Microsoft has 4,599 CVEs on record between 2012 and 2026. Disclosure cadence is accelerating: 2930 in the last 90 days against 932 in the 90 before. The busiest recent month was October 2026 with 1482. The median CVSS is 7.8 (high), with 273 rated critical. 2% have been exploited in the wild, in line with the corpus average. The median gap from publication to a KEV listing is 112 days (95 cases). The dominant weakness classes are CWE-122 (931) and CWE-416 (851). Most affected products: windows_10_1607 (988), Windows 10 Version 1607 (877), 365_apps (267).

CVEs per month

Last 12 months, by publish date

1225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/101126/11

Exploited share: 2% vs 1% corpus
Median CVSS: 7.8
Publish → KEV: 112 d median(95)
Last 90 days: 2930 prev 932

Weakness classes

Products

windows_10_1607 988
Windows 10 Version 1607 877
365_apps 267
Microsoft 365 Apps for Enterprise 232
Windows 10 Version 1809 199
windows_10_1809 174

Follow Microsoft:RSS feed Save a search →Embed badge ↗

4599

Total CVEs

273

Critical

95

CISA KEV

96

Exploited

Worst active — by depth score

Microsoft vulnerabilities

CVEs affecting Microsoft, newest first. Open any entry for full detail, references, and exploit status.

4599 CVEsRSS

CVE-2025-32711Critical· 9.3PoC

M365 Copilot Information Disclosure Vulnerability

Ai command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.

▾ AbyssalMicrosoft · Microsoft 365 CopilotEPSS 7.2%via CVEORG

CVE-2025-24993High· 7.8CISA KEV0day

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

▾ Abyssalmicrosoft · windows_10_1507EPSS 2.2%via NVD

CVE-2025-26633High· 7.0CISA KEV0dayPoC

Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.

Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.

