Patchfirst
Patchfirst

Vendor

Microsoft

390 of 797 Microsoft CVEs in Patchfirst (49%) are in of vulnerabilities exploited in the wild, 117 of them used by ransomware.

CVEs
797
In CISA KEV
39049%
Known ransomware use
117
Median days to KEV
567
from publication
Latest KEV listing
13 Oct 2026
Watch Microsoft Subscribe (RSS) JSON Feed All feeds

Products

In KEVOther CVEs
  • Windows In KEV: 175 CVEs: 198
  • Internet Explorer In KEV: 36 CVEs: 40
  • Office In KEV: 29 CVEs: 29
  • Win32k In KEV: 25 CVEs: 25
  • Exchange Server In KEV: 17 CVEs: 17
  • SharePoint In KEV: 10 CVEs: 10
  • Defender In KEV: 5 CVEs: 5
  • SharePoint Server In KEV: 5 CVEs: 5
  • Word In KEV: 4 CVEs: 5
  • Open Management Infrastructure (OMI) In KEV: 4 CVEs: 4

Top ATT&CK techniques

What attackers do with Microsoft CVEs
Open in ATT&CK Navigator

Counts are Microsoft CVEs linked to the technique. Each link’s provenance is on the CVE page.

Microsoft CVEs

Top 100 of 797 by priority
  1. CVE-2021-34473Microsoft Exchange Server Remote Code Execution Vulnerability
    Microsoft · Exchange ServerKEVRansomwarePublic exploitCritical · 9.1T1190Exploit Public-Facing ApplicationT1053.005Scheduled Task+3 more · 9 reports
    >99.9%Top 0.01%
    89.4priority
  2. CVE-2021-26855Microsoft Exchange Server Remote Code Execution Vulnerability
    Microsoft · Exchange ServerKEVRansomwarePublic exploitCritical · 9.1T1133External Remote ServicesT1505.003Web Shell+2 more · 5 reports
    >99.9%Top 0.01%
    89.4priority
  3. CVE-2021-34523Microsoft Exchange Server Privilege Escalation Vulnerability
    Microsoft · Exchange ServerKEVRansomwarePublic exploitCritical · 9.0T1190Exploit Public-Facing Application9 reports
    >99.9%Top 0.01%
    89.3priority
  4. CVE-2012-0158Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability
    Microsoft · MSCOMCTL.OCXKEVRansomwarePublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution15 reports
    >99.9%Top 0.02%
    89.2priority
  5. CVE-2014-6332Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability
    Microsoft · WindowsKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution5 reports
    94.9%Top 0.14%
    89.1priority
  6. CVE-2019-0604Microsoft SharePoint Remote Code Execution Vulnerability
    Microsoft · SharePointKEVRansomwarePublic exploitCritical · 9.8T1608.001Upload MalwareT1190Exploit Public-Facing Application+3 more · 4 reports
    99.9%Top 0.03%
    88.8priority
  7. CVE-2017-11882Microsoft Office Memory Corruption Vulnerability
    Microsoft · OfficeKEVRansomwarePublic exploitHigh · 7.8T1566.001Spearphishing AttachmentT1059Command and Scripting Interpreter13 reports
    99.9%Top 0.03%
    88.5priority
  8. CVE-2018-0802Microsoft Office Memory Corruption Vulnerability
    Microsoft · OfficeKEVRansomwarePublic exploitHigh · 7.8T1204.002Malicious FileT1203Exploitation for Client Execution8 reports
    93.3%Top 0.17%
    88.4priority
  9. CVE-2017-0199Microsoft Office and WordPad Remote Code Execution Vulnerability
    Microsoft · Office and WordPadKEVRansomwarePublic exploitHigh · 7.8T1204.002Malicious FileT1203Exploitation for Client Execution12 reports
    99.5%Top 0.06%
    88.4priority
  10. CVE-2021-34527Microsoft Windows Print Spooler Remote Code Execution Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 8.8T1059Command and Scripting InterpreterT1068Exploitation for Privilege Escalation4 reports
    99.8%Top 0.04%
    88.1priority
  11. CVE-2020-0796Microsoft SMBv3 Remote Code Execution Vulnerability
    Microsoft · SMBv3KEVRansomwarePublic exploitCritical · 10.0T1190Exploit Public-Facing Application3 reports
    99.8%Top 0.04%
    87.7priority
  12. CVE-2021-31207Microsoft Exchange Server Security Feature Bypass Vulnerability
