--- title: "Microsoft: known exploited vulnerabilities" url: https://erroneo.us/security/vendor/microsoft/ description: "Every Microsoft vulnerability in CISA's Known Exploited Vulnerabilities catalog since October 2023 (122), newest first, with due dates and fixes." type: vendor section: "Security Digest" date_modified: 2026-10-13 publisher: erroneo.us author: erroneo.us Security Desk license: All rights reserved. Quote with attribution and a link. --- # Microsoft: known exploited vulnerabilities - 2026-10-13 [CVE-2026-96951](https://erroneo.us/security/cve/CVE-2026-96951/index.md) Microsoft Windows: Microsoft Windows Command Injection Vulnerability (due 2026-10-16; ransomware: Unknown) - 2026-09-25 [CVE-2026-65660](https://erroneo.us/security/cve/CVE-2026-65660/index.md) Microsoft SharePoint: Microsoft SharePoint Code Injection Vulnerability (due 2026-09-28; ransomware: Unknown) - 2026-09-08 [CVE-2026-85880](https://erroneo.us/security/cve/CVE-2026-85880/index.md) Microsoft Windows: Microsoft Windows Heap-Based Buffer Overflow Vulnerability (due 2026-09-22; ransomware: Unknown) - 2026-09-08 [CVE-2026-81963](https://erroneo.us/security/cve/CVE-2026-81963/index.md) Microsoft Windows: Microsoft Windows Link Following Vulnerability (due 2026-09-22; ransomware: Unknown) - 2026-08-26 [CVE-2019-1068](https://erroneo.us/security/cve/CVE-2019-1068/index.md) Microsoft SQL Server: Microsoft SQL Server Remote Code Execution Vulnerability (due 2026-08-29; ransomware: Unknown) - 2026-08-18 [CVE-2026-55040](https://erroneo.us/security/cve/CVE-2026-55040/index.md) Microsoft SharePoint: Microsoft SharePoint Weak Authentication Vulnerability (due 2026-08-21; ransomware: Unknown) - 2026-08-18 [CVE-2026-33824](https://erroneo.us/security/cve/CVE-2026-33824/index.md) Microsoft Internet Key Exchange (IKE) Service Extensions: Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability (due 2026-08-21; ransomware: Unknown) - 2026-08-11 [CVE-2026-68820](https://erroneo.us/security/cve/CVE-2026-68820/index.md) Microsoft Windows Ancillary Function Driver for WinSock : Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability (due 2026-08-25; ransomware: Unknown) - 2026-07-22 [CVE-2026-50522](https://erroneo.us/security/cve/CVE-2026-50522/index.md) Microsoft SharePoint: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability (due 2026-07-25; ransomware: Unknown) - 2026-07-16 [CVE-2026-58644](https://erroneo.us/security/cve/CVE-2026-58644/index.md) Microsoft SharePoint: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability (due 2026-07-19; ransomware: Unknown) - 2026-07-14 [CVE-2026-56164](https://erroneo.us/security/cve/CVE-2026-56164/index.md) Microsoft SharePoint Server: Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability (due 2026-07-17; ransomware: Unknown) - 2026-07-14 [CVE-2026-56155](https://erroneo.us/security/cve/CVE-2026-56155/index.md) Microsoft Active Directory Federation Services: Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability (due 2026-07-28; ransomware: Unknown) - 2026-07-01 [CVE-2026-45659](https://erroneo.us/security/cve/CVE-2026-45659/index.md) Microsoft SharePoint Server: Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability (due 2026-07-04; ransomware: Known) - 2026-05-20 [CVE-2026-45498](https://erroneo.us/security/cve/CVE-2026-45498/index.md) Microsoft Defender: Microsoft Defender Denial of Service Vulnerability (due 2026-06-03; ransomware: Unknown) - 2026-05-20 [CVE-2026-41091](https://erroneo.us/security/cve/CVE-2026-41091/index.md) Microsoft