Skip to content
Edition of Sunday, November 8, 2026
Daily CISO

The five-minute briefing for security leaders.

Security vendor · EDR and XDR · in CISA KEV

Microsoft in the CISA KEV catalog

CISA’s Known Exploited Vulnerabilities catalog lists 390 entries for Microsoft as of catalog version 2026.11.06, released November 6, 2026. The newest was added October 13, 2026, and the latest federal due date is October 16, 2026. CISA marks 117 of them as known ransomware use.

Updated

entries in the catalog
390
newest addition
October 13, 2026
latest federal due date
October 16, 2026
marked known ransomware use
117

Directory record

Website
www.microsoft.com/en-us/security
Categories
EDR and XDR (primary), SIEM, Workforce IAM and SSO, Endpoint management and application control
Headquarters
Redmond, United States
Founded
1975
Ownership
Public (NASDAQ: MSFT)
Company record
Microsoft on CISO Tribune

Directory data as of November 8, 2026. What the company sells, and the source for every fact, is on its CISO Tribune page.

KEV entries, newest first

Filed by CISA under the name “Microsoft”. Each row links to the CVE’s NVD record; entries added in the last 45 days also link to their place on must-patch. The due date is CISA’s remediation deadline for federal civilian agencies, as the feed states it.

  1. Added October 13, 2026

    CVE-2026-96951 Microsoft Windows Command Injection Vulnerability

    Windows · on must-patch

    Due October 16, 2026

  2. Added September 25, 2026

    CVE-2026-65660 Microsoft SharePoint Code Injection Vulnerability

    SharePoint · on must-patch

    Due September 28, 2026

  3. Added September 8, 2026

    CVE-2026-85880 Microsoft Windows Heap-Based Buffer Overflow Vulnerability

    Windows

    Due September 22, 2026

  4. Added September 8, 2026

    CVE-2026-81963 Microsoft Windows Link Following Vulnerability

    Windows

    Due September 22, 2026

  5. Added August 26, 2026

    CVE-2019-1068 Microsoft SQL Server Remote Code Execution Vulnerability

    SQL Server

    Due August 29, 2026

  6. Added August 18, 2026

    CVE-2026-55040 Microsoft SharePoint Weak Authentication Vulnerability

    SharePoint

    Due August 21, 2026

  7. Added August 18, 2026

    CVE-2026-33824 Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability

    Internet Key Exchange (IKE) Service Extensions

    Due August 21, 2026

  8. Added August 11, 2026

    CVE-2026-68820 Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

    Windows Ancillary Function Driver for WinSock

    Due August 25, 2026

  9. Added July 22, 2026

    CVE-2026-50522 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

    SharePoint

    Due July 25, 2026

  10. Added July 16, 2026

    CVE-2026-58644 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

    SharePoint

    Due July 19, 2026

  11. Added July 14, 2026

    CVE-2026-56164 Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability

    SharePoint Server

    Due July 17, 2026

  12. Added July 14, 2026

    CVE-2026-56155 Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability

    Active Directory Federation Services

    Due July 28, 2026

  13. Added July 1, 2026

    CVE-2026-45659 Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability

    SharePoint Server · known ransomware use

    Due July 4, 2026

  14. Added May 20, 2026

    CVE-2026-45498 Microsoft Defender Denial of Service Vulnerability

    Defender

    Due June 3, 2026

  15. Added May 20, 2026

    CVE-2026-41091 Microsoft Defender Link Following Vulnerability

    Defender

    Due June 3, 2026

  16. Added May 20, 2026

    CVE-2010-0806 Microsoft Internet Explorer Use-After-Free Vulnerability

    Internet Explorer

    Due June 3, 2026

  17. Added May 20, 2026

    CVE-2010-0249 Microsoft Internet Explorer Use-After-Free Vulnerability

    Internet Explorer

    Due June 3, 2026

  18. Added May 20, 2026

    CVE-2009-1537 Microsoft DirectX NULL Byte Overwrite Vulnerability

    DirectX

    Due June 3, 2026

  19. Added May 20, 2026

    CVE-2008-4250 Microsoft Windows Buffer Overflow Vulnerability

    Windows

    Due June 3, 2026

  20. Added May 15, 2026

    CVE-2026-42897 Microsoft Exchange Server Cross-Site Scripting Vulnerability

    Microsoft

    Due May 29, 2026

  21. Added April 28, 2026

    CVE-2026-32202 Microsoft Windows Protection Mechanism Failure Vulnerability

    Windows

    Due May 12, 2026

  22. Added April 22, 2026

    CVE-2026-33825 Microsoft Defender Insufficient Granularity of Access Control Vulnerability

    Defender · known ransomware use

    Due May 6, 2026

  23. Added April 14, 2026

    CVE-2026-32201 Microsoft SharePoint Server Improper Input Validation Vulnerability

    SharePoint Server

    Due April 28, 2026

  24. Added April 14, 2026

    CVE-2009-0238 Microsoft Office Remote Code Execution

    Office

    Due April 28, 2026

  25. Added April 13, 2026

    CVE-2025-60710 Microsoft Windows Link Following Vulnerability

    Windows · known ransomware use

    Due April 27, 2026

  26. Added April 13, 2026

    CVE-2023-36424 Microsoft Windows Out-of-Bounds Read Vulnerability

    Windows

    Due April 27, 2026

  27. Added April 13, 2026

    CVE-2023-21529 Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability

    Exchange Server · known ransomware use

    Due April 27, 2026

  28. Added April 13, 2026

    CVE-2012-1854 Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability

    Visual Basic for Applications (VBA)

    Due April 27, 2026

  29. Added March 18, 2026

    CVE-2026-20963 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

    SharePoint

    Due March 21, 2026

  30. Added February 17, 2026

    CVE-2008-0015 Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability

    Windows

    Due March 10, 2026

  31. Added February 12, 2026

    CVE-2024-43468 Microsoft Configuration Manager SQL Injection Vulnerability

    Configuration Manager

    Due March 5, 2026

  32. Added February 10, 2026

    CVE-2026-21533 Microsoft Windows Improper Privilege Management Vulnerability

    Windows

    Due March 3, 2026

  33. Added February 10, 2026

    CVE-2026-21525 Microsoft Windows NULL Pointer Dereference Vulnerability

    Windows

    Due March 3, 2026

  34. Added February 10, 2026

    CVE-2026-21519 Microsoft Windows Type Confusion Vulnerability

    Windows

    Due March 3, 2026

  35. Added February 10, 2026

    CVE-2026-21514 Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability

    Office

    Due March 3, 2026

  36. Added February 10, 2026

    CVE-2026-21513 Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability

    Windows

    Due March 3, 2026

  37. Added February 10, 2026

    CVE-2026-21510 Microsoft Windows Shell Protection Mechanism Failure Vulnerability

    Windows

    Due March 3, 2026

  38. Added January 26, 2026

    CVE-2026-21509 Microsoft Office Security Feature Bypass Vulnerability

    Office

    Due February 16, 2026

  39. Added January 13, 2026

    CVE-2026-20805 Microsoft Windows Information Disclosure Vulnerability

    Windows

    Due February 3, 2026

  40. Added January 7, 2026

    CVE-2009-0556 Microsoft Office PowerPoint Code Injection Vulnerability

    Office

    Due January 28, 2026

  41. Added December 9, 2025

    CVE-2025-62221 Microsoft Windows Use After Free Vulnerability

    Windows

    Due December 30, 2025

  42. Added November 12, 2025

    CVE-2025-62215 Microsoft Windows Race Condition Vulnerability

    Windows

    Due December 3, 2025

  43. Added October 24, 2025

    CVE-2025-59287 Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability

    Windows

    Due November 14, 2025

  44. Added October 20, 2025

    CVE-2025-33073 Microsoft Windows SMB Client Improper Access Control Vulnerability

    Windows

    Due November 10, 2025

  45. Added October 14, 2025

    CVE-2025-59230 Microsoft Windows Improper Access Control Vulnerability

    Windows

    Due November 4, 2025

  46. Added October 14, 2025

    CVE-2025-24990 Microsoft Windows Untrusted Pointer Dereference Vulnerability

    Windows

    Due November 4, 2025

  47. Added October 6, 2025

    CVE-2021-43226 Microsoft Windows Privilege Escalation Vulnerability

    Windows · known ransomware use

    Due October 27, 2025

  48. Added October 6, 2025

    CVE-2013-3918 Microsoft Windows Out-of-Bounds Write Vulnerability

    Windows

    Due October 27, 2025

  49. Added October 6, 2025

    CVE-2011-3402 Microsoft Windows Remote Code Execution Vulnerability

    Windows

    Due October 27, 2025

  50. Added October 6, 2025

    CVE-2010-3962 Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability

    Internet Explorer

    Due October 27, 2025

  51. Added August 12, 2025

    CVE-2013-3893 Microsoft Internet Explorer Resource Management Errors Vulnerability

    Internet Explorer

    Due September 2, 2025

  52. Added August 12, 2025

    CVE-2007-0671 Microsoft Office Excel Remote Code Execution Vulnerability

    Office

    Due September 2, 2025

  53. Added July 22, 2025

    CVE-2025-49706 Microsoft SharePoint Improper Authentication Vulnerability

    SharePoint · known ransomware use

    Due July 23, 2025

  54. Added July 22, 2025

    CVE-2025-49704 Microsoft SharePoint Code Injection Vulnerability

    SharePoint · known ransomware use

    Due July 23, 2025

  55. Added July 20, 2025

    CVE-2025-53770 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

    SharePoint · known ransomware use

    Due July 21, 2025

  56. Added June 10, 2025

    CVE-2025-33053 Microsoft Windows External Control of File Name or Path Vulnerability

