Skip to contentMicrosoft vulnerabilities
Products
- Windows Server 20196,458
- Windows Server 20166,403
- Windows Server 20196,362
- Windows Server 2019 (server Core Installation)6,265
- Windows 10 Version 18095,907
- Windows Server 20225,762
- Windows Server 20165,572
- Windows Server 2016 (server Core Installation)5,368
- Windows Server 20125,295
- Windows 10 Version 21h25,141
- Windows 10 Version 16074,987
- Windows Server 20224,948
- Windows 10 Version 22h24,643
- Windows Server 20254,336
- Windows Server 2025 (server Core Installation)4,334
- Windows 11 Version 24h24,232
- Windows Server 2012 R24,119
- Windows 11 Version 23h24,056
- Windows 10 18094,018
- Windows Server 2012 R2 (server Core Installation)3,974
- Windows 10 21h23,969
- Windows 10 22h23,968
- Windows Server 20123,881
- Windows Server 2012 (server Core Installation)3,748
- Windows Server 20253,633
- Windows 11 24h23,560
- Windows Server 20083,552
- Windows 11 Version 25h23,497
- Windows 10 16073,429
- Windows 11 23h23,409
- Windows 11 Version 26h13,230
- Windows 102,977
- Windows 11 25h22,827
- Windows 11 26h12,535
- Windows 72,367
- Windows 10 Version 15072,323
- Windows 8.12,215
- Windows Rt 8.12,020
- Windows Server 2008 R2 Service Pack 11,900
- Windows Server 2008 R2 Service Pack 1 (server Core Installation)1,886
- Windows 11 Version 22h21,776
- Windows Server 2022, 23h2 Edition (server Core Installation)1,723
- Windows Server 2008 Service Pack 2 (server Core Installation)1,689
- Windows Server 2008 Service Pack 21,686
- Windows Server 2022 23h21,676
- Windows 11 Version 26h21,663
- Windows 11 22h21,652
- Internet Explorer1,635
- Windows 11 Version 21h21,560
- Windows 11 Version 22h31,276
- Windows 10 Version 20h21,259
- Windows 10 15071,230
- Windows Server 2008 Service Pack 21,169
- Windows 8.11,117
- 365 Apps For Enterprise1,105
- Windows 10 Version 1903 For X64-based Systems1,069
- Windows Server, Version 1903 (server Core Installation)1,055
- Office1,050
- Windows 10 Version 19091,045
- Windows 10 Version 1903 For Arm64-based Systems1,037
Show 140 moreShow less
Newest
- freedesktop libinputIn libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output...CVE-2026-50292Fix available7.4 High
- freeipmiipmi-oem in FreeIPMI before 1.6.18 has exploitable buffer overflows on response messages. The...CVE-2026-50031Fix available7.5 High
- microsoft sharepoint server, sharepoint enterprise server 2016, sharepoint server 2019 +1 more +3 moreMicrosoft SharePoint Server Remote Code Execution VulnerabilityCVE-2026-472948.0 High
- microsoft libsolv, red hat enterprise linux 10, enterprise linux 7 +6 more +8 moreLibsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of serviceCVE-2026-48863Fix available7.5 High
- microsoft .net, asp.net core, .net 10.0 runtime +14 more +16 moreASP.NET Core Denial of Service VulnerabilityCVE-2026-45591Fix available7.5 High
- microsoft .net, .net 10.0 runtime, .net 8.0 +2 more +4 more.NET Tampering VulnerabilityCVE-2026-45491Fix available6.2 Medium
- microsoft ufoMicrosoft UFO accepts cross-device TASK_END messages by session_id only, allowing peer task-result injectionCVE-2026-465385.9 Medium
- microsoft ufoMicrosoft UFO shared WebSocket handler state causes cross-client response hijackingCVE-2026-464166.3 Medium
- microsoft ufoMicrosoft UFO WebSocket role spoofing allows authenticated peer task hijackingCVE-2026-464148.8 High
- microsoft ufoMicrosoft UFO uses untrusted task_name in log paths, allowing authenticated path traversal and log file creation outside the logs directoryCVE-2026-464028.1 High
- microsoft ufoMicrosoft UFO reuses client-supplied WebSocket session IDs and replays stale task results to new authenticated requestersCVE-2026-465445.3 Medium
- microsoft ufoOS Command Injection in Microsoft UFO Shell Action Replay via Stored Session JSONCVE-2026-453227.8 High
- microsoft global secure access, global secure access (gsa) +1 moreMicrosoft Global Secure Access (GSA) Information Disclosure VulnerabilityCVE-2026-236637.5 High
- microsoft entra id, entra +1 moreMicrosoft Entra ID Elevation of Privilege VulnerabilityCVE-2026-4290110.0 Critical
- microsoft planetary computer, planetary computer pro (geocatalog) +1 moreMicrosoft Planetary Computer Pro Information Disclosure VulnerabilityCVE-2026-4110410.0 Critical
- microsoft sharepoint enterprise server 2016, sharepoint server 2019, sharepoint server subscription edition +1 more +3 moreMicrosoft SharePoint Remote Code Execution VulnerabilityCVE-2026-45659In KEVPublic exploitEPSS 80.2%8.8 High