Defender: Microsoft Defender Link Following Vulnerability (due 2026-06-03; ransomware: Unknown) - 2026-05-20 [CVE-2010-0806](https://erroneo.us/security/cve/CVE-2010-0806/index.md) Microsoft Internet Explorer: Microsoft Internet Explorer Use-After-Free Vulnerability (due 2026-06-03; ransomware: Unknown) - 2026-05-20 [CVE-2010-0249](https://erroneo.us/security/cve/CVE-2010-0249/index.md) Microsoft Internet Explorer: Microsoft Internet Explorer Use-After-Free Vulnerability (due 2026-06-03; ransomware: Unknown) - 2026-05-20 [CVE-2009-1537](https://erroneo.us/security/cve/CVE-2009-1537/index.md) Microsoft DirectX: Microsoft DirectX NULL Byte Overwrite Vulnerability (due 2026-06-03; ransomware: Unknown) - 2026-05-20 [CVE-2008-4250](https://erroneo.us/security/cve/CVE-2008-4250/index.md) Microsoft Windows: Microsoft Windows Buffer Overflow Vulnerability (due 2026-06-03; ransomware: Unknown) - 2026-05-15 [CVE-2026-42897](https://erroneo.us/security/cve/CVE-2026-42897/index.md) Microsoft Microsoft: Microsoft Exchange Server Cross-Site Scripting Vulnerability (due 2026-05-29; ransomware: Unknown) - 2026-04-28 [CVE-2026-32202](https://erroneo.us/security/cve/CVE-2026-32202/index.md) Microsoft Windows: Microsoft Windows Protection Mechanism Failure Vulnerability (due 2026-05-12; ransomware: Unknown) - 2026-04-22 [CVE-2026-33825](https://erroneo.us/security/cve/CVE-2026-33825/index.md) Microsoft Defender: Microsoft Defender Insufficient Granularity of Access Control Vulnerability (due 2026-05-06; ransomware: Known) - 2026-04-14 [CVE-2026-32201](https://erroneo.us/security/cve/CVE-2026-32201/index.md) Microsoft SharePoint Server: Microsoft SharePoint Server Improper Input Validation Vulnerability (due 2026-04-28; ransomware: Unknown) - 2026-04-14 [CVE-2009-0238](https://erroneo.us/security/cve/CVE-2009-0238/index.md) Microsoft Office: Microsoft Office Remote Code Execution (due 2026-04-28; ransomware: Unknown) - 2026-04-13 [CVE-2025-60710](https://erroneo.us/security/cve/CVE-2025-60710/index.md) Microsoft Windows: Microsoft Windows Link Following Vulnerability (due 2026-04-27; ransomware: Known) - 2026-04-13 [CVE-2023-36424](https://erroneo.us/security/cve/CVE-2023-36424/index.md) Microsoft Windows: Microsoft Windows Out-of-Bounds Read Vulnerability (due 2026-04-27; ransomware: Unknown) - 2026-04-13 [CVE-2023-21529](https://erroneo.us/security/cve/CVE-2023-21529/index.md) Microsoft Exchange Server: Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability (due 2026-04-27; ransomware: Known) - 2026-04-13 [CVE-2012-1854](https://erroneo.us/security/cve/CVE-2012-1854/index.md) Microsoft Visual Basic for Applications (VBA): Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability (due 2026-04-27; ransomware: Unknown) - 2026-03-18 [CVE-2026-20963](https://erroneo.us/security/cve/CVE-2026-20963/index.md) Microsoft SharePoint: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability (due 2026-03-21; ransomware: Unknown) - 2026-02-17 [CVE-2008-0015](https://erroneo.us/security/cve/CVE-2008-0015/index.md) Microsoft Windows: Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability (due 2026-03-10; ransomware: Unknown) - 2026-02-12 [CVE-2024-43468](https://erroneo.us/security/cve/CVE-2024-43468/index.md) Microsoft Configuration Manager: Microsoft Configuration Manager SQL Injection Vulnerability (due 2026-03-05; ransomware: Unknown) - 2026-02-10 [CVE-2026-21533](https://erroneo.us/security/cve/CVE-2026-21533/index.md) Microsoft Windows: Microsoft Windows Improper Privilege Management