# Microsoft vulnerabilities Source: https://junglewise.ai/threats/vendors/microsoft Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 01:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/microsoft.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 6,164 vulnerabilities in Microsoft: 1,088 in the last 7 days and 3,584 in the last 90 days, 763 of them critical and 443 exploited in the wild. The most recent, Microsoft TestPlatform CLI privilege escalation in artifact postprocessor, was published on 11 November 2026. 1,325 vulnerabilities in the last four weeks, up 1477% on the four before (84). 57 critical against 42, 1 exploited in the wild against 0. 268 technologies have a page of their own. ## Counts - Last 7 days: 1088 - Last 30 days: 1153 - Last 90 days: 3584 - All time: 6164 (763 critical, 443 exploited in the wild) ## About Microsoft Software and cloud services company that develops Windows, Office, Azure, and related enterprise products. ## Latest Microsoft vulnerabilities - [Microsoft TestPlatform CLI privilege escalation in artifact postprocessor](https://junglewise.ai/threats/microsoft-security-advisory-net-elevation-of-privilege-vulnerability-67735607) (medium, CVSS 6.5, published 11 Nov 2026) - [.NET Aspire information disclosure in log files](https://junglewise.ai/threats/duplicate-advisory-microsoft-security-advisory-aspire-information-c1e21083) (high, CVSS 7.3, published 10 Nov 2026) - [.NET Aspire privilege escalation in temporary file handling](https://junglewise.ai/threats/duplicate-advisory-microsoft-security-advisory-aspire-elevation-of-101ce3f2) (high, CVSS 7.3, published 10 Nov 2026) - [Microsoft Visual Studio heap buffer overflow RCE](https://junglewise.ai/threats/duplicate-advisory-microsoft-security-advisory-visual-studio-remote-224be73b) (high, CVSS 8.8, published 10 Nov 2026) - [Microsoft Aspire Dashboard SDK missing authorization security feature bypass](https://junglewise.ai/threats/duplicate-advisory-microsoft-security-advisory-aspire-security-feature-d0955c94) (critical, CVSS 9.1, published 10 Nov 2026) - [Microsoft Visual Studio heap-based buffer overflow](https://junglewise.ai/threats/duplicate-advisory-microsoft-security-advisory-visual-studio-remote-6a4b9d28) (high, CVSS 8.8, published 10 Nov 2026) - [Microsoft ASP.NET Core race condition privilege escalation](https://junglewise.ai/threats/duplicate-advisory-microsoft-security-advisory-asp-net-core-security-04275796) (high, CVSS 7.5, published 10 Nov 2026) - [ASP.NET Core security feature bypass via input validation](https://junglewise.ai/threats/duplicate-advisory-microsoft-security-advisory-asp-net-core-security-942d98c7) (medium, CVSS 6.5, published 10 Nov 2026) - [Microsoft ASP.NET Core denial of service via resource consumption](https://junglewise.ai/threats/duplicate-advisory-microsoft-security-advisory-asp-net-core-denial-of-0f1476a7) (high, CVSS 7.5, published 10 Nov 2026) - [Microsoft Visual Studio stack-based buffer overflow](https://junglewise.ai/threats/duplicate-advisory-microsoft-security-advisory-visual-studio-remote-d956164d) (high, CVSS 8.8, published 10 Nov 2026) - [Microsoft ASP.NET Core SignalR memory leak denial of service](https://junglewise.ai/threats/duplicate-advisory-microsoft-security-advisory-asp-net-core-denial-of-f6859a00) (high, CVSS 7.5, published 10 Nov 2026) - [Microsoft Visual Studio deserialization remote code execution](https://junglewise.ai/threats/duplicate-advisory-microsoft-security-advisory-visual-studio-remote-1eb2f932) (high, CVSS 8.8, published 10 Nov 2026) - [ASP.NET Core inefficient algorithmic complexity denial of service](https://junglewise.ai/threats/duplicate-advisory-microsoft-security-advisory-asp-net-core-denial-of-f3e14a11) (high, CVSS 7.5, published 10 Nov 2026) - [Microsoft .NET elevation of privilege in access control](https://junglewise.ai/threats/duplicate-advisory-microsoft-security-advisory-net-elevation-of-94435a8e) (high, CVSS 7.5, published 10 Nov 2026) - [CVE-2026-97015: Windows BitLocker heap buffer overflow with physical attack](https://junglewise.ai/threats/cve-2026-97015-heap-based-buffer-overflow-in-windows-bitlocker-allows-an) (medium, CVSS 6.8, published 10 Nov 2026) - [CVE-2026-97013: Microsoft Windows Shell type confusion privilege elevation](https://junglewise.ai/threats/cve-2026-97013-access-of-resource-using-incompatible-type-type-confusion-in) (high, CVSS 7.8, published 10 Nov 2026) - [CVE-2026-97006: Microsoft Windows DNS out-of-bounds read](https://junglewise.ai/threats/cve-2026-97006-out-of-bounds-read-in-windows-dns-allows-an-authorized-attacker) (medium, CVSS 4.9, published 10 Nov 2026) - [CVE-2026-97002: Microsoft Windows VMSwitch out-of-bounds read privilege escalation](https://junglewise.ai/threats/cve-2026-97002-out-of-bounds-read-in-windows-vmswitch-allows-an-authorized) (high, CVSS 7.5, published 10 Nov 2026) - [CVE-2026-97000: Microsoft Windows USM Communication Manager null pointer dereference](https://junglewise.ai/threats/cve-2026-97000-null-pointer-dereference-in-windows-usm-communication-manager) (high, CVSS 7, published 10 Nov 