Security Digest · page 2 of 2
Microsoft: known exploited vulnerabilities (page 2)
122 Microsoft CVEs CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.
| Added | CVE | Product and flaw | CISA due |
|---|---|---|---|
| 2024-07-23 | CVE-2012-4792 | Microsoft Internet Explorer Microsoft Internet Explorer Use-After-Free Vulnerability | 2024-08-13 |
| 2024-07-09 | CVE-2024-38112 | Microsoft Windows Microsoft Windows MSHTML Platform Spoofing Vulnerability | 2024-07-30 |
| 2024-07-09 | CVE-2024-38080 | Microsoft Windows Microsoft Windows Hyper-V Privilege Escalation Vulnerability | 2024-07-30 |
| 2024-06-13 | CVE-2024-26169 | Microsoft Windows Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability Ransomware | 2024-07-04 |
| 2024-05-14 | CVE-2024-30051 | Microsoft DWM Core Library Microsoft DWM Core Library Privilege Escalation Vulnerability Ransomware | 2024-06-04 |
| 2024-05-14 | CVE-2024-30040 | Microsoft Windows Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability | 2024-06-04 |
| 2024-04-30 | CVE-2024-29988 | Microsoft SmartScreen Prompt Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability | 2024-05-21 |
| 2024-04-23 | CVE-2022-38028 | Microsoft Windows Microsoft Windows Print Spooler Privilege Escalation Vulnerability | 2024-05-14 |
| 2024-03-26 | CVE-2023-24955 | Microsoft SharePoint Server Microsoft SharePoint Server Code Injection Vulnerability Ransomware | 2024-04-16 |
| 2024-03-04 | CVE-2024-21338 | Microsoft Windows Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability Ransomware | 2024-03-25 |
| 2024-02-29 | CVE-2023-29360 | Microsoft Streaming Service Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability | 2024-03-21 |
| 2024-02-15 | CVE-2024-21410 | Microsoft Exchange Server Microsoft Exchange Server Privilege Escalation Vulnerability | 2024-03-07 |
| 2024-02-13 | CVE-2024-21412 | Microsoft Windows Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability Ransomware | 2024-03-05 |
| 2024-02-13 | CVE-2024-21351 | Microsoft Windows Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | 2024-03-05 |
| 2024-01-10 | CVE-2023-29357 | Microsoft SharePoint Server Microsoft SharePoint Server Privilege Escalation Vulnerability Ransomware | 2024-01-31 |
| 2023-11-16 | CVE-2023-36584 | Microsoft Windows Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | 2023-12-07 |
| 2023-11-14 | CVE-2023-36036 | Microsoft Windows Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability | 2023-12-05 |
| 2023-11-14 | CVE-2023-36033 | Microsoft Windows Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability | 2023-12-05 |
| 2023-11-14 | CVE-2023-36025 | Microsoft Windows Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | 2023-12-05 |
| 2023-10-10 | CVE-2023-41763 | Microsoft Skype for Business Microsoft Skype for Business Privilege Escalation Vulnerability | 2023-10-31 |
| 2023-10-10 | CVE-2023-36563 | Microsoft WordPad Microsoft WordPad Information Disclosure Vulnerability | 2023-10-31 |
| 2023-10-04 | CVE-2023-28229 | Microsoft Windows CNG Key Isolation Service Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability | 2023-10-25 |