    Windows

    Due July 1, 2025

  57. Added May 13, 2025

    CVE-2025-32709 Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

    Windows

    Due June 3, 2025

  58. Added May 13, 2025

    CVE-2025-32706 Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability

    Windows

    Due June 3, 2025

  59. Added May 13, 2025

    CVE-2025-32701 Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability

    Windows

    Due June 3, 2025

  60. Added May 13, 2025

    CVE-2025-30400 Microsoft Windows DWM Core Library Use-After-Free Vulnerability

    Windows

    Due June 3, 2025

  61. Added May 13, 2025

    CVE-2025-30397 Microsoft Windows Scripting Engine Type Confusion Vulnerability

    Windows

    Due June 3, 2025

  62. Added April 17, 2025

    CVE-2025-24054 Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability

    Windows

    Due May 8, 2025

  63. Added April 8, 2025

    CVE-2025-29824 Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability

    Windows · known ransomware use

    Due April 29, 2025

  64. Added March 11, 2025

    CVE-2025-26633 Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability

    Windows · known ransomware use

    Due April 1, 2025

  65. Added March 11, 2025

    CVE-2025-24993 Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability

    Windows

    Due April 1, 2025

  66. Added March 11, 2025

    CVE-2025-24991 Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability

    Windows

    Due April 1, 2025

  67. Added March 11, 2025

    CVE-2025-24985 Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability

    Windows

    Due April 1, 2025

  68. Added March 11, 2025

    CVE-2025-24984 Microsoft Windows NTFS Information Disclosure Vulnerability

    Windows

    Due April 1, 2025

  69. Added March 11, 2025

    CVE-2025-24983 Microsoft Windows Win32k Use-After-Free Vulnerability

    Windows

    Due April 1, 2025

  70. Added March 3, 2025

    CVE-2018-8639 Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability

    Windows · known ransomware use

    Due March 24, 2025

  71. Added February 25, 2025

    CVE-2024-49035 Microsoft Partner Center Improper Access Control Vulnerability

    Partner Center

    Due March 18, 2025

  72. Added February 21, 2025

    CVE-2025-24989 Microsoft Power Pages Improper Access Control Vulnerability

    Power Pages

    Due March 14, 2025

  73. Added February 11, 2025

    CVE-2025-21418 Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability

    Windows

    Due March 4, 2025

  74. Added February 11, 2025

    CVE-2025-21391 Microsoft Windows Storage Link Following Vulnerability

    Windows

    Due March 4, 2025

  75. Added February 6, 2025

    CVE-2024-21413 Microsoft Outlook Improper Input Validation Vulnerability

    Office Outlook

    Due February 27, 2025

  76. Added February 4, 2025

    CVE-2024-29059 Microsoft .NET Framework Information Disclosure Vulnerability

    .NET Framework

    Due February 25, 2025

  77. Added January 14, 2025

    CVE-2025-21335 Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

    Windows

    Due February 4, 2025

  78. Added January 14, 2025

    CVE-2025-21334 Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

    Windows

    Due February 4, 2025

  79. Added January 14, 2025

    CVE-2025-21333 Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability

    Windows

    Due February 4, 2025

  80. Added December 16, 2024

    CVE-2024-35250 Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability

    Windows

    Due January 6, 2025

  81. Added December 10, 2024

    CVE-2024-49138 Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability

    Windows

    Due December 31, 2024

  82. Added November 12, 2024

    CVE-2024-49039 Microsoft Windows Task Scheduler Privilege Escalation Vulnerability

    Windows · known ransomware use

    Due December 3, 2024

  83. Added November 12, 2024

    CVE-2024-43451 Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability

    Windows

    Due December 3, 2024

  84. Added October 22, 2024

    CVE-2024-38094 Microsoft SharePoint Deserialization Vulnerability

    SharePoint · known ransomware use

    Due November 12, 2024

  85. Added October 15, 2024

    CVE-2024-30088 Microsoft Windows Kernel TOCTOU Race Condition Vulnerability

    Windows · known ransomware use

    Due November 5, 2024

  86. Added October 8, 2024

    CVE-2024-43573 Microsoft Windows MSHTML Platform Spoofing Vulnerability

    Windows

    Due October 29, 2024

  87. Added October 8, 2024

    CVE-2024-43572 Microsoft Windows Management Console Remote Code Execution Vulnerability

    Windows

    Due October 29, 2024

  88. Added September 18, 2024

    CVE-2020-0618 Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability

    SQL Server · known ransomware use

    Due October 9, 2024

  89. Added September 16, 2024

    CVE-2024-43461 Microsoft Windows MSHTML Platform Spoofing Vulnerability

    Windows

    Due October 7, 2024

  90. Added September 10, 2024

    CVE-2024-38226 Microsoft Publisher Protection Mechanism Failure Vulnerability

    Publisher

    Due October 1, 2024

  91. Added September 10, 2024

    CVE-2024-38217 Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability

    Windows

    Due October 1, 2024

  92. Added September 10, 2024

    CVE-2024-38014 Microsoft Windows Installer Improper Privilege Management Vulnerability

    Windows

    Due October 1, 2024

  93. Added August 21, 2024

    CVE-2021-31196 Microsoft Exchange Server Information Disclosure Vulnerability

    Exchange Server

    Due September 11, 2024

  94. Added August 13, 2024

    CVE-2024-38213 Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

    Windows

    Due September 3, 2024

  95. Added August 13, 2024

    CVE-2024-38193 Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability

    Windows

    Due September 3, 2024

  96. Added August 13, 2024

    CVE-2024-38189 Microsoft Project Remote Code Execution Vulnerability

    Project

    Due September 3, 2024

  97. Added August 13, 2024

    CVE-2024-38178 Microsoft Windows Scripting Engine Memory Corruption Vulnerability

    Windows

    Due September 3, 2024

  98. Added August 13, 2024

    CVE-2024-38107 Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability

    Windows

    Due September 3, 2024

  99. Added August 13, 2024

    CVE-2024-38106 Microsoft Windows Kernel Privilege Escalation Vulnerability

    Windows

    Due September 3, 2024

  100. Added August 5, 2024

    CVE-2018-0824 Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability

    Windows

    Due August 26, 2024

  101. Added July 23, 2024

    CVE-2012-4792 Microsoft Internet Explorer Use-After-Free Vulnerability

    Internet Explorer

    Due August 13, 2024

  102. Added July 9, 2024

    CVE-2024-38112 Microsoft Windows MSHTML Platform Spoofing Vulnerability

    Windows

    Due July 30, 2024

  103. Added July 9, 2024

    CVE-2024-38080 Microsoft Windows Hyper-V Privilege Escalation Vulnerability

    Windows

    Due July 30, 2024

  104. Added June 13, 2024

    CVE-2024-26169 Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability

    Windows · known ransomware use

    Due July 4, 2024

  105. Added May 14, 2024

    CVE-2024-30051 Microsoft DWM Core Library Privilege Escalation Vulnerability

    DWM Core Library · known ransomware use

    Due June 4, 2024

  106. Added May 14, 2024

    CVE-2024-30040 Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability

    Windows

    Due June 4, 2024

  107. Added April 30, 2024

    CVE-2024-29988 Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability

    SmartScreen Prompt

    Due May 21, 2024

  108. Added April 23, 2024

    CVE-2022-38028 Microsoft Windows Print Spooler Privilege Escalation Vulnerability

    Windows

    Due May 14, 2024

  109. Added March 26, 2024

    CVE-2023-24955 Microsoft SharePoint Server Code Injection Vulnerability

    SharePoint Server · known ransomware use

    Due April 16, 2024

  110. Added March 4, 2024

    CVE-2024-21338 Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability

    Windows · known ransomware use

    Due March 25, 2024

  111. Added February 29, 2024

    CVE-2023-29360 Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability

    Streaming Service

    Due March 21, 2024

  112. Added February 15, 2024

    CVE-2024-21410 Microsoft Exchange Server Privilege Escalation Vulnerability

    Exchange Server

    Due March 7, 2024

  113. Added February 13, 2024

    CVE-2024-21412 Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability

    Windows · known ransomware use

    Due March 5, 2024

  114. Added February 13, 2024

    CVE-2024-21351 Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

    Windows

    Due March 5, 2024

  115. Added January 10, 2024

    CVE-2023-29357 Microsoft SharePoint Server Privilege Escalation Vulnerability

    SharePoint Server · known ransomware use

    Due January 31, 2024

  116. Added November 16, 2023

    CVE-2023-36584 Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability

    Windows

    Due December 7, 2023

  117. Added November 14, 2023

    CVE-2023-36036 Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability

    Windows

    Due December 5, 2023

  118. Added November 14, 2023

    CVE-2023-36033 Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability

    Windows

    Due December 5, 2023

  119. Added November 14, 2023

    CVE-2023-36025 Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

    Windows

    Due December 5, 2023

  120. Added October 10, 2023

    CVE-2023-41763 Microsoft Skype for Business Privilege Escalation Vulnerability

    Skype for Business

    Due October 31, 2023

  121. Added October 10, 2023

    CVE-2023-36563 Microsoft WordPad Information Disclosure Vulnerability

    WordPad

    Due October 31, 2023

  122. Added October 4, 2023

    CVE-2023-28229 Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability

    Windows CNG Key Isolation Service

    Due October 25, 2023

  123. Added September 12, 2023

    CVE-2023-36802 Microsoft Streaming Service Proxy Privilege Escalation Vulnerability

