Microsoft

Operational audit scripts and mitigation intelligence for 174 known Microsoft vulnerabilities.

CVSS 9.8

CVE-2025-21311

Target: Windows - NTLM
CVSS 9.8

CVE-2025-21298

Target: Windows - OLE
CVSS 9.8

CVE-2025-21307

Target: Windows - Reliable Multicast Transport Driver (RMCAST)
CVSS 9.3

CVE-2025-29814

Target: Microsoft Partner Center
CVSS 9.1

CVE-2025-1111

Target: Microsoft Exchange Server - Exchange
CVSS 9

CVE-2025-21198

Target: Microsoft HPC Pack
CVSS 8.8

CVE-2025-21243

Target: Windows - Telephony Service
CVSS 8.8

CVE-2025-24051

Target: Windows - Routing and Remote Access Service (RRAS)
CVSS 8.8

CVE-2025-21368

Target: Windows - IIS
CVSS 8.8

CVE-2025-21286

Target: Windows - Telephony Service
CVSS 8.8

CVE-2025-21369

Target: Windows - IIS
CVSS 8.8

CVE-2025-21371

Target: Windows - Telephony Service
CVSS 8.8

CVE-2025-21237

Target: Windows - Telephony Service
CVSS 8.8

CVE-2025-21306

Target: Windows - Telephony Service
CVSS 8.8

CVE-2025-21303

Target: Windows - Telephony Service
CVSS 8.8

CVE-2025-21339

Target: Windows - Telephony Service
CVSS 8.8

CVE-2025-21208

Target: Windows - Routing and Remote Access Service (RRAS)
CVSS 8.8

CVE-2025-21244

Target: Windows - Telephony Service
CVSS 8.8

CVE-2025-21236

Target: Windows - Telephony Service
CVSS 8.8

CVE-2025-21407

Target: Windows - Telephony Service
CVSS 8.8

CVE-2025-21241

Target: Windows - Telephony Service
CVSS 8.8

CVE-2025-21245

Target: Windows - Telephony Service
CVSS 8.8

CVE-2025-22894

Target: Defense Platform Home Edition - Windows Messaging Channel
CVSS 8.8

CVE-2025-21305

Target: Windows - Telephony Service
CVSS 8.8

CVE-2025-21409

Target: Windows - Telephony Service
CVSS 8.8

CVE-2025-21201

Target: Windows - Telephony Server
CVSS 8.8

CVE-2025-21406

Target: Windows - Telephony Service
CVSS 8.8

CVE-2025-21266

Target: Windows - Telephony Service
CVSS 8.8

CVE-2025-21239

Target: Windows - Telephony Service
CVSS 8.8

CVE-2025-21411

Target: Windows - Telephony Service
CVSS 8.8

CVE-2025-21302

Target: Windows - Telephony Service
CVSS 8.8

CVE-2025-21246

Target: Windows - Telephony Service
CVSS 8.8

CVE-2025-21342

Target: Microsoft Edge - Chromium-based
CVSS 8.8

CVE-2025-21408

Target: Microsoft Edge - Chromium-based
CVSS 8.8

CVE-2025-21200

Target: Windows - Telephony Service
CVSS 8.8

CVE-2025-21250

Target: Windows - Telephony Service
CVSS 8.8

CVE-2025-21223

Target: Windows - Telephony Service
CVSS 8.8

CVE-2025-21410

Target: Windows - Routing and Remote Access Service (RRAS)
CVSS 8.8

CVE-2025-24056

Target: Windows - Telephony Server
CVSS 8.8

CVE-2025-21385

Target: Microsoft Purview
CVSS 8.8

CVE-2025-21240

Target: Windows - Telephony Service
CVSS 8.8

CVE-2025-21413

Target: Windows - Telephony Service
CVSS 8.8

CVE-2025-21190

