Vulnerabilities > Microsoft > Critical

DATE CVE VULNERABILITY TITLE RISK
2021-12-15 CVE-2021-42310 Unspecified vulnerability in Microsoft Defender for IOT
Microsoft Defender for IoT Remote Code Execution Vulnerability
network
low complexity
microsoft
critical
9.8
2021-12-15 CVE-2021-43214 Unspecified vulnerability in Microsoft RAW Image Extension 1.0.32861.0
Web Media Extensions Remote Code Execution Vulnerability
network
low complexity
microsoft
critical
9.8
2021-12-15 CVE-2021-43215 Out-of-bounds Write vulnerability in Microsoft products
iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution
network
low complexity
microsoft CWE-787
critical
9.8
2021-12-15 CVE-2021-43217 Unspecified vulnerability in Microsoft products
Windows Encrypting File System (EFS) Remote Code Execution Vulnerability
network
low complexity
microsoft
critical
9.8
2021-12-15 CVE-2021-43225 Unspecified vulnerability in Microsoft BOT Framework Software Development KIT
Bot Framework SDK Remote Code Execution Vulnerability
network
low complexity
microsoft
critical
9.8
2021-12-15 CVE-2021-43882 Improper Certificate Validation vulnerability in Microsoft Defender for IOT
Microsoft Defender for IoT Remote Code Execution Vulnerability
network
low complexity
microsoft CWE-295
critical
9.8
2021-12-15 CVE-2021-43899 Unspecified vulnerability in Microsoft Wireless Display Adapter Firmware 2.0.8350/2.0.8365/2.0.8372
Microsoft 4K Wireless Display Adapter Remote Code Execution Vulnerability
network
low complexity
microsoft
critical
9.8
2021-12-15 CVE-2021-43905 Unspecified vulnerability in Microsoft Office
Microsoft Office app Remote Code Execution Vulnerability
network
low complexity
microsoft
critical
9.6
2021-12-15 CVE-2021-43907 Unspecified vulnerability in Microsoft Windows Subsystem for Linux 0.63.4/0.63.5
Visual Studio Code WSL Extension Remote Code Execution Vulnerability
network
low complexity
microsoft
critical
9.8
2021-08-13 CVE-2021-37705 Incorrect Authorization vulnerability in Microsoft Onefuzz
OneFuzz is an open source self-hosted Fuzzing-As-A-Service platform.
network
low complexity
microsoft CWE-863
critical
10.0