Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-59197Windows ETL Channel Information Disclosure Vulnerability
- CVE-2025-59194Windows Kernel Elevation of Privilege Vulnerability
- CVE-2025-59193Windows Management Services Elevation of Privilege Vulnerability
- CVE-2025-59192Storport.sys Driver Elevation of Privilege Vulnerability
- CVE-2025-59191Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
- CVE-2025-59190Windows Search Service Denial of Service Vulnerability
- CVE-2025-59189Microsoft Brokering File System Elevation of Privilege Vulnerability
- CVE-2025-59188Microsoft Failover Cluster Information Disclosure Vulnerability
- CVE-2025-59187Windows Kernel Elevation of Privilege Vulnerability
- CVE-2025-59184Storage Spaces Direct Information Disclosure Vulnerability
- CVE-2025-58739Microsoft Windows File Explorer Spoofing Vulnerability
- CVE-2025-58738Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
- CVE-2025-58737Remote Desktop Protocol Remote Code Execution Vulnerability
- CVE-2025-58736Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
- CVE-2025-58734Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
- CVE-2025-58733Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
- CVE-2025-58731Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
- CVE-2025-58730Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
- CVE-2025-58729Windows Local Session Manager (LSM) Denial of Service Vulnerability
- CVE-2025-58727Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
- CVE-2025-58726Windows SMB Server Elevation of Privilege Vulnerability
- CVE-2025-58725Windows COM+ Event System Service Elevation of Privilege Vulnerability
- CVE-2025-58724Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability
- CVE-2025-58720Windows Cryptographic Services Information Disclosure Vulnerability
- CVE-2025-58718Remote Desktop Client Remote Code Execution Vulnerability
- CVE-2025-58714Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- CVE-2025-55699Windows Kernel Information Disclosure Vulnerability
- CVE-2025-55698DirectX Graphics Kernel Denial of Service Vulnerability
- CVE-2025-55697Azure Local Elevation of Privilege Vulnerability
- CVE-2025-55696NtQueryInformation Token function (ntifs.h) Elevation of Privilege Vulnerability