Target: Windows - Telephony Service
CVSS 8.8

CVE-2025-21292

Target: Windows - Search Service
CVSS 8.8

CVE-2025-21291

Target: Windows - Direct Show
CVSS 8.8

CVE-2025-21282

Target: Windows - Telephony Service
CVSS 8.8

CVE-2025-21273

Target: Windows - Telephony Service
CVSS 8.8

CVE-2025-21417

Target: Windows - Telephony Service
CVSS 8.8

CVE-2025-21252

Target: Windows - Telephony Service
CVSS 8.8

CVE-2025-21248

Target: Windows - Telephony Service
CVSS 8.8

CVE-2025-21238

Target: Windows - Telephony Service
CVSS 8.8

CVE-2025-21233

Target: Windows - Telephony Service
CVSS 8.7

CVE-2025-21177

Target: Dynamics 365 - Sales
CVSS 8.7

CVE-2025-29807

Target: Microsoft Dataverse
CVSS 8.6

CVE-2025-21355

Target: Bing - Search Engine
CVSS 8.4

CVE-2025-24084

Target: Windows - Windows Subsystem for Linux
CVSS 8.4

CVE-2025-21362

Target: Office - Excel
CVSS 8.4

CVE-2025-21354

Target: Office - Excel
CVSS 8.2

CVE-2025-21396

Target: Microsoft Account - Authentication
CVSS 8.1

CVE-2025-21309

Target: Windows - Remote Desktop Services
CVSS 8.1

CVE-2025-21297

Target: Windows - Remote Desktop Services
CVSS 8.1

CVE-2025-21294

Target: Windows - IIS
CVSS 8.1

CVE-2025-24035

Target: Windows - Remote Desktop Services
CVSS 8.1

CVE-2025-21224

Target: Windows - Line Printer Daemon (LPD) Service
CVSS 8.1

CVE-2025-24045

Target: Windows - Remote Desktop Services
CVSS 8.1

CVE-2025-21376

Target: Windows - Lightweight Directory Access Protocol (LDAP)
CVSS 8

CVE-2025-21400

Target: SharePoint Server
CVSS 7.8

CVE-2025-29795

Target: Microsoft Edge - Chromium-based
CVSS 7.8

CVE-2025-21361

Target: Office 365 - Outlook
CVSS 7.8

CVE-2025-21370

Target: Windows - Virtualization-Based Security (VBS) Enclave
CVSS 7.8

CVE-2025-21345

Target: Microsoft Office - Visio
CVSS 7.8

CVE-2025-21395

Target: Microsoft Office - Access
CVSS 7.8

CVE-2025-21402

Target: Microsoft Office - OneNote
CVSS 7.8

CVE-2025-21325

Target: Windows - Secure Kernel
CVSS 7.8

CVE-2025-21304

Target: Windows - DWM Core Library
CVSS 7.8

CVE-2025-24082

Target: Office - Excel
CVSS 7.8

CVE-2025-21275

Target: Windows - App Package Installer
CVSS 7.8

CVE-2025-21234

Target: Windows - PrintWorkflowUserSvc
CVSS 7.8

CVE-2025-21420

Target: Windows - Disk Cleanup Tool
CVSS 7.8

CVE-2025-21315

Target: Windows - Brokering File System
CVSS 7.8

CVE-2025-21281

Target: Windows - COM
CVSS 7.8

CVE-2025-21334

Actively Exploited

Target: Windows - Hyper-V NT Kernel Integration
CVSS 7.8

CVE-2025-21335

Actively Exploited

Target: Windows - Hyper-V NT Kernel Integration
CVSS 7.8

CVE-2025-21187

Target: Microsoft Power Automate
CVSS 7.8

CVE-2025-21344

Target: SharePoint Server
CVSS 7.8

CVE-2025-21322

Target: Microsoft PC Manager
CVSS 7.8

CVE-2025-21358

Target: Windows - Core Messaging
