---
title: "Microsoft: known exploited vulnerabilities (page 2)"
url: https://erroneo.us/security/vendor/microsoft/2/
description: "Every Microsoft vulnerability in CISA's Known Exploited Vulnerabilities catalog since October 2023 (122), newest first, with due dates and fixes. Page 2 of 2."
type: vendor
section: "Security Digest"
date_modified: 2024-07-23
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Microsoft: known exploited vulnerabilities (page 2)

- 2024-07-23 [CVE-2012-4792](https://erroneo.us/security/cve/CVE-2012-4792/index.md) Microsoft Internet Explorer: Microsoft Internet Explorer Use-After-Free Vulnerability (due 2024-08-13; ransomware: Unknown)
- 2024-07-09 [CVE-2024-38112](https://erroneo.us/security/cve/CVE-2024-38112/index.md) Microsoft Windows: Microsoft Windows MSHTML Platform Spoofing Vulnerability (due 2024-07-30; ransomware: Unknown)
- 2024-07-09 [CVE-2024-38080](https://erroneo.us/security/cve/CVE-2024-38080/index.md) Microsoft Windows : Microsoft Windows Hyper-V Privilege Escalation Vulnerability (due 2024-07-30; ransomware: Unknown)
- 2024-06-13 [CVE-2024-26169](https://erroneo.us/security/cve/CVE-2024-26169/index.md) Microsoft Windows: Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability (due 2024-07-04; ransomware: Known)
- 2024-05-14 [CVE-2024-30051](https://erroneo.us/security/cve/CVE-2024-30051/index.md) Microsoft DWM Core Library:  Microsoft DWM Core Library Privilege Escalation Vulnerability (due 2024-06-04; ransomware: Known)
- 2024-05-14 [CVE-2024-30040](https://erroneo.us/security/cve/CVE-2024-30040/index.md) Microsoft Windows: Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability (due 2024-06-04; ransomware: Unknown)
- 2024-04-30 [CVE-2024-29988](https://erroneo.us/security/cve/CVE-2024-29988/index.md) Microsoft SmartScreen Prompt: Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability (due 2024-05-21; ransomware: Unknown)
- 2024-04-23 [CVE-2022-38028](https://erroneo.us/security/cve/CVE-2022-38028/index.md) Microsoft Windows: Microsoft Windows Print Spooler Privilege Escalation Vulnerability  (due 2024-05-14; ransomware: Unknown)
- 2024-03-26 [CVE-2023-24955](https://erroneo.us/security/cve/CVE-2023-24955/index.md) Microsoft SharePoint Server: Microsoft SharePoint Server Code Injection Vulnerability (due 2024-04-16; ransomware: Known)
- 2024-03-04 [CVE-2024-21338](https://erroneo.us/security/cve/CVE-2024-21338/index.md) Microsoft Windows: Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability (due 2024-03-25; ransomware: Known)
- 2024-02-29 [CVE-2023-29360](https://erroneo.us/security/cve/CVE-2023-29360/index.md) Microsoft Streaming Service: Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability (due 2024-03-21; ransomware: Unknown)
- 2024-02-15 [CVE-2024-21410](https://erroneo.us/security/cve/CVE-2024-21410/index.md) Microsoft Exchange Server: Microsoft Exchange Server Privilege Escalation Vulnerability (due 2024-03-07; ransomware: Unknown)
- 2024-02-13 [CVE-2024-21412](https://erroneo.us/security/cve/CVE-2024-21412/index.md) Microsoft Windows: Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability (due 2024-03-05; ransomware: Known)
- 2024-02-13 [CVE-2024-21351](https://erroneo.us/security/cve/CVE-2024-21351/index.md) Microsoft Windows: Microsoft Windows SmartScreen Security Feature Bypass Vulnerability (due 2024-03-05; ransomware: Unknown)
- 2024-01-10 [CVE-2023-29357](https://erroneo.us/security/cve/CVE-2023-29357/index.md) Microsoft SharePoint Server: Microsoft SharePoint Server Privilege Escalation Vulnerability (due 2024-01-31; ransomware: Known)
- 2023-11-16 [CVE-2023-36584](https://erroneo.us/security/cve/CVE-2023-36584/index.md) Microsoft Windows: Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability (due 2023-12-07; ransomware: Unknown)
- 2023-11-14 [CVE-2023-36036](https://erroneo.us/security/cve/CVE-2023-36036/index.md) Microsoft Windows: Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability (due 2023-12-05; ransomware: Unknown)
- 2023-11-14 [CVE-2023-36033](https://erroneo.us/security/cve/CVE-2023-36033/index.md) Microsoft Windows: Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability (due 2023-12-05; ransomware: Unknown)
- 2023-11-14 [CVE-2023-36025](https://erroneo.us/security/cve/CVE-2023-36025/index.md) Microsoft Windows: Microsoft Windows SmartScreen Security Feature Bypass Vulnerability (due 2023-12-05; ransomware: Unknown)
- 2023-10-10 [CVE-2023-41763](https://erroneo.us/security/cve/CVE-2023-41763/index.md) Microsoft Skype for Business: Microsoft Skype for Business Privilege Escalation Vulnerability (due 2023-10-31; ransomware: Unknown)
- 2023-10-10 [CVE-2023-36563](https://erroneo.us/security/cve/CVE-2023-36563/index.md) Microsoft WordPad: Microsoft WordPad Information Disclosure Vulnerability (due 2023-10-31; ransomware: Unknown)
- 2023-10-04 [CVE-2023-28229](https://erroneo.us/security/cve/CVE-2023-28229/index.md) Microsoft Windows CNG Key Isolation Service: Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability (due 2023-10-25; ransomware: Unknown)

Pages: https://erroneo.us/security/vendor/microsoft/index.md · https://erroneo.us/security/vendor/microsoft/2/index.md

---
Source page: https://erroneo.us/security/vendor/microsoft/2/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt