VulnSea

Microsoft has 2,953 CVEs on record between 2013 and 2026. Disclosure cadence is accelerating: 2136 in the last 90 days against 414 in the 90 before. The busiest recent month was September 2026 with 1005. The median CVSS is 7.8 (high), with 178 rated critical. 3% have been exploited in the wild, in line with the corpus average. The median gap from publication to a KEV listing is 113 days (91 cases). The dominant weakness classes are CWE-122 (585) and CWE-416 (512). Most affected products: windows_10_1607 (644), Windows 10 Version 1607 (481), Microsoft 365 Apps for Enterprise (209).

CVEs per month

Last 12 months, by publish date

101112010203040506070809
Exploited share
3% vs 1% corpus
Median CVSS
7.8
Publish → KEV
113 d median(91)
Last 90 days
2136 prev 414

Products

  • windows_10_1607 644
  • Windows 10 Version 1607 481
  • Microsoft 365 Apps for Enterprise 209
  • windows_10 122
  • 365_apps 115
  • windows_10_1809 106
Follow Microsoft:RSS feedSave a search →Embed badge ↗
2953
Total CVEs
178
Critical
91
CISA KEV
92
Exploited

Worst active — by depth score

microsoft vulnerabilities

CVEs affecting microsoft, newest first. Open any entry for full detail, references, and exploit status.

2953 CVEsRSS

CVE-2024-30091High· 7.8
2y ago

Win32k Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

▾ Twilightmicrosoft · windows_10_1507EPSS 4.3%via NVD
CVE-2024-30090High· 7.0PoC
2y ago

Microsoft Streaming Service Elevation of Privilege Vulnerability

Microsoft Streaming Service Elevation of Privilege Vulnerability

▾ Midnightmicrosoft · windows_10_1507EPSS 2.0%via NVD
CVE-2024-30089High· 7.8
2y ago

Microsoft Streaming Service Elevation of Privilege Vulnerability

Microsoft Streaming Service Elevation of Privilege Vulnerability

▾ Twilightmicrosoft · windows_10_1809EPSS 8.1%via NVD
CVE-2024-30088High· 7.0CISA KEVPoC
2y ago

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

▾ Abyssalmicrosoft · windows_10_1507EPSS 68%via NVD
CVE-2024-30087High· 7.8
2y ago

Win32k Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

▾ Twilightmicrosoft · windows_10_1507EPSS 9.5%via NVD
CVE-2024-30086High· 7.8
2y ago

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

▾ Twilightmicrosoft · windows_10_1507EPSS 1.1%via NVD
CVE-2024-30085High· 7.8PoC
2y ago

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

▾ Midnightmicrosoft · windows_10_1809EPSS 14%via NVD
CVE-2024-30084High· 7.0
2y ago

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

▾ Twilightmicrosoft · windows_10_1507EPSS 5.9%via NVD
CVE-2024-30083High· 7.5
2y ago

Windows Standards-Based Storage Management Service Denial of Service Vulnerability

Windows Standards-Based Storage Management Service Denial of Service Vulnerability

▾ Twilightmicrosoft · windows_server_2012EPSS 2.5%via NVD
CVE-2024-30082High· 7.8
2y ago

Win32k Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

▾ Twilightmicrosoft · windows_10_1507EPSS 1.3%via NVD
CVE-2024-30080Critical· 9.8
2y ago

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

▾ Midnightmicrosoft · windows_10_1507EPSS 43%via NVD
CVE-2024-30078High· 8.8
2y ago

Windows Wi-Fi Driver Remote Code Execution Vulnerability

Windows Wi-Fi Driver Remote Code Execution Vulnerability

▾ Twilightmicrosoft · windows_10_1507EPSS 5.2%via NVD
CVE-2024-30077High· 8.0
2y ago

Windows OLE Remote Code Execution Vulnerability

Windows OLE Remote Code Execution Vulnerability

▾ Twilightmicrosoft · windows_10_1507EPSS 1.8%via NVD
CVE-2024-30076Medium· 6.8
2y ago

