Microsoft Vulnerabilities
Microsoft makes the Windows operating system, the Edge browser and Microsoft 365, along with on-premises server products such as Exchange Server and SharePoint Server. The database tracks 410 Microsoft CVE records. CISA lists 392 of them as exploited in the wild, most recently on 2026-11-10. The products with the most CVE records are Windows (175), Internet Explorer (36), and Office (30).
Updated
Microsoft in the KEV Catalog
as of 2026-11-12- By number of CISA KEV entries, Microsoft ranks first among the 289 vendors in the catalog.
- CISA added 36 Microsoft entries to the KEV catalog in 2024, 39 in 2025, and 41 so far in 2026.
- For Microsoft entries added to the CISA KEV catalog since 2023, the median time from CVE publication to KEV listing is 0 days (listed on the publication date), compared with 15 days for all entries added in that period.
- CISA marks 30% of Microsoft KEV entries (117 of 392) as known to be used in ransomware campaigns, compared with 20% of all KEV entries.
- Among Microsoft KEV entries with a named weakness, the most common is Out-of-bounds Write (CWE-787), in 45 of 341 entries.
- CISA's SSVC enrichment rates 11% of Microsoft KEV entries with SSVC data (45 of 392) as automatable, compared with 41% across the catalog.
Recently Exploited Microsoft CVEs
CVE-2026-1241946.5 MEDIUM
Microsoft Outlook Spoofing Vulnerability
MicrosoftKEVEPSS 1.6%2026-11-10
CVE-2026-969518.8 HIGH
Windows Shell Security Feature Bypass Vulnerability
MicrosoftKEVEPSS 9.8%2026-10-13
CVE-2026-656608.8 HIGH
Microsoft SharePoint Server Remote Code Execution Vulnerability
MicrosoftKEVEPSS 9.9%2026-08-11
CVE-2026-819637.8 HIGH
Windows Update Stack Elevation of Privilege Vulnerability
MicrosoftKEVEPSS 7.1%2026-09-08
CVE-2026-858807.8 HIGH
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
MicrosoftKEVEPSS 0.4%2026-09-08
CVE-2019-10688.8 HIGH
Microsoft SQL Server Remote Code Execution Vulnerability
MicrosoftKEVEPSS 57.3%2019-07-15
Affected Products
82 products| Product | CVEs | KEV | Latest |
|---|---|---|---|
| Windows | 175 | 175 | 2026-10-13 |
| Internet Explorer | 36 | 36 | 2026-05-20 |
| Office | 30 | 30 | 2026-11-10 |
| Win32k | 25 | 25 | 2023-06-22 |
| Exchange Server | 17 | 17 | 2026-04-13 |
| SharePoint | 10 | 10 | 2026-09-25 |
| Windows 10 Version 1607 | 6 | - | 2026-06-09 |
| Defender | 5 | 5 | 2026-05-20 |
| SharePoint Server | 5 | 5 | 2026-07-14 |
| Microsoft SharePoint Enterprise Server 2016 | 4 | - | 2026-06-09 |
| Open Management Infrastructure (OMI) | 4 | 4 | 2021-11-03 |
| Word | 4 | 4 | 2023-09-12 |
| .NET Framework | 3 | 3 | 2025-02-04 |
| Active Directory | 3 | 3 | 2022-08-18 |
| Excel | 3 | 3 | 2022-03-03 |
| Silverlight | 3 | 3 | 2022-05-25 |
| DirectX Graphics Kernel (DXGKRNL) | 2 | 2 | 2022-03-28 |
| Edge | 2 | 2 | 2022-03-28 |
| Edge and Internet Explorer | 2 | 2 | 2022-03-28 |
| Enhanced Cryptographic Provider | 2 | 2 | 2021-11-03 |
| Graphics Device Interface (GDI) | 2 | 2 | 2022-03-25 |
| MSHTML | 2 | 2 | 2021-11-03 |
| PowerPoint | 2 | 2 | 2022-06-08 |
| SMBv1 | 2 | 2 | 2022-02-10 |
| SMBv1 server | 2 | 2 | 2022-05-24 |
| SQL Server | 2 | 2 | 2026-08-26 |
| XML Core Services | 2 | 2 | 2022-06-08 |
| .NET Core and Visual Studio | 1 | 1 | 2023-08-09 |
| .NET Framework, SharePoint, Visual Studio | 1 | 1 | 2021-11-03 |
