Microsoft: vulnerabilidades explotadas
- 390vulnerabilidades explotadas
- 117usado por ransomware
- 13 oct 2026la última añadida
- Windows 173
- Internet Explorer 36
- Office 29
- Win32k 25
- Exchange Server 17
- SharePoint 10
- SharePoint Server 5
- Defender 5
- Word 4
- Open Management Infrastructure (OMI) 4
- .NET Framework 3
- Active Directory 3
- Silverlight 3
- Excel 3
- SQL Server 2
- Windows 2
- PowerPoint 2
- XML Core Services 2
- SMBv1 server 2
- Edge 2
- Edge and Internet Explorer 2
- DirectX Graphics Kernel (DXGKRNL) 2
- Graphics Device Interface (GDI) 2
- SMBv1 2
- MSHTML 2
- Enhanced Cryptographic Provider 2
- Internet Key Exchange (IKE) Service Extensions 1
- Windows Ancillary Function Driver for WinSock 1
- Active Directory Federation Services 1
- DirectX 1
| Añadido | Vulnerabilidad | Producto | Gravedad | Prob. de ataque |
|---|---|---|---|---|
| 13 oct 2026 | Command Injection | Windows | Alto 8,8 | 9,8% |
| 25 sept 2026 | Code Injection | SharePoint | Alto 8,8 | 8,2% |
| 8 sept 2026 | Link Following | Windows | Alto 7,8 | 0,4% |
| 8 sept 2026 | Heap-Based Buffer Overflow | Windows | Alto 7,8 | 0,4% |
| 26 ago 2026 | Remote Code Execution | SQL Server | Alto 8,8 | 57% |
| 18 ago 2026 | Double Free | Internet Key Exchange (IKE) Service Extensions | Crítica 9,8 | 77% |
| 18 ago 2026 | Weak Authentication | SharePoint | Crítica 9,1 | 70% |
| 11 ago 2026 | Windows Ancillary Function Driver for WinSock Use-After-Free | Windows Ancillary Function Driver for WinSock | Alto 7,0 | 0,3% |
| 22 jul 2026 | Deserialization of Untrusted Data Vulnerability | SharePoint | Crítica 9,8 | 3,0% |
| 16 jul 2026 | Deserialization of Untrusted Data | SharePoint | Crítica 9,8 | 16% |
| 14 jul 2026 | Insufficient Granularity of Access Control Vulnerability | Active Directory Federation Services | Alto 7,8 | 0,3% |
| 14 jul 2026 | Missing Authentication for Critical Function | SharePoint Server | Media 5,3 | 1,0% |
| 1 jul 2026 | Deserialization of Untrusted Data | SharePoint Server | Alto 8,8 | 80% |
| 20 may 2026 | Buffer Overflow | Windows | Crítica 9,8 | 99% |
| 20 may 2026 | NULL Byte Overwrite | DirectX | Alto 8,8 | 51% |
| 20 may 2026 | Use-After-Free | Internet Explorer | Alto 8,8 | 92% |
| 20 may 2026 | Use-After-Free | Internet Explorer | Alto 8,8 | 82% |
| 20 may 2026 | Link Following | Defender | Alto 7,8 | 8,2% |
| 20 may 2026 | Denial of Service | Defender | Media 4,0 | 63% |
| 15 may 2026 | Exchange Server Cross-Site Scripting | Microsoft | Alto 8,1 | 71% |
| 28 abr 2026 | Protection Mechanism Failure | Windows | Media 4,3 | 71% |
| 22 abr 2026 | Insufficient Granularity of Access Control | Defender | Alto 7,8 | 6,7% |
| 14 abr 2026 | Remote Code Execution | Office | Alto 8,8 | 43% |
| 14 abr 2026 | Improper Input Validation | SharePoint Server | Media 6,5 | 43% |
| 13 abr 2026 | Visual Basic for Applications Insecure Library Loading | Visual Basic for Applications (VBA) | Alto 7,8 | 21% |
| 13 abr 2026 | Deserialization of Untrusted Data | Exchange Server | Alto 8,8 | 59% |
| 13 abr 2026 | Out-of-Bounds Read | Windows | Alto 7,8 | 12% |
| 13 abr 2026 | Link Following | Windows | Alto 7,8 | 4,6% |
| 18 mar 2026 | Deserialization of Untrusted Data | SharePoint | Crítica 9,8 | 29% |
| 17 feb 2026 | Microsoft Windows Video ActiveX Control Remote Code Execution | Windows | Alto 8,8 | 77% |
| 12 feb 2026 | SQL Injection | Configuration Manager | Crítica 9,8 | 81% |
| 10 feb 2026 | Shell Protection Mechanism Failure | Windows | Alto 8,8 | 61% |
| 10 feb 2026 | MSHTML Framework Protection Mechanism Failure | Windows | Alto 8,8 | 16% |
| 10 feb 2026 | Word Reliance on Untrusted Inputs in a Security Decision | Office | Alto 7,8 | 1,6% |
| 10 feb 2026 | Type Confusion | Windows | Alto 7,8 | 2,5% |
| 10 feb 2026 | NULL Pointer Dereference | Windows | Media 6,2 | 4,9% |
| 10 feb 2026 | Improper Privilege Management | Windows | Alto 7,8 | 4,1% |
| 26 ene 2026 | Security Feature Bypass | Office | Alto 7,8 | 71% |
| 13 ene 2026 | Information Disclosure | Windows | Media 5,5 | 7,5% |
