Microsoft known exploited vulnerabilities
Every Microsoft CVE on CISA's Known Exploited Vulnerabilities catalog, newest addition first: 390 in all, 42 added in the last 12 months.
- CVE-2023-36563Microsoft WordPad Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-28229Windows CNG Key Isolation Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-36802Microsoft Streaming Service Proxy Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-36761Microsoft Word Information Disclosure VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise +1
- CVE-2023-38180.NET and Visual Studio Denial of Service VulnerabilityMicrosoft .NET · Microsoft ASP.NET Core +6
- CVE-2023-36884Windows Search Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-36874Windows Error Reporting Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-35311Microsoft Outlook Security Feature Bypass VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC +2
- CVE-2023-32049Windows SmartScreen Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2023-32046Windows MSHTML Platform Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2016-0165The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 G
- CVE-2023-29336Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-28252Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2019-1388An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka 'WinMicrosoft Windows
- CVE-2013-3163Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
- CVE-2023-24880Windows SmartScreen Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2023-23397Microsoft Outlook Elevation of Privilege VulnerabilityMicrosoft Office LTSC · Microsoft Outlook +2
- CVE-2023-23376Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-21823Windows Graphics Component Remote Code Execution VulnerabilityMicrosoft Office for Android · Microsoft Office for iOS +2
- CVE-2023-21715Microsoft Publisher Security Feature Bypass VulnerabilityMicrosoft 365 Apps for Enterprise
- CVE-2023-21674Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-41080Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server 2013 Cumulative Update · Micro… +1
- CVE-2022-44698Windows SmartScreen Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2022-41049Windows Mark of the Web Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2022-41128Windows Scripting Languages Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-41125Windows CNG Key Isolation Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-41091Windows Mark of the Web Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2022-41073Windows Print Spooler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-41033Windows COM+ Event System Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-41082Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server 2013 Cumulative Update · Micro… +1
Get alerts for new known exploited vulnerabilities
Only want the packages you use? Check a lockfile to get a feed for your stack.
https://cve.now/kev/feed
Paste into Feedly or any RSS reader, or run /feed subscribe https://cve.now/kev/feed in Slack. For email alerts, give it to an RSS-to-email service.
https://cve.now/kev/feed?format=atom
The same entries as Atom, for readers that prefer it.
https://cve.now/kev/feed?format=json
The same entries as JSON Feed 1.1, for scripts and readers that support it.
https://cve.now/api/v1/entries?filter=kev
Pages of 30 entries, newest first. Pass the response's nextCursor as cursor for the next page.
Frequently asked questions
How many Microsoft vulnerabilities are in CISA KEV?
390 Microsoft vulnerabilities are on CISA's Known Exploited Vulnerabilities catalog, 42 of them added in the last 12 months. The newest is CVE-2026-96951 (Microsoft Windows Command Injection Vulnerability), added 2026-10-13.
Which Microsoft products are in CISA KEV?
71 products, including Windows, SharePoint, SQL Server. Attackers have exploited every one of these entries in the wild, and US federal agencies must patch each by its CISA due date.
Are Microsoft KEV vulnerabilities used by ransomware?
CISA knows ransomware campaigns exploit 117 of the 390 Microsoft entries.