Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-29979Microsoft Excel Remote Code Execution Vulnerability
- CVE-2025-29978Microsoft PowerPoint Remote Code Execution Vulnerability
- CVE-2025-29977Microsoft Excel Remote Code Execution Vulnerability
- CVE-2025-29976Microsoft SharePoint Server Elevation of Privilege Vulnerability
- CVE-2025-29975Microsoft PC Manager Elevation of Privilege Vulnerability
- CVE-2025-29973Microsoft Azure File Sync Elevation of Privilege Vulnerability
- CVE-2025-29971Web Threat Defense (WTD.sys) Denial of Service Vulnerability
- CVE-2025-29970Microsoft Brokering File System Elevation of Privilege Vulnerability
- CVE-2025-29969MS-EVEN RPC Remote Code Execution Vulnerability
- CVE-2025-29968Active Directory Certificate Services (AD CS) Denial of Service Vulnerability
- CVE-2025-29967Remote Desktop Client Remote Code Execution Vulnerability
- CVE-2025-29966Remote Desktop Client Remote Code Execution Vulnerability
- CVE-2025-29964Windows Media Remote Code Execution Vulnerability
- CVE-2025-29960Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- CVE-2025-29959Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- CVE-2025-26684Microsoft Defender Elevation of Privilege Vulnerability
- CVE-2025-47732Microsoft Dataverse Remote Code Execution Vulnerability
- CVE-2025-47733Microsoft Power Apps Information Disclosure Vulnerability
- CVE-2025-29813Azure DevOps Elevation of Privilege Vulnerability
- CVE-2025-29827Azure Automation Elevation of Privilege Vulnerability
- CVE-2025-29972Azure Storage Resource Provider Spoofing Vulnerability
- CVE-2025-33072Microsoft msagsfeedback.azurewebsites.net Information Disclosure Vulnerability
- CVE-2025-29825Microsoft Edge (Chromium-based) Spoofing Vulnerability
- CVE-2025-21416Azure Virtual Desktop Elevation of Privilege Vulnerability
- CVE-2025-30392Azure AI Bot Elevation of Privilege Vulnerability
- CVE-2025-30390Azure ML Compute Elevation of Privilege Vulnerability
- CVE-2025-33074Azure Functions Remote Code Execution Vulnerability
- CVE-2025-30389Azure Bot Framework SDK Elevation of Privilege Vulnerability
- CVE-2025-30391Microsoft Dynamics Information Disclosure Vulnerability
- CVE-2025-29817Microsoft Power Automate Desktop Information Disclosure Vulnerability