VulnSea

Microsoft has 4,599 CVEs on record between 2012 and 2026. Disclosure cadence is accelerating: 2930 in the last 90 days against 932 in the 90 before. The busiest recent month was October 2026 with 1482. The median CVSS is 7.8 (high), with 273 rated critical. 2% have been exploited in the wild, in line with the corpus average. The median gap from publication to a KEV listing is 112 days (95 cases). The dominant weakness classes are CWE-122 (931) and CWE-416 (851). Most affected products: windows_10_1607 (988), Windows 10 Version 1607 (877), 365_apps (267).

CVEs per month

Last 12 months, by publish date

120102030405060708091011
Exploited share
2% vs 1% corpus
Median CVSS
7.8
Publish → KEV
112 d median(95)
Last 90 days
2930 prev 932

Products

  • windows_10_1607 988
  • Windows 10 Version 1607 877
  • 365_apps 267
  • Microsoft 365 Apps for Enterprise 232
  • Windows 10 Version 1809 199
  • windows_10_1809 174
Follow Microsoft:RSS feedSave a search →Embed badge ↗
4599
Total CVEs
273
Critical
95
CISA KEV
96
Exploited

Worst active — by depth score

Microsoft vulnerabilities

CVEs affecting Microsoft, newest first. Open any entry for full detail, references, and exploit status.

4599 CVEsRSS

CVE-2024-35248High· 7.3
2y ago

Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

▾ Twilightmicrosoft · dynamics_365_business_centralEPSS 0.95%via NVD
CVE-2024-30104High· 7.8PoC
2y ago

Microsoft Office Remote Code Execution Vulnerability

Microsoft Office Remote Code Execution Vulnerability

▾ Midnightmicrosoft · 365_appsEPSS 1.5%via NVD
CVE-2024-30103High· 8.8PoC
2y ago

Microsoft Outlook Remote Code Execution Vulnerability

Microsoft Outlook Remote Code Execution Vulnerability

▾ Midnightmicrosoft · 365_appsEPSS 3.4%via NVD
CVE-2024-30101High· 7.5
2y ago

Microsoft Office Remote Code Execution Vulnerability

Microsoft Office Remote Code Execution Vulnerability

▾ Twilightmicrosoft · 365_appsEPSS 1.8%via NVD
CVE-2024-30099High· 7.0
2y ago

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

▾ Twilightmicrosoft · windows_10_1507EPSS 0.54%via NVD
CVE-2024-30097High· 8.8
2y ago

Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability

Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability

▾ Twilightmicrosoft · windows_10_1507EPSS 1.7%via NVD
CVE-2024-30096Medium· 5.5
2y ago

Windows Cryptographic Services Information Disclosure Vulnerability

Windows Cryptographic Services Information Disclosure Vulnerability

▾ Sunlitmicrosoft · windows_10_1809EPSS 0.95%via NVD
CVE-2024-30095High· 7.8
2y ago

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

▾ Twilightmicrosoft · windows_10_1507EPSS 1.0%via NVD
CVE-2024-30094High· 7.8
2y ago

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

▾ Twilightmicrosoft · windows_10_1507EPSS 0.91%via NVD
CVE-2024-30093High· 7.3
2y ago

Windows Storage Elevation of Privilege Vulnerability

Windows Storage Elevation of Privilege Vulnerability

▾ Twilightmicrosoft · windows_10_1507EPSS 1.1%via NVD
CVE-2024-30091High· 7.8
2y ago

Win32k Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

▾ Twilightmicrosoft · windows_10_1507EPSS 4.3%via NVD
CVE-2024-30090High· 7.0PoC
2y ago

Microsoft Streaming Service Elevation of Privilege Vulnerability

Microsoft Streaming Service Elevation of Privilege Vulnerability

▾ Midnightmicrosoft · windows_10_1507EPSS 2.0%via NVD
CVE-2024-30089High· 7.8
2y ago

Microsoft Streaming Service Elevation of Privilege Vulnerability

Microsoft Streaming Service Elevation of Privilege Vulnerability

▾ Twilightmicrosoft · windows_10_1809EPSS 8.1%via NVD
CVE-2024-30088High· 7.0CISA KEVPoC
2y ago

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

▾ Abyssalmicrosoft · windows_10_1507EPSS 68%via NVD
CVE-2024-30087High· 7.8
2y ago

Win32k Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

▾ Twilightmicrosoft · windows_10_1507EPSS 9.5%via NVD
CVE-2024-30086High· 7.8
2y ago

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

▾ Twilightmicrosoft · windows_10_1507EPSS 1.1%via NVD
CVE-2024-30085High· 7.8PoC
2y ago

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

▾ Midnightmicrosoft · windows_10_1809EPSS 14%via NVD
CVE-2024-30084High· 7.0PoC
2y ago

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

▾ Midnightmicrosoft · windows_10_1507EPSS 5.9%via NVD
CVE-2024-30083High· 7.5
2y ago

Windows Standards-Based Storage Management Service Denial of Service Vulnerability

Windows Standards-Based Storage Management Service Denial of Service Vulnerability

▾ Twilightmicrosoft · windows_server_2012EPSS 2.5%via NVD
CVE-2024-30082High· 7.8
2y ago

Win32k Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

▾ Twilightmicrosoft · windows_10_1507EPSS 1.3%via NVD
CVE-2024-30080Critical· 9.8
2y ago

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

▾ Midnightmicrosoft · windows_10_1507EPSS 43%via NVD
CVE-2024-30078High· 8.8
2y ago

Windows Wi-Fi Driver Remote Code Execution Vulnerability

Windows Wi-Fi Driver Remote Code Execution Vulnerability

▾ Twilightmicrosoft · windows_10_1507EPSS 5.2%via NVD
CVE-2024-30077High· 8.0
2y ago

Windows OLE Remote Code Execution Vulnerability

Windows OLE Remote Code Execution Vulnerability

▾ Twilightmicrosoft · windows_10_1507EPSS 1.8%via NVD
CVE-2024-30076Medium· 6.8
2y ago

Windows Container Manager Service Elevation of Privilege Vulnerability

Windows Container Manager Service Elevation of Privilege Vulnerability

▾ Sunlitmicrosoft · windows_10_1607EPSS 1.7%via NVD
CVE-2024-30075High· 8.0
2y ago

Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability

Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability

▾ Twilightmicrosoft · windows_server_2008EPSS 0.88%via NVD
CVE-2024-30074High· 8.0
2y ago

Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability

Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability

▾ Twilightmicrosoft · windows_server_2008EPSS 1.2%via NVD
CVE-2024-30072High· 7.8
2y ago

Microsoft Event Trace Log File Parsing Remote Code Execution Vulnerability

Microsoft Event Trace Log File Parsing Remote Code Execution Vulnerability

▾ Twilightmicrosoft · windows_11_22h2EPSS 0.85%via NVD
CVE-2024-30070High· 7.5
2y ago

DHCP Server Service Denial of Service Vulnerability

DHCP Server Service Denial of Service Vulnerability

▾ Twilightmicrosoft · windows_server_2012EPSS 2.3%via NVD
CVE-2024-30069Medium· 4.7
2y ago

Windows Remote Access Connection Manager Information Disclosure Vulnerability

Windows Remote Access Connection Manager Information Disclosure Vulnerability

▾ Sunlitmicrosoft · windows_10_1507EPSS 0.57%via NVD
CVE-2024-30068High· 8.8
2y ago

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

▾ Twilightmicrosoft · windows_10_1507EPSS 0.78%via NVD
Microsoft vulnerabilities (CVEs) — page 142 · VulnSea