Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-20934Windows SMB Server Elevation of Privilege Vulnerability
- CVE-2026-20932Windows File Explorer Information Disclosure Vulnerability
- CVE-2026-20927Windows SMB Server Denial of Service Vulnerability
- CVE-2026-20926Windows SMB Server Elevation of Privilege Vulnerability
- CVE-2026-20925NTLM Hash Disclosure Spoofing Vulnerability
- CVE-2026-20924Windows Management Services Elevation of Privilege Vulnerability
- CVE-2026-20923Windows Management Services Elevation of Privilege Vulnerability
- CVE-2026-20922Windows NTFS Remote Code Execution Vulnerability
- CVE-2026-20921Windows SMB Server Elevation of Privilege Vulnerability
- CVE-2026-20920Win32k Elevation of Privilege Vulnerability
- CVE-2026-20919Windows SMB Server Elevation of Privilege Vulnerability
- CVE-2026-20918Windows Management Services Elevation of Privilege Vulnerability
- CVE-2026-20877Windows Management Services Elevation of Privilege Vulnerability
- CVE-2026-20876Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
- CVE-2026-20875Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
- CVE-2026-20869Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability
- CVE-2026-20865Windows Management Services Elevation of Privilege Vulnerability
- CVE-2026-20864Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
- CVE-2026-20860Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- CVE-2026-20859Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
- CVE-2026-20858Windows Management Services Elevation of Privilege Vulnerability
- CVE-2026-20857Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- CVE-2026-20856Windows Server Update Service (WSUS) Remote Code Execution Vulnerability
- CVE-2026-20852Windows Hello Tampering Vulnerability
- CVE-2026-20851Capability Access Management Service (camsvc) Information Disclosure Vulnerability
- CVE-2026-20847Microsoft Windows File Explorer Spoofing Vulnerability
- CVE-2026-20844Windows Clipboard Server Elevation of Privilege Vulnerability
- CVE-2026-20842Microsoft DWM Core Library Elevation of Privilege Vulnerability
- CVE-2026-20840Windows NTFS Remote Code Execution Vulnerability
- CVE-2026-20839Windows Client-Side Caching (CSC) Service Information Disclosure Vulnerability