Microsoft vulnerabilities
We track 1,120 vulnerabilities in Microsoft products across 60+ products. 1,077 are rated high or critical, and 406 have been exploited in real attacks. The most recent was published on November 10, 2026.
Latest Microsoft vulnerabilities
- 7.5 High severity
go-crypto-winnative: Missing Release of Memory after Effective Lifetime
go-crypto-winnative Go crypto backend for Windows using Cryptography API: Next Generation (CNG). Prior to commit f49c8e1379ea4b147d5bff1b3be5b0ff45792e41, calls to `cng.TLS1PRF` don't release the key handle, producing a small memory leak every time. Commit f49
- 7.8 High severity
Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Exploited
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- 7.1 High severity
Microsoft Windows Storage Link Following Exploited
Windows Storage Elevation of Privilege Vulnerability
- 7.5 High severity
Windows 10 Version 1507: Uncontrolled Resource Consumption
Uncontrolled resource consumption in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to deny service over a network.
- 7.8 High severity
Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Exploited
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
- 7.8 High severity
Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Exploited
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
- 7.8 High severity
Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Exploited
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
- 9.1 Critical severity
Excel: Improper Verification of Cryptographic Signature
A library injection vulnerability exists in Microsoft Excel 16.83 for macOS. A specially crafted library can leverage Excel's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger thi
- 9.1 Critical severity
Outlook: Improper Verification of Cryptographic Signature
A library injection vulnerability exists in Microsoft Outlook 16.83.3 for macOS. A specially crafted library can leverage Outlook's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigg
- 9.8 Critical severity
Teams (work or school): Improper Verification of Cryptographic Signature
A library injection vulnerability exists in Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and
- 9.1 Critical severity
Word: Improper Verification of Cryptographic Signature
A library injection vulnerability exists in Microsoft Word 16.83 for macOS. A specially crafted library can leverage Word's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this
- 7.1 High severity
OneNote: Improper Verification of Cryptographic Signature
A library injection vulnerability exists in Microsoft OneNote 16.83 for macOS. A specially crafted library can leverage OneNote's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger
- 9.8 Critical severity
Teams (work or school): Improper Verification of Cryptographic Signature
A library injection vulnerability exists in the WebView.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious applicati
- 9.8 Critical severity
Teams (work or school): Improper Verification of Cryptographic Signature
A library injection vulnerability exists in the com.microsoft.teams2.modulehost.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypas
- 9.1 Critical severity
PowerPoint: Improper Verification of Cryptographic Signature
A library injection vulnerability exists in Microsoft PowerPoint 16.83 for macOS. A specially crafted library can leverage PowerPoint's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to t
- 7.5 High severity
Windows: NULL Pointer Dereference
An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafte
- 7.8 High severity
Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Exploited
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- 9.6 Critical severity
Microsoft Copilot Studio: Improper Neutralization of Input During Web Page Generation
Improper neutralization of input during web page generation ('Cross-site Scripting') in Copilot Studio by an unauthorized attacker leads to elevation of privilege over a network.
- 9.8 Critical severity
Microsoft Partner Center Improper Access Control Exploited
An improper access control vulnerability in Partner.Microsoft.com allows an a unauthenticated attacker to elevate privileges over a network.
- 8.8 High severity
Microsoft Windows Task Scheduler Privilege Escalation Exploited
Windows Task Scheduler Elevation of Privilege Vulnerability
- 6.5 Medium severity
Microsoft Windows NTLMv2 Hash Disclosure Spoofing Exploited
NTLM Hash Disclosure Spoofing Vulnerability
- 7.5 High severity
Microsoft Copilot Studio: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of Sensitive Information to an Unauthorized Actor in Copilot Studio allows a unauthenticated attacker to view sensitive information through network attack vector
- 8.1 High severity
Microsoft Windows MSHTML Platform Spoofing Exploited
Windows MSHTML Platform Spoofing Vulnerability
- 7.8 High severity
Microsoft Windows Management Console Remote Code Execution Exploited
Microsoft Management Console Remote Code Execution Vulnerability
- 9.8 Critical severity
Visual Studio Code: Missing Authentication for Critical Functionality
Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remote code execution through network attack vector.
- 9.8 Critical severity
Microsoft Configuration Manager SQL Injection Exploited
Microsoft Configuration Manager Remote Code Execution Vulnerability
- 7.5 High severity
terraform-provider-power-platform: Insertion of Sensitive Information into Log File
Power Platform Terraform Provider allows managing environments and other resources within Power Platform. Versions prior to 3.0.0 have an issue in the Power Platform Terraform Provider where sensitive information, specifically the `client_secret` used in the s
- 8.8 High severity
Dynamics 365 Business Central Online: Improper Authorization
Improper authorization in Dynamics 365 Business Central resulted in a vulnerability that allows an authenticated attacker to elevate privileges over a network.
- 9.8 Critical severity
Windows 10 Version 1507: Use After Free
Microsoft is aware of a vulnerability in Servicing Stack that has rolled back the fixes for some vulnerabilities affecting Optional Components on Windows 10, version 1507 (initial version released July 2015). This means that an attacker could exploit these pre
- 8.8 High severity
Microsoft Windows MSHTML Platform Spoofing Exploited
Windows MSHTML Platform Spoofing Vulnerability
- 7.3 High severity
Microsoft Publisher Protection Mechanism Failure Exploited
Microsoft Publisher Security Feature Bypass Vulnerability
- 5.4 Medium severity
Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Exploited
Windows Mark of the Web Security Feature Bypass Vulnerability
- 7.8 High severity
Microsoft Windows Installer Improper Privilege Management Exploited
Windows Installer Elevation of Privilege Vulnerability
- 7.8 High severity
Acrobat Reader: Out-of-bounds Write
Acrobat Reader versions 127.0.2651.105 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must
- 7.5 High severity
Microsoft Entra: Improper Access Control
Improper access control in Decentralized Identity Services resulted in a vulnerability that allows an unauthenticated attacker to disable Verifiable ID's on another tenant.
- 9.6 Critical severity
Google Chromium V8 Type Confusion Exploited
Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- 8.8 High severity
Google Chromium V8 Inappropriate Implementation Exploited
Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- 8.8 High severity
Azure Managed Instance for Apache Cassandra: Improper Access Control
An improper access control vulnerability in the Azure Managed Instance for Apache Cassandra allows an authenticated attacker to elevate privileges over a network.
- 6.5 Medium severity
Microsoft Windows SmartScreen Security Feature Bypass Exploited
Windows Mark of the Web Security Feature Bypass Vulnerability
- 7.8 High severity
Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Exploited
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability