Microsoft known exploited vulnerabilities
Every Microsoft CVE on CISA's Known Exploited Vulnerabilities catalog, newest addition first: 390 in all, 42 added in the last 12 months.
- CVE-2022-21882Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-0787An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic lMicrosoft Windows
- CVE-2014-1776Use-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial
- CVE-2018-8453An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Microsoft Windows
- CVE-2021-33766Microsoft Exchange Server Information Disclosure VulnerabilityMicrosoft Exchange Server 2013 Cumulative Update · Micro… +1
- CVE-2019-1458An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Microsoft Windows
- CVE-2013-3900WinVerifyTrust Signature Validation VulnerabilityMicrosoft Windows
- CVE-2021-43890Windows AppX Installer Spoofing VulnerabilityMicrosoft App Installer
- CVE-2021-42321Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Microsof…
- CVE-2021-42292Microsoft Excel Security Feature Bypass VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel 2013… +3
- CVE-2021-40449Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-40444Microsoft MSHTML Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2021-38649Open Management Infrastructure Elevation of Privilege VulnerabilityMicrosoft Azure Automation State Configuration, DSC Exte… +8
- CVE-2021-38648Open Management Infrastructure Elevation of Privilege VulnerabilityMicrosoft Azure Automation State Configuration, DSC Exte… +8
- CVE-2021-38647Open Management Infrastructure (OMI) Remote Code Execution VulnerabilityMicrosoft Azure Automation State Configuration, DSC Exte… +8
- CVE-2021-38645Open Management Infrastructure Elevation of Privilege VulnerabilityMicrosoft Azure Automation State Configuration, DSC Exte… +8
- CVE-2021-36955Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-36948Windows Update Medic Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-36942Windows LSA Spoofing VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsof… +1
- CVE-2021-34527Windows Print Spooler Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2021-34523Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server 2013 Cumulative Update · Micro… +1
- CVE-2021-34473Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server 2013 Cumulative Update · Micro… +1
- CVE-2021-34448Scripting Engine Memory Corruption VulnerabilityMicrosoft Windows
- CVE-2021-33771Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-33742Windows MSHTML Platform Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2021-33739Microsoft DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-31979Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-31956Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-31955Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2021-31207Microsoft Exchange Server Security Feature Bypass VulnerabilityMicrosoft Exchange Server 2013 Cumulative Update · Micro… +1
Get alerts for new known exploited vulnerabilities
Only want the packages you use? Check a lockfile to get a feed for your stack.
https://cve.now/kev/feed
Paste into Feedly or any RSS reader, or run /feed subscribe https://cve.now/kev/feed in Slack. For email alerts, give it to an RSS-to-email service.
https://cve.now/kev/feed?format=atom
The same entries as Atom, for readers that prefer it.
https://cve.now/kev/feed?format=json
The same entries as JSON Feed 1.1, for scripts and readers that support it.
https://cve.now/api/v1/entries?filter=kev
Pages of 30 entries, newest first. Pass the response's nextCursor as cursor for the next page.
Frequently asked questions
How many Microsoft vulnerabilities are in CISA KEV?
390 Microsoft vulnerabilities are on CISA's Known Exploited Vulnerabilities catalog, 42 of them added in the last 12 months. The newest is CVE-2026-96951 (Microsoft Windows Command Injection Vulnerability), added 2026-10-13.
Which Microsoft products are in CISA KEV?
71 products, including Windows, SharePoint, SQL Server. Attackers have exploited every one of these entries in the wild, and US federal agencies must patch each by its CISA due date.
Are Microsoft KEV vulnerabilities used by ransomware?
CISA knows ransomware campaigns exploit 117 of the 390 Microsoft entries.