Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-24302Azure Arc Elevation of Privilege Vulnerability
- CVE-2026-24888Maker.js Vulnerable to Unsafe Property Copying in makerjs.extendObject
- CVE-2026-21509Microsoft Office Security Feature Bypass Vulnerability
- CVE-2026-24304Azure Resource Manager Elevation of Privilege Vulnerability
- CVE-2026-21264Microsoft Account Spoofing Vulnerability
- CVE-2026-21521Word Copilot Information Disclosure Vulnerability
- CVE-2026-21227Azure Logic Apps Elevation of Privilege Vulnerability
- CVE-2026-24307M365 Copilot Information Disclosure Vulnerability
- CVE-2026-24305Azure Entra ID Elevation of Privilege Vulnerability
- CVE-2026-21524Azure Data Explorer Information Disclosure Vulnerability
- CVE-2026-24306Azure Front Door Elevation of Privilege Vulnerability
- CVE-2026-21520Copilot Studio Information Disclosure Vulnerability
- CVE-2026-21223Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
- CVE-2026-20960PowerApps Desktop Client Remote Code Execution Vulnerability
- CVE-2026-21226Azure Core shared client library for Python Remote Code Execution Vulnerability
- CVE-2026-20941Host Process for Windows Tasks Elevation of Privilege Vulnerability
- CVE-2026-20958Microsoft SharePoint Information Disclosure Vulnerability
- CVE-2026-20957Microsoft Excel Remote Code Execution Vulnerability
- CVE-2026-20952Microsoft Office Remote Code Execution Vulnerability
- CVE-2026-20950Microsoft Excel Remote Code Execution Vulnerability
- CVE-2026-20949Microsoft Excel Security Feature Bypass Vulnerability
- CVE-2026-20948Microsoft Word Remote Code Execution Vulnerability
- CVE-2026-20939Windows File Explorer Information Disclosure Vulnerability
- CVE-2026-20937Windows File Explorer Information Disclosure Vulnerability
- CVE-2026-20936Windows NDIS Information Disclosure Vulnerability
- CVE-2026-20935Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability
- CVE-2026-20931Windows Telephony Service Elevation of Privilege Vulnerability
- CVE-2026-20929Windows HTTP.sys Elevation of Privilege Vulnerability
- CVE-2026-20874Windows Management Services Elevation of Privilege Vulnerability
- CVE-2026-20873Windows Management Services Elevation of Privilege Vulnerability