CVEs
Every published CVE. Without a filter the list holds those exploited, with a public check, or likely to be exploited; pick a year and month or a vendor for the rest.
| CVE | Vendor · product | Exploitation | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2024-43468Microsoft Configuration Manager Remote Code Execution Vulnerability | Microsoft · Microsoft Configuration Manager | Exploited | 9.8 | 81% | 2024-10-08 |
| CVE-2026-20947Microsoft SharePoint Server Remote Code Execution Vulnerability | Microsoft · Microsoft SharePoint Enterprise Server 2016 | Likely | 8.8 | 18% | 2026-01-13 |
| CVE-2021-1636Microsoft SQL Elevation of Privilege Vulnerability | Microsoft · Microsoft SQL Server 2012 Service Pack 4 (QFE) | Possible | 8.8 | 6.5% | 2021-01-12 |
| CVE-2021-42311Microsoft Defender for IoT Remote Code Execution Vulnerability | Microsoft · Microsoft Defender for IoT | Possible | 10.0 | 4.4% | 2021-12-15 |
| CVE-2021-42313Microsoft Defender for IoT Remote Code Execution Vulnerability | Microsoft · Microsoft Defender for IoT | Possible | 10.0 | 4.1% | 2021-12-15 |
| CVE-2022-34700Microsoft Dynamics CRM (on-premises) Remote Code Execution Vulnerability | Microsoft · Microsoft Dynamics CRM (on-premises) 9.0 | Possible | 8.8 | 3.8% | 2022-09-13 |
| CVE-2021-41365Microsoft Defender for IoT Remote Code Execution Vulnerability | Microsoft · Microsoft Defender for IoT | Possible | 8.8 | 2.9% | 2021-12-15 |
| CVE-2025-47178Microsoft Configuration Manager Remote Code Execution Vulnerability | Microsoft · Microsoft Configuration Manager | Possible | 8.0 | 2.7% | 2025-07-08 |
| CVE-2026-70049Microsoft Configuration Manager Elevation of Privilege Vulnerability | Microsoft · Microsoft Configuration Manager | Possible | 8.0 | 2.7% | 2026-10-13 |
| CVE-2026-118116Microsoft SQL Server Elevation of Privilege Vulnerability | Microsoft · Microsoft SQL Server 2017 (GDR) | Possible | 7.0 | 1.9% | 2026-11-10 |
| CVE-2025-47172Microsoft SharePoint Server Remote Code Execution Vulnerability | Microsoft · Microsoft SharePoint Enterprise Server 2016 | Possible | 8.8 | 1.8% | 2025-06-10 |
| CVE-2025-47954Microsoft SQL Server Elevation of Privilege Vulnerability | Microsoft · Microsoft SQL Server 2022 (CU 20) | Possible | 8.8 | 1.7% | 2025-08-12 |
| CVE-2025-53727Microsoft SQL Server Elevation of Privilege Vulnerability | Microsoft · Microsoft SQL Server 2016 Service Pack 3 (GDR) | Possible | 8.8 | 1.4% | 2025-08-12 |
| CVE-2025-49759Microsoft SQL Server Elevation of Privilege Vulnerability | Microsoft · Microsoft SQL Server 2016 Service Pack 3 (GDR) | Possible | 8.8 | 1.3% | 2025-08-12 |
| CVE-2026-26116SQL Server Elevation of Privilege Vulnerability | Microsoft · Microsoft SQL Server 2025 (CU 2) | Possible | 8.8 | 1.2% | 2026-03-10 |
| CVE-2025-59499Microsoft SQL Server Elevation of Privilege Vulnerability | Microsoft · Microsoft SQL Server 2016 Service Pack 3 (GDR) | Possible | 8.8 | 1.2% | 2025-11-11 |
| CVE-2026-118120Microsoft SQL Server Elevation of Privilege Vulnerability | Microsoft · Microsoft SQL Server 2017 (GDR) | Possible | 8.8 | 1.1% | 2026-11-10 |
| CVE-2026-118110Microsoft SQL Server Elevation of Privilege Vulnerability | Microsoft · Microsoft SQL Server 2017 (GDR) | Possible | 8.8 | 1.1% | 2026-11-10 |
| CVE-2026-118109Microsoft SQL Server Elevation of Privilege Vulnerability | Microsoft · Microsoft SQL Server 2017 (GDR) | Possible | 8.8 | 1.1% | 2026-11-10 |
| CVE-2026-70266Microsoft Office SharePoint Elevation of Privilege Vulnerability | Microsoft · Microsoft SharePoint Server Subscription Edition | Possible | 8.8 | 1.1% | 2026-10-13 |
| CVE-2026-69636Microsoft Office SharePoint Information Disclosure Vulnerability | Microsoft · Microsoft SharePoint Server Subscription Edition | Unlikely | 6.5 | 1.0% | 2026-09-08 |
