Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-65674Microsoft SQL Server Remote Code Execution Vulnerability
- CVE-2026-85886Microsoft SQL Server Remote Code Execution Vulnerability
- CVE-2026-85876Microsoft SQL Server Elevation of Privilege Vulnerability
- CVE-2026-83945Microsoft SQL Server Remote Code Execution Vulnerability
- CVE-2026-70189Microsoft SQL Server Remote Code Execution Vulnerability
- CVE-2026-68883Microsoft SQL Server Elevation of Privilege Vulnerability
- CVE-2026-67625Microsoft SQL Server Remote Code Execution Vulnerability
- CVE-2026-96956SQL Server Elevation of Privilege Vulnerability
- CVE-2026-97781Microsoft Office OneNote Remote Code Execution Vulnerability
- CVE-2026-105016Microsoft QUIC Remote Code Execution Vulnerability
- CVE-2026-97801.NET Framework Tampering Vulnerability
- CVE-2026-108463Windows SmartScreen Security Feature Bypass Vulnerability
- CVE-2026-108471Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
- CVE-2026-108136Microsoft Windows Search Component Elevation of Privilege Vulnerability
- CVE-2026-108135Windows Backup Engine Elevation of Privilege Vulnerability
- CVE-2026-108134Windows Autopilot Elevation of Privilege Vulnerability
- CVE-2026-108133Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
- CVE-2026-108132Windows Kerberos Elevation of Privilege Vulnerability
- CVE-2026-108131Active Directory Federation Services (AD FS) Spoofing Vulnerability
- CVE-2026-108130Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
- CVE-2026-108129Role: DNS Server Information Disclosure Vulnerability
- CVE-2026-108128Role: DNS Server Information Disclosure Vulnerability
- CVE-2026-108127Role: DNS Server Information Disclosure Vulnerability
- CVE-2026-97844Role: DNS Server Information Disclosure Vulnerability
- CVE-2026-97843Role: DNS Server Information Disclosure Vulnerability
- CVE-2026-97842Role: DNS Server Information Disclosure Vulnerability
- CVE-2026-97841Role: DNS Server Information Disclosure Vulnerability
- CVE-2026-97840Role: DNS Server Information Disclosure Vulnerability
- CVE-2026-97839Role: DNS Server Information Disclosure Vulnerability
- CVE-2026-97838Role: DNS Server Information Disclosure Vulnerability