Skip to contentMicrosoft vulnerabilities
Products
- Windows Server 20196,458
- Windows Server 20166,403
- Windows Server 20196,362
- Windows Server 2019 (server Core Installation)6,265
- Windows 10 Version 18095,907
- Windows Server 20225,762
- Windows Server 20165,572
- Windows Server 2016 (server Core Installation)5,368
- Windows Server 20125,295
- Windows 10 Version 21h25,141
- Windows 10 Version 16074,987
- Windows Server 20224,948
- Windows 10 Version 22h24,643
- Windows Server 20254,336
- Windows Server 2025 (server Core Installation)4,334
- Windows 11 Version 24h24,232
- Windows Server 2012 R24,119
- Windows 11 Version 23h24,056
- Windows 10 18094,018
- Windows Server 2012 R2 (server Core Installation)3,974
- Windows 10 21h23,969
- Windows 10 22h23,968
- Windows Server 20123,881
- Windows Server 2012 (server Core Installation)3,748
- Windows Server 20253,633
- Windows 11 24h23,560
- Windows Server 20083,552
- Windows 11 Version 25h23,497
- Windows 10 16073,429
- Windows 11 23h23,409
- Windows 11 Version 26h13,230
- Windows 102,977
- Windows 11 25h22,827
- Windows 11 26h12,535
- Windows 72,367
- Windows 10 Version 15072,323
- Windows 8.12,215
- Windows Rt 8.12,020
- Windows Server 2008 R2 Service Pack 11,900
- Windows Server 2008 R2 Service Pack 1 (server Core Installation)1,886
- Windows 11 Version 22h21,776
- Windows Server 2022, 23h2 Edition (server Core Installation)1,723
- Windows Server 2008 Service Pack 2 (server Core Installation)1,689
- Windows Server 2008 Service Pack 21,686
- Windows Server 2022 23h21,676
- Windows 11 Version 26h21,663
- Windows 11 22h21,652
- Internet Explorer1,635
- Windows 11 Version 21h21,560
- Windows 11 Version 22h31,276
- Windows 10 Version 20h21,259
- Windows 10 15071,230
- Windows Server 2008 Service Pack 21,169
- Windows 8.11,117
- 365 Apps For Enterprise1,105
- Windows 10 Version 1903 For X64-based Systems1,069
- Windows Server, Version 1903 (server Core Installation)1,055
- Office1,050
- Windows 10 Version 19091,045
- Windows 10 Version 1903 For Arm64-based Systems1,037
Show 140 moreShow less
Newest
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Application Identity (AppID) Subsystem Elevation of Privilege VulnerabilityCVE-2026-343437.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Print Spooler Elevation of Privilege VulnerabilityCVE-2026-343427.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Win32k Elevation of Privilege VulnerabilityCVE-2026-343337.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWin32k Elevation of Privilege VulnerabilityCVE-2026-343317.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWin32k Elevation of Privilege VulnerabilityCVE-2026-343307.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreMicrosoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityCVE-2026-343298.8 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 +14 more +16 moreWindows Kernel Elevation of Privilege VulnerabilityCVE-2026-338417.8 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +5 more +7 moreWin32k Elevation of Privilege VulnerabilityCVE-2026-338407.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWin32k Elevation of Privilege VulnerabilityCVE-2026-338397.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Event Logging Service Elevation of Privilege VulnerabilityCVE-2026-338347.8 High
- microsoft azure sdk for javaAzure SDK for Java Security Feature Bypass VulnerabilityCVE-2026-33117Fix available9.1 Critical
- microsoft 365 apps for enterprise, office 2016, office 2019 +31 more +33 moreWindows Rich Text Edit Elevation of Privilege VulnerabilityCVE-2026-215306.7 Medium
- microsoft .net, .net 10.0, .net 8.0 +17 more +19 more.NET Elevation of Privilege VulnerabilityCVE-2026-32177Fix available7.3 High
- microsoft azure monitor, azure monitor agent +1 moreAzure Monitor Agent Elevation of Privilege VulnerabilityCVE-2026-322047.8 High
- microsoft entra id, entra +1 moreAzure Entra ID Spoofing VulnerabilityCVE-2026-403799.3 Critical
- microsoft .net, .net 10.0, .net 8.0 +8 more +10 moreASP.NET Core Denial of Service VulnerabilityCVE-2026-42899Fix available7.5 High
- microsoft local-path-provisioner, suse local path provisioner +1 moreLocal Path Provisioner: HelperPod Template InjectionCVE-2026-44543Fix available8.7 High
- microsoft apmMicrosoft APM: plugin.json component paths escape plugin root and copy arbitrary host files during installCVE-2026-44641Fix available7.1 High
