Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-71348Windows Spaceport.sys Remote Code Execution Vulnerability
- CVE-2026-71350Windows Spaceport.sys Remote Code Execution Vulnerability
- CVE-2026-71339Windows Installer Elevation of Privilege Vulnerability
- CVE-2026-71340Windows File History Service Elevation of Privilege Vulnerability
- CVE-2026-71338Windows Failover Cluster Elevation of Privilege Vulnerability
- CVE-2026-71334Windows NFS Portmapper Elevation of Privilege Vulnerability
- CVE-2026-71332Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability
- CVE-2026-71337Windows Storage Management Provider Elevation of Privilege Vulnerability
- CVE-2026-71333Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
- CVE-2026-71330Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
- CVE-2026-71336Windows Work Folder Service Remote Code Execution Vulnerability
- CVE-2026-71329Windows NTFS Remote Code Execution Vulnerability
- CVE-2026-70587Windows Remote Desktop Protocol Information Disclosure Vulnerability
- CVE-2026-70586Windows Paint Remote Code Execution Vulnerability
- CVE-2026-70585Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability
- CVE-2026-70584Windows Core Messaging Elevation of Privilege Vulnerability
- CVE-2026-70582Windows Management Instrumentation Elevation of Privilege Vulnerability
- CVE-2026-70564Windows Print Spooler Components Elevation of Privilege Vulnerability
- CVE-2026-70563Windows Shell Spoofing Vulnerability
- CVE-2026-72923Microsoft.OpenApi.YamlReader vulnerable to denial of service via YAML alias expansion
- CVE-2026-70562Windows Audio Service Elevation of Privilege Vulnerability
- CVE-2026-70351Microsoft WebP Image Extension Remote Code Execution Vulnerability
- CVE-2026-58600HEVC Video Extensions Elevation of Privilege Vulnerability
- CVE-2026-70342Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- CVE-2026-70289Windows Win32k Elevation of Privilege Vulnerability
- CVE-2026-70334Visual Studio Code Security Feature Bypass Vulnerability
- CVE-2026-69890Windows Virtual Trusted Platform Module Elevation of Privilege Vulnerability
- CVE-2026-69740Windows Hello Elevation of Privilege Vulnerability
- CVE-2026-69676Windows Kerberos Remote Code Execution Vulnerability
- CVE-2026-69712Windows Key Distribution Center Remote Code Execution Vulnerability