Microsoft Services vulnerabilities

• microsoft xbox gaming services Xbox Gaming Services Elevation of Privilege Vulnerability CVE-2026-58611 7.8 HighSeptember 8, 2026
• microsoft surface management services Microsoft Surface Remote Code Execution Vulnerability CVE-2026-54120 9.9 CriticalJuly 23, 2026
• microsoft active directory federation services, windows 10 version 1607, windows 10 version 1809 +13 more +15 more Active Directory Federation Services Elevation of Privilege Vulnerability CVE-2026-56155 In KEV 7.8 HighJuly 14, 2026
• microsoft xbox gaming services Xbox Gaming Services Elevation of Privilege Vulnerability CVE-2025-59281 7.8 HighOctober 14, 2025
• microsoft xbox gaming services Xbox Gaming Services Elevation of Privilege Vulnerability CVE-2025-55245 7.8 HighSeptember 9, 2025
• microsoft xbox gaming services Xbox Certification Bug Copilot Djando Information Disclosure Vulnerability CVE-2025-55242 6.5 MediumSeptember 4, 2025
• microsoft xbox gaming services Xbox Gaming Services Elevation of Privilege Vulnerability CVE-2024-28916 8.8 HighMarch 20, 2024
• microsoft sql server integration services for visual studio 2019, sql server integration services for visual studio 2022, sql server 2019 integration services +1 more +3 more Microsoft SQL Server Integration Service (VS extension) Remote Code Execution Vulnerability CVE-2023-21568 7.3 HighFebruary 14, 2023
• microsoft excel, 365 apps, excel services +15 more +17 more Microsoft Excel Remote Code Execution Vulnerability CVE-2021-1714 7.8 HighJanuary 12, 2021
• microsoft sql server reporting services, sql server 2017 reporting services, sql server 2019 reporting services +2 more SQL Server Reporting Services Security Feature Bypass Vulnerability CVE-2020-1044 4.3 MediumSeptember 11, 2020
• microsoft power bi report server, sql server 2017 reporting services, sql server 2019 reporting services +2 more A cross-site scripting (XSS) vulnerability exists when Microsoft SQL Server Reporting Services ... CVE-2019-1332 Public exploit EPSS 10.9% 6.1 MediumDecember 10, 2019
• microsoft excel, excel services on microsoft sharepoint server 2010 service pack 2, excel services +5 more +7 more An information disclosure vulnerability exists when Microsoft Excel improperly discloses the... CVE-2019-1446 5.5 MediumNovember 12, 2019
• microsoft excel, excel services on microsoft sharepoint server 2010 service pack 2, excel services +4 more +6 more A remote code execution vulnerability exists in Microsoft Excel software when the software fails... CVE-2019-1331 EPSS 19.7% 8.8 HighOctober 10, 2019
• microsoft remote desktop services, huawei agile controller-campus firmware, bh620 v2 firmware +67 more +69 more A remote code execution vulnerability exists in Remote Desktop Services formerly known as... CVE-2019-0708 In KEVPublic exploit EPSS 100.0% 9.8 CriticalMay 16, 2019
• microsoft office, office online server, office word viewer +6 more +8 more A remote code execution vulnerability exists in Microsoft Word software when it fails to properly... CVE-2019-0585 EPSS 22.0% 8.8 HighJanuary 8, 2019
• microsoft office, word, office 365 proplus +3 more +5 more An information disclosure vulnerability exists when Microsoft Word macro buttons are used... CVE-2019-0561 5.5 MediumJanuary 8, 2019
• microsoft active directory federation services Microsoft ADFS 4.0 Windows Server 2016 and previous (Active Directory Federation Services) has an... CVE-2018-16794 8.6 HighSeptember 18, 2018
• microsoft excel viewer, office, office word viewer +8 more +10 more An information disclosure vulnerability exists when Microsoft Office software reads out of bound... CVE-2018-8378 5.5 MediumAugust 15, 2018
• microsoft powershell, powershell editor, powershell extension +1 more +3 more A remote code execution vulnerability exists in PowerShell Editor Services, aka "PowerShell... CVE-2018-8327 EPSS 23.1% 9.8 CriticalJuly 11, 2018
• microsoft excel, office, sharepoint +7 more +9 more A remote code execution vulnerability exists when the Office graphics component improperly... CVE-2018-1028 EPSS 18.9% 8.8 HighApril 12, 2018
• microsoft office, office online server, office web apps +3 more +5 more A remote code execution vulnerability exists in Microsoft Office when the software fails to... CVE-2017-8512 EPSS 22.1% 8.8 HighJune 15, 2017
• microsoft internet information services (iis), internet information services +1 more Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet... CVE-2017-7269 In KEVPublic exploit EPSS 99.8% 9.8 CriticalMarch 27, 2017
• microsoft office, office compatibility pack, office web apps +4 more +6 more Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Office Compatibility... CVE-2017-0105 EPSS 30.6% 5.5 MediumMarch 17, 2017
• microsoft windows 8.1, windows server 2008, windows server 2012 +1 more +3 more Microsoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8... CVE-2017-0022 In KEV EPSS 18.1% 6.5 MediumMarch 17, 2017
• microsoft office, office compatibility pack, office web apps +4 more +6 more Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for... CVE-2016-7291 EPSS 23.4% 7.1 HighDecember 20, 2016
