Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-21413Windows Telephony Service Remote Code Execution Vulnerability
- CVE-2025-21411Windows Telephony Service Remote Code Execution Vulnerability
- CVE-2025-21380Azure Marketplace SaaS Resources Information Disclosure Vulnerability
- CVE-2025-21385Microsoft Purview Information Disclosure Vulnerability
- CVE-2024-43106A library injection vulnerability exists in Microsoft Excel 16.83 for macOS.
- CVE-2024-42220A library injection vulnerability exists in Microsoft Outlook 16.83.3 for macOS.
- CVE-2024-42004A library injection vulnerability exists in Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS.
- CVE-2024-41165A library injection vulnerability exists in Microsoft Word 16.83 for macOS.
- CVE-2024-41159A library injection vulnerability exists in Microsoft OneNote 16.83 for macOS.
- CVE-2024-41145A library injection vulnerability exists in the WebView.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS.
- CVE-2024-41138A library injection vulnerability exists in the com.microsoft.teams2.modulehost.app helper app of Microsoft Teams (work or school) 24046.281
- CVE-2024-39804A library injection vulnerability exists in Microsoft PowerPoint 16.83 for macOS.
- CVE-2022-40733An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Wind
- CVE-2022-40732An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Wind
- CVE-2024-49071Windows Defender Information Disclosure Vulnerability
- CVE-2024-49147Microsoft Update Catalog Elevation of Privilege Vulnerability
- CVE-2024-49105Remote Desktop Client Remote Code Execution Vulnerability
- CVE-2024-49138Windows Common Log File System Driver Elevation of Privilege Vulnerability
- CVE-2024-49128Windows Remote Desktop Services Remote Code Execution Vulnerability
- CVE-2024-49127Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
- CVE-2024-49118Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- CVE-2024-49116Windows Remote Desktop Services Remote Code Execution Vulnerability
- CVE-2024-49114Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- CVE-2024-49113Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
- CVE-2024-49112Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
- CVE-2024-49110Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
- CVE-2024-49109Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
- CVE-2024-49095Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
- CVE-2024-49090Windows Common Log File System Driver Elevation of Privilege Vulnerability
- CVE-2024-49088Windows Common Log File System Driver Elevation of Privilege Vulnerability