    Streaming Service Proxy

    Due October 3, 2023

  124. Added September 12, 2023

    CVE-2023-36761 Microsoft Word Information Disclosure Vulnerability

    Word

    Due October 3, 2023

  125. Added August 9, 2023

    CVE-2023-38180 Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability

    .NET Core and Visual Studio

    Due August 30, 2023

  126. Added July 17, 2023

    CVE-2023-36884 Microsoft Windows Search Remote Code Execution Vulnerability

    Windows · known ransomware use

    Due August 29, 2023

  127. Added July 11, 2023

    CVE-2023-36874 Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability

    Windows

    Due August 1, 2023

  128. Added July 11, 2023

    CVE-2023-35311 Microsoft Outlook Security Feature Bypass Vulnerability

    Outlook

    Due August 1, 2023

  129. Added July 11, 2023

    CVE-2023-32049 Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability

    Windows

    Due August 1, 2023

  130. Added July 11, 2023

    CVE-2023-32046 Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability

    Windows

    Due August 1, 2023

  131. Added June 22, 2023

    CVE-2016-0165 Microsoft Win32k Privilege Escalation Vulnerability

    Win32k

    Due July 13, 2023

  132. Added May 9, 2023

    CVE-2023-29336 Microsoft Win32K Privilege Escalation Vulnerability

    Win32k

    Due May 30, 2023

  133. Added April 11, 2023

    CVE-2023-28252 Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

    Windows · known ransomware use

    Due May 2, 2023

  134. Added April 7, 2023

    CVE-2019-1388 Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability

    Windows · known ransomware use

    Due April 28, 2023

  135. Added March 30, 2023

    CVE-2013-3163 Microsoft Internet Explorer Memory Corruption Vulnerability

    Internet Explorer

    Due April 20, 2023

  136. Added March 14, 2023

    CVE-2023-24880 Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

    Windows · known ransomware use

    Due April 4, 2023

  137. Added March 14, 2023

    CVE-2023-23397 Microsoft Office Outlook Privilege Escalation Vulnerability

    Office

    Due April 4, 2023

  138. Added February 14, 2023

    CVE-2023-23376 Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

    Windows · known ransomware use

    Due March 7, 2023

  139. Added February 14, 2023

    CVE-2023-21823 Microsoft Windows Graphic Component Privilege Escalation Vulnerability

    Windows

    Due March 7, 2023

  140. Added February 14, 2023

    CVE-2023-21715 Microsoft Office Publisher Security Feature Bypass Vulnerability

    Office

    Due March 7, 2023

  141. Added January 10, 2023

    CVE-2023-21674 Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability

    Windows

    Due January 31, 2023

  142. Added January 10, 2023

    CVE-2022-41080 Microsoft Exchange Server Privilege Escalation Vulnerability

    Exchange Server · known ransomware use

    Due January 31, 2023

  143. Added December 13, 2022

    CVE-2022-44698 Microsoft Defender SmartScreen Security Feature Bypass Vulnerability

    Defender · known ransomware use

    Due January 3, 2023

  144. Added November 14, 2022

    CVE-2022-41049 Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability

    Windows

    Due December 9, 2022

  145. Added November 8, 2022

    CVE-2022-41128 Microsoft Windows Scripting Languages Remote Code Execution Vulnerability

    Windows

    Due December 9, 2022

  146. Added November 8, 2022

    CVE-2022-41125 Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability

    Windows

    Due December 9, 2022

  147. Added November 8, 2022

    CVE-2022-41091 Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability

    Windows · known ransomware use

    Due December 9, 2022

  148. Added November 8, 2022

    CVE-2022-41073 Microsoft Windows Print Spooler Privilege Escalation Vulnerability

    Windows · known ransomware use

    Due December 9, 2022

  149. Added October 11, 2022

    CVE-2022-41033 Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability

    Windows COM+ Event System Service

    Due November 1, 2022

  150. Added September 30, 2022

    CVE-2022-41082 Microsoft Exchange Server Remote Code Execution Vulnerability

    Exchange Server · known ransomware use

    Due October 21, 2022

  151. Added September 30, 2022

    CVE-2022-41040 Microsoft Exchange Server Server-Side Request Forgery Vulnerability

    Exchange Server · known ransomware use

    Due October 21, 2022

  152. Added September 15, 2022

    CVE-2010-2568 Microsoft Windows Remote Code Execution Vulnerability

    Windows

    Due October 6, 2022

  153. Added September 14, 2022

    CVE-2022-37969 Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

    Windows · known ransomware use

    Due October 5, 2022

  154. Added August 18, 2022

    CVE-2022-26923 Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

    Active Directory

    Due September 8, 2022

  155. Added August 18, 2022

    CVE-2022-21971 Microsoft Windows Runtime Remote Code Execution Vulnerability

    Windows

    Due September 8, 2022

  156. Added August 9, 2022

    CVE-2022-34713 Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

    Windows

    Due August 30, 2022

  157. Added July 12, 2022

    CVE-2022-22047 Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability

    Windows

    Due August 2, 2022

  158. Added July 1, 2022

    CVE-2022-26925 Microsoft Windows LSA Spoofing Vulnerability

    Windows

    Due July 22, 2022

  159. Added June 14, 2022

    CVE-2022-30190 Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

    Windows · known ransomware use

    Due July 5, 2022

  160. Added June 8, 2022

    CVE-2013-1331 Microsoft Office Buffer Overflow Vulnerability

    Office

    Due June 22, 2022

  161. Added June 8, 2022

    CVE-2012-4969 Microsoft Internet Explorer Use-After-Free Vulnerability

    Internet Explorer

    Due June 22, 2022

  162. Added June 8, 2022

    CVE-2012-1889 Microsoft XML Core Services Memory Corruption Vulnerability

    XML Core Services

    Due June 22, 2022

  163. Added June 8, 2022

    CVE-2012-0151 Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability

    Windows

    Due June 22, 2022

  164. Added June 8, 2022

    CVE-2010-2572 Microsoft PowerPoint Buffer Overflow Vulnerability

    PowerPoint

    Due June 22, 2022

  165. Added June 8, 2022

    CVE-2009-0563 Microsoft Office Buffer Overflow Vulnerability

    Office

    Due June 22, 2022

  166. Added June 8, 2022

    CVE-2009-0557 Microsoft Office Object Record Corruption Vulnerability

    Office

    Due June 22, 2022

  167. Added June 8, 2022

    CVE-2006-2492 Microsoft Word Malformed Object Pointer Vulnerability

    Word

    Due June 22, 2022

  168. Added May 25, 2022

    CVE-2016-7256 Microsoft Windows Open Type Font Remote Code Execution Vulnerability

    Windows

    Due June 15, 2022

  169. Added May 25, 2022

    CVE-2016-3393 Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability

    Windows

    Due June 15, 2022

  170. Added May 25, 2022

    CVE-2016-0034 Microsoft Silverlight Runtime Remote Code Execution Vulnerability

    Silverlight · known ransomware use

    Due June 15, 2022

  171. Added May 25, 2022

    CVE-2015-6175 Microsoft Windows Kernel Privilege Escalation Vulnerability

    Windows

    Due June 15, 2022

  172. Added May 25, 2022

    CVE-2015-2425 Microsoft Internet Explorer Memory Corruption Vulnerability

    Internet Explorer

    Due June 15, 2022

  173. Added May 25, 2022

    CVE-2015-2360 Microsoft Win32k Privilege Escalation Vulnerability

    Win32k

    Due June 15, 2022

  174. Added May 25, 2022

    CVE-2015-1769 Microsoft Windows Mount Manager Privilege Escalation Vulnerability

    Windows

    Due June 15, 2022

  175. Added May 25, 2022

    CVE-2015-1671 Microsoft Windows Remote Code Execution Vulnerability

    Windows

    Due June 15, 2022

  176. Added May 25, 2022

    CVE-2015-0071 Microsoft Internet Explorer ASLR Bypass Vulnerability

    Internet Explorer

    Due June 15, 2022

  177. Added May 25, 2022

    CVE-2015-0016 Microsoft Windows TS WebProxy Directory Traversal Vulnerability

    Windows

    Due June 15, 2022

  178. Added May 25, 2022

    CVE-2014-4148 Microsoft Windows Remote Code Execution Vulnerability

    Windows

    Due June 15, 2022

  179. Added May 25, 2022

    CVE-2014-4123 Microsoft Internet Explorer Privilege Escalation Vulnerability

    Internet Explorer

    Due June 15, 2022

  180. Added May 25, 2022

    CVE-2014-4077 Microsoft IME Japanese Privilege Escalation Vulnerability

    Input Method Editor (IME) Japanese

    Due June 15, 2022

  181. Added May 25, 2022

    CVE-2014-2817 Microsoft Internet Explorer Privilege Escalation Vulnerability

    Internet Explorer

    Due June 15, 2022

  182. Added May 25, 2022

    CVE-2013-7331 Microsoft Internet Explorer Information Disclosure Vulnerability

    Internet Explorer

    Due June 15, 2022

  183. Added May 25, 2022

    CVE-2013-3896 Microsoft Silverlight Information Disclosure Vulnerability

    Silverlight

    Due June 15, 2022

  184. Added May 25, 2022

    CVE-2013-0074 Microsoft Silverlight Double Dereference Vulnerability

    Silverlight · known ransomware use

    Due June 15, 2022

  185. Added May 24, 2022

    CVE-2018-8611 Microsoft Windows Kernel Privilege Escalation Vulnerability

    Windows

    Due June 14, 2022

  186. Added May 24, 2022

    CVE-2017-8543 Microsoft Windows Search Remote Code Execution Vulnerability

    Windows

    Due June 14, 2022

  187. Added May 24, 2022

    CVE-2017-0210 Microsoft Internet Explorer Privilege Escalation Vulnerability

    Internet Explorer

    Due June 14, 2022

  188. Added May 24, 2022

    CVE-2017-0149 Microsoft Internet Explorer Memory Corruption Vulnerability

    Internet Explorer

    Due June 14, 2022

  189. Added May 24, 2022

    CVE-2017-0147 Microsoft Windows SMBv1 Information Disclosure Vulnerability

    SMBv1 server · known ransomware use

    Due June 14, 2022

  190. Added May 24, 2022

    CVE-2017-0022 Microsoft XML Core Services Information Disclosure Vulnerability

    XML Core Services

    Due June 14, 2022

  191. Added May 24, 2022

    CVE-2017-0005 Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability

    Windows

    Due June 14, 2022

  192. Added May 24, 2022

    CVE-2016-3351 Microsoft Internet Explorer and Edge Information Disclosure Vulnerability

