Vendor
Microsoft vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 6,164 vulnerabilities in Microsoft: 1,088 in the last 7 days and 3,584 in the last 90 days, 763 of them critical and 443 exploited in the wild. The most recent, Microsoft TestPlatform CLI privilege escalation in artifact postprocessor, was published on 11 November 2026. 1,325 vulnerabilities in the last four weeks, up 1477% on the four before (84). 57 critical against 42, 1 exploited in the wild against 0. 268 technologies have a page of their own.
- Last 7 days
- 1,088
- Last 90 days
- 3,584
- Critical, all time
- 763
- Exploited in the wild
- 443
About Microsoft
Software and cloud services company that develops Windows, Office, Azure, and related enterprise products.
Microsoft technologies
- Microsoft Windows2,362
- Microsoft Windows 10589
- Microsoft Windows 11 24h2565
- Microsoft Windows 11 25h2534
- Microsoft Windows Server 2025534
- Microsoft Windows Server 2022528
- Microsoft Windows Server 2019521
- Microsoft Windows Server 2012517
- Microsoft Windows 11494
- Microsoft Windows Server 2016476
- Microsoft Windows 10 1809380
- Microsoft Windows 10 21h2373
- Microsoft Windows 10 22h2372
- Microsoft Windows 11 23h2365
- Microsoft Windows 11 26h1364
- Microsoft Windows 10 1607312
- Microsoft Windows 11 26h2259
- Microsoft Edge187
- Microsoft SQL Server140
- Microsoft Windows 11 Version 26H1135
- Microsoft Office134
- Microsoft Office Word132
- Microsoft Windows Server 2022, 23H2125
- Microsoft Windows Server 2008116
- Microsoft Office Excel115
- Microsoft Windows 7100
- Microsoft Windows 8.1100
- Microsoft 365 Apps for Enterprise84
- Microsoft Office LTSC 202182
- Microsoft Office LTSC 202482
- Microsoft Office 201980
- Microsoft Office SharePoint74
- Microsoft Windows Installer73
- Microsoft Visual-Studio-Code69
- Microsoft Windows Kernel68
- Microsoft Exchange Server65
- Microsoft Windows Rt 8.165
- Microsoft Office 365 for Mac64
- Microsoft Windows Dns Server60
- Microsoft 365 Apps54
- Microsoft .Net53
- Microsoft Remote Desktop Client53
- Microsoft Office Online Server52
- Microsoft Sharepoint-Server52
- Microsoft Windows DHCP Server51
- Microsoft Internet Explorer50
- Microsoft Excel48
- Microsoft Office LTSC for Mac 202145
- Microsoft Office LTSC for Mac 202445
- Microsoft Visual Studio43
- Microsoft Windows Vista42
- Microsoft Office 201640
- Microsoft Asp.net Core38
- Microsoft SharePoint38
- Microsoft Edge Chromium37
- Microsoft SharePoint Server 201937
- Microsoft Word37
- Microsoft DNS Server35
- Microsoft Windows NT35
- Microsoft SharePoint Enterprise Server 201634
- Microsoft Windows Biometric Service34
- Microsoft Windows Hyper-V34
- Microsoft SharePoint Server Subscription Edition32
- Microsoft Excel 201631
- Microsoft Visual Studio 202230
- Microsoft Office 202129
- Microsoft Office 202429
- Microsoft Office Access29
- Microsoft Windows Server 2012 R229
- Microsoft Office Outlook25
- Microsoft Win32K25
- Microsoft Office Long Term Servicing Channel24
- Microsoft .NET Framework23
- Microsoft Active Directory Federation Services21
- Microsoft Windows Advanced Rasterization Platform20
- Microsoft Windows Server 2008 R220
- Microsoft Windows 200019
- Microsoft Office PowerPoint18
- Microsoft Windows Message Queuing18
- Microsoft Active Directory Domain Services17
- Microsoft Windows NTFS17
- Microsoft Windows Overlay Filter17
- Microsoft Windows Server17
- Microsoft Standard XPS16
- Microsoft Entra ID15
- Microsoft Graphics Component15
- Microsoft UFO15
- Microsoft 365 Copilot14