▾ Abyssalmicrosoft · windows_10_1507EPSS 30%via NVD

CVE-2025-21391High· 7.1CISA KEV0day

Windows Storage Elevation of Privilege Vulnerability

Windows Storage Elevation of Privilege Vulnerability

▾ Abyssalmicrosoft · windows_10_1507EPSS 2.3%via NVD

CVE-2025-21335High· 7.8CISA KEV0day

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

▾ Abyssalmicrosoft · windows_10_21h2EPSS 1.4%via NVD

CVE-2024-49114High· 7.8PoC

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

▾ Midnightmicrosoft · windows_10_1809EPSS 0.75%via NVD

CVE-2024-49113High· 7.5PoC

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

▾ Midnightmicrosoft · windows_10_1507EPSS 84%via NVD

CVE-2024-49112Critical· 9.8PoC

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

▾ Abyssalmicrosoft · windows_10_1507EPSS 72%via NVD

CVE-2024-49068High· 8.2

Microsoft SharePoint Elevation of Privilege Vulnerability

Microsoft SharePoint Elevation of Privilege Vulnerability

▾ Twilightmicrosoft · sharepoint_serverEPSS 1.6%via NVD

CVE-2024-49065Medium· 5.5

Microsoft Office Remote Code Execution Vulnerability

Microsoft Office Remote Code Execution Vulnerability

▾ Sunlitmicrosoft · 365_appsEPSS 1.1%via NVD

CVE-2024-49019High· 7.8PoC

Active Directory Certificate Services Elevation of Privilege Vulnerability

Active Directory Certificate Services Elevation of Privilege Vulnerability

▾ Midnightmicrosoft · windows_server_2008EPSS 2.0%via NVD

CVE-2024-43598High· 8.1

LightGBM Remote Code Execution Vulnerability

LightGBM Remote Code Execution Vulnerability

▾ Twilightmicrosoft · lightgbmEPSS 1.4%via NVD

CVE-2024-49039High· 8.8CISA KEV0dayPoC

Windows Task Scheduler Elevation of Privilege Vulnerability

Windows Task Scheduler Elevation of Privilege Vulnerability

▾ Abyssalmicrosoft · windows_10_1507EPSS 14%via NVD

CVE-2024-43590High· 7.8

Visual C++ Redistributable Installer Elevation of Privilege Vulnerability

Visual C++ Redistributable Installer Elevation of Privilege Vulnerability

▾ Twilightmicrosoft · visual_c++_redistributableEPSS 0.43%via NVD

CVE-2024-38200Medium· 6.5PoC

Microsoft Office Spoofing Vulnerability

Microsoft Office Spoofing Vulnerability

▾ Twilightmicrosoft · 365_appsEPSS 22%via NVD

CVE-2024-38100High· 7.8PoC

Windows File Explorer Elevation of Privilege Vulnerability

Windows File Explorer Elevation of Privilege Vulnerability

▾ Midnightmicrosoft · windows_server_2016EPSS 4.5%via NVD

CVE-2024-35260High· 8.0

An authenticated attacker can exploit an untrusted search path vulnerability in Microsoft Dataverse to execute code over a network.

An authenticated attacker can exploit an untrusted search path vulnerability in Microsoft Dataverse to execute code over a network.

▾ Twilightmicrosoft · power_platformEPSS 0.83%via NVD

CVE-2024-38093Medium· 4.3

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Microsoft Edge (Chromium-based) Spoofing Vulnerability

▾ Sunlitmicrosoft · edgeEPSS 0.50%via NVD

CVE-2024-38082Medium· 4.7

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Microsoft Edge (Chromium-based) Spoofing Vulnerability

▾ Sunlitmicrosoft · edgeEPSS 0.50%via NVD

CVE-2024-38083Medium· 4.3

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Microsoft Edge (Chromium-based) Spoofing Vulnerability

▾ Sunlitmicrosoft · edge_chromiumEPSS 0.50%via NVD

CVE-2024-30058Medium· 5.4

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Microsoft Edge (Chromium-based) Spoofing Vulnerability

▾ Sunlitmicrosoft · edge_chromiumEPSS 0.40%via NVD

CVE-2024-30057Medium· 5.4

Microsoft Edge for iOS Spoofing Vulnerability

Microsoft Edge for iOS Spoofing Vulnerability

▾ Sunlitmicrosoft · edgeEPSS 0.41%via NVD

CVE-2024-37325High· 8.1

Azure Science Virtual Machine (DSVM) Elevation of Privilege Vulnerability

Azure Science Virtual Machine (DSVM) Elevation of Privilege Vulnerability

▾ Twilightmicrosoft · azure_data_science_virtual_machineEPSS 1.1%via NVD

CVE-2024-35265High· 7.0

Windows Perception Service Elevation of Privilege Vulnerability

Windows Perception Service Elevation of Privilege Vulnerability

▾ Twilightmicrosoft · windows_10_1809EPSS 0.37%via NVD

CVE-2024-35263Medium· 5.7

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

▾ Sunlitmicrosoft · dynamics_365EPSS 1.7%via NVD

CVE-2024-35254High· 7.1

Azure Monitor Agent Elevation of Privilege Vulnerability

Azure Monitor Agent Elevation of Privilege Vulnerability

▾ Twilightmicrosoft · azure_monitor_agentEPSS 0.83%via NVD

CVE-2024-35253Medium· 4.4

Microsoft Azure File Sync Elevation of Privilege Vulnerability

Microsoft Azure File Sync Elevation of Privilege Vulnerability

▾ Sunlitmicrosoft · azure_file_syncEPSS 0.74%via NVD

CVE-2024-35252High· 7.5

Azure Storage Movement Client Library Denial of Service Vulnerability

Azure Storage Movement Client Library Denial of Service Vulnerability

▾ Twilightmicrosoft · azure_storage_data_movement_libraryEPSS 2.5%via NVD

CVE-2024-35250High· 7.8CISA KEVPoC

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

▾ Abyssalmicrosoft · windows_10_1507EPSS 25%via NVD

CVE-2024-35249High· 8.8

Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability

Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability

▾ Twilightmicrosoft · dynamics_365_business_centralEPSS 3.4%via NVD

Microsoft vulnerabilities (CVEs) — page 141 · VulnSea