Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-21530Windows Rich Text Edit Elevation of Privilege Vulnerability
- CVE-2026-32177.NET Elevation of Privilege Vulnerability
- CVE-2026-32204Azure Monitor Agent Elevation of Privilege Vulnerability
- CVE-2026-40379Azure Entra ID Spoofing Vulnerability
- CVE-2026-42826Azure DevOps Information Disclosure Vulnerability
- CVE-2026-35428Azure Cloud Shell Spoofing Vulnerability
- CVE-2026-35435Azure AI Foundry Elevation of Privilege Vulnerability
- CVE-2026-34327Microsoft Partner Center Spoofing Vulnerability
- CVE-2026-33844Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability
- CVE-2026-33823Microsoft Team Events Portal Information Disclosure Vulnerability
- CVE-2026-32207Azure Machine Learning Notebook Spoofing Vulnerability
- CVE-2026-33109Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability
- CVE-2026-33111Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability
- CVE-2026-41105Azure Monitor Action Group Notification System Elevation of Privilege Vulnerability
- CVE-2026-26129M365 Copilot Information Disclosure Vulnerability
- CVE-2026-26164M365 Copilot Information Disclosure Vulnerability
- CVE-2026-21515Azure IoT Central Elevation of Privilege Vulnerability
- CVE-2026-32172Microsoft Power Apps Remote Code Execution Vulnerability
- CVE-2026-35431Microsoft Entra ID Entitlement Management Spoofing Vulnerability
- CVE-2026-24303Microsoft Partner Center Elevation of Privilege Vulnerability
- CVE-2026-26150Microsoft Purview eDiscovery Elevation of Privilege Vulnerability
- CVE-2026-33819Microsoft Bing Remote Code Execution Vulnerability
- CVE-2026-33102Microsoft 365 Copilot Elevation of Privilege Vulnerability
- CVE-2026-32210Microsoft Dynamics 365 (online) Spoofing Vulnerability
- CVE-2026-41134Kiota: Code Generation Literal Injection
- CVE-2026-40372ASP.NET Core Elevation of Privilege Vulnerability
- CVE-2026-32214Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability
- CVE-2026-33829Windows Snipping Tool Spoofing Vulnerability
- CVE-2026-33824Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability
- CVE-2026-33827Windows TCP/IP Remote Code Execution Vulnerability