2026) - [CVE-2026-96994: Microsoft Windows Winsock use after free privilege escalation](https://junglewise.ai/threats/cve-2026-96994-use-after-free-in-winsock-allows-an-authorized-attacker-to) (high, CVSS 7, published 10 Nov 2026) - [CVE-2026-96993: Windows Performance Monitor invalid pointer release remote code execution](https://junglewise.ai/threats/cve-2026-96993-release-of-invalid-pointer-or-reference-in-windows-performance) (high, CVSS 7.5, published 10 Nov 2026) - [CVE-2026-96992: Windows PCI Bus Driver use-after-free privilege escalation](https://junglewise.ai/threats/cve-2026-96992-use-after-free-in-windows-pci-bus-driver-allows-an-unauthorized) (medium, CVSS 6.4, published 10 Nov 2026) - [CVE-2026-96989: Microsoft Windows Secondary Logon out-of-bounds read](https://junglewise.ai/threats/cve-2026-96989-out-of-bounds-read-in-secondary-logon-allows-an-authorized) (medium, CVSS 5.5, published 10 Nov 2026) - [CVE-2026-96988: Microsoft Windows DNS out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-96988-out-of-bounds-read-in-windows-dns-allows-an-authorized-attacker) (medium, CVSS 4.9, published 10 Nov 2026) - [CVE-2026-96987: Windows DNS out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-96987-out-of-bounds-read-in-windows-dns-allows-an-authorized-attacker) (medium, CVSS 4.9, published 10 Nov 2026) ## Most severe Microsoft vulnerabilities - [CVE-2008-4250: Microsoft Windows buffer overflow in Server service](https://junglewise.ai/threats/cve-2008-4250-microsoft-windows-buffer-overflow-in-server-service) (critical, exploited in the wild, CVSS 10, published 20 May 2026) - [CVE-2020-0796: Microsoft SMBv3 Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2020-0796-microsoft-smbv3-remote-code-execution-vulnerability) (critical, exploited in the wild, CVSS 10, published 10 Feb 2022) - [CVE-2020-1350: Microsoft Windows DNS Server Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2020-1350-microsoft-windows-dns-server-remote-code-execution-vulnerability) (critical, exploited in the wild, CVSS 10, published 3 Nov 2021) - [CVE-2020-1472: Microsoft Netlogon Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2020-1472-microsoft-netlogon-privilege-escalation-vulnerability) (critical, exploited in the wild, CVSS 10, published 3 Nov 2021) - [CVE-2025-53770: Microsoft SharePoint Server deserialization of untrusted data](https://junglewise.ai/threats/cve-2025-53770-microsoft-sharepoint-server-deserialization-of-untrusted-data) (critical, exploited in the wild, CVSS 9.8, published 20 Jul 2025) - [CVE-2024-43468: Microsoft Configuration Manager SQL injection](https://junglewise.ai/threats/cve-2024-43468-microsoft-configuration-manager-sql-injection) (critical, exploited in the wild, CVSS 9.8, published 12 Feb 2026) - [CVE-2025-59287: Microsoft Windows Server Update Service deserialization RCE](https://junglewise.ai/threats/cve-2025-59287-microsoft-windows-server-update-service-deserialization-rce) (critical, exploited in the wild, CVSS 9.8, published 24 Oct 2025) - [CVE-2026-50522: Microsoft SharePoint remote code execution via unsafe deserialization](https://junglewise.ai/threats/cve-2026-50522-microsoft-sharepoint-remote-code-execution-via-unsafe) (critical, exploited in the wild, CVSS 9.8, published 14 Jul 2026) - [CVE-2025-10585: Google Chrome type confusion in V8 engine](https://junglewise.ai/threats/cve-2025-10585-google-chrome-type-confusion-in-v8-engine) (critical, exploited in the wild, CVSS 9.8, published 24 Sep 2025) - [CVE-2026-20963: Microsoft SharePoint deserialization of untrusted data](https://junglewise.ai/threats/cve-2026-20963-microsoft-sharepoint-deserialization-of-untrusted-data) (critical, exploited in the wild, CVSS 9.8, published 18 Mar 2026) ## Vulnerabilities per week 1,325 vulnerabilities in the last four weeks, up 1477% on the four before (84). 57 critical against 42, 1 exploited in the wild against 0. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 27 | 12 | 0 | | 24 Aug 2026 | 35 | 7 | 1 | | 31 Aug 2026 | 28 | 5 | 1 | | 7 Sep 2026 | 998 | 49 | 3 | | 14 Sep 2026 | 25 | 12 | 0 | | 21 Sep 2026 | 30 | 22 | 0 | | 28 Sep 2026 | 11 | 1 | 0 | | 5 Oct 2026 | 18 | 7 | 0 | | 12 Oct 2026 | 1293 | 52 | 1 | | 19 Oct 2026 | 7 | 4 | 0 | | 26 Oct 2026 | 21 | 0 | 0 | | 2 Nov 2026 | 4 | 1 | 0 | | 9 Nov 2026 | 1087 | 26 | 1 | ## Microsoft technologies - [Microsoft Windows](https://junglewise.ai/threats/technologies/windows): 2,362 vulnerabilities - [Microsoft Windows 10](https://junglewise.ai/threats/technologies/windows-10): 589 vulnerabilities - [Microsoft Windows 11 24h2](https://junglewise.ai/threats/technologies/windows-11-24h2): 565 vulnerabilities - [Microsoft Windows 11 25h2](https://junglewise.ai/threats/technologies/windows-11-25h2): 534 vulnerabilities - [Microsoft Windows Server 2025](https://junglewise.ai/threats/technologies/windows-server-2025): 534 vulnerabilities - [Microsoft Windows Server 2022](https://junglewise.ai/threats/technologies/windows-server-2022): 528 vulnerabilities - [Microsoft Windows Server 2019](https://junglewise.ai/threats/technologies/windows-server-2019): 521 vulnerabilities - [Microsoft Windows Server 2012](https://junglewise.ai/threats/technologies/windows-server-2012): 517 vulnerabilities - [Microsoft Windows 11](https://junglewise.ai/threats/technologies/windows-11): 494 vulnerabilities - [Microsoft Windows Server 2016](https://junglewise.ai/threats/technologies/windows-server-2016): 476 vulnerabilities - [Microsoft Windows 10 1809](https://junglewise.ai/threats/technologies/windows-10-1809): 380 vulnerabilities - [Microsoft Windows 10 21h2](https://junglewise.ai/threats/technologies/windows-10-21h2): 373 vulnerabilities - [Microsoft Windows 10 22h2](https://junglewise.ai/threats/technologies/windows-10-22h2): 372 vulnerabilities - [Microsoft Windows 11 23h2](https://junglewise.ai/threats/technologies/windows-11-23h2): 365 vulnerabilities - [Microsoft Windows 11 26h1](https://junglewise.ai/threats/technologies/windows-11-26h1): 364 vulnerabilities - [Microsoft Windows 10 1607](https://junglewise.ai/threats/technologies/windows-10-1607): 312 vulnerabilities - [Microsoft Windows 11 26h2](https://junglewise.ai/threats/technologies/windows-11-26h2): 259 vulnerabilities - [Microsoft Edge](https://junglewise.ai/threats/technologies/edge): 187 vulnerabilities - [Microsoft SQL Server](https://junglewise.ai/threats/technologies/sql-server): 140 vulnerabilities - [Microsoft Windows 11 Version 26H1](https://junglewise.ai/threats/technologies/windows-11-version-26h1): 135 vulnerabilities - [Microsoft Office](https://junglewise.ai/threats/technologies/office): 134 vulnerabilities - [Microsoft Office Word](https://junglewise.ai/threats/technologies/office-word): 132 vulnerabilities - [Microsoft Windows Server 2022, 23H2](https://junglewise.ai/threats/technologies/windows-server-2022-23h2): 125 vulnerabilities - [Microsoft Windows Server 2008](https://junglewise.ai/threats/technologies/windows-server-2008): 116 vulnerabilities - [Microsoft Office Excel](https://junglewise.ai/threats/technologies/office-excel): 115 vulnerabilities - [Microsoft Windows 7](https://junglewise.ai/threats/technologies/windows-7): 100 vulnerabilities - [Microsoft Windows 8.1](https://junglewise.ai/threats/technologies/windows-8-1): 100 vulnerabilities - [Microsoft 365 Apps for Enterprise](https://junglewise.ai/threats/technologies/365-apps-for-enterprise): 84 vulnerabilities - [Microsoft Office LTSC 2021](https://junglewise.ai/threats/technologies/office-ltsc-2021): 82 vulnerabilities - [Microsoft Office LTSC 2024](https://junglewise.ai/threats/technologies/office-ltsc-2024): 82 vulnerabilities - [Microsoft Office 2019](https://junglewise.ai/threats/technologies/office-2019): 80 vulnerabilities - [Microsoft Office SharePoint](https://junglewise.ai/threats/technologies/office-sharepoint): 74 vulnerabilities - [Microsoft Windows Installer](https://junglewise.ai/threats/technologies/windows-installer): 73 vulnerabilities - [Microsoft Visual-Studio-Code](https://junglewise.ai/threats/technologies/visual-studio-code): 69 vulnerabilities - [Microsoft Windows Kernel](https://junglewise.ai/threats/technologies/windows-kernel): 68 vulnerabilities - [Microsoft Exchange Server](https://junglewise.ai/threats/technologies/exchange-server): 65 vulnerabilities - [Microsoft Windows Rt 8.1](https://junglewise.ai/threats/technologies/windows-rt-8-1): 65 vulnerabilities - [Microsoft Office 365 for Mac](https://junglewise.ai/threats/technologies/office-365-for-mac): 64 vulnerabilities - [Microsoft Windows Dns Server](https://junglewise.ai/threats/technologies/windows-dns): 60 vulnerabilities - [Microsoft 365 Apps](https://junglewise.ai/threats/technologies/365-apps): 54 vulnerabilities - [Microsoft .Net](https://junglewise.ai/threats/technologies/microsoft-net): 53 vulnerabilities - [Microsoft Remote Desktop Client](https://junglewise.ai/threats/technologies/remote-desktop-client): 53 vulnerabilities - [Microsoft Office Online Server](https://junglewise.ai/threats/technologies/office-online-server): 52 vulnerabilities - [Microsoft Sharepoint-Server](https://junglewise.ai/threats/technologies/sharepoint-server): 52 vulnerabilities - [Microsoft Windows DHCP Server](https://junglewise.ai/threats/technologies/windows-dhcp-server): 51 vulnerabilities - [Microsoft Internet Explorer](https://junglewise.ai/threats/technologies/internet-explorer): 50 vulnerabilities - [Microsoft Excel](https://junglewise.ai/threats/technologies/excel): 48 vulnerabilities - [Microsoft Office LTSC for Mac 2021](https://junglewise.ai/threats/technologies/office-ltsc-for-mac-2021): 45 vulnerabilities - [Microsoft Office LTSC for Mac 2024](https://junglewise.ai/threats/technologies/office-ltsc-for-mac-2024): 45 vulnerabilities - [Microsoft Visual Studio](https://junglewise.ai/threats/technologies/visual-studio): 43 vulnerabilities - [Microsoft Windows Vista](https://junglewise.ai/threats/technologies/windows-vista): 42 vulnerabilities - [Microsoft Office 2016](https://junglewise.ai/threats/technologies/office-2016): 40 vulnerabilities - [Microsoft Asp.net Core](https://junglewise.ai/threats/technologies/asp-net-core): 38 vulnerabilities - [Microsoft SharePoint](https://junglewise.ai/threats/technologies/sharepoint): 38 vulnerabilities - [Microsoft Edge Chromium](https://junglewise.ai/threats/technologies/edge-chromium): 37 vulnerabilities - [Microsoft SharePoint Server 2019](https://junglewise.ai/threats/technologies/sharepoint-server-2019): 37 vulnerabilities - [Microsoft Word](https://junglewise.ai/threats/technologies/word): 37 vulnerabilities - [Microsoft DNS Server](https://junglewise.ai/threats/technologies/microsoft-dns-server): 35 vulnerabilities - [Microsoft Windows NT](https://junglewise.ai/threats/technologies/windows-nt): 35 vulnerabilities - [Microsoft SharePoint Enterprise Server 2016](https://junglewise.ai/threats/technologies/sharepoint-enterprise-server-2016): 34 vulnerabilities - [Microsoft Windows Biometric Service](https://junglewise.ai/threats/technologies/windows-biometric-service): 34 vulnerabilities - [Microsoft Windows Hyper-V](https://junglewise.ai/threats/technologies/windows-hyper-v): 34 vulnerabilities - [Microsoft SharePoint Server Subscription Edition](https://junglewise.ai/threats/technologies/sharepoint-server-subscription-edition): 32 vulnerabilities - [Microsoft Excel 2016](https://junglewise.ai/threats/technologies/excel-2016): 31 vulnerabilities - [Microsoft Visual Studio 2022](https://junglewise.ai/threats/technologies/visual-studio-2022): 30 vulnerabilities - [Microsoft Office 2021](https://junglewise.ai/threats/technologies/office-2021): 29 vulnerabilities - [Microsoft Office 2024](https://junglewise.ai/threats/technologies/office-2024): 29 vulnerabilities - [Microsoft Office Access](https://junglewise.ai/threats/technologies/office-access): 29 vulnerabilities - [Microsoft Windows Server 2012 R2](https://junglewise.ai/threats/technologies/windows-server-2012-r2): 29 vulnerabilities - [Microsoft Office Outlook](https://junglewise.ai/threats/technologies/office-outlook): 25 vulnerabilities - [Microsoft Win32K](https://junglewise.ai/threats/technologies/win32k): 25 vulnerabilities - [Microsoft Office Long Term Servicing Channel](https://junglewise.ai/threats/technologies/office-long-term-servicing-channel): 24 vulnerabilities - [Microsoft .NET Framework](https://junglewise.ai/threats/technologies/net-framework): 23 vulnerabilities - [Microsoft Active Directory Federation Services](https://junglewise.ai/threats/technologies/active-directory-federation-services): 21 vulnerabilities - [Microsoft Windows Advanced Rasterization Platform](https://junglewise.ai/threats/technologies/windows-advanced-rasterization-platform): 20 vulnerabilities - [Microsoft Windows Server 2008 R2](https://junglewise.ai/threats/technologies/windows-server-2008-r2): 20 vulnerabilities - [Microsoft Windows 2000](https://junglewise.ai/threats/technologies/windows-2000): 19 vulnerabilities - [Microsoft Office PowerPoint](https://junglewise.ai/threats/technologies/office-powerpoint): 18 vulnerabilities - [Microsoft Windows Message Queuing](https://junglewise.ai/threats/technologies/windows-message-queuing): 18 vulnerabilities - [Microsoft Active Directory Domain Services](https://junglewise.ai/threats/technologies/active-directory-domain-services): 17 vulnerabilities - [Microsoft Windows NTFS](https://junglewise.ai/threats/technologies/windows-ntfs): 17 vulnerabilities - [Microsoft Windows Overlay Filter](https://junglewise.ai/threats/technologies/windows-overlay-filter): 17 vulnerabilities - [Microsoft Windows Server](https://junglewise.ai/threats/technologies/windows-server): 17 vulnerabilities - [Microsoft Standard XPS](https://junglewise.ai/threats/technologies/standard-xps): 16 vulnerabilities - [Microsoft Entra ID](https://junglewise.ai/threats/technologies/entra-id): 15 vulnerabilities - [Microsoft Graphics Component](https://junglewise.ai/threats/technologies/graphics-component): 15 vulnerabilities - [Microsoft UFO](https://junglewise.ai/threats/technologies/ufo): 15 vulnerabilities - [Microsoft 365 Copilot](https://junglewise.ai/threats/technologies/365-copilot): 14 vulnerabilities - [Microsoft Windows Admin Center](https://junglewise.ai/threats/technologies/windows-admin-center): 14 vulnerabilities - [Microsoft Kiota](https://junglewise.ai/threats/technologies/kiota): 12 vulnerabilities - [Microsoft Skype for Business](https://junglewise.ai/threats/technologies/skype-for-business): 12 vulnerabilities - [Microsoft Windows Print Spooler](https://junglewise.ai/threats/technologies/windows-print-spooler): 12 vulnerabilities - [Microsoft Windows Search Component](https://junglewise.ai/threats/technologies/windows-search-component): 12 vulnerabilities - [Microsoft Dynamics 365](https://junglewise.ai/threats/technologies/dynamics-365): 11 vulnerabilities - [Microsoft.OpenApi.Kiota](https://junglewise.ai/threats/technologies/microsoft-openapi-kiota): 11 vulnerabilities - [Microsoft Office for Android](https://junglewise.ai/threats/technologies/office-for-android): 11 vulnerabilities - [Microsoft Outlook](https://junglewise.ai/threats/technologies/outlook): 11 vulnerabilities - [Microsoft Windows Error Reporting](https://junglewise.ai/threats/technologies/windows-error-reporting): 11 