- microsoft azure devopsAzure DevOps Information Disclosure VulnerabilityCVE-2026-42826Public exploit10.0 Critical
- microsoft azure cloud shellAzure Cloud Shell Spoofing VulnerabilityCVE-2026-354289.6 Critical
- microsoft azure ai foundryAzure AI Foundry Elevation of Privilege VulnerabilityCVE-2026-354358.6 High
- microsoft partner centerMicrosoft Partner Center Spoofing VulnerabilityCVE-2026-343278.2 High
- microsoft azure managed instance for apache cassandraAzure Managed Instance for Apache Cassandra Remote Code Execution VulnerabilityCVE-2026-338449.0 Critical
- microsoft teamsMicrosoft Team Events Portal Information Disclosure VulnerabilityCVE-2026-338239.6 Critical
- microsoft azure machine learningAzure Machine Learning Notebook Spoofing VulnerabilityCVE-2026-322078.8 High
- microsoft azure managed instance for apache cassandraAzure Managed Instance for Apache Cassandra Remote Code Execution VulnerabilityCVE-2026-331099.9 Critical
- microsoft copilot chat (microsoft edge), copilot chat +1 moreCopilot Chat (Microsoft Edge) Information Disclosure VulnerabilityCVE-2026-331117.5 High
- microsoft azure monitor action group notification systemAzure Monitor Action Group Notification System Elevation of Privilege VulnerabilityCVE-2026-411058.1 High
- microsoft 365 copilot chat, 365 copilot's business chat +1 moreM365 Copilot Information Disclosure VulnerabilityCVE-2026-261297.5 High
- microsoft 365 copilot chat, 365 copilot's business chat +1 moreM365 Copilot Information Disclosure VulnerabilityCVE-2026-261647.5 High
- microsoft kiota-java, microsoft-kiota-http, github.com/microsoft/kiota-http-go +3 more +5 moreKiota abstractions RedirectHandler leaks Cookie/Proxy-Authorization headers on cross-host redirectCVE-2026-44503Fix available7.0 High
- andybalholm brotli, 7-zip p7zip, anthropic bun +100 more +102 moreOut-of-Bounds Write in Google Brotli DecoderCVE-2026-111497In KEVPublic exploitFix availableEPSS 82.6%9.2 Critical
- microsoft azure iot centralAzure IoT Central Elevation of Privilege VulnerabilityCVE-2026-215159.9 Critical
- microsoft entra id, entra +1 moreMicrosoft Entra ID Entitlement Management Spoofing VulnerabilityCVE-2026-3543110.0 Critical
- microsoft power appsMicrosoft Power Apps Remote Code Execution VulnerabilityCVE-2026-321728.0 High
- microsoft partner centerMicrosoft Partner Center Elevation of Privilege VulnerabilityCVE-2026-243039.6 Critical
- microsoft purview ediscoveryMicrosoft Purview eDiscovery Elevation of Privilege VulnerabilityCVE-2026-261508.6 High
- microsoft bingMicrosoft Bing Remote Code Execution VulnerabilityCVE-2026-3381910.0 Critical
- microsoft 365 copilotMicrosoft 365 Copilot Elevation of Privilege VulnerabilityCVE-2026-331029.3 Critical
- microsoft dynamics 365, dynamics 365 (online) +1 moreMicrosoft Dynamics 365 (online) Spoofing VulnerabilityCVE-2026-322109.3 Critical
- azure go-ntlmsspgo-ntlmssp NTLM challenges can panic on malformed payloadsCVE-2026-32952Fix available5.3 Medium
- microsoft asp.net core, asp.net core 10.0, visual studio 2026 version 18.5 +4 more +6 moreASP.NET Core Elevation of Privilege VulnerabilityCVE-2026-40372Fix availableEPSS 11.2%9.1 Critical
- microsoft kiotaKiota: Code Generation Literal InjectionCVE-2026-41134Fix available7.3 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreUniversal Plug and Play (upnp.dll) Information Disclosure VulnerabilityCVE-2026-322145.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Snipping Tool Spoofing VulnerabilityCVE-2026-33829Public exploit4.3 Medium
- microsoft internet key exchange (ike) service extensions, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreWindows Internet Key Exchange (IKE) Service Extensions Remote Code Execution VulnerabilityCVE-2026-33824In KEVPublic exploitEPSS 77.4%9.8 Critical
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows TCP/IP Remote Code Execution VulnerabilityCVE-2026-33827Public exploit8.1 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2021 +4 more +6 moreMicrosoft Word Remote Code Execution VulnerabilityCVE-2026-331158.4 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2021 +4 more +6 moreMicrosoft Word Remote Code Execution VulnerabilityCVE-2026-331148.4 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWin32k Elevation of Privilege VulnerabilityCVE-2026-331047.0 High
- Show moreLoading…