    Microsoft · Exchange ServerKEVRansomwarePublic exploitMedium · 6.6T1548.002Bypass User Account ControlT1565Data Manipulation9 reports
    99.8%Top 0.04%
    87.6priority
  13. CVE-2022-30190Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1204.002Malicious FileT1105Ingress Tool Transfer4 reports
    99.2%Top 0.07%
    87.4priority
  14. CVE-2021-27065Microsoft Exchange Server Remote Code Execution Vulnerability
    Microsoft · Exchange ServerKEVRansomwarePublic exploitHigh · 7.8T1505.003Web Shell4 reports
    99.9%Top 0.04%
    87.4priority
  15. CVE-2015-1641Microsoft Office Memory Corruption Vulnerability
    Microsoft · OfficeKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1203Exploitation for Client Execution4 reports
    97.2%Top 0.1%
    87.4priority
  16. CVE-2017-0213Microsoft Windows Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.3T1548Abuse Elevation Control MechanismT1068Exploitation for Privilege Escalation4 reports
    84.3%Top 0.3%
    87.0priority
  17. CVE-2021-40444Microsoft MSHTML Remote Code Execution Vulnerability
    Microsoft · MSHTMLKEVRansomwarePublic exploitHigh · 8.8T1204.002Malicious FileT1203Exploitation for Client Execution3 reports
    97.8%Top 0.09%
    86.9priority
  18. CVE-2020-0688Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability
    Microsoft · Exchange ServerKEVRansomwarePublic exploitHigh · 8.8T1190Exploit Public-Facing ApplicationT1505.003Web Shell+2 more · 3 reports
    >99.9%Top 0.03%
    86.9priority
  19. CVE-2017-0144Microsoft SMBv1 Remote Code Execution Vulnerability
    Microsoft · SMBv1KEVRansomwarePublic exploitHigh · 8.8T1059Command and Scripting InterpreterT1210Exploitation of Remote Services3 reports
    99.2%Top 0.06%
    86.9priority
  20. CVE-2020-1472Microsoft Netlogon Privilege Escalation Vulnerability
    Microsoft · NetlogonKEVRansomwarePublic exploitMedium · 5.5T1133External Remote ServicesT1068Exploitation for Privilege Escalation+4 more · 8 reports
    99.4%Top 0.06%
    86.8priority
  21. CVE-2021-26857Microsoft Exchange Server Remote Code Execution Vulnerability
    Microsoft · Exchange ServerKEVRansomwarePublic exploitHigh · 7.8T1505.003Web Shell3 reports
    95.8%Top 0.13%
    86.2priority
  22. CVE-2021-1675Microsoft Windows Print Spooler Remote Code Execution Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1204.002Malicious FileT1059Command and Scripting Interpreter3 reports
    85.3%Top 0.28%
    86.1priority
  23. CVE-2025-53770Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
    Microsoft · SharePointKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter2 reports
    >99.9%Top 0.01%
    86.0priority
  24. CVE-2019-0708Microsoft Remote Desktop Services Remote Code Execution Vulnerability
    Microsoft · Remote Desktop ServicesKEVRansomwarePublic exploitCritical · 9.8T1133External Remote ServicesT1498Network Denial of Service2 reports
    >99.9%Top 0.01%
    86.0priority
  25. CVE-2015-1701Microsoft Win32k Privilege Escalation Vulnerability
    Microsoft · Win32kKEVRansomwarePublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation3 reports
    55.9%Top 0.95%
    86.0priority
  26. CVE-2019-1458Microsoft Win32k Privilege Escalation Vulnerability
    Microsoft · Win32kKEVRansomwarePublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation2 reports
    74.4%Top 0.51%
    84.5priority
  27. CVE-2018-8174Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.5T1189Drive-by CompromiseT1059Command and Scripting Interpreter2 reports
    88.2%Top 0.23%
    84.3priority
  28. CVE-2026-45659Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability
    Microsoft · SharePoint ServerKEVRansomwarePublic exploitHigh · 8.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    80.2%Top 0.38%
    84.1priority
  29. CVE-2025-49704Microsoft SharePoint Code Injection Vulnerability
