Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2023-36004Windows DPAPI (Data Protection Application Programming Interface) Spoofing Vulnerability
- CVE-2023-36003XAML Diagnostics Elevation of Privilege Vulnerability
- CVE-2023-36012DHCP Server Service Information Disclosure Vulnerability
- CVE-2023-36010Microsoft Defender Denial of Service Vulnerability
- CVE-2023-36019Microsoft Power Platform Connector Spoofing Vulnerability
- CVE-2023-21740Windows Media Remote Code Execution Vulnerability
- CVE-2023-35625Azure Machine Learning Compute Instance for SDK Users Information Disclosure Vulnerability
- CVE-2023-36011Win32k Elevation of Privilege Vulnerability
- CVE-2023-36009Microsoft Word Information Disclosure Vulnerability
- CVE-2023-36020Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- CVE-2023-36391Local Security Authority Subsystem Service Elevation of Privilege Vulnerability
- CVE-2023-36696Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- CVE-2023-36880Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
- CVE-2023-38174Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
- CVE-2023-35618Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
- CVE-2023-36013PowerShell Information Disclosure Vulnerability
- CVE-2023-36008Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- CVE-2023-36026Microsoft Edge (Chromium-based) Spoofing Vulnerability
- CVE-2023-36038ASP.NET Core Denial of Service Vulnerability
- CVE-2023-36558ASP.NET Core Security Feature Bypass Vulnerability
- CVE-2023-36049.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
- CVE-2023-36007Microsoft Send Customer Voice survey from Dynamics 365 Spoofing Vulnerability
- CVE-2023-36437Azure DevOps Server Remote Code Execution Vulnerability
- CVE-2023-36018Visual Studio Code Jupyter Extension Spoofing Vulnerability
- CVE-2023-36016Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- CVE-2023-36025Windows SmartScreen Security Feature Bypass Vulnerability
- CVE-2023-36021Microsoft On-Prem Data Gateway Security Feature Bypass Vulnerability
- CVE-2023-36033Windows DWM Core Library Elevation of Privilege Vulnerability
- CVE-2023-36031Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- CVE-2023-36030Microsoft Dynamics 365 Sales Spoofing Vulnerability