vulnerabilities - [Microsoft Windows Imaging Component](https://junglewise.ai/threats/technologies/windows-imaging-component): 11 vulnerabilities - [Microsoft Windows PowerShell](https://junglewise.ai/threats/technologies/windows-powershell): 11 vulnerabilities - [Microsoft Azure CycleCloud](https://junglewise.ai/threats/technologies/azure-cyclecloud): 10 vulnerabilities - [Microsoft Defender](https://junglewise.ai/threats/technologies/defender): 10 vulnerabilities - [Microsoft.OpenApi.Kiota.Builder](https://junglewise.ai/threats/technologies/microsoft-openapi-kiota-builder): 10 vulnerabilities - [Microsoft SQL Server 2025](https://junglewise.ai/threats/technologies/sql-server-2025): 10 vulnerabilities - [Microsoft Windows Autopilot](https://junglewise.ai/threats/technologies/windows-autopilot): 10 vulnerabilities - [Microsoft Windows Client for NFS](https://junglewise.ai/threats/technologies/windows-client-for-nfs): 10 vulnerabilities - [Microsoft Windows Deployment Services](https://junglewise.ai/threats/technologies/windows-deployment-services): 10 vulnerabilities - [Microsoft Windows Modern Device Management](https://junglewise.ai/threats/technologies/windows-modern-device-management): 10 vulnerabilities - [Microsoft Azure-Monitor-Agent](https://junglewise.ai/threats/technologies/azure-monitor-agent): 9 vulnerabilities - [Microsoft Exchange Server Subscription Edition](https://junglewise.ai/threats/technologies/exchange-server-subscription-edition): 9 vulnerabilities - [Microsoft Hyper-V](https://junglewise.ai/threats/technologies/hyper-v): 9 vulnerabilities - [Microsoft M365 Copilot](https://junglewise.ai/threats/technologies/m365-copilot): 9 vulnerabilities - [Microsoft 365](https://junglewise.ai/threats/technologies/microsoft-365): 9 vulnerabilities - [Microsoft Windows Codecs Library](https://junglewise.ai/threats/technologies/windows-codecs-library): 9 vulnerabilities - [Microsoft Windows Media Foundation](https://junglewise.ai/threats/technologies/windows-media-foundation): 9 vulnerabilities - [Microsoft Network Policy Server](https://junglewise.ai/threats/technologies/network-policy-server): 8 vulnerabilities - [Microsoft PowerPoint](https://junglewise.ai/threats/technologies/powerpoint): 8 vulnerabilities - [Microsoft PowerShell](https://junglewise.ai/threats/technologies/powershell): 8 vulnerabilities - [Microsoft Remote Desktop Gateway Service](https://junglewise.ai/threats/technologies/remote-desktop-gateway-service): 8 vulnerabilities - [Microsoft SharePoint Server 2016 Enterprise Edition](https://junglewise.ai/threats/technologies/sharepoint-server-2016-enterprise-edition): 8 vulnerabilities - [Microsoft SQL Server 2022](https://junglewise.ai/threats/technologies/sql-server-2022): 8 vulnerabilities - [Microsoft Windows Broadcast DVR User Service](https://junglewise.ai/threats/technologies/windows-broadcast-dvr-user-service): 8 vulnerabilities - [Microsoft Windows Failover Cluster](https://junglewise.ai/threats/technologies/windows-failover-cluster): 8 vulnerabilities - [Microsoft Windows Hello](https://junglewise.ai/threats/technologies/windows-hello): 8 vulnerabilities - [Microsoft Windows Push Notifications](https://junglewise.ai/threats/technologies/windows-push-notifications): 8 vulnerabilities - [Microsoft Windows Remote Desktop Services](https://junglewise.ai/threats/technologies/windows-remote-desktop-services): 8 vulnerabilities - [Microsoft Windows Shell](https://junglewise.ai/threats/technologies/windows-shell): 8 vulnerabilities - [Microsoft Windows Storage](https://junglewise.ai/threats/technologies/windows-storage): 8 vulnerabilities - [Microsoft Windows Subsystem For Linux](https://junglewise.ai/threats/technologies/windows-subsystem-for-linux): 8 vulnerabilities - [Microsoft SQL Server 2016](https://junglewise.ai/threats/technologies/sql-server-2016): 7 vulnerabilities - [Microsoft SQL Server 2017](https://junglewise.ai/threats/technologies/sql-server-2017): 7 vulnerabilities - [Microsoft SQL Server 2019](https://junglewise.ai/threats/technologies/sql-server-2019): 7 vulnerabilities - [Microsoft Teams for Android](https://junglewise.ai/threats/technologies/teams-for-android): 7 vulnerabilities - [Microsoft Windows 95](https://junglewise.ai/threats/technologies/windows-95): 7 vulnerabilities - [Microsoft Windows iSCSI](https://junglewise.ai/threats/technologies/windows-iscsi): 7 vulnerabilities - [Microsoft Edge (Chromium-based) for Android](https://junglewise.ai/threats/technologies/edge-chromium-based-for-android): 6 vulnerabilities - [Microsoft Exchange Online](https://junglewise.ai/threats/technologies/exchange-online): 6 vulnerabilities - [Microsoft Internet Information Services](https://junglewise.ai/threats/technologies/internet-information-services): 6 vulnerabilities - [Microsoft .NET Core](https://junglewise.ai/threats/technologies/net-core): 6 vulnerabilities - [Microsoft OpenSSH for Windows](https://junglewise.ai/threats/technologies/openssh-for-windows): 6 vulnerabilities - [Microsoft PostScript Printer Driver](https://junglewise.ai/threats/technologies/postscript-printer-driver): 6 