CVE Tracker · Vendor
Microsoft CVEs
397 CVEs in the tracker, 390 in the CISA KEV catalogue.
All vendors · RSS feed for Microsoft · Tracker data last updated 18 Oct 2026.
Showing 50 of 397
Windows. Microsoft Windows Command Injection Vulnerability
windows 10 21h2. Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
windows 10 1607. Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.
windows 10 1607. Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Perfor…
windows 10 1607. Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges loca…
azure sre agent. Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.
edge chromium. Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges local…
Windows. Microsoft Windows Heap-Based Buffer Overflow Vulnerability
Windows. Microsoft Windows Link Following Vulnerability
Windows Ancillary Function Driver for WinSock . Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
SharePoint. Microsoft SharePoint Code Injection Vulnerability
SharePoint. Microsoft SharePoint Weak Authentication Vulnerability
SharePoint. Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Internet Key Exchange (IKE) Service Extensions. Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability
Windows. Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability
sharepoint server. Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing ov…
SharePoint. Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
SharePoint. Microsoft SharePoint Improper Authentication Vulnerability
SharePoint. Microsoft SharePoint Code Injection Vulnerability
.NET Framework. Microsoft .NET Framework Information Disclosure Vulnerability
Windows. Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability
Windows. Microsoft Windows Search Remote Code Execution Vulnerability
SharePoint Server. Microsoft SharePoint Server Privilege Escalation Vulnerability
Exchange Server. Microsoft Exchange Server Remote Code Execution Vulnerability
Exchange Server. Microsoft Exchange Server Server-Side Request Forgery Vulnerability
Windows. Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
Open Management Infrastructure (OMI). Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
Exchange Server. Microsoft Exchange Server Privilege Escalation Vulnerability
Exchange Server. Microsoft Exchange Server Remote Code Execution Vulnerability
Exchange Server. Microsoft Exchange Server Information Disclosure
Windows. Microsoft Windows Print Spooler Remote Code Execution Vulnerability
Exchange Server. Microsoft Exchange Server Security Feature Bypass Vulnerability
HTTP Protocol Stack. Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability
Exchange Server. Microsoft Exchange Server Remote Code Execution Vulnerability
Exchange Server. Microsoft Exchange Server Remote Code Execution Vulnerability
Netlogon. Microsoft Netlogon Privilege Escalation Vulnerability
SMBv3. Microsoft SMBv3 Remote Code Execution Vulnerability
Exchange Server. Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability
SQL Server. Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability
.NET Framework. Microsoft .NET Framework Remote Code Execution Vulnerability
SQL Server. Microsoft SQL Server Remote Code Execution Vulnerability
Remote Desktop Services. Microsoft Remote Desktop Services Remote Code Execution Vulnerability
SharePoint. Microsoft SharePoint Remote Code Execution Vulnerability
Office. Microsoft Office Memory Corruption Vulnerability
Office and WordPad. Microsoft Office and WordPad Remote Code Execution Vulnerability
Internet Information Services (IIS). Microsoft Windows Server Buffer Overflow Vulnerability
SMBv1 server. Microsoft SMBv1 Server Remote Code Execution Vulnerability
SMBv1 server. Microsoft Windows SMBv1 Information Disclosure Vulnerability
SMBv1. Microsoft SMBv1 Remote Code Execution Vulnerability
HTTP.sys. Microsoft HTTP.sys Remote Code Execution Vulnerability