Microsoft known exploited vulnerabilities
Every Microsoft CVE on CISA's Known Exploited Vulnerabilities catalog, newest addition first: 390 in all, 42 added in the last 12 months.
- CVE-2012-4792Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web
- CVE-2024-38112Windows MSHTML Platform Spoofing VulnerabilityMicrosoft Windows
- CVE-2024-38080Windows Hyper-V Elevation of Privilege VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2024-26169Windows Error Reporting Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-30051Windows DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-30040Windows MSHTML Platform Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2024-29988SmartScreen Prompt Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2022-38028Windows Print Spooler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-24955Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2024-21338Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-29360Microsoft Streaming Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-21410Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Microsof…
- CVE-2024-21412Internet Shortcut Files Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2024-21351Windows SmartScreen Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2023-29357Microsoft SharePoint Server Elevation of Privilege VulnerabilityMicrosoft SharePoint Server
- CVE-2023-36584Windows Mark of the Web Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2023-36036Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-36033Windows DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-36025Windows SmartScreen Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2023-41763Skype for Business Elevation of Privilege VulnerabilityMicrosoft Skype for Business Server 2015 CU13 · Microsoft S…
- CVE-2023-36563Microsoft WordPad Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-28229Windows CNG Key Isolation Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-36802Microsoft Streaming Service Proxy Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-36761Microsoft Word Information Disclosure VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise +1
- CVE-2023-38180.NET and Visual Studio Denial of Service VulnerabilityMicrosoft .NET · Microsoft ASP.NET Core +6
- CVE-2023-36884Windows Search Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-36874Windows Error Reporting Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-35311Microsoft Outlook Security Feature Bypass VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC +2
- CVE-2023-32049Windows SmartScreen Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2023-32046Windows MSHTML Platform Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2016-0165The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 G
- CVE-2023-29336Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-28252Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2019-1388An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka 'WinMicrosoft Windows
- CVE-2013-3163Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
- CVE-2023-24880Windows SmartScreen Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2023-23397Microsoft Outlook Elevation of Privilege VulnerabilityMicrosoft Office LTSC · Microsoft Outlook +2
- CVE-2023-23376Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-21823Windows Graphics Component Remote Code Execution VulnerabilityMicrosoft Office for Android · Microsoft Office for iOS +2
- CVE-2023-21715Microsoft Publisher Security Feature Bypass VulnerabilityMicrosoft 365 Apps for Enterprise
- CVE-2023-21674Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-41080Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server 2013 Cumulative Update · Micro… +1
- CVE-2022-44698Windows SmartScreen Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2022-41049Windows Mark of the Web Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2022-41128Windows Scripting Languages Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-41125Windows CNG Key Isolation Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-41091Windows Mark of the Web Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2022-41073Windows Print Spooler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-41033Windows COM+ Event System Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-41082Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server 2013 Cumulative Update · Micro… +1
FAQ
Microsoft KEV questions.
How many Microsoft vulnerabilities are in CISA KEV?
390 Microsoft vulnerabilities are on CISA's Known Exploited Vulnerabilities catalog, 42 of them added in the last 12 months. The newest is CVE-2026-96951 (Microsoft Windows Command Injection Vulnerability), added 2026-10-13.
Which Microsoft products are in CISA KEV?
71 products, including Windows, SharePoint, SQL Server. Attackers have exploited every one of these entries in the wild, and US federal agencies must patch each by its CISA due date.
Are Microsoft KEV vulnerabilities used by ransomware?
CISA knows ransomware campaigns exploit 117 of the 390 Microsoft entries.