vulnerabilities - [Microsoft Streaming Service](https://junglewise.ai/threats/technologies/streaming-service): 6 vulnerabilities - [Microsoft Teams](https://junglewise.ai/threats/technologies/teams): 6 vulnerabilities - [Microsoft Windows Ancillary Function Driver for WinSock](https://junglewise.ai/threats/technologies/windows-ancillary-function-driver-for-winsock): 6 vulnerabilities - [Microsoft Windows BitLocker](https://junglewise.ai/threats/technologies/windows-bitlocker): 6 vulnerabilities - [Microsoft Windows Remote Access Connection Manager](https://junglewise.ai/threats/technologies/windows-remote-access-connection-manager): 6 vulnerabilities - [Microsoft Windows Services for NFS](https://junglewise.ai/threats/technologies/windows-services-for-nfs): 6 vulnerabilities - [Microsoft Windows SMB Client](https://junglewise.ai/threats/technologies/windows-smb-client): 6 vulnerabilities - [Microsoft Azure AI Foundry](https://junglewise.ai/threats/technologies/azure-ai-foundry): 5 vulnerabilities - [Microsoft Azure Arc](https://junglewise.ai/threats/technologies/azure-arc): 5 vulnerabilities - [Microsoft Azure-Kubernetes-Service](https://junglewise.ai/threats/technologies/azure-kubernetes-service): 5 vulnerabilities - [Microsoft Azure Sql Database](https://junglewise.ai/threats/technologies/azure-sql-database): 5 vulnerabilities - [Microsoft Configuration Manager](https://junglewise.ai/threats/technologies/configuration-manager): 5 vulnerabilities - [Microsoft Defender for Endpoint](https://junglewise.ai/threats/technologies/defender-for-endpoint): 5 vulnerabilities - [Microsoft Dynamics 365 (on-premises)](https://junglewise.ai/threats/technologies/dynamics-365-on-premises): 5 vulnerabilities - [Microsoft Exchange Server 2016](https://junglewise.ai/threats/technologies/exchange-server-2016): 5 vulnerabilities - [Microsoft Exchange Server 2019](https://junglewise.ai/threats/technologies/exchange-server-2019): 5 vulnerabilities - [Microsoft GitHub Copilot Chat](https://junglewise.ai/threats/technologies/github-copilot-chat): 5 vulnerabilities - [Microsoft Internet Information Services (Iis)](https://junglewise.ai/threats/technologies/internet-information-services-iis): 5 vulnerabilities - [Microsoft Account](https://junglewise.ai/threats/technologies/microsoft-account): 5 vulnerabilities - [Microsoft Windows Update](https://junglewise.ai/threats/technologies/microsoft-windows-update): 5 vulnerabilities - [Microsoft Office Visio](https://junglewise.ai/threats/technologies/office-visio): 5 vulnerabilities - [Microsoft Partner Center](https://junglewise.ai/threats/technologies/partner-center): 5 vulnerabilities - [Microsoft PC Manager](https://junglewise.ai/threats/technologies/pc-manager): 5 vulnerabilities - [Microsoft WDAC OLE DB provider for SQL](https://junglewise.ai/threats/technologies/wdac-ole-db-provider-for-sql): 5 vulnerabilities - [Microsoft Windows 11 22h2](https://junglewise.ai/threats/technologies/windows-11-22h2): 5 vulnerabilities - [Microsoft Windows Device Association Service](https://junglewise.ai/threats/technologies/windows-device-association-service): 5 vulnerabilities - [Microsoft Windows IKE Extension](https://junglewise.ai/threats/technologies/windows-ike-extension): 5 vulnerabilities - [Microsoft Windows iSCSI Target Service](https://junglewise.ai/threats/technologies/windows-iscsi-target-service): 5 vulnerabilities - [Microsoft Windows Management Instrumentation](https://junglewise.ai/threats/technologies/windows-management-instrumentation): 5 vulnerabilities - [Microsoft Windows Media Player](https://junglewise.ai/threats/technologies/windows-media-player): 5 vulnerabilities - [Microsoft Windows Presentation Foundation](https://junglewise.ai/threats/technologies/windows-presentation-foundation): 5 vulnerabilities - [Microsoft Windows Presentation Foundation (WPF)](https://junglewise.ai/threats/technologies/windows-presentation-foundation-wpf): 5 vulnerabilities - [Microsoft Windows Raw Image Extension](https://junglewise.ai/threats/technologies/windows-raw-image-extension): 5 vulnerabilities - [Microsoft Windows Secure Boot](https://junglewise.ai/threats/technologies/windows-secure-boot): 5 vulnerabilities - [Microsoft Windows Storport Miniport Driver](https://junglewise.ai/threats/technologies/windows-storport-miniport-driver): 5 vulnerabilities - [Microsoft 365 Copilot Chat](https://junglewise.ai/threats/technologies/365-copilot-chat): 4 vulnerabilities - [Microsoft Active Directory](https://junglewise.ai/threats/technologies/active-directory): 4 vulnerabilities - [Microsoft Azure Attestation](https://junglewise.ai/threats/technologies/azure-attestation): 4 vulnerabilities - [Microsoft Azure Cosmos DB](https://junglewise.ai/threats/technologies/azure-cosmos-db): 4 vulnerabilities - [Microsoft Azure-Key-Vault](https://junglewise.ai/threats/technologies/azure-key-vault): 4 vulnerabilities - [Microsoft Azure Logic Apps](https://junglewise.ai/threats/technologies/azure-logic-apps): 4 vulnerabilities - [Microsoft Device Health Attestation Service](https://junglewise.ai/threats/technologies/device-health-attestation-service): 