| 7 ene 2026 | PowerPoint Code Injection | Office | Alto 8,8 | 67% |
| 9 dic 2025 | Use After Free | Windows | Alto 7,8 | 2,5% |
| 12 nov 2025 | Race Condition | Windows | Alto 7,0 | 4,5% |
| 24 oct 2025 | Server Update Service (WSUS) Deserialization of Untrusted Data | Windows | Crítica 9,8 | >99,9% |
| 20 oct 2025 | SMB Client Improper Access Control | Windows | Alto 8,8 | 83% |
| 14 oct 2025 | Untrusted Pointer Dereference | Windows | Alto 7,8 | 6,4% |
| 14 oct 2025 | Improper Access Control | Windows | Alto 7,8 | 2,7% |
| 6 oct 2025 | Uninitialized Memory Corruption | Internet Explorer | Alto 8,1 | 97% |
| 6 oct 2025 | Remote Code Execution | Windows | Alto 8,8 | 78% |
| 6 oct 2025 | Out-of-Bounds Write | Windows | Alto 8,8 | 74% |
| 6 oct 2025 | Privilege Escalation | Windows | Alto 7,8 | 3,3% |
| 12 ago 2025 | Excel Remote Code Execution | Office | Alto 8,8 | 43% |
| 12 ago 2025 | Resource Management Errors | Internet Explorer | Alto 8,8 | 88% |
| 22 jul 2025 | Code Injection | SharePoint | Alto 8,8 | >99,9% |
| 22 jul 2025 | Improper Authentication | SharePoint | Media 6,5 | 99,1% |
| 20 jul 2025 | Deserialization of Untrusted Data | SharePoint | Crítica 9,8 | >99,9% |
| 10 jun 2025 | Microsoft Windows External Control of File Name or Path | Windows | Alto 8,8 | 87% |
| 13 may 2025 | Scripting Engine Type Confusion | Windows | Alto 7,5 | 27% |
| 13 may 2025 | DWM Core Library Use-After-Free | Windows | Alto 7,8 | 1,9% |
| 13 may 2025 | Common Log File System (CLFS) Driver Use-After-Free | Windows | Alto 7,8 | 1,4% |
| 13 may 2025 | Common Log File System (CLFS) Driver Heap-Based Buffer Overflow | Windows | Alto 7,8 | 2,3% |
| 13 may 2025 | Ancillary Function Driver for WinSock Use-After-Free | Windows | Alto 7,8 | 1,8% |
| 17 abr 2025 | NTLM Hash Disclosure Spoofing | Windows | Media 6,5 | 62% |
| 8 abr 2025 | Common Log File System (CLFS) Driver Use-After-Free | Windows | Alto 7,8 | 19% |
| 11 mar 2025 | Win32k Use-After-Free | Windows | Alto 7,0 | 1,9% |
| 11 mar 2025 | NTFS Information Disclosure | Windows | Media 4,6 | 2,0% |
| 11 mar 2025 | Fast FAT File System Driver Integer Overflow | Windows | Alto 7,8 | 3,9% |
| 11 mar 2025 | NTFS Out-Of-Bounds Read | Windows | Media 5,5 | 2,0% |
| 11 mar 2025 | NTFS Heap-Based Buffer Overflow | Windows | Alto 7,8 | 2,2% |
| 11 mar 2025 | Management Console (MMC) Improper Neutralization | Windows | Alto 7,0 | 30% |
| 3 mar 2025 | Win32k Improper Resource Shutdown or Release | Windows | Alto 8,4 | 22% |
| 25 feb 2025 | Improper Access Control | Partner Center | Alto 8,7 | 1,3% |
| 21 feb 2025 | Improper Access Control | Power Pages | Alto 8,2 | 1,6% |
| 11 feb 2025 | Storage Link Following | Windows | Alto 7,1 | 2,3% |
| 11 feb 2025 | Ancillary Function Driver for WinSock Heap-Based Buffer Overflow | Windows | Alto 7,8 | 2,1% |
| 6 feb 2025 | Outlook Improper Input Validation | Office Outlook | Crítica 9,8 | 95% |
| 4 feb 2025 | Information Disclosure | .NET Framework | Alto 7,5 | 99% |
| 14 ene 2025 | Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow | Windows | Alto 7,8 | 10% |
| 14 ene 2025 | Hyper-V NT Kernel Integration VSP Use-After-Free | Windows | Alto 7,8 | 1,6% |
| 14 ene 2025 | Hyper-V NT Kernel Integration VSP Use-After-Free | Windows | Alto 7,8 | 1,4% |
| 16 dic 2024 | Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability | Windows | Alto 7,8 | 25% |
| 10 dic 2024 | Common Log File System (CLFS) Driver Heap-Based Buffer Overflow | Windows | Alto 7,8 | 26% |
| 12 nov 2024 | NTLMv2 Hash Disclosure Spoofing | Windows | Media 6,5 | 84% |
| 12 nov 2024 | Task Scheduler Privilege Escalation | Windows | Alto 8,8 | 14% |
| 22 oct 2024 | Deserialization | SharePoint | Alto 7,2 | 51% |
| 15 oct 2024 | Windows Kernel TOCTOU Race Condition | Windows | Alto 7,0 | 68% |
| 8 oct 2024 | Management Console Remote Code Execution | Windows | Alto 7,8 | 67% |
| 8 oct 2024 | MSHTML Platform Spoofing | Windows | Media 6,5 | 46% |
| 18 sept 2024 | Reporting Services Remote Code Execution | SQL Server | Crítica 9,8 | 99,0% |
