Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-54905Microsoft Word Information Disclosure Vulnerability
- CVE-2025-54904Microsoft Excel Remote Code Execution Vulnerability
- CVE-2025-54903Microsoft Excel Remote Code Execution Vulnerability
- CVE-2025-54902Microsoft Excel Remote Code Execution Vulnerability
- CVE-2025-54899Microsoft Excel Remote Code Execution Vulnerability
- CVE-2025-54898Microsoft Excel Remote Code Execution Vulnerability
- CVE-2025-54897Microsoft SharePoint Remote Code Execution Vulnerability
- CVE-2025-54896Microsoft Excel Remote Code Execution Vulnerability
- CVE-2025-54895SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Elevation of Privilege Vulnerability
- CVE-2025-54894Local Security Authority Subsystem Service Elevation of Privilege Vulnerability
- CVE-2025-54111Windows UI XAML Phone DatePickerFlyout Elevation of Privilege Vulnerability
- CVE-2025-54110Windows Kernel Elevation of Privilege Vulnerability
- CVE-2025-54106Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- CVE-2025-54102Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
- CVE-2025-54101Windows SMB Client Remote Code Execution Vulnerability
- CVE-2025-54099Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- CVE-2025-54097Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- CVE-2025-54096Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- CVE-2025-54095Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- CVE-2025-53798Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- CVE-2025-53797Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- CVE-2025-49734PowerShell Direct Elevation of Privilege Vulnerability
- CVE-2025-36855EOL .NET 6.0 Runtime Remote Code Execution Vulnerability
- CVE-2025-36854EOL ASP.NET 6.0 Remote Code Execution Vulnerability
- CVE-2025-36853EOL .NET 6.0 Runtime Remote Code Execution Vulnerability
- CVE-2025-59033The Microsoft vulnerable driver block list is implemented as Windows Defender Application Control (WDAC) policy.
- CVE-2022-50238The on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the online Microsoft recommended driver block rules.
- CVE-2025-53791Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
- CVE-2025-55241Azure Entra ID Elevation of Privilege Vulnerability
- CVE-2025-55238Dynamics 365 FastTrack Implementation Assets Information Disclosure Vulnerability