Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2019-0797 | not reported | — | Listed | Microsoft Win32k contains a privilege escalation vulnerability when the Win32k component fails to properly handle objects in memory. Success... | — |
| CVE-2018-8653 | not reported | — | Listed | Microsoft Internet Explorer contains a memory corruption vulnerability due to how the Scripting Engine handles objects in memory, leading to... | — |
| CVE-2017-8759 | not reported | — | Listed | Microsoft .NET Framework contains a remote code execution vulnerability when processing untrusted input that could allow an attacker to take... | — |
| CVE-2021-40444 | not reported | — | Listed | Microsoft MSHTML contains a unspecified vulnerability that allows for remote code execution. | — |
| CVE-2019-0859 | not reported | — | Listed | Microsoft Win32k fails to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run... | — |
| CVE-2020-1350 | not reported | — | Listed | Microsoft Windows DNS Servers fail to properly handle requests, allowing an attacker to perform remote code execution in the context of the... | — |
| CVE-2021-28310 | not reported | — | Listed | Microsoft Windows Win32k contains an unspecified vulnerability that allows for privilege escalation. | — |
| CVE-2020-1040 | not reported | — | Listed | Microsoft Hyper-V RemoteFX vGPU contains an improper input validation vulnerability due to the host server failing to properly validate inpu... | — |
| CVE-2019-0803 | not reported | — | Listed | Microsoft Win32k contains an unspecified vulnerability due to it failing to properly handle objects in memory causing privilege escalation.... | — |
| CVE-2021-31207 | not reported | — | Listed | Microsoft Exchange Server contains an unspecified vulnerability that allows for security feature bypass. | — |
| CVE-2021-34527 | not reported | — | Listed | Microsoft Windows Print Spooler contains an unspecified vulnerability due to the Windows Print Spooler service improperly performing privile... | — |
| CVE-2021-1732 | not reported | — | Listed | Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation. | — |
| CVE-2020-1464 | not reported | — | Listed | Microsoft Windows contains a spoofing vulnerability when Windows incorrectly validates file signatures, allowing an attacker to bypass secur... | — |
| CVE-2021-34473 | not reported | — | Listed | Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. | — |
| CVE-2019-0708 | not reported | — | Listed | Microsoft Remote Desktop Services, formerly known as Terminal Service, contains an unspecified vulnerability that allows an unauthenticated... | — |
| CVE-2017-0143 | not reported | — | Listed | Microsoft Windows Server Message Block 1.0 (SMBv1) contains an unspecified vulnerability that allows for remote code execution. | — |
| CVE-2020-0688 | not reported | — | Listed | Microsoft Exchange Server Validation Key fails to properly create unique keys at install time, allowing for remote code execution. | — |
| CVE-2021-38649 | not reported | — | Listed | Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing privileg... | — |
| CVE-2021-36948 | not reported | — | Listed | Microsoft Windows Update Medic Service contains an unspecified vulnerability that allows for privilege escalation. | — |
| CVE-2017-7269 | not reported | — | Listed | Microsoft Windows Server 2003 R2 contains a buffer overflow vulnerability in Internet Information Services (IIS) 6.0 which allows remote att... | — |