← Back

Microsoft

microsoft

14,951 CVEs • 1,050 products

Products (1,050)

Click to collapse
Toggle
Windows 10
windows_10
Windows 7
windows_7
Windows 8.1
windows_8.1
Office
office
Edge
edge
Windows Xp
windows_xp
365 Apps
365_apps
Windows 11
windows_11
Windows 2000
windows_2000
Excel
excel
Word
word
Windows Nt
windows_nt
Chakracore
chakracore
Windows 8
windows_8
Windows Rt
windows_rt
Ie
ie
Excel Viewer
excel_viewer
Outlook
outlook
Sql Server
sql_server
Office 2024
office_2024
Office 2021
office_2021
Dynamics 365
dynamics_365
Office 2019
office_2019
Microsoft 365
microsoft_365
.net
Windows 98
windows_98
Word Viewer
word_viewer
Powerpoint
powerpoint
Windows
windows
Windows 98se
windows_98se
Works
works
Windows Me
windows_me
Visual Studio
visual_studio
Visio
visio
365 Copilot
365_copilot
Windows 95
windows_95
Publisher
publisher
Lync
lync
Asp.net Core
asp.net_core
Office 2016
office_2016

CVEs (14,951)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Microsoft
1Windows Nt
Apr 16, 2026
May 9, 1998
N/A· v4
N/A· v3
6.4 MEDIUM· v2
Windows NT 3.51 and 4.0 running WINS (Windows Internet Name Service) allows remote attackers to cause a denial of service (resource exhaustion) via a flood of malformed packets, which causes the server to slow down and f...Show more
Windows NT 3.51 and 4.0 running WINS (Windows Internet Name Service) allows remote attackers to cause a denial of service (resource exhaustion) via a flood of malformed packets, which causes the server to slow down and fill the event logs with error messages.Show less
2Microsoft
Netscape
2Communicator
Internet Explorer
Apr 16, 2026
Apr 1, 1998
N/A· v4
N/A· v3
7.5 HIGH· v2
A configuration in a web browser such as Internet Explorer or Netscape Navigator allows execution of active content such as ActiveX, Java, Javascript, etc.
1Microsoft
1Windows Nt
Apr 16, 2026
Feb 14, 1998
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed SMB logon request in which the actual data size does not match the specified size.
1Microsoft
2Windows 95
Windows Nt
Apr 16, 2026
Feb 13, 1998
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Bonk variation of teardrop IP fragmentation denial of service.
2Microsoft
Netscape
5Enterprise Server
Fasttrack ServerFrontpage+2 more
Apr 16, 2026
Feb 6, 1998
N/A· v4
7.0 HIGH· v3
5.0 MEDIUM· v2
Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names.
2Jgaa
Microsoft
3Warftpd
Windows 95Windows Nt
Apr 16, 2026
Feb 1, 1998
N/A· v4
N/A· v3
7.5 HIGH· v2
Buffer overflow in War FTP allows remote execution of commands.
1Microsoft
1Internet Explorer
Apr 16, 2026
Jan 1, 1998
N/A· v4
N/A· v3
7.5 HIGH· v2
Buffer overflow in Internet Explorer 4.0(1).
2Ibm
Microsoft
2Exchange Server
Lotus Domino Mail Server
Apr 16, 2026
Jan 1, 1998
N/A· v4
N/A· v3
7.5 HIGH· v2
Denial of service to NT mail servers including Ipswitch, Mdaemon, and Exchange through a buffer overflow in the SMTP HELO command.
1Microsoft
1Windows Nt
Apr 16, 2026
Dec 23, 1997
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Memory leak in Simple Network Management Protocol (SNMP) agent (snmp.exe) for Windows NT 4.0 before Service Pack 4 allows remote attackers to cause a denial of service (memory consumption) via a large number of SNMP pack...Show more
Memory leak in Simple Network Management Protocol (SNMP) agent (snmp.exe) for Windows NT 4.0 before Service Pack 4 allows remote attackers to cause a denial of service (memory consumption) via a large number of SNMP packets with Object Identifiers (OIDs) that cannot be decoded.Show less
4Caldera
HpMicrosoft+1 more
5Hp Ux
OpenlinuxSunos+2 more
Apr 16, 2026
Dec 16, 1997
N/A· v4
N/A· v3
5.0 MEDIUM· v2
A later variation on the Teardrop IP denial of service attack, a.k.a. Teardrop-2.
4Hp
MicrosoftNetbsd+1 more
5Hp Ux
NetbsdSunos+2 more
Apr 16, 2026
Dec 16, 1997
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Teardrop IP denial of service.
6Cisco
GnuHp+3 more
8Hp Ux
InetIos+5 more
Apr 16, 2026
Dec 1, 1997
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Land IP denial of service.
1Microsoft
3Internet Explorer
Outlook ExpressWindows Explorer
Apr 16, 2026
Nov 1, 1997
N/A· v4
N/A· v3
10.0 HIGH· v2
Buffer overflow in the HTML library used by Internet Explorer, Outlook Express, and Windows Explorer via the res: local resource protocol.
1Microsoft
1Wins
Apr 16, 2026
Oct 1, 1997
N/A· v4
N/A· v3
5.0 MEDIUM· v2
All records in a WINS database can be deleted through SNMP for a denial of service.
1Microsoft
1Internet Information Server
Apr 16, 2026
Sep 1, 1997
N/A· v4
N/A· v3
6.4 MEDIUM· v2
IIS newdsn.exe CGI script allows remote users to overwrite files.
1Microsoft
1Internet Explorer
Apr 16, 2026
Aug 5, 1997
N/A· v4
N/A· v3
2.1 LOW· v2
Internet Explorer 3 records a history of all URL's that are visited by a user in DAT files located in the Temporary Internet Files and History folders, which are not cleared when the user selects the "Clear History" opti...Show more
Internet Explorer 3 records a history of all URL's that are visited by a user in DAT files located in the Temporary Internet Files and History folders, which are not cleared when the user selects the "Clear History" option, and are not visible when the user browses the folders because of tailored displays.Show less
11Apple
CiscoHp+8 more
14Aix
BsdosHp Ux+11 more
May 28, 2026
Aug 1, 1997
N/A· v4
4.0 MEDIUM· v3
2.1 LOW· v2
ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.
1Microsoft
1Windows Nt
Apr 16, 2026
Jul 25, 1997
N/A· v4
N/A· v3
4.6 MEDIUM· v2
The PATH in Windows NT includes the current working directory (.), which could allow local users to gain privileges by placing Trojan horse programs with the same name as commonly used system programs into certain direct...Show more
The PATH in Windows NT includes the current working directory (.), which could allow local users to gain privileges by placing Trojan horse programs with the same name as commonly used system programs into certain directories.Show less
1Microsoft
1Windows Nt
Apr 16, 2026
Jul 10, 1997
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Windows NT 4.0 before SP3 allows remote attackers to bypass firewall restrictions or cause a denial of service (crash) by sending improperly fragmented IP packets without the first fragment, which the TCP/IP stack incorr...Show more
Windows NT 4.0 before SP3 allows remote attackers to bypass firewall restrictions or cause a denial of service (crash) by sending improperly fragmented IP packets without the first fragment, which the TCP/IP stack incorrectly reassembles into a valid session.Show less
2Microsoft
Netscape
2Communicator
Internet Explorer
Apr 16, 2026
Jul 8, 1997
N/A· v4
N/A· v3
2.6 LOW· v2
JavaScript in Internet Explorer 3.x and 4.x, and Netscape 2.x, 3.x and 4.x, allows remote attackers to monitor a user's web activities, aka the Bell Labs vulnerability.