- Microsoft Windows Admin Center14
- Microsoft Kiota12
- Microsoft Skype for Business12
- Microsoft Windows Print Spooler12
- Microsoft Windows Search Component12
- Microsoft Dynamics 36511
- Microsoft.OpenApi.Kiota11
- Microsoft Office for Android11
- Microsoft Outlook11
- Microsoft Windows Error Reporting11
- Microsoft Windows Imaging Component11
- Microsoft Windows PowerShell11
- Microsoft Azure CycleCloud10
- Microsoft Defender10
- Microsoft.OpenApi.Kiota.Builder10
- Microsoft SQL Server 202510
- Microsoft Windows Autopilot10
- Microsoft Windows Client for NFS10
- Microsoft Windows Deployment Services10
- Microsoft Windows Modern Device Management10
- Microsoft Azure-Monitor-Agent9
- Microsoft Exchange Server Subscription Edition9
- Microsoft Hyper-V9
- Microsoft M365 Copilot9
- Microsoft 3659
- Microsoft Windows Codecs Library9
- Microsoft Windows Media Foundation9
- Microsoft Network Policy Server8
- Microsoft PowerPoint8
- Microsoft PowerShell8
- Microsoft Remote Desktop Gateway Service8
- Microsoft SharePoint Server 2016 Enterprise Edition8
- Microsoft SQL Server 20228
- Microsoft Windows Broadcast DVR User Service8
- Microsoft Windows Failover Cluster8
- Microsoft Windows Hello8
- Microsoft Windows Push Notifications8
- Microsoft Windows Remote Desktop Services8
- Microsoft Windows Shell8
- Microsoft Windows Storage8
- Microsoft Windows Subsystem For Linux8
- Microsoft SQL Server 20167
- Microsoft SQL Server 20177
- Microsoft SQL Server 20197
- Microsoft Teams for Android7
- Microsoft Windows 957
- Microsoft Windows iSCSI7
- Microsoft Edge (Chromium-based) for Android6
- Microsoft Exchange Online6
- Microsoft Internet Information Services6
- Microsoft .NET Core6
- Microsoft OpenSSH for Windows6
- Microsoft PostScript Printer Driver6
- Microsoft Streaming Service6
- Microsoft Teams6
- Microsoft Windows Ancillary Function Driver for WinSock6
- Microsoft Windows BitLocker6
- Microsoft Windows Remote Access Connection Manager6
- Microsoft Windows Services for NFS6
- Microsoft Windows SMB Client6
- Microsoft Azure AI Foundry5
- Microsoft Azure Arc5
- Microsoft Azure-Kubernetes-Service5
- Microsoft Azure Sql Database5
- Microsoft Configuration Manager5
- Microsoft Defender for Endpoint5
- Microsoft Dynamics 365 (on-premises)5
- Microsoft Exchange Server 20165
- Microsoft Exchange Server 20195
- Microsoft GitHub Copilot Chat5
- Microsoft Internet Information Services (Iis)5
- Microsoft Account5
- Microsoft Windows Update5
- Microsoft Office Visio5
- Microsoft Partner Center5
- Microsoft PC Manager5
- Microsoft WDAC OLE DB provider for SQL5
- Microsoft Windows 11 22h25
- Microsoft Windows Device Association Service5
- Microsoft Windows IKE Extension5
- Microsoft Windows iSCSI Target Service5
- Microsoft Windows Management Instrumentation5
- Microsoft Windows Media Player5
- Microsoft Windows Presentation Foundation5
- Microsoft Windows Presentation Foundation (WPF)5
- Microsoft Windows Raw Image Extension5
- Microsoft Windows Secure Boot5
- Microsoft Windows Storport Miniport Driver5
- Microsoft 365 Copilot Chat4
- Microsoft Active Directory4
- Microsoft Azure Attestation4
- Microsoft Azure Cosmos DB4
- Microsoft Azure-Key-Vault4
- Microsoft Azure Logic Apps4
- Microsoft Device Health Attestation Service4
- Microsoft Dynamics Business Central4
- Microsoft JScript4
- Microsoft Malware Protection Engine4
- Microsoft QUIC4
- Microsoft System.Security.Cryptography.Xml4
- Microsoft NetX4
- Microsoft Office Click-to-Run4
- Microsoft Open Management Infrastructure (OMI)4
