Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-57988Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- CVE-2026-57987Microsoft Edge (Chromium-based) Spoofing Vulnerability
- CVE-2026-57985Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- CVE-2026-57984Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- CVE-2026-57983Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
- CVE-2026-57975Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- CVE-2026-56645Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- CVE-2026-55945Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
- CVE-2026-54998Microsoft Exchange Online Elevation of Privilege Vulnerability
- CVE-2026-41106Microsoft 365 Copilot Elevation of Privilege Vulnerability
- CVE-2026-26145Microsoft Azure Synapse Elevation of Privilege Vulnerability
- CVE-2026-45499Azure OpenAI Elevation of Privilege Vulnerability
- CVE-2026-57100Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability
- CVE-2026-50521Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- CVE-2026-49451Microsoft.OpenAPI: Circular schema references may terminate OpenAPI parsing
- CVE-2026-47645Microsoft 365 Copilot's Business Chat Elevation of Privilege Vulnerability
- CVE-2026-48582Microsoft Exchange Online Elevation of Privilege Vulnerability
- CVE-2026-50519Microsoft Visual Studio Code CoPilot Chat Security Feature Bypass Vulnerability
- CVE-2026-48584Microsoft Azure Synapse Elevation of Privilege Vulnerability
- CVE-2026-42895Microsoft Copilot Tampering Vulnerability
- CVE-2026-45480Azure Active Directory Elevation of Privilege Vulnerability
- CVE-2026-32208Microsoft Entra ID Spoofing Vulnerability
- CVE-2026-49336@microsoft/kiota-http-fetchlibrary: Bearer token and Cookie leak across origin on redirect due to case-mismatched scrub in fetchRequestAdapter
- CVE-2026-47647Dynamics 365 Elevation of Privilege Vulnerability
- CVE-2026-54130M365 Copilot Information Disclosure Vulnerability
- CVE-2026-32174Azure Bot Service Elevation of Privilege Vulnerability
- CVE-2026-47633Microsoft Cost Management Information Disclosure Vulnerability
- CVE-2026-50656Microsoft Defender Elevation of Privilege Vulnerability
- CVE-2026-50511Microsoft PC Manager Elevation of Privilege Vulnerability
- CVE-2026-50512Microsoft PC Manager Elevation of Privilege Vulnerability