| 16 sept 2024 | MSHTML Platform Spoofing | Windows | Alto 8,8 | 54% |
| 10 sept 2024 | Installer Improper Privilege Management | Windows | Alto 7,8 | 6,3% |
| 10 sept 2024 | Mark of the Web (MOTW) Protection Mechanism Failure | Windows | Media 5,4 | 10% |
| 10 sept 2024 | Protection Mechanism Failure | Publisher | Alto 7,3 | 2,7% |
| 21 ago 2024 | Information Disclosure | Exchange Server | Alto 7,2 | 54% |
| 13 ago 2024 | Kernel Privilege Escalation | Windows | Alto 7,0 | 6,3% |
| 13 ago 2024 | Power Dependency Coordinator Privilege Escalation | Windows | Alto 7,8 | 1,6% |
| 13 ago 2024 | Scripting Engine Memory Corruption | Windows | Alto 7,5 | 41% |
| 13 ago 2024 | Remote Code Execution Vulnerability | Project | Alto 8,8 | 8,2% |
| 13 ago 2024 | Ancillary Function Driver for WinSock Privilege Escalation | Windows | Alto 7,8 | 29% |
| 13 ago 2024 | SmartScreen Security Feature Bypass | Windows | Media 6,5 | 14% |
| 5 ago 2024 | COM for Windows Deserialization of Untrusted Data | Windows | Alto 7,5 | 73% |
| 23 jul 2024 | Use-After-Free | Internet Explorer | Alto 8,8 | 79% |
| 9 jul 2024 | Windows Hyper-V Privilege Escalation | Windows | Alto 7,8 | 7,1% |
| 9 jul 2024 | MSHTML Platform Spoofing | Windows | Alto 7,5 | 84% |
| 13 jun 2024 | Error Reporting Service Improper Privilege Management | Windows | Alto 7,8 | 4,0% |
| 14 may 2024 | MSHTML Platform Security Feature Bypass | Windows | Alto 8,8 | 3,9% |
| 14 may 2024 | Microsoft DWM Core Library Privilege Escalation | DWM Core Library | Alto 7,8 | 5,7% |
| 30 abr 2024 | Security Feature Bypass | SmartScreen Prompt | Alto 8,8 | 45% |
| 23 abr 2024 | Print Spooler Privilege Escalation Vulnerability | Windows | Alto 7,8 | 15% |
| 26 mar 2024 | Code Injection | SharePoint Server | Alto 7,2 | 85% |
| 4 mar 2024 | Kernel Exposed IOCTL with Insufficient Access Control | Windows | Alto 7,8 | 60% |
| 29 feb 2024 | Untrusted Pointer Dereference | Streaming Service | Alto 8,4 | 22% |
| 15 feb 2024 | Privilege Escalation | Exchange Server | Crítica 9,8 | 13% |
| 13 feb 2024 | SmartScreen Security Feature Bypass | Windows | Alto 7,6 | 28% |
| 13 feb 2024 | Internet Shortcut Files Security Feature Bypass | Windows | Alto 8,1 | 99,4% |
| 10 ene 2024 | Privilege Escalation | SharePoint Server | Crítica 9,8 | >99,9% |
| 16 nov 2023 | Mark of the Web (MOTW) Security Feature Bypass | Windows | Media 5,4 | 3,3% |
| 14 nov 2023 | SmartScreen Security Feature Bypass | Windows | Alto 8,8 | 88% |
| 14 nov 2023 | Desktop Window Manager (DWM) Core Library Privilege Escalation | Windows | Alto 7,8 | 11% |
| 14 nov 2023 | Cloud Files Mini Filter Driver Privilege Escalation | Windows | Alto 7,8 | 17% |
| 10 oct 2023 | Information Disclosure | WordPad | Media 6,5 | 20% |
| 10 oct 2023 | Privilege Escalation | Skype for Business | Media 5,3 | 91% |
| 4 oct 2023 | Privilege Escalation | Windows CNG Key Isolation Service | Alto 7,0 | 1,7% |
| 12 sept 2023 | Information Disclosure | Word | Media 6,5 | 20% |
| 12 sept 2023 | Privilege Escalation | Streaming Service Proxy | Alto 7,8 | 28% |
| 9 ago 2023 | Denial-of-Service | .NET Core and Visual Studio | Alto 7,5 | 14% |
| 17 jul 2023 | Search Remote Code Execution | Windows | Alto 7,5 | 99,4% |
| 11 jul 2023 | MSHTML Platform Privilege Escalation | Windows | Alto 7,8 | 10,0% |
| 11 jul 2023 | Defender SmartScreen Security Feature Bypass | Windows | Alto 8,8 | 4,2% |
| 11 jul 2023 | Security Feature Bypass | Outlook | Alto 8,8 | 16% |
| 11 jul 2023 | Error Reporting Service Privilege Escalation | Windows | Alto 7,8 | 43% |
| 22 jun 2023 | Privilege Escalation | Win32k | Alto 7,8 | 14% |
| 9 may 2023 | Privilege Escalation | Win32k | Alto 7,8 | 41% |
| 11 abr 2023 | Common Log File System (CLFS) Driver Privilege Escalation | Windows | Alto 7,8 | 49% |
| 7 abr 2023 | Certificate Dialog Privilege Escalation | Windows | Alto 7,8 | 8,6% |
| 30 mar 2023 | Memory Corruption | Internet Explorer | Alto 8,8 | 71% |
| 14 mar 2023 | Outlook Privilege Escalation | Office | Crítica 9,8 | 97% |
| 14 mar 2023 | SmartScreen Security Feature Bypass | Windows | Media 4,4 | 78% |
| 14 feb 2023 | Publisher Security Feature Bypass | Office | Alto 7,3 | 12% |
| 14 feb 2023 | Graphic Component Privilege Escalation | Windows | Alto 7,8 | 5,6% |
| 14 feb 2023 | Common Log File System (CLFS) Driver Privilege Escalation | Windows | Alto 7,8 | 11% |
| 10 ene 2023 | Privilege Escalation | Exchange Server | Alto 8,8 | 77% |
| 10 ene 2023 | Advanced Local Procedure Call (ALPC) Privilege Escalation | Windows | Alto 8,8 | 34% |
| 13 dic 2022 | SmartScreen Security Feature Bypass | Defender | Media 5,4 | 76% |
| 14 nov 2022 | Mark of the Web (MOTW) Security Feature Bypass | Windows | Media 5,4 | 2,6% |
| 8 nov 2022 | Print Spooler Privilege Escalation | Windows | Alto 7,8 | 2,4% |
| 8 nov 2022 | Mark of the Web (MOTW) Security Feature Bypass | Windows | Media 5,4 | 1,9% |
| 8 nov 2022 | CNG Key Isolation Service Privilege Escalation | Windows | Alto 7,8 | 3,0% |
| 8 nov 2022 | Scripting Languages Remote Code Execution | Windows | Alto 8,8 | 25% |
| 11 oct 2022 | Privilege Escalation | Windows COM+ Event System Service | Alto 7,8 | 1,9% |
| 30 sept 2022 | Server-Side Request Forgery | Exchange Server | Alto 8,8 | >99,9% |
| 30 sept 2022 | Remote Code Execution | Exchange Server | Alto 8,0 | >99,9% |
| 15 sept 2022 | Remote Code Execution | Windows | Alto 7,8 | 90% |
| 14 sept 2022 | Common Log File System (CLFS) Driver Privilege Escalation | Windows | Alto 7,8 | 28% |
| 18 ago 2022 | Runtime Remote Code Execution | Windows | Alto 7,8 | 54% |
| 18 ago 2022 | Domain Services Privilege Escalation | Active Directory | Alto 8,8 | 84% |
| 9 ago 2022 | Support Diagnostic Tool (MSDT) Remote Code Execution | Windows | Alto 7,8 | 68% |
| 12 jul 2022 | Client Server Runtime Subsystem (CSRSS) Privilege Escalation | Windows | Alto 7,8 | 19% |
| 1 jul 2022 | LSA Spoofing | Windows | Alto 8,1 | 10% |
| 14 jun 2022 | Support Diagnostic Tool (MSDT) Remote Code Execution | Windows | Alto 7,8 | 99,2% |
| 8 jun 2022 | Malformed Object Pointer | Word | Alto 8,8 | 48% |
| 8 jun 2022 | Object Record Corruption | Office | Alto 7,8 | 53% |
| 8 jun 2022 | Buffer Overflow | Office | Alto 7,8 | 60% |
| 8 jun 2022 | Buffer Overflow | PowerPoint | Alto 7,8 | 59% |
| 8 jun 2022 | Authenticode Signature Verification Remote Code Execution | Windows | Alto 7,8 | 88% |
| 8 jun 2022 | Memory Corruption | XML Core Services | Alto 8,8 | 84% |
| 8 jun 2022 | Use-After-Free | Internet Explorer | Alto 8,1 | 80% |
| 8 jun 2022 | Buffer Overflow | Office | Alto 7,8 | 80% |
| 25 may 2022 | Double Dereference | Silverlight | Alto 7,8 | 79% |
| 25 may 2022 | Information Disclosure | Silverlight | Media 5,5 | 68% |
| 25 may 2022 | Information Disclosure | Internet Explorer | Media 6,5 | 50% |
| 25 may 2022 | Privilege Escalation | Internet Explorer | Alto 8,8 | 26% |
| 25 may 2022 | IME Japanese Privilege Escalation | Input Method Editor (IME) Japanese | Alto 7,8 | 55% |
| 25 may 2022 | Privilege Escalation | Internet Explorer | Alto 8,8 | 47% |
| 25 may 2022 | Remote Code Execution | Windows | Alto 8,8 | 60% |
| 25 may 2022 | TS WebProxy Directory Traversal | Windows | Alto 7,8 | 76% |
| 25 may 2022 | ASLR Bypass | Internet Explorer | Media 6,5 | 34% |
| 25 may 2022 | Remote Code Execution | Windows | Alto 7,8 | 49% |
| 25 may 2022 | Mount Manager Privilege Escalation | Windows | Media 6,6 | 4,1% |
| 25 may 2022 | Privilege Escalation | Win32k | Alto 8,8 | 15% |
| 25 may 2022 | Memory Corruption | Internet Explorer | Alto 8,8 | 45% |
| 25 may 2022 | Kernel Privilege Escalation | Windows | Alto 7,8 | 5,3% |
| 25 may 2022 | Runtime Remote Code Execution | Silverlight | Alto 8,8 | 69% |
| 25 may 2022 | Graphics Device Interface (GDI) Remote Code Execution | Windows | Alto 7,8 | 68% |
| 25 may 2022 | Open Type Font Remote Code Execution | Windows | Alto 8,8 | 65% |
| 24 may 2022 | Information Disclosure | Internet Explorer | Media 4,3 | 22% |
| 24 may 2022 | Messaging API Information Disclosure | Internet Explorer | Media 6,5 | 33% |
