Microsoft vulnerabilities

12,297 published CVEs name Microsoft among the affected products; CISA lists 261 of them as exploited in the wild.

All 12,297 in the list Atom feed of new CVEs

Published CVEs: 12,297
Last 12 months: 4,630
Critical: 523
Known exploited: 261

Critical 523High 8,325Medium 3,390Low 59Not scored 0

CVEs per yearBy the year they were published

20131
20171
2018510
2019841
20201,263
2021891
2022933
2023997
20241,111
20251,255
20264,494

Known exploitedNewest addition to KEV first

CVE-2026-96951
Windows Shell Security Feature Bypass Vulnerability
Microsoft · Microsoft Edge (Chromium-based)
ExploitedHigh8.8
CVE-2026-65660
Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft · Microsoft SharePoint Enterprise Server 2016
ExploitedHigh8.8
CVE-2026-81963
Windows Update Stack Elevation of Privilege Vulnerability
Microsoft · Windows 11 version 23H2
ExploitedHigh7.8
CVE-2026-85880
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1607
ExploitedHigh7.8
CVE-2019-1068
A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server…
Microsoft · Microsoft SQL Server 2014 Service Pack 2 for 32-bit Systems (GDR)
ExploitedHigh8.8
CVE-2026-55040
Microsoft SharePoint Server Security Feature Bypass Vulnerability
Microsoft · Microsoft SharePoint Enterprise Server 2016
ExploitedCritical9.1
CVE-2026-33824
Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability
Microsoft · Windows 10 Version 1607
ExploitedCritical9.8
CVE-2026-68820
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1607
ExploitedHigh7.0
CVE-2026-50522
Microsoft SharePoint Remote Code Execution Vulnerability
Microsoft · Microsoft SharePoint Enterprise Server 2016
ExploitedCritical9.8
CVE-2026-58644
Microsoft SharePoint Remote Code Execution Vulnerability
Microsoft · Microsoft SharePoint Enterprise Server 2016
ExploitedCritical9.8

Newest CVEs

CVE-2026-109469
Entra Device Registration Elevation of Privilege Vulnerability
Microsoft · Entra Device Registration
Critical10.0
CVE-2026-118147
Visual Studio Spoofing Vulnerability
Microsoft · Microsoft Visual Studio 2017 version 15.9
High7.4
CVE-2026-69446
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft · Microsoft Edge (Chromium-based)
Medium4.4
CVE-2026-88078
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft · Microsoft Edge (Chromium-based)
Medium4.3
CVE-2026-88077
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft · Microsoft Edge (Chromium-based)
High8.8
CVE-2026-96196
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Microsoft · Microsoft Edge (Chromium-based)
High8.8
CVE-2026-96187
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Microsoft · Microsoft Edge (Chromium-based)
High7.4
CVE-2026-85899
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft · Microsoft Edge (Chromium-based)
High8.1
CVE-2026-85330
Microsoft Edge for Android Security Feature Bypass Vulnerability
Microsoft · Microsoft Edge (Chromium-based)
Medium4.3
CVE-2026-88090
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft · Microsoft Edge (Chromium-based)
Medium5.4

Microsoft vulnerabilities

CVEs per yearBy the year they were published

Known exploitedNewest addition to KEV first

Newest CVEs

Products with the most CVEs

Most common weaknesses