Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-41611Visual Studio Code Remote Code Execution Vulnerability
- CVE-2026-41610Visual Studio Code Security Feature Bypass Vulnerability
- CVE-2026-41109GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability
- CVE-2026-41102Microsoft PowerPoint for Android Spoofing Vulnerability
- CVE-2026-41101Microsoft Word for Android Spoofing Vulnerability
- CVE-2026-41100Microsoft 365 Copilot for Android Spoofing Vulnerability
- CVE-2026-41096Windows DNS Client Remote Code Execution Vulnerability
- CVE-2026-41095Data Deduplication Elevation of Privilege Vulnerability
- CVE-2026-41094Microsoft Data Formulator Remote Code Execution Vulnerability
- CVE-2026-41089Windows Netlogon Remote Code Execution Vulnerability
- CVE-2026-41088Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- CVE-2026-40421Microsoft Word Information Disclosure Vulnerability
- CVE-2026-40419Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
- CVE-2026-40417Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
- CVE-2026-40415Windows TCP/IP Remote Code Execution Vulnerability
- CVE-2026-40414Windows TCP/IP Denial of Service Vulnerability
- CVE-2026-40410Windows SMB Client Elevation of Privilege Vulnerability
- CVE-2026-40408Windows WAN ARP Driver Elevation of Privilege Vulnerability
- CVE-2026-40407Windows Common Log File System Driver Elevation of Privilege Vulnerability
- CVE-2026-40406Windows TCP/IP Information Disclosure Vulnerability
- CVE-2026-40405Windows TCP/IP Denial of Service Vulnerability
- CVE-2026-40399Windows TCP/IP Elevation of Privilege Vulnerability
- CVE-2026-40380Windows Volume Manager Extension Driver Remote Code Execution Vulnerability
- CVE-2026-40377Microsoft Cryptographic Services Elevation of Privilege Vulnerability
- CVE-2026-40374Microsoft Power Automate Desktop Information Disclosure Vulnerability
- CVE-2026-40368Microsoft SharePoint Server Remote Code Execution Vulnerability
- CVE-2026-40366Microsoft Word Remote Code Execution Vulnerability
- CVE-2026-40364Microsoft Word Remote Code Execution Vulnerability
- CVE-2026-40363Microsoft Office Remote Code Execution Vulnerability
- CVE-2026-40360Microsoft Excel Information Disclosure Vulnerability