Skip to contentMicrosoft vulnerabilities
Products
- Windows Server 20196,458
- Windows Server 20166,403
- Windows Server 20196,362
- Windows Server 2019 (server Core Installation)6,265
- Windows 10 Version 18095,907
- Windows Server 20225,762
- Windows Server 20165,572
- Windows Server 2016 (server Core Installation)5,368
- Windows Server 20125,295
- Windows 10 Version 21h25,141
- Windows 10 Version 16074,987
- Windows Server 20224,948
- Windows 10 Version 22h24,643
- Windows Server 20254,336
- Windows Server 2025 (server Core Installation)4,334
- Windows 11 Version 24h24,232
- Windows Server 2012 R24,119
- Windows 11 Version 23h24,056
- Windows 10 18094,018
- Windows Server 2012 R2 (server Core Installation)3,974
- Windows 10 21h23,969
- Windows 10 22h23,968
- Windows Server 20123,881
- Windows Server 2012 (server Core Installation)3,748
- Windows Server 20253,633
- Windows 11 24h23,560
- Windows Server 20083,552
- Windows 11 Version 25h23,497
- Windows 10 16073,429
- Windows 11 23h23,409
- Windows 11 Version 26h13,230
- Windows 102,977
- Windows 11 25h22,827
- Windows 11 26h12,535
- Windows 72,367
- Windows 10 Version 15072,323
- Windows 8.12,215
- Windows Rt 8.12,020
- Windows Server 2008 R2 Service Pack 11,900
- Windows Server 2008 R2 Service Pack 1 (server Core Installation)1,886
- Windows 11 Version 22h21,776
- Windows Server 2022, 23h2 Edition (server Core Installation)1,723
- Windows Server 2008 Service Pack 2 (server Core Installation)1,689
- Windows Server 2008 Service Pack 21,686
- Windows Server 2022 23h21,676
- Windows 11 Version 26h21,663
- Windows 11 22h21,652
- Internet Explorer1,635
- Windows 11 Version 21h21,560
- Windows 11 Version 22h31,276
- Windows 10 Version 20h21,259
- Windows 10 15071,230
- Windows Server 2008 Service Pack 21,169
- Windows 8.11,117
- 365 Apps For Enterprise1,105
- Windows 10 Version 1903 For X64-based Systems1,069
- Windows Server, Version 1903 (server Core Installation)1,055
- Office1,050
- Windows 10 Version 19091,045
- Windows 10 Version 1903 For Arm64-based Systems1,037
Show 140 moreShow less
Newest
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution VulnerabilityCVE-2026-579857.6 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution VulnerabilityCVE-2026-579847.5 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Security Feature Bypass VulnerabilityCVE-2026-579838.7 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution VulnerabilityCVE-2026-579757.5 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution VulnerabilityCVE-2026-566458.8 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Information Disclosure VulnerabilityCVE-2026-559454.2 Medium
- microsoft exchange online, microsoft exchange online +1 moreMicrosoft Exchange Online Elevation of Privilege VulnerabilityCVE-2026-549988.8 High
- microsoft 365 copilotMicrosoft 365 Copilot Elevation of Privilege VulnerabilityCVE-2026-411069.3 Critical
- microsoft azure openai, azure open ai +1 moreAzure OpenAI Elevation of Privilege VulnerabilityCVE-2026-454999.9 Critical
- microsoft azure synapseMicrosoft Azure Synapse Elevation of Privilege VulnerabilityCVE-2026-261454.8 Medium
- microsoft entra provisioning serviceMicrosoft Entra Provisioning Service Elevation of Privilege VulnerabilityCVE-2026-571009.9 Critical
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution VulnerabilityCVE-2026-505218.3 High
- microsoft openapi.netMicrosoft.OpenAPI: Circular schema references may terminate OpenAPI parsingCVE-2026-49451Fix available7.5 High
- microsoft github copilotGitHub Copilot 1.372.0 allows filesystem access outside of a workspace folder (without user...CVE-2025-663897.5 High
- microsoft 365 copilotMicrosoft 365 Copilot's Business Chat Elevation of Privilege VulnerabilityCVE-2026-476458.8 High
- microsoft exchange online, microsoft exchange online +1 moreMicrosoft Exchange Online Elevation of Privilege VulnerabilityCVE-2026-485829.6 Critical
- microsoft github copilot chatMicrosoft Visual Studio Code CoPilot Chat Security Feature Bypass VulnerabilityCVE-2026-505196.5 Medium
- microsoft azure synapseMicrosoft Azure Synapse Elevation of Privilege VulnerabilityCVE-2026-485849.9 Critical
- microsoft azure active directoryAzure Active Directory Elevation of Privilege VulnerabilityCVE-2026-4548010.0 Critical
