Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-27743Microsoft System Center Elevation of Privilege Vulnerability
- CVE-2025-27749Microsoft Office Remote Code Execution Vulnerability
- CVE-2025-27747Microsoft Word Remote Code Execution Vulnerability
- CVE-2025-27748Microsoft Office Remote Code Execution Vulnerability
- CVE-2025-27746Microsoft Office Remote Code Execution Vulnerability
- CVE-2025-27745Microsoft Office Remote Code Execution Vulnerability
- CVE-2025-27742NTFS Information Disclosure Vulnerability
- CVE-2025-27744Microsoft Office Elevation of Privilege Vulnerability
- CVE-2025-27741NTFS Elevation of Privilege Vulnerability
- CVE-2025-27740Active Directory Certificate Services Elevation of Privilege Vulnerability
- CVE-2025-27479Kerberos Key Distribution Proxy Service Denial of Service Vulnerability
- CVE-2025-27478Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
- CVE-2025-27477Windows Telephony Service Remote Code Execution Vulnerability
- CVE-2025-27475Windows Update Stack Elevation of Privilege Vulnerability
- CVE-2025-27476Windows Digital Media Elevation of Privilege Vulnerability
- CVE-2025-27474Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- CVE-2025-27472Windows Mark of the Web Security Feature Bypass Vulnerability
- CVE-2025-27473HTTP.sys Denial of Service Vulnerability
- CVE-2025-27470Windows Standards-Based Storage Management Service Denial of Service Vulnerability
- CVE-2025-27471Microsoft Streaming Service Denial of Service Vulnerability
- CVE-2025-26688Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability
- CVE-2025-26687Win32k Elevation of Privilege Vulnerability
- CVE-2025-26686Windows TCP/IP Remote Code Execution Vulnerability
- CVE-2025-26680Windows Standards-Based Storage Management Service Denial of Service Vulnerability
- CVE-2025-26681Win32k Elevation of Privilege Vulnerability
- CVE-2025-26668Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- CVE-2025-26667Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- CVE-2025-26669Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- CVE-2025-26666Windows Media Remote Code Execution Vulnerability
- CVE-2025-26665Windows upnphost.dll Elevation of Privilege Vulnerability