Microsoft vulnerabilities
115 advisories tracked, 115 actively exploited. Last update: October 13, 2026.
By product: Windows e Windows Server (73) · SharePoint (14) · SQL Server (2) · Active Directory / ADFS (1) · Edge / Internet Explorer (5) · Defender (3) · Exchange Server (4) · Office / Outlook (12) · Configuration Manager (SCCM) / Intune (1) · .NET / Visual Studio (1)
Running Microsoft devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on Microsoft alerts
Turn on Microsoft alerts
- Microsoft Windows Command Injection Vulnerability
- Microsoft SharePoint Code Injection Vulnerability
- Microsoft Windows Link Following Vulnerability
- Microsoft Windows Heap-Based Buffer Overflow Vulnerability
- Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability
- Microsoft SharePoint Weak Authentication Vulnerability
- Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
- Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
- Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
- Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability
- Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability
- Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability
- Microsoft Windows Buffer Overflow Vulnerability
- Microsoft DirectX NULL Byte Overwrite Vulnerability
- Microsoft Internet Explorer Use-After-Free Vulnerability
- Microsoft Internet Explorer Use-After-Free Vulnerability
- Microsoft Defender Link Following Vulnerability
- Microsoft Defender Denial of Service Vulnerability
- Microsoft Exchange Server Cross-Site Scripting Vulnerability
- Microsoft Windows Protection Mechanism Failure Vulnerability
- Microsoft Defender Insufficient Granularity of Access Control Vulnerability
- Microsoft Office Remote Code Execution
- Microsoft SharePoint Server Improper Input Validation Vulnerability
- Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability
- Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability
- Microsoft Windows Link Following Vulnerability
- Microsoft Windows Out-of-Bounds Read Vulnerability
- Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
- Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability
- Microsoft Configuration Manager SQL Injection Vulnerability
- Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability
- Microsoft Windows Shell Protection Mechanism Failure Vulnerability
- Microsoft Windows Improper Privilege Management Vulnerability
- Microsoft Windows Type Confusion Vulnerability
- Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability
- Microsoft Windows NULL Pointer Dereference Vulnerability
- Microsoft Office Security Feature Bypass Vulnerability
- Microsoft Windows Information Disclosure Vulnerability
- Microsoft Office PowerPoint Code Injection Vulnerability
- Microsoft Windows Use After Free Vulnerability
- Microsoft Windows Race Condition Vulnerability
- Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability
- Microsoft Windows SMB Client Improper Access Control Vulnerability
- Microsoft Windows Untrusted Pointer Dereference Vulnerability
- Microsoft Windows Improper Access Control Vulnerability
- Microsoft Windows Out-of-Bounds Write Vulnerability
- Microsoft Windows Remote Code Execution Vulnerability
- Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability
- Microsoft Windows Privilege Escalation Vulnerability
- Microsoft Office Excel Remote Code Execution Vulnerability
- Microsoft Internet Explorer Resource Management Errors Vulnerability
- Microsoft SharePoint Code Injection Vulnerability
- Microsoft SharePoint Improper Authentication Vulnerability
- Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
- Microsoft Windows External Control of File Name or Path Vulnerability
- Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
- Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability
- Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability
- Microsoft Windows DWM Core Library Use-After-Free Vulnerability
- Microsoft Windows Scripting Engine Type Confusion Vulnerability
- Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability
- Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability
- Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability
- Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability
- Microsoft Windows Win32k Use-After-Free Vulnerability
- Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability
- Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability
- Microsoft Windows NTFS Information Disclosure Vulnerability
- Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability
- Microsoft Partner Center Improper Access Control Vulnerability
- Microsoft Power Pages Improper Access Control Vulnerability
- Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability
- Microsoft Windows Storage Link Following Vulnerability
- Microsoft Outlook Improper Input Validation Vulnerability
- Microsoft .NET Framework Information Disclosure Vulnerability
- Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability
- Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability
- Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability
- Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability
- Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability
- Microsoft Windows Task Scheduler Privilege Escalation Vulnerability
- Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability
- Microsoft SharePoint Deserialization Vulnerability
- Microsoft Windows Kernel TOCTOU Race Condition Vulnerability
- Microsoft Windows Management Console Remote Code Execution Vulnerability
- Microsoft Windows MSHTML Platform Spoofing Vulnerability
- Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability
- Microsoft Windows MSHTML Platform Spoofing Vulnerability
- Microsoft Windows Installer Improper Privilege Management Vulnerability
- Microsoft Publisher Protection Mechanism Failure Vulnerability
- Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability
- Microsoft Exchange Server Information Disclosure Vulnerability
- Microsoft Project Remote Code Execution Vulnerability
- Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability
- Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability
- Microsoft Windows Scripting Engine Memory Corruption Vulnerability
- Microsoft Windows Kernel Privilege Escalation Vulnerability
- Microsoft Windows SmartScreen Security Feature Bypass Vulnerability
- Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability
- Microsoft Internet Explorer Use-After-Free Vulnerability
- Microsoft Windows Hyper-V Privilege Escalation Vulnerability
- Microsoft Windows MSHTML Platform Spoofing Vulnerability
- Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability
- Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability
- Microsoft DWM Core Library Privilege Escalation Vulnerability
- Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability
- Microsoft Windows Print Spooler Privilege Escalation Vulnerability
- Microsoft SharePoint Server Code Injection Vulnerability
- Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability
- Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability
- Microsoft Exchange Server Privilege Escalation Vulnerability
- Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability
- Microsoft Windows SmartScreen Security Feature Bypass Vulnerability
- Microsoft SharePoint Server Privilege Escalation Vulnerability