Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-27490Windows Bluetooth Service Elevation of Privilege Vulnerability
- CVE-2025-27491Windows Hyper-V Remote Code Execution Vulnerability
- CVE-2025-27492Windows Secure Channel Elevation of Privilege Vulnerability
- CVE-2025-27486Windows Standards-Based Storage Management Service Denial of Service Vulnerability
- CVE-2025-27489Azure Local Elevation of Privilege Vulnerability
- CVE-2025-27487Remote Desktop Client Remote Code Execution Vulnerability
- CVE-2025-27483NTFS Elevation of Privilege Vulnerability
- CVE-2025-27482Windows Remote Desktop Services Remote Code Execution Vulnerability
- CVE-2025-27481Windows Telephony Service Remote Code Execution Vulnerability
- CVE-2025-27480Windows Remote Desktop Services Remote Code Execution Vulnerability
- CVE-2025-27484Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability
- CVE-2025-27485Windows Standards-Based Storage Management Service Denial of Service Vulnerability
- CVE-2025-27469Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
- CVE-2025-27467Windows Digital Media Elevation of Privilege Vulnerability
- CVE-2025-26679RPC Endpoint Mapper Service Elevation of Privilege Vulnerability
- CVE-2025-26678Windows Defender Application Control Security Feature Bypass Vulnerability
- CVE-2025-26676Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- CVE-2025-26675Windows Subsystem for Linux Elevation of Privilege Vulnerability
- CVE-2025-26673Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
- CVE-2025-26672Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- CVE-2025-26674Windows Media Remote Code Execution Vulnerability
- CVE-2025-26671Windows Remote Desktop Services Remote Code Execution Vulnerability
- CVE-2025-26670Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability
- CVE-2025-26652Windows Standards-Based Storage Management Service Denial of Service Vulnerability
- CVE-2025-26651Windows Local Session Manager (LSM) Denial of Service Vulnerability
- CVE-2025-26647Windows Kerberos Elevation of Privilege Vulnerability
- CVE-2025-26649Windows Secure Channel Elevation of Privilege Vulnerability
- CVE-2025-26648Windows Kernel Elevation of Privilege Vulnerability
- CVE-2025-26644Windows Hello Spoofing Vulnerability
- CVE-2025-26641Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability