microsoft

14,453 tracked vulnerabilities.

CVE-2026-32209 MEDIUM
Microsoft Windows 10 Version 1607 - Windows Filtering Platform (WFP) Security Feature Bypass Vulnerability
May 12, 2026
CVSS 4.4
EPSS 0.00
CVE-2026-32204 HIGH
Azure Monitor Agent Elevation of Privilege Vulnerability
May 12, 2026
CVSS 7.8
EPSS 0.00
CVE-2026-32185 MEDIUM
Microsoft Teams Spoofing Vulnerability
May 12, 2026
CVSS 5.5
EPSS 0.00
CVE-2026-32177 HIGH
Microsoft .NET - Heap Buffer Overflow Privilege Escalation
May 12, 2026
CVSS 7.3
EPSS 0.01
CVE-2026-32175 MEDIUM
.NET 10.0 < 10.0.8, 9.0 < 9.0.16, 8.0 < 8.0.27 - Path Traversal and Arbitrary File Write
May 12, 2026
CVSS 4.3
EPSS 0.01
CVE-2026-32170 MEDIUM
Microsoft Windows 10 Version 1607 - Windows Rich Text Edit Elevation of Privilege Vulnerability
May 12, 2026
CVSS 6.7
EPSS 0.00
CVE-2026-32161 HIGH
Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability
May 12, 2026
CVSS 7.5
EPSS 0.00
CVE-2026-21530 MEDIUM
Microsoft Windows 10 Version 1607 - Windows Rich Text Edit Elevation of Privilege Vulnerability
May 12, 2026
CVSS 6.7
EPSS 0.00
CVE-2026-42826 CRITICAL
Azure DevOps Information Disclosure Vulnerability
May 07, 2026
CVSS 10.0
EPSS 0.01
CVE-2026-41105 HIGH
Azure Monitor Action Group Notification System Elevation of Privilege Vulnerability
May 07, 2026
CVSS 8.1
EPSS 0.01
CVE-2026-35435 HIGH
Azure AI Foundry Elevation of Privilege Vulnerability
May 07, 2026
CVSS 8.6
EPSS 0.01
CVE-2026-35428 CRITICAL
Azure Cloud Shell Spoofing Vulnerability
May 07, 2026
CVSS 9.6
EPSS 0.01
CVE-2026-34327 HIGH
Microsoft Partner Center Spoofing Vulnerability
May 07, 2026
CVSS 8.2
EPSS 0.01
CVE-2026-33844 CRITICAL
Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability
May 07, 2026
CVSS 9.0
EPSS 0.01
CVE-2026-33823 CRITICAL
Microsoft Team Events Portal Information Disclosure Vulnerability
May 07, 2026
CVSS 9.6
EPSS 0.01
CVE-2026-33111 HIGH
Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability
May 07, 2026
CVSS 7.5
EPSS 0.01
CVE-2026-33109 CRITICAL
Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability
May 07, 2026
CVSS 9.9
EPSS 0.01
CVE-2026-32207 HIGH
Azure Machine Learning Notebook Spoofing Vulnerability
May 07, 2026
CVSS 8.8
EPSS 0.01
CVE-2026-26164 HIGH
M365 Copilot Information Disclosure Vulnerability
May 07, 2026
CVSS 7.5
EPSS 0.01
CVE-2026-26129 HIGH
M365 Copilot Information Disclosure Vulnerability
May 07, 2026
CVSS 7.5
EPSS 0.01
CVE-2026-21515 CRITICAL
Azure IoT Central Elevation of Privilege Vulnerability
Apr 24, 2026
CVSS 9.9
EPSS 0.01
CVE-2026-32952 MEDIUM
go-ntlmssp NTLM challenges can panic on malformed payloads
Apr 24, 2026
CVSS 5.3
EPSS 0.01
CVE-2026-35431 CRITICAL
Microsoft Entra ID Entitlement Management Spoofing Vulnerability
Apr 23, 2026
CVSS 10.0
EPSS 0.01
CVE-2026-33819 CRITICAL
Microsoft Bing Remote Code Execution Vulnerability
Apr 23, 2026
CVSS 10.0
EPSS 0.01
CVE-2026-33102 CRITICAL
Microsoft 365 Copilot Elevation of Privilege Vulnerability
Apr 23, 2026
CVSS 9.3
EPSS 0.00
Products
windows_server_2016 4,686 windows_server_2019 4,438 windows_server_2012 3,891 windows_server_2008 3,554 windows_10 2,974 windows_server_2022 2,813 windows_7 2,368 windows_8.1 2,216 windows_10_21h2 2,031 windows_10_22h2 2,029 windows_10_1809 2,024 windows_rt_8.1 2,020 windows_10_1607 1,735 windows_server_2022_23h2 1,676 windows_11_23h2 1,657 windows_11_22h2 1,652 internet_explorer 1,635 windows_11_24h2 1,349 windows_server_2025 1,314 windows_10_1507 1,230 office 1,033 windows_11_21h2 1,001 windows_vista 828 edge 756 windows_xp 739 Windows 11 Version 24H2 708 Windows Server 2019 689 Windows Server 2022 689 Windows Server 2019 (Server Core installation) 687 Windows Server 2025 670
Quick Filters
Critical CVEs With Exploits In CISA KEV