← Back

Microsoft

microsoft

17,821 CVEs • 1,094 products

Products (1,094)

Click to collapse
Toggle
Windows Server 2019
windows_server_2019
6,443 CVEs
Windows Server 2016
windows_server_2016
6,390 CVEs
Windows Server 2012
windows_server_2012
5,287 CVEs
Windows Server 2022
windows_server_2022
4,933 CVEs
Windows 10 1809
windows_10_1809
4,004 CVEs
Windows 10 21h2
windows_10_21h2
3,957 CVEs
Windows 10 22h2
windows_10_22h2
3,956 CVEs
Windows Server 2025
windows_server_2025
3,617 CVEs
Windows Server 2008
windows_server_2008
3,554 CVEs
Windows 11 24h2
windows_11_24h2
3,545 CVEs
Windows 10 1607
windows_10_1607
3,417 CVEs
Windows 11 23h2
windows_11_23h2
3,405 CVEs
Windows 10
windows_10
2,974 CVEs
Windows 11 25h2
windows_11_25h2
2,813 CVEs
Windows 11 26h1
windows_11_26h1
2,521 CVEs
Windows 7
windows_7
2,368 CVEs
Windows 8.1
windows_8.1
2,216 CVEs
Windows Rt 8.1
windows_rt_8.1
2,020 CVEs
Windows Server 2022 23h2
windows_server_2022_23h2
1,676 CVEs
Windows 11 22h2
windows_11_22h2
1,652 CVEs
Internet Explorer
internet_explorer
1,635 CVEs
Windows 10 1507
windows_10_1507
1,230 CVEs
Office
office
1,033 CVEs
Windows 11 21h2
windows_11_21h2
1,001 CVEs
Windows 11 26h2
windows_11_26h2
999 CVEs
365 Apps
365_apps
932 CVEs
Windows Vista
windows_vista
828 CVEs
Edge
edge
762 CVEs
Windows Xp
windows_xp
739 CVEs
Sharepoint Server
sharepoint_server
632 CVEs
Windows 11
windows_11
573 CVEs
Windows 2000
windows_2000
515 CVEs
Excel
excel
502 CVEs
Office 2021
office_2021
462 CVEs
Office 2024
office_2024
462 CVEs
Windows Server 2003
windows_server_2003
456 CVEs
Windows 2003 Server
windows_2003_server
405 CVEs
Microsoft 365
microsoft_365
368 CVEs
Office Long Term Servicing Channel
office_long_term_servicing_channel
367 CVEs
Edge Chromium
edge_chromium
326 CVEs
Word
word
319 CVEs
Office 2019
office_2019
290 CVEs
Windows 10 20h2
windows_10_20h2
283 CVEs
Office Online Server
office_online_server
281 CVEs
Windows Server
windows_server
273 CVEs
Windows Nt
windows_nt
267 CVEs
Exchange Server
exchange_server
256 CVEs
Sharepoint Enterprise Server
sharepoint_enterprise_server
256 CVEs
Chakracore
chakracore
255 CVEs
Windows 8
windows_8
254 CVEs
Sharepoint Foundation
sharepoint_foundation
226 CVEs
Windows Rt
windows_rt
216 CVEs
Sql Server 2019
sql_server_2019
207 CVEs
Office Compatibility Pack
office_compatibility_pack
206 CVEs
.net Framework
.net_framework
201 CVEs
Ie
ie
200 CVEs
Sql Server 2022
sql_server_2022
181 CVEs
Visual Studio 2022
visual_studio_2022
156 CVEs
Sql Server 2017
sql_server_2017
155 CVEs
.net
130 CVEs
Excel Viewer
excel_viewer
125 CVEs
Outlook
outlook
123 CVEs
Visual Studio 2019
visual_studio_2019
119 CVEs
Sql Server
sql_server
108 CVEs
Office 2016
office_2016
108 CVEs
Internet Information Server
internet_information_server
107 CVEs
Office Web Apps
office_web_apps
106 CVEs
Dynamics 365
dynamics_365
103 CVEs
Sql Server 2016
sql_server_2016
100 CVEs
Visual Studio 2017
visual_studio_2017
94 CVEs
Internet Information Services
internet_information_services
91 CVEs
Visual Studio Code
visual_studio_code
89 CVEs
Windows 98
windows_98
87 CVEs
Word Viewer
word_viewer
87 CVEs
Powerpoint
powerpoint
86 CVEs
Sql Server 2025
sql_server_2025
86 CVEs
Office 365 Proplus
office_365_proplus
84 CVEs
Windows 10 21h1
windows_10_21h1
83 CVEs
Open Xml File Format Converter
open_xml_file_format_converter
81 CVEs
Windows
windows
76 CVEs
Windows 98se
windows_98se
62 CVEs
Office Web Apps Server
office_web_apps_server
62 CVEs
Works
works
59 CVEs
Windows Me
windows_me
58 CVEs
Visual Studio
visual_studio
56 CVEs
365 Copilot
365_copilot
55 CVEs
Visio
visio
54 CVEs
Windows Media Player
windows_media_player
53 CVEs
Windows Server 20h2
windows_server_20h2
53 CVEs
Windows 10 1909
windows_10_1909
47 CVEs
Windows 95
windows_95
46 CVEs
Outlook Express
outlook_express
45 CVEs
Windows 10 1803
windows_10_1803
45 CVEs
Publisher
publisher
44 CVEs
Azure Site Recovery Vmware To Azure
azure_site_recovery_vmware_to_azure
44 CVEs
Lync
lync
43 CVEs
Office Word Viewer
office_word_viewer
42 CVEs
Asp.net Core
asp.net_core
41 CVEs
Windows 10 1709
windows_10_1709
41 CVEs
Visual Studio 2026
visual_studio_2026
41 CVEs

