Skip to contentMicrosoft vulnerabilities
Products
- Windows Server 20196,458
- Windows Server 20166,403
- Windows Server 20196,362
- Windows Server 2019 (server Core Installation)6,265
- Windows 10 Version 18095,907
- Windows Server 20225,762
- Windows Server 20165,572
- Windows Server 2016 (server Core Installation)5,368
- Windows Server 20125,295
- Windows 10 Version 21h25,141
- Windows 10 Version 16074,987
- Windows Server 20224,948
- Windows 10 Version 22h24,643
- Windows Server 20254,336
- Windows Server 2025 (server Core Installation)4,334
- Windows 11 Version 24h24,232
- Windows Server 2012 R24,119
- Windows 11 Version 23h24,056
- Windows 10 18094,018
- Windows Server 2012 R2 (server Core Installation)3,974
- Windows 10 21h23,969
- Windows 10 22h23,968
- Windows Server 20123,881
- Windows Server 2012 (server Core Installation)3,748
- Windows Server 20253,633
- Windows 11 24h23,560
- Windows Server 20083,552
- Windows 11 Version 25h23,497
- Windows 10 16073,429
- Windows 11 23h23,409
- Windows 11 Version 26h13,230
- Windows 102,977
- Windows 11 25h22,827
- Windows 11 26h12,535
- Windows 72,367
- Windows 10 Version 15072,323
- Windows 8.12,215
- Windows Rt 8.12,020
- Windows Server 2008 R2 Service Pack 11,900
- Windows Server 2008 R2 Service Pack 1 (server Core Installation)1,886
- Windows 11 Version 22h21,776
- Windows Server 2022, 23h2 Edition (server Core Installation)1,723
- Windows Server 2008 Service Pack 2 (server Core Installation)1,689
- Windows Server 2008 Service Pack 21,686
- Windows Server 2022 23h21,676
- Windows 11 Version 26h21,663
- Windows 11 22h21,652
- Internet Explorer1,635
- Windows 11 Version 21h21,560
- Windows 11 Version 22h31,276
- Windows 10 Version 20h21,259
- Windows 10 15071,230
- Windows Server 2008 Service Pack 21,169
- Windows 8.11,117
- 365 Apps For Enterprise1,105
- Windows 10 Version 1903 For X64-based Systems1,069
- Windows Server, Version 1903 (server Core Installation)1,055
- Office1,050
- Windows 10 Version 19091,045
- Windows 10 Version 1903 For Arm64-based Systems1,037
Show 140 moreShow less
Newest
- microsoft .net, .net framework, .net framework 3.5 +8 more +10 more.NET Denial of Service VulnerabilityCVE-2026-96959Fix available7.5 High
- microsoft .net, .net framework, .net framework 3.5 +8 more +10 more.NET Denial of Service VulnerabilityCVE-2026-96958Fix available7.5 High
- microsoft .net, .net 10.0 runtime, .net 11.0 runtime +4 more +6 more.NET Security Feature Bypass VulnerabilityCVE-2026-96957Fix available8.8 High
- microsoft .net 10.0 runtime, .net 11.0 runtime, .net 8.0 runtime +3 more +5 more.NET Security Feature Bypass VulnerabilityCVE-2026-96238Fix available6.5 Medium
- microsoft .net 10.0 runtime, .net 8.0 runtime, .net 9.0 runtime +2 more +4 more.NET Remote Code Execution VulnerabilityCVE-2026-96237Fix available7.5 High
- microsoft asp.net core 10.0, asp.net core 11.0, asp.net core 8.0 +3 more +5 moreASP.NET Core Denial of Service VulnerabilityCVE-2026-96236Fix available7.5 High
- microsoft .net 10.0 runtime, .net 11.0 runtime, .net 8.0 runtime +9 more +11 moreASP.NET Core Denial of Service VulnerabilityCVE-2026-96233Fix available7.5 High