    Internet Explorer and Edge · known ransomware use

    Due June 14, 2022

  193. Added May 24, 2022

    CVE-2016-3298 Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability

    Internet Explorer

    Due June 14, 2022

  194. Added May 24, 2022

    CVE-2016-0162 Microsoft Internet Explorer Information Disclosure Vulnerability

    Internet Explorer

    Due June 14, 2022

  195. Added May 23, 2022

    CVE-2020-1027 Microsoft Windows Kernel Privilege Escalation Vulnerability

    Windows

    Due June 13, 2022

  196. Added May 23, 2022

    CVE-2020-0638 Microsoft Update Notification Manager Privilege Escalation Vulnerability

    Update Notification Manager · known ransomware use

    Due June 13, 2022

  197. Added May 23, 2022

    CVE-2019-1385 Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability

    Windows · known ransomware use

    Due June 13, 2022

  198. Added May 23, 2022

    CVE-2019-1130 Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability

    Windows · known ransomware use

    Due June 13, 2022

  199. Added May 23, 2022

    CVE-2019-0880 Microsoft Windows Privilege Escalation Vulnerability

    Windows

    Due June 13, 2022

  200. Added May 23, 2022

    CVE-2019-0703 Microsoft Windows SMB Information Disclosure Vulnerability

    Windows

    Due June 13, 2022

  201. Added May 23, 2022

    CVE-2019-0676 Microsoft Internet Explorer Information Disclosure Vulnerability

    Internet Explorer

    Due June 13, 2022

  202. Added May 23, 2022

    CVE-2018-8589 Microsoft Win32k Privilege Escalation Vulnerability

    Win32k

    Due June 13, 2022

  203. Added May 4, 2022

    CVE-2014-4113 Microsoft Win32k Privilege Escalation Vulnerability

    Win32k

    Due May 25, 2022

  204. Added May 4, 2022

    CVE-2014-0322 Microsoft Internet Explorer Use-After-Free Vulnerability

    Internet Explorer

    Due May 25, 2022

  205. Added April 25, 2022

    CVE-2022-26904 Microsoft Windows User Profile Service Privilege Escalation Vulnerability

    Windows

    Due May 16, 2022

  206. Added April 25, 2022

    CVE-2022-21919 Microsoft Windows User Profile Service Privilege Escalation Vulnerability

    Windows

    Due May 16, 2022

  207. Added April 25, 2022

    CVE-2021-41357 Microsoft Win32k Privilege Escalation Vulnerability

    Win32k

    Due May 16, 2022

  208. Added April 25, 2022

    CVE-2021-40450 Microsoft Win32k Privilege Escalation Vulnerability

    Win32k

    Due May 16, 2022

  209. Added April 19, 2022

    CVE-2022-22718 Microsoft Windows Print Spooler Privilege Escalation Vulnerability

    Windows

    Due May 10, 2022

  210. Added April 13, 2022

    CVE-2022-24521 Microsoft Windows CLFS Driver Privilege Escalation Vulnerability

    Windows · known ransomware use

    Due May 4, 2022

  211. Added April 13, 2022

    CVE-2015-2502 Microsoft Internet Explorer Memory Corruption Vulnerability

    Internet Explorer

    Due May 4, 2022

  212. Added April 11, 2022

    CVE-2021-42287 Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

    Active Directory · known ransomware use

    Due May 2, 2022

  213. Added April 11, 2022

    CVE-2021-42278 Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

    Active Directory · known ransomware use

    Due May 2, 2022

  214. Added April 6, 2022

    CVE-2021-31166 Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability

    HTTP Protocol Stack

    Due April 27, 2022

  215. Added April 6, 2022

    CVE-2017-0148 Microsoft SMBv1 Server Remote Code Execution Vulnerability

    SMBv1 server · known ransomware use

    Due April 27, 2022

  216. Added March 31, 2022

    CVE-2021-34484 Microsoft Windows User Profile Service Privilege Escalation Vulnerability

    Windows

    Due April 21, 2022

  217. Added March 28, 2022

    CVE-2021-38646 Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

    Office · known ransomware use

    Due April 18, 2022

  218. Added March 28, 2022

    CVE-2021-34486 Microsoft Windows Event Tracing Privilege Escalation Vulnerability

    Windows

    Due April 18, 2022

  219. Added March 28, 2022

    CVE-2018-8440 Microsoft Windows Privilege Escalation Vulnerability

    Windows · known ransomware use

    Due April 18, 2022

  220. Added March 28, 2022

    CVE-2018-8406 Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability

    DirectX Graphics Kernel (DXGKRNL) · known ransomware use

    Due April 18, 2022

  221. Added March 28, 2022

    CVE-2018-8405 Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability

    DirectX Graphics Kernel (DXGKRNL) · known ransomware use

    Due April 18, 2022

  222. Added March 28, 2022

    CVE-2017-0213 Microsoft Windows Privilege Escalation Vulnerability

    Windows · known ransomware use

    Due April 18, 2022

  223. Added March 28, 2022

    CVE-2017-0059 Microsoft Internet Explorer Information Disclosure Vulnerability

    Internet Explorer

    Due April 18, 2022

  224. Added March 28, 2022

    CVE-2017-0037 Microsoft Edge and Internet Explorer Type Confusion Vulnerability

    Edge and Internet Explorer

    Due April 18, 2022

  225. Added March 28, 2022

    CVE-2016-7201 Microsoft Edge Memory Corruption Vulnerability

    Edge

    Due April 18, 2022

  226. Added March 28, 2022

    CVE-2016-7200 Microsoft Edge Memory Corruption Vulnerability

    Edge

    Due April 18, 2022

  227. Added March 28, 2022

    CVE-2016-0189 Microsoft Internet Explorer Memory Corruption Vulnerability

    Internet Explorer · known ransomware use

    Due April 18, 2022

  228. Added March 28, 2022

    CVE-2016-0151 Microsoft Windows CSRSS Security Feature Bypass Vulnerability

    Client-Server Run-time Subsystem (CSRSS) · known ransomware use

    Due April 18, 2022

  229. Added March 28, 2022

    CVE-2016-0040 Microsoft Windows Kernel Privilege Escalation Vulnerability

    Windows

    Due April 18, 2022

  230. Added March 28, 2022

    CVE-2015-2426 Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability

    Windows

    Due April 18, 2022

  231. Added March 28, 2022

    CVE-2015-2419 Microsoft Internet Explorer Memory Corruption Vulnerability

    Internet Explorer

    Due April 18, 2022

  232. Added March 28, 2022

    CVE-2015-1770 Microsoft Office Uninitialized Memory Use Vulnerability

    Office

    Due April 18, 2022

  233. Added March 28, 2022

    CVE-2013-3660 Microsoft Win32k Privilege Escalation Vulnerability

    Win32k

    Due April 18, 2022

  234. Added March 28, 2022

    CVE-2013-2551 Microsoft Internet Explorer Use-After-Free Vulnerability

    Internet Explorer · known ransomware use

    Due April 18, 2022

  235. Added March 28, 2022

    CVE-2012-2539 Microsoft Word Remote Code Execution Vulnerability

    Word

    Due April 18, 2022

  236. Added March 28, 2022

    CVE-2011-2005 Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability

    Ancillary Function Driver (afd.sys)

    Due April 18, 2022

  237. Added March 28, 2022

    CVE-2010-4398 Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability

    Windows

    Due April 21, 2022

  238. Added March 25, 2022

    CVE-2022-21999 Microsoft Windows Print Spooler Privilege Escalation Vulnerability

    Windows · known ransomware use

    Due April 15, 2022

  239. Added March 25, 2022

    CVE-2019-0903 Microsoft GDI Remote Code Execution Vulnerability

    Graphics Device Interface (GDI)

    Due April 15, 2022

  240. Added March 25, 2022

    CVE-2018-8414 Microsoft Windows Shell Remote Code Execution Vulnerability

    Windows

    Due April 15, 2022

  241. Added March 25, 2022

    CVE-2018-8373 Microsoft Scripting Engine Memory Corruption Vulnerability

    Internet Explorer Scripting Engine

    Due April 15, 2022

  242. Added March 25, 2022

    CVE-2017-0146 Microsoft Windows SMB Remote Code Execution Vulnerability

    Windows · known ransomware use

    Due April 15, 2022

  243. Added March 25, 2022

    CVE-2014-6332 Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability

    Windows

    Due April 15, 2022

  244. Added March 25, 2022

    CVE-2014-6324 Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability

    Kerberos Key Distribution Center (KDC)

    Due April 15, 2022

  245. Added March 15, 2022

    CVE-2019-1405 Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability

    Windows · known ransomware use

    Due April 5, 2022

  246. Added March 15, 2022

    CVE-2019-1322 Microsoft Windows Privilege Escalation Vulnerability

    Windows · known ransomware use

    Due April 5, 2022

  247. Added March 15, 2022

    CVE-2019-1315 Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability

    Windows · known ransomware use

    Due April 5, 2022

  248. Added March 15, 2022

    CVE-2019-1253 Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability

    Windows · known ransomware use

    Due April 5, 2022

  249. Added March 15, 2022

    CVE-2019-1132 Microsoft Win32k Privilege Escalation Vulnerability

    Win32k

    Due April 5, 2022

  250. Added March 15, 2022

    CVE-2019-1129 Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

    Windows · known ransomware use

    Due April 5, 2022

  251. Added March 15, 2022

    CVE-2019-1069 Microsoft Task Scheduler Privilege Escalation Vulnerability

    Task Scheduler · known ransomware use

    Due April 5, 2022

  252. Added March 15, 2022

    CVE-2019-1064 Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

    Windows · known ransomware use

    Due April 5, 2022

  253. Added March 15, 2022

    CVE-2019-0841 Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

    Windows · known ransomware use

    Due April 5, 2022

  254. Added March 15, 2022

    CVE-2019-0543 Microsoft Windows Privilege Escalation Vulnerability

    Windows · known ransomware use

    Due April 5, 2022

  255. Added March 15, 2022

    CVE-2018-8120 Microsoft Win32k Privilege Escalation Vulnerability

    Win32k · known ransomware use

    Due April 5, 2022

  256. Added March 15, 2022

    CVE-2017-0101 Microsoft Windows Transaction Manager Privilege Escalation Vulnerability

