Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-88216Windows DHCP Server Remote Code Execution Vulnerability
- CVE-2026-70240Windows Kerberos Denial of Service Vulnerability
- CVE-2026-70120Microsoft Bluetooth Driver Elevation of Privilege Vulnerability
- CVE-2026-70231Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability
- CVE-2026-85862Windows Error Reporting Elevation of Privilege Vulnerability
- CVE-2026-81384Windows DNS Server Remote Code Execution Vulnerability
- CVE-2026-69327Windows Remote Desktop Services Remote Code Execution Vulnerability
- CVE-2026-67391Microsoft SQL Server Remote Code Execution Vulnerability
- CVE-2026-69565Windows Remote Desktop Services Remote Code Execution Vulnerability
- CVE-2026-109487Microsoft PowerPoint Remote Code Execution Vulnerability
- CVE-2026-109485Microsoft 365 Agents SDK Information Disclosure Vulnerability
- CVE-2026-108425Windows DNS Information Disclosure Vulnerability
- CVE-2026-109492Microsoft MCP Gateway Elevation of Privilege Vulnerability
- CVE-2026-109491Microsoft Office Word Remote Code Execution Vulnerability
- CVE-2026-109481ASP.NET Core Elevation of Privilege Vulnerability
- CVE-2026-109472Microsoft Office SharePoint Remote Code Execution Vulnerability
- CVE-2026-109466Microsoft Office SharePoint Elevation of Privilege Vulnerability
- CVE-2026-109464Microsoft Office SharePoint Remote Code Execution Vulnerability
- CVE-2026-109460Microsoft Entra Private Network Connector Information Disclosure Vulnerability
- CVE-2026-109457Azure CLI Remote Code Execution Vulnerability
- CVE-2026-109456Microsoft Office SharePoint Spoofing Vulnerability
- CVE-2026-109455Microsoft Office SharePoint Information Disclosure Vulnerability
- CVE-2026-109454Microsoft Office SharePoint Spoofing Vulnerability
- CVE-2026-108414Windows Projected File System Filter Driver Elevation of Privilege Vulnerability
- CVE-2026-85839Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability
- CVE-2026-85838Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability
- CVE-2026-62903Microsoft.Data.SqlClient Information Disclosure Vulnerability
- CVE-2026-102200Windows NTFS Tampering Vulnerability
- CVE-2026-100223Windows NTFS Elevation of Privilege Vulnerability
- CVE-2026-83684Windows iSCSI Target Service Information Disclosure Vulnerability