- microsoft .net 10.0 runtime, .net 11.0 runtime, .net 8.0 runtime +3 more +5 more.NET Elevation of Privilege VulnerabilityCVE-2026-96231Fix available7.8 High
- microsoft visual studio 2022 version 17.14, visual studio 2026 version 18.10, microsoft.aspnetcore.components.webassembly.server +2 moreASP.NET Core Remote Code Execution VulnerabilityCVE-2026-96230Public exploitFix available8.8 High
- microsoft .net 10.0 runtime, .net 11.0 runtime, .net 8.0 runtime +3 more +5 more.NET Elevation of Privilege VulnerabilityCVE-2026-96225Fix available7.8 High
- microsoft .net, .net framework, .net framework 3.5 +26 more +28 moreActive Directory Federation Services (AD FS) Spoofing VulnerabilityCVE-2026-96222Fix available7.4 High
- microsoft asp.net core, asp.net core 10.0, asp.net core 11.0 +6 more +8 moreASP.NET Core Tampering VulnerabilityCVE-2026-88092Fix available9.4 Critical
- microsoft .net framework 3.5, .net framework 3.5 and 4.6.2/4.7/4.7.1/4.7.2, .net framework 3.5 and 4.7.2 +8 more +10 more.NET Denial of Service VulnerabilityCVE-2026-84008Fix available7.5 High
- microsoft asp.net core 10.0, asp.net core 8.0, asp.net core 9.0 +2 more +4 moreASP.NET Core Denial of Service VulnerabilityCVE-2026-70196Fix available5.9 Medium
- microsoft .net 11.0 runtime, visual studio 2022 version 17.14, visual studio 2026 version 18.10 +2 more.NET Framework Security Feature Bypass VulnerabilityCVE-2026-70194Fix available6.5 Medium
- microsoft asp.net core 10.0, asp.net core 11.0, asp.net core 8.0 +3 more +5 moreASP.NET Core Security Feature Bypass VulnerabilityCVE-2026-70188Fix available9.1 Critical
- microsoft asp.net core 10.0, asp.net core 8.0, asp.net core 9.0 +2 more +4 moreASP.NET Core Denial of Service VulnerabilityCVE-2026-70186Fix available7.5 High
- microsoft asp.net core 10.0, asp.net core 11.0, asp.net core 8.0 +3 more +5 moreASP.NET Core Elevation of Privilege VulnerabilityCVE-2026-70183Fix available7.5 High
- microsoft asp.net core 10.0, asp.net core 8.0, asp.net core 9.0 +2 more +4 moreASP.NET Core Denial of Service VulnerabilityCVE-2026-70181Fix available7.5 High
- microsoft visual studio 2022 version 17.14, visual studio 2026 version 18.10, microsoft.aspnetcore.authentication.negotiate +2 moreASP.NET Core Elevation of Privilege VulnerabilityCVE-2026-70179Fix available7.5 High
- microsoft .net 10.0 installed on linux, .net 10.0 installed on mac os, .net 10.0 installed on windows +19 more +21 moreASP.NET Core Elevation of Privilege VulnerabilityCVE-2026-70175Fix available8.1 High
- microsoft visual studio 2022 version 17.14, visual studio 2026 version 18.10, microsoft.aspnetcore.signalr.common +1 more +3 moreASP.NET Core Denial of Service VulnerabilityCVE-2026-70159Fix available7.5 High
- microsoft .net 10.0 runtime, .net 11.0 runtime, .net 8.0 runtime +11 more +13 more.NET Denial of Service VulnerabilityCVE-2026-69651Fix available7.5 High
- microsoft .net 10.0 runtime, .net 11.0 runtime, .net 8.0 runtime +3 more +5 more.NET Information Disclosure VulnerabilityCVE-2026-66822Fix available5.9 Medium
- microsoft .net 10.0 runtime, .net 11.0 runtime, .net 8.0 runtime +11 more +13 more.NET Denial of Service VulnerabilityCVE-2026-58280Fix available7.5 High
