Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-54914Azure Networking Elevation of Privilege Vulnerability
- CVE-2025-55242Xbox Certification Bug Copilot Djando Information Disclosure Vulnerability
- CVE-2025-55244Azure Bot Service Elevation of Privilege Vulnerability
- CVE-2025-9491Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability
- CVE-2025-55231Windows Storage-based Management Service Remote Code Execution Vulnerability
- CVE-2025-55229Windows Certificate Spoofing Vulnerability
- CVE-2025-55230Windows MBT Transport Driver Elevation of Privilege Vulnerability
- CVE-2025-53795Microsoft PC Manager Elevation of Privilege Vulnerability
- CVE-2025-53763Azure Databricks Elevation of Privilege Vulnerability
- CVE-2025-54364Microsoft Knack 0.12.0 allows Regular expression Denial of Service (ReDoS) in the knack.introspection module.
- CVE-2025-54363Microsoft Knack 0.12.0 allows Regular expression Denial of Service (ReDoS) in the knack.introspection module.
- CVE-2025-49736Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
- CVE-2025-49712Microsoft SharePoint Remote Code Execution Vulnerability
- CVE-2025-49707Azure Virtual Machines Spoofing Vulnerability
- CVE-2025-49755Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
- CVE-2025-48807Windows Hyper-V Remote Code Execution Vulnerability
- CVE-2025-53793Azure Stack Hub Information Disclosure Vulnerability
- CVE-2025-53789Windows StateRepository API Server file Elevation of Privilege Vulnerability
- CVE-2025-53788Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability
- CVE-2025-53784Microsoft Word Remote Code Execution Vulnerability
- CVE-2025-53783Microsoft Teams Remote Code Execution Vulnerability
- CVE-2025-53779Windows Kerberos Elevation of Privilege Vulnerability
- CVE-2025-53778Windows NTLM Elevation of Privilege Vulnerability
- CVE-2025-50155Windows Push Notifications Apps Elevation of Privilege Vulnerability
- CVE-2025-50157Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- CVE-2025-53769Windows Security App Spoofing Vulnerability
- CVE-2025-53766GDI+ Remote Code Execution Vulnerability
- CVE-2025-53765Azure Stack Hub Information Disclosure Vulnerability
- CVE-2025-53740Microsoft Office Remote Code Execution Vulnerability
- CVE-2025-53739Microsoft Excel Remote Code Execution Vulnerability