    Windows · known ransomware use

    Due April 5, 2022

  257. Added March 15, 2022

    CVE-2016-3309 Microsoft Windows Kernel Privilege Escalation Vulnerability

    Windows · known ransomware use

    Due April 5, 2022

  258. Added March 15, 2022

    CVE-2015-2546 Microsoft Win32k Memory Corruption Vulnerability

    Win32k · known ransomware use

    Due April 5, 2022

  259. Added March 3, 2022

    CVE-2021-41379 Microsoft Windows Installer Privilege Escalation Vulnerability

    Windows · known ransomware use

    Due March 17, 2022

  260. Added March 3, 2022

    CVE-2019-1297 Microsoft Excel Remote Code Execution Vulnerability

    Excel

    Due March 17, 2022

  261. Added March 3, 2022

    CVE-2018-8581 Microsoft Exchange Server Privilege Escalation Vulnerability

    Exchange Server · known ransomware use

    Due March 17, 2022

  262. Added March 3, 2022

    CVE-2017-8540 Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability

    Malware Protection Engine

    Due March 24, 2022

  263. Added March 3, 2022

    CVE-2017-11826 Microsoft Office Remote Code Execution Vulnerability

    Office

    Due March 24, 2022

  264. Added March 3, 2022

    CVE-2017-0261 Microsoft Office Use-After-Free Vulnerability

    Office

    Due March 24, 2022

  265. Added March 3, 2022

    CVE-2017-0001 Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability

    Graphics Device Interface (GDI)

    Due March 24, 2022

  266. Added March 3, 2022

    CVE-2016-7262 Microsoft Office Security Feature Bypass Vulnerability

    Excel

    Due March 24, 2022

  267. Added March 3, 2022

    CVE-2016-7193 Microsoft Office Memory Corruption Vulnerability

    Office

    Due March 24, 2022

  268. Added March 3, 2022

    CVE-2016-0099 Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability

    Windows · known ransomware use

    Due March 24, 2022

  269. Added March 3, 2022

    CVE-2015-2545 Microsoft Office Malformed EPS File Vulnerability

    Office

    Due March 24, 2022

  270. Added March 3, 2022

    CVE-2015-2424 Microsoft PowerPoint Memory Corruption Vulnerability

    PowerPoint

    Due March 24, 2022

  271. Added March 3, 2022

    CVE-2015-2387 Microsoft ATM Font Driver Privilege Escalation Vulnerability

    ATM Font Driver

    Due March 24, 2022

  272. Added March 3, 2022

    CVE-2015-1701 Microsoft Win32k Privilege Escalation Vulnerability

    Win32k · known ransomware use

    Due March 24, 2022

  273. Added March 3, 2022

    CVE-2015-1642 Microsoft Office Memory Corruption Vulnerability

    Office

    Due March 24, 2022

  274. Added March 3, 2022

    CVE-2014-4114 Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability

    Windows

    Due March 24, 2022

  275. Added March 3, 2022

    CVE-2013-5065 Microsoft Windows Kernel Privilege Escalation Vulnerability

    Windows

    Due March 24, 2022

  276. Added March 3, 2022

    CVE-2013-3897 Microsoft Internet Explorer Use-After-Free Vulnerability

    Internet Explorer

    Due March 24, 2022

  277. Added March 3, 2022

    CVE-2013-1347 Microsoft Internet Explorer Remote Code Execution Vulnerability

    Internet Explorer

    Due March 24, 2022

  278. Added March 3, 2022

    CVE-2012-1856 Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability

    Office

    Due March 24, 2022

  279. Added March 3, 2022

    CVE-2011-1889 Microsoft Forefront TMG Remote Code Execution Vulnerability

    Forefront Threat Management Gateway (TMG)

    Due March 24, 2022

  280. Added March 3, 2022

    CVE-2010-3333 Microsoft Office Stack-based Buffer Overflow Vulnerability

    Office

    Due March 24, 2022

  281. Added March 3, 2022

    CVE-2010-0232 Microsoft Windows Kernel Exception Handler Vulnerability

    Windows

    Due March 24, 2022

  282. Added March 3, 2022

    CVE-2009-3129 Microsoft Excel Featheader Record Memory Corruption Vulnerability

    Excel

    Due March 24, 2022

  283. Added March 3, 2022

    CVE-2009-1123 Microsoft Windows Improper Input Validation Vulnerability

    Windows

    Due March 24, 2022

  284. Added March 3, 2022

    CVE-2004-0210 Microsoft Windows Privilege Escalation Vulnerability

    Windows

    Due March 24, 2022

  285. Added March 3, 2022

    CVE-2002-0367 Microsoft Windows Privilege Escalation Vulnerability

    Windows

    Due March 24, 2022

  286. Added February 25, 2022

    CVE-2017-8570 Microsoft Office Remote Code Execution Vulnerability

    Office

    Due August 25, 2022

  287. Added February 25, 2022

    CVE-2017-0222 Microsoft Internet Explorer Remote Code Execution Vulnerability

    Internet Explorer

    Due August 25, 2022

  288. Added February 25, 2022

    CVE-2014-6352 Microsoft Windows Code Injection Vulnerability

    Windows

    Due August 25, 2022

  289. Added February 15, 2022

    CVE-2019-0752 Microsoft Internet Explorer Type Confusion Vulnerability

    Internet Explorer · known ransomware use

    Due August 15, 2022

  290. Added February 15, 2022

    CVE-2018-8174 Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability

    Windows · known ransomware use

    Due August 15, 2022

  291. Added February 15, 2022

    CVE-2014-1761 Microsoft Word Memory Corruption Vulnerability

    Word

    Due August 15, 2022

  292. Added February 15, 2022

    CVE-2013-3906 Microsoft Graphics Component Memory Corruption Vulnerability

    Graphics Component

    Due August 15, 2022

  293. Added February 10, 2022

    CVE-2021-36934 Microsoft Windows SAM Local Privilege Escalation Vulnerability

    Windows

    Due February 24, 2022

  294. Added February 10, 2022

    CVE-2020-0796 Microsoft SMBv3 Remote Code Execution Vulnerability

    SMBv3 · known ransomware use

    Due August 10, 2022

  295. Added February 10, 2022

    CVE-2017-8464 Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability

    Windows

    Due August 10, 2022

  296. Added February 10, 2022

    CVE-2017-0263 Microsoft Win32k Privilege Escalation Vulnerability

    Win32k

    Due August 10, 2022

  297. Added February 10, 2022

    CVE-2017-0262 Microsoft Office Remote Code Execution Vulnerability

    Office

    Due August 10, 2022

  298. Added February 10, 2022

    CVE-2017-0145 Microsoft SMBv1 Remote Code Execution Vulnerability

    SMBv1 · known ransomware use

    Due August 10, 2022

  299. Added February 10, 2022

    CVE-2017-0144 Microsoft SMBv1 Remote Code Execution Vulnerability

    SMBv1 · known ransomware use

    Due August 10, 2022

  300. Added February 10, 2022

    CVE-2015-1635 Microsoft HTTP.sys Remote Code Execution Vulnerability

    HTTP.sys

    Due August 10, 2022

  301. Added February 4, 2022

    CVE-2022-21882 Microsoft Win32k Privilege Escalation Vulnerability

    Win32k · known ransomware use

    Due February 18, 2022

  302. Added January 28, 2022

    CVE-2020-0787 Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability

    Windows · known ransomware use

    Due July 28, 2022

  303. Added January 28, 2022

    CVE-2014-1776 Microsoft Internet Explorer Memory Corruption Vulnerability

    Internet Explorer

    Due July 28, 2022

  304. Added January 21, 2022

    CVE-2018-8453 Microsoft Win32k Privilege Escalation Vulnerability

    Win32k · known ransomware use

    Due July 21, 2022

  305. Added January 18, 2022

    CVE-2021-33766 Microsoft Exchange Server Information Disclosure

    Exchange Server

    Due February 1, 2022

  306. Added January 10, 2022

    CVE-2019-1458 Microsoft Win32k Privilege Escalation Vulnerability

    Win32k · known ransomware use

    Due July 10, 2022

  307. Added January 10, 2022

    CVE-2013-3900 Microsoft WinVerifyTrust function Remote Code Execution

    WinVerifyTrust function

    Due July 10, 2022

  308. Added December 15, 2021

    CVE-2021-43890 Microsoft Windows AppX Installer Spoofing Vulnerability

    Windows · known ransomware use

    Due December 29, 2021

  309. Added November 17, 2021

    CVE-2021-42321 Microsoft Exchange Server Remote Code Execution Vulnerability

    Exchange · known ransomware use

    Due December 1, 2021

  310. Added November 17, 2021

    CVE-2021-42292 Microsoft Excel Security Feature Bypass

    Office

    Due December 1, 2021

  311. Added November 17, 2021

    CVE-2021-40449 Microsoft Windows Win32k Privilege Escalation Vulnerability

    Windows · known ransomware use

    Due December 1, 2021

  312. Added November 3, 2021

    CVE-2021-40444 Microsoft MSHTML Remote Code Execution Vulnerability

    MSHTML · known ransomware use

    Due November 17, 2021

  313. Added November 3, 2021

    CVE-2021-38649 Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability

    Open Management Infrastructure (OMI)

    Due November 17, 2021

  314. Added November 3, 2021

    CVE-2021-38648 Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability

    Open Management Infrastructure (OMI)

    Due November 17, 2021

  315. Added November 3, 2021

    CVE-2021-38647 Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

    Open Management Infrastructure (OMI) · known ransomware use

    Due November 17, 2021

  316. Added November 3, 2021

    CVE-2021-38645 Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability

    Open Management Infrastructure (OMI)

