← Back

Microsoft

microsoft

17,821 CVEs • 1,094 products

Products (1,094)

Click to collapse
Toggle
Windows Server 2019
windows_server_2019
6,443 CVEs
Windows Server 2016
windows_server_2016
6,390 CVEs
Windows Server 2012
windows_server_2012
5,287 CVEs
Windows Server 2022
windows_server_2022
4,933 CVEs
Windows 10 1809
windows_10_1809
4,004 CVEs
Windows 10 21h2
windows_10_21h2
3,957 CVEs
Windows 10 22h2
windows_10_22h2
3,956 CVEs
Windows Server 2025
windows_server_2025
3,617 CVEs
Windows Server 2008
windows_server_2008
3,554 CVEs
Windows 11 24h2
windows_11_24h2
3,545 CVEs
Windows 10 1607
windows_10_1607
3,417 CVEs
Windows 11 23h2
windows_11_23h2
3,405 CVEs
Windows 10
windows_10
2,974 CVEs
Windows 11 25h2
windows_11_25h2
2,813 CVEs
Windows 11 26h1
windows_11_26h1
2,521 CVEs
Windows 7
windows_7
2,368 CVEs
Windows 8.1
windows_8.1
2,216 CVEs
Windows Rt 8.1
windows_rt_8.1
2,020 CVEs
Windows Server 2022 23h2
windows_server_2022_23h2
1,676 CVEs
Windows 11 22h2
windows_11_22h2
1,652 CVEs
Internet Explorer
internet_explorer
1,635 CVEs
Windows 10 1507
windows_10_1507
1,230 CVEs
Office
office
1,033 CVEs
Windows 11 21h2
windows_11_21h2
1,001 CVEs
Windows 11 26h2
windows_11_26h2
999 CVEs
365 Apps
365_apps
932 CVEs
Windows Vista
windows_vista
828 CVEs
Edge
edge
762 CVEs
Windows Xp
windows_xp
739 CVEs
Sharepoint Server
sharepoint_server
632 CVEs
Windows 11
windows_11
573 CVEs
Windows 2000
windows_2000
515 CVEs
Excel
excel
502 CVEs
Office 2021
office_2021
462 CVEs
Office 2024
office_2024
462 CVEs
Windows Server 2003
windows_server_2003
456 CVEs
Windows 2003 Server
windows_2003_server
405 CVEs
Microsoft 365
microsoft_365
368 CVEs
Office Long Term Servicing Channel
office_long_term_servicing_channel
367 CVEs
Edge Chromium
edge_chromium
326 CVEs
Word
word
319 CVEs
Office 2019
office_2019
290 CVEs
Windows 10 20h2
windows_10_20h2
283 CVEs
Office Online Server
office_online_server
281 CVEs
Windows Server
windows_server
273 CVEs
Windows Nt
windows_nt
267 CVEs
Exchange Server
exchange_server
256 CVEs
Sharepoint Enterprise Server
sharepoint_enterprise_server
256 CVEs
Chakracore
chakracore
255 CVEs
Windows 8
windows_8
254 CVEs
Sharepoint Foundation
sharepoint_foundation
226 CVEs
Windows Rt
windows_rt
216 CVEs
Sql Server 2019
sql_server_2019
207 CVEs
Office Compatibility Pack
office_compatibility_pack
206 CVEs
.net Framework
.net_framework
201 CVEs
Ie
ie
200 CVEs
Sql Server 2022
sql_server_2022
181 CVEs
Visual Studio 2022
visual_studio_2022
156 CVEs
Sql Server 2017
sql_server_2017
155 CVEs
.net
130 CVEs
Excel Viewer
excel_viewer
125 CVEs
Outlook
outlook
123 CVEs
Visual Studio 2019
visual_studio_2019
119 CVEs
Sql Server
sql_server
108 CVEs
Office 2016
office_2016
108 CVEs
Internet Information Server
internet_information_server
107 CVEs
Office Web Apps
office_web_apps
106 CVEs
Dynamics 365
dynamics_365
103 CVEs
Sql Server 2016
sql_server_2016
100 CVEs
Visual Studio 2017
visual_studio_2017
94 CVEs
Internet Information Services
internet_information_services
91 CVEs
Visual Studio Code
visual_studio_code
89 CVEs
Windows 98
windows_98
87 CVEs
Word Viewer
word_viewer
87 CVEs
Powerpoint
powerpoint
86 CVEs
Sql Server 2025
sql_server_2025
86 CVEs
Office 365 Proplus
office_365_proplus
84 CVEs
Windows 10 21h1
windows_10_21h1
83 CVEs
Open Xml File Format Converter
open_xml_file_format_converter
81 CVEs
Windows
windows
76 CVEs
Windows 98se
windows_98se
62 CVEs
Office Web Apps Server
office_web_apps_server
62 CVEs
Works
works
59 CVEs
Windows Me
windows_me
58 CVEs
Visual Studio
visual_studio
56 CVEs
365 Copilot
365_copilot
55 CVEs
Visio
visio
54 CVEs
Windows Media Player
windows_media_player
53 CVEs
Windows Server 20h2
windows_server_20h2
53 CVEs
Windows 10 1909
windows_10_1909
47 CVEs
Windows 95
windows_95
46 CVEs
Outlook Express
outlook_express
45 CVEs
Windows 10 1803
windows_10_1803
45 CVEs
Publisher
publisher
44 CVEs
Azure Site Recovery Vmware To Azure
azure_site_recovery_vmware_to_azure
44 CVEs
Lync
lync
43 CVEs
Office Word Viewer
office_word_viewer
42 CVEs
Asp.net Core
asp.net_core
41 CVEs
Windows 10 1709
windows_10_1709
41 CVEs
Visual Studio 2026
visual_studio_2026
41 CVEs

