← Back

Microsoft

microsoft

17,826 CVEs • 1,094 products

Products (1,094)

Click to collapse
Toggle
Windows Server 2019
windows_server_2019
6,443 CVEs
Windows Server 2016
windows_server_2016
6,390 CVEs
Windows Server 2012
windows_server_2012
5,287 CVEs
Windows Server 2022
windows_server_2022
4,933 CVEs
Windows 10 1809
windows_10_1809
4,004 CVEs
Windows 10 21h2
windows_10_21h2
3,957 CVEs
Windows 10 22h2
windows_10_22h2
3,956 CVEs
Windows Server 2025
windows_server_2025
3,617 CVEs
Windows Server 2008
windows_server_2008
3,554 CVEs
Windows 11 24h2
windows_11_24h2
3,545 CVEs
Windows 10 1607
windows_10_1607
3,417 CVEs
Windows 11 23h2
windows_11_23h2
3,405 CVEs
Windows 10
windows_10
2,974 CVEs
Windows 11 25h2
windows_11_25h2
2,813 CVEs
Windows 11 26h1
windows_11_26h1
2,521 CVEs
Windows 7
windows_7
2,368 CVEs
Windows 8.1
windows_8.1
2,216 CVEs
Windows Rt 8.1
windows_rt_8.1
2,020 CVEs
Windows Server 2022 23h2
windows_server_2022_23h2
1,676 CVEs
Windows 11 22h2
windows_11_22h2
1,652 CVEs
Internet Explorer
internet_explorer
1,635 CVEs
Windows 10 1507
windows_10_1507
1,230 CVEs
Office
office
1,033 CVEs
Windows 11 21h2
windows_11_21h2
1,001 CVEs
Windows 11 26h2
windows_11_26h2
999 CVEs
365 Apps
365_apps
933 CVEs
Windows Vista
windows_vista
828 CVEs
Edge
edge
762 CVEs
Windows Xp
windows_xp
739 CVEs
Sharepoint Server
sharepoint_server
632 CVEs
Windows 11
windows_11
573 CVEs
Windows 2000
windows_2000
515 CVEs
Excel
excel
502 CVEs
Office 2021
office_2021
463 CVEs
Office 2024
office_2024
463 CVEs
Windows Server 2003
windows_server_2003
456 CVEs
Windows 2003 Server
windows_2003_server
405 CVEs
Microsoft 365
microsoft_365
368 CVEs
Office Long Term Servicing Channel
office_long_term_servicing_channel
367 CVEs
Edge Chromium
edge_chromium
326 CVEs
Word
word
319 CVEs
Office 2019
office_2019
290 CVEs
Windows 10 20h2
windows_10_20h2
283 CVEs
Office Online Server
office_online_server
281 CVEs
Windows Server
windows_server
273 CVEs
Windows Nt
windows_nt
267 CVEs
Exchange Server
exchange_server
256 CVEs
Sharepoint Enterprise Server
sharepoint_enterprise_server
256 CVEs
Chakracore
chakracore
255 CVEs
Windows 8
windows_8
254 CVEs
Sharepoint Foundation
sharepoint_foundation
226 CVEs
Windows Rt
windows_rt
216 CVEs
Sql Server 2019
sql_server_2019
207 CVEs
Office Compatibility Pack
office_compatibility_pack
206 CVEs
.net Framework
.net_framework
201 CVEs
Ie
ie
200 CVEs
Sql Server 2022
sql_server_2022
181 CVEs
Visual Studio 2022
visual_studio_2022
156 CVEs
Sql Server 2017
sql_server_2017
155 CVEs
.net
130 CVEs
Excel Viewer
excel_viewer
125 CVEs
Outlook
outlook
123 CVEs
Visual Studio 2019
visual_studio_2019
119 CVEs
Sql Server
sql_server
108 CVEs
Office 2016
office_2016
108 CVEs
Internet Information Server
internet_information_server
107 CVEs
Office Web Apps
office_web_apps
106 CVEs
Dynamics 365
dynamics_365
103 CVEs
Sql Server 2016
sql_server_2016
100 CVEs
Visual Studio 2017
visual_studio_2017
94 CVEs
Visual Studio Code
visual_studio_code
93 CVEs
Internet Information Services
internet_information_services
91 CVEs
Windows 98
windows_98
87 CVEs
Word Viewer
word_viewer
87 CVEs
Powerpoint
powerpoint
86 CVEs
Sql Server 2025
sql_server_2025
86 CVEs
Office 365 Proplus
office_365_proplus
84 CVEs
Windows 10 21h1
windows_10_21h1
83 CVEs
Open Xml File Format Converter
open_xml_file_format_converter
81 CVEs
Windows
windows
76 CVEs
Windows 98se
windows_98se
62 CVEs
Office Web Apps Server
office_web_apps_server
62 CVEs
Works
works
59 CVEs
Windows Me
windows_me
58 CVEs
Visual Studio
visual_studio
56 CVEs
365 Copilot
365_copilot
55 CVEs
Visio
visio
54 CVEs
Windows Media Player
windows_media_player
53 CVEs
Windows Server 20h2
windows_server_20h2
53 CVEs
Windows 10 1909
windows_10_1909
47 CVEs
Windows 95
windows_95
46 CVEs
Outlook Express
outlook_express
45 CVEs
Windows 10 1803
windows_10_1803
45 CVEs
Publisher
publisher
44 CVEs
Azure Site Recovery Vmware To Azure
azure_site_recovery_vmware_to_azure
44 CVEs
Lync
lync
43 CVEs
Office Word Viewer
office_word_viewer
42 CVEs
Asp.net Core
asp.net_core
41 CVEs
Windows 10 1709
windows_10_1709
41 CVEs
Visual Studio 2026
visual_studio_2026
41 CVEs

