Microsoft vulnerabilities

17,342 vulnerabilities

Known vulnerabilities in Microsoft products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2,370 products.

Products

50 of 2,370
5.3CVE-2026-80092microsoftmicrosoft-identity-web
EPSS score
0.60%
Authentication bypass by assumed-immutable data in Microsoft Identity Web allows an authorized attacker to elevate privileges over a network.5.9CVE-2026-109461microsoftmicrosoft identity client for nodejs
EPSS score
0.35%
Origin validation error in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to disclose information over a network.7.5CVE-2026-109468microsoftmicrosoft visual studio 2022 version 17.14+2
EPSS score
0.65%
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.6.5CVE-2026-108455microsoft365_apps+9
EPSS score
0.51%
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.6.5CVE-2026-108454microsoft365_apps+9
EPSS score
0.51%
Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.6.5CVE-2026-108453microsoft365_apps+9
EPSS score
0.53%
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.8.8CVE-2026-108452microsoftmicrosoft sharepoint server subscription edition+1
EPSS score
0.63%
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.8.8CVE-2026-108451microsoft365_apps+5
EPSS score
0.44%
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.8.8CVE-2026-108450microsoft365_apps+5
EPSS score
0.44%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.8.8CVE-2026-108449microsoft365_apps+9
EPSS score
0.44%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.7.5CVE-2026-108448microsoft365_apps+9
EPSS score
0.35%
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.8.8CVE-2026-108447microsoft365_apps+5
EPSS score
0.44%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.8.8CVE-2026-108446microsoft365_apps+10
EPSS score
0.44%
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.8.8CVE-2026-108445microsoft365_apps+9
EPSS score
0.44%
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.8.8CVE-2026-108444microsoft365_apps+9
EPSS score
0.44%
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.8.8CVE-2026-108443microsoft365_apps+9
EPSS score
0.44%
Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.8.8CVE-2026-108442microsoftmicrosoft 365 apps for enterprise+5
EPSS score
0.44%
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.8.8CVE-2026-108441microsoftmicrosoft 365 apps for enterprise+5
EPSS score
0.44%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.8.8CVE-2026-108440microsoftmicrosoft 365 apps for enterprise+5
EPSS score
0.44%
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.8.8CVE-2026-108439microsoftmicrosoft 365 apps for enterprise+5
EPSS score
0.44%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.