CVEs (17,821)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-73028
1Microsoft
4Sql Server 2017
Sql Server 2019Sql Server 2022+1 more
Sep 15, 2026
Sep 8, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-73026
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Sep 10, 2026
Sep 8, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-73025
1Microsoft
7Windows 10 1607
Windows 10 1809Windows Server 2012+4 more
Sep 24, 2026
Sep 8, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-73024
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Sep 24, 2026
Sep 8, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-73023
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Sep 24, 2026
Sep 8, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVE-2026-73022
1Microsoft
10Windows 10 1809
Windows 10 21h2Windows 10 22h2+7 more
Sep 16, 2026
Sep 8, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
CVE-2026-73021
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Sep 10, 2026
Sep 8, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-73020
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Sep 11, 2026
Sep 8, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-73019
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Sep 24, 2026
Sep 8, 2026
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Improper resolution of path equivalence in Windows URL Moniker allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-73018
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Sep 24, 2026
Sep 8, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
CVE-2026-73017
1Microsoft
10Windows 10 1809
Windows 10 21h2Windows 10 22h2+7 more
Sep 11, 2026
Sep 8, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to execute code locally.
CVE-2026-73016
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Sep 24, 2026
Sep 8, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
CVE-2026-73015
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Sep 11, 2026
Sep 8, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-73014
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Sep 23, 2026
Sep 8, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Missing authorization in Data Sharing Service Client allows an authorized attacker to elevate privileges locally.
CVE-2026-73013
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Oct 30, 2026
Sep 8, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVE-2026-73012
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Sep 24, 2026
Sep 8, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network.
CVE-2026-73011
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Sep 10, 2026
Sep 8, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-73010
1Microsoft
4Windows 10 1809
Windows Server 2019Windows Server 2022+1 more
Sep 17, 2026
Sep 8, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
CVE-2026-73009
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Sep 24, 2026
Sep 8, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
CVE-2026-73008
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Sep 10, 2026
Sep 8, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Exposure of private personal information to an unauthorized actor in Windows Biometric Service allows an authorized attacker to disclose information locally.