microsoft

15,023 tracked vulnerabilities.

CVE-2026-34054 HIGH
openssl on Windows built with openssldir set from the build machine (Uncontrolled Search Path Element)
Mar 31, 2026
CVSS 7.8
EPSS 0.01
CVE-2026-32194 CRITICAL
Microsoft Bing Images Remote Code Execution Vulnerability
Mar 19, 2026
CVSS 9.8
EPSS 0.01
CVE-2026-32191 CRITICAL
Microsoft Bing Images Remote Code Execution Vulnerability
Mar 19, 2026
CVSS 9.8
EPSS 0.01
CVE-2026-32169 CRITICAL
Azure Cloud Shell Elevation of Privilege Vulnerability
Mar 19, 2026
CVSS 10.0
EPSS 0.01
CVE-2026-26139 HIGH
Microsoft Purview Elevation of Privilege Vulnerability
Mar 19, 2026
CVSS 8.6
EPSS 0.01
CVE-2026-26138 HIGH
Microsoft Purview Elevation of Privilege Vulnerability
Mar 19, 2026
CVSS 8.6
EPSS 0.01
CVE-2026-26137 CRITICAL
Microsoft 365 Copilot BizChat Elevation of Privilege Vulnerability
Mar 19, 2026
CVSS 9.9
EPSS 0.01
CVE-2026-26136 MEDIUM
Microsoft Copilot Information Disclosure Vulnerability
Mar 19, 2026
CVSS 6.5
EPSS 0.01
CVE-2026-26120 MEDIUM
Microsoft Bing Tampering Vulnerability
Mar 19, 2026
CVSS 6.5
EPSS 0.01
CVE-2026-24299 MEDIUM
M365 Copilot Information Disclosure Vulnerability
Mar 19, 2026
CVSS 5.3
EPSS 0.01
CVE-2026-23659 HIGH
Azure Data Factory Information Disclosure Vulnerability
Mar 19, 2026
CVSS 8.6
EPSS 0.01
CVE-2026-23658 HIGH
Azure DevOps: msazure Elevation of Privilege Vulnerability
Mar 19, 2026
CVSS 8.6
EPSS 0.01
CVE-2026-25667 HIGH
.NET 8.0.0-8.0.21 and 9.0.0-9.0.10 - Uncontrolled Resource Consumption via Crafted QUIC Packet
Mar 19, 2026
CVSS 7.5
EPSS 0.03
CVE-2026-26133 HIGH
M365 Copilot Information Disclosure Vulnerability
Mar 16, 2026
CVSS 7.1
EPSS 0.00
CVE-2026-0385 MEDIUM
Microsoft Edge (Chromium-based) for Android - Spoofing
Mar 16, 2026
CVSS 5.0
EPSS 0.00
CVE-2026-26123 MEDIUM
Microsoft Authenticator - Info Disclosure
Mar 10, 2026
CVSS 5.5
EPSS 0.01
CVE-2026-26148 HIGH
Azure Entra ID - Privilege Escalation
Mar 10, 2026
CVSS 8.1
EPSS 0.00
CVE-2026-26144 HIGH
Microsoft 365 Apps for Enterprise - Cross-Site Scripting in Excel
Mar 10, 2026
CVSS 7.5
EPSS 0.01
CVE-2026-26141 HIGH
Azure Automation Hybrid Worker Windows Extension < 1.3.74 - Privilege Escalation via Improper Authentication
Mar 10, 2026
CVSS 7.8
EPSS 0.00
CVE-2026-26134 HIGH
Microsoft Office - Privilege Escalation
Mar 10, 2026
CVSS 7.8
EPSS 0.00
CVE-2026-26132 HIGH
Windows Kernel - Privilege Escalation
Mar 10, 2026
CVSS 7.8
EPSS 0.02
CVE-2026-26131 HIGH
.NET 10.0 < 10.0.4 - Authenticated Privilege Escalation via Incorrect Default Permissions
Mar 10, 2026
CVSS 7.8
EPSS 0.00
CVE-2026-26130 HIGH
Microsoft.AspNetCore.App.Runtime 8.0.0-8.0.24 - Unauthenticated Denial of Service
Mar 10, 2026
CVSS 7.5
EPSS 0.03
CVE-2026-26128 HIGH
Windows SMB Server - Privilege Escalation
Mar 10, 2026
CVSS 7.8
EPSS 0.00
CVE-2026-26127 HIGH
.NET - DoS
Mar 10, 2026
CVSS 7.5
EPSS 0.02
Products
windows_server_2016 4,687 windows_server_2019 4,439 windows_server_2012 3,892 windows_server_2008 3,554 windows_10 2,974 windows_server_2022 2,814 windows_7 2,368 windows_8.1 2,216 windows_10_21h2 2,031 windows_10_22h2 2,029 windows_10_1809 2,025 windows_rt_8.1 2,020 windows_10_1607 1,736 windows_server_2022_23h2 1,676 windows_11_23h2 1,657 windows_11_22h2 1,652 internet_explorer 1,635 windows_11_24h2 1,349 windows_server_2025 1,315 windows_10_1507 1,230 Windows 11 Version 24H2 1,086 Windows Server 2025 1,058 Windows Server 2025 (Server Core installation) 1,058 office 1,034 Windows Server 2022 1,014 windows_11_21h2 1,001 Windows Server 2019 1,000 Windows Server 2019 (Server Core installation) 997 Windows 10 Version 21H2 961 Windows 10 Version 22H2 958
Quick Filters
Critical CVEs With Exploits In CISA KEV