• microsoft office, office compatibility pack, office web apps +4 more +6 more Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for... CVE-2016-7290 EPSS 23.4% 7.1 HighDecember 20, 2016
• microsoft excel for mac, office, office compatibility pack +6 more +8 more Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Excel for Mac 2011, Word... CVE-2016-7233 EPSS 22.4% 6.5 MediumNovember 10, 2016
• microsoft xml core services Microsoft XML Core Services 3.0 allows remote attackers to execute arbitrary code via a crafted... CVE-2016-0147 EPSS 15.3% 8.8 HighApril 12, 2016
• microsoft xml core services Microsoft XML Core Services 3.0, 5.0, and 6.0 supports SSL 2.0, which makes it easier for remote... CVE-2015-2471 EPSS 15.5% 4.3 MediumAugust 15, 2015
• microsoft xml core services Microsoft XML Core Services 3.0, 5.0, and 6.0 allows remote attackers to bypass the ASLR... CVE-2015-2440 EPSS 18.6% 4.3 MediumAugust 15, 2015
• microsoft xml core services Microsoft XML Core Services 3.0 and 5.0 supports SSL 2.0, which makes it easier for remote... CVE-2015-2434 EPSS 15.5% 4.3 MediumAugust 15, 2015
• microsoft active directory federation services Cross-site scripting (XSS) vulnerability in adfs/ls in Active Directory Federation Services (AD... CVE-2015-1757 EPSS 11.0% 4.3 MediumJune 10, 2015
• microsoft xml core services Microsoft XML Core Services (aka MSXML) 3.0 allows remote attackers to bypass the Same Origin... CVE-2015-1646 EPSS 16.9% 4.3 MediumApril 14, 2015
• microsoft excel, excel viewer, office +8 more +10 more Use-after-free vulnerability in Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3,... CVE-2015-0085 EPSS 18.7% 9.3 HighMarch 11, 2015
• microsoft office, office compatibility pack, sharepoint server +4 more +6 more Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Automation Services in SharePoint... CVE-2015-0064 Public exploit EPSS 30.0% 9.3 HighFebruary 11, 2015
• microsoft active directory federation services Microsoft Active Directory Federation Services (AD FS) 2.0, 2.1, and 3.0, when a configured SAML... CVE-2014-6331 EPSS 20.3% 5.0 MediumNovember 11, 2014
• microsoft internet information services The IP Security feature in Microsoft Internet Information Services (IIS) 8.0 and 8.5 does not... CVE-2014-4078 EPSS 20.1% 5.1 MediumNovember 11, 2014
• microsoft xml core services Microsoft XML Core Services (aka MSXML) 3.0 and 6.0 does not properly restrict the information... CVE-2014-1816 EPSS 14.4% 4.3 MediumJune 11, 2014
• microsoft office web apps server, project server, sharepoint designer +5 more +7 more Microsoft Windows SharePoint Services 3.0 SP3; SharePoint Server 2007 SP3, 2010 SP1 and SP2, and... CVE-2014-0251 EPSS 14.2% 9.0 HighMay 14, 2014
• microsoft internet information services CRLF injection vulnerability in the CGI implementation in Microsoft Internet Information Services... CVE-2011-5279 EPSS 19.6% 5.0 MediumApril 23, 2014
• microsoft office compatibility pack, office web apps, sharepoint server +5 more +7 more Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office... CVE-2013-3847 EPSS 21.0% 9.3 HighSeptember 11, 2013
• microsoft sharepoint server, sharepoint foundation, sharepoint services +2 more Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2007 SP3, 2010 SP1 and... CVE-2013-3179 Public exploit EPSS 22.3% 4.3 MediumSeptember 11, 2013
• microsoft office web apps, sharepoint portal server, sharepoint server +2 more +4 more The default configuration of Microsoft SharePoint Portal Server 2003 SP3, SharePoint Server 2007... CVE-2013-1330 EPSS 30.2% 10.0 HighSeptember 11, 2013
• microsoft excel, excel viewer, office +6 more +8 more Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013; Office Web Apps 2010; Excel... CVE-2013-1315 EPSS 28.9% 9.3 HighSeptember 11, 2013
• microsoft sharepoint portal server, sharepoint server, sharepoint foundation +1 more +3 more Microsoft SharePoint Portal Server 2003 SP3 and SharePoint Server 2007 SP3, 2010 SP1 and SP2, and... CVE-2013-0081 EPSS 76.3% 5.0 MediumSeptember 11, 2013
• microsoft active directory federation services Microsoft Active Directory Federation Services (AD FS) 1.x through 2.1 on Windows Server 2003 R2... CVE-2013-3185 EPSS 40.5% 5.0 MediumAugust 14, 2013
• microsoft active directory, active directory application mode, active directory lightweight directory service +1 more +3 more The LDAP service in Microsoft Active Directory, Active Directory Application Mode (ADAM), Active... CVE-2013-1282 EPSS 27.0% 5.0 MediumApril 9, 2013
• microsoft xml core services, expression web, groove server +12 more +14 more Microsoft XML Core Services (aka MSXML) 4.0, 5.0, and 6.0 does not properly parse XML content,... CVE-2013-0007 Public exploit EPSS 31.6% 9.3 HighJanuary 9, 2013
• microsoft xml core services, expression web, groove server +12 more +14 more Microsoft XML Core Services (aka MSXML) 3.0, 5.0, and 6.0 does not properly parse XML content,... CVE-2013-0006 EPSS 28.1% 9.3 HighJanuary 9, 2013
• microsoft sql server, sql server reporting services +1 more Cross-site scripting (XSS) vulnerability in the SQL Server Report Manager in Microsoft SQL Server... CVE-2012-2552 EPSS 16.3% 4.3 MediumOctober 9, 2012
• Show olderLoading…