CVSS 7.8

CVE-2025-21359

Target: Windows - Kernel
CVSS 7.8

CVE-2025-21367

Target: Windows - Win32 Kernel Subsystem
CVSS 7.8

CVE-2025-21373

Target: Windows - Installer
CVSS 7.8

CVE-2025-21186

Target: Microsoft Office - Access
CVSS 7.8

CVE-2025-21381

Target: Office - Excel
CVSS 7.8

CVE-2025-21383

Target: Office - Excel
CVSS 7.8

CVE-2025-21386

Target: Office - Excel
CVSS 7.8

CVE-2025-21387

Target: Office - Excel
CVSS 7.8

CVE-2025-21390

Target: Office - Excel
CVSS 7.8

CVE-2025-21392

Target: Microsoft Office
CVSS 7.8

CVE-2025-21394

Target: Office - Excel
CVSS 7.8

CVE-2025-21397

Target: Microsoft Office
CVSS 7.8

CVE-2025-21235

Target: Windows - PrintWorkflowUserSvc
CVSS 7.8

CVE-2025-21356

Target: Microsoft Office - Visio
CVSS 7.8

CVE-2025-21378

Target: Windows - CSC Service
CVSS 7.8

CVE-2025-21382

Target: Windows - Graphics Component
CVSS 7.8

CVE-2025-21418

Actively Exploited

Target: Windows - Ancillary Function Driver for WinSock
CVSS 7.8

CVE-2025-21363

Target: Office Suite - Microsoft Word
CVSS 7.8

CVE-2025-21364

Target: Office - Excel
CVSS 7.8

CVE-2025-21365

Target: Microsoft Office
CVSS 7.8

CVE-2025-21366

Target: Microsoft Office - Access
CVSS 7.8

CVE-2025-21372

Target: Windows - Brokering File System
CVSS 7.8

CVE-2025-21271

Target: Windows - Cloud Files Mini Filter Driver
CVSS 7.8

CVE-2025-24066

Target: Windows - Kernel-Mode Drivers
CVSS 7.8

CVE-2025-21287

Target: Windows - Installer
CVSS 7.8

CVE-2025-24080

Target: Microsoft Office - Core
CVSS 7.8

CVE-2025-21333

Actively Exploited

Target: Windows Hyper-V - NT Kernel Integration VSP
CVSS 7.8

CVE-2025-24081

Target: Office - Excel
CVSS 7.8

CVE-2025-21180

Target: Windows - exFAT File System
CVSS 7.8

CVE-2025-24044

Target: Windows - Win32 Kernel Subsystem
CVSS 7.8

CVE-2025-24046

Target: Microsoft Streaming Service
CVSS 7.8

CVE-2025-24048

Target: Windows - Hyper-V
CVSS 7.8

CVE-2025-24050

Target: Windows - Hyper-V
CVSS 7.8

CVE-2025-24057

Target: Microsoft Office - Core
CVSS 7.8

CVE-2025-24059

Target: Windows - Common Log File System Driver
CVSS 7.8

CVE-2025-24061

Target: Windows - Mark of the Web (MOTW)
CVSS 7.8

CVE-2025-24067

Target: Microsoft Streaming Service
CVSS 7.8

CVE-2025-24072

Target: Windows - Local Security Authority Server
CVSS 7.8

CVE-2025-24075

Target: Office - Excel
CVSS 7.8

CVE-2025-24077

Target: Microsoft Office - Word
CVSS 7.8

CVE-2025-24079

Target: Microsoft Office - Word
CVSS 7.8

CVE-2025-24083

Target: Microsoft Office - Core
CVSS 7.8

CVE-2025-24985

Actively Exploited

Target: Windows - Fast FAT Driver
CVSS 7.8

CVE-2025-24993

Actively Exploited

Target: Windows - NTFS
CVSS 7.8

CVE-2025-26629

Target: Microsoft Office - Core
CVSS 7.8

CVE-2025-26630

Target: Microsoft Office - Access
CVSS 7.8

