CVE security advisories and vulnerability history for microsoft.
microsoft has 36,677 published CVE records since 1999, of which 514 are in CISA's Known Exploited Vulnerabilities catalog and 3,666 have a known public exploit. The average CVSS base score across scored CVEs is 7.2.
This page aggregates every publicly disclosed vulnerability (CVE) affecting microsoft products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.
A quick read on microsoft's vulnerability posture, as a share of its 36,677 published CVEs.
across 36,376 scored CVEs
23,415 of 36,376 scored
514 of 36,677 CVEs
3,666 of 36,677 CVEs
25,761 of 36,677 CVEs
How the CVSS severity of microsoft's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
301 additional CVEs have no CVSS severity score.
In CISA’s Known Exploited Vulnerabilities catalog
514
514 of microsoft's CVEs are confirmed exploited in the wild.
Public exploits
3,666
3,666 of microsoft's CVEs have a known public exploit available.
The microsoft products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.
The CWE weakness categories most often found in microsoft CVEs. Follow any weakness for its full explanation.
The CVE Numbering Authorities that publish microsoft CVE records.
How many microsoft CVEs were published each year.
The most recently disclosed vulnerabilities affecting microsoft.
Track new microsoft CVEs as they are disclosed and get AI-written analysis and remediation guidance.
Monitor microsoft CVEsBrowse vulnerabilities for other tracked vendors.
Common questions about microsoft vulnerabilities.
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Monitor new microsoft vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.
