CVE Tools
Track your stack

Microsoft

17,792 CVEs tracked since 1999. Since Oct 2021, 181 of them reached CISA KEV.

Microsoft CVEs per month

Oct 2021 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Microsoft CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2021-10946
2021-11875
2021-12963
2022-011032
2022-02984
2022-03720
2022-041812
2022-05762
2022-06631
2022-071632
2022-081261
2022-09904
2022-10944
2022-111037
2022-12552
2023-011091
2023-02934
2023-03no snapshot
2023-041124
2023-05612
2023-06973
2023-071435
2023-08891
2023-09675
2023-101184
2023-11835
2023-12541
2024-01821
2024-02905
2024-03732
2024-041751
2024-05813
2024-06853
2024-071593
2024-081448
2024-091074
2024-101523
2024-111063
2024-12911
2025-011843
2025-02743
2025-03708
2025-041461
2025-05855
2025-06764
2025-071494
2025-081240
2025-091091
2025-101833
2025-111093
2025-12722
2026-011343
2026-02797
2026-031442
2026-041853
2026-052783
2026-062650
2026-076644
2026-084791
2026-0910032
2026-1014872
2026-110

Products

The products that kept showing up in Microsoft's monthly top three, with their CVEs summed over those months.

  1. Windows Server 20253,51420 months
  2. Windows Server 2025 (Server Core Installation)3,28317 months
  3. Windows Server 20221,67221 months
  4. Windows 11 Version 24h21,1274 months
  5. Windows Server 2022, 23h2 Edition (Server Core Installation)95215 months
  6. Windows Server 2022 (Server Core Installation)70813 months
  7. Windows Server 201949810 months
  8. Windows 11 Version 26h14932 months
  9. Windows Server 2019 (Server Core Installation)4438 months
  10. Windows Server 2022 23h24017 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Microsoft.

  1. CVE-2026-109469Entra Device Registration Elevation of Privilege Vulnerability10.0
  2. CVE-2026-118147Visual Studio Spoofing Vulnerability7.4
  3. CVE-2026-69446Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability4.4
  4. CVE-2026-88078Microsoft Edge (Chromium-based) Spoofing Vulnerability4.3
  5. CVE-2026-88077Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability8.8
  6. CVE-2026-96196Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability8.8
  7. CVE-2026-96187Microsoft Edge (Chromium-based) Information Disclosure Vulnerability7.4
  8. CVE-2026-85899Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability8.1
  9. CVE-2026-88090Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability5.4
  10. CVE-2026-85330Microsoft Edge for Android Security Feature Bypass Vulnerability4.3
  11. CVE-2026-114148ASP.NET Core Elevation of Privilege Vulnerability7.8
  12. CVE-2026-96203Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability8.8
  13. CVE-2026-20942Microsoft Edge (Chromium-based) Spoofing Vulnerability4.3
  14. CVE-2026-96192Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability8.8
  15. CVE-2026-96198Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability8.8

The record

Peak rank
#1 in Oct 2026
Busiest month shown
Oct 2026, 1,487 CVEs
Months with a KEV entry
57 since Oct 2021
Monthly snapshots
299 since 1999
Microsoft's full record, month by month