Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-62895Azure Arc SQL Server Extension Elevation of Privilege Vulnerability
- CVE-2026-62744Microsoft Windows Media Foundation Remote Code Execution Vulnerability
- CVE-2026-62694Windows Installer Elevation of Privilege Vulnerability
- CVE-2026-62706Microsoft Windows Media Foundation Remote Code Execution Vulnerability
- CVE-2026-62916Microsoft Entra ID Elevation of Privilege Vulnerability
- CVE-2026-65818Power Automate Elevation of Privilege Vulnerability
- CVE-2026-69857Azure Cosmos DB Spoofing Vulnerability
- CVE-2026-83711Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability
- CVE-2026-80098Copilot Studio Elevation of Privilege Vulnerability
- CVE-2026-70352Azure AI Language Elevation of Privilege Vulnerability
- CVE-2026-70178Microsoft Fabric Elevation of Privilege Vulnerability
- CVE-2026-62906Microsoft Discovery Studio Information Disclosure Vulnerability
- CVE-2026-84452Windows ML CLI: CORS misconfig enables localhost RCE
- CVE-2026-70309Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
- CVE-2026-72984Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- CVE-2026-66798Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- CVE-2026-66324Microsoft Edge (Chromium-based) Spoofing Vulnerability
- CVE-2026-66323Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- CVE-2026-62904Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
- CVE-2026-58616Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability
- CVE-2026-70331Microsoft Edge for iOS Spoofing Vulnerability
- CVE-2026-62316Microsoft UFO: DNS Rebinding → Unauthenticated File Read / Command Execution
- CVE-2026-69502Azure SQL Database Elevation of Privilege Vulnerability
- CVE-2026-69855Microsoft Copilot in Azure Information Disclosure Vulnerability
- CVE-2026-69543Azure Virtual Machines Elevation of Privilege Vulnerability
- CVE-2026-69558Microsoft Partner Center Information Disclosure Vulnerability
- CVE-2026-69555Azure Arc Elevation of Privilege Vulnerability
- CVE-2026-69400Azure Logic Apps Elevation of Privilege Vulnerability
- CVE-2026-69419Azure Data Manager for Energy Remote Code Execution Vulnerability
- CVE-2026-68782Azure SQL Database Elevation of Privilege Vulnerability