Misconfiguration and Insecure Design

Every one of the 113 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Internet Shortcut Files Security Feature Bypass VulnerabilityCVE-2024-21412Microsoft · CVSS 8.1 · 99% likely

   CWE-693

2. Windows Shell Spoofing VulnerabilityCVE-2026-32202Microsoft · CVSS 4.3 · 71% likelycovered by CyberSIXT

   CWE-693Storm-1175

3. Windows Shell Security Feature Bypass VulnerabilityCVE-2026-21510Microsoft · CVSS 8.8 · 61% likelycovered by CyberSIXT

   CWE-693APT28

4. SmartScreen Prompt Security Feature Bypass VulnerabilityCVE-2024-29988Microsoft · CVSS 8.8 · 45% likely

   CWE-693

5. MSHTML Framework Security Feature Bypass VulnerabilityCVE-2026-21513Microsoft · CVSS 8.8 · 16% likelycovered by CyberSIXT

   CWE-693APT28

6. Windows Mark of the Web Security Feature Bypass VulnerabilityCVE-2024-38213Microsoft · CVSS 6.5 · 14% likely

   CWE-693

7. Windows Mark of the Web Security Feature Bypass VulnerabilityCVE-2024-38217Microsoft · CVSS 5.4 · 10% likely

   CWE-693

8. Microsoft Publisher Security Feature Bypass VulnerabilityCVE-2024-38226Microsoft · CVSS 7.3 · 2.7% likely

   CWE-693

9. The DNS server in Microsoft Windows 2000 Server SP4, and Server 2003 SP1 and SP2, uses predictable transaction IDs when querying other DNS servers, which allows remote attackers t…CVE-2007-3898Microsoft · 52% likely

   CWE-16

10. The tblinf32.dll (aka vstlbinf.dll) ActiveX control for Internet Explorer 5.01, 6 SP1, and 7 uses an incorrect IObjectsafety implementation, which allows remote attackers to execu…CVE-2007-2216Microsoft · 41% likely

    CWE-16

11. Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 does not properly configure the default web site, which allows remote attackers to obtain sensitive info…CVE-2012-0147Microsoft · 36% likely

    CWE-16

12. Microsoft Internet Information Services (IIS) 5.0 does not log requests that use the TRACK method, which allows remote attackers to obtain sensitive information without detection.CVE-2003-1566Microsoft · 28% likely

    CWE-16

13. When IIS is run with a default language of Chinese, Korean, or Japanese, it allows a remote attacker to view the source code of certain files, a.k.a. "Double Byte Code Page".CVE-1999-0725Microsoft · 25% likely

    CWE-16

14. Windows GDI Information Disclosure VulnerabilityCVE-2025-47984Microsoft · CVSS 7.5 · 23% likely

    CWE-693

15. The security descriptor for RASMAN allows users to point to an alternate location via the Windows NT Service Control Manager.CVE-1999-0886Microsoft · 22% likely

    CWE-16

16. Microsoft Internet Explorer 8 and 9, when the Proxy Settings configuration has the same Proxy address and Port values in the HTTP and Secure rows, does not ensure that the SSL loc…CVE-2013-1451Microsoft · 20% likely

    CWE-16

17. The default configuration of Microsoft Windows uses the Web Proxy Autodiscovery Protocol (WPAD) without static WPAD entries, which might allow remote attackers to intercept web tr…CVE-2007-1692Microsoft · 16% likely

    CWE-16

18. Microsoft Internet Explorer 6, 7, and 8 does not enforce intended domain restrictions on content access, which allows remote attackers to obtain sensitive information or conduct c…CVE-2011-1244Microsoft · 15% likely

    CWE-1021

19. Internet Explorer 5 allows a remote attacker to modify the IE client's proxy configuration via a malicious Web Proxy Auto-Discovery (WPAD) server.CVE-1999-0858Microsoft · 14% likely

    CWE-16

20. The default configuration of Microsoft Windows 7 immediately prefers a new IPv6 and DHCPv6 service over a currently used IPv4 and DHCPv4 service upon receipt of an IPv6 Router Adv…CVE-2011-1652Microsoft · 12% likely

    CWE-16

21. Remote Registry Service Elevation of Privilege VulnerabilityCVE-2024-43532Microsoft · CVSS 8.8 · 12% likely

    CWE-636

22. Windows Mark of the Web Security Feature Bypass VulnerabilityCVE-2024-30050Microsoft · CVSS 5.4 · 11% likely

    CWE-693

23. DHCP clients with ICMP Router Discovery Protocol (IRDP) enabled allow remote attackers to modify their default routes.CVE-1999-0875Microsoft · 10% likely

    CWE-16

24. Microsoft Internet Explorer 8 and 9, when the Proxy Settings configuration has the same Proxy address and Port values in the HTTP and Secure rows, does not properly reuse TCP sess…CVE-2013-1450Microsoft · 9.0% likely

    CWE-16

25. The Microsoft Java Virtual Machine allows a malicious Java applet to execute arbitrary commands outside of the sandbox environment.CVE-1999-0766Microsoft · 7.2% likely

    CWE-16

26. Microsoft Windows does not properly enforce the Autorun and NoDriveTypeAutoRun registry values, which allows physically proximate attackers to execute arbitrary code by (1) insert…CVE-2009-0243Microsoft · 6.3% likely

    CWE-16

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.