoft Internet Explorer Remote Code Execution Exploited

    CVE-2017-0222MicrosoftEPSS 29.6%

    A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0226.

  • 7.3 High severity

    Microsoft Windows Privilege Escalation Exploited

    CVE-2017-0213MicrosoftEPSS 84.3%

    Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation privilege vulnerabi

  • 8.8 High severity

    Microsoft Internet Explorer Privilege Escalation Exploited

    CVE-2017-0210MicrosoftEPSS 22.3%

    An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain, aka "Internet Explorer Elevation of Pr

  • 7.8 High severity

    Microsoft Office and WordPad Remote Code Execution Exploited

    CVE-2017-0199MicrosoftEPSS 99.5%

    Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1 allow remote attackers to execute arbitrary code via a crafted document, ak

  • 9.8 Critical severity

    Microsoft Windows Server Buffer Overflow Exploited

    CVE-2017-7269MicrosoftEPSS 99.8%

    Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: <http://" in a PRO

  • 8.8 High severity

    Microsoft Internet Explorer Memory Corruption Exploited

    CVE-2017-0149MicrosoftEPSS 28.5%

    Microsoft Internet Explorer 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." This vulnerability is different from tho

  • 8.1 High severity

    Microsoft SMBv1 Server Remote Code Execution Exploited

    CVE-2017-0148MicrosoftEPSS 99.4%

    The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute ar

  • 7.5 High severity

    Microsoft Windows SMBv1 Information Disclosure Exploited

    CVE-2017-0147MicrosoftEPSS 99.7%

    The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to obtain sen

  • 8.8 High severity

    Microsoft Windows SMB Remote Code Execution Exploited

    CVE-2017-0146MicrosoftEPSS 89.9%

    The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute ar

  • 8.8 High severity

    Microsoft SMBv1 Remote Code Execution Exploited

    CVE-2017-0145MicrosoftEPSS 89.8%

    The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute ar

  • 8.8 High severity

    Microsoft SMBv1 Remote Code Execution Exploited

    CVE-2017-0144MicrosoftEPSS 99.2%

    The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute ar

  • 8.8 High severity

    Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Exploited

    CVE-2017-0143MicrosoftEPSS 93.3%

    The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute ar

  • 7.8 High severity

    Microsoft Windows Transaction Manager Privilege Escalation Exploited

    CVE-2017-0101MicrosoftEPSS 57.5%

    The kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allow local use

  • 4.3 Medium severity

    Microsoft Internet Explorer Information Disclosure Exploited

    CVE-2017-0059MicrosoftEPSS 62%

    Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability." This vulnerability is different from those described in CV

  • 6.5 Medium severity

    Microsoft XML Core Services Information Disclosure Exploited

    CVE-2017-0022MicrosoftEPSS 18.1%

    Microsoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows Server 2008 SP2 and R2 SP1; Windows Server 2012 Gold and R2; Windows Server 2016; and Windows Vista SP2 improperly handles objects in me

  • 7.8 High severity

    Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Exploited

    CVE-2017-0005MicrosoftEPSS 11%

    The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a

  • 7.8 High severity

    Microsoft Graphics Device Interface (GDI) Privilege Escalation Exploited

    CVE-2017-0001MicrosoftEPSS 3.11%

    The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a

  • 8.1 High severity

    Microsoft Edge and Internet Explorer Type Confusion Exploited

    CVE-2017-0037MicrosoftEPSS 80.4%

    Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuilder::HandleColumnBreakOnColumnSpanningElement function in mshtml.dll, which allows remote attackers to execute arbitrary code via vectors invo

  • 7.8 High severity

    Microsoft Office Security Feature Bypass Exploited

    CVE-2016-7262MicrosoftEPSS 58.8%

    Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow user-assisted remote attackers to execute arbitrary commands via a crafted cell that is mishandled upon a click, aka

