Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2021-40444 | not reported | — | Listed | Microsoft MSHTML contains a unspecified vulnerability that allows for remote code execution. | — |
| CVE-2019-0859 | not reported | — | Listed | Microsoft Win32k fails to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run... | — |
| CVE-2020-1350 | not reported | — | Listed | Microsoft Windows DNS Servers fail to properly handle requests, allowing an attacker to perform remote code execution in the context of the... | — |
| CVE-2021-28310 | not reported | — | Listed | Microsoft Windows Win32k contains an unspecified vulnerability that allows for privilege escalation. | — |
| CVE-2020-1040 | not reported | — | Listed | Microsoft Hyper-V RemoteFX vGPU contains an improper input validation vulnerability due to the host server failing to properly validate inpu... | — |
| CVE-2019-0803 | not reported | — | Listed | Microsoft Win32k contains an unspecified vulnerability due to it failing to properly handle objects in memory causing privilege escalation.... | — |
| CVE-2021-31207 | not reported | — | Listed | Microsoft Exchange Server contains an unspecified vulnerability that allows for security feature bypass. | — |
| CVE-2021-34527 | not reported | — | Listed | Microsoft Windows Print Spooler contains an unspecified vulnerability due to the Windows Print Spooler service improperly performing privile... | — |
| CVE-2021-1732 | not reported | — | Listed | Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation. | — |
| CVE-2020-1464 | not reported | — | Listed | Microsoft Windows contains a spoofing vulnerability when Windows incorrectly validates file signatures, allowing an attacker to bypass secur... | — |
| CVE-2021-34473 | not reported | — | Listed | Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. | — |
| CVE-2019-0708 | not reported | — | Listed | Microsoft Remote Desktop Services, formerly known as Terminal Service, contains an unspecified vulnerability that allows an unauthenticated... | — |
| CVE-2017-0143 | not reported | — | Listed | Microsoft Windows Server Message Block 1.0 (SMBv1) contains an unspecified vulnerability that allows for remote code execution. | — |
| CVE-2020-0688 | not reported | — | Listed | Microsoft Exchange Server Validation Key fails to properly create unique keys at install time, allowing for remote code execution. | — |
| CVE-2021-38649 | not reported | — | Listed | Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing privileg... | — |
| CVE-2021-36948 | not reported | — | Listed | Microsoft Windows Update Medic Service contains an unspecified vulnerability that allows for privilege escalation. | — |
| CVE-2017-7269 | not reported | — | Listed | Microsoft Windows Server 2003 R2 contains a buffer overflow vulnerability in Internet Information Services (IIS) 6.0 which allows remote att... | — |
| CVE-2021-34523 | not reported | — | Listed | Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. | — |
| CVE-2021-38645 | not reported | — | Listed | Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability that allows for p... | — |
| CVE-2020-1020 | not reported | — | Listed | Microsoft Windows Adobe Font Manager Library contains an unspecified vulnerability when handling specially crafted multi-master fonts (Adobe... | — |