    Microsoft · SharePointKEVRansomwarePublic exploitHigh · 8.8T1190Exploit Public-Facing ApplicationT1059.003Windows Command Shell1 report
    >99.9%Top 0.01%
    83.0priority
  30. CVE-2022-41040Microsoft Exchange Server Server-Side Request Forgery Vulnerability
    Microsoft · Exchange ServerKEVRansomwarePublic exploitHigh · 8.8T1190Exploit Public-Facing ApplicationT1068Exploitation for Privilege Escalation1 report
    >99.9%Top 0.02%
    83.0priority
  31. CVE-2021-42321Microsoft Exchange Server Remote Code Execution Vulnerability
    Microsoft · ExchangeKEVRansomwarePublic exploitHigh · 8.8T1078Valid AccountsT1059Command and Scripting Interpreter1 report
    91.7%Top 0.19%
    83.0priority
  32. CVE-2021-26411Microsoft Internet Explorer Memory Corruption Vulnerability
    Microsoft · Internet ExplorerKEVRansomwarePublic exploitHigh · 8.8T1189Drive-by Compromise1 report
    81.7%Top 0.36%
    83.0priority
  33. CVE-2017-0143Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 8.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter1 report
    93.3%Top 0.16%
    83.0priority
  34. CVE-2014-1812Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 8.8T1078Valid AccountsT1552.006Group Policy Preferences1 report
    65.1%Top 0.75%
    82.9priority
  35. CVE-2024-21412Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 8.1T1204.001Malicious LinkT1553.005Mark-of-the-Web Bypass1 report
    99.4%Top 0.06%
    82.5priority
  36. CVE-2026-33825Microsoft Defender Insufficient Granularity of Access Control Vulnerability
    Microsoft · DefenderKEVRansomwarePublic exploitHigh · 7.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    6.7%Top 6%
    82.3priority
  37. CVE-2021-1732Microsoft Win32k Privilege Escalation Vulnerability
    Microsoft · Win32kKEVRansomwarePublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation1 report
    78.4%Top 0.42%
    82.2priority
  38. CVE-2018-8453Microsoft Win32k Privilege Escalation Vulnerability
    Microsoft · Win32kKEVRansomwarePublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation1 report
    70.0%Top 0.62%
    82.2priority
  39. CVE-2020-0787Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1059Command and Scripting InterpreterT1068Exploitation for Privilege Escalation1 report
    42.5%Top 1.3%
    82.1priority
  40. CVE-2019-0803Microsoft Win32k Privilege Escalation Vulnerability
    Microsoft · Win32kKEVRansomwarePublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation1 report
    45.2%Top 1.2%
    82.1priority
  41. CVE-2016-0189Microsoft Internet Explorer Memory Corruption Vulnerability
    Microsoft · Internet ExplorerKEVRansomwarePublic exploitHigh · 7.5T1189Drive-by CompromiseT1059.007JavaScript1 report
    94.1%Top 0.15%
    82.1priority
  42. CVE-2021-42278Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
    Microsoft · Active DirectoryKEVRansomwarePublic exploitHigh · 7.5T1078Valid AccountsT1068Exploitation for Privilege Escalation1 report
    73.3%Top 0.54%
    82.0priority
  43. CVE-2025-60710Microsoft Windows Link Following Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1059Command and Scripting InterpreterT1068Exploitation for Privilege Escalation
    4.6%Top 8.3%
    81.8priority
  44. CVE-2020-0986Microsoft Windows Kernel Privilege Escalation Vulnerability
    Microsoft · WindowsKEVPublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation1 report
    16.4%Top 3%
    81.7priority
  45. CVE-2015-2546Microsoft Win32k Memory Corruption Vulnerability
    Microsoft · Win32kKEVRansomwarePublic exploitHigh · 8.2T1204.002Malicious FileT1068Exploitation for Privilege Escalation1 report
    10.1%Top 4.4%
    81.7priority
  46. CVE-2021-34481Windows Print Spooler Remote Code Execution Vulnerability
    Microsoft · Windows 10 Version 1507Public exploitHigh · 8.81 report
    47.7%Top 1.2%
    81.6priority
  47. CVE-2025-53771Microsoft SharePoint Server Spoofing Vulnerability
    Microsoft · Microsoft SharePoint Enterprise Server 2016Public exploitMedium · 6.5T1190Exploit Public-Facing ApplicationT1078Valid Accounts1 report
    99.9%Top 0.03%
    81.4priority
  48. CVE-2025-49706Microsoft SharePoint Improper Authentication Vulnerability
    Microsoft · SharePointKEVRansomwarePublic exploitMedium · 6.5T1190Exploit Public-Facing ApplicationT1059.003Windows Command Shell+1 more · 1 report
    99.1%Top 0.07%
    81.4priority
  49. CVE-2024-43451Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability
    Microsoft · WindowsKEVPublic exploitMedium · 6.5T1566Phishing1 report
    84.3%Top 0.3%
    81.4priority
  50. CVE-2021-26858Microsoft Exchange Server Remote Code Execution Vulnerability
    Microsoft · Exchange ServerKEVRansomwareHigh · 7.8T1505.003Web Shell3 reports
    93.7%Top 0.16%
    81.2priority
  51. CVE-2013-3900Microsoft WinVerifyTrust function Remote Code Execution
    Microsoft · WinVerifyTrust functionKEVPublic exploitMedium · 5.5T1204.002Malicious FileT1553.002Code Signing1 report
    44.6%Top 1.2%
    80.5priority
  52. CVE-2025-59287Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability
    Microsoft · WindowsKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    >99.9%Top 0.02%
    79.9priority
  53. CVE-2023-29357Microsoft SharePoint Server Privilege Escalation Vulnerability
    Microsoft · SharePoint ServerKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1068Exploitation for Privilege Escalation
    >99.9%Top 0.02%
    79.9priority
  54. CVE-2021-38647Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
    Microsoft · Open Management Infrastructure (OMI)KEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    99.9%Top 0.03%
    79.9priority
  55. CVE-2021-31166Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability
    Microsoft · HTTP Protocol StackKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    99.9%Top 0.04%
    79.9priority
  56. CVE-2023-23397Microsoft Office Outlook Privilege Escalation Vulnerability
    Microsoft · OfficeKEVPublic exploitCritical · 9.8T1078Valid AccountsT1550.002Pass the Hash
    97.2%Top 0.11%
    79.8priority
  57. CVE-2026-55040Microsoft SharePoint Weak Authentication Vulnerability
    Microsoft · SharePointKEVPublic exploitCritical · 9.1T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    69.5%Top 0.64%
    79.2priority
  58. CVE-2025-33073Microsoft Windows SMB Client Improper Access Control Vulnerability
    Microsoft · WindowsKEVPublic exploitHigh · 8.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    82.7%Top 0.33%
    79.1priority
  59. CVE-2023-36025Microsoft Windows SmartScreen Security Feature Bypass Vulnerability
    Microsoft · WindowsKEVPublic exploitHigh · 8.8T1204.001Malicious LinkT1211Exploitation for Stealth
    88.1%Top 0.23%
    79.1priority
  60. CVE-2022-41080Microsoft Exchange Server Privilege Escalation Vulnerability
    Microsoft · Exchange ServerKEVRansomwarePublic exploitHigh · 8.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    77.3%Top 0.44%
    79.1priority
  61. CVE-2022-26923Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
    Microsoft · Active DirectoryKEVPublic exploitHigh · 8.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    83.5%Top 0.32%
    79.1priority
  62. CVE-2020-0618Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability
    Microsoft · SQL ServerKEVRansomwarePublic exploitHigh · 8.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    99.0%Top 0.07%
    79.1priority
  63. CVE-2018-0798Microsoft Office Memory Corruption Vulnerability
    Microsoft · OfficeKEVPublic exploitHigh · 8.8T1204.002Malicious FileT1203Exploitation for Client Execution5 reports
    95.1%Top 0.14%
    79.1priority
  64. CVE-2017-0146Microsoft Windows SMB Remote Code Execution Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 8.8T1059Command and Scripting InterpreterT1210Exploitation of Remote Services
    89.8%Top 0.21%
    79.1priority
  65. CVE-2017-0145Microsoft SMBv1 Remote Code Execution Vulnerability
    Microsoft · SMBv1KEVRansomwarePublic exploitHigh · 8.8T1059Command and Scripting InterpreterT1210Exploitation of Remote Services
    89.8%Top 0.21%
    79.1priority
  66. CVE-2016-7201Microsoft Edge Memory Corruption Vulnerability
    Microsoft · EdgeKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution+1 more
    80.0%Top 0.39%
    79.1priority
  67. CVE-2016-7200Microsoft Edge Memory Corruption Vulnerability
    Microsoft · EdgeKEVPublic exploitHigh · 8.8T1059Command and Scripting InterpreterT1499.004Application or System Exploitation
    82.8%Top 0.33%
    79.1priority
  68. CVE-2011-3402Microsoft Windows Remote Code Execution Vulnerability
    Microsoft · WindowsKEVPublic exploitHigh · 8.8T1204.002Malicious FileT1203Exploitation for Client Execution
    78.1%Top 0.42%
    79.1priority
  69. CVE-2023-21529Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability
    Microsoft · Exchange ServerKEVRansomwareHigh · 8.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    59.3%Top 0.88%
    79.0priority
  70. CVE-2019-1068Microsoft SQL Server Remote Code Execution Vulnerability
    Microsoft · SQL ServerKEVPublic exploitHigh · 8.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    57.3%Top 0.93%
    79.0priority
  71. CVE-2017-0148Microsoft SMBv1 Server Remote Code Execution Vulnerability
    Microsoft · SMBv1 serverKEVRansomwarePublic exploitHigh · 8.1T1059Command and Scripting InterpreterT1210Exploitation of Remote Services
    99.4%Top 0.06%
    78.7priority
  72. CVE-2022-41082Microsoft Exchange Server Remote Code Execution Vulnerability
    Microsoft · Exchange ServerKEVRansomwarePublic exploitHigh · 8.0T1078Valid AccountsT1059.001PowerShell+4 more
    >99.9%Top 0.02%
    78.6priority
  73. CVE-2022-26809Remote Procedure Call Runtime Remote Code Execution Vulnerability
    Microsoft · Windows 10 Version 1809Public exploitCritical · 9.8
    90.9%Top 0.2%
    78.6priority
  74. CVE-2020-0601Microsoft Windows CryptoAPI Spoofing Vulnerability
    Microsoft · WindowsKEVPublic exploitHigh · 8.1T1036MasqueradingT1553.002Code Signing
    89.1%Top 0.22%
    78.6priority
  75. CVE-2024-49039Microsoft Windows Task Scheduler Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 8.8T1068Exploitation for Privilege EscalationT1548Abuse Elevation Control Mechanism
    14.2%Top 3.4%
    78.5priority
  76. CVE-2021-40449Microsoft Windows Win32k Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1566PhishingT1059.003Windows Command Shell+6 more
    81.9%Top 0.35%
    78.4priority
  77. CVE-2017-8570Microsoft Office Remote Code Execution Vulnerability
    Microsoft · OfficeKEVPublic exploitHigh · 7.8T1203Exploitation for Client ExecutionT1204.002Malicious File5 reports
    89.9%Top 0.21%
    78.4priority
  78. CVE-2016-7255Microsoft Win32k Privilege Escalation Vulnerability
    Microsoft · Win32kKEVRansomwarePublic exploitHigh · 7.8T1068Exploitation for Privilege EscalationT1548Abuse Elevation Control Mechanism
    81.0%Top 0.37%
    78.4priority
  79. CVE-2010-3333Microsoft Office Stack-based Buffer Overflow Vulnerability
    Microsoft · OfficeKEVPublic exploitHigh · 7.8T1203Exploitation for Client ExecutionT1204.002Malicious File5 reports
    89.4%Top 0.22%
    78.4priority
  80. CVE-2024-21338Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation
    59.8%Top 0.87%
