Skip to contentMicrosoft vulnerabilities
Products
- Windows Server 20196,458
- Windows Server 20166,403
- Windows Server 20196,362
- Windows Server 2019 (server Core Installation)6,265
- Windows 10 Version 18095,907
- Windows Server 20225,762
- Windows Server 20165,572
- Windows Server 2016 (server Core Installation)5,368
- Windows Server 20125,295
- Windows 10 Version 21h25,141
- Windows 10 Version 16074,987
- Windows Server 20224,948
- Windows 10 Version 22h24,643
- Windows Server 20254,336
- Windows Server 2025 (server Core Installation)4,334
- Windows 11 Version 24h24,232
- Windows Server 2012 R24,119
- Windows 11 Version 23h24,056
- Windows 10 18094,018
- Windows Server 2012 R2 (server Core Installation)3,974
- Windows 10 21h23,969
- Windows 10 22h23,968
- Windows Server 20123,881
- Windows Server 2012 (server Core Installation)3,748
- Windows Server 20253,633
- Windows 11 24h23,560
- Windows Server 20083,552
- Windows 11 Version 25h23,497
- Windows 10 16073,429
- Windows 11 23h23,409
- Windows 11 Version 26h13,230
- Windows 102,977
- Windows 11 25h22,827
- Windows 11 26h12,535
- Windows 72,367
- Windows 10 Version 15072,323
- Windows 8.12,215
- Windows Rt 8.12,020
- Windows Server 2008 R2 Service Pack 11,900
- Windows Server 2008 R2 Service Pack 1 (server Core Installation)1,886
- Windows 11 Version 22h21,776
- Windows Server 2022, 23h2 Edition (server Core Installation)1,723
- Windows Server 2008 Service Pack 2 (server Core Installation)1,689
- Windows Server 2008 Service Pack 21,686
- Windows Server 2022 23h21,676
- Windows 11 Version 26h21,663
- Windows 11 22h21,652
- Internet Explorer1,635
- Windows 11 Version 21h21,560
- Windows 11 Version 22h31,276
- Windows 10 Version 20h21,259
- Windows 10 15071,230
- Windows Server 2008 Service Pack 21,169
- Windows 8.11,117
- 365 Apps For Enterprise1,105
- Windows 10 Version 1903 For X64-based Systems1,069
- Windows Server, Version 1903 (server Core Installation)1,055
- Office1,050
- Windows 10 Version 19091,045
- Windows 10 Version 1903 For Arm64-based Systems1,037
Show 140 moreShow less
Newest
- microsoft github copilot chat, visual studio code copilot chat extension +1 moreGitHub Copilot and Visual Studio Code Information Disclosure VulnerabilityCVE-2026-236535.7 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Management Services Elevation of Privilege VulnerabilityCVE-2026-209307.8 High
- microsoft .net, .net framework, .net 10.0 +15 more +17 more.NET, .NET Framework, and Visual Studio Denial of Service VulnerabilityCVE-2026-33116Fix available7.5 High
- microsoft .net, microsoft visual studio 2026 version 18.4, microsoft .net 10.0 +14 more +16 more.NET and Visual Studio Denial of Service VulnerabilityCVE-2026-32203Fix available7.5 High
- microsoft .net, .net 10.0, .net 8.0 +11 more +13 more.NET Spoofing VulnerabilityCVE-2026-32178Fix available7.5 High
- microsoft .net, powershell 7.6, microsoft .net 10.0 +11 more +13 more.NET Denial of Service VulnerabilityCVE-2026-26171Fix available7.5 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Spoofing VulnerabilityCVE-2026-331184.3 Medium
- microsoft edge, edge for android +1 moreMicrosoft Edge (Chromium-based) for Android Spoofing VulnerabilityCVE-2026-331195.4 Medium
- microsoft symcryptSymCrypt SymCryptXmssSign function - Heap overflow via 64->32-bit leaf-count truncationCVE-2026-351996.1 Medium
- microsoft bingMicrosoft Bing Elevation of Privilege VulnerabilityCVE-2026-3218610.0 Critical
- microsoft azure web appsAzure MCP Server Information Disclosure VulnerabilityCVE-2026-322119.1 Critical
- microsoft azure sre agent, azure sre agent gateway - signalr hub +1 moreAzure SRE Agent Information Disclosure VulnerabilityCVE-2026-321738.6 High
- microsoft azure kubernetes serviceMicrosoft Azure Kubernetes Service Elevation of Privilege VulnerabilityCVE-2026-3310510.0 Critical
- microsoft azure custom locations resource providerAzure Custom Locations Resource Provider (RP) Elevation of Privilege VulnerabilityCVE-2026-261359.6 Critical
- microsoft azure databricksAzure Databricks Elevation of Privilege VulnerabilityCVE-2026-3310710.0 Critical
- microsoft azure ai foundryAzure AI Foundry Elevation of Privilege VulnerabilityCVE-2026-3221310.0 Critical
- microsoft xml notepad, xmlnotepad +1 moreXML Notepad: XML External Entity (XXE) Injection via Unsafe XmlTextReader in XML Diff and Schema LoadingCVE-2026-344016.5 Medium
- microsoft vcpkgopenssl on Windows built with openssldir set from the build machine (Uncontrolled Search Path Element)CVE-2026-340547.8 High