| Active Directory Federation Services | 1 | 1 | 2026-07-14 |
| Ancillary Function Driver (afd.sys) | 1 | 1 | 2022-03-28 |
| ASP.NET Core 10.0 | 1 | - | 2026-04-21 |
| ATM Font Driver | 1 | 1 | 2022-03-03 |
| ChakraCore scripting engine | 1 | 1 | 2022-03-03 |
| Client-Server Run-time Subsystem (CSRSS) | 1 | 1 | 2022-03-28 |
| Configuration Manager | 1 | 1 | 2026-02-12 |
| DirectX | 1 | 1 | 2026-05-20 |
| DWM Core Library | 1 | 1 | 2024-05-14 |
| Exchange | 1 | 1 | 2021-11-17 |
| Forefront Threat Management Gateway (TMG) | 1 | 1 | 2022-03-03 |
| Graphics Component | 1 | 1 | 2022-02-15 |
| HTTP Protocol Stack | 1 | 1 | 2022-04-06 |
| HTTP.sys | 1 | 1 | 2022-02-10 |
| Hyper-V RemoteFX | 1 | 1 | 2021-11-03 |
| Input Method Editor (IME) Japanese | 1 | 1 | 2022-05-25 |
| Internet Explorer and Edge | 1 | 1 | 2022-05-24 |
| Internet Explorer Scripting Engine | 1 | 1 | 2022-03-25 |
| Internet Information Services (IIS) | 1 | 1 | 2021-11-03 |
| Internet Key Exchange (IKE) Service Extensions | 1 | 1 | 2026-08-18 |
| Kerberos Key Distribution Center (KDC) | 1 | 1 | 2022-03-25 |
| Malware Protection Engine | 1 | 1 | 2022-03-03 |
| Microsoft | 1 | 1 | 2026-05-15 |
| Microsoft Confluence SAML SSO plugin | 1 | - | 2026-05-12 |
| Microsoft Exchange Server 2016 Cumulative Update 23 | 1 | - | 2026-06-09 |
| Microsoft Malware Protection Engine | 1 | - | 2026-06-16 |
| MSCOMCTL.OCX | 1 | 1 | 2021-11-03 |
| Netlogon | 1 | 1 | 2021-11-03 |
| Office and WordPad | 1 | 1 | 2021-11-03 |
| Office Outlook | 1 | 1 | 2025-02-06 |
| Outlook | 1 | 1 | 2023-07-11 |
| Partner Center | 1 | 1 | 2025-02-25 |
| Power Pages | 1 | 1 | 2025-02-21 |
| Project | 1 | 1 | 2024-08-13 |
| Publisher | 1 | 1 | 2024-09-10 |
| Remote Desktop Services | 1 | 1 | 2021-11-03 |
| Skype for Business | 1 | 1 | 2023-10-10 |
| SmartScreen Prompt | 1 | 1 | 2024-04-30 |
| SMBv3 | 1 | 1 | 2022-02-10 |
| Streaming Service | 1 | 1 | 2024-02-29 |
| Streaming Service Proxy | 1 | 1 | 2023-09-12 |
| Task Scheduler | 1 | 1 | 2022-03-15 |
| Update Notification Manager | 1 | 1 | 2022-05-23 |
| Visual Basic for Applications (VBA) | 1 | 1 | 2026-04-13 |
| Windows 11 version 23H2 | 1 | - | 2026-06-09 |
| Windows Admin Center | 1 | - | 2026-02-17 |
| Windows Ancillary Function Driver for WinSock | 1 | 1 | 2026-08-11 |
| Windows CNG Key Isolation Service | 1 | 1 | 2023-10-04 |
| Windows COM+ Event System Service | 1 | 1 | 2022-10-11 |
| Windows Notepad | 1 | - | 2026-02-10 |
| Windows Server 2012 | 1 | - | 2026-05-12 |
| WinVerifyTrust function | 1 | 1 | 2022-01-10 |
| WordPad | 1 | 1 | 2023-10-10 |
Microsoft Vulnerabilities by Product
5 productsMicrosoft Windows Vulnerabilities
219 records, 209 in KEV| CVE | Title | Vendor | CVSS | EPSS | KEV | Published |
|---|---|---|---|---|---|---|
| CVE-2026-96951KEV Windows Shell Security Feature Bypass Vulnerability | Windows Shell Security Feature Bypass Vulnerability | Microsoft | 8.8 | 9.8% | KEV | 2026-10-13 |
| CVE-2026-81963KEV Windows Update Stack Elevation of Privilege Vulnerability | Windows Update Stack Elevation of Privilege Vulnerability | Microsoft | 7.8 | 7.1% | KEV | 2026-09-08 |
| CVE-2026-85880KEV Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability | Microsoft | 7.8 | 0.4% | KEV | 2026-09-08 |
| CVE-2026-33824KEV Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability | Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability | Microsoft | 9.8 | 77.4% | KEV | 2026-04-14 |
| CVE-2026-68820KEV Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Microsoft | 7.0 | 8.6% | KEV | 2026-08-11 |
| CVE-2008-4250KEV Microsoft Windows Buffer Overflow Vulnerability | Microsoft Windows Buffer Overflow Vulnerability | - | 9.8 | 98.8% | KEV | 2008-10-23 |
| CVE-2026-32202KEV Windows Shell Spoofing Vulnerability | Windows Shell Spoofing Vulnerability | Microsoft | 4.3 | 71.3% | KEV | 2026-04-14 |
| CVE-2023-36424KEV Windows Common Log File System Driver Elevation of Privilege Vulnerability | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Microsoft | 7.8 | 12.1% | KEV | 2023-11-14 |
| CVE-2025-60710KEV Host Process for Windows Tasks Elevation of Privilege Vulnerability | Host Process for Windows Tasks Elevation of Privilege Vulnerability | Microsoft | 7.8 | 4.6% | KEV | 2025-11-11 |
| CVE-2008-0015KEV Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability | Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability | - | 8.8 | 76.6% | KEV | 2009-07-07 |
Showing the 10 highest-priority records of 219.
Microsoft Exchange Server Vulnerabilities
20 records, 19 in KEV| CVE | Title | Vendor | CVSS | EPSS | KEV | Published |
|---|---|---|---|---|---|---|
| CVE-2026-42897KEV Microsoft Exchange Server Spoofing Vulnerability | Microsoft Exchange Server Spoofing Vulnerability | Microsoft | 8.1 | 70.7% | KEV | 2026-05-14 |
| CVE-2023-21529KEV Microsoft Exchange Server Remote Code Execution Vulnerability | Microsoft Exchange Server Remote Code Execution Vulnerability | Microsoft | 8.8 | 59.3% | KEV | 2023-02-14 |
| CVE-2021-31196KEV Microsoft Exchange Server Remote Code Execution Vulnerability | Microsoft Exchange Server Remote Code Execution Vulnerability | Microsoft | 7.2 | 54.1% | KEV | 2021-07-14 |
| CVE-2024-21410KEV Microsoft Exchange Server Elevation of Privilege Vulnerability | Microsoft Exchange Server Elevation of Privilege Vulnerability | Microsoft | 9.8 | 12.7% | KEV | 2024-02-13 |
| CVE-2022-41080KEV Microsoft Exchange Server Elevation of Privilege Vulnerability | Microsoft Exchange Server Elevation of Privilege Vulnerability | Microsoft | 8.8 | 77.3% | KEV | 2022-11-09 |
| CVE-2022-41082KEV Microsoft Exchange Server Remote Code Execution Vulnerability | Microsoft Exchange Server Remote Code Execution Vulnerability | Microsoft | 8.0 | 99.970% | KEV | 2022-10-03 |
| CVE-2022-41040KEV Microsoft Exchange Server Elevation of Privilege Vulnerability | Microsoft Exchange Server Elevation of Privilege Vulnerability | Microsoft | 8.8 | 99.956% | KEV | 2022-10-03 |
| CVE-2018-8581KEV Microsoft Exchange Server Privilege Escalation Vulnerability | Microsoft Exchange Server Privilege Escalation Vulnerability | Microsoft | 7.4 | 27.6% | KEV | 2018-11-14 |
| CVE-2021-33766KEV Microsoft Exchange Server Information Disclosure Vulnerability | Microsoft Exchange Server Information Disclosure Vulnerability | Microsoft | 7.3 | 98.2% | KEV | 2021-07-14 |
| CVE-2021-42321KEV Microsoft Exchange Server Remote Code Execution Vulnerability | Microsoft Exchange Server Remote Code Execution Vulnerability | Microsoft | 8.8 | 91.7% | KEV | 2021-11-10 |
Showing the 10 highest-priority records of 20.
