[ Vendor · 1,865 CVEs ]
Microsoft
CVEs affecting Microsoft published in the last 30 days, plus any Microsoft CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-102218 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-102220 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-102221 | 13 Oct 2026 | CVSS 4.4 | Microsoft Windows 10 Version 1607No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. | |
| CVE-2026-102207 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to… | Fix |
| CVE-2026-102208 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-102209 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 11 version 26H1Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-102210 | 13 Oct 2026 | CVSS 9.8 | Microsoft Windows 10 Version 1809Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-102211 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-102214 | 13 Oct 2026 | CVSS 8.8 | Microsoft Windows 10 Version 1607Use after free in Windows Hyper-V allows an authorized attacker to execute code locally. | Fix |
| CVE-2026-102201 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1809Use after free in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-102202 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 11 version 23H2Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-102203 | 13 Oct 2026 | CVSS 8.8 | Microsoft Windows 10 Version 1607Access of resource using incompatible type ('type confusion') in RPC Runtime allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-102204 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows Subsystem for Linux (WSL2)Improper link resolution before file access ('link following') in Windows Subsystem for Linux allows an authorized attacker to elevate privileges… | |
| CVE-2026-102205 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-102206 | 13 Oct 2026 | CVSS 6.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows Portable Device MTP Driver allows an unauthorized attacker to elevate privileges with a physical attack. | Fix |
| CVE-2026-102194 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-102195 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 11 version 23H2Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-102196 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1809Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-102197 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1809Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-102198 | 13 Oct 2026 | CVSS 5.3 | Microsoft Windows 10 Version 1607Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose information over a network. | Fix |
| CVE-2026-102199 | 13 Oct 2026 | CVSS 6.5 | Microsoft Windows 10 Version 1607Stack-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to deny service over a network. | Fix |
| CVE-2026-102187 | 13 Oct 2026 | CVSS 5.5 | Microsoft Windows 10 Version 1607Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally. | Fix |
| CVE-2026-102188 | 13 Oct 2026 | CVSS 6.8 | Microsoft Windows 10 Version 1607Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack. | Fix |
| CVE-2026-102189 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 11 version 23H2Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-102191 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 11 version 23H2Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-102192 | 13 Oct 2026 | CVSS 7.5 | Microsoft Windows Server 2019Integer underflow (wrap or wraparound) in Windows Failover Cluster allows an unauthorized attacker to deny service over a network. | Fix |
| CVE-2026-102193 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1809Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-100219 | 13 Oct 2026 | CVSS 9.8 | Microsoft Windows 11 version 23H2Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-100220 | 13 Oct 2026 | CVSS 8.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-100222 | 13 Oct 2026 | CVSS 9.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-100225 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-102186 | 13 Oct 2026 | CVSS 4.7 | Microsoft Windows 10 Version 1607Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose information locally. | Fix |
| CVE-2026-100211 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseUse after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-100212 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseUse after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-100214 | 13 Oct 2026 | CVSS 8.8 | Microsoft Dynamics NAV 2017Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network. | |
| CVE-2026-100215 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally. | Fix |
| CVE-2026-100216 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1809Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-100217 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-100218 | 13 Oct 2026 | CVSS 8.1 | Microsoft Windows 10 Version 1607Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-100202 | 13 Oct 2026 | CVSS 9.8 | Microsoft Windows 10 Version 1607Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-100203 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-100205 | 13 Oct 2026 | CVSS 7.1 | Microsoft Windows Sysinternals Process MonitorUntrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-100207 | 13 Oct 2026 | CVSS 7.3 | Microsoft Azure CycleCloud 8.9.1Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an authorized attacker to… | Fix |