| 24 may 2022 | Information Disclosure | Internet Explorer and Edge | Media 6,5 | 26% |
| 24 may 2022 | Graphics Device Interface (GDI) Privilege Escalation | Windows | Alto 7,8 | 11% |
| 24 may 2022 | Information Disclosure | XML Core Services | Media 6,5 | 18% |
| 24 may 2022 | Windows SMBv1 Information Disclosure | SMBv1 server | Alto 7,5 | 99,7% |
| 24 may 2022 | Memory Corruption | Internet Explorer | Alto 8,8 | 29% |
| 24 may 2022 | Privilege Escalation | Internet Explorer | Alto 8,8 | 22% |
| 24 may 2022 | Search Remote Code Execution | Windows | Crítica 9,8 | 74% |
| 24 may 2022 | Kernel Privilege Escalation | Windows | Alto 7,8 | 4,2% |
| 23 may 2022 | Privilege Escalation | Win32k | Alto 7,8 | 3,0% |
| 23 may 2022 | Information Disclosure | Internet Explorer | Media 6,5 | 8,1% |
| 23 may 2022 | SMB Information Disclosure | Windows | Media 6,5 | 9,4% |
| 23 may 2022 | Privilege Escalation | Windows | Alto 7,8 | 2,3% |
| 23 may 2022 | AppX Deployment Service Privilege Escalation | Windows | Alto 7,8 | 1,7% |
| 23 may 2022 | AppX Deployment Extensions Privilege Escalation | Windows | Alto 7,8 | 3,6% |
| 23 may 2022 | Privilege Escalation | Update Notification Manager | Alto 7,8 | 2,4% |
| 23 may 2022 | Kernel Privilege Escalation | Windows | Alto 7,8 | 4,7% |
| 4 may 2022 | Use-After-Free | Internet Explorer | Alto 8,8 | 85% |
| 4 may 2022 | Privilege Escalation | Win32k | Alto 7,8 | 87% |
| 25 abr 2022 | Privilege Escalation | Win32k | Alto 7,8 | 1,6% |
| 25 abr 2022 | Privilege Escalation | Win32k | Alto 7,8 | 1,6% |
| 25 abr 2022 | User Profile Service Privilege Escalation | Windows | Alto 7,0 | 2,4% |
| 25 abr 2022 | User Profile Service Privilege Escalation | Windows | Alto 7,0 | 17% |
| 19 abr 2022 | Print Spooler Privilege Escalation | Windows | Alto 7,8 | 18% |
| 13 abr 2022 | Memory Corruption | Internet Explorer | Alto 8,8 | 51% |
| 13 abr 2022 | CLFS Driver Privilege Escalation | Windows | Alto 7,8 | 7,1% |
| 11 abr 2022 | Domain Services Privilege Escalation | Active Directory | Alto 7,5 | 73% |
| 11 abr 2022 | Domain Services Privilege Escalation | Active Directory | Alto 7,5 | 77% |
| 6 abr 2022 | Remote Code Execution | SMBv1 server | Alto 8,1 | 99,4% |
| 6 abr 2022 | Remote Code Execution | HTTP Protocol Stack | Crítica 9,8 | 99,9% |
| 31 mar 2022 | User Profile Service Privilege Escalation | Windows | Alto 7,8 | 22% |
| 28 mar 2022 | Kernel Stack-Based Buffer Overflow | Windows | Alto 7,8 | 8,7% |
| 28 mar 2022 | Improper Input Validation | Ancillary Function Driver (afd.sys) | Alto 7,8 | 32% |
| 28 mar 2022 | Remote Code Execution | Word | Alto 7,8 | 53% |
| 28 mar 2022 | Use-After-Free | Internet Explorer | Alto 8,8 | 74% |
| 28 mar 2022 | Privilege Escalation | Win32k | Alto 7,8 | 39% |
| 28 mar 2022 | Uninitialized Memory Use | Office | Alto 8,8 | 35% |
| 28 mar 2022 | Memory Corruption | Internet Explorer | Alto 8,8 | 53% |
| 28 mar 2022 | Adobe Type Manager Library Remote Code Execution | Windows | Alto 8,8 | 87% |
| 28 mar 2022 | Kernel Privilege Escalation | Windows | Alto 7,8 | 24% |
| 28 mar 2022 | Windows CSRSS Security Feature Bypass | Client-Server Run-time Subsystem (CSRSS) | Alto 7,8 | 63% |
| 28 mar 2022 | Memory Corruption | Internet Explorer | Alto 7,5 | 94% |
| 28 mar 2022 | Memory Corruption | Edge | Alto 8,8 | 83% |
| 28 mar 2022 | Memory Corruption | Edge | Alto 8,8 | 80% |
| 28 mar 2022 | Type Confusion | Edge and Internet Explorer | Alto 8,1 | 80% |
| 28 mar 2022 | Information Disclosure | Internet Explorer | Media 4,3 | 62% |
| 28 mar 2022 | Privilege Escalation | Windows | Alto 7,3 | 84% |
| 28 mar 2022 | DirectX Graphics Kernel Privilege Escalation | DirectX Graphics Kernel (DXGKRNL) | Alto 7,8 | 3,4% |
| 28 mar 2022 | DirectX Graphics Kernel Privilege Escalation | DirectX Graphics Kernel (DXGKRNL) | Alto 7,8 | 3,4% |
| 28 mar 2022 | Privilege Escalation | Windows | Alto 7,8 | 19% |
| 28 mar 2022 | Event Tracing Privilege Escalation | Windows | Alto 7,8 | 9,3% |
| 28 mar 2022 | Access Connectivity Engine Remote Code Execution | Office | Alto 7,8 | 8,0% |