    Due November 17, 2021

  317. Added November 3, 2021

    CVE-2021-36955 Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

    Windows · known ransomware use

    Due November 17, 2021

  318. Added November 3, 2021

    CVE-2021-36948 Microsoft Windows Update Medic Service Privilege Escalation Vulnerability

    Windows

    Due November 17, 2021

  319. Added November 3, 2021

    CVE-2021-36942 Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability

    Windows · known ransomware use

    Due November 17, 2021

  320. Added November 3, 2021

    CVE-2021-34527 Microsoft Windows Print Spooler Remote Code Execution Vulnerability

    Windows · known ransomware use

    Due May 3, 2022

  321. Added November 3, 2021

    CVE-2021-34523 Microsoft Exchange Server Privilege Escalation Vulnerability

    Exchange Server · known ransomware use

    Due November 17, 2021

  322. Added November 3, 2021

    CVE-2021-34473 Microsoft Exchange Server Remote Code Execution Vulnerability

    Exchange Server · known ransomware use

    Due November 17, 2021

  323. Added November 3, 2021

    CVE-2021-34448 Microsoft Windows Scripting Engine Memory Corruption Vulnerability

    Windows

    Due November 17, 2021

  324. Added November 3, 2021

    CVE-2021-33771 Microsoft Windows Kernel Privilege Escalation Vulnerability

    Windows

    Due November 17, 2021

  325. Added November 3, 2021

    CVE-2021-33742 Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability

    Windows

    Due November 17, 2021

  326. Added November 3, 2021

    CVE-2021-33739 Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability

    Windows

    Due November 17, 2021

  327. Added November 3, 2021

    CVE-2021-31979 Microsoft Windows Kernel Privilege Escalation Vulnerability

    Windows

    Due November 17, 2021

  328. Added November 3, 2021

    CVE-2021-31956 Microsoft Windows NTFS Privilege Escalation Vulnerability

    Windows

    Due November 17, 2021

  329. Added November 3, 2021

    CVE-2021-31955 Microsoft Windows Kernel Information Disclosure Vulnerability

    Windows

    Due November 17, 2021

  330. Added November 3, 2021

    CVE-2021-31207 Microsoft Exchange Server Security Feature Bypass Vulnerability

    Exchange Server · known ransomware use

    Due November 17, 2021

  331. Added November 3, 2021

    CVE-2021-31201 Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability

    Enhanced Cryptographic Provider

    Due November 17, 2021

  332. Added November 3, 2021

    CVE-2021-31199 Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability

    Enhanced Cryptographic Provider

    Due November 17, 2021

  333. Added November 3, 2021

    CVE-2021-28310 Microsoft Win32k Privilege Escalation Vulnerability

    Win32k

    Due November 17, 2021

  334. Added November 3, 2021

    CVE-2021-27085 Microsoft Internet Explorer Remote Code Execution Vulnerability

    Internet Explorer

    Due November 17, 2021

  335. Added November 3, 2021

    CVE-2021-27065 Microsoft Exchange Server Remote Code Execution Vulnerability

    Exchange Server · known ransomware use

    Due May 3, 2022

  336. Added November 3, 2021

    CVE-2021-27059 Microsoft Office Remote Code Execution Vulnerability

    Office

    Due November 17, 2021

  337. Added November 3, 2021

    CVE-2021-26858 Microsoft Exchange Server Remote Code Execution Vulnerability

    Exchange Server · known ransomware use

    Due May 3, 2022

  338. Added November 3, 2021

    CVE-2021-26857 Microsoft Exchange Server Remote Code Execution Vulnerability

    Exchange Server · known ransomware use

    Due May 3, 2022

  339. Added November 3, 2021

    CVE-2021-26855 Microsoft Exchange Server Remote Code Execution Vulnerability

    Exchange Server · known ransomware use

    Due May 3, 2022

  340. Added November 3, 2021

    CVE-2021-26411 Microsoft Internet Explorer Memory Corruption Vulnerability

    Internet Explorer · known ransomware use

    Due November 17, 2021

  341. Added November 3, 2021

    CVE-2021-1732 Microsoft Win32k Privilege Escalation Vulnerability

    Win32k · known ransomware use

    Due November 17, 2021

  342. Added November 3, 2021

    CVE-2021-1675 Microsoft Windows Print Spooler Remote Code Execution Vulnerability

    Windows · known ransomware use

    Due November 17, 2021

  343. Added November 3, 2021

    CVE-2021-1647 Microsoft Defender Remote Code Execution Vulnerability

    Defender

    Due November 17, 2021

  344. Added November 3, 2021

    CVE-2020-17144 Microsoft Exchange Server Remote Code Execution Vulnerability

    Exchange Server

    Due May 3, 2022

  345. Added November 3, 2021

    CVE-2020-17087 Microsoft Windows Kernel Privilege Escalation Vulnerability

    Windows

    Due May 3, 2022

  346. Added November 3, 2021

    CVE-2020-1472 Microsoft Netlogon Privilege Escalation Vulnerability

    Netlogon · known ransomware use

    Due May 3, 2022

  347. Added November 3, 2021

    CVE-2020-1464 Microsoft Windows Spoofing Vulnerability

    Windows

    Due May 3, 2022

  348. Added November 3, 2021

    CVE-2020-1380 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

    Internet Explorer

    Due May 3, 2022

  349. Added November 3, 2021

    CVE-2020-1350 Microsoft Windows DNS Server Remote Code Execution Vulnerability

    Windows

    Due May 3, 2022

  350. Added November 3, 2021

    CVE-2020-1147 Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability

    .NET Framework, SharePoint, Visual Studio

    Due May 3, 2022

  351. Added November 3, 2021

    CVE-2020-1054 Microsoft Win32k Privilege Escalation Vulnerability

    Win32k

    Due May 3, 2022

  352. Added November 3, 2021

    CVE-2020-1040 Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability

    Hyper-V RemoteFX

    Due May 3, 2022

  353. Added November 3, 2021

    CVE-2020-1020 Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability

    Windows

    Due May 3, 2022

  354. Added November 3, 2021

    CVE-2020-0986 Microsoft Windows Kernel Privilege Escalation Vulnerability

    Windows

    Due May 3, 2022

  355. Added November 3, 2021

    CVE-2020-0968 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

    Internet Explorer · known ransomware use

    Due May 3, 2022

  356. Added November 3, 2021

    CVE-2020-0938 Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability

    Windows

    Due May 3, 2022

  357. Added November 3, 2021

    CVE-2020-0878 Microsoft Edge and Internet Explorer Memory Corruption Vulnerability

    Edge and Internet Explorer · known ransomware use

    Due May 3, 2022

  358. Added November 3, 2021

    CVE-2020-0688 Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability

    Exchange Server · known ransomware use

    Due May 3, 2022

  359. Added November 3, 2021

    CVE-2020-0683 Microsoft Windows Installer Privilege Escalation Vulnerability

    Windows

    Due May 3, 2022

  360. Added November 3, 2021

    CVE-2020-0674 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

    Internet Explorer

    Due May 3, 2022

  361. Added November 3, 2021

    CVE-2020-0646 Microsoft .NET Framework Remote Code Execution Vulnerability

    .NET Framework

    Due May 3, 2022

  362. Added November 3, 2021

    CVE-2020-0601 Microsoft Windows CryptoAPI Spoofing Vulnerability

    Windows

    Due May 3, 2022

  363. Added November 3, 2021

    CVE-2019-1429 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

    Internet Explorer

    Due May 3, 2022

  364. Added November 3, 2021

    CVE-2019-1367 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

    Internet Explorer · known ransomware use

    Due May 3, 2022

  365. Added November 3, 2021

    CVE-2019-1215 Microsoft Windows Privilege Escalation Vulnerability

    Windows · known ransomware use

    Due May 3, 2022

  366. Added November 3, 2021

    CVE-2019-1214 Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability

    Windows

    Due May 3, 2022

  367. Added November 3, 2021

    CVE-2019-0863 Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability

    Windows

    Due May 3, 2022

  368. Added November 3, 2021

    CVE-2019-0859 Microsoft Win32k Privilege Escalation Vulnerability

    Win32k · known ransomware use

    Due May 3, 2022

  369. Added November 3, 2021

    CVE-2019-0808 Microsoft Win32k Privilege Escalation Vulnerability

    Win32k

    Due May 3, 2022

  370. Added November 3, 2021

    CVE-2019-0803 Microsoft Win32k Privilege Escalation Vulnerability

    Win32k · known ransomware use

    Due May 3, 2022

  371. Added November 3, 2021

    CVE-2019-0797 Microsoft Win32k Privilege Escalation Vulnerability

    Win32k

    Due May 3, 2022

  372. Added November 3, 2021

    CVE-2019-0708 Microsoft Remote Desktop Services Remote Code Execution Vulnerability

    Remote Desktop Services · known ransomware use

    Due May 3, 2022

  373. Added November 3, 2021

    CVE-2019-0604 Microsoft SharePoint Remote Code Execution Vulnerability

    SharePoint · known ransomware use

    Due May 3, 2022

  374. Added November 3, 2021

    CVE-2019-0541 Microsoft MSHTML Remote Code Execution Vulnerability

    MSHTML

    Due May 3, 2022

  375. Added November 3, 2021

    CVE-2018-8653 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

    Internet Explorer

    Due May 3, 2022

  376. Added November 3, 2021

    CVE-2018-0802 Microsoft Office Memory Corruption Vulnerability

    Office · known ransomware use

    Due May 3, 2022

  377. Added November 3, 2021

    CVE-2018-0798 Microsoft Office Memory Corruption Vulnerability

    Office

    Due May 3, 2022

  378. Added November 3, 2021

    CVE-2017-8759 Microsoft .NET Framework Remote Code Execution Vulnerability

    .NET Framework

    Due May 3, 2022

  379. Added November 3, 2021

    CVE-2017-7269 Microsoft Windows Server Buffer Overflow Vulnerability

    Internet Information Services (IIS)

