Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-42893Microsoft Outlook for iOS Tampering Vulnerability
- CVE-2026-42838Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
- CVE-2026-40416Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
- CVE-2026-42833Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
- CVE-2026-42832Microsoft Office Spoofing Vulnerability
- CVE-2026-42830Azure Monitor Agent Metrics Extension Elevation of Privilege Vulnerability
- CVE-2026-42823Azure Logic Apps Elevation of Privilege Vulnerability
- CVE-2026-41613Visual Studio Code Elevation of Privilege Vulnerability
- CVE-2026-41103Microsoft SSO Plugin for Jira & Confluence Elevation of Privilege Vulnerability
- CVE-2026-40381Azure Connected Machine Agent Elevation of Privilege Vulnerability
- CVE-2026-41097Secure Boot Security Feature Bypass Vulnerability
- CVE-2026-41086Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability
- CVE-2026-40420Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
- CVE-2026-35436Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
- CVE-2026-40418Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
- CVE-2026-40413Windows TCP/IP Denial of Service Vulnerability
- CVE-2026-40403Windows Graphics Component Remote Code Execution Vulnerability
- CVE-2026-40402Windows Hyper-V Elevation of Privilege Vulnerability
- CVE-2026-40401Windows TCP/IP Denial of Service Vulnerability
- CVE-2026-40398Windows Remote Desktop Services Elevation of Privilege Vulnerability
- CVE-2026-32209Windows Filtering Platform (WFP) Security Feature Bypass Vulnerability
- CVE-2026-40397Windows Common Log File System Driver Elevation of Privilege Vulnerability
- CVE-2026-40382Windows Telephony Service Elevation of Privilege Vulnerability
- CVE-2026-40369Windows Kernel Elevation of Privilege Vulnerability
- CVE-2026-40370SQL Server Remote Code Execution Vulnerability
- CVE-2026-40367Microsoft Word Remote Code Execution Vulnerability
- CVE-2026-40365Microsoft SharePoint Server Remote Code Execution Vulnerability
- CVE-2026-40362Microsoft Excel Remote Code Execution Vulnerability
- CVE-2026-40361Microsoft Outlook and Word Remote Code Execution Vulnerability
- CVE-2026-40359Microsoft Excel Remote Code Execution Vulnerability