| CVE-2026-100209 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseUse after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-100210 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseHeap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-100200 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 11 version 23H2Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-100201 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1809Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-94510 | 8 Oct 2026 | CVSS 9.9 | Microsoft BookingsAuthorization bypass through user-controlled key in Microsoft Bookings allows an unauthorized attacker to elevate privileges over a network. | |
| CVE-2026-96207 | 8 Oct 2026 | CVSS 10.0 | Microsoft Partner CenterImproper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network. | |
| CVE-2026-83943 | 8 Oct 2026 | CVSS 8.7 | Microsoft Azure API CenterExposure of sensitive information to an unauthorized actor in Azure API Center allows an unauthorized attacker to disclose information over a network. | |
| CVE-2026-83947 | 8 Oct 2026 | CVSS 6.5 | Microsoft Azure Event Grid SystemMissing authorization in Azure Event Grid allows an authorized attacker to perform spoofing over a network. | |
| CVE-2026-88131 | 8 Oct 2026 | CVSS 9.8 | Microsoft DataverseDeserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-77900 | 8 Oct 2026 | CVSS 9.8 | Microsoft Azure App Service for LinuxMissing authentication for critical function in Azure App Service allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-69435 | 8 Oct 2026 | CVSS 8.1 | Microsoft Azure SRE AgentMissing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network. | |
| CVE-2026-105793 | 6 Oct 2026 | CVSS 9.1 | microsoft UFOMicrosoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the press_key tool in… | |
| CVE-2026-105794 | 6 Oct 2026 | CVSS 9.1 | MsQuic: Improper Certificate Validation in Microsoft.Native.Quic.MsQuic.OpenSSLMsQuic is a cross-platform C implementation of the IETF QUIC protocol exposed to C, C++, C#, and Rust. Prior to 2.4.20, 2.5.11, and 2.6.1, MsQuic… | Fix |
| CVE-2026-105795 | 6 Oct 2026 | CVSS 3.1 | Kiota: Unsafe oauth_card_path references in Kiota-generated API plugin manifestsKiota is an OpenAPI based HTTP Client code generator. From 1.25.1 until 1.35.0, Kiota copies x-ai-capabilities.response_semantics.oauth_card_path… | Fix |
| CVE-2026-105796 | 6 Oct 2026 | CVSS 8.8 | Kiota: Code injection through doc-comment delimiter reformation in Kiota Java and PHP generatorsKiota is an OpenAPI based HTTP Client code generator. From 0.5.0 until 1.35.0, Kiota's Java and PHP documentation-comment sanitizers delete… | Fix |
| CVE-2026-105797 | 6 Oct 2026 | CVSS 8.8 | microsoft simplechatSimpleChat is a secure AI conversation application with personal and group workspaces for document-grounded interactions. In versions 0.261.003 and… | |
| CVE-2026-105798 | 6 Oct 2026 | CVSS 8.7 | microsoft simplechatSimpleChat is a secure AI conversation application with personal and group workspaces for document-grounded interactions. Prior to 0.261.029, POST… | |
| CVE-2026-105791 | 6 Oct 2026 | CVSS 7.5 | microsoft UFOMicrosoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the run_shell tool in the… | |
| CVE-2026-105792 | 6 Oct 2026 | CVSS 6.5 | microsoft UFOMicrosoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the /api/task_result/{task_name}… | |
| CVE-2026-105788 | 6 Oct 2026 | CVSS 8.8 | microsoft UFOMicrosoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.10, the type_text and launch_app… | |
| CVE-2026-105789 | 6 Oct 2026 | CVSS 5.4 | microsoft UFOMicrosoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the execute_command tool in… | |
| CVE-2026-105790 | 6 Oct 2026 | CVSS 6.4 | microsoft UFOMicrosoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, authenticated device registration… | |
| CVE-2026-96940 | 2 Oct 2026 | CVSS 8.8 | Microsoft Exchange Server 2016 Cumulative Update 23Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. | Fix |
| CVE-2026-100208 | 25 Sep 2026 | CVSS 8.1 | Microsoft 365 Apps for EnterpriseInteger overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-70125 | 23 Sep 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseMicrosoft Office Outlook Remote Code Execution Vulnerability | Fix |
| CVE-2026-85880 | 8 Sep 2026 | CVSS 7.8 | Microsoft Windows Heap-Based Buffer OverflowHeap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally. | ExploitedFix |
| CVE-2026-81963 | 8 Sep 2026 | CVSS 7.8 | Microsoft Windows Link FollowingImproper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally. | ExploitedFix |
| CVE-2026-72923 | 8 Sep 2026 | CVSS 7.5 | Microsoft.OpenApi.YamlReader vulnerable to denial of service via YAML alias expansionThe OpenAPI.NET SDK contains a useful object model for OpenAPI documents in .NET along with common serializers to extract raw OpenAPI JSON and YAML… | Fix |