- microsoft .net 10.0 installed on linux, .net 10.0 installed on mac os, .net 10.0 installed on windows +10 more +12 moreASP.NET Core Remote Code Execution VulnerabilityCVE-2026-102870Fix available8.8 High
- gnu aspellImportant: aspell security updateCVE-2026-103658Fix available5.9 Medium
- gnu emacsGNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename...CVE-2026-108976Fix available7.8 High
- furion .net frameworkFurion .NET Framework View ViewEngine.cs RunCompile special elements in template engineCVE-2026-1085705.3 Medium
- furion .net frameworkFurion .NET Framework StringRenderExtensions.cs String.Replace sql injectionCVE-2026-1085695.3 Medium
- microsoft tridentCVE-2026-22061 Debug Log Information Disclosure Vulnerability in TridentCVE-2026-220618.2 High
- microsoft partner centerMicrosoft Partner Center Elevation of Privilege VulnerabilityCVE-2026-9620710.0 Critical
- microsoft bookingsMicrosoft Bookings Elevation of Privilege VulnerabilityCVE-2026-945109.9 Critical
- microsoft dataverseMicrosoft Dataverse Remote Code Execution VulnerabilityCVE-2026-881319.8 Critical
- microsoft azure event grid, azure event grid system +1 moreAzure Event Grid Spoofing VulnerabilityCVE-2026-839477.7 High
- microsoft azure api centerAzure API Center Information Disclosure VulnerabilityCVE-2026-839438.7 High
- microsoft azure app service for linuxAzure App Service Remote Code Execution VulnerabilityCVE-2026-779009.8 Critical
- microsoft azure sre agentAzure SRE Agent Elevation of Privilege VulnerabilityCVE-2026-694359.6 Critical
- microsoft simplechatSimpleChat: Stored XSS via group document filename in inline onclick handlerCVE-2026-1057988.7 High
- microsoft simplechatSimpleChat: Command injection via authorization-gate ordering flaw (arbitrary process spawn through MCP stdio transport)CVE-2026-1057978.8 High
- microsoft kiota, microsoft.openapi.kiota, microsoft.openapi.kiota.builder +2 moreKiota: Code injection through doc-comment delimiter reformation in Kiota Java and PHP generatorsCVE-2026-105796Fix available8.8 High
- microsoft kiota, microsoft.openapi.kiota, microsoft.openapi.kiota.builder +2 moreKiota: Unsafe oauth_card_path references in Kiota-generated API plugin manifestsCVE-2026-105795Fix available3.1 Low
- microsoft msquicMsQuic: Improper Certificate Validation in Microsoft.Native.Quic.MsQuic.OpenSSLCVE-2026-105794Fix available9.1 Critical
- microsoft ufoMicrosoft UFO: Authenticated Android shell command injection in Mobile MCP `press_key`CVE-2026-1057939.1 Critical
- microsoft ufoMicrosoft UFO: Authenticated task-result request can deadlock UFO server session managerCVE-2026-1057926.5 Medium
- microsoft ufoMicrosoft UFO: Arbitrary code execution in `run_shell` via `explorer.exe` argument injectionCVE-2026-1057917.5 High
- microsoft ufoMicrosoft UFO: Authenticated Galaxy device registration can bypass WebSocket SSRF IP pinning via redirectsCVE-2026-1057906.4 Medium
- microsoft ufoMicrosoft UFO: Arbitrary file write in the Linux MCP `execute_command` toolCVE-2026-1057895.4 Medium
- microsoft ufoMicrosoft UFO: Authenticated Android shell command injection in Mobile MCP type_text and launch_appCVE-2026-1057888.8 High
- microsoft lrzszlrzsz before 0.13.0 Heap Buffer Overflow via lrz procheader() PathnameCVE-2026-105842Fix available6.1 Medium
- Show moreLoading…