    Due May 3, 2022

  380. Added November 3, 2021

    CVE-2017-11882 Microsoft Office Memory Corruption Vulnerability

    Office · known ransomware use

    Due May 3, 2022

  381. Added November 3, 2021

    CVE-2017-11774 Microsoft Office Outlook Security Feature Bypass Vulnerability

    Office

    Due May 3, 2022

  382. Added November 3, 2021

    CVE-2017-0199 Microsoft Office and WordPad Remote Code Execution Vulnerability

    Office and WordPad · known ransomware use

    Due May 3, 2022

  383. Added November 3, 2021

    CVE-2017-0143 Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability

    Windows · known ransomware use

    Due May 3, 2022

  384. Added November 3, 2021

    CVE-2016-7255 Microsoft Win32k Privilege Escalation Vulnerability

    Win32k · known ransomware use

    Due May 3, 2022

  385. Added November 3, 2021

    CVE-2016-3235 Microsoft Office OLE DLL Side Loading Vulnerability

    Office

    Due May 3, 2022

  386. Added November 3, 2021

    CVE-2016-0185 Microsoft Windows Media Center Remote Code Execution Vulnerability

    Windows

    Due May 3, 2022

  387. Added November 3, 2021

    CVE-2016-0167 Microsoft Win32k Privilege Escalation Vulnerability

    Win32k · known ransomware use

    Due May 3, 2022

  388. Added November 3, 2021

    CVE-2015-1641 Microsoft Office Memory Corruption Vulnerability

    Office

    Due May 3, 2022

  389. Added November 3, 2021

    CVE-2014-1812 Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability

    Windows · known ransomware use

    Due May 3, 2022

  390. Added November 3, 2021

    CVE-2012-0158 Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability

    MSCOMCTL.OCX · known ransomware use

    Due May 3, 2022

Snapshot of CISA’s feed taken November 7, 2026; the whole catalog is counted on the KEV tracker.

On Daily CISO, newest first

  1. Daily briefing · October 27, 2026

    Patched Microsoft Authenticator Flaw Let Rogue Apps Steal Work Tokens

  2. Daily briefing · October 26, 2026

    ConnectWise suspends Cloud Backup service after Microsoft 365 access abuse

  3. Daily briefing · October 26, 2026

    Huntress tracks token-theft campaign that hit Microsoft 365 accounts at 79 orgs

  4. Daily briefing · October 25, 2026

    Token-Replay Campaign Compromised Microsoft 365 Accounts at 79 Organizations

  5. Daily briefing · October 22, 2026

    ConnectWise Suspends Cloud Backup After Microsoft 365 Credential Abuse

  6. Daily briefing · October 21, 2026

    ConnectWise Suspends Cloud Backup After Attackers Abuse Microsoft 365 Access

  7. Daily briefing · October 20, 2026

    ConnectWise suspends Cloud Backup after attackers abuse its Microsoft 365 access

  8. Daily briefing · October 20, 2026

    CISA deadline hits for exploited Palo Alto, Cisco and Ahsay flaws; Ivanti chain also active

  9. Daily briefing · October 18, 2026

    Microsoft dismantles YAM Store phishing network behind a billion scam messages

  10. Daily briefing · October 17, 2026

    Microsoft Patches Exploited Windows Shell Zero-Day Among Record Bug Haul

  11. Daily briefing · October 16, 2026

    Microsoft's Record Patch Tuesday Fixes Exploited Windows Shell Flaw

  12. Daily briefing · October 7, 2026

    Microsoft rushes out-of-band Exchange Server fix for mailbox access bug

  13. Daily briefing · October 6, 2026

    Microsoft Ships Out-of-Band Patch for High-Severity Exchange Server Bug

  14. Daily briefing · October 5, 2026

    Microsoft rushes out-of-band fix for Exchange Server mailbox flaw

  15. Daily briefing · October 4, 2026

    Microsoft: AI is shrinking the gap between bug discovery and exploitation

  16. Daily briefing · September 29, 2026

    Teen researcher's Microsoft Titan bug exposed employee and Bing data

  17. Daily briefing · September 28, 2026

    Teen researcher finds unverified login tokens exposed Microsoft's internal Titan service

  18. Daily briefing · September 27, 2026

    Six more exploited flaws on CISA's KEV list, including F5 and SharePoint

  19. Weekly archive · Aug 17 – Aug 23, 2026

    CISA Adds Four Actively Exploited Flaws Including Microsoft and VMware Bugs

  20. Weekly archive · Jul 20 – Jul 26, 2026

    CISA Adds Check Point and SharePoint Flaws to KEV Catalog

  21. Weekly archive · Jul 13 – Jul 19, 2026

    CISA adds SharePoint and FortiSandbox flaws to KEV catalog

  22. Weekly archive · Jul 6 – Jul 12, 2026

    Extortion Group Abuses Fake Passkey Enrollment to Hijack Microsoft 365 Accounts

  23. Weekly archive · Jul 6 – Jul 12, 2026

    Microsoft Patches RoguePlanet Windows Defender Privilege Escalation Flaw

  24. Weekly archive · Jun 29 – Jul 5, 2026

    Exploited SharePoint Server deserialization flaw joins the KEV list

  25. Weekly archive · May 18 – May 24, 2026

    Two Microsoft Defender flaws are exploited in the wild

  26. Weekly archive · May 11 – May 17, 2026

    CISA adds Microsoft Exchange XSS flaw to Known Exploited Vulnerabilities Catalog

  27. Weekly archive · May 11 – May 17, 2026

    Microsoft's May 2026 Patch Tuesday fixes 120+ CVEs, none actively exploited

  28. Weekly archive · May 4 – May 10, 2026

    Microsoft details AiTM phishing campaign using fake compliance notices

  29. Weekly archive · Apr 27 – May 3, 2026

    CISA, Microsoft Warn of Active Exploitation of Windows Shell Flaw

  30. Weekly archive · Apr 20 – Apr 26, 2026

    CISA Adds Microsoft Defender Flaw to KEV Catalog

  31. Weekly archive · Apr 13 – Apr 19, 2026

    CISA Adds Seven Vulnerabilities to Known Exploited Vulnerabilities Catalog

  32. Weekly archive · Mar 16 – Mar 22, 2026

    CISA Adds Microsoft SharePoint Flaw to KEV Catalog

  33. Weekly archive · Mar 9 – Mar 15, 2026

    Microsoft's March 2026 Patch Tuesday Fixes 80+ Flaws, Six Rated More Likely to Be Exploited

  34. Weekly archive · Mar 2 – Mar 8, 2026

    Microsoft Warns of OAuth Redirect Abuse Targeting Government Agencies

  35. Weekly archive · Feb 16 – Feb 22, 2026

    CISA flags actively exploited Chrome zero-day in KEV update

  36. Weekly archive · Feb 9 – Feb 15, 2026

    CISA Adds Six Actively Exploited Microsoft Vulnerabilities to KEV Catalog

  37. Weekly archive · Jan 12 – Jan 18, 2026

    Microsoft takes legal action against the RedVDS cybercrime service

  38. Weekly archive · Jan 5 – Jan 11, 2026

    CISA Adds Two Flaws to KEV Catalog, Including HPE OneView Bug

  39. Weekly archive · Dec 8 – Dec 14, 2025

    CISA Adds WinRAR and Windows Flaws to Exploited Vulnerabilities List

  40. Weekly archive · Dec 8 – Dec 14, 2025

    CISA, Microsoft, Opal Security and Fastly Announce Security-Leadership Moves

  41. Weekly archive · Nov 10 – Nov 16, 2025

    CISA Adds WatchGuard, Gladinet, and Microsoft Flaws to KEV Catalog

  42. Weekly archive · Oct 20 – Oct 26, 2025

    Microsoft reissues its WSUS fix as exploitation begins

  43. Weekly archive · Oct 13 – Oct 19, 2025

    CISA Adds Five More Vulnerabilities to KEV Catalog

  44. Weekly archive · Sep 15 – Sep 21, 2025

    Microsoft and Cloudflare Disrupt RaccoonO365 Phishing-as-a-Service

  45. Weekly archive · Sep 8 – Sep 14, 2025

    September Patch Tuesday brings 80-plus Microsoft fixes, none exploited

  46. Weekly archive · Aug 11 – Aug 17, 2025

    WinRAR and Decades-Old Microsoft Bugs Added to KEV Catalog

  47. Weekly archive · Aug 4 – Aug 10, 2025

    CISA Details Mitigation Steps for Exchange Hybrid Vulnerability

  48. Weekly archive · Aug 4 – Aug 10, 2025

    CISA Publishes Malware Analysis on SharePoint ToolShell Exploit Chain

  49. Weekly archive · Jul 21 – Jul 27, 2025

    Microsoft Ties SharePoint Attacks to Chinese State Actors, Flags Ransomware Deployment