- Microsoft SimpleChat4
- Microsoft Windows Active Directory4
- Microsoft Windows Cloud Files Mini Filter Driver4
- Microsoft Windows Internet Information Services4
- Microsoft Windows Kerberos4
- Microsoft Windows Media4
- Microsoft Windows Remote Desktop4
- Microsoft Windows Smart Card4
- Microsoft Active Directory Certificate Services3
- Microsoft Apm-Cli3
- Microsoft Authentication Library (MSAL) for Node.js3
- Microsoft Azure Compute Gallery3
- Microsoft Azure Connected Machine Agent3
- Microsoft Azure DevOps3
- Microsoft Azure DevOps Server3
- Microsoft Azure Machine Learning3
- Microsoft Azure Managed Instance for Apache Cassandra3
- Microsoft Bing3
- Microsoft BitLocker3
- Microsoft Configuration Manager 25033
- Microsoft DiaSymReader.Native3
- Microsoft Edge for Android3
- Microsoft Graph3
- Microsoft Kiota.Builder3
- Microsoft MSHTML3
- Microsoft MsQuic3
- Microsoft .NET 103
- Microsoft .NET 83
- Microsoft .NET 93
- Microsoft .NET Aspire3
- Microsoft .NET Core Runtime3
- Microsoft .NET Runtime3
- Microsoft Network Device Enrollment Service3
- Microsoft Power Apps3
- Microsoft Power Automate3
- Microsoft Power BI Report Server3
- Microsoft PowerPoint 20163
- Microsoft Prompty3
- Microsoft RPC Runtime3
- Microsoft Silverlight3
- Microsoft SQL Server 2016 Service Pack 3 (GDR)3
- Microsoft SQL Server 2017 (CU 31)3
- Microsoft SQL Server 2019 (CU 32)3
- Microsoft SQL Server 2022 (GDR)3
- Microsoft SysInternals3
- Microsoft Trace Data Helper3
- Microsoft Virtual Hard Disk Miniport Driver3
- Microsoft Windows 11 21h23
- Microsoft Windows Audio Service3
- Microsoft Windows DirectMusic3
- Microsoft Windows FileCrypt Driver3
- Microsoft Windows HTTP.sys3
- Microsoft Windows Image Acquisition3
- Microsoft Windows Kernel-Mode Drivers3
- Microsoft Windows NT 4.03
- Microsoft Windows OLE DB3
- Microsoft Windows Performance Monitor3
- Microsoft Windows Remote Desktop Protocol3
- Microsoft Windows RRAS3
- Microsoft Windows (Schannel)3
- Microsoft Windows Search3
- Microsoft Windows Security Center3
- Microsoft Windows Server 20033
- Microsoft Windows Server Update Service3
- Microsoft Windows Server Update Services (WSUS)3
- Microsoft Windows Servicing Stack Updates3
- Microsoft Windows Setup Files Cleanup3
- Microsoft Windows Storage Spaces Controller3
- Microsoft Windows TCP/IP3
- Microsoft Windows USB Driver3
- Microsoft Windows XP3
- Microsoft WindowsDesktop.App.Runtime.win-arm643
- Microsoft WindowsDesktop.App.Runtime.win-x643
- Microsoft WindowsDesktop.App.Runtime.win-x863
- Microsoft Xbox3
- Microsoft XML Core Services3
- Microsoft XPS Document Converter3
Latest Microsoft vulnerabilities
- Microsoft TestPlatform CLI privilege escalation in artifact postprocessormediumCVSS 6.5
- .NET Aspire information disclosure in log fileshighCVSS 7.3
- .NET Aspire privilege escalation in temporary file handlinghighCVSS 7.3
- Microsoft Visual Studio heap buffer overflow RCEhighCVSS 8.8
- Microsoft Aspire Dashboard SDK missing authorization security feature bypasscriticalCVSS 9.1
- Microsoft Visual Studio heap-based buffer overflowhighCVSS 8.8
- Microsoft ASP.NET Core race condition privilege escalationhighCVSS 7.5
- ASP.NET Core security feature bypass via input validationmediumCVSS 6.5
- Microsoft ASP.NET Core denial of service via resource consumptionhighCVSS 7.5
- Microsoft Visual Studio stack-based buffer overflowhighCVSS 8.8
- Microsoft ASP.NET Core SignalR memory leak denial of servicehighCVSS 7.5
- Microsoft Visual Studio deserialization remote code executionhighCVSS 8.8
