CVE Tools
Track your stack

Microsoft

16,324 CVEs tracked since 1999. Since Oct 2021, 179 of them reached CISA KEV.

Microsoft CVEs per month

Oct 2021 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Microsoft CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2021-10946
2021-11875
2021-12963
2022-011032
2022-02984
2022-03720
2022-041812
2022-05762
2022-06631
2022-071632
2022-081261
2022-09904
2022-10944
2022-111037
2022-12552
2023-011091
2023-02934
2023-03no snapshot
2023-041124
2023-05612
2023-06973
2023-071435
2023-08891
2023-09675
2023-101184
2023-11835
2023-12541
2024-01821
2024-02905
2024-03732
2024-041751
2024-05813
2024-06853
2024-071593
2024-081448
2024-091074
2024-101523
2024-111063
2024-12911
2025-011843
2025-02743
2025-03708
2025-041461
2025-05855
2025-06764
2025-071494
2025-081240
2025-091091
2025-101833
2025-111093
2025-12722
2026-011343
2026-02797
2026-031442
2026-041853
2026-052783
2026-062650
2026-076644
2026-084791
2026-0910032
2026-10190

Products

The products that kept showing up in Microsoft's monthly top three, with their CVEs summed over those months.

  1. Windows Server 20252,46419 months
  2. Windows Server 2025 (Server Core Installation)2,23316 months
  3. Windows Server 20221,67221 months
  4. Windows Server 2022, 23h2 Edition (Server Core Installation)95215 months
  5. Windows Server 2022 (Server Core Installation)70813 months
  6. Windows Server 201949810 months
  7. Windows 11 Version 26h14932 months
  8. Windows Server 2019 (Server Core Installation)4438 months
  9. Windows Server 2022 23h24017 months
  10. Microsoft Edge3446 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Microsoft.

  1. CVE-2026-88164Microsoft Office SharePoint Elevation of Privilege Vulnerability8.8
  2. CVE-2026-94512SQL Server Remote Code Execution Vulnerability8.8
  3. CVE-2026-94520Microsoft SQL Server Denial of Service Vulnerability4.9
  4. CVE-2026-88089Microsoft SQL Server Remote Code Execution Vulnerability6.7
  5. CVE-2026-88085Microsoft SQL Server Elevation of Privilege Vulnerability6.4
  6. CVE-2026-88086Microsoft SQL Server Information Disclosure Vulnerability5.3
  7. CVE-2026-88088Microsoft SQL Server Elevation of Privilege Vulnerability7.0
  8. CVE-2026-88084Microsoft SQL Server Denial of Service Vulnerability5.3
  9. CVE-2026-85919Microsoft SQL Server Elevation of Privilege Vulnerability7.0
  10. CVE-2026-88081Microsoft SQL Server Information Disclosure Vulnerability7.7
  11. CVE-2026-88083Microsoft SQL Server Remote Code Execution Vulnerability7.5
  12. CVE-2026-88082Microsoft SQL Server Elevation of Privilege Vulnerability7.0
  13. CVE-2026-85888Microsoft SQL Server Information Disclosure Vulnerability7.7
  14. CVE-2026-62840Linux Kernel Elevation of Privilege Vulnerability7.0
  15. CVE-2026-67626Microsoft SQL Server Denial of Service Vulnerability6.5

The record

Peak rank
#1 in Apr 2023
Busiest month shown
Sep 2026, 1,003 CVEs
Months with a KEV entry
56 since Oct 2021
Monthly snapshots
299 since 1999
Microsoft's full record, month by month