Microsoft: known exploited vulnerabilities
Generated from CISA's catalogue of known exploited vulnerabilities as of 3 November 2026.
From CISA's catalogue, 17 entries in Microsoft that Vardion has a check for. The newest first.
| CVE | Product | Since | |
|---|---|---|---|
| CVE-2026-55040 | Microsoft SharePoint | ||
| CVE-2026-58644 | Microsoft SharePoint | ||
| CVE-2025-59287 | Microsoft Windows | ||
| CVE-2025-49706 | Microsoft SharePoint | Ransomware | |
| CVE-2025-53770 | Microsoft SharePoint | Ransomware | |
| CVE-2024-29059 | Microsoft .NET Framework | ||
| CVE-2020-0618 | Microsoft SQL Server | Ransomware | |
| CVE-2023-29357 | Microsoft SharePoint Server | Ransomware | |
| CVE-2023-41763 | Microsoft Skype for Business | ||
| CVE-2020-0796 | Microsoft SMBv3 | Ransomware | |
| CVE-2015-1635 | Microsoft HTTP.sys | ||
| CVE-2021-33766 | Microsoft Exchange Server | ||
| CVE-2021-38647 | Microsoft Open Management Infrastructure (OMI) | Ransomware | |
| CVE-2021-34473 | Microsoft Exchange Server | Ransomware | |
| CVE-2021-26855 | Microsoft Exchange Server | Ransomware | |
| CVE-2020-1472 | Microsoft Netlogon | Ransomware | |
| CVE-2017-7269 | Microsoft Internet Information Services (IIS) |
Know before an attacker does
Vardion scans the servers and websites you approve on the schedule you set. A known exploited vulnerability it finds goes to the top of the fix list.