- ASP.NET Core inefficient algorithmic complexity denial of servicehighCVSS 7.5
- Microsoft .NET elevation of privilege in access controlhighCVSS 7.5
- CVE-2026-97015: Windows BitLocker heap buffer overflow with physical attackmediumCVSS 6.8
- CVE-2026-97013: Microsoft Windows Shell type confusion privilege elevationhighCVSS 7.8
- CVE-2026-97006: Microsoft Windows DNS out-of-bounds readmediumCVSS 4.9
- CVE-2026-97002: Microsoft Windows VMSwitch out-of-bounds read privilege escalationhighCVSS 7.5
- CVE-2026-97000: Microsoft Windows USM Communication Manager null pointer dereferencehighCVSS 7
- CVE-2026-96994: Microsoft Windows Winsock use after free privilege escalationhighCVSS 7
- CVE-2026-96993: Windows Performance Monitor invalid pointer release remote code executionhighCVSS 7.5
- CVE-2026-96992: Windows PCI Bus Driver use-after-free privilege escalationmediumCVSS 6.4
- CVE-2026-96989: Microsoft Windows Secondary Logon out-of-bounds readmediumCVSS 5.5
- CVE-2026-96988: Microsoft Windows DNS out-of-bounds read information disclosuremediumCVSS 4.9
- CVE-2026-96987: Windows DNS out-of-bounds read information disclosuremediumCVSS 4.9
Most severe Microsoft vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2008-4250: Microsoft Windows buffer overflow in Server servicecriticalexploited in the wildCVSS 10EPSS 93.5%
- CVE-2020-0796: Microsoft SMBv3 Remote Code Execution Vulnerabilitycriticalexploited in the wildCVSS 10
- CVE-2020-1350: Microsoft Windows DNS Server Remote Code Execution Vulnerabilitycriticalexploited in the wildCVSS 10
- CVE-2020-1472: Microsoft Netlogon Privilege Escalation Vulnerabilitycriticalexploited in the wildCVSS 10
- CVE-2025-53770: Microsoft SharePoint Server deserialization of untrusted datacriticalexploited in the wildCVSS 9.8EPSS 88.2%
- CVE-2024-43468: Microsoft Configuration Manager SQL injectioncriticalexploited in the wildCVSS 9.8EPSS 83.1%
- CVE-2025-59287: Microsoft Windows Server Update Service deserialization RCEcriticalexploited in the wildCVSS 9.8EPSS 71.4%
- CVE-2026-50522: Microsoft SharePoint remote code execution via unsafe deserializationcriticalexploited in the wildCVSS 9.8EPSS 20.3%
- CVE-2025-10585: Google Chrome type confusion in V8 enginecriticalexploited in the wildCVSS 9.8EPSS 5.4%
- CVE-2026-20963: Microsoft SharePoint deserialization of untrusted datacriticalexploited in the wildCVSS 9.8EPSS 5.3%
Vulnerabilities per week
1,325 vulnerabilities in the last four weeks, up 1477% on the four before (84). 57 critical against 42, 1 exploited in the wild against 0. The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 27 | 12 | |
| 24 Aug 2026 | 35 | 7 | |
| 31 Aug 2026 | 28 | 5 | |
| 7 Sep 2026 | 998 | 49 | |
| 14 Sep 2026 | 25 | 12 | |
| 21 Sep 2026 | 30 | 22 | |
| 28 Sep 2026 | 11 | 1 | |
| 5 Oct 2026 | 18 | 7 | |
| 12 Oct 2026 | 1,293 | 52 | |
| 19 Oct 2026 | 7 | 4 | |
| 26 Oct 2026 | 21 | 0 | |
| 2 Nov 2026 | 4 | 1 | |
| 9 Nov 2026 | 1,087 | 26 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many Microsoft vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/vendors/microsoft)<a href="https://junglewise.ai/threats/vendors/microsoft"><img src="https://junglewise.ai/threats/vendors/microsoft/badge.svg" alt="Microsoft vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/vendors/microsoft.json, and this page as text at https://junglewise.ai/threats/vendors/microsoft.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Microsoft vulnerabilities", https://junglewise.ai/threats/vendors/microsoft, 13 November 2026.