Microsoft Office Vulnerabilities
33 records, 33 in KEV| CVE | Title | Vendor | CVSS | EPSS | KEV | Published |
|---|---|---|---|---|---|---|
| CVE-2026-124194KEV Microsoft Outlook Spoofing Vulnerability | Microsoft Outlook Spoofing Vulnerability | Microsoft | 6.5 | 1.6% | KEV | 2026-11-10 |
| CVE-2009-0238KEV Microsoft Office Remote Code Execution | Microsoft Office Remote Code Execution | - | 8.8 | 42.9% | KEV | 2009-02-25 |
| CVE-2026-21514KEV Microsoft Word Security Feature Bypass Vulnerability | Microsoft Word Security Feature Bypass Vulnerability | Microsoft | 7.8 | 1.6% | KEV | 2026-02-10 |
| CVE-2026-21509KEV Microsoft Office Security Feature Bypass Vulnerability | Microsoft Office Security Feature Bypass Vulnerability | Microsoft | 7.8 | 70.8% | KEV | 2026-01-26 |
| CVE-2009-0556KEV Microsoft Office PowerPoint Code Injection Vulnerability | Microsoft Office PowerPoint Code Injection Vulnerability | - | 8.8 | 67.3% | KEV | 2009-04-03 |
| CVE-2007-0671KEV Microsoft Office Excel Remote Code Execution Vulnerability | Microsoft Office Excel Remote Code Execution Vulnerability | - | 8.8 | 44.1% | KEV | 2007-02-03 |
| CVE-2024-21413KEV Microsoft Outlook Remote Code Execution Vulnerability | Microsoft Outlook Remote Code Execution Vulnerability | Microsoft | 9.8 | 94.7% | KEV | 2024-02-13 |
| CVE-2023-23397KEV Microsoft Outlook Elevation of Privilege Vulnerability | Microsoft Outlook Elevation of Privilege Vulnerability | Microsoft | 9.8 | 97.2% | KEV | 2023-03-14 |
| CVE-2023-21715KEV Microsoft Publisher Security Feature Bypass Vulnerability | Microsoft Publisher Security Feature Bypass Vulnerability | Microsoft | 7.3 | 12.0% | KEV | 2023-02-14 |
| CVE-2013-1331KEV Microsoft Office Buffer Overflow Vulnerability | Microsoft Office Buffer Overflow Vulnerability | - | 7.8 | 79.8% | KEV | 2013-06-12 |
Showing the 10 highest-priority records of 33.
Internet Explorer Vulnerabilities
40 records, 40 in KEV| CVE | Title | Vendor | CVSS | EPSS | KEV | Published |
|---|---|---|---|---|---|---|
| CVE-2010-0249KEV Microsoft Internet Explorer Use-After-Free Vulnerability | Microsoft Internet Explorer Use-After-Free Vulnerability | - | 8.8 | 91.9% | KEV | 2010-01-15 |
| CVE-2010-0806KEV Microsoft Internet Explorer Use-After-Free Vulnerability | Microsoft Internet Explorer Use-After-Free Vulnerability | - | 8.8 | 82.1% | KEV | 2010-03-10 |
| CVE-2010-3962KEV Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability | Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability | - | 8.1 | 96.8% | KEV | 2010-11-05 |
| CVE-2013-3893KEV Microsoft Internet Explorer Resource Management Errors Vulnerability | Microsoft Internet Explorer Resource Management Errors Vulnerability | - | 8.8 | 87.6% | KEV | 2013-09-18 |
| CVE-2012-4792KEV Microsoft Internet Explorer Use-After-Free Vulnerability | Microsoft Internet Explorer Use-After-Free Vulnerability | - | 8.8 | 78.8% | KEV | 2012-12-30 |
| CVE-2013-3163KEV Microsoft Internet Explorer Memory Corruption Vulnerability | Microsoft Internet Explorer Memory Corruption Vulnerability | - | 8.8 | 70.7% | KEV | 2013-07-10 |
| CVE-2012-4969KEV Microsoft Internet Explorer Use-After-Free Vulnerability | Microsoft Internet Explorer Use-After-Free Vulnerability | - | 8.1 | 80.3% | KEV | 2012-09-18 |
| CVE-2013-7331KEV Microsoft Internet Explorer Information Disclosure Vulnerability | Microsoft Internet Explorer Information Disclosure Vulnerability | - | 6.5 | 50.2% | KEV | 2014-02-26 |
| CVE-2014-4123KEV Microsoft Internet Explorer Privilege Escalation Vulnerability | Microsoft Internet Explorer Privilege Escalation Vulnerability | - | 8.8 | 47.1% | KEV | 2014-10-15 |
| CVE-2015-2425KEV Microsoft Internet Explorer Memory Corruption Vulnerability | Microsoft Internet Explorer Memory Corruption Vulnerability | - | 8.8 | 44.7% | KEV | 2015-07-14 |
Showing the 10 highest-priority records of 40.
