Skip to contentMicrosoft vulnerabilities
Products
- Windows Server 20196,458
- Windows Server 20166,403
- Windows Server 20196,362
- Windows Server 2019 (server Core Installation)6,265
- Windows 10 Version 18095,907
- Windows Server 20225,762
- Windows Server 20165,572
- Windows Server 2016 (server Core Installation)5,368
- Windows Server 20125,295
- Windows 10 Version 21h25,141
- Windows 10 Version 16074,987
- Windows Server 20224,948
- Windows 10 Version 22h24,643
- Windows Server 20254,336
- Windows Server 2025 (server Core Installation)4,334
- Windows 11 Version 24h24,232
- Windows Server 2012 R24,119
- Windows 11 Version 23h24,056
- Windows 10 18094,018
- Windows Server 2012 R2 (server Core Installation)3,974
- Windows 10 21h23,969
- Windows 10 22h23,968
- Windows Server 20123,881
- Windows Server 2012 (server Core Installation)3,748
- Windows Server 20253,633
- Windows 11 24h23,560
- Windows Server 20083,552
- Windows 11 Version 25h23,497
- Windows 10 16073,429
- Windows 11 23h23,409
- Windows 11 Version 26h13,230
- Windows 102,977
- Windows 11 25h22,827
- Windows 11 26h12,535
- Windows 72,367
- Windows 10 Version 15072,323
- Windows 8.12,215
- Windows Rt 8.12,020
- Windows Server 2008 R2 Service Pack 11,900
- Windows Server 2008 R2 Service Pack 1 (server Core Installation)1,886
- Windows 11 Version 22h21,776
- Windows Server 2022, 23h2 Edition (server Core Installation)1,723
- Windows Server 2008 Service Pack 2 (server Core Installation)1,689
- Windows Server 2008 Service Pack 21,686
- Windows Server 2022 23h21,676
- Windows 11 Version 26h21,663
- Windows 11 22h21,652
- Internet Explorer1,635
- Windows 11 Version 21h21,560
- Windows 11 Version 22h31,276
- Windows 10 Version 20h21,259
- Windows 10 15071,230
- Windows Server 2008 Service Pack 21,169
- Windows 8.11,117
- 365 Apps For Enterprise1,105
- Windows 10 Version 1903 For X64-based Systems1,069
- Windows Server, Version 1903 (server Core Installation)1,055
- Office1,050
- Windows 10 Version 19091,045
- Windows 10 Version 1903 For Arm64-based Systems1,037
Show 140 moreShow less
Newest
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Installer Elevation of Privilege VulnerabilityCVE-2026-626947.0 High
- microsoft .net, .net 10.0 runtime, .net 11.0 runtime +5 more +7 more.NET Elevation of Privilege VulnerabilityCVE-2026-69806Fix available7.0 High
- microsoft .net, .net 10.0 runtime, .net 11.0 runtime +7 more +9 more.NET Information Disclosure VulnerabilityCVE-2026-58649Fix available6.5 Medium
- microsoft jschmwiede jsch KnownHosts.java getRevokedKeys improper check for certificate revocationCVE-2026-86231Fix available6.3 Medium
- freeipmiFreeIPMI before 1.6.19 has a stack-based buffer overflow in _read_fru_data in libfreeipmi/fru...CVE-2026-85509Fix available9.8 Critical
- freeipmiipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in...CVE-2026-85508Fix available9.8 Critical
- freeipmiipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in...CVE-2026-85507Fix available9.8 Critical
- freeipmiipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in...CVE-2026-85506Fix available9.8 Critical
- freeipmiipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in...CVE-2026-85505Fix available7.5 High
- freeipmiFreeIPMI before 1.6.19 has a stack-based buffer overflow in...CVE-2026-85504Fix available9.8 Critical
- microsoft power platformPower Automate Elevation of Privilege VulnerabilityCVE-2026-658188.5 High
- microsoft entra id, entra +1 moreMicrosoft Entra ID Elevation of Privilege VulnerabilityCVE-2026-629169.1 Critical
- microsoft azure cosmos dbAzure Cosmos DB Spoofing VulnerabilityCVE-2026-698578.5 High
- microsoft azure active directory b2c, entra +1 moreMicrosoft Azure Active Directory B2C Elevation of Privilege VulnerabilityCVE-2026-8371110.0 Critical
- microsoft copilot studioCopilot Studio Elevation of Privilege VulnerabilityCVE-2026-800989.3 Critical
- microsoft azure ai language authoringAzure AI Language Elevation of Privilege VulnerabilityCVE-2026-7035210.0 Critical
- microsoft fabricMicrosoft Fabric Elevation of Privilege VulnerabilityCVE-2026-701788.5 High
