Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-26155Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability
- CVE-2026-26154Windows Server Update Service (WSUS) Tampering Vulnerability
- CVE-2026-26151Remote Desktop Spoofing Vulnerability
- CVE-2026-26149Microsoft Power Apps Desktop Client Spoofing Vulnerability
- CVE-2026-23670Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability
- CVE-2026-20945Microsoft SharePoint Server Spoofing Vulnerability
- CVE-2026-25184Applocker Filter Driver (applockerfltr.sys) Elevation of Privilege Vulnerability
- CVE-2026-23653GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability
- CVE-2026-20930Windows Management Services Elevation of Privilege Vulnerability
- CVE-2026-33118Microsoft Edge (Chromium-based) Spoofing Vulnerability
- CVE-2026-33119Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
- CVE-2026-35199SymCrypt SymCryptXmssSign function - Heap overflow via 64->32-bit leaf-count truncation
- CVE-2026-32186Microsoft Bing Elevation of Privilege Vulnerability
- CVE-2026-32211Azure MCP Server Information Disclosure Vulnerability
- CVE-2026-32173Azure SRE Agent Information Disclosure Vulnerability
- CVE-2026-33105Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
- CVE-2026-26135Azure Custom Locations Resource Provider (RP) Elevation of Privilege Vulnerability
- CVE-2026-33107Azure Databricks Elevation of Privilege Vulnerability
- CVE-2026-32213Azure AI Foundry Elevation of Privilege Vulnerability
- CVE-2026-34401XML Notepad: XML External Entity (XXE) Injection via Unsafe XmlTextReader in XML Diff and Schema Loading
- CVE-2026-34054openssl on Windows built with openssldir set from the build machine (Uncontrolled Search Path Element)
- CVE-2026-32194Microsoft Bing Images Remote Code Execution Vulnerability
- CVE-2026-26137Microsoft Exchange Elevation of Privilege Vulnerability
- CVE-2026-26136Microsoft Copilot Information Disclosure Vulnerability
- CVE-2026-24299M365 Copilot Information Disclosure Vulnerability
- CVE-2026-23659Azure Data Factory Information Disclosure Vulnerability
- CVE-2026-26120Microsoft Bing Tampering Vulnerability
- CVE-2026-23658Azure DevOps: msazure Elevation of Privilege Vulnerability
- CVE-2026-32191Microsoft Bing Images Remote Code Execution Vulnerability
- CVE-2026-26138Microsoft Purview Elevation of Privilege Vulnerability