Microsoft vulnerabilities
We track 1,120 vulnerabilities in Microsoft products across 60+ products. 1,077 are rated high or critical, and 406 have been exploited in real attacks. The most recent was published on November 10, 2026.
Latest Microsoft vulnerabilities
- 8.8 High severity
Microsoft Project Remote Code Execution Exploited
Microsoft Project Remote Code Execution Vulnerability
- 7.5 High severity
Microsoft Windows Scripting Engine Memory Corruption Exploited
Scripting Engine Memory Corruption Vulnerability
- 8.8 High severity
Azure Health Bot: Server-Side Request Forgery
An authenticated attacker can exploit an Server-Side Request Forgery (SSRF) vulnerability in Microsoft Azure Health Bot to elevate privileges over a network.
- 7.8 High severity
Microsoft Windows Power Dependency Coordinator Privilege Escalation Exploited
Windows Power Dependency Coordinator Elevation of Privilege Vulnerability
- 7.0 High severity
Microsoft Windows Kernel Privilege Escalation Exploited
Windows Kernel Elevation of Privilege Vulnerability
- 7.3 High severity
Windows 10 Version 1809: Improper Access Control
Summary Microsoft was notified that an elevation of privilege vulnerability exists in Windows Update, potentially enabling an attacker with basic user privileges to reintroduce previously mitigated vulnerabilities or circumvent some features of Virtualization
- 8.8 High severity
GroupMe: Improper Access Control
An improper access control vulnerability in GroupMe allows an a unauthenticated attacker to elevate privileges over a network by convincing a user to click on a malicious link.
- 7.5 High severity
Microsoft Windows MSHTML Platform Spoofing Exploited
Windows MSHTML Platform Spoofing Vulnerability
- 7.2 High severity
Microsoft SharePoint Deserialization Exploited
Microsoft SharePoint Remote Code Execution Vulnerability
- 7.8 High severity
Microsoft Windows Hyper-V Privilege Escalation Exploited
Windows Hyper-V Elevation of Privilege Vulnerability
- 7.8 High severity
Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Exploited
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
- 7.0 High severity
Microsoft Windows Kernel TOCTOU Race Condition Exploited
Windows Kernel Elevation of Privilege Vulnerability
- 7.8 High severity
Microsoft DWM Core Library Privilege Escalation Exploited
Windows DWM Core Library Elevation of Privilege Vulnerability
- 8.8 High severity
Microsoft Windows MSHTML Platform Security Feature Bypass Exploited
Windows MSHTML Platform Security Feature Bypass Vulnerability
- 8.8 High severity
Microsoft SmartScreen Prompt Security Feature Bypass Exploited
SmartScreen Prompt Security Feature Bypass Vulnerability
- 8.1 High severity
azure-c-shared-utility: Buffer Copy without Checking Size of Input
The azure-c-shared-utility is a C library for AMQP/MQTT communication to Azure Cloud Services. This library may be used by the Azure IoT C SDK for communication between IoT Hub and IoT Hub devices. An attacker can cause an integer wraparound or under-allocatio
- 7.5 High severity
Microsoft .NET Framework Information Disclosure Exploited
.NET Framework Information Disclosure Vulnerability
- 7.8 High severity
Microsoft Windows Error Reporting Service Improper Privilege Management Exploited
Windows Error Reporting Service Elevation of Privilege Vulnerability
- 9.8 Critical severity
azure-uamqp-c: Double Free
The uAMQP is a C library for AMQP 1.0 communication to Azure Cloud Services. When processing an incorrect `AMQP_VALUE` failed state, may cause a double free problem. This may cause a RCE. Update submodule with commit 2ca42b6e4e098af2d17e487814a91d05f6ae4987.
- 7.5 High severity
Enterprise Linux: Allocation of Resources Without Limits or Throttling
Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when ther
- 9.8 Critical severity
Microsoft Outlook Improper Input Validation Exploited
Microsoft Outlook Remote Code Execution Vulnerability
- 8.1 High severity
Microsoft Windows Internet Shortcut Files Security Feature Bypass Exploited
Internet Shortcut Files Security Feature Bypass Vulnerability
- 9.8 Critical severity
Microsoft Exchange Server Privilege Escalation Exploited
Microsoft Exchange Server Elevation of Privilege Vulnerability
- 7.6 High severity
Microsoft Windows SmartScreen Security Feature Bypass Exploited
Windows SmartScreen Security Feature Bypass Vulnerability
- 7.8 High severity
Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Exploited
Windows Kernel Elevation of Privilege Vulnerability
- 8.1 High severity
azure-uamqp-c: Use After Free
The UAMQP is a general purpose C library for AMQP 1.0. During a call to open_get_offered_capabilities, a memory allocation may fail causing a use-after-free issue and if a client called it during connection communication it may cause a remote code execution. U
- 9.8 Critical severity
ipam: Improper Authentication
Azure IPAM (IP Address Management) is a lightweight solution developed on top of the Azure platform designed to help Azure customers manage their IP Address space easily and effectively. By design there is no write access to customers' Azure environments as th
- 8.8 High severity
azure-activedirectory-identitymodel-extensions-…: Improper Control of Generation of Code
IdentityModel Extensions for .NET provide assemblies for web developers that wish to use federated identity providers for establishing the caller's identity. Anyone leveraging the `SignedHttpRequest`protocol or the `SignedHttpRequestValidator`is vulnerable. Mi
- 7.8 High severity
3D Viewer: Heap-based Buffer Overflow
A security vulnerability exists in FBX that could lead to remote code execution. To mitigate this vulnerability, the ability to insert FBX files has been disabled in Word, Excel, PowerPoint and Outlook for Windows and Mac. Versions of Office that had this feat
- 9.8 Critical severity
azure-uamqp-c: Integer Overflow or Wraparound
Azure uAMQP is a general purpose C library for AMQP 1.0. The UAMQP library is used by several clients to implement AMQP protocol communication. When clients using this library receive a crafted binary type data, an integer overflow or wraparound or memory safe
- 8.8 High severity
Chrome: Access of Resource Using Incompatible Type
Type confusion in V8 in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- 9.8 Critical severity
Azure RTOS ThreadX is an advanced real-time operating system (RTOS) designed specifically for…
Azure RTOS ThreadX is an advanced real-time operating system (RTOS) designed specifically for deeply embedded applications. An attacker can cause arbitrary read and write due to vulnerability in parameter checking mechanism in Azure RTOS ThreadX, which may lea
- 9.8 Critical severity
netxduo: Out-of-bounds Write
Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause remote code execution due to memory overflow vulnerabilities in Azure RTOS NETX Duo. The affected components include p
- 9.8 Critical severity
netxduo: Out-of-bounds Write
Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause an out-of-bounds write in Azure RTOS NETX Duo, that could lead to remote code execution. The affected components inclu
- 9.8 Critical severity
netxduo: Out-of-bounds Write
Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause remote code execution due to memory overflow vulnerabilities in Azure RTOS NETX Duo. The affected components include p
- 9.8 Critical severity
netxduo: Out-of-bounds Write
Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause remote code execution due to memory overflow vulnerabilities in Azure RTOS NETX Duo. The affected components include p
- 9.6 Critical severity
Google Skia Integer Overflow Exploited
Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)
- 7.8 High severity
Microsoft Windows Out-of-Bounds Read Exploited
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- 7.8 High severity
Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Exploited
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- 7.8 High severity
Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Exploited
Windows DWM Core Library Elevation of Privilege Vulnerability