CVEs (17,826)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-55240
1Microsoft
3Visual Studio 2017
Visual Studio 2019Visual Studio 2022
Jun 17, 2026
Oct 14, 2025
N/A· v4
7.3 HIGH· v3
N/A· v2
Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally.
CVE-2025-53782
1Microsoft
2Exchange Server
Exchange Server Subscription Edition
Oct 18, 2026
Oct 14, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Incorrect implementation of authentication algorithm in Microsoft Exchange Server allows an unauthorized attacker to elevate privileges locally.
CVE-2025-53768
1Microsoft
9Windows 10 1507
Windows 10 1607Windows 10 1809+6 more
Jun 17, 2026
Oct 14, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Xbox allows an authorized attacker to elevate privileges locally.
CVE-2025-53717
1Microsoft
4Windows 11 22h2
Windows 11 23h2Windows 11 24h2+1 more
Oct 18, 2026
Oct 14, 2025
N/A· v4
7.0 HIGH· v3
N/A· v2
Reliance on untrusted inputs in a security decision in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
CVE-2025-53150
1Microsoft
10Windows 10 1809
Windows 10 21h2Windows 10 22h2+7 more
Jun 17, 2026
Oct 14, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.
CVE-2025-53139
1Microsoft
7Windows 10 21h2
Windows 10 22h2Windows 11 22h2+4 more
Jun 17, 2026
Oct 14, 2025
N/A· v4
7.1 HIGH· v3
N/A· v2
Cleartext transmission of sensitive information in Windows Hello allows an unauthorized attacker to bypass a security feature locally.
CVE-2025-50175
1Microsoft
11Windows 10 1809
Windows 10 21h2Windows 10 22h2+8 more
Jun 17, 2026
Oct 14, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.
CVE-2025-50174
1Microsoft
3Windows 11 24h2
Windows 11 25h2Windows Server 2025
Oct 18, 2026
Oct 14, 2025
N/A· v4
7.0 HIGH· v3
N/A· v2
Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally.
CVE-2025-50152
1Microsoft
14Windows 10 1507
Windows 10 1607Windows 10 1809+11 more
Jun 17, 2026
Oct 14, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2025-49708
1Microsoft
11Windows 10 1809
Windows 10 21h2Windows 10 22h2+8 more
Jun 17, 2026
Oct 14, 2025
N/A· v4
9.9 CRITICAL· v3
N/A· v2
Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network.
CVE-2025-48813
1Microsoft
11Windows 10 1809
Windows 10 21h2Windows 10 22h2+8 more
Jun 17, 2026
Oct 14, 2025
N/A· v4
4.7 MEDIUM· v3
N/A· v2
Use of a key past its expiration date in Virtual Secure Mode allows an authorized attacker to perform spoofing locally.
CVE-2025-48004
1Microsoft
6Windows 11 22h2
Windows 11 23h2Windows 11 24h2+3 more
Jun 17, 2026
Oct 14, 2025
N/A· v4
7.0 HIGH· v3
N/A· v2
Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally.
CVE-2025-47989
1Microsoft
1Azure Connected Machine Agent
Oct 8, 2026
Oct 14, 2025
N/A· v4
7.0 HIGH· v3
N/A· v2
Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.
CVE-2025-47979
1Microsoft
2Windows Server 2022 23h2
Windows Server 2025
Oct 18, 2026
Oct 14, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Insertion of sensitive information into log file in Windows Failover Cluster allows an authorized attacker to disclose information locally.
CVE-2025-25004
1Microsoft
17Powershell
Windows 10 1507Windows 10 1607+14 more
Jun 17, 2026
Oct 14, 2025
N/A· v4
7.3 HIGH· v3
N/A· v2
Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.
CVE-2025-24990
1Microsoft
16Windows 10 1507
Windows 10 1607Windows 10 1809+13 more
Jun 17, 2026
Oct 14, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of ltmdm64.sys driver. The drive...Show more
Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of ltmdm64.sys driver. The driver has been removed in the October cumulative update. Fax modem hardware dependent on this specific driver will no longer work on Windows. Microsoft recommends removing any existing dependencies on this hardware.Show less
CVE-2025-24052
1Microsoft
16Windows 10 1507
Windows 10 1607Windows 10 1809+13 more
Jun 17, 2026
Oct 14, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of ltmdm64.sys driver. The drive...Show more
Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of ltmdm64.sys driver. The driver has been removed in the October cumulative update. Fax modem hardware dependent on this specific driver will no longer work on Windows. Microsoft recommends removing any existing dependencies on this hardware.Show less
CVE-2025-59286
1Microsoft
1365 Copilot Chat
Oct 8, 2026
Oct 9, 2025
N/A· v4
9.3 CRITICAL· v3
N/A· v2
Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to disclose information over a network.
CVE-2025-59272
1Microsoft
1365 Copilot Chat
Oct 8, 2026
Oct 9, 2025
N/A· v4
9.3 CRITICAL· v3
N/A· v2
Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to perform information disclosure locally.
CVE-2025-59271
1Microsoft
2Azure Cache For Redis
Azure Managed Redis
Oct 18, 2026
Oct 9, 2025
N/A· v4
8.7 HIGH· v3
N/A· v2
Redis Enterprise Elevation of Privilege Vulnerability