  50. Weekly archive · Jul 21 – Jul 27, 2025

    CISA Adds Exploited SharePoint Flaws to KEV Catalog

  51. Weekly archive · Jun 30 – Jul 6, 2025

    Microsoft's Longtime CISO Bret Arsenault Steps Back After 35 Years

  52. Weekly archive · May 26 – Jun 1, 2025

    Dutch Agencies and Microsoft Expose Laundry Bear Espionage Group

  53. Weekly archive · May 12 – May 18, 2025

    CISA Flags Five Actively Exploited Windows Vulnerabilities

  54. Weekly archive · Apr 14 – Apr 20, 2025

    Windows NTLM hash leak flaw exploited in Poland and Romania

  55. Weekly archive · Mar 10 – Mar 16, 2025

    CISA Adds Six Windows Flaws to Known Exploited Vulnerabilities Catalog

  56. Weekly archive · Feb 24 – Mar 2, 2025

    CISA Flags Microsoft Partner Center and Zimbra Flaws as Actively Exploited

  57. Weekly archive · Feb 24 – Mar 2, 2025

    Botnet of 130,000 Devices Targets Microsoft 365 Accounts

  58. Weekly archive · Feb 17 – Feb 23, 2025

    CISA, FBI, MS-ISAC Issue Ghost (Cring) Ransomware Advisory

  59. Weekly archive · Feb 17 – Feb 23, 2025

    Microsoft Power Pages Flaw Added to CISA Exploited Vulnerabilities List

  60. Weekly archive · Feb 10 – Feb 16, 2025

    Microsoft profiles a Sandworm subgroup that builds persistent access

  61. Weekly archive · Feb 3 – Feb 9, 2025

    CISA Catalogs Five More Exploited Flaws, Including Microsoft Outlook Bug

  62. Weekly archive · Dec 9 – Dec 15, 2024

    Microsoft Patched Exploited Windows CLFS Zero-Day

  63. Weekly archive · Nov 18 – Nov 24, 2024

    Microsoft's Windows Resiliency Initiative targets kernel-mode security tools

  64. Weekly archive · Nov 11 – Nov 17, 2024

    CISA Adds Five More Vulnerabilities to KEV Catalog

  65. Weekly archive · Oct 28 – Nov 3, 2024

    Black Basta Affiliates Expand Phishing to Microsoft Teams

  66. Weekly archive · Sep 16 – Sep 22, 2024

    CISA Adds Microsoft and Progress Flaws to KEV Catalog

  67. Weekly archive · Sep 9 – Sep 15, 2024

    Microsoft's September Patch Tuesday fixes four exploited zero-days

  68. Weekly archive · Aug 12 – Aug 18, 2024

    CISA Adds Six Actively Exploited Microsoft Vulnerabilities to KEV Catalog

  69. Weekly archive · Aug 12 – Aug 18, 2024

    Microsoft Ships August 2024 Security Updates Across Multiple Products

  70. Weekly archive · Jul 29 – Aug 4, 2024

    DDoS Attack and Defense Error Knock Azure and Microsoft 365 Offline

  71. Weekly archive · Jun 3 – Jun 9, 2024

    Microsoft makes Windows Recall opt-in and encrypts its index

  72. Weekly archive · May 13 – May 19, 2024

    Microsoft Ships May 2024 Patch Tuesday Updates

  73. Weekly archive · Apr 29 – May 5, 2024

    CISA Lists Microsoft SmartScreen Bypass as Actively Exploited

  74. Weekly archive · Apr 22 – Apr 28, 2024

    Microsoft exposes GRU unit's GooseEgg Print Spooler tool

  75. Weekly archive · Mar 4 – Mar 10, 2024

    Microsoft Discloses Widening Nation-State Breach of Source Code

  76. Weekly archive · Feb 26 – Mar 3, 2024

    CISA Adds Microsoft Streaming Service Flaw to Known Exploited Vulnerabilities Catalog

  77. Weekly archive · Feb 19 – Feb 25, 2024

    Microsoft extends expanded audit logging to all federal agencies

  78. Weekly archive · Feb 12 – Feb 18, 2024

    CISA Adds Cisco ASA/FTD and Exchange Flaws to Known Exploited Vulnerabilities Catalog

  79. Weekly archive · Feb 12 – Feb 18, 2024

    Microsoft's February Patch Tuesday Fixes Two Exploited Zero-Days

  80. Weekly archive · Jan 15 – Jan 21, 2024

    Microsoft Discloses Nation-State Email Breach Affecting Senior Leadership

  81. Weekly archive · Jan 8 – Jan 14, 2024

    Microsoft's January Patch Tuesday fixes two critical Windows flaws

  82. Weekly archive · Dec 11 – Dec 17, 2023

    Microsoft Details OAuth App Abuse for Cryptomining and Phishing Campaigns

  83. Weekly archive · Nov 13 – Nov 19, 2023

    Microsoft Ships November Patch Tuesday Fixes

  84. Weekly archive · Oct 9 – Oct 15, 2023

    CISA Adds Five Actively Exploited Flaws to KEV Catalog

  85. Weekly archive · Oct 9 – Oct 15, 2023

    Microsoft Fixes Three Actively Exploited Zero-Days in October Patch Tuesday

  86. Weekly archive · Sep 11 – Sep 17, 2023

    Microsoft and Adobe Patch Actively Exploited Zero-Days in September Update

  87. Weekly archive · Sep 4 – Sep 10, 2023

    Microsoft Details How a Signing Key Enabled Chinese Hacking of Government Email

  88. Weekly archive · Aug 7 – Aug 13, 2023

    Microsoft .NET Core Denial-of-Service Flaw Added to KEV Catalog

  89. Weekly archive · Jul 10 – Jul 16, 2023

    Microsoft's July Patch Tuesday Fixes Four Exploited Zero-Days

  90. Weekly archive · May 8 – May 14, 2023

    Microsoft's May Patch Tuesday Fixes Two Actively Exploited Flaws

  91. Weekly archive · Apr 10 – Apr 16, 2023

    Microsoft patches a CLFS zero-day tied to Nokoyawa ransomware

  92. Weekly archive · Mar 27 – Apr 2, 2023

    Microsoft Unveils AI-Powered Security Copilot

  93. Weekly archive · Mar 13 – Mar 19, 2023

    Microsoft Ships March 2023 Security Updates

  94. Weekly archive · Feb 27 – Mar 5, 2023

    ESET analyzes BlackLotus, a UEFI bootkit that defeats Secure Boot

  95. Weekly archive · Feb 13 – Feb 19, 2023

    Microsoft February Patch Tuesday Fixes Three Exploited Zero-Days

  96. Weekly archive · Jan 30 – Feb 5, 2023

    Verified OAuth Apps Used to Breach O365 Accounts

  97. Weekly archive · Jan 9 – Jan 15, 2023

    Rackspace Confirms Exchange Exploit Chain Behind Hosted Email Ransomware Breach

  98. Weekly archive · Jan 9 – Jan 15, 2023

    Microsoft's January Patch Tuesday Fixes Actively Exploited Windows Zero-Day

  99. Weekly archive · Dec 12 – Dec 18, 2022

    Microsoft Patches Exploited SmartScreen Zero-Day, Revokes Abused Driver Certificates

  100. Weekly archive · Nov 7 – Nov 13, 2022

    Microsoft's November security updates address multiple actively exploited flaws

  101. Weekly archive · Oct 24 – Oct 30, 2022

    Microsoft ties Raspberry Robin USB worm infections to Clop ransomware

  102. Weekly archive · Oct 10 – Oct 16, 2022

    Microsoft's October Patch Tuesday Fixed 85 Flaws, Including an Actively Exploited Windows Bug

  103. Weekly archive · Oct 3 – Oct 9, 2022

    Exchange Zero-Days CVE-2022-41040 and CVE-2022-41082 Added to CISA's KEV Catalog

  104. Weekly archive · Sep 26 – Oct 2, 2022

    Microsoft Discloses Exchange Server Zero-Days Under Active Attack

  105. Weekly archive · Sep 12 – Sep 18, 2022

    Eight agencies warn of IRGC-affiliated actors running ransom operations

  106. Weekly archive · Sep 12 – Sep 18, 2022

    Microsoft and Apple each patch an exploited kernel-level zero-day

  107. Weekly archive · Aug 8 – Aug 14, 2022

    Microsoft Patches Actively Exploited MSDT Zero-Day

  108. Weekly archive · Jul 11 – Jul 17, 2022

    Microsoft Ships July 2022 Security Updates

  109. Weekly archive · Jun 27 – Jul 3, 2022

    CISA Reinstates Windows Certificate-Authentication Flaw to KEV Catalog

  110. Weekly archive · Jun 13 – Jun 19, 2022

    Microsoft Ships June 2022 Security Updates for Multiple Products

  111. Weekly archive · May 30 – Jun 5, 2022

    Microsoft Issues Workaround for "Follina" Zero-Day Under Active Attack

  112. Weekly archive · Apr 25 – May 1, 2022

    Five Nations Issue Joint Advisory on 2021's Most Exploited Vulnerabilities

  113. Weekly archive · Apr 11 – Apr 17, 2022

    CISA adds 10 more vulnerabilities, including a Windows flaw, to KEV Catalog

  114. Weekly archive · Apr 11 – Apr 17, 2022

    Microsoft ships April 2022 security updates across its software line

  115. Weekly archive · Apr 11 – Apr 17, 2022

    Microsoft flags critical unauthenticated RCE in RPC Runtime Library

  116. Weekly archive · Apr 4 – Apr 10, 2022

    CISA Adds Three More Vulnerabilities to KEV Catalog

  117. Weekly archive · Apr 4 – Apr 10, 2022

    Microsoft Expands Bug Bounty to On-Premises Exchange and SharePoint Servers

  118. Weekly archive · Mar 21 – Mar 27, 2022

    Microsoft and Okta Confirm Lapsus$ Intrusion Impact

  119. Weekly archive · Mar 7 – Mar 13, 2022

    Microsoft's March Patch Tuesday Fixes 71 Vulnerabilities

  120. Weekly archive · Feb 21 – Feb 27, 2022

    Zabbix, Zimbra and old Microsoft bugs added to the exploited list

  121. Weekly archive · Jan 31 – Feb 6, 2022

    CISA Adds Microsoft Win32k Flaw to Known Exploited Vulnerabilities Catalog

  122. Weekly archive · Jan 10 – Jan 16, 2022

    Microsoft's January Patch Tuesday Fixes Wormable Windows Server Flaw

  123. Weekly archive · Jan 10 – Jan 16, 2022

    Microsoft Warns of Destructive Wiper Targeting Ukrainian Organizations

Sources

  1. Cybersecurity and Infrastructure Security Agency, KEV catalog · primary source
  2. Cybersecurity and Infrastructure Security Agency, KEV JSON feed (catalog version 2026.11.06), published November 6, 2026 · primary source
  3. CISO Tribune, vendor directory record for Microsoft, published November 8, 2026