Vulnerability (due 2026-03-03; ransomware: Unknown) - 2026-02-10 [CVE-2026-21525](https://erroneo.us/security/cve/CVE-2026-21525/index.md) Microsoft Windows: Microsoft Windows NULL Pointer Dereference Vulnerability (due 2026-03-03; ransomware: Unknown) - 2026-02-10 [CVE-2026-21519](https://erroneo.us/security/cve/CVE-2026-21519/index.md) Microsoft Windows: Microsoft Windows Type Confusion Vulnerability (due 2026-03-03; ransomware: Unknown) - 2026-02-10 [CVE-2026-21514](https://erroneo.us/security/cve/CVE-2026-21514/index.md) Microsoft Office: Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability (due 2026-03-03; ransomware: Unknown) - 2026-02-10 [CVE-2026-21513](https://erroneo.us/security/cve/CVE-2026-21513/index.md) Microsoft Windows: Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability (due 2026-03-03; ransomware: Unknown) - 2026-02-10 [CVE-2026-21510](https://erroneo.us/security/cve/CVE-2026-21510/index.md) Microsoft Windows: Microsoft Windows Shell Protection Mechanism Failure Vulnerability (due 2026-03-03; ransomware: Unknown) - 2026-01-26 [CVE-2026-21509](https://erroneo.us/security/cve/CVE-2026-21509/index.md) Microsoft Office: Microsoft Office Security Feature Bypass Vulnerability (due 2026-02-16; ransomware: Unknown) - 2026-01-13 [CVE-2026-20805](https://erroneo.us/security/cve/CVE-2026-20805/index.md) Microsoft Windows: Microsoft Windows Information Disclosure Vulnerability (due 2026-02-03; ransomware: Unknown) - 2026-01-07 [CVE-2009-0556](https://erroneo.us/security/cve/CVE-2009-0556/index.md) Microsoft Office: Microsoft Office PowerPoint Code Injection Vulnerability (due 2026-01-28; ransomware: Unknown) - 2025-12-09 [CVE-2025-62221](https://erroneo.us/security/cve/CVE-2025-62221/index.md) Microsoft Windows: Microsoft Windows Use After Free Vulnerability (due 2025-12-30; ransomware: Unknown) - 2025-11-12 [CVE-2025-62215](https://erroneo.us/security/cve/CVE-2025-62215/index.md) Microsoft Windows: Microsoft Windows Race Condition Vulnerability (due 2025-12-03; ransomware: Unknown) - 2025-10-24 [CVE-2025-59287](https://erroneo.us/security/cve/CVE-2025-59287/index.md) Microsoft Windows: Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability (due 2025-11-14; ransomware: Unknown) - 2025-10-20 [CVE-2025-33073](https://erroneo.us/security/cve/CVE-2025-33073/index.md) Microsoft Windows: Microsoft Windows SMB Client Improper Access Control Vulnerability (due 2025-11-10; ransomware: Unknown) - 2025-10-14 [CVE-2025-59230](https://erroneo.us/security/cve/CVE-2025-59230/index.md) Microsoft Windows: Microsoft Windows Improper Access Control Vulnerability (due 2025-11-04; ransomware: Unknown) - 2025-10-14 [CVE-2025-24990](https://erroneo.us/security/cve/CVE-2025-24990/index.md) Microsoft Windows: Microsoft Windows Untrusted Pointer Dereference Vulnerability (due 2025-11-04; ransomware: Unknown) - 2025-10-06 [CVE-2021-43226](https://erroneo.us/security/cve/CVE-2021-43226/index.md) Microsoft Windows: Microsoft Windows Privilege Escalation Vulnerability (due 2025-10-27; ransomware: Known) - 2025-10-06 [CVE-2013-3918](https://erroneo.us/security/cve/CVE-2013-3918/index.md) Microsoft Windows: Microsoft Windows Out-of-Bounds Write Vulnerability (due 2025-10-27; ransomware: Unknown) - 2025-10-06 [CVE-2011-3402](https://erroneo.us/security/cve/CVE-2011-3402/index.md) Microsoft Windows: Microsoft Windows Remote Code Execution Vulnerability (due 2025-10-27; ransomware: Unknown) - 2025-10-06 [CVE-2010-3962](https://erroneo.us/security/cve/CVE-2010-3962/index.md) Microsoft Internet Explorer: Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability (due 2025-10-27; ransomware: Unknown) - 2025-08-12 [CVE-2013-3893](https://erroneo.us/security/cve/CVE-2013-3893/index.md) Microsoft Internet Explorer: Microsoft Internet Explorer Resource Management Errors Vulnerability (due 2025-09-02; ransomware: Unknown) - 2025-08-12 [CVE-2007-0671](https://erroneo.us/security/cve/CVE-2007-0671/index.md) Microsoft Office: Microsoft Office Excel Remote Code Execution Vulnerability (due 2025-09-02; ransomware: Unknown) - 2025-07-22 [CVE-2025-49706](https://erroneo.us/security/cve/CVE-2025-49706/index.md) Microsoft SharePoint: Microsoft SharePoint Improper Authentication Vulnerability (due 2025-07-23; ransomware: Known) - 2025-07-22 [CVE-2025-49704](https://erroneo.us/security/cve/CVE-2025-49704/index.md) Microsoft SharePoint: Microsoft SharePoint Code Injection Vulnerability (due 2025-07-23; ransomware: Known) - 2025-07-20 [CVE-2025-53770](https://erroneo.us/security/cve/CVE-2025-53770/index.md) Microsoft SharePoint: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability (due 2025-07-21; ransomware: Known) - 2025-06-10 [CVE-2025-33053](https://erroneo.us/security/cve/CVE-2025-33053/index.md) Microsoft Windows: Microsoft Windows External Control of File Name or Path Vulnerability (due 2025-07-01; ransomware: Unknown) - 2025-05-13 [CVE-2025-32709](https://erroneo.us/security/cve/CVE-2025-32709/index.md) Microsoft Windows: Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability (due 2025-06-03; ransomware: Unknown) - 2025-05-13 [CVE-2025-32706](https://erroneo.us/security/cve/CVE-2025-32706/index.md) Microsoft Windows: Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability (due 2025-06-03; ransomware: Unknown) - 2025-05-13 [CVE-2025-32701](https://erroneo.us/security/cve/CVE-2025-32701/index.md) Microsoft Windows: Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability (due 2025-06-03; ransomware: Unknown) - 2025-05-13 [CVE-2025-30400](https://erroneo.us/security/cve/CVE-2025-30400/index.md) Microsoft Windows: Microsoft Windows DWM Core Library Use-After-Free Vulnerability (due 2025-06-03; ransomware: Unknown) - 2025-05-13 [CVE-2025-30397](https://erroneo.us/security/cve/CVE-2025-30397/index.md) Microsoft Windows: Microsoft Windows Scripting Engine Type Confusion Vulnerability (due 2025-06-03; ransomware: Unknown) - 2025-04-17 [CVE-2025-24054](https://erroneo.us/security/cve/CVE-2025-24054/index.md) Microsoft Windows: Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability (due 2025-05-08; ransomware: Unknown) - 2025-04-08 [CVE-2025-29824](https://erroneo.us/security/cve/CVE-2025-29824/index.md) Microsoft Windows: Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability (due 2025-04-29; ransomware: Known) - 2025-03-11 [CVE-2025-26633](https://erroneo.us/security/cve/CVE-2025-26633/index.md) Microsoft Windows: Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability (due 2025-04-01; ransomware: Known) - 2025-03-11 [CVE-2025-24993](https://erroneo.us/security/cve/CVE-2025-24993/index.md) Microsoft Windows: Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability (due 2025-04-01; ransomware: Unknown) - 2025-03-11 [CVE-2025-24991](https://erroneo.us/security/cve/CVE-2025-24991/index.md) Microsoft Windows: Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability (due 2025-04-01; ransomware: Unknown) - 2025-03-11 [CVE-2025-24985](https://erroneo.us/security/cve/CVE-2025-24985/index.md) Microsoft Windows: Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability (due 2025-04-01; ransomware: Unknown) - 2025-03-11 [CVE-2025-24984](https://erroneo.us/security/cve/CVE-2025-24984/index.md) Microsoft Windows: Microsoft Windows NTFS Information Disclosure Vulnerability (due 2025-04-01; ransomware: Unknown) - 2025-03-11 [CVE-2025-24983](https://erroneo.us/security/cve/CVE-2025-24983/index.md) Microsoft Windows: Microsoft Windows Win32k Use-After-Free Vulnerability (due 2025-04-01; ransomware: Unknown) - 2025-03-03 [CVE-2018-8639](https://erroneo.us/security/cve/CVE-2018-8639/index.md) Microsoft Windows: Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability (due 2025-03-24; ransomware: Known) - 2025-02-25 [CVE-2024-49035](https://erroneo.us/security/cve/CVE-2024-49035/index.md) Microsoft Partner Center: Microsoft Partner Center Improper Access Control Vulnerability (due 2025-03-18; ransomware: Unknown) - 2025-02-21 [CVE-2025-24989](https://erroneo.us/security/cve/CVE-2025-24989/index.md) Microsoft Power Pages: Microsoft Power Pages Improper Access Control Vulnerability (due 2025-03-14; ransomware: Unknown) - 2025-02-11 [CVE-2025-21418](https://erroneo.us/security/cve/CVE-2025-21418/index.md) Microsoft Windows: Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability (due 2025-03-04; ransomware: Unknown) - 2025-02-11 [CVE-2025-21391](https://erroneo.us/security/cve/CVE-2025-21391/index.md) Microsoft Windows: Microsoft Windows Storage Link Following Vulnerability (due 2025-03-04; ransomware: Unknown) - 2025-02-06 [CVE-2024-21413](https://erroneo.us/security/cve/CVE-2024-21413/index.md) Microsoft Office Outlook: Microsoft Outlook Improper Input Validation Vulnerability (due 2025-02-27; ransomware: Unknown) - 2025-02-04 [CVE-2024-29059](https://erroneo.us/security/cve/CVE-2024-29059/index.md) Microsoft .NET Framework: Microsoft .NET Framework Information Disclosure Vulnerability (due 2025-02-25; ransomware: Unknown) - 2025-01-14 [CVE-2025-21335](https://erroneo.us/security/cve/CVE-2025-21335/index.md) Microsoft Windows: Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability (due 2025-02-04; ransomware: Unknown) - 2025-01-14 [CVE-2025-21334](https://erroneo.us/security/cve/CVE-2025-21334/index.md) Microsoft Windows: Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability (due 2025-02-04; ransomware: Unknown) - 2025-01-14 [CVE-2025-21333](https://erroneo.us/security/cve/CVE-2025-21333/index.md) Microsoft Windows: Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability (due 2025-02-04; ransomware: Unknown) - 2024-12-16 [CVE-2024-35250](https://erroneo.us/security/cve/CVE-2024-35250/index.md) Microsoft Windows: Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability (due 2025-01-06; ransomware: Unknown) - 2024-12-10 [CVE-2024-49138](https://erroneo.us/security/cve/CVE-2024-49138/index.md) Microsoft Windows: Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability (due 2024-12-31; ransomware: Unknown) - 2024-11-12 [CVE-2024-49039](https://erroneo.us/security/cve/CVE-2024-49039/index.md) Microsoft Windows: Microsoft Windows Task Scheduler Privilege Escalation Vulnerability (due 2024-12-03; ransomware: Known) - 2024-11-12 [CVE-2024-43451](https://erroneo.us/security/cve/CVE-2024-43451/index.md) Microsoft Windows: Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability (due 2024-12-03; ransomware: Unknown) - 2024-10-22 [CVE-2024-38094](https://erroneo.us/security/cve/CVE-2024-38094/index.md) Microsoft SharePoint: Microsoft SharePoint Deserialization Vulnerability (due 2024-11-12; ransomware: Known) - 