microsoft
3,712 known vulnerabilities affecting microsoft products.
Products
windows_server_2019 1452
windows_server_2016 1310
windows_server_2022 1272
windows_server_2025 1131
windows_10_1809 1131
windows_11_24h2 1111
windows_11_25h2 1081
windows_10_22h2 1066
windows_10_21h2 1061
windows_11_26h1 1009
windows 990
windows_10_1607 980
windows_server_2012 977
windows_11_23h2 761
windows_10 343
windows_server_2008 326
365_apps 277
office_2021 225
office_2024 225
office_2019 217
windows_8.1 192
microsoft_365 185
windows_rt_8.1 170
windows_7 169
Vulnerabilities by priority
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2026-58613 | Medium | 0.4% | 7.8 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized at… | |
| CVE-2026-63525 | Medium | 0.4% | 7.8 | Numeric truncation error in Microsoft Office Word allows an unauthorized attacke… | |
| CVE-2026-79247 | Medium | 0.4% | 8.3 | Use after free in Chromoting in Google Chrome on on Windows prior to 152.0.7977.… | |
| CVE-2026-19300 | Medium | 0.4% | 7.5 | IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote attacker to obtain se… | |
| CVE-2026-10946 | Medium | 0.4% | 7.5 | Heap buffer overflow in Media in Google Chrome prior to 149.0.7827.53 allowed a … | |
| CVE-2026-55011 | Medium | 0.4% | 7.8 | Integer underflow (wrap or wraparound) in Microsoft Defender allows an unauthori… | |
| CVE-2026-55012 | Medium | 0.4% | 7.8 | Integer overflow or wraparound in Microsoft Defender allows an unauthorized atta… | |
| CVE-2026-77104 | Medium | 0.4% | 7.5 | CommServe contained a path traversal issue affecting information disclosure. Sof… | |
| CVE-2026-79138 | Medium | 0.4% | 9.6 | Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.… | |
| CVE-2026-79240 | Medium | 0.4% | 8.8 | Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.… | |
| CVE-2026-19171 | Medium | 0.4% | 9.6 | Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allo… | |
| CVE-2026-33095 | Medium | 0.4% | 7.8 | Use after free in Microsoft Office Word allows an unauthorized attacker to execu… | |
| CVE-2026-44817 | Medium | 0.4% | 7.8 | Access of resource using incompatible type ('type confusion') in Microsoft Offic… | |
| CVE-2026-44820 | Medium | 0.4% | 7.8 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to … | |
| CVE-2026-44823 | Medium | 0.4% | 7.8 | Numeric truncation error in Microsoft Office Excel allows an unauthorized attack… | |
| CVE-2026-45457 | Medium | 0.4% | 7.8 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to e… | |
| CVE-2026-45469 | Medium | 0.4% | 7.8 | Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unaut… | |
| CVE-2026-45486 | Medium | 0.4% | 7.8 | Use after free in Microsoft Office Word allows an unauthorized attacker to execu… | |
| CVE-2026-45643 | Medium | 0.4% | 7.8 | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized at… | |
| CVE-2026-45645 | Medium | 0.4% | 7.8 | Untrusted pointer dereference in Microsoft Office allows an unauthorized attacke… | |
| CVE-2026-17723 | Medium | 0.4% | 8.3 | Use after free in Media in Google Chrome on Windows prior to 151.0.7922.72 allow… | |
| CVE-2026-62803 | Medium | 0.4% | 7.8 | Improper link resolution before file access ('link following') in Windows DHCP S… | |
| CVE-2026-62807 | Medium | 0.4% | 7.8 | Improper link resolution before file access ('link following') in Windows DHCP S… | |
| CVE-2026-50438 | Medium | 0.4% | 8.8 | Improper link resolution before file access ('link following') in Microsoft PC M… | |
| CVE-2026-50454 | Medium | 0.4% | 7.8 | Relative path traversal in Windows User Interface Core allows an authorized atta… | |
| CVE-2026-50469 | Medium | 0.4% | 7.8 | Improper link resolution before file access ('link following') in Windows Projec… | |
| CVE-2023-21566 | Medium | 0.4% | 7.8 | Visual Studio Elevation of Privilege Vulnerability | |
| CVE-2026-9114 | Medium | 0.4% | 8.8 | Use after free in QUIC in Google Chrome on prior to 148.0.7778.179 allowed a rem… | |
| CVE-2026-20809 | Medium | 0.4% | 7.8 | Time-of-check time-of-use (toctou) race condition in Windows Kernel Memory allow… | |
| CVE-2026-45463 | Medium | 0.4% | 8.4 | Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorize… | |
| CVE-2026-45472 | Medium | 0.4% | 8.4 | Use after free in Microsoft Office allows an unauthorized attacker to execute co… | |
| CVE-2026-45474 | Medium | 0.4% | 8.4 | Use after free in Microsoft Office allows an unauthorized attacker to execute co… | |
| CVE-2026-49798 | Medium | 0.4% | 9.3 | Use after free in Windows Kernel allows an unauthorized attacker to elevate priv… | |
| CVE-2026-54128 | Medium | 0.4% | 8.4 | Use after free in Windows DHCP Client allows an unauthorized attacker to execute… | |
| CVE-2026-69585 | Medium | 0.4% | 7.8 | Incorrect type conversion or cast in Microsoft Windows Search Component allows a… | |
| CVE-2026-50498 | Medium | 0.4% | 7.8 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege V… | |
| CVE-2026-50501 | Medium | 0.4% | 7.8 | Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an un… | |
| CVE-2026-58530 | Medium | 0.4% | 7.8 | Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an una… | |
| CVE-2026-58542 | Medium | 0.4% | 7.8 | Heap-based buffer overflow in Windows Media allows an unauthorized attacker to e… | |
| CVE-2026-10957 | Medium | 0.4% | 8.8 | Use after free in Glic in Google Chrome prior to 149.0.7827.53 allowed a remote … | |
| CVE-2026-10963 | Medium | 0.4% | 8.8 | Integer overflow in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote … | |
| CVE-2026-10964 | Medium | 0.4% | 8.8 | Integer overflow in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote … | |
| CVE-2026-10965 | Medium | 0.4% | 8.8 | Integer overflow in DevTools in Google Chrome prior to 149.0.7827.53 allowed a r… | |
| CVE-2026-10987 | Medium | 0.4% | 8.8 | Integer overflow in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote … | |
| CVE-2026-10991 | Medium | 0.4% | 8.8 | Use after free in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote at… | |
| CVE-2026-11046 | Medium | 0.4% | 8.8 | Insufficient validation of untrusted input in Media in Google Chrome prior to 14… | |
| CVE-2026-62688 | Medium | 0.4% | 7.8 | Heap-based buffer overflow in Windows MIDI Service Module allows an authorized a… | |
| CVE-2026-62698 | Medium | 0.4% | 7.8 | Numeric truncation error in Microsoft Digest Authentication allows an authorized… | |
| CVE-2026-87654 | Medium | 0.4% | 9.6 | Buffer overflow in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 a… | |
| CVE-2026-10893 | Medium | 0.4% | 8.8 | Use after free in Chromoting in Google Chrome prior to 149.0.7827.53 allowed a r… |