← Back

Microsoft

microsoft

17,821 CVEs • 1,094 products

Products (1,094)

Click to collapse
Toggle
Windows Server 2019
windows_server_2019
6,443 CVEs
Windows Server 2016
windows_server_2016
6,390 CVEs
Windows Server 2012
windows_server_2012
5,287 CVEs
Windows Server 2022
windows_server_2022
4,933 CVEs
Windows 10 1809
windows_10_1809
4,004 CVEs
Windows 10 21h2
windows_10_21h2
3,957 CVEs
Windows 10 22h2
windows_10_22h2
3,956 CVEs
Windows Server 2025
windows_server_2025
3,617 CVEs
Windows Server 2008
windows_server_2008
3,554 CVEs
Windows 11 24h2
windows_11_24h2
3,545 CVEs
Windows 10 1607
windows_10_1607
3,417 CVEs
Windows 11 23h2
windows_11_23h2
3,405 CVEs
Windows 10
windows_10
2,974 CVEs
Windows 11 25h2
windows_11_25h2
2,813 CVEs
Windows 11 26h1
windows_11_26h1
2,521 CVEs
Windows 7
windows_7
2,368 CVEs
Windows 8.1
windows_8.1
2,216 CVEs
Windows Rt 8.1
windows_rt_8.1
2,020 CVEs
Windows Server 2022 23h2
windows_server_2022_23h2
1,676 CVEs
Windows 11 22h2
windows_11_22h2
1,652 CVEs
Internet Explorer
internet_explorer
1,635 CVEs
Windows 10 1507
windows_10_1507
1,230 CVEs
Office
office
1,033 CVEs
Windows 11 21h2
windows_11_21h2
1,001 CVEs
Windows 11 26h2
windows_11_26h2
999 CVEs
365 Apps
365_apps
932 CVEs
Windows Vista
windows_vista
828 CVEs
Edge
edge
762 CVEs
Windows Xp
windows_xp
739 CVEs
Sharepoint Server
sharepoint_server
632 CVEs
Windows 11
windows_11
573 CVEs
Windows 2000
windows_2000
515 CVEs
Excel
excel
502 CVEs
Office 2021
office_2021
462 CVEs
Office 2024
office_2024
462 CVEs
Windows Server 2003
windows_server_2003
456 CVEs
Windows 2003 Server
windows_2003_server
405 CVEs
Microsoft 365
microsoft_365
368 CVEs
Office Long Term Servicing Channel
office_long_term_servicing_channel
367 CVEs
Edge Chromium
edge_chromium
326 CVEs
Word
word
319 CVEs
Office 2019
office_2019
290 CVEs
Windows 10 20h2
windows_10_20h2
283 CVEs
Office Online Server
office_online_server
281 CVEs
Windows Server
windows_server
273 CVEs
Windows Nt
windows_nt
267 CVEs
Exchange Server
exchange_server
256 CVEs
Sharepoint Enterprise Server
sharepoint_enterprise_server
256 CVEs
Chakracore
chakracore
255 CVEs
Windows 8
windows_8
254 CVEs
Sharepoint Foundation
sharepoint_foundation
226 CVEs
Windows Rt
windows_rt
216 CVEs
Sql Server 2019
sql_server_2019
207 CVEs
Office Compatibility Pack
office_compatibility_pack
206 CVEs
.net Framework
.net_framework
201 CVEs
Ie
ie
200 CVEs
Sql Server 2022
sql_server_2022
181 CVEs
Visual Studio 2022
visual_studio_2022
156 CVEs
Sql Server 2017
sql_server_2017
155 CVEs
.net
130 CVEs
Excel Viewer
excel_viewer
125 CVEs
Outlook
outlook
123 CVEs
Visual Studio 2019
visual_studio_2019
119 CVEs
Sql Server
sql_server
108 CVEs
Office 2016
office_2016
108 CVEs
Internet Information Server
internet_information_server
107 CVEs
Office Web Apps
office_web_apps
106 CVEs
Dynamics 365
dynamics_365
103 CVEs
Sql Server 2016
sql_server_2016
100 CVEs
Visual Studio 2017
visual_studio_2017
94 CVEs
Internet Information Services
internet_information_services
91 CVEs
Visual Studio Code
visual_studio_code
89 CVEs
Windows 98
windows_98
87 CVEs
Word Viewer
word_viewer
87 CVEs
Powerpoint
powerpoint
86 CVEs
Sql Server 2025
sql_server_2025
86 CVEs
Office 365 Proplus
office_365_proplus
84 CVEs
Windows 10 21h1
windows_10_21h1
83 CVEs
Open Xml File Format Converter
open_xml_file_format_converter
81 CVEs
Windows
windows
76 CVEs
Windows 98se
windows_98se
62 CVEs
Office Web Apps Server
office_web_apps_server
62 CVEs
Works
works
59 CVEs
Windows Me
windows_me
58 CVEs
Visual Studio
visual_studio
56 CVEs
365 Copilot
365_copilot
55 CVEs
Visio
visio
54 CVEs
Windows Media Player
windows_media_player
53 CVEs
Windows Server 20h2
windows_server_20h2
53 CVEs
Windows 10 1909
windows_10_1909
47 CVEs
Windows 95
windows_95
46 CVEs
Outlook Express
outlook_express
45 CVEs
Windows 10 1803
windows_10_1803
45 CVEs
Publisher
publisher
44 CVEs
Azure Site Recovery Vmware To Azure
azure_site_recovery_vmware_to_azure
44 CVEs
Lync
lync
43 CVEs
Office Word Viewer
office_word_viewer
42 CVEs
Asp.net Core
asp.net_core
41 CVEs
Windows 10 1709
windows_10_1709
41 CVEs
Visual Studio 2026
visual_studio_2026
41 CVEs

