Cross-Site Request Forgery

Every one of the 15 is a mark on the map. Named now: 1 to 15, most at risk first.

1. Cross-site request forgery (CSRF) vulnerability in Microsoft Outlook Web Access (owa/ev.owa) 2007 through SP2 allows remote attackers to hijack the authentication of e-mail users…CVE-2010-3213Microsoft · 8.4% likely

   CWE-352

2. Windows DVD Maker in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, and Windows Vista SP2 does not properly parse crafted .msdvd files, which allows attackers to obtain inform…CVE-2017-0045Microsoft Corporation · 6.6% likely

   CWE-352

3. Cross-site request forgery (CSRF) vulnerability in the web applications in Microsoft Exchange Server 2013 SP1 and Cumulative Update 8 allows remote attackers to hijack the authent…CVE-2015-1771Microsoft · 5.8% likely

   CWE-352

4. ASP.NET Core 1.0. 1.1, and 2.0 allow a cross site request forgery vulnerability due to the ASP.NET Core project templates, aka "ASP.NET Core Cross Site Request Forgery Vulnerabili…CVE-2018-0785Microsoft Corporation · 3.0% likely

   CWE-352

5. Microsoft Project Server and Microsoft SharePoint Enterprise Server 2016 allow an attacker to use cross-site forgery to read content that they are not authorized to read, use the…CVE-2017-11876Microsoft Corporation · 2.5% likely

   CWE-352

6. Microsoft SharePoint Information Disclosure VulnerabilityCVE-2020-1103Microsoft · 2.2% likely

   CWE-352

7. Azure DevOps Server Spoofing VulnerabilityCVE-2019-0996Microsoft · 1.6% likely

   CWE-352

8. A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting in cross-site request forgery (CSRF).To exploit th…CVE-2019-1261Microsoft · 1.6% likely

   CWE-352

9. A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting in cross-site request forgery (CSRF).To exploit th…CVE-2019-1259Microsoft · 1.5% likely

   CWE-352

10. Microsoft Clarity <= 0.9.3 - Cross-Site Request Forgery to Stored Cross-Site ScriptingCVE-2024-0590microsoft · CVSS 6.1 · 1.3% likely

    CWE-352

11. Active Directory Federation Server Spoofing VulnerabilityCVE-2025-21193Microsoft · CVSS 6.5 · 0.7% likely

    CWE-352

12. Microsoft Azure Active Directory B2C Spoofing VulnerabilityCVE-2024-21381Microsoft · CVSS 6.8 · 0.4% likely

    CWE-352

13. Microsoft Exchange Server Spoofing VulnerabilityCVE-2026-118152Microsoft · CVSS 6.5 · 0.4% likely

    CWE-352

14. ASP.NET Core Elevation of Privilege VulnerabilityCVE-2026-109481Microsoft · CVSS 7.5 · 0.3% likely

    CWE-352

15. Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityCVE-2023-24920Microsoft · CVSS 5.4 · 0.3% likely

    CWE-352

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.