Microsoft known exploited vulnerabilities
Every Microsoft CVE on CISA's Known Exploited Vulnerabilities catalog, newest addition first: 390 in all, 42 added in the last 12 months.
- CVE-2009-1123The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly v
- CVE-2004-0210The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly b
- CVE-2002-0367smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which al
- CVE-2021-41379Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2019-1297A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel · Microsoft Office
- CVE-2018-8581An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of Privilege VulnerabiMicrosoft Exchange Server
- CVE-2021-36934Windows Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-21882Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-33766Microsoft Exchange Server Information Disclosure VulnerabilityMicrosoft Exchange Server 2013 Cumulative Update · Micro… +1
- CVE-2021-43890Windows AppX Installer Spoofing VulnerabilityMicrosoft App Installer
- CVE-2021-42321Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Microsof…
- CVE-2021-42292Microsoft Excel Security Feature Bypass VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel 2013… +3
- CVE-2021-40449Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-40444Microsoft MSHTML Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2021-38649Open Management Infrastructure Elevation of Privilege VulnerabilityMicrosoft Azure Automation State Configuration, DSC Exte… +8
- CVE-2021-38648Open Management Infrastructure Elevation of Privilege VulnerabilityMicrosoft Azure Automation State Configuration, DSC Exte… +8
- CVE-2021-38647Open Management Infrastructure (OMI) Remote Code Execution VulnerabilityMicrosoft Azure Automation State Configuration, DSC Exte… +8
- CVE-2021-38645Open Management Infrastructure Elevation of Privilege VulnerabilityMicrosoft Azure Automation State Configuration, DSC Exte… +8
- CVE-2021-36955Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-36948Windows Update Medic Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-36942Windows LSA Spoofing VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsof… +1
- CVE-2021-34523Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server 2013 Cumulative Update · Micro… +1
- CVE-2021-34473Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server 2013 Cumulative Update · Micro… +1
- CVE-2021-34448Scripting Engine Memory Corruption VulnerabilityMicrosoft Windows
- CVE-2021-33771Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-33742Windows MSHTML Platform Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2021-33739Microsoft DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-31979Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-31956Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-31955Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2021-31207Microsoft Exchange Server Security Feature Bypass VulnerabilityMicrosoft Exchange Server 2013 Cumulative Update · Micro… +1
- CVE-2021-31201Microsoft Enhanced Cryptographic Provider Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-31199Microsoft Enhanced Cryptographic Provider Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-28310Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-27085Internet Explorer Remote Code Execution VulnerabilityMicrosoft Internet Explorer
- CVE-2021-27059Microsoft Office Remote Code Execution VulnerabilityMicrosoft Office 2010 Service Pack · Microsoft Office 20… +1
- CVE-2021-26411Internet Explorer Memory Corruption VulnerabilityMicrosoft Internet Explorer · Microsoft Edge
- CVE-2021-1732Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-1675Windows Print Spooler Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2021-1647Microsoft Defender Remote Code Execution VulnerabilityMicrosoft System Center Endpoint Protection · Microsoft… +3
FAQ
Microsoft KEV questions.
How many Microsoft vulnerabilities are in CISA KEV?
390 Microsoft vulnerabilities are on CISA's Known Exploited Vulnerabilities catalog, 42 of them added in the last 12 months. The newest is CVE-2026-96951 (Microsoft Windows Command Injection Vulnerability), added 2026-10-13.
Which Microsoft products are in CISA KEV?
71 products, including Windows, SharePoint, SQL Server. Attackers have exploited every one of these entries in the wild, and US federal agencies must patch each by its CISA due date.
Are Microsoft KEV vulnerabilities used by ransomware?
CISA knows ransomware campaigns exploit 117 of the 390 Microsoft entries.