| 25 mar 2022 | Privilege Escalation | Kerberos Key Distribution Center (KDC) | Alto 8,8 | 87% |
| 25 mar 2022 | Object Linking & Embedding (OLE) Automation Array Remote Code Execution | Windows | Alto 8,8 | 95% |
| 25 mar 2022 | SMB Remote Code Execution | Windows | Alto 8,8 | 90% |
| 25 mar 2022 | Scripting Engine Memory Corruption | Internet Explorer Scripting Engine | Alto 7,5 | 62% |
| 25 mar 2022 | Shell Remote Code Execution | Windows | Alto 8,8 | 73% |
| 25 mar 2022 | GDI Remote Code Execution | Graphics Device Interface (GDI) | Alto 8,8 | 22% |
| 25 mar 2022 | Print Spooler Privilege Escalation | Windows | Alto 7,8 | 41% |
| 15 mar 2022 | Memory Corruption | Win32k | Alto 8,2 | 10% |
| 15 mar 2022 | Kernel Privilege Escalation | Windows | Alto 7,8 | 20% |
| 15 mar 2022 | Transaction Manager Privilege Escalation | Windows | Alto 7,8 | 57% |
| 15 mar 2022 | Privilege Escalation | Win32k | Alto 7,0 | 73% |
| 15 mar 2022 | Privilege Escalation | Windows | Alto 7,8 | 4,7% |
| 15 mar 2022 | AppX Deployment Service (AppXSVC) Privilege Escalation | Windows | Alto 7,8 | 41% |
| 15 mar 2022 | AppX Deployment Service (AppXSVC) Privilege Escalation | Windows | Alto 7,8 | 6,9% |
| 15 mar 2022 | Privilege Escalation | Task Scheduler | Alto 7,8 | 6,1% |
| 15 mar 2022 | AppX Deployment Service (AppXSVC) Privilege Escalation | Windows | Alto 7,8 | 1,8% |
| 15 mar 2022 | Privilege Escalation | Win32k | Alto 7,8 | 9,9% |
| 15 mar 2022 | AppX Deployment Server Privilege Escalation | Windows | Alto 7,8 | 12% |
| 15 mar 2022 | Error Reporting Manager Privilege Escalation | Windows | Alto 7,8 | 3,5% |
| 15 mar 2022 | Privilege Escalation | Windows | Alto 7,8 | 19% |
| 15 mar 2022 | Universal Plug and Play (UPnP) Service Privilege Escalation | Windows | Alto 7,8 | 30% |
| 3 mar 2022 | Privilege Escalation | Windows | Alto 7,8 | 4,9% |
| 3 mar 2022 | Privilege Escalation | Windows | Alto 7,8 | 7,2% |
| 3 mar 2022 | Improper Input Validation | Windows | Alto 7,8 | 4,9% |
| 3 mar 2022 | Featheader Record Memory Corruption | Excel | Alto 7,8 | 84% |
| 3 mar 2022 | Kernel Exception Handler | Windows | Alto 7,8 | 29% |
| 3 mar 2022 | Stack-based Buffer Overflow | Office | Alto 7,8 | 89% |
| 3 mar 2022 | Forefront TMG Remote Code Execution | Forefront Threat Management Gateway (TMG) | Crítica 9,8 | 49% |
| 3 mar 2022 | MSCOMCTL.OCX Remote Code Execution | Office | Alto 8,8 | 72% |
| 3 mar 2022 | Remote Code Execution | Internet Explorer | Alto 8,8 | 78% |
| 3 mar 2022 | Use-After-Free | Internet Explorer | Alto 8,8 | 77% |
| 3 mar 2022 | Kernel Privilege Escalation | Windows | Alto 7,8 | 35% |
| 3 mar 2022 | Object Linking & Embedding (OLE) Remote Code Execution | Windows | Alto 7,8 | 82% |
| 3 mar 2022 | Memory Corruption | Office | Alto 7,8 | 53% |
| 3 mar 2022 | Privilege Escalation | Win32k | Alto 7,8 | 56% |
| 3 mar 2022 | Privilege Escalation | ATM Font Driver | Alto 7,8 | 35% |
| 3 mar 2022 | Memory Corruption | PowerPoint | Alto 8,8 | 40% |
| 3 mar 2022 | Malformed EPS File | Office | Alto 7,8 | 86% |
| 3 mar 2022 | Secondary Logon Service Privilege Escalation | Windows | Alto 7,8 | 37% |
| 3 mar 2022 | Memory Corruption | Office | Alto 7,8 | 58% |
| 3 mar 2022 | Office Security Feature Bypass | Excel | Alto 7,8 | 58% |
| 3 mar 2022 | Privilege Escalation | Graphics Device Interface (GDI) | Alto 7,8 | 3,1% |
| 3 mar 2022 | Use-After-Free | Office | Alto 7,8 | 78% |
| 3 mar 2022 | Improper Restriction of Operations | Malware Protection Engine | Alto 7,8 | 72% |
| 3 mar 2022 | Privilege Escalation | Exchange Server | Alto 7,4 | 27% |
| 3 mar 2022 | Remote Code Execution | Excel | Alto 8,8 | 22% |
| 3 mar 2022 | Remote Code Execution | Office | Alto 7,8 | 81% |
| 3 mar 2022 | Installer Privilege Escalation | Windows | Media 5,5 | 19% |
| 25 feb 2022 | Code Injection | Windows | Alto 7,8 | 77% |
| 25 feb 2022 | Remote Code Execution | Internet Explorer | Alto 8,8 | 30% |
| 25 feb 2022 | Remote Code Execution | Office | Alto 7,8 | 90% |
| 15 feb 2022 | Memory Corruption | Graphics Component | Alto 7,8 | 85% |
| 15 feb 2022 | Memory Corruption | Word | Alto 7,8 | 78% |
| 15 feb 2022 | VBScript Engine Out-of-Bounds Write | Windows | Alto 7,5 | 88% |
| 15 feb 2022 | Type Confusion | Internet Explorer | Alto 7,5 | 82% |
| 10 feb 2022 | Remote Code Execution | HTTP.sys | Crítica 9,8 | >99,9% |
| 10 feb 2022 | Remote Code Execution | SMBv1 | Alto 8,8 | 99,2% |
| 10 feb 2022 | Remote Code Execution | SMBv1 | Alto 8,8 | 90% |
| 10 feb 2022 | Remote Code Execution | Office | Alto 7,8 | 81% |
| 10 feb 2022 | Privilege Escalation | Win32k | Alto 7,8 | 10% |
| 10 feb 2022 | Shell (.lnk) Remote Code Execution | Windows | Alto 8,8 | 90% |
| 10 feb 2022 | Remote Code Execution | SMBv3 | Crítica 10,0 | 99,8% |
| 10 feb 2022 | SAM Local Privilege Escalation | Windows | Alto 7,8 | 67% |
| 4 feb 2022 | Privilege Escalation | Win32k | Alto 7,0 | 59% |
| 28 ene 2022 | Memory Corruption | Internet Explorer | Crítica 9,8 | 83% |
| 28 ene 2022 | Background Intelligent Transfer Service (BITS) Improper Privilege Management | Windows | Alto 7,8 | 43% |
| 21 ene 2022 | Privilege Escalation | Win32k | Alto 7,8 | 70% |
| 18 ene 2022 | Information Disclosure | Exchange Server | Alto 7,3 | 98% |
| 10 ene 2022 | Remote Code Execution | WinVerifyTrust function | Media 5,5 | 45% |
| 10 ene 2022 | Privilege Escalation | Win32k | Alto 7,8 | 74% |
| 15 dic 2021 | AppX Installer Spoofing | Windows | Alto 7,1 | 11% |
| 17 nov 2021 | Win32k Privilege Escalation | Windows | Alto 7,8 | 82% |
| 17 nov 2021 | Excel Security Feature Bypass | Office | Alto 7,8 | 43% |
| 17 nov 2021 | Server Remote Code Execution | Exchange | Alto 8,8 | 92% |
| 3 nov 2021 | Remote Code Execution | MSCOMCTL.OCX | Alto 8,8 | >99,9% |
| 3 nov 2021 | Group Policy Preferences Password Privilege Escalation | Windows | Alto 8,8 | 65% |
| 3 nov 2021 | Memory Corruption | Office | Alto 7,8 | 97% |
| 3 nov 2021 | Privilege Escalation | Win32k | Alto 7,8 | 5,7% |
| 3 nov 2021 | Media Center Remote Code Execution | Windows | Alto 7,8 | 70% |
| 3 nov 2021 | OLE DLL Side Loading | Office | Alto 7,8 | 43% |
| 3 nov 2021 | Privilege Escalation | Win32k | Alto 7,8 | 81% |
| 3 nov 2021 | Server Message Block (SMBv1) Remote Code Execution | Windows | Alto 8,8 | 93% |
| 3 nov 2021 | Remote Code Execution | Office and WordPad | Alto 7,8 | 99,5% |
| 3 nov 2021 | Windows Server Buffer Overflow | Internet Information Services (IIS) | Crítica 9,8 | 99,8% |
| 3 nov 2021 | Remote Code Execution | .NET Framework | Alto 7,8 | 89% |
| 3 nov 2021 | Memory Corruption | Office | Alto 8,8 | 95% |
| 3 nov 2021 | Memory Corruption | Office | Alto 7,8 | 93% |
| 3 nov 2021 | Scripting Engine Memory Corruption | Internet Explorer | Alto 7,5 | 30% |
| 3 nov 2021 | Remote Code Execution | MSHTML | Alto 8,8 | 53% |
| 3 nov 2021 | Remote Code Execution | SharePoint | Crítica 9,8 | 99,9% |
| 3 nov 2021 | Remote Code Execution | Remote Desktop Services | Crítica 9,8 | >99,9% |
| 3 nov 2021 | Privilege Escalation | Win32k | Alto 7,8 | 1,9% |
| 3 nov 2021 | Privilege Escalation | Win32k | Alto 7,8 | 45% |
| 3 nov 2021 | Privilege Escalation | Win32k | Alto 7,8 | 53% |
| 3 nov 2021 | Privilege Escalation | Win32k | Alto 7,8 | 4,2% |
| 3 nov 2021 | Error Reporting (WER) Privilege Escalation | Windows | Alto 7,8 | 5,2% |
| 3 nov 2021 | Privilege Common Log File System (CLFS) Escalation | Windows | Alto 7,8 | 1,4% |
| 3 nov 2021 | Privilege Escalation | Windows | Alto 7,8 | 19% |
| 3 nov 2021 | Scripting Engine Memory Corruption | Internet Explorer | Alto 7,5 | 52% |
| 3 nov 2021 | Scripting Engine Memory Corruption | Internet Explorer | Alto 7,5 | 77% |
| 3 nov 2021 | CryptoAPI Spoofing | Windows | Alto 8,1 | 89% |
| 3 nov 2021 | Remote Code Execution | .NET Framework | Crítica 9,8 | 99,2% |
| 3 nov 2021 | Scripting Engine Memory Corruption | Internet Explorer | Alto 7,5 | 87% |
| 3 nov 2021 | Installer Privilege Escalation | Windows | Alto 7,8 | 7,6% |
| 3 nov 2021 | Validation Key Remote Code Execution | Exchange Server | Alto 8,8 | >99,9% |
| 3 nov 2021 | Memory Corruption | Edge and Internet Explorer | Media 4,2 | 2,7% |
