Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-85928Windows Volume Manager Extension Driver Remote Code Execution Vulnerability
- CVE-2026-85926Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
- CVE-2026-85916Azure Active Directory Information Disclosure Vulnerability
- CVE-2026-85914Windows Embedded Mode Service Elevation of Privilege Vulnerability
- CVE-2026-85904Windows Device Association Service Elevation of Privilege Vulnerability
- CVE-2026-85867Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
- CVE-2026-85329Microsoft Account Elevation of Privilege Vulnerability
- CVE-2026-83888Windows CD-ROM Driver Elevation of Privilege Vulnerability
- CVE-2026-83710Windows Device Association Service Elevation of Privilege Vulnerability
- CVE-2026-83674Active Directory Federation Services (AD FS) Spoofing Vulnerability
- CVE-2026-70303Windows Kernel Elevation of Privilege Vulnerability
- CVE-2026-70277Windows Fast FAT File System Driver Information Disclosure Vulnerability
- CVE-2026-70270Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability
- CVE-2026-70262WebDAV Elevation of Privilege Vulnerability
- CVE-2026-70244Windows DNS Server Information Disclosure Vulnerability
- CVE-2026-70238Windows Storage Spaces Controller Elevation of Privilege Vulnerability
- CVE-2026-70216Windows Mobile Device Management Tampering Vulnerability
- CVE-2026-70213Microsoft Power Apps Remote Code Execution Vulnerability
- CVE-2026-70210Windows OLE DB Elevation of Privilege Vulnerability
- CVE-2026-70187Windows Remote Desktop Services Remote Code Execution Vulnerability
- CVE-2026-70185Microsoft PowerShell Security Feature Bypass Vulnerability
- CVE-2026-70172Windows NTFS Elevation of Privilege Vulnerability
- CVE-2026-70170Windows Kernel Denial of Service Vulnerability
- CVE-2026-70167Windows Domain Name Service Remote Code Execution Vulnerability
- CVE-2026-70164Windows TCP/IP Elevation of Privilege Vulnerability
- CVE-2026-70052Microsoft PowerShell Remote Code Execution Vulnerability
- CVE-2026-70048Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
- CVE-2026-70041Windows CD-ROM Driver Information Disclosure Vulnerability
- CVE-2026-69934Windows Spaceport.sys Elevation of Privilege Vulnerability
- CVE-2026-69916Windows NTFS Elevation of Privilege Vulnerability