Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-21220Microsoft Message Queuing Information Disclosure Vulnerability
- CVE-2025-21330Windows Remote Desktop Services Denial of Service Vulnerability
- CVE-2025-21328MapUrlToZone Security Feature Bypass Vulnerability
- CVE-2025-21329MapUrlToZone Security Feature Bypass Vulnerability
- CVE-2025-21278Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
- CVE-2025-21405Visual Studio Elevation of Privilege Vulnerability
- CVE-2025-21217Windows NTLM Spoofing Vulnerability
- CVE-2025-21403On-Premises Data Gateway Information Disclosure Vulnerability
- CVE-2025-21395Microsoft Access Remote Code Execution Vulnerability
- CVE-2025-21393Microsoft SharePoint Server Spoofing Vulnerability
- CVE-2025-21389Windows Universal Plug and Play (UPnP) Device Host Denial of Service Vulnerability
- CVE-2025-21219MapUrlToZone Security Feature Bypass Vulnerability
- CVE-2025-21382Windows Graphics Component Elevation of Privilege Vulnerability
- CVE-2025-21366Microsoft Access Remote Code Execution Vulnerability
- CVE-2025-21365Microsoft Office Remote Code Execution Vulnerability
- CVE-2025-21364Microsoft Excel Security Feature Bypass Vulnerability
- CVE-2025-21363Microsoft Word Remote Code Execution Vulnerability
- CVE-2025-21362Microsoft Excel Remote Code Execution Vulnerability
- CVE-2025-21357Microsoft Outlook Remote Code Execution Vulnerability
- CVE-2025-21356Microsoft Office Visio Remote Code Execution Vulnerability
- CVE-2025-21354Microsoft Excel Remote Code Execution Vulnerability
- CVE-2025-21348Microsoft SharePoint Server Remote Code Execution Vulnerability
- CVE-2025-21346Microsoft Office Security Feature Bypass Vulnerability
- CVE-2025-21345Microsoft Office Visio Remote Code Execution Vulnerability
- CVE-2025-21344Microsoft SharePoint Server Remote Code Execution Vulnerability
- CVE-2025-21341Windows Digital Media Elevation of Privilege Vulnerability
- CVE-2025-21173.NET Elevation of Privilege Vulnerability
- CVE-2025-21178Visual Studio Remote Code Execution Vulnerability
- CVE-2025-21176.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
- CVE-2025-21327Windows Digital Media Elevation of Privilege Vulnerability