CVE Tools
Track your stack

Microsoft

16,303 CVEs tracked since 1999. Since Sep 2021, 186 of them reached CISA KEV.

Microsoft CVEs per month

Sep 2021 to Sep 2026. Point at a month, or focus the strip and use the arrow keys.
Microsoft CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2021-09877
2021-10946
2021-11875
2021-12963
2022-011032
2022-02984
2022-03720
2022-041812
2022-05762
2022-06631
2022-071632
2022-081261
2022-09904
2022-10944
2022-111037
2022-12552
2023-011091
2023-02934
2023-03null or fewer
2023-041124
2023-05612
2023-06973
2023-071435
2023-08891
2023-09675
2023-101184
2023-11835
2023-12541
2024-01821
2024-02905
2024-03732
2024-041751
2024-05813
2024-06853
2024-071593
2024-081448
2024-091074
2024-101523
2024-111063
2024-12911
2025-011843
2025-02743
2025-03708
2025-041461
2025-05855
2025-06764
2025-071494
2025-081240
2025-091091
2025-101833
2025-111093
2025-12722
2026-011343
2026-02797
2026-031442
2026-041853
2026-052783
2026-062650
2026-076644
2026-084791
2026-0910012

Products

The products that kept showing up in Microsoft's monthly top three, with their CVEs summed over those months.

  1. Windows Server 20252,46419 months
  2. Windows Server 2025 (Server Core Installation)2,23316 months
  3. Windows Server 20221,67221 months
  4. Windows Server 2022, 23h2 Edition (Server Core Installation)95215 months
  5. Windows Server 2022 (Server Core Installation)70813 months
  6. Windows Server 201949810 months
  7. Windows 11 Version 26h14932 months
  8. Windows Server 2019 (Server Core Installation)4438 months
  9. Windows Server 2022 23h24017 months
  10. Microsoft Edge3446 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Microsoft.

  1. CVE-2026-100208Microsoft Office Outlook Remote Code Execution Vulnerability7.5
  2. CVE-2026-70125Microsoft Office Outlook Remote Code Execution Vulnerability8.8
  3. CVE-2026-88097Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability8.1
  4. CVE-2026-85887M365 Copilot Information Disclosure Vulnerability7.7
  5. CVE-2026-83946Azure Portal Spoofing Vulnerability8.2
  6. CVE-2026-69843Microsoft Fabric Elevation of Privilege Vulnerability10.0
  7. CVE-2026-85878Azure Database for PostgreSQL Elevation of Privilege Vulnerability9.9
  8. CVE-2026-62874Azure Billing Elevation of Privilege Vulnerability10.0
  9. CVE-2026-85917Azure AI Foundry Elevation of Privilege Vulnerability7.5
  10. CVE-2026-85889Azure AI Foundry Elevation of Privilege Vulnerability10.0
  11. CVE-2026-70200Azure Logic Apps Elevation of Privilege Vulnerability10.0
  12. CVE-2026-87701Azure Cosmos DB Elevation of Privilege Vulnerability9.6
  13. CVE-2026-83944Azure Logic Apps Elevation of Privilege Vulnerability10.0
  14. CVE-2026-78501Microsoft 365 Copilot Business Chat Information Disclosure Vulnerability7.4
  15. CVE-2026-85885Microsoft 365 Copilot Elevation of Privilege Vulnerability9.9

The record

Peak rank
#1 in Apr 2023
Busiest month shown
Sep 2026, 1,001 CVEs
Months with a KEV entry
57 since Sep 2021
Monthly snapshots
298 since 1999
Microsoft's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store