Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-49175Windows DNS Client Elevation of Privilege Vulnerability
- CVE-2026-49176Windows WalletService Elevation of Privilege Vulnerability
- CVE-2026-49171Windows Speech Runtime Elevation of Privilege Vulnerability
- CVE-2026-49170Windows StateRepository API Server file Elevation of Privilege Vulnerability
- CVE-2026-49169Windows DNS Server Remote Code Execution Vulnerability
- CVE-2026-49168Storage Spaces Direct Elevation of Privilege Vulnerability
- CVE-2026-49167Windows Kernel Elevation of Privilege Vulnerability
- CVE-2026-49166Windows Print Configuration Elevation of Privilege Vulnerability
- CVE-2026-49165Microsoft Windows App Store Information Disclosure Vulnerability
- CVE-2026-49164Windows Active Directory Domain Services Remote Code Execution Vulnerability
- CVE-2026-49162Microsoft Brokering File System Elevation of Privilege Vulnerability
- CVE-2026-48571Windows App Package Installer Elevation of Privilege Vulnerability
- CVE-2026-48572Windows App Package Installer Elevation of Privilege Vulnerability
- CVE-2026-42990SQL Server ODBC driver Elevation of Privilege Vulnerability
- CVE-2026-42975Windows Bluetooth Port Driver Remote Code Execution
- CVE-2026-42900Microsoft Windows App Store Elevation of Privilege Vulnerability
- CVE-2026-34346Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability
- CVE-2026-34349Windows Media Information Disclosure Vulnerability
- CVE-2026-47296Microsoft SQL Server Elevation of Privilege Vulnerability
- CVE-2026-42982Windows Secure Kernel Mode Elevation of Privilege Vulnerability
- CVE-2026-48561Microsoft Edge Copilot Remote Code Execution Vulnerability
- CVE-2026-58596Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
- CVE-2026-58281Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- CVE-2026-47646Dynamics 365 Customer Voice Spoofing Vulnerability
- CVE-2026-58525Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
- CVE-2026-58523Microsoft Edge for Android Security Feature Bypass Vulnerability
- CVE-2026-58291Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
- CVE-2026-45489Microsoft Edge (Chromium-based) Spoofing Vulnerability
- CVE-2026-58597Microsoft Edge (Chromium-based) Spoofing Vulnerability
- CVE-2026-58524Microsoft Edge (Chromium-based) Spoofing Vulnerability