Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-21321Windows Kernel Memory Information Disclosure Vulnerability
- CVE-2025-21320Windows Kernel Memory Information Disclosure Vulnerability
- CVE-2025-21319Windows Kernel Memory Information Disclosure Vulnerability
- CVE-2025-21318Windows Kernel Memory Information Disclosure Vulnerability
- CVE-2025-21316Windows Kernel Memory Information Disclosure Vulnerability
- CVE-2025-21315Microsoft Brokering File System Elevation of Privilege Vulnerability
- CVE-2025-21314Windows SmartScreen Spoofing Vulnerability
- CVE-2025-21309Windows Remote Desktop Services Remote Code Execution Vulnerability
- CVE-2025-21306Windows Telephony Service Remote Code Execution Vulnerability
- CVE-2025-21304Microsoft DWM Core Library Elevation of Privilege Vulnerability
- CVE-2025-21303Windows Telephony Service Remote Code Execution Vulnerability
- CVE-2025-21302Windows Telephony Service Remote Code Execution Vulnerability
- CVE-2025-21301Windows Geolocation Service Information Disclosure Vulnerability
- CVE-2025-21299Windows Kerberos Security Feature Bypass Vulnerability
- CVE-2025-21298Windows OLE Remote Code Execution Vulnerability
- CVE-2025-21297Windows Remote Desktop Services Remote Code Execution Vulnerability
- CVE-2025-21296BranchCache Remote Code Execution Vulnerability
- CVE-2025-21295SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability
- CVE-2025-21294Microsoft Digest Authentication Remote Code Execution Vulnerability
- CVE-2025-21293Active Directory Domain Services Elevation of Privilege Vulnerability
- CVE-2025-21291Windows Direct Show Remote Code Execution Vulnerability
- CVE-2025-21290Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
- CVE-2025-21289Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
- CVE-2025-21288Windows COM Server Information Disclosure Vulnerability
- CVE-2025-21285Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
- CVE-2025-21284Windows Virtual Trusted Platform Module Denial of Service Vulnerability
- CVE-2025-21282Windows Telephony Service Remote Code Execution Vulnerability
- CVE-2025-21281Microsoft COM for Windows Elevation of Privilege Vulnerability
- CVE-2025-21280Windows Virtual Trusted Platform Module Denial of Service Vulnerability
- CVE-2025-21277Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability