microsoft 3d viewer

Name: microsoft 3d viewer
Brand: microsoft

productUS

cpe:2.3:a:microsoft:3d_viewer:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical2high5medium0low

updated 2026-10-28

vulnerabilities (10)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-43209US	medium6.8	6.83% (94th)	—	7.2107.7012.0	2021-11-10	< 7.2107.7012.0
CVE-2021-43208US	medium6.8	4.31% (91st)	—	7.2107.7012.0	2021-11-10	< 7.2107.7012.0
CVE-2020-17003US	high9.3	4.20% (91st)	—	no fix	2020-10-16	—
CVE-2020-16918US	high9.3	3.85% (90th)	—	no fix	2020-10-16	—
CVE-2021-31944US	medium4.3	2.78% (86th)	—	no fix	2021-06-08	—
CVE-2021-31943US	medium6.8	2.43% (84th)	—	no fix	2021-06-08	—
CVE-2021-31942US	medium6.8	2.17% (82nd)	—	no fix	2021-06-08	—
CVE-2023-36760US	—	0.68% (52nd)	—	7.2307.27042.0	2023-09-12	< 7.2307.27042.0
CVE-2023-36740US	—	0.68% (52nd)	—	7.2306.12012.0	2023-09-12	< 7.2306.12012.0
CVE-2023-36739US	—	0.68% (52nd)	—	7.2307.27042.0	2023-09-12	< 7.2307.27042.0

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation6 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')3 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs
CWE-122Heap-based Buffer Overflow2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-416Use After Free1 CVEs
CWE-787Out-of-bounds Write1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.