Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-49677Microsoft Brokering File System Elevation of Privilege Vulnerability
- CVE-2025-49676Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- CVE-2025-49674Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- CVE-2025-49672Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- CVE-2025-49671Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- CVE-2025-49670Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- CVE-2025-49661Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- CVE-2025-49658Windows Transport Driver Interface (TDI) Translation Driver Information Disclosure Vulnerability
- CVE-2025-49657Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- CVE-2025-48824Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- CVE-2025-47987Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability
- CVE-2025-47986Universal Print Management Service Elevation of Privilege Vulnerability
- CVE-2025-47985Windows Event Tracing Elevation of Privilege Vulnerability
- CVE-2025-47984Windows GDI Information Disclosure Vulnerability
- CVE-2025-47976Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability
- CVE-2025-47972Windows Input Method Editor (IME) Elevation of Privilege Vulnerability
- CVE-2025-47971Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability
- CVE-2025-21195Azure Service Fabric Runtime Elevation of Privilege Vulnerability
- CVE-2025-47159Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability
- CVE-2025-33054Remote Desktop Spoofing Vulnerability
- CVE-2025-26636Windows Kernel Information Disclosure Vulnerability
- CVE-2025-7326EOL ASP.NET Core Elevation of Privilege Vulnerability
- CVE-2025-49713Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- CVE-2025-49741Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
- CVE-2025-49715Dynamics 365 FastTrack Implementation Assets Information Disclosure Vulnerability
- CVE-2025-47959Visual Studio Remote Code Execution Vulnerability
- CVE-2025-30399.NET and Visual Studio Remote Code Execution Vulnerability
- CVE-2025-32711M365 Copilot Information Disclosure Vulnerability
- CVE-2025-32717Microsoft Word Remote Code Execution Vulnerability
- CVE-2025-47977Nuance Digital Engagement Platform Spoofing Vulnerability