4 vulnerabilities - [Microsoft Dynamics Business Central](https://junglewise.ai/threats/technologies/dynamics-business-central): 4 vulnerabilities - [Microsoft JScript](https://junglewise.ai/threats/technologies/jscript): 4 vulnerabilities - [Microsoft Malware Protection Engine](https://junglewise.ai/threats/technologies/malware-protection-engine): 4 vulnerabilities - [Microsoft QUIC](https://junglewise.ai/threats/technologies/microsoft-quic): 4 vulnerabilities - [Microsoft System.Security.Cryptography.Xml](https://junglewise.ai/threats/technologies/microsoft-system-security-cryptography-xml): 4 vulnerabilities - [Microsoft NetX](https://junglewise.ai/threats/technologies/netx): 4 vulnerabilities - [Microsoft Office Click-to-Run](https://junglewise.ai/threats/technologies/office-click-to-run): 4 vulnerabilities - [Microsoft Open Management Infrastructure (OMI)](https://junglewise.ai/threats/technologies/open-management-infrastructure-omi): 4 vulnerabilities - [Microsoft SimpleChat](https://junglewise.ai/threats/technologies/simplechat): 4 vulnerabilities - [Microsoft Windows Active Directory](https://junglewise.ai/threats/technologies/windows-active-directory): 4 vulnerabilities - [Microsoft Windows Cloud Files Mini Filter Driver](https://junglewise.ai/threats/technologies/windows-cloud-files-mini-filter-driver): 4 vulnerabilities - [Microsoft Windows Internet Information Services](https://junglewise.ai/threats/technologies/windows-internet-information-services): 4 vulnerabilities - [Microsoft Windows Kerberos](https://junglewise.ai/threats/technologies/windows-kerberos): 4 vulnerabilities - [Microsoft Windows Media](https://junglewise.ai/threats/technologies/windows-media): 4 vulnerabilities - [Microsoft Windows Remote Desktop](https://junglewise.ai/threats/technologies/windows-remote-desktop): 4 vulnerabilities - [Microsoft Windows Smart Card](https://junglewise.ai/threats/technologies/windows-smart-card): 4 vulnerabilities - [Microsoft Active Directory Certificate Services](https://junglewise.ai/threats/technologies/active-directory-certificate-services): 3 vulnerabilities - [Microsoft Apm-Cli](https://junglewise.ai/threats/technologies/apm-cli): 3 vulnerabilities - [Microsoft Authentication Library (MSAL) for Node.js](https://junglewise.ai/threats/technologies/authentication-library-msal-for-node-js): 3 vulnerabilities - [Microsoft Azure Compute Gallery](https://junglewise.ai/threats/technologies/azure-compute-gallery): 3 vulnerabilities - [Microsoft Azure Connected Machine Agent](https://junglewise.ai/threats/technologies/azure-connected-machine-agent): 3 vulnerabilities - [Microsoft Azure DevOps](https://junglewise.ai/threats/technologies/azure-devops): 3 vulnerabilities - [Microsoft Azure DevOps Server](https://junglewise.ai/threats/technologies/azure-devops-server): 3 vulnerabilities - [Microsoft Azure Machine Learning](https://junglewise.ai/threats/technologies/azure-machine-learning): 3 vulnerabilities - [Microsoft Azure Managed Instance for Apache Cassandra](https://junglewise.ai/threats/technologies/azure-managed-instance-for-apache-cassandra): 3 vulnerabilities - [Microsoft Bing](https://junglewise.ai/threats/technologies/bing): 3 vulnerabilities - [Microsoft BitLocker](https://junglewise.ai/threats/technologies/bitlocker): 3 vulnerabilities - [Microsoft Configuration Manager 2503](https://junglewise.ai/threats/technologies/configuration-manager-2503): 3 vulnerabilities - [Microsoft DiaSymReader.Native](https://junglewise.ai/threats/technologies/diasymreader-native): 3 vulnerabilities - [Microsoft Edge for Android](https://junglewise.ai/threats/technologies/edge-for-android): 3 vulnerabilities - [Microsoft Graph](https://junglewise.ai/threats/technologies/graph): 3 vulnerabilities - [Microsoft Kiota.Builder](https://junglewise.ai/threats/technologies/kiota-builder): 3 vulnerabilities - [Microsoft MSHTML](https://junglewise.ai/threats/technologies/mshtml): 3 vulnerabilities - [Microsoft MsQuic](https://junglewise.ai/threats/technologies/msquic): 3 vulnerabilities - [Microsoft .NET 10](https://junglewise.ai/threats/technologies/net-10): 3 vulnerabilities - [Microsoft .NET 8](https://junglewise.ai/threats/technologies/net-8): 3 vulnerabilities - [Microsoft .NET 9](https://junglewise.ai/threats/technologies/net-9): 3 vulnerabilities - [Microsoft .NET Aspire](https://junglewise.ai/threats/technologies/net-aspire): 3 vulnerabilities - [Microsoft .NET Core Runtime](https://junglewise.ai/threats/technologies/net-core-runtime): 3 vulnerabilities - [Microsoft .NET Runtime](https://junglewise.ai/threats/technologies/net-runtime): 3 vulnerabilities - [Microsoft Network Device Enrollment Service](https://junglewise.ai/threats/technologies/network-device-enrollment-service): 3 vulnerabilities - [Microsoft Power Apps](https://junglewise.ai/threats/technologies/power-apps): 3 vulnerabilities - [Microsoft Power Automate](https://junglewise.ai/threats/technologies/power-automate): 3 vulnerabilities - [Microsoft Power BI Report Server](https://junglewise.ai/threats/technologies/power-bi-report-server): 3 