All Microsoft CVEs
410 records| CVE | Title | Vendor | CVSS | EPSS | KEV | Published |
|---|---|---|---|---|---|---|
| CVE-2026-124194KEV Microsoft Outlook Spoofing Vulnerability | Microsoft Outlook Spoofing Vulnerability | Microsoft | 6.5 | 1.6% | KEV | 2026-11-10 |
| CVE-2026-96951KEV Windows Shell Security Feature Bypass Vulnerability | Windows Shell Security Feature Bypass Vulnerability | Microsoft | 8.8 | 9.8% | KEV | 2026-10-13 |
| CVE-2026-65660KEV Microsoft SharePoint Server Remote Code Execution Vulnerability | Microsoft SharePoint Server Remote Code Execution Vulnerability | Microsoft | 8.8 | 9.9% | KEV | 2026-08-11 |
| CVE-2026-81963KEV Windows Update Stack Elevation of Privilege Vulnerability | Windows Update Stack Elevation of Privilege Vulnerability | Microsoft | 7.8 | 7.1% | KEV | 2026-09-08 |
| CVE-2026-85880KEV Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability | Microsoft | 7.8 | 0.4% | KEV | 2026-09-08 |
| CVE-2019-1068KEV Microsoft SQL Server Remote Code Execution Vulnerability | Microsoft SQL Server Remote Code Execution Vulnerability | Microsoft | 8.8 | 57.3% | KEV | 2019-07-15 |
| CVE-2026-33824KEV Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability | Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability | Microsoft | 9.8 | 77.4% | KEV | 2026-04-14 |
| CVE-2026-55040KEV Microsoft SharePoint Server Security Feature Bypass Vulnerability | Microsoft SharePoint Server Security Feature Bypass Vulnerability | Microsoft | 9.1 | 69.5% | KEV | 2026-07-14 |
| CVE-2026-68820KEV Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Microsoft | 7.0 | 8.6% | KEV | 2026-08-11 |
| CVE-2026-50522KEV Microsoft SharePoint Remote Code Execution Vulnerability | Microsoft SharePoint Remote Code Execution Vulnerability | Microsoft | 9.8 | 3.0% | KEV | 2026-07-14 |
| CVE-2026-58644KEV Microsoft SharePoint Remote Code Execution Vulnerability | Microsoft SharePoint Remote Code Execution Vulnerability | Microsoft | 9.8 | 15.9% | KEV | 2026-07-14 |
| CVE-2026-56164KEV Microsoft SharePoint Server Elevation of Privilege Vulnerability | Microsoft SharePoint Server Elevation of Privilege Vulnerability | Microsoft | 5.3 | 1.0% | KEV | 2026-07-14 |
| CVE-2026-56155KEV Active Directory Federation Services Elevation of Privilege Vulnerability | Active Directory Federation Services Elevation of Privilege Vulnerability | Microsoft | 7.8 | 0.3% | KEV | 2026-07-14 |
| CVE-2026-45659KEV Microsoft SharePoint Remote Code Execution Vulnerability | Microsoft SharePoint Remote Code Execution Vulnerability | Microsoft | 8.8 | 80.2% | KEV | 2026-05-22 |
| CVE-2008-4250KEV Microsoft Windows Buffer Overflow Vulnerability | Microsoft Windows Buffer Overflow Vulnerability | - | 9.8 | 98.8% | KEV | 2008-10-23 |
| CVE-2010-0249KEV Microsoft Internet Explorer Use-After-Free Vulnerability | Microsoft Internet Explorer Use-After-Free Vulnerability | - | 8.8 | 91.9% | KEV | 2010-01-15 |
| CVE-2010-0806KEV Microsoft Internet Explorer Use-After-Free Vulnerability | Microsoft Internet Explorer Use-After-Free Vulnerability | - | 8.8 | 82.1% | KEV | 2010-03-10 |
| CVE-2026-45498KEV Microsoft Defender Denial of Service Vulnerability | Microsoft Defender Denial of Service Vulnerability | Microsoft | 4.0 | 63.1% | KEV | 2026-05-20 |
| CVE-2009-1537KEV Microsoft DirectX NULL Byte Overwrite Vulnerability | Microsoft DirectX NULL Byte Overwrite Vulnerability | - | 8.8 | 51.1% | KEV | 2009-05-29 |
