microsoft

14,170 tracked vulnerabilities.

CVE-2026-26030 CRITICAL
Microsoft Semantic Kernel <1.39.4 - RCE
Feb 19, 2026
CVSS 9.9
EPSS 0.00
CVE-2026-26119 HIGH
Windows Admin Center - Privilege Escalation
Feb 17, 2026
CVSS 8.8
EPSS 0.00
CVE-2026-0102 LOW
Microsoft Edge Chromium < 145.0.3800.58 - Unauthorized Autofill Data Exposure via Consecutive Taps
Feb 17, 2026
CVSS 3.1
EPSS 0.00
CVE-2026-23655 MEDIUM
Azure Compute Gallery - Info Disclosure
Feb 10, 2026
CVSS 6.5
EPSS 0.00
CVE-2026-21537 HIGH
Microsoft Defender for Endpoint for Linux 101.0.0-1.0.8.9 - Unauthenticated Remote Code Execution
Feb 10, 2026
CVSS 8.8
EPSS 0.00
CVE-2026-21533 HIGH KEV
Windows 10/11 Remote Desktop Authenticated Privilege Escalation
Feb 10, 2026
CVSS 7.8
EPSS 0.17
CVE-2026-21531 CRITICAL
Azure Conversation Authoring Client Library - Remote Code Execution via Untrusted Data Deserialization
Feb 10, 2026
CVSS 9.8
EPSS 0.00
CVE-2026-21529 MEDIUM
Azure HDInsight < 5.1 - Cross-Site Scripting
Feb 10, 2026
CVSS 5.7
EPSS 0.00
CVE-2026-21528 MEDIUM
Azure IoT Explorer < 0.15.13 - Unauthenticated Information Disclosure via Unrestricted IP Binding
Feb 10, 2026
CVSS 6.5
EPSS 0.00
CVE-2026-21527 MEDIUM
Microsoft Exchange Server - Info Disclosure
Feb 10, 2026
CVSS 6.5
EPSS 0.00
CVE-2026-21525 MEDIUM KEV
Windows Remote Access Connection Manager - Unauthenticated Denial of Service via Null Pointer Dereference
Feb 10, 2026
CVSS 6.2
EPSS 0.09
CVE-2026-21523 HIGH
Visual Studio Code < 1.109.2 and 1.110.1 - Authenticated Remote Code Execution via TOCTOU Race Condition
Feb 10, 2026
CVSS 8.0
EPSS 0.00
CVE-2026-21522 MEDIUM
Microsoft Confcom < 1.2.8 - Authenticated Command Injection
Feb 10, 2026
CVSS 6.7
EPSS 0.00
CVE-2026-21519 HIGH KEV
Windows 10/11 Privilege Escalation via Desktop Window Manager Type Confusion
Feb 10, 2026
CVSS 7.8
EPSS 0.04
CVE-2026-21518 HIGH
Visual Studio Code < 1.109.2 and 1.110.1 - Command Injection via GitHub Copilot Chat Extension
Feb 10, 2026
CVSS 8.8
EPSS 0.00
CVE-2026-21517 MEDIUM
Windows App for Mac - Privilege Escalation
Feb 10, 2026
CVSS 4.7
EPSS 0.00
CVE-2026-21516 HIGH
GitHub Copilot < 1.5.63 - Unauthenticated Remote Code Execution
Feb 10, 2026
CVSS 8.8
EPSS 0.00
CVE-2026-21514 HIGH KEV
Microsoft Office Word - Info Disclosure
Feb 10, 2026
CVSS 7.8
EPSS 0.05
CVE-2026-21513 HIGH KEV
Windows MSHTML Security Feature Bypass (10, 11, 23H2, 24H2)
Feb 10, 2026
CVSS 8.8
EPSS 0.25
CVE-2026-21512 MEDIUM
Azure DevOps Server < 2022.2.0 - Server-Side Request Forgery
Feb 10, 2026
CVSS 6.5
EPSS 0.00
CVE-2026-21511 HIGH
Microsoft 365 Apps and Office - Spoofing via Untrusted Data Deserialization
Feb 10, 2026
CVSS 7.5
EPSS 0.00
CVE-2026-21510 HIGH KEV
Microsoft Windows Shell - Protection Mechanism Failure
Feb 10, 2026
CVSS 8.8
EPSS 0.05
CVE-2026-21508 HIGH
Windows 10/11 Privilege Escalation via Untrusted Search Path
Feb 10, 2026
CVSS 7.0
EPSS 0.00
CVE-2026-21261 MEDIUM
Microsoft Office Excel - Info Disclosure
Feb 10, 2026
CVSS 5.5
EPSS 0.00
CVE-2026-21260 HIGH
Microsoft Office Outlook - Info Disclosure
Feb 10, 2026
CVSS 7.5
EPSS 0.00
Products
windows_server_2016 4,606 windows_server_2019 4,345 windows_server_2012 3,825 windows_server_2008 3,554 windows_10 2,974 windows_server_2022 2,699 windows_7 2,368 windows_8.1 2,216 windows_rt_8.1 2,020 windows_10_1809 1,935 windows_10_21h2 1,934 windows_10_22h2 1,932 windows_server_2022_23h2 1,666 windows_10_1607 1,658 windows_11_22h2 1,651 internet_explorer 1,635 windows_11_23h2 1,548 windows_11_24h2 1,234 windows_10_1507 1,230 windows_server_2025 1,195 office 1,032 windows_11_21h2 1,001 windows_vista 828 edge 756 windows_xp 739 windows_11 573 windows_2000 515 windows_11_25h2 502 sharepoint_server 477 365_apps 472
Quick Filters
Critical CVEs With Exploits In CISA KEV