Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-26139Microsoft Purview Elevation of Privilege Vulnerability
- CVE-2026-32169Azure Cloud Shell Elevation of Privilege Vulnerability
- CVE-2026-0385Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
- CVE-2026-26133M365 Copilot Information Disclosure Vulnerability
- CVE-2026-26123Microsoft Authenticator Information Disclosure Vulnerability
- CVE-2026-26144Microsoft Excel Information Disclosure Vulnerability
- CVE-2026-26141Hybrid Worker Extension (Arc‑enabled Windows VMs) Elevation of Privilege Vulnerability
- CVE-2026-26130ASP.NET Core Denial of Service Vulnerability
- CVE-2026-26118Azure MCP Server Tools Elevation of Privilege Vulnerability
- CVE-2026-26117Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability
- CVE-2026-26110Microsoft Office Remote Code Execution Vulnerability
- CVE-2026-26109Microsoft Excel Remote Code Execution Vulnerability
- CVE-2026-26108Microsoft Excel Remote Code Execution Vulnerability
- CVE-2026-26107Microsoft Excel Remote Code Execution Vulnerability
- CVE-2026-26106Microsoft SharePoint Server Remote Code Execution Vulnerability
- CVE-2026-23665Linux Azure Diagnostic extension (LAD) Elevation of Privilege Vulnerability
- CVE-2026-23662Azure IoT Explorer Information Disclosure Vulnerability
- CVE-2026-23661Azure IoT Explorer Information Disclosure Vulnerability
- CVE-2026-23654GitHub: Zero Shot SCFoundation Remote Code Execution Vulnerability
- CVE-2026-26148Microsoft Azure AD SSH Login extension for Linux Elevation of Privilege Vulnerability
- CVE-2026-23674MapUrlToZone Security Feature Bypass Vulnerability
- CVE-2026-26127.NET Denial of Service Vulnerability
- CVE-2026-26134Microsoft Office Elevation of Privilege Vulnerability
- CVE-2026-26132Windows Kernel Elevation of Privilege Vulnerability
- CVE-2026-26131.NET Elevation of Privilege Vulnerability
- CVE-2026-26128Windows SMB Server Elevation of Privilege Vulnerability
- CVE-2026-26116SQL Server Elevation of Privilege Vulnerability
- CVE-2026-26115SQL Server Elevation of Privilege Vulnerability
- CVE-2026-26121Azure IOT Explorer Spoofing Vulnerability
- CVE-2026-20967System Center Operations Manager (SCOM) Elevation of Privilege Vulnerability