vulnerabilities - [Microsoft PowerPoint 2016](https://junglewise.ai/threats/technologies/powerpoint-2016): 3 vulnerabilities - [Microsoft Prompty](https://junglewise.ai/threats/technologies/prompty): 3 vulnerabilities - [Microsoft RPC Runtime](https://junglewise.ai/threats/technologies/rpc-runtime): 3 vulnerabilities - [Microsoft Silverlight](https://junglewise.ai/threats/technologies/silverlight): 3 vulnerabilities - [Microsoft SQL Server 2016 Service Pack 3 (GDR)](https://junglewise.ai/threats/technologies/sql-server-2016-service-pack-3-gdr): 3 vulnerabilities - [Microsoft SQL Server 2017 (CU 31)](https://junglewise.ai/threats/technologies/sql-server-2017-cu-31): 3 vulnerabilities - [Microsoft SQL Server 2019 (CU 32)](https://junglewise.ai/threats/technologies/sql-server-2019-cu-32): 3 vulnerabilities - [Microsoft SQL Server 2022 (GDR)](https://junglewise.ai/threats/technologies/sql-server-2022-gdr): 3 vulnerabilities - [Microsoft SysInternals](https://junglewise.ai/threats/technologies/sysinternals): 3 vulnerabilities - [Microsoft Trace Data Helper](https://junglewise.ai/threats/technologies/trace-data-helper): 3 vulnerabilities - [Microsoft Virtual Hard Disk Miniport Driver](https://junglewise.ai/threats/technologies/virtual-hard-disk-miniport-driver): 3 vulnerabilities - [Microsoft Windows 11 21h2](https://junglewise.ai/threats/technologies/windows-11-21h2): 3 vulnerabilities - [Microsoft Windows Audio Service](https://junglewise.ai/threats/technologies/windows-audio-service): 3 vulnerabilities - [Microsoft Windows DirectMusic](https://junglewise.ai/threats/technologies/windows-directmusic): 3 vulnerabilities - [Microsoft Windows FileCrypt Driver](https://junglewise.ai/threats/technologies/windows-filecrypt-driver): 3 vulnerabilities - [Microsoft Windows HTTP.sys](https://junglewise.ai/threats/technologies/windows-http-sys): 3 vulnerabilities - [Microsoft Windows Image Acquisition](https://junglewise.ai/threats/technologies/windows-image-acquisition): 3 vulnerabilities - [Microsoft Windows Kernel-Mode Drivers](https://junglewise.ai/threats/technologies/windows-kernel-mode-drivers): 3 vulnerabilities - [Microsoft Windows NT 4.0](https://junglewise.ai/threats/technologies/windows-nt-4-0): 3 vulnerabilities - [Microsoft Windows OLE DB](https://junglewise.ai/threats/technologies/windows-ole-db): 3 vulnerabilities - [Microsoft Windows Performance Monitor](https://junglewise.ai/threats/technologies/windows-performance-monitor): 3 vulnerabilities - [Microsoft Windows Remote Desktop Protocol](https://junglewise.ai/threats/technologies/windows-remote-desktop-protocol): 3 vulnerabilities - [Microsoft Windows RRAS](https://junglewise.ai/threats/technologies/windows-rras): 3 vulnerabilities - [Microsoft Windows (Schannel)](https://junglewise.ai/threats/technologies/windows-schannel): 3 vulnerabilities - [Microsoft Windows Search](https://junglewise.ai/threats/technologies/windows-search): 3 vulnerabilities - [Microsoft Windows Security Center](https://junglewise.ai/threats/technologies/windows-security-center): 3 vulnerabilities - [Microsoft Windows Server 2003](https://junglewise.ai/threats/technologies/windows-server-2003): 3 vulnerabilities - [Microsoft Windows Server Update Service](https://junglewise.ai/threats/technologies/windows-server-update-service): 3 vulnerabilities - [Microsoft Windows Server Update Services (WSUS)](https://junglewise.ai/threats/technologies/windows-server-update-services-wsus): 3 vulnerabilities - [Microsoft Windows Servicing Stack Updates](https://junglewise.ai/threats/technologies/windows-servicing-stack-updates): 3 vulnerabilities - [Microsoft Windows Setup Files Cleanup](https://junglewise.ai/threats/technologies/windows-setup-files-cleanup): 3 vulnerabilities - [Microsoft Windows Storage Spaces Controller](https://junglewise.ai/threats/technologies/windows-storage-spaces-controller): 3 vulnerabilities - [Microsoft Windows TCP/IP](https://junglewise.ai/threats/technologies/windows-tcp-ip): 3 vulnerabilities - [Microsoft Windows USB Driver](https://junglewise.ai/threats/technologies/windows-usb-driver): 3 vulnerabilities - [Microsoft Windows XP](https://junglewise.ai/threats/technologies/windows-xp): 3 vulnerabilities - [Microsoft WindowsDesktop.App.Runtime.win-arm64](https://junglewise.ai/threats/technologies/windowsdesktop-app-runtime-win-arm64): 3 vulnerabilities - [Microsoft WindowsDesktop.App.Runtime.win-x64](https://junglewise.ai/threats/technologies/windowsdesktop-app-runtime-win-x64): 3 vulnerabilities - [Microsoft WindowsDesktop.App.Runtime.win-x86](https://junglewise.ai/threats/technologies/windowsdesktop-app-runtime-win-x86): 3 vulnerabilities - [Microsoft Xbox](https://junglewise.ai/threats/technologies/xbox): 3 vulnerabilities - [Microsoft XML Core Services](https://junglewise.ai/threats/technologies/xml-core-services): 3 vulnerabilities - [Microsoft XPS Document Converter](https://junglewise.ai/threats/technologies/xps-document-converter): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Microsoft vulnerabilities", https://junglewise.ai/threats/vendors/microsoft, 13 November 2026.