Microsoft vulnerabilities
We track 1,120 vulnerabilities in Microsoft products across 60+ products. 1,077 are rated high or critical, and 406 have been exploited in real attacks. The most recent was published on November 10, 2026.
Latest Microsoft vulnerabilities
- 7.8 High severity
Microsoft Windows CNG Key Isolation Service Privilege Escalation Exploited
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
- 5.4 Medium severity
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Exploited
Windows Mark of the Web Security Feature Bypass Vulnerability
- 9.8 Critical severity
Microsoft Exchange Server Privilege Escalation Exploited
Microsoft Exchange Server Elevation of Privilege Vulnerability
- 7.8 High severity
Microsoft Windows Print Spooler Privilege Escalation Exploited
Windows Print Spooler Elevation of Privilege Vulnerability
- 5.4 Medium severity
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Exploited
Windows Mark of the Web Security Feature Bypass Vulnerability
- 7.8 High severity
filex: Integer Overflow or Wraparound
Azure RTOS FileX is a FAT-compatible file system that’s fully integrated with Azure RTOS ThreadX. In versions before 6.2.0, the Fault Tolerant feature of Azure RTOS FileX includes integer under and overflows which may be exploited to achieve buffer overflow an
- 9.8 Critical severity
usbx: Buffer Copy without Checking Size of Input
Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX. Prior to version 6.1.12, the USB DFU UPLOAD functionality may be utilized to introduce a buffer overflow resulting in overwrite of memo
- 9.8 Critical severity
azure-cli: Improper Neutralization of Special Elements used in an OS Command
Azure CLI is the command-line interface for Microsoft Azure. In versions previous to 2.40.0, Azure CLI contains a vulnerability for potential code injection. Critical scenarios are where a hosting machine runs an Azure CLI command where parameter values have b
- 7.8 High severity
Microsoft Windows COM+ Event System Service Privilege Escalation Exploited
Windows COM+ Event System Service Elevation of Privilege Vulnerability
- 7.8 High severity
Microsoft Windows Print Spooler Privilege Escalation Exploited
Windows Print Spooler Elevation of Privilege Vulnerability
- 8.0 High severity
Microsoft Exchange Server Remote Code Execution Exploited
Microsoft Exchange Server Remote Code Execution Vulnerability
- 8.8 High severity
Microsoft Exchange Server Server-Side Request Forgery Exploited
Microsoft Exchange Server Elevation of Privilege Vulnerability
- 7.8 High severity
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Exploited
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- 7.8 High severity
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Exploited
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
- 7.2 High severity
Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Exploited
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
- 7.5 High severity
Windows 10 Version 20H2: NULL Pointer Dereference
Microsoft Windows SMBv3 suffers from a null pointer dereference in versions of Windows prior to the April, 2022 patch set. By sending a malformed FileNormalizedNameInformation SMBv3 request over a named pipe, an attacker can cause a Blue Screen of Death (BSOD)
- 7.8 High severity
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Exploited
A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. The
- 5.9 Medium severity
Microsoft Windows LSA Spoofing Exploited
Windows LSA Spoofing Vulnerability
- 9.0 High severity
Microsoft Active Directory Domain Services Privilege Escalation Exploited
Active Directory Domain Services Elevation of Privilege Vulnerability
- 4.4 Medium severity
Microsoft Windows User Profile Service Privilege Escalation Exploited
Windows User Profile Service Elevation of Privilege Vulnerability
- 4.6 Medium severity
Microsoft Windows CLFS Driver Privilege Escalation Exploited
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- 7.0 High severity
McAfee Total Protection for Windows: Time-of-check Time-of-use (TOCTOU) Race Condition
A race condition vulnerability exists in the QuickClean feature of McAfee Total Protection for Windows prior to 16.0.43 that allows a local user to gain privilege elevation and perform an arbitrary file delete. This could lead to sensitive files being deleted
- 7.2 High severity
Microsoft Windows Print Spooler Privilege Escalation Exploited
Windows Print Spooler Elevation of Privilege Vulnerability
- 4.6 Medium severity
Microsoft Windows Print Spooler Privilege Escalation Exploited
Windows Print Spooler Elevation of Privilege Vulnerability
- 9.3 High severity
Microsoft Windows Runtime Remote Code Execution Exploited
Windows Runtime Remote Code Execution Vulnerability
- 6.9 Medium severity
Microsoft Windows User Profile Service Privilege Escalation Exploited
Windows User Profile Service Elevation of Privilege Vulnerability
- 7.8 High severity
Microsoft Win32k Privilege Escalation Exploited
Win32k Elevation of Privilege Vulnerability
- 7.1 High severity
Microsoft Windows AppX Installer Spoofing Exploited
We have investigated reports of a spoofing vulnerability in AppX installer that affects Microsoft Windows. Microsoft is aware of attacks that attempt to exploit this vulnerability by using specially crafted packages that include the malware family known as Emo
- 7.8 High severity
Microsoft Windows Privilege Escalation Exploited
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- 8.8 High severity
Microsoft Exchange Server Remote Code Execution Exploited
Microsoft Exchange Server Remote Code Execution Vulnerability
- 7.8 High severity
Microsoft Excel Security Feature Bypass Exploited
Microsoft Excel Security Feature Bypass Vulnerability
- 8.8 High severity
Microsoft Active Directory Domain Services Privilege Escalation Exploited
Active Directory Domain Services Elevation of Privilege Vulnerability
- 7.5 High severity
Microsoft Active Directory Domain Services Privilege Escalation Exploited
Active Directory Domain Services Elevation of Privilege Vulnerability
- 7.8 High severity
Microsoft Windows Installer Privilege Escalation Exploited
Windows Installer Elevation of Privilege Vulnerability
- 7.8 High severity
Microsoft Win32k Privilege Escalation Exploited
Win32k Elevation of Privilege Vulnerability
- 7.8 High severity
Microsoft Win32k Privilege Escalation Exploited
Win32k Elevation of Privilege Vulnerability
- 7.8 High severity
Microsoft Windows Win32k Privilege Escalation Exploited
Win32k Elevation of Privilege Vulnerability
- 7.8 High severity
Microsoft MSHTML Remote Code Execution Exploited
Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks that attempt to exploit this vulnerability by using specially-crafted Microsoft Office documents. An at
- 7.8 High severity
Microsoft Open Management Infrastructure (OMI) Privilege Escalation Exploited
Open Management Infrastructure Elevation of Privilege Vulnerability
- 7.8 High severity
Microsoft Open Management Infrastructure (OMI) Privilege Escalation Exploited
Open Management Infrastructure Elevation of Privilege Vulnerability