CVE-2025-21360

Target: Microsoft AutoUpdate - Elevation of Privilege
CVSS 7.7

CVE-2025-2230

Target: Windows - Authentication Component
CVSS 7.5

CVE-2025-21290

Target: Windows - Microsoft Message Queuing (MSMQ)
CVSS 7.5

CVE-2025-21330

Target: Windows - Remote Desktop Services
CVSS 7.5

CVE-2025-21289

Target: Windows - Microsoft Message Queuing (MSMQ)
CVSS 7.5

CVE-2025-21300

Target: Windows - Universal Plug and Play (UPnP) Device Host
CVSS 7.5

CVE-2025-21343

Target: Windows - Web Threat Defense User Service
CVSS 7.5

CVE-2025-21230

Target: Windows - Microsoft Message Queuing (MSMQ)
CVSS 7.5

CVE-2025-21270

Target: Windows - Microsoft Message Queuing (MSMQ)
CVSS 7.5

CVE-2025-21220

Target: Windows - Microsoft Message Queuing
CVSS 7.5

CVE-2025-21276

Target: Windows - MapUrlToZone
CVSS 7.5

CVE-2025-21351

Target: Windows - Active Directory Domain Services
CVSS 7.5

CVE-2025-21207

Target: Windows - Connected Devices Platform Service
CVSS 7.5

CVE-2025-21218

Target: Windows - Kerberos
CVSS 7.5

CVE-2025-21251

Target: Windows - Microsoft Message Queuing (MSMQ)
CVSS 7.5

CVE-2025-21389

Target: Windows - Universal Plug and Play (UPnP) Device Host
CVSS 7.5

CVE-2025-21181

Target: Windows - Microsoft Message Queuing (MSMQ)
CVSS 7.5

CVE-2025-25199

Target: Go - Crypto Winnative
CVSS 7.5

CVE-2025-21277

Target: Windows - Microsoft Message Queuing (MSMQ)
CVSS 7.5

CVE-2025-26634

Target: Windows - Core Messaging
CVSS 7.5

CVE-2025-21285

Target: Windows - Microsoft Message Queuing (MSMQ)
CVSS 7.4

CVE-2025-21182

Target: Windows - ReFS Deduplication Service
CVSS 7.4

CVE-2025-21399

Target: Microsoft Edge - Chromium-based
CVSS 7.4

CVE-2025-21183

Target: Windows - ReFS Deduplication Service
CVSS 7.3

CVE-2025-21331

Target: Windows - Installer
CVSS 7.3

CVE-2025-24076

Target: Windows - Cross Device Service
CVSS 7.3

CVE-2025-24994

Target: Windows - Cross Device Service
CVSS 7.2

CVE-2025-24053

Target: Microsoft Dataverse
CVSS 7.2

CVE-2025-21348

Target: SharePoint Server
CVSS 7.1

CVE-2025-21419

Target: Windows - Setup Files
CVSS 7.1

CVE-2025-21391

Actively Exploited

Target: Windows - Storage
CVSS 7.1

CVE-2025-25008

Target: Windows - File System
CVSS 7.1

CVE-2025-21194

Target: Surface - Security Feature
CVSS 7.1

CVE-2025-21346

Target: Microsoft Office - Security Features
CVSS 7.1

CVE-2025-21299

Target: Windows - Kerberos
CVSS 7

CVE-2025-24983

Actively Exploited

Target: Windows - Win32 Kernel Subsystem
CVSS 7

CVE-2025-24078

Target: Microsoft Office - Word
CVSS 7

CVE-2025-21414

Target: Windows - Core Messaging
CVSS 7

CVE-2025-26633

Actively Exploited

Target: Microsoft Management Console
CVSS 7

CVE-2025-24036

Target: Microsoft AutoUpdate - Elevation of Privilege
CVSS 7

CVE-2025-21184

Target: Windows - Core Messaging