| CVE-2026-68820 | 11 Aug 2026 | CVSS 7.0 | Microsoft Windows Ancillary Function Driver for WinSock Use-After-FreeUse after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | ExploitedFix |
| CVE-2026-65660 | 11 Aug 2026 | CVSS 8.8 | Microsoft SharePoint Code InjectionImproper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | ExploitedFix |
| CVE-2026-55040 | 14 Jul 2026 | CVSS 9.1 | Microsoft SharePoint Weak AuthenticationWeak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network. | ExploitedFix |
| CVE-2026-58644 | 14 Jul 2026 | CVSS 9.8 | Microsoft SharePoint Deserialization of Untrusted DataDeserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. | ExploitedFix |
| CVE-2026-56155 | 14 Jul 2026 | CVSS 7.8 | Microsoft Active Directory Federation Services Insufficient Granularity of Access ControlInsufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate privileges… | Exploited |
| CVE-2026-56164 | 14 Jul 2026 | CVSS 9.8 | Microsoft SharePoint Server Missing Authentication for Critical FunctionMissing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network. | Exploited |
| CVE-2026-50522 | 14 Jul 2026 | CVSS 9.8 | Microsoft SharePoint Deserialization of Untrusted DataDeserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. | ExploitedFix |
| CVE-2026-45659 | 22 May 2026 | CVSS 8.8 | Microsoft SharePoint Server Deserialization of Untrusted DataDeserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | Exploited |
| CVE-2026-45498 | 20 May 2026 | CVSS 7.5 | Microsoft Defender Denial of ServiceMicrosoft Defender Denial of Service Vulnerability | Exploited |
| CVE-2026-41091 | 20 May 2026 | CVSS 7.8 | Microsoft Defender Link FollowingImproper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally. | Exploited |
| CVE-2026-42897 | 14 May 2026 | CVSS 6.1 | Microsoft Exchange Server Cross-Site ScriptingImproper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to… | Exploited |
| CVE-2026-33825 | 14 Apr 2026 | CVSS 7.8 | Microsoft Defender Insufficient Granularity of Access ControlInsufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally. | Exploited |
| CVE-2026-33824 | 14 Apr 2026 | CVSS 9.8 | Microsoft Internet Key Exchange (IKE) Service Extensions Double FreeDouble free in Windows IKE Extension allows an unauthorized attacker to execute code over a network. | Exploited |
| CVE-2026-32201 | 14 Apr 2026 | CVSS 6.5 | Microsoft SharePoint Server Improper Input ValidationImproper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. | Exploited |
| CVE-2026-32202 | 14 Apr 2026 | CVSS 4.3 | Microsoft Windows Protection Mechanism FailureProtection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network. | Exploited |
| CVE-2026-21533 | 10 Feb 2026 | CVSS 7.8 | Microsoft Windows Improper Privilege ManagementImproper privilege management in Windows Remote Desktop allows an authorized attacker to elevate privileges locally. | Exploited |
| CVE-2026-21519 | 10 Feb 2026 | CVSS 7.8 | Microsoft Windows Type ConfusionAccess of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | Exploited |
| CVE-2026-21525 | 10 Feb 2026 | CVSS 6.2 | Microsoft Windows NULL Pointer DereferenceNull pointer dereference in Windows Remote Access Connection Manager allows an unauthorized attacker to deny service locally. | Exploited |
| CVE-2026-21510 | 10 Feb 2026 | CVSS 8.8 | Microsoft Windows Shell Protection Mechanism FailureProtection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network. | Exploited |
| CVE-2026-21513 | 10 Feb 2026 | CVSS 8.8 | Microsoft MSHTML Framework Protection Mechanism FailureProtection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network. | Exploited |
| CVE-2026-21514 | 10 Feb 2026 | CVSS 7.8 | Microsoft Office Word Reliance on Untrusted Inputs in a Security DecisionReliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally. | Exploited |
| CVE-2026-21509 | 26 Jan 2026 | CVSS 7.8 | Microsoft Office Security Feature BypassReliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a security feature locally. | Exploited |
| CVE-2026-20963 | 13 Jan 2026 | CVSS 9.8 | Microsoft SharePoint Deserialization of Untrusted DataDeserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. | Exploited |
| CVE-2026-20805 | 13 Jan 2026 | CVSS 5.5 | Microsoft Windows Information DisclosureExposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally. | Exploited |
| CVE-2025-62221 | 9 Dec 2025 | CVSS 7.8 | Microsoft Windows Use After FreeUse after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. | Exploited |
| CVE-2025-62215 | 11 Nov 2025 | CVSS 7.0 | Microsoft Windows Race ConditionConcurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to… | Exploited |
| CVE-2025-60710 | 11 Nov 2025 | CVSS 7.8 | Microsoft Windows Link FollowingImproper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges… | Exploited |
| CVE-2025-59287 | 14 Oct 2025 | CVSS 9.8 | Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted DataDeserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network. | Exploited |
| CVE-2025-59230 | 14 Oct 2025 | CVSS 7.8 | Microsoft Windows Improper Access ControlImproper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. | Exploited |
Page 15 of 19