- microsoft entra id, entra +1 moreMicrosoft Azure Active Directory B2C Elevation of Privilege VulnerabilityCVE-2026-338439.1 Critical
- microsoft 365 copilot, 365 copilot for ios +1 moreMicrosoft Copilot Tampering VulnerabilityCVE-2026-410909.3 Critical
- microsoft azure stack hciAzure Stack HCI Information Disclosure VulnerabilityCVE-2026-261477.7 High
- microsoft 365 copilotM365 Copilot Information Disclosure VulnerabilityCVE-2026-428276.5 Medium
- microsoft azure resource managerAzure Resource Manager Elevation of Privilege VulnerabilityCVE-2026-4728010.0 Critical
- microsoft azure virtual network gatewayAzure Virtual Network Gateway Remote Code Execution VulnerabilityCVE-2026-404119.9 Critical
- microsoft azure privileged identity management (pim), azure privileged identity management +1 moreAzure Privileged Identity Management (PIM) Elevation of Privilege VulnerabilityCVE-2026-354308.8 High
- microsoft power pagesMicrosoft Power Pages Remote Code Execution VulnerabilityCVE-2026-2365210.0 Critical
- microsoft azure orbital spatioAzure Orbital Spatio Remote Code Execution VulnerabilityCVE-2026-4041210.0 Critical
- microsoft malware protection engineMicrosoft Defender Remote Code Execution VulnerabilityCVE-2026-45584Public exploit8.1 High
- microsoft windows admin center in azure portal, windows admin center +1 moreWindows Admin Center in Azure Portal Elevation of Privilege VulnerabilityCVE-2026-428347.8 High
- microsoft defender, malware protection engine +1 moreMicrosoft Defender Elevation of Privilege VulnerabilityCVE-2026-41091In KEVPublic exploit7.8 High
- microsoft defender, defender antimalware platform +1 moreMicrosoft Defender Denial of Service VulnerabilityCVE-2026-45498In KEVPublic exploitEPSS 63.1%4.0 Medium
- microsoft boostBoost <= 2.0.3 - Unauthenticated PHP Object Injection via STYXKEY-BOOST_USER_LOCATION CookieCVE-2026-76379.8 Critical
- microsoft boostBoost <= 2.0.3 - Unauthenticated Blind SQL Injection via Multiple ParametersCVE-2026-90107.5 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +5 more +7 moreWindows BitLocker Security Feature Bypass VulnerabilityCVE-2026-45585Public exploit6.8 Medium
- microsoft azure local, azure resource manager +1 moreAzure Local Disconnected Operations (ALDO) Elevation of Privilege VulnerabilityCVE-2026-4282210.0 Critical
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution VulnerabilityCVE-2026-454958.8 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Spoofing VulnerabilityCVE-2026-454945.4 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Security Feature Bypass VulnerabilityCVE-2026-454925.4 Medium
- lldpdlldpd: Heap OOB Read in VLAN Decapsulation memmoveCVE-2026-46433Fix available6.5 Medium
- microsoft apmMicrosoft APM: Windows absolute-path tar member overwrite during legacy-bundle probing in `apm install`CVE-2026-46383Fix available5.5 Medium
- microsoft apmMicrosoft APM: Symlinks under `.apm/prompts/` and `.apm/agents/` are dereferenced during `apm install`, copying host-local file contents into the project treeCVE-2026-45539Fix available7.4 High
- microsoft authenticator, authenticator for android, authenticator for ios +2 moreMicrosoft Authenticator Information Disclosure VulnerabilityCVE-2026-416159.6 Critical
- microsoft exchange server, microsoft, microsoft exchange server subscription edition +4 more +6 moreMicrosoft Exchange Server Spoofing VulnerabilityCVE-2026-42897In KEVPublic exploitEPSS 70.7%8.1 High
- microsoft dynamics 365, dynamics 365 customer insights +1 moreMicrosoft Dynamics 365 Customer Insights Elevation of Privilege VulnerabilityCVE-2026-338217.7 High
- microsoft outlook for ios, outlook +1 moreMicrosoft Outlook for iOS Tampering VulnerabilityCVE-2026-428937.4 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Elevation of Privilege VulnerabilityCVE-2026-428385.4 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) for Android Spoofing VulnerabilityCVE-2026-404164.3 Medium
- microsoft dynamics 365, dynamics 365 (on-premises) version 9.1 +1 moreMicrosoft Dynamics 365 On-Premises Remote Code Execution VulnerabilityCVE-2026-428339.1 Critical
- microsoft office, excel, excel for android +5 more +7 moreMicrosoft Office Spoofing VulnerabilityCVE-2026-428327.7 High
- microsoft azure monitor agent metrics extension, azure monitor agent +1 moreAzure Monitor Agent Metrics Extension Elevation of Privilege VulnerabilityCVE-2026-428306.5 Medium
- microsoft azure logic appsAzure Logic Apps Elevation of Privilege VulnerabilityCVE-2026-428239.9 Critical
- microsoft visual studio codeVisual Studio Code Elevation of Privilege VulnerabilityCVE-2026-416138.8 High
- Show moreLoading…