- microsoft discovery studioMicrosoft Discovery Studio Information Disclosure VulnerabilityCVE-2026-629067.4 High
- microsoft colordColord: Slow rejection of oversized malformed color stringsCVE-2026-85062Fix available6.9 Medium
- microsoft winml-cliWindows ML CLI: CORS misconfig enables localhost RCECVE-2026-84452Fix available8.6 High
- microsoft edge (chromium-based), edge chromium, edge for android +4 more +6 moreMicrosoft Edge (Chromium-based) Remote Code Execution VulnerabilityCVE-2026-729848.8 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Security Feature Bypass VulnerabilityCVE-2026-703095.4 Medium
- microsoft edge (chromium-based), edge chromium, edge for android +4 more +6 moreMicrosoft Edge (Chromium-based) Remote Code Execution VulnerabilityCVE-2026-667984.3 Medium
- microsoft edge (chromium-based), edge chromium, edge for android +4 more +6 moreMicrosoft Edge (Chromium-based) Spoofing VulnerabilityCVE-2026-663246.5 Medium
- microsoft edge (chromium-based), edge chromium, edge for android +4 more +6 moreMicrosoft Edge (Chromium-based) Remote Code Execution VulnerabilityCVE-2026-663235.4 Medium
- microsoft edge (chromium-based), edge chromium, edge for android +4 more +6 moreMicrosoft Edge (Chromium-based) Information Disclosure VulnerabilityCVE-2026-629045.4 Medium
- microsoft edge chromium, edge (chromium-based), edge for android +4 more +6 moreCopilot Chat (Microsoft Edge) Information Disclosure VulnerabilityCVE-2026-586164.4 Medium
- microsoft edge, edge for ios, edge chromium +1 more +3 moreMicrosoft Edge for iOS Spoofing VulnerabilityCVE-2026-703315.4 Medium
- microsoft boostWordPress Boost plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-325567.1 High
- microsoft boostWordPress Boost plugin <= 2.0.4 - SQL Injection vulnerabilityCVE-2026-325559.3 Critical
- gnu emacsGNU Emacs < 31.0.91 Heap Over-Read via PBM/PPM/PGM Image LoaderCVE-2026-77219Fix available6.9 Medium
- microsoft ufoMicrosoft UFO: DNS Rebinding → Unauthenticated File Read / Command ExecutionCVE-2026-623168.8 High
- microsoft azure sql databaseAzure SQL Database Elevation of Privilege VulnerabilityCVE-2026-6950210.0 Critical
- microsoft copilot in azure, azure copilot +1 moreMicrosoft Copilot in Azure Information Disclosure VulnerabilityCVE-2026-698557.7 High
- microsoft azure virtual machinesAzure Virtual Machines Elevation of Privilege VulnerabilityCVE-2026-695438.5 High
- microsoft partner centerMicrosoft Partner Center Information Disclosure VulnerabilityCVE-2026-695588.6 High
- microsoft azure arcAzure Arc Elevation of Privilege VulnerabilityCVE-2026-6955510.0 Critical
- microsoft azure logic appsAzure Logic Apps Elevation of Privilege VulnerabilityCVE-2026-694009.6 Critical
- microsoft azure data manager for energyAzure Data Manager for Energy Remote Code Execution VulnerabilityCVE-2026-694198.5 High
- microsoft azure sql databaseAzure SQL Database Elevation of Privilege VulnerabilityCVE-2026-687829.9 Critical
- microsoft azure data factoryAzure Data Factory Information Disclosure VulnerabilityCVE-2026-668008.6 High
- microsoft azure sql databaseAzure SQL Database Elevation of Privilege VulnerabilityCVE-2026-663099.1 Critical
- microsoft azure web appsAzure Arc Elevation of Privilege VulnerabilityCVE-2026-6581610.0 Critical
- microsoft azure managed instance for apache cassandraAzure Managed Instance for Apache Cassandra Remote Code Execution VulnerabilityCVE-2026-6577010.0 Critical
- microsoft fabricMicrosoft Fabric Elevation of Privilege VulnerabilityCVE-2026-635099.9 Critical
- microsoft office, word, 365 apps for enterprise +10 more +12 moreMicrosoft Word Information Disclosure VulnerabilityCVE-2026-701056.5 Medium
- microsoft remote help, windows remote help +1 moreMicrosoft Remote Help Denial of Service VulnerabilityCVE-2026-550155.5 Medium
- microsoft remote help, windows remote help +1 moreWindows Remote Help Defense Spoofing VulnerabilityCVE-2026-550137.1 High
- microsoft entra id, entra +1 moreMicrosoft Entra ID Elevation of Privilege VulnerabilityCVE-2026-698519.9 Critical
- microsoft entra id, entra +1 moreMicrosoft Entra ID Remote Code Execution VulnerabilityCVE-2026-69836Known exploitedPublic exploit10.0 Critical
- Show moreLoading…