Vulnerability index

Browse CVEs

73 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Improper AuthenticationCWE-287 × clear
Sharepoint Server MEDIUM 6.5
CVE-2025-53771EPSS 100%

Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

Fix: 16.0.18526.20508+
Fix from $1,600 2025-07-20
Sharepoint Enterprise Server MEDIUM 6.5
CVE-2025-49706 KEVEPSS 100%

Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

Fix: 16.0.18526.20424+
Fix from $1,600 2025-07-08
Defender For Identity MEDIUM 6.5
CVE-2025-26685

Improper authentication in Microsoft Defender for Identity allows an unauthorized attacker to perform spoofing over an adjacent network.

Mitigation only
Fix from $1,600 2025-05-13
Azure Devops CRITICAL 9.8
CVE-2025-29813

Authentication bypass by assumed-immutable data in Azure DevOps allows an unauthorized attacker to elevate privileges over a network.

Mitigation only
Fix from $2,300 2025-05-08
Windows 10 1507 MEDIUM 6.8
CVE-2025-21349

Windows Remote Desktop Configuration Service Tampering Vulnerability

Fix: 10.0.10240.20915 / 10.0.14393.7785+
Fix from $1,600 2025-02-11
Windows 10 1809 HIGH 7.8
CVE-2024-49076

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

Fix: 10.0.17763.6659 / 10.0.19044.5247+
Fix from $1,950 2024-12-12
Windows 10 1507 HIGH 8.8
CVE-2024-49039 KEVEPSS 14%

Windows Task Scheduler Elevation of Privilege Vulnerability

Fix: 10.0.10240.20826 / 10.0.14393.7515+
Fix from $1,950 2024-11-12
Dataverse HIGH 8.8
CVE-2024-38139

Improper authentication in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network.

Patch available
Fix from $1,950 2024-10-15
Windows Server 2008 CRITICAL 9.0
CVE-2024-38124

Windows Netlogon Elevation of Privilege Vulnerability

Fix: 10.0.14393.7428 / 10.0.17763.6414+
Fix from $2,300 2024-10-08
Dynamics 365 Business Central CRITICAL 9.8
CVE-2024-38225

Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

Patch available
Fix from $2,300 2024-09-10
Windows Server 2008 MEDIUM 5.9
CVE-2024-38099

Windows Remote Desktop Licensing Service Denial of Service Vulnerability

Fix: 10.0.14393.7159 / 10.0.17763.6054+
Fix from $1,600 2024-07-09
Dynamics 365 Business Central HIGH 7.3
CVE-2024-35248

Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

Patch available
Fix from $1,950 2024-06-11
Windows Server 2012 HIGH 7.5
CVE-2024-21427

Windows Kerberos Security Feature Bypass Vulnerability

Fix: 10.0.14393.6897 / 10.0.17763.5696+
Fix from $1,950 2024-03-12
Authenticator HIGH 7.1
CVE-2024-21390

Microsoft Authenticator Elevation of Privilege Vulnerability

Fix: 6.2401.0617+
Fix from $1,950 2024-03-12
Exchange Server CRITICAL 9.8
CVE-2024-21410 KEVEPSS 13%

Microsoft Exchange Server Elevation of Privilege Vulnerability

Patch available
Fix from $2,300 2024-02-13
Azure Ipam CRITICAL 9.8
CVE-2024-21638

Azure IPAM (IP Address Management) is a lightweight solution developed on top of the Azure platform designed to help Azure customers manage their IP …

Fix: 3.0.0+
Fix from $2,300 2024-01-10
Windows 10 1507 HIGH 7.5
CVE-2023-36004

Windows DPAPI (Data Protection Application Programming Interface) Spoofing Vulnerability

Fix: 10.0.10240.20345 / 10.0.14393.6529+
Fix from $1,950 2023-12-12
Windows 10 1507 MEDIUM 5.5
CVE-2023-36724

Windows Power Management Service Information Disclosure Vulnerability

Fix: 10.0.10240.20232 / 10.0.14393.6351+
Fix from $1,600 2023-10-10
Windows 10 HIGH 7.8
CVE-2023-21817

Windows Kerberos Elevation of Privilege Vulnerability

Fix: 10.0.10240.19747 / 10.0.14393.5717+
Fix from $1,950 2023-02-14
Onenote MEDIUM 6.5
CVE-2023-21721

Microsoft OneNote Elevation of Privilege Vulnerability

Fix: 16.0.16026.20158+
Fix from $1,600 2023-02-14
Windows 10 HIGH 7.5
CVE-2022-30150

Windows Defender Remote Credential Guard Elevation of Privilege Vulnerability

Patch available
Fix from $1,950 2022-06-15
Azure Active Directory Connect HIGH 7.1
CVE-2021-36949

Microsoft Azure Active Directory Connect Authentication Bypass Vulnerability

Fix: 1.1.582.0+
Fix from $1,950 2021-08-12
Bot Framework Software Development Kit MEDIUM 5.5
CVE-2021-1725

Bot Framework SDK Information Disclosure Vulnerability

No fix yet
Fix from $1,600 2021-01-12
Exchange Server HIGH 8.8
CVE-2020-0688 KEVEPSS 100%

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Micros…

Patch available
Fix from $1,950 2020-02-11
Windows 10 1507 HIGH 7.8
CVE-2019-0543 KEV

An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka "Microsoft Windows Elevation of Privilege…

Patch available
Fix from $1,950 2019-01-08
Asp.net Core HIGH 7.5
CVE-2018-8171EPSS 10%

A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated, aka "ASP.NET Security Feature…

Patch available
Fix from $1,950 2018-07-11
Windows 10 HIGH 7.0
CVE-2018-0886EPSS 82%

The Credential Security Support Provider protocol (CredSSP) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, W…

Patch available
Fix from $1,950 2018-03-14
Windows 10 HIGH 7.5
CVE-2017-8495

Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607,…

Patch available
Fix from $1,950 2017-07-11
Windows 10 HIGH 7.8
CVE-2017-0100

A DCOM object in Helppane.exe in Microsoft Windows 7 SP1; Windows Server 2008 R2; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windo…

Patch available
Fix from $1,950 2017-03-17
Azure Active Directory Passport HIGH 8.1
CVE-2016-7191EPSS 29%

The Microsoft Azure Active Directory Passport (aka Passport-Azure-AD) library 1.x before 1.4.6 and 2.x before 2.0.1 for Node.js does not recognize th…

Patch available
Fix from $1,950 2016-09-28