| CVE-2026-69716Microsoft Office SharePoint Elevation of Privilege Vulnerability | Microsoft · Microsoft SharePoint Server Subscription Edition | Unlikely | 8.8 | 1.0% | 2026-09-08 |
| CVE-2026-68789Azure SQL Database Elevation of Privilege Vulnerability | Microsoft · Azure SQL Database | Unlikely | 9.9 | 1.0% | 2026-08-20 |
| CVE-2026-68782Azure SQL Database Elevation of Privilege Vulnerability | Microsoft · Azure SQL Database | Unlikely | 9.9 | 1.0% | 2026-08-20 |
| CVE-2026-67370Microsoft SQL Server Elevation of Privilege Vulnerability | Microsoft · Microsoft SQL Server 2017 (CU 31) | Unlikely | 8.8 | 1.0% | 2026-09-08 |
| CVE-2026-66820SQL Server Elevation of Privilege Vulnerability | Microsoft · Microsoft SQL Server 2017 (CU 31) | Unlikely | 8.8 | 1.0% | 2026-09-08 |
| CVE-2026-66819Microsoft SQL Server Elevation of Privilege Vulnerability | Microsoft · Microsoft SQL Server 2017 (CU 31) | Unlikely | 8.8 | 1.0% | 2026-09-08 |
| CVE-2026-47295Microsoft SQL Server Elevation of Privilege Vulnerability | Microsoft · Microsoft SQL Server 2016 Service Pack 3 (GDR) | Unlikely | 8.8 | 1.0% | 2026-07-14 |
| CVE-2026-118105Microsoft SQL Server Elevation of Privilege Vulnerability | Microsoft · Microsoft SQL Server 2017 (GDR) | Unlikely | 8.8 | 0.9% | 2026-11-10 |
| CVE-2026-62906Microsoft Discovery Studio Information Disclosure Vulnerability | Microsoft · Microsoft Discovery Studio | Unlikely | 7.4 | 0.9% | 2026-09-03 |
| CVE-2026-118119Microsoft SQL Server Elevation of Privilege Vulnerability | Microsoft · Microsoft SQL Server 2017 (GDR) | Unlikely | 8.0 | 0.9% | 2026-11-10 |
| CVE-2026-118118Microsoft SQL Server Elevation of Privilege Vulnerability | Microsoft · Microsoft SQL Server 2017 (GDR) | Unlikely | 8.0 | 0.9% | 2026-11-10 |
| CVE-2026-118117Microsoft SQL Server Elevation of Privilege Vulnerability | Microsoft · Microsoft SQL Server 2017 (GDR) | Unlikely | 8.0 | 0.9% | 2026-11-10 |
| CVE-2026-118113Microsoft SQL Server Elevation of Privilege Vulnerability | Microsoft · Microsoft SQL Server 2017 (GDR) | Unlikely | 8.0 | 0.9% | 2026-11-10 |
| CVE-2026-88075Configuration Manager Elevation of Privilege Vulnerability | Microsoft · Microsoft Configuration Manager | Unlikely | 8.8 | 0.8% | 2026-10-13 |
| CVE-2026-118115Microsoft SQL Server Elevation of Privilege Vulnerability | Microsoft · Microsoft SQL Server 2017 (GDR) | Unlikely | 7.5 | 0.8% | 2026-11-10 |
| CVE-2026-118114Microsoft SQL Server Elevation of Privilege Vulnerability | Microsoft · Microsoft SQL Server 2017 (GDR) | Unlikely | 7.5 | 0.8% | 2026-11-10 |
| CVE-2026-47296Microsoft SQL Server Elevation of Privilege Vulnerability | Microsoft · Microsoft SQL Server 2016 Service Pack 3 (GDR) | Unlikely | 7.5 | 0.7% | 2026-07-14 |
| CVE-2025-55320Configuration Manager Elevation of Privilege Vulnerability | Microsoft · Microsoft Configuration Manager | Unlikely | 6.8 | 0.7% | 2025-10-14 |
| CVE-2025-59213Configuration Manager Elevation of Privilege Vulnerability | Microsoft · Microsoft Configuration Manager | Unlikely | 8.8 | 0.4% | 2025-10-14 |
| CVE-2026-65673Microsoft Entra Connect Elevation of Privilege Vulnerability | Microsoft · Microsoft Entra Connect | Unlikely | 7.8 | 0.3% | 2026-08-11 |
| CVE-2026-32167SQL Server Elevation of Privilege Vulnerability | Microsoft · Microsoft SQL Server 2016 Service Pack 3 (GDR) | Unlikely | 6.7 | 0.3% | 2026-04-14 |
| CVE-2026-32176SQL Server Elevation of Privilege Vulnerability | Microsoft · Microsoft SQL Server 2016 Service Pack 3 (GDR) | Unlikely | 6.7 | 0.3% | 2026-04-14 |
Exploitation: exploited (CISA KEV), a public nuclei check, then EPSS: likely 10% or more, possible 1 to 10%, unlikely under 1%. Data as of 2026-11-15.