Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-24296Windows Device Association Service Elevation of Privilege Vulnerability
- CVE-2026-24295Windows Device Association Service Elevation of Privilege Vulnerability
- CVE-2026-24294Windows SMB Server Elevation of Privilege Vulnerability
- CVE-2026-24293Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- CVE-2026-24292Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
- CVE-2026-24291Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability
- CVE-2026-24290Windows Projected File System Elevation of Privilege Vulnerability
- CVE-2026-24289Windows Kernel Elevation of Privilege Vulnerability
- CVE-2026-24288Windows Mobile Broadband Driver Remote Code Execution Vulnerability
- CVE-2026-24287Windows Kernel Elevation of Privilege Vulnerability
- CVE-2026-24285Win32k Elevation of Privilege Vulnerability
- CVE-2026-24283Multiple UNC Provider Kernel Driver Elevation of Privilege Vulnerability
- CVE-2026-24282Push message Routing Service Elevation of Privilege Vulnerability
- CVE-2026-23673Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
- CVE-2026-23672Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
- CVE-2026-23671Windows Bluetooth RFCOM Protocol Driver Elevation of Privilege Vulnerability
- CVE-2026-23669RPC Runtime Library Remote Code Execution Vulnerability
- CVE-2026-23668Windows Graphics Component Elevation of Privilege Vulnerability
- CVE-2026-23667Broadcast DVR Elevation of Privilege Vulnerability
- CVE-2026-23664Azure IoT Explorer Information Disclosure Vulnerability
- CVE-2026-23660Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability
- CVE-2026-21262SQL Server Elevation of Privilege Vulnerability
- CVE-2026-26122Microsoft ACI Confidential Containers Information Disclosure Vulnerability
- CVE-2026-26125Payment Orchestrator Service Elevation of Privilege Vulnerability
- CVE-2026-26124Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability
- CVE-2026-21536Microsoft Devices Pricing Program Remote Code Execution Vulnerability
- CVE-2026-23651Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability
- CVE-2026-2636Denial of Service in Microsoft OS
- CVE-2026-21535Microsoft Teams Information Disclosure Vulnerability
- CVE-2026-26030Microsoft Semantic Kernel InMemoryVectorStore filter functionality vulnerable to remote code execution