Microsoft Graph vulnerabilities

• microsoft visual studio 2022 version 17.14, visual studio 2026 version 18.10, system.security.cryptography.pkcs +2 more .NET Denial of Service Vulnerability CVE-2026-70162 Fix available 5.9 MediumOctober 13, 2026
• microsoft .net, .net framework, .net framework 3.5 +8 more +10 more .NET Denial of Service Vulnerability CVE-2026-96960 Fix available 7.5 HighOctober 13, 2026
• microsoft .net, .net framework, .net framework 3.5 +8 more +10 more .NET Denial of Service Vulnerability CVE-2026-96959 Fix available 7.5 HighOctober 13, 2026
• microsoft .net, .net framework, .net framework 3.5 +8 more +10 more .NET Denial of Service Vulnerability CVE-2026-96958 Fix available 7.5 HighOctober 13, 2026
• microsoft .net, .net framework, .net framework 3.5 +26 more +28 more Active Directory Federation Services (AD FS) Spoofing Vulnerability CVE-2026-96222 Fix available 7.4 HighOctober 13, 2026
• microsoft .net framework 3.5, .net framework 3.5 and 4.6.2/4.7/4.7.1/4.7.2, .net framework 3.5 and 4.7.2 +8 more +10 more .NET Denial of Service Vulnerability CVE-2026-84008 Fix available 7.5 HighOctober 13, 2026
• microsoft graph Microsoft Graph Information Disclosure Vulnerability CVE-2026-49159 6.5 MediumJuly 24, 2026
• microsoft graph Microsoft Graph Information Disclosure Vulnerability CVE-2026-47655 6.5 MediumJune 4, 2026
• microsoft graph, microsoftgraph msgraph-sdk-php-core +1 more Test code in published microsoft-graph-core package exposes phpinfo() CVE-2023-49283 Fix available 5.4 MediumDecember 5, 2023
• microsoft graph, microsoftgraph msgraph-sdk-php +1 more Test code in published microsoft-graph package exposes phpinfo() CVE-2023-49282 Fix available 5.4 MediumDecember 5, 2023
• microsoft enhanced cryptographic provider, windows 10 version 1507, windows 10 version 1607 +34 more +36 more Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability CVE-2021-31201 In KEV 5.2 MediumJune 8, 2021
• microsoft enhanced cryptographic provider, windows 10 version 1507, windows 10 version 1607 +34 more +36 more Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability CVE-2021-31199 In KEV 5.2 MediumJune 8, 2021
• microsoft research javascript cryptography library v1.4, research javascript cryptography library +1 more Incorrect Calculation in the MSR JavaScript Cryptography Library CVE-2020-1026 Fix available 9.8 CriticalApril 15, 2020
• microsoft graphics device interface (gdi), windows, windows 10 version 1903 for 32-bit systems +20 more +22 more A remote code execution vulnerability exists in the way that the Windows Graphics Device... CVE-2019-0903 In KEV EPSS 21.7% 8.8 HighMay 16, 2019
• microsoft directx graphics kernel (dxgkrnl), windows 10, windows 10 servers +8 more +10 more An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver... CVE-2018-8406 In KEV 7.8 HighAugust 15, 2018
• microsoft directx graphics kernel (dxgkrnl), windows 10, windows 10 servers +12 more +14 more An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver... CVE-2018-8405 In KEV 7.8 HighAugust 15, 2018
• microsoft research javascript cryptography library Sensitive Data Exposure in msrcrypto CVE-2018-8319 Fix available 9.8 CriticalJuly 11, 2018
• microsoft graphics device interface (gdi), windows 7, windows 8.1 +9 more +11 more The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and... CVE-2017-0001 In KEV 7.8 HighMarch 17, 2017
• microsoft lync, office, office compatibility pack +6 more +8 more GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1... CVE-2013-3906 In KEVPublic exploit EPSS 84.9% 7.8 HighNovember 6, 2013