| CVE-2026-41091KEV Microsoft Defender Elevation of Privilege Vulnerability | Microsoft Defender Elevation of Privilege Vulnerability | Microsoft | 7.8 | 8.2% | KEV | 2026-05-20 |
| CVE-2026-42897KEV Microsoft Exchange Server Spoofing Vulnerability | Microsoft Exchange Server Spoofing Vulnerability | Microsoft | 8.1 | 70.7% | KEV | 2026-05-14 |
| CVE-2026-32202KEV Windows Shell Spoofing Vulnerability | Windows Shell Spoofing Vulnerability | Microsoft | 4.3 | 71.3% | KEV | 2026-04-14 |
| CVE-2026-33825KEV Microsoft Defender Elevation of Privilege Vulnerability | Microsoft Defender Elevation of Privilege Vulnerability | Microsoft | 7.8 | 6.9% | KEV | 2026-04-14 |
| CVE-2026-32201KEV Microsoft SharePoint Server Spoofing Vulnerability | Microsoft SharePoint Server Spoofing Vulnerability | Microsoft | 6.5 | 44.0% | KEV | 2026-04-14 |
| CVE-2009-0238KEV Microsoft Office Remote Code Execution | Microsoft Office Remote Code Execution | - | 8.8 | 42.9% | KEV | 2009-02-25 |
| CVE-2023-21529KEV Microsoft Exchange Server Remote Code Execution Vulnerability | Microsoft Exchange Server Remote Code Execution Vulnerability | Microsoft | 8.8 | 59.3% | KEV | 2023-02-14 |
| CVE-2012-1854KEV Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability | Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability | - | 7.8 | 20.9% | KEV | 2012-07-10 |
| CVE-2023-36424KEV Windows Common Log File System Driver Elevation of Privilege Vulnerability | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Microsoft | 7.8 | 12.1% | KEV | 2023-11-14 |
| CVE-2025-60710KEV Host Process for Windows Tasks Elevation of Privilege Vulnerability | Host Process for Windows Tasks Elevation of Privilege Vulnerability | Microsoft | 7.8 | 4.6% | KEV | 2025-11-11 |
| CVE-2026-20963KEV Microsoft SharePoint Remote Code Execution Vulnerability | Microsoft SharePoint Remote Code Execution Vulnerability | Microsoft | 9.8 | 29.2% | KEV | 2026-01-13 |
| CVE-2008-0015KEV Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability | Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability | - | 8.8 | 76.6% | KEV | 2009-07-07 |
| CVE-2024-43468KEV Microsoft Configuration Manager Remote Code Execution Vulnerability | Microsoft Configuration Manager Remote Code Execution Vulnerability | Microsoft | 9.8 | 81.0% | KEV | 2024-10-08 |
| CVE-2026-21510KEV Windows Shell Security Feature Bypass Vulnerability | Windows Shell Security Feature Bypass Vulnerability | Microsoft | 8.8 | 61.2% | KEV | 2026-02-10 |
| CVE-2026-21513KEV MSHTML Framework Security Feature Bypass Vulnerability | MSHTML Framework Security Feature Bypass Vulnerability | Microsoft | 8.8 | 15.9% | KEV | 2026-02-10 |
| CVE-2026-21525KEV Windows Remote Access Connection Manager Denial of Service Vulnerability | Windows Remote Access Connection Manager Denial of Service Vulnerability | Microsoft | 6.2 | 5.0% | KEV | 2026-02-10 |
| CVE-2026-21533KEV Windows Remote Desktop Services Elevation of Privilege Vulnerability | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Microsoft | 7.8 | 4.3% | KEV | 2026-02-10 |
| CVE-2026-21519KEV Desktop Window Manager Elevation of Privilege Vulnerability | Desktop Window Manager Elevation of Privilege Vulnerability | Microsoft | 7.8 | 2.6% | KEV | 2026-02-10 |
| CVE-2026-21514KEV Microsoft Word Security Feature Bypass Vulnerability | Microsoft Word Security Feature Bypass Vulnerability | Microsoft | 7.8 | 1.6% | KEV | 2026-02-10 |
| CVE-2026-21509KEV Microsoft Office Security Feature Bypass Vulnerability | Microsoft Office Security Feature Bypass Vulnerability | Microsoft | 7.8 | 70.8% | KEV | 2026-01-26 |
