Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-24072Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability
- CVE-2025-24071Microsoft Windows File Explorer Spoofing Vulnerability
- CVE-2025-24067Kernel Streaming Service Driver Elevation of Privilege Vulnerability
- CVE-2025-24066Kernel Streaming Service Driver Elevation of Privilege Vulnerability
- CVE-2025-24064Windows Domain Name Service Remote Code Execution Vulnerability
- CVE-2025-24061Windows Mark of the Web Security Feature Bypass Vulnerability
- CVE-2025-24059Windows Common Log File System Driver Elevation of Privilege Vulnerability
- CVE-2025-24056Windows Telephony Service Remote Code Execution Vulnerability
- CVE-2025-24055Windows USB Video Class System Driver Information Disclosure Vulnerability
- CVE-2025-24054NTLM Hash Disclosure Spoofing Vulnerability
- CVE-2025-24051Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- CVE-2025-24050Windows Hyper-V Elevation of Privilege Vulnerability
- CVE-2025-24048Windows Hyper-V Elevation of Privilege Vulnerability
- CVE-2025-24046Kernel Streaming Service Driver Elevation of Privilege Vulnerability
- CVE-2025-24045Windows Remote Desktop Services Remote Code Execution Vulnerability
- CVE-2025-21199Azure Agent Installer for Backup and Site Recovery Elevation of Privilege Vulnerability
- CVE-2025-21247MapUrlToZone Security Feature Bypass Vulnerability
- CVE-2025-25008Windows Server Elevation of Privilege Vulnerability
- CVE-2025-25003Visual Studio Elevation of Privilege Vulnerability
- CVE-2025-24998Visual Studio Elevation of Privilege Vulnerability
- CVE-2025-24997DirectX Graphics Kernel File Denial of Service Vulnerability
- CVE-2025-24996NTLM Hash Disclosure Spoofing Vulnerability
- CVE-2025-24995Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
- CVE-2025-21180Windows exFAT File System Remote Code Execution Vulnerability
- CVE-2025-24988Windows USB Video Class System Driver Elevation of Privilege Vulnerability
- CVE-2025-24987Windows USB Video Class System Driver Elevation of Privilege Vulnerability
- CVE-2025-24986Azure Promptflow Remote Code Execution Vulnerability
- CVE-2025-24083Microsoft Office Remote Code Execution Vulnerability
- CVE-2025-24082Microsoft Excel Remote Code Execution Vulnerability
- CVE-2025-24081Microsoft Excel Remote Code Execution Vulnerability