CVEs (17,821)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-32162
1Microsoft
11Windows 10 1809
Windows 10 21h2Windows 10 22h2+8 more
Oct 26, 2026
Apr 14, 2026
N/A· v4
8.4 HIGH· v3
N/A· v2
Acceptance of extraneous untrusted data with trusted data in Windows COM allows an unauthorized attacker to elevate privileges locally.
CVE-2026-32160
1Microsoft
11Windows 10 1809
Windows 10 21h2Windows 10 22h2+8 more
Oct 26, 2026
Apr 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
CVE-2026-32159
1Microsoft
11Windows 10 1809
Windows 10 21h2Windows 10 22h2+8 more
Oct 26, 2026
Apr 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
CVE-2026-32158
1Microsoft
11Windows 10 1809
Windows 10 21h2Windows 10 22h2+8 more
Oct 26, 2026
Apr 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
CVE-2026-32157
1Microsoft
15Remote Desktop Client
Windows 10 1607Windows 10 1809+12 more
Oct 26, 2026
Apr 14, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-32156
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Oct 26, 2026
Apr 14, 2026
N/A· v4
7.4 HIGH· v3
N/A· v2
Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to execute code locally.
CVE-2026-32155
1Microsoft
8Windows 10 21h2
Windows 10 22h2Windows 11 23h2+5 more
Oct 26, 2026
Apr 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-32154
1Microsoft
7Windows 11 23h2
Windows 11 24h2Windows 11 25h2+4 more
Oct 26, 2026
Apr 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-32153
1Microsoft
7Windows 10 1809
Windows 10 21h2Windows 10 22h2+4 more
Oct 26, 2026
Apr 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.
CVE-2026-32152
1Microsoft
7Windows 11 23h2
Windows 11 24h2Windows 11 25h2+4 more
Oct 26, 2026
Apr 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-32151
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Oct 26, 2026
Apr 14, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information over a network.
CVE-2026-32150
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Oct 26, 2026
Apr 14, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privileges locally.
CVE-2026-32149
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Oct 26, 2026
Apr 14, 2026
N/A· v4
7.3 HIGH· v3
N/A· v2
Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally.
CVE-2026-32093
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Oct 26, 2026
Apr 14, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privileges locally.
CVE-2026-32091
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Oct 26, 2026
Apr 14, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally.
CVE-2026-32090
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Oct 26, 2026
Apr 14, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Speech Brokered Api allows an authorized attacker to elevate privileges locally.
CVE-2026-32089
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Oct 26, 2026
Apr 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Windows Speech Brokered Api allows an authorized attacker to elevate privileges locally.
CVE-2026-32088
1Microsoft
11Windows 10 1809
Windows 10 21h2Windows 10 22h2+8 more
Oct 26, 2026
Apr 14, 2026
N/A· v4
5.7 MEDIUM· v3
N/A· v2
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Biometric Service allows an unauthorized attacker to bypass a security feature with a physical attack.
CVE-2026-32087
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Oct 26, 2026
Apr 14, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Heap-based buffer overflow in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privileges locally.
CVE-2026-32086
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Oct 26, 2026
Apr 14, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privileges locally.