  • 8.8 High severity

    Microsoft Windows Open Type Font Remote Code Execution Exploited

    CVE-2016-7256MicrosoftEPSS 64.6%

    atmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attack

  • 7.8 High severity

    Microsoft Win32k Privilege Escalation Exploited

    CVE-2016-7255MicrosoftEPSS 81%

    The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to gain privileg

  • 8.8 High severity

    Microsoft Edge Memory Corruption Exploited

    CVE-2016-7201MicrosoftEPSS 80%

    The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerabilit

  • 8.8 High severity

    Microsoft Edge Memory Corruption Exploited

    CVE-2016-7200MicrosoftEPSS 82.8%

    The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerabilit

  • 7.8 High severity

    Microsoft Office Memory Corruption Exploited

    CVE-2016-7193MicrosoftEPSS 57.6%

    Microsoft Word 2007 SP2, Office 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoi

  • 7.8 High severity

    Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Exploited

    CVE-2016-3393MicrosoftEPSS 68.5%

    Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows remote attackers to execute

  • 6.5 Medium severity

    Microsoft Internet Explorer Messaging API Information Disclosure Exploited

    CVE-2016-3298MicrosoftEPSS 33.3%

    Microsoft Internet Explorer 9 through 11 and the Internet Messaging API in Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allow remote attackers to determine the existence of arbitrary files via a crafted web site, aka "Internet Explo

  • 6.5 Medium severity

    Microsoft Internet Explorer and Edge Information Disclosure Exploited

    CVE-2016-3351MicrosoftEPSS 26.5%

    Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability."

  • 7.8 High severity

    Microsoft Windows Kernel Privilege Escalation Exploited

    CVE-2016-3309MicrosoftEPSS 20.5%

    The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted appl

  • 7.8 High severity

    Microsoft Office OLE DLL Side Loading Exploited

    CVE-2016-3235MicrosoftEPSS 43.3%

    Microsoft Visio 2007 SP3, Visio 2010 SP2, Visio 2013 SP1, Visio 2016, Visio Viewer 2007 SP3, and Visio Viewer 2010 mishandle library loading, which allows local users to gain privileges via a crafted application, aka "Microsoft Office OLE DLL Side Loading Vuln

  • 7.5 High severity

    Microsoft Internet Explorer Memory Corruption Exploited

    CVE-2016-0189MicrosoftEPSS 94.1%

    The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scr

  • 7.8 High severity

    Microsoft Windows Media Center Remote Code Execution Exploited

    CVE-2016-0185MicrosoftEPSS 69.8%

    Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, and Windows 8.1 allows remote attackers to execute arbitrary code via a crafted Media Center link (aka .mcl) file, aka "Windows Media Center Remote Code Execution Vulnerability."

  • 7.8 High severity

    Microsoft Win32k Privilege Escalation Exploited

    CVE-2016-0167MicrosoftEPSS 5.66%

    The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application

  • 7.8 High severity

    Microsoft Win32k Privilege Escalation Exploited

    CVE-2016-0165MicrosoftEPSS 13.7%

    The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application

  • 4.3 Medium severity

    Microsoft Internet Explorer Information Disclosure Exploited

    CVE-2016-0162MicrosoftEPSS 21.9%

    Microsoft Internet Explorer 9 through 11 allows remote attackers to determine the existence of files via crafted JavaScript code, aka "Internet Explorer Information Disclosure Vulnerability."

  • 7.8 High severity

    Microsoft Windows CSRSS Security Feature Bypass Exploited

    CVE-2016-0151MicrosoftEPSS 62.8%

    The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mismanages process tokens, which allows local users to gain privileges via a crafted application, aka "Windows

  • 7.8 High severity

    Microsoft Windows Secondary Logon Service Privilege Escalation Exploited

    CVE-2016-0099MicrosoftEPSS 37%

    The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 does not properly process request handles, which allows lo

  • 7.8 High severity

    Microsoft Windows Kernel Privilege Escalation Exploited

    CVE-2016-0040MicrosoftEPSS 24.3%

    The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via a crafted application, aka "Windows Elevation of Privilege Vulnerability."

  • 8.8 High severity

    Microsoft Silverlight Runtime Remote Code Execution Exploited

    CVE-2016-0034MicrosoftEPSS 69.4%

    Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers to execute arbitrary code or cause a denial of service (object-header corruption) via a crafted web site, aka "Silverlight Runtime Remote Code