- microsoft 365 copilotMicrosoft Copilot Tampering VulnerabilityCVE-2026-428956.5 Medium
- microsoft edge chromium, edge (chromium-based) +1 moreMicrosoft Entra ID Spoofing VulnerabilityCVE-2026-322088.8 High
- microsoft kiota-typescript@microsoft/kiota-http-fetchlibrary: Bearer token and Cookie leak across origin on redirect due to case-mismatched scrub in fetchRequestAdapterCVE-2026-49336Fix available5.5 Medium
- microsoft .net, .net framework, .net 8.0 runtime +10 more +12 more.NET Framework Elevation of Privilege VulnerabilityCVE-2026-50650Fix available7.8 High
- microsoft .net, .net 8.0 runtime, .net 9.0 runtime +10 more +12 more.NET Remote Code Execution VulnerabilityCVE-2026-50649Fix available7.8 High
- microsoft .net, .net framework, .net 8.0 runtime +12 more +14 more.NET Framework Remote Code Execution VulnerabilityCVE-2026-50646Fix available7.8 High
- microsoft heif image extensionMicrosoft HEIF Image Extensions 1.2.22.0 has an out-of-bounds read because...CVE-2025-62821Public exploit9.1 Critical
- microsoft dynamics 365Dynamics 365 Elevation of Privilege VulnerabilityCVE-2026-476479.9 Critical
- microsoft 365 copilotM365 Copilot Information Disclosure VulnerabilityCVE-2026-541309.8 Critical
- microsoft azure ai bot serviceAzure Bot Service Elevation of Privilege VulnerabilityCVE-2026-321747.7 High
- microsoft cost managementMicrosoft Cost Management Information Disclosure VulnerabilityCVE-2026-476337.5 High
- microsoft .net, .net 10.0 runtime, .net 8.0 runtime +1 more +3 more.NET Denial of Service VulnerabilityCVE-2026-57108Fix available7.5 High
- microsoft .net, .net 10.0 runtime, .net 8.0 runtime +1 more +3 moreASP.NET Core Denial of Service VulnerabilityCVE-2026-56170Fix available7.5 High
- microsoft .net, .net 10.0 runtime, .net 8.0 runtime +14 more +16 more.NET Spoofing VulnerabilityCVE-2026-50659Fix available6.5 Medium
- microsoft .net, .net 10.0 runtime, .net 8.0 runtime +6 more +8 more.NET Denial of Service VulnerabilityCVE-2026-50651Fix available7.5 High
- microsoft .net, .net framework, .net 10.0 runtime +13 more +15 more.NET Framework Denial of Service VulnerabilityCVE-2026-50648Fix available7.5 High
- microsoft .net, .net 10.0 runtime, .net 8.0 runtime +6 more +8 more.NET Security Feature Bypass VulnerabilityCVE-2026-50528Fix available8.2 High
- microsoft .net, .net framework, .net 10.0 runtime +13 more +15 more.NET Framework Denial of Service VulnerabilityCVE-2026-50527Fix available7.5 High
- microsoft .net, .net 10.0 runtime, .net 8.0 runtime +6 more +8 more.NET Tampering VulnerabilityCVE-2026-50526Fix available7.0 High
- microsoft .net, .net 10.0 runtime, .net 8.0 runtime +14 more +16 more.NET Denial of Service VulnerabilityCVE-2026-50525Fix available7.5 High
- microsoft .net, .net 10.0 runtime, .net 8.0 runtime +6 more +8 more.NET Framework Denial of Service VulnerabilityCVE-2026-50524Fix available7.5 High
- microsoft .net, .net 10.0 runtime, .net 8.0 runtime +6 more +8 moreASP.NET Core Elevation of Privilege VulnerabilityCVE-2026-47303Fix available8.8 High
- microsoft .net, .net 10.0 runtime, .net 8.0 runtime +13 more +15 more.NET Denial of Service VulnerabilityCVE-2026-47302Fix available7.5 High
- microsoft .net, .net 10.0 runtime, .net 8.0 runtime +6 more +8 moreASP.NET Core Elevation of Privilege VulnerabilityCVE-2026-47300Fix available8.8 High
- microsoft malware protection engineMicrosoft Defender Elevation of Privilege VulnerabilityCVE-2026-50656Public exploitEPSS 11.2%7.8 High
- microsoft gdGD versions before 2.86 for Perl allow OS command injection and file overwrite via a 2-arg open() of filename arguments in _make_filehandleCVE-2026-11526Fix available9.8 Critical
- microsoft pc managerMicrosoft PC Manager Elevation of Privilege VulnerabilityCVE-2026-505117.8 High
- microsoft pc managerMicrosoft PC Manager Elevation of Privilege VulnerabilityCVE-2026-505127.8 High
- microsoft windows 11 version 26h1, windows 11 26h1 +1 moreWindows DWM Core Library Elevation of Privilege VulnerabilityCVE-2026-448047.8 High
- microsoft windows 11 version 26h1, windows 11 26h1 +1 moreWindows DWM Core Library Elevation of Privilege VulnerabilityCVE-2026-448137.8 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 +12 more +14 moreRemote Desktop Client Remote Code Execution VulnerabilityCVE-2026-429937.5 High
- Show moreLoading…