| CVE-2026-20805KEV Desktop Window Manager Information Disclosure Vulnerability | Desktop Window Manager Information Disclosure Vulnerability | Microsoft | 5.5 | 7.5% | KEV | 2026-01-13 |
| CVE-2009-0556KEV Microsoft Office PowerPoint Code Injection Vulnerability | Microsoft Office PowerPoint Code Injection Vulnerability | - | 8.8 | 67.3% | KEV | 2009-04-03 |
| CVE-2025-62221KEV Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | Microsoft | 7.8 | 2.5% | KEV | 2025-12-09 |
| CVE-2025-62215KEV Windows Kernel Elevation of Privilege Vulnerability | Windows Kernel Elevation of Privilege Vulnerability | Microsoft | 7.0 | 4.5% | KEV | 2025-11-11 |
| CVE-2025-59287KEV Windows Server Update Service (WSUS) Remote Code Execution Vulnerability | Windows Server Update Service (WSUS) Remote Code Execution Vulnerability | Microsoft | 9.8 | 99.980% | KEV | 2025-10-14 |
| CVE-2025-33073KEV Windows SMB Client Elevation of Privilege Vulnerability | Windows SMB Client Elevation of Privilege Vulnerability | Microsoft | 8.8 | 82.8% | KEV | 2025-06-10 |
| CVE-2025-24990KEV Windows Agere Modem Driver Elevation of Privilege Vulnerability | Windows Agere Modem Driver Elevation of Privilege Vulnerability | Microsoft | 7.8 | 6.5% | KEV | 2025-10-14 |
| CVE-2025-59230KEV Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | Microsoft | 7.8 | 2.7% | KEV | 2025-10-14 |
| CVE-2010-3962KEV Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability | Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability | - | 8.1 | 96.8% | KEV | 2010-11-05 |
| CVE-2011-3402KEV Microsoft Windows Remote Code Execution Vulnerability | Microsoft Windows Remote Code Execution Vulnerability | - | 8.8 | 78.1% | KEV | 2011-11-04 |
| CVE-2013-3918KEV Microsoft Windows Out-of-Bounds Write Vulnerability | Microsoft Windows Out-of-Bounds Write Vulnerability | - | 8.8 | 73.7% | KEV | 2013-11-12 |
Showing the 50 highest-priority records of 410. All 410 Microsoft CVEs →
Frequently Asked Questions
How many Microsoft vulnerabilities are actively exploited?→
392 Microsoft CVEs are in the CISA Known Exploited Vulnerabilities catalog as of 2026-11-12. The latest was added on 2026-11-10.
Which Microsoft vulnerabilities are used in ransomware attacks?→
CISA marks 117 Microsoft KEV entries as known to be used in ransomware campaigns, including CVE-2026-45659, CVE-2026-33825, CVE-2023-21529, CVE-2025-60710, CVE-2021-43226.
How quickly are Microsoft vulnerabilities added to the KEV catalog?→
For Microsoft entries added to the CISA KEV catalog since 2023, the median time from CVE publication to KEV listing is 0 days (listed on the publication date), compared with 15 days for all entries added in that period. These figures are as of November 12, 2026.
Which Microsoft products have the most exploited vulnerabilities?→
- +Windows: 175 CVEs (175 in KEV)
- +Internet Explorer: 36 CVEs (36 in KEV)
- +Office: 30 CVEs (30 in KEV)
- +Win32k: 25 CVEs (25 in KEV)
- +Exchange Server: 17 CVEs (17 in KEV)
Where does Microsoft publish security advisories?→
Microsoft publishes security advisories at https://msrc.microsoft.com/update-guide. Check the vendor advisory for fixed versions and workarounds before applying updates.
Sources
CVE record data © The MITRE Corporation, used under the CVE Terms of Use. Vendor and product names for exploited CVEs follow the CISA Known Exploited Vulnerabilities catalog (CC0). Exploit prediction scores by FIRST EPSS (first.org/epss). This site is not affiliated with or endorsed by Microsoft, MITRE, CISA, or FIRST.