Microsoft known exploited vulnerabilities
Every Microsoft CVE on CISA's Known Exploited Vulnerabilities catalog, newest addition first: 390 in all, 42 added in the last 12 months.
- CVE-2024-38217Windows Mark of the Web Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2024-38014Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-31196Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server 2013 Cumulative Update · Micro… +1
- CVE-2024-38213Windows Mark of the Web Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2024-38193Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-38189Microsoft Project Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise +1
- CVE-2024-38178Scripting Engine Memory Corruption VulnerabilityMicrosoft Windows
- CVE-2024-38107Windows Power Dependency Coordinator Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-38106Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2018-0824A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Micros
- CVE-2012-4792Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web
- CVE-2024-38112Windows MSHTML Platform Spoofing VulnerabilityMicrosoft Windows
- CVE-2024-38080Windows Hyper-V Elevation of Privilege VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2024-26169Windows Error Reporting Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-30051Windows DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-30040Windows MSHTML Platform Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2024-29988SmartScreen Prompt Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2022-38028Windows Print Spooler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-24955Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2024-21338Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-29360Microsoft Streaming Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-21410Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Microsof…
- CVE-2024-21412Internet Shortcut Files Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2024-21351Windows SmartScreen Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2023-29357Microsoft SharePoint Server Elevation of Privilege VulnerabilityMicrosoft SharePoint Server
- CVE-2023-36584Windows Mark of the Web Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2023-36036Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-36033Windows DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-36025Windows SmartScreen Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2023-41763Skype for Business Elevation of Privilege VulnerabilityMicrosoft Skype for Business Server 2015 CU13 · Microsoft S…
Get alerts for new known exploited vulnerabilities
Only want the packages you use? Check a lockfile to get a feed for your stack.
https://cve.now/kev/feed
Paste into Feedly or any RSS reader, or run /feed subscribe https://cve.now/kev/feed in Slack. For email alerts, give it to an RSS-to-email service.
https://cve.now/kev/feed?format=atom
The same entries as Atom, for readers that prefer it.
https://cve.now/kev/feed?format=json
The same entries as JSON Feed 1.1, for scripts and readers that support it.
https://cve.now/api/v1/entries?filter=kev
Pages of 30 entries, newest first. Pass the response's nextCursor as cursor for the next page.
Frequently asked questions
How many Microsoft vulnerabilities are in CISA KEV?
390 Microsoft vulnerabilities are on CISA's Known Exploited Vulnerabilities catalog, 42 of them added in the last 12 months. The newest is CVE-2026-96951 (Microsoft Windows Command Injection Vulnerability), added 2026-10-13.
Which Microsoft products are in CISA KEV?
71 products, including Windows, SharePoint, SQL Server. Attackers have exploited every one of these entries in the wild, and US federal agencies must patch each by its CISA due date.
Are Microsoft KEV vulnerabilities used by ransomware?
CISA knows ransomware campaigns exploit 117 of the 390 Microsoft entries.