    78.3priority
  81. CVE-2022-21882Microsoft Win32k Privilege Escalation Vulnerability
    Microsoft · Win32kKEVRansomwarePublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation
    59.2%Top 0.89%
    78.3priority
  82. CVE-2017-0101Microsoft Windows Transaction Manager Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation
    57.5%Top 0.92%
    78.3priority
  83. CVE-2016-0151Microsoft Windows CSRSS Security Feature Bypass Vulnerability
    Microsoft · Client-Server Run-time Subsystem (CSRSS)KEVRansomwarePublic exploitHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege Escalation
    62.8%Top 0.81%
    78.3priority
  84. CVE-2023-36884Microsoft Windows Search Remote Code Execution Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.5T1566PhishingT1204.002Malicious File+5 more
    99.4%Top 0.06%
    78.2priority
  85. CVE-2023-28252Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1078Valid AccountsT1059Command and Scripting Interpreter+5 more
    48.9%Top 1.1%
    78.2priority
  86. CVE-2022-21999Microsoft Windows Print Spooler Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1078Valid AccountsT1059Command and Scripting Interpreter+3 more
    41.0%Top 1.3%
    78.2priority
  87. CVE-2021-42287Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
    Microsoft · Active DirectoryKEVRansomwarePublic exploitHigh · 7.5T1068Exploitation for Privilege Escalation
    77.2%Top 0.45%
    78.2priority
  88. CVE-2019-0841Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    41.4%Top 1.3%
    78.2priority
  89. CVE-2017-0147Microsoft Windows SMBv1 Information Disclosure Vulnerability
    Microsoft · SMBv1 serverKEVRansomwarePublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    99.7%Top 0.05%
    78.2priority
  90. CVE-2016-0099Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1068Exploitation for Privilege EscalationT1134Access Token Manipulation
    37.0%Top 1.5%
    78.2priority
  91. CVE-2013-3660Microsoft Win32k Privilege Escalation Vulnerability
    Microsoft · Win32kKEVPublic exploitHigh · 7.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    39.3%Top 1.4%
    78.2priority
  92. CVE-2026-65660Microsoft SharePoint Code Injection Vulnerability
    Microsoft · SharePointKEVPublic exploitHigh · 8.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    8.2%Top 5.1%
    78.1priority
  93. CVE-2022-37969Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1078Valid AccountsT1059Command and Scripting Interpreter+1 more
    28.5%Top 1.9%
    78.1priority
  94. CVE-2021-36942Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1557Adversary-in-the-Middle
    66.0%Top 0.73%
    78.1priority
  95. CVE-2019-1405Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1559Inter-Process CommunicationT1068Exploitation for Privilege Escalation
    30.2%Top 1.8%
    78.1priority
  96. CVE-2023-24955Microsoft SharePoint Server Code Injection Vulnerability
    Microsoft · SharePoint ServerKEVRansomwarePublic exploitHigh · 7.2T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    85.0%Top 0.29%
    78.0priority
  97. CVE-2019-1367Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
    Microsoft · Internet ExplorerKEVRansomwarePublic exploitHigh · 7.5T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    52.4%Top 1%
    78.0priority
  98. CVE-2018-8639Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation
    22.2%Top 2.3%
    78.0priority
  99. CVE-2016-3309Microsoft Windows Kernel Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege Escalation
    20.5%Top 2.5%
    78.0priority
  100. CVE-2025-29824Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1068Exploitation for Privilege EscalationT1134Access Token Manipulation
    19.3%Top 2.7%
    77.9priority
↑ ↓ chooseEnter openEsc close