CVEs (17,821)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-71343
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Sep 24, 2026
Sep 8, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to execute code locally.
CVE-2026-71342
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Sep 24, 2026
Sep 8, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-71341
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Sep 24, 2026
Sep 8, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to disclose information locally.
CVE-2026-71340
1Microsoft
10Windows 10 1607
Windows 10 1809Windows 10 21h2+7 more
Sep 15, 2026
Sep 8, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally.
CVE-2026-71339
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Sep 24, 2026
Sep 8, 2026
N/A· v4
6.7 MEDIUM· v3
N/A· v2
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-71338
1Microsoft
7Windows 10 1607
Windows 10 1809Windows Server 2012+4 more
Sep 24, 2026
Sep 8, 2026
N/A· v4
6.4 MEDIUM· v3
N/A· v2
Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally.
CVE-2026-71337
1Microsoft
8Windows 10 21h2
Windows 10 22h2Windows 11 23h2+5 more
Sep 15, 2026
Sep 8, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally.
CVE-2026-71336
1Microsoft
7Windows 10 1607
Windows 10 1809Windows Server 2012+4 more
Sep 24, 2026
Sep 8, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execute code over a network.
CVE-2026-71334
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Sep 24, 2026
Sep 8, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Windows NFS Portmapper allows an authorized attacker to elevate privileges locally.
CVE-2026-71333
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Sep 24, 2026
Sep 8, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-71332
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Sep 16, 2026
Sep 8, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.
CVE-2026-71330
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Sep 24, 2026
Sep 8, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Exposure of sensitive system information to an unauthorized control sphere in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to disclose information over a network.
CVE-2026-71329
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Sep 24, 2026
Sep 8, 2026
N/A· v4
6.8 MEDIUM· v3
N/A· v2
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.
CVE-2026-71328
1Microsoft
3.net
Visual Studio 2022Visual Studio 2026
Oct 30, 2026
Sep 8, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
CVE-2026-70587
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Sep 24, 2026
Sep 8, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Improper null termination in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network.
CVE-2026-70586
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Sep 24, 2026
Sep 8, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to execute code over a network.
CVE-2026-70585
1Microsoft
5Windows Server 2012
Windows Server 2016Windows Server 2019+2 more
Sep 24, 2026
Sep 8, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to execute code locally.
CVE-2026-70584
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Sep 23, 2026
Sep 8, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Access of resource using incompatible type ('type confusion') in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
CVE-2026-70583
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Sep 28, 2026
Sep 8, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
CVE-2026-70582
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Sep 28, 2026
Sep 8, 2026
N/A· v4
6.4 MEDIUM· v3
N/A· v2
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.