- freeipmiipmi-oem in FreeIPMI before 1.16.17 has exploitable buffer overflows on response messages. The...CVE-2026-33554Fix available7.5 High
- microsoft bing imagesMicrosoft Bing Images Remote Code Execution VulnerabilityCVE-2026-32194Public exploit9.8 Critical
- microsoft exchange online, microsoft 365 copilot chat, exchange online +2 moreMicrosoft Exchange Elevation of Privilege VulnerabilityCVE-2026-261379.9 Critical
- microsoft copilotMicrosoft Copilot Information Disclosure VulnerabilityCVE-2026-261366.5 Medium
- microsoft 365 copilotM365 Copilot Information Disclosure VulnerabilityCVE-2026-242995.3 Medium
- microsoft azure data factoryAzure Data Factory Information Disclosure VulnerabilityCVE-2026-236598.6 High
- microsoft bingMicrosoft Bing Tampering VulnerabilityCVE-2026-261206.5 Medium
- microsoft azure devops: msazure, azure devops +1 moreAzure DevOps: msazure Elevation of Privilege VulnerabilityCVE-2026-236588.6 High
- microsoft bing imagesMicrosoft Bing Images Remote Code Execution VulnerabilityCVE-2026-321919.8 Critical
- microsoft purviewMicrosoft Purview Elevation of Privilege VulnerabilityCVE-2026-261398.6 High
- microsoft purviewMicrosoft Purview Elevation of Privilege VulnerabilityCVE-2026-261388.6 High
- microsoft azure cloud shellAzure Cloud Shell Elevation of Privilege VulnerabilityCVE-2026-3216910.0 Critical
- microsoft .netASP.NET Core Kestrel in Microsoft .NET 8.0 before 8.0.22 and .NET 9.0 before 9.0.11 allows a...CVE-2026-25667Fix available7.5 High
- microsoft edge chromium, edge for android +1 moreMicrosoft Edge (Chromium-based) for Android Spoofing VulnerabilityCVE-2026-03855.0 Medium
- microsoft 365 copilot, edge, excel +26 more +28 moreM365 Copilot Information Disclosure VulnerabilityCVE-2026-261337.1 High
- microsoft authenticator, authenticator for android, authenticator for ios +2 moreMicrosoft Authenticator Information Disclosure VulnerabilityCVE-2026-261235.5 Medium
- microsoft 365 apps, 365 apps for enterprise +1 moreMicrosoft Excel Information Disclosure VulnerabilityCVE-2026-261447.5 High
- microsoft azure automation hybrid worker windows extensionHybrid Worker Extension (Arc‑enabled Windows VMs) Elevation of Privilege VulnerabilityCVE-2026-261417.8 High
- microsoft azure mcp server, azure mcp server tools 1.0.0 (npm), azure mcp server tools 1.0.0 (nuget) +3 more +5 moreAzure MCP Server Tools Elevation of Privilege VulnerabilityCVE-2026-26118Public exploitFix available8.8 High
- microsoft arc enabled servers - azure connected machine agent, arc enabled servers azure connected machine agent +1 moreArc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege VulnerabilityCVE-2026-261177.8 High
- microsoft office, 365 apps, 365 copilot +9 more +11 moreMicrosoft Office Remote Code Execution VulnerabilityCVE-2026-261108.4 High
- microsoft excel, office, 365 apps +9 more +11 moreMicrosoft Excel Remote Code Execution VulnerabilityCVE-2026-261098.4 High
- microsoft excel, office, 365 apps +9 more +11 moreMicrosoft Excel Remote Code Execution VulnerabilityCVE-2026-261087.8 High
- microsoft excel, office, 365 apps +9 more +11 moreMicrosoft Excel Remote Code Execution VulnerabilityCVE-2026-261077.8 High
- microsoft sharepoint server, sharepoint enterprise server 2016, sharepoint server 2019 +1 more +3 moreMicrosoft SharePoint Server Remote Code Execution VulnerabilityCVE-2026-261068.8 High
- microsoft azure linux virtual machines with azure diagnostics extension, linux diagnostic extension +1 moreLinux Azure Diagnostic extension (LAD) Elevation of Privilege VulnerabilityCVE-2026-236657.8 High
- microsoft azure iot explorerAzure IoT Explorer Information Disclosure VulnerabilityCVE-2026-236627.5 High
- microsoft azure iot explorerAzure IoT Explorer Information Disclosure VulnerabilityCVE-2026-236617.5 High
- microsoft zero-shot-scfoundation, github repo: zero shot scfoundation +1 moreGitHub: Zero Shot SCFoundation Remote Code Execution VulnerabilityCVE-2026-236548.8 High
- microsoft azure ad ssh login extension for linuxMicrosoft Azure AD SSH Login extension for Linux Elevation of Privilege VulnerabilityCVE-2026-261488.1 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +27 more +29 moreMapUrlToZone Security Feature Bypass VulnerabilityCVE-2026-236747.5 High
- microsoft 365 copilot, office for android +1 moreMicrosoft Office Elevation of Privilege VulnerabilityCVE-2026-261347.8 High
- Show moreLoading…