Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-24080Microsoft Office Remote Code Execution Vulnerability
- CVE-2025-24079Microsoft Word Remote Code Execution Vulnerability
- CVE-2025-24078Microsoft Word Remote Code Execution Vulnerability
- CVE-2025-24077Microsoft Word Remote Code Execution Vulnerability
- CVE-2025-24070ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability
- CVE-2025-24057Microsoft Office Remote Code Execution Vulnerability
- CVE-2025-24043WinDbg Remote Code Execution Vulnerability
- CVE-2025-24044Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
- CVE-2025-24035Windows Remote Desktop Services Remote Code Execution Vulnerability
- CVE-2025-26634Windows Core Messaging Elevation of Privileges Vulnerability
- CVE-2025-26643Microsoft Edge (Chromium-based) Spoofing Vulnerability
- CVE-2024-57972The pairing API request handler in Microsoft HoloLens 1 (Windows Holographic) through 10.0.17763.3046 and HoloLens 2 (Windows Holographic) t
- CVE-2025-24989Microsoft Power Pages Elevation of Privilege Vulnerability
- CVE-2025-21355Microsoft Bing Remote Code Execution Vulnerability
- CVE-2025-21401Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
- CVE-2025-25199BCryptGenerateSymmetricKey memory leak
- CVE-2025-24042Visual Studio Code JS Debug Extension Elevation of Privilege Vulnerability
- CVE-2025-21373Windows Installer Elevation of Privilege Vulnerability
- CVE-2025-21414Windows Core Messaging Elevation of Privileges Vulnerability
- CVE-2025-21322Microsoft PC Manager Elevation of Privilege Vulnerability
- CVE-2025-21254Internet Connection Sharing (ICS) Denial of Service Vulnerability
- CVE-2025-21216Internet Connection Sharing (ICS) Denial of Service Vulnerability
- CVE-2025-21212Internet Connection Sharing (ICS) Denial of Service Vulnerability
- CVE-2025-21184Windows Core Messaging Elevation of Privileges Vulnerability
- CVE-2025-21181Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
- CVE-2025-21179DHCP Client Service Denial of Service Vulnerability
- CVE-2025-21400Microsoft SharePoint Server Remote Code Execution Vulnerability
- CVE-2025-21397Microsoft Office Remote Code Execution Vulnerability
- CVE-2025-21394Microsoft Excel Remote Code Execution Vulnerability
- CVE-2025-21392Microsoft Office Remote Code Execution Vulnerability