Windows Container Manager Service Elevation of Privilege Vulnerability

Windows Container Manager Service Elevation of Privilege Vulnerability

▾ Sunlitmicrosoft · windows_10_1607EPSS 1.7%via NVD
CVE-2024-30075High· 8.0
2y ago

Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability

Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability

▾ Twilightmicrosoft · windows_server_2008EPSS 0.88%via NVD
CVE-2024-30074High· 8.0
2y ago

Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability

Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability

▾ Twilightmicrosoft · windows_server_2008EPSS 1.2%via NVD
CVE-2024-30072High· 7.8
2y ago

Microsoft Event Trace Log File Parsing Remote Code Execution Vulnerability

Microsoft Event Trace Log File Parsing Remote Code Execution Vulnerability

▾ Twilightmicrosoft · windows_11_22h2EPSS 0.85%via NVD
CVE-2024-30070High· 7.5
2y ago

DHCP Server Service Denial of Service Vulnerability

DHCP Server Service Denial of Service Vulnerability

▾ Twilightmicrosoft · windows_server_2012EPSS 2.3%via NVD
CVE-2024-30069Medium· 4.7
2y ago

Windows Remote Access Connection Manager Information Disclosure Vulnerability

Windows Remote Access Connection Manager Information Disclosure Vulnerability

▾ Sunlitmicrosoft · windows_10_1507EPSS 0.57%via NVD
CVE-2024-30068High· 8.8
2y ago

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

▾ Twilightmicrosoft · windows_10_1507EPSS 0.78%via NVD
CVE-2024-30067Medium· 5.5
2y ago

Winlogon Elevation of Privilege Vulnerability

Winlogon Elevation of Privilege Vulnerability

▾ Sunlitmicrosoft · windows_10_1507EPSS 0.63%via NVD
CVE-2024-30066Medium· 5.5
2y ago

Winlogon Elevation of Privilege Vulnerability

Winlogon Elevation of Privilege Vulnerability

▾ Sunlitmicrosoft · windows_10_1507EPSS 0.63%via NVD
CVE-2024-30065Medium· 5.5
2y ago

Windows Themes Denial of Service Vulnerability

Windows Themes Denial of Service Vulnerability

▾ Sunlitmicrosoft · windows_10_1507EPSS 0.84%via NVD
CVE-2024-30063Medium· 6.7
2y ago

Windows Distributed File System (DFS) Remote Code Execution Vulnerability

Windows Distributed File System (DFS) Remote Code Execution Vulnerability

▾ Sunlitmicrosoft · windows_10_1507EPSS 1.0%via NVD
CVE-2024-30062High· 7.8
2y ago

Windows Standards-Based Storage Management Service Remote Code Execution Vulnerability

Windows Standards-Based Storage Management Service Remote Code Execution Vulnerability

▾ Twilightmicrosoft · windows_server_2012EPSS 1.0%via NVD
CVE-2024-30052Medium· 4.7PoC
2y ago

Visual Studio Remote Code Execution Vulnerability

Visual Studio Remote Code Execution Vulnerability

▾ Twilightmicrosoft · visual_studio_2019EPSS 1.4%via NVD
CVE-2024-29060Medium· 6.7
2y ago

Visual Studio Elevation of Privilege Vulnerability

Visual Studio Elevation of Privilege Vulnerability

▾ Sunlitmicrosoft · visual_studio_2017EPSS 0.89%via NVD
CVE-2024-29992Medium· 5.5
2y ago

Azure Identity Library for .NET Information Disclosure Vulnerability

Azure Identity Library for .NET Information Disclosure Vulnerability

▾ Sunlitmicrosoft · azure_identityEPSS 0.72%via NVD
CVE-2024-21400Critical· 9.0
2y ago

Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability

Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability

▾ Midnightmicrosoft · confcomEPSS 2.2%via NVD
CVE-2024-21338High· 7.8CISA KEV0dayPoC
2y ago

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

▾ Abyssalmicrosoft · windows_10_1809EPSS 60%via NVD
microsoft vulnerabilities (CVEs) — page 90 · VulnSea