Microsoft known exploited vulnerabilities
Every Microsoft CVE on CISA's Known Exploited Vulnerabilities catalog, newest addition first: 390 in all, 42 added in the last 12 months.
- CVE-2013-3893Use-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote a
- CVE-2007-0671Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assist
- CVE-2025-49706Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2025-49704Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2025-53770Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2025-33053Internet Shortcut Files Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-32709Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-32706Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-32701Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-30400Microsoft DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-30397Scripting Engine Memory Corruption VulnerabilityMicrosoft Windows
- CVE-2025-24054NTLM Hash Disclosure Spoofing VulnerabilityMicrosoft Windows
- CVE-2025-29824Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-26633Microsoft Management Console Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2025-24993Windows NTFS Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-24991Windows NTFS Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-24985Windows Fast FAT File System Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-24984Windows NTFS Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-24983Windows Win32 Kernel Subsystem Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2018-8639An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Microsoft Windows
- CVE-2024-49035Partner.Microsoft.Com Elevation of Privilege VulnerabilityMicrosoft Partner Center
- CVE-2025-24989Microsoft Power Pages Elevation of Privilege VulnerabilityMicrosoft Power Pages
- CVE-2025-21418Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-21391Windows Storage Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-21413Microsoft Outlook Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2024-29059.NET Framework Information Disclosure VulnerabilityMicrosoft .NET Framework
- CVE-2025-21335Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-21334Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-21333Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-35250Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-49138Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-49039Windows Task Scheduler Elevation of Privilege VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2024-43451NTLM Hash Disclosure Spoofing VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2024-38094Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2024-30088Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-43573Windows MSHTML Platform Spoofing VulnerabilityMicrosoft Windows
- CVE-2024-43572Microsoft Management Console Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2020-0618A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'MicrMicrosoft SQL Server
- CVE-2024-43461Windows MSHTML Platform Spoofing VulnerabilityMicrosoft Windows
- CVE-2024-38226Microsoft Publisher Security Feature Bypass VulnerabilityMicrosoft Office · Microsoft Publisher
- CVE-2024-38217Windows Mark of the Web Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2024-38014Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-31196Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server 2013 Cumulative Update · Micro… +1
- CVE-2024-38213Windows Mark of the Web Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2024-38193Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-38189Microsoft Project Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise +1
- CVE-2024-38178Scripting Engine Memory Corruption VulnerabilityMicrosoft Windows
- CVE-2024-38107Windows Power Dependency Coordinator Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-38106Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2018-0824A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Micros
FAQ
Microsoft KEV questions.
How many Microsoft vulnerabilities are in CISA KEV?
390 Microsoft vulnerabilities are on CISA's Known Exploited Vulnerabilities catalog, 42 of them added in the last 12 months. The newest is CVE-2026-96951 (Microsoft Windows Command Injection Vulnerability), added 2026-10-13.
Which Microsoft products are in CISA KEV?
71 products, including Windows, SharePoint, SQL Server. Attackers have exploited every one of these entries in the wild, and US federal agencies must patch each by its CISA due date.
Are Microsoft KEV vulnerabilities used by ransomware?
CISA knows ransomware campaigns exploit 117 of the 390 Microsoft entries.