| 3 nov 2021 | Adobe Font Manager Library Remote Code Execution | Windows | Alto 7,8 | 69% |
| 3 nov 2021 | Scripting Engine Memory Corruption | Internet Explorer | Alto 7,5 | 31% |
| 3 nov 2021 | Kernel Privilege Escalation | Windows | Alto 7,8 | 16% |
| 3 nov 2021 | Adobe Font Manager Library Remote Code Execution | Windows | Alto 8,8 | 65% |
| 3 nov 2021 | vGPU Remote Code Execution | Hyper-V RemoteFX | Crítica 9,0 | 7,4% |
| 3 nov 2021 | Privilege Escalation | Win32k | Alto 7,0 | 54% |
| 3 nov 2021 | .NET Framework, SharePoint, and Visual Studio Remote Code Execution | .NET Framework, SharePoint, Visual Studio | Alto 7,8 | 94% |
| 3 nov 2021 | DNS Server Remote Code Execution | Windows | Crítica 10,0 | 97% |
| 3 nov 2021 | Scripting Engine Memory Corruption | Internet Explorer | Alto 7,8 | 24% |
| 3 nov 2021 | Spoofing | Windows | Alto 7,8 | 39% |
| 3 nov 2021 | Privilege Escalation | Netlogon | Media 5,5 | 99,4% |
| 3 nov 2021 | Remote Code Execution | Defender | Alto 7,8 | 40% |
| 3 nov 2021 | Print Spooler Remote Code Execution | Windows | Alto 7,8 | 85% |
| 3 nov 2021 | Privilege Escalation | Win32k | Alto 7,8 | 78% |
| 3 nov 2021 | Outlook Security Feature Bypass | Office | Alto 7,8 | 60% |
| 3 nov 2021 | Memory Corruption | Office | Alto 7,8 | 99,9% |
| 3 nov 2021 | Kernel Privilege Escalation | Windows | Alto 7,8 | 5,4% |
| 3 nov 2021 | Remote Code Execution | Exchange Server | Alto 8,4 | 37% |
| 3 nov 2021 | Memory Corruption | Internet Explorer | Alto 8,8 | 82% |
| 3 nov 2021 | Remote Code Execution | Exchange Server | Crítica 9,1 | >99,9% |
| 3 nov 2021 | Remote Code Execution | Exchange Server | Alto 7,8 | 96% |
| 3 nov 2021 | Remote Code Execution | Exchange Server | Alto 7,8 | 94% |
| 3 nov 2021 | Remote Code Execution | Office | Alto 7,6 | 6,1% |
| 3 nov 2021 | Remote Code Execution | Exchange Server | Alto 7,8 | 99,9% |
| 3 nov 2021 | Remote Code Execution | Internet Explorer | Alto 8,8 | 5,4% |
| 3 nov 2021 | Privilege Escalation | Win32k | Alto 7,8 | 8,4% |
| 3 nov 2021 | Privilege Escalation | Enhanced Cryptographic Provider | Media 5,2 | 3,0% |
| 3 nov 2021 | Privilege Escalation | Enhanced Cryptographic Provider | Media 5,2 | 2,6% |
| 3 nov 2021 | Security Feature Bypass | Exchange Server | Media 6,6 | 99,8% |
| 3 nov 2021 | Kernel Information Disclosure | Windows | Media 5,5 | 81% |
| 3 nov 2021 | NTFS Privilege Escalation | Windows | Alto 7,8 | 22% |
| 3 nov 2021 | Kernel Privilege Escalation | Windows | Alto 7,8 | 4,5% |
| 3 nov 2021 | Desktop Window Manager (DWM) Core Library Privilege Escalation | Windows | Alto 8,4 | 6,6% |
| 3 nov 2021 | MSHTML Platform Remote Code Execution | Windows | Alto 7,5 | 59% |
| 3 nov 2021 | Kernel Privilege Escalation | Windows | Alto 7,8 | 10% |
| 3 nov 2021 | Scripting Engine Memory Corruption | Windows | Media 6,8 | 40% |
| 3 nov 2021 | Remote Code Execution | Exchange Server | Crítica 9,1 | >99,9% |
| 3 nov 2021 | Privilege Escalation | Exchange Server | Crítica 9,0 | >99,9% |
| 3 nov 2021 | Print Spooler Remote Code Execution | Windows | Alto 8,8 | 99,8% |
| 3 nov 2021 | Local Security Authority (LSA) Spoofing | Windows | Alto 7,5 | 66% |
| 3 nov 2021 | Update Medic Service Privilege Escalation | Windows | Alto 7,8 | 23% |
| 3 nov 2021 | Common Log File System (CLFS) Driver Privilege Escalation | Windows | Alto 7,8 | 4,1% |
| 3 nov 2021 | Privilege Escalation | Open Management Infrastructure (OMI) | Alto 7,8 | 2,7% |
| 3 nov 2021 | Remote Code Execution | Open Management Infrastructure (OMI) | Crítica 9,8 | 99,9% |
| 3 nov 2021 | Privilege Escalation | Open Management Infrastructure (OMI) | Alto 7,8 | 11% |
| 3 nov 2021 | Privilege Escalation | Open Management Infrastructure (OMI) | Alto 7,0 | 2,9% |
| 3 nov 2021 | Remote Code Execution | MSHTML | Alto 8,8 | 98% |
Fuentes: Known Exploited Vulnerabilities (CISA, dominio público), CVE records (cve.org) y EPSS (FIRST). La probabilidad de ataque es la estimación EPSS de que alguien intente explotar el fallo en los próximos 30 días.