2024-10-15 [CVE-2024-30088](https://erroneo.us/security/cve/CVE-2024-30088/index.md) Microsoft Windows : Microsoft Windows Kernel TOCTOU Race Condition Vulnerability (due 2024-11-05; ransomware: Known) - 2024-10-08 [CVE-2024-43573](https://erroneo.us/security/cve/CVE-2024-43573/index.md) Microsoft Windows: Microsoft Windows MSHTML Platform Spoofing Vulnerability (due 2024-10-29; ransomware: Unknown) - 2024-10-08 [CVE-2024-43572](https://erroneo.us/security/cve/CVE-2024-43572/index.md) Microsoft Windows: Microsoft Windows Management Console Remote Code Execution Vulnerability (due 2024-10-29; ransomware: Unknown) - 2024-09-18 [CVE-2020-0618](https://erroneo.us/security/cve/CVE-2020-0618/index.md) Microsoft SQL Server: Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability (due 2024-10-09; ransomware: Known) - 2024-09-16 [CVE-2024-43461](https://erroneo.us/security/cve/CVE-2024-43461/index.md) Microsoft Windows: Microsoft Windows MSHTML Platform Spoofing Vulnerability (due 2024-10-07; ransomware: Unknown) - 2024-09-10 [CVE-2024-38226](https://erroneo.us/security/cve/CVE-2024-38226/index.md) Microsoft Publisher: Microsoft Publisher Protection Mechanism Failure Vulnerability (due 2024-10-01; ransomware: Unknown) - 2024-09-10 [CVE-2024-38217](https://erroneo.us/security/cve/CVE-2024-38217/index.md) Microsoft Windows: Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability (due 2024-10-01; ransomware: Unknown) - 2024-09-10 [CVE-2024-38014](https://erroneo.us/security/cve/CVE-2024-38014/index.md) Microsoft Windows: Microsoft Windows Installer Improper Privilege Management Vulnerability (due 2024-10-01; ransomware: Unknown) - 2024-08-21 [CVE-2021-31196](https://erroneo.us/security/cve/CVE-2021-31196/index.md) Microsoft Exchange Server: Microsoft Exchange Server Information Disclosure Vulnerability (due 2024-09-11; ransomware: Unknown) - 2024-08-13 [CVE-2024-38213](https://erroneo.us/security/cve/CVE-2024-38213/index.md) Microsoft Windows: Microsoft Windows SmartScreen Security Feature Bypass Vulnerability (due 2024-09-03; ransomware: Unknown) - 2024-08-13 [CVE-2024-38193](https://erroneo.us/security/cve/CVE-2024-38193/index.md) Microsoft Windows: Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability (due 2024-09-03; ransomware: Unknown) - 2024-08-13 [CVE-2024-38189](https://erroneo.us/security/cve/CVE-2024-38189/index.md) Microsoft Project: Microsoft Project Remote Code Execution Vulnerability (due 2024-09-03; ransomware: Unknown) - 2024-08-13 [CVE-2024-38178](https://erroneo.us/security/cve/CVE-2024-38178/index.md) Microsoft Windows: Microsoft Windows Scripting Engine Memory Corruption Vulnerability (due 2024-09-03; ransomware: Unknown) - 2024-08-13 [CVE-2024-38107](https://erroneo.us/security/cve/CVE-2024-38107/index.md) Microsoft Windows: Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability (due 2024-09-03; ransomware: Unknown) - 2024-08-13 [CVE-2024-38106](https://erroneo.us/security/cve/CVE-2024-38106/index.md) Microsoft Windows: Microsoft Windows Kernel Privilege Escalation Vulnerability (due 2024-09-03; ransomware: Unknown) - 2024-08-05 [CVE-2018-0824](https://erroneo.us/security/cve/CVE-2018-0824/index.md) Microsoft Windows: Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability (due 2024-08-26; ransomware: Unknown) Pages: https://erroneo.us/security/vendor/microsoft/index.md · https://erroneo.us/security/vendor/microsoft/2/index.md --- Source page: https://erroneo.us/security/vendor/microsoft/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt