microsoft
3,712 known vulnerabilities affecting microsoft products.
Products
windows_server_2019 1452
windows_server_2016 1310
windows_server_2022 1272
windows_server_2025 1131
windows_10_1809 1131
windows_11_24h2 1111
windows_11_25h2 1081
windows_10_22h2 1066
windows_10_21h2 1061
windows_11_26h1 1009
windows 990
windows_10_1607 980
windows_server_2012 977
windows_11_23h2 761
windows_10 343
windows_server_2008 326
365_apps 277
office_2021 225
office_2024 225
office_2019 217
windows_8.1 192
microsoft_365 185
windows_rt_8.1 170
windows_7 169
Vulnerabilities by priority
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2026-77105 | Medium | 0.2% | 8.8 | CommServe contained a cryptographic signature verification issue affecting privi… | |
| CVE-2026-27298 | Medium | 0.2% | 7.8 | Adobe Framemaker versions 2022.8 and earlier are affected by an Access of Resour… | |
| CVE-2026-11296 | Medium | 0.2% | 7.5 | Inappropriate implementation in ImageCapture in Google Chrome prior to 149.0.782… | |
| CVE-2026-34695 | Medium | 0.2% | 7.8 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Stack-based… | |
| CVE-2026-34697 | Medium | 0.2% | 7.8 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Stack-based… | |
| CVE-2026-34698 | Medium | 0.2% | 7.8 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Heap-based … | |
| CVE-2026-34699 | Medium | 0.2% | 7.8 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Heap-based … | |
| CVE-2026-34701 | Medium | 0.2% | 7.8 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Heap-based … | |
| CVE-2026-34702 | Medium | 0.2% | 7.8 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Stack-based… | |
| CVE-2026-34708 | Medium | 0.2% | 7.8 | InCopy versions 21.3, 20.5.3 and earlier are affected by a Stack-based Buffer Ov… | |
| CVE-2026-10942 | Medium | 0.2% | 7.8 | Inappropriate implementation in UI in Google Chrome on Windows prior to 149.0.78… | |
| CVE-2026-47952 | Medium | 0.2% | 7.8 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a… | |
| CVE-2026-47959 | Medium | 0.2% | 7.8 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a… | |
| CVE-2026-10001 | Medium | 0.2% | 8.3 | Use after free in PerformanceManager in Google Chrome prior to 148.0.7778.216 al… | |
| CVE-2026-10012 | Medium | 0.2% | 8.3 | Use after free in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote… | |
| CVE-2026-27290 | Medium | 0.2% | 8.6 | Adobe Framemaker versions 2022.8 and earlier are affected by an Untrusted Search… | |
| CVE-2026-27294 | Medium | 0.2% | 7.8 | Adobe Framemaker versions 2022.8 and earlier are affected by an out-of-bounds re… | |
| CVE-2026-27296 | Medium | 0.2% | 7.8 | Adobe Framemaker versions 2022.8 and earlier are affected by an Integer Underflo… | |
| CVE-2026-27297 | Medium | 0.2% | 7.8 | Adobe Framemaker versions 2022.8 and earlier are affected by an Integer Underflo… | |
| CVE-2026-42991 | Medium | 0.2% | 7.8 | Concurrent execution using shared resource with improper synchronization ('race … | |
| CVE-2026-9998 | Medium | 0.2% | 8.3 | Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remo… | |
| CVE-2026-48344 | Medium | 0.2% | 7.8 | Creative Cloud Desktop is affected by a Time-of-check Time-of-use (TOCTOU) Race … | |
| CVE-2026-18657 | Medium | 0.2% | 7.8 | An uncontrolled search path element in Kiro CLI before version 2.10.0 on Windows… | |
| CVE-2026-11656 | Medium | 0.2% | 8.3 | Use after free in ServiceWorker in Google Chrome prior to 149.0.7827.103 allowed… | |
| CVE-2026-27276 | Medium | 0.2% | 7.8 | Substance3D - Stager versions 3.1.7 and earlier are affected by a Use After Free… | |
| CVE-2026-27277 | Medium | 0.2% | 7.8 | Substance3D - Stager versions 3.1.7 and earlier are affected by a Use After Free… | |
| CVE-2026-47907 | Medium | 0.2% | 8.6 | Dreamweaver Desktop versions 21.7 and earlier are affected by an Improper Access… | |
| CVE-2026-47921 | Medium | 0.2% | 7.8 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a… | |
| CVE-2026-34661 | Medium | 0.2% | 7.8 | Illustrator versions 29.8.6, 30.3 and earlier are affected by an out-of-bounds w… | |
| CVE-2026-34696 | Medium | 0.2% | 7.8 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Use After F… | |
| CVE-2026-81979 | Medium | 0.2% | 7.8 | Acrobat Reader is affected by an out-of-bounds write vulnerability that could re… | |
| CVE-2026-81980 | Medium | 0.2% | 7.8 | Acrobat Reader is affected by an out-of-bounds write vulnerability that could re… | |
| CVE-2026-81981 | Medium | 0.2% | 7.8 | Acrobat Reader is affected by an out-of-bounds write vulnerability that could re… | |
| CVE-2026-21343 | Medium | 0.2% | 7.8 | Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds… | |
| CVE-2026-21344 | Medium | 0.2% | 7.8 | Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds… | |
| CVE-2026-21347 | Medium | 0.2% | 7.8 | Bridge versions 15.1.3, 16.0.1 and earlier are affected by an Integer Overflow o… | |
| CVE-2026-27283 | Medium | 0.2% | 7.8 | InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Use After F… | |
| CVE-2026-47920 | Medium | 0.2% | 7.8 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a… | |
| CVE-2026-47955 | Medium | 0.2% | 7.8 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a… | |
| CVE-2026-79909 | Medium | 0.2% | 7.8 | Acrobat Reader is affected by a Use After Free vulnerability that could result i… | |
| CVE-2026-81990 | Medium | 0.2% | 7.8 | Acrobat Reader is affected by a Use After Free vulnerability that could result i… | |
| CVE-2026-5914 | Medium | 0.2% | 8.8 | Type Confusion in CSS in Google Chrome prior to 147.0.7727.55 allowed an attacke… | |
| CVE-2026-9993 | Medium | 0.2% | 8.3 | Use after free in Views in Google Chrome prior to 148.0.7778.216 allowed a remot… | |
| CVE-2026-18656 | Medium | 0.2% | 7.8 | An uncontrolled search path element in Kiro IDE before version 1.0.228 on Window… | |
| CVE-2026-21345 | Medium | 0.2% | 7.8 | Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds… | |
| CVE-2026-21333 | Medium | 0.2% | 8.6 | Illustrator versions 29.8.4, 30.1 and earlier are affected by an Untrusted Searc… | |
| CVE-2026-27284 | Medium | 0.2% | 7.8 | InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by an out-of-bou… | |
| CVE-2026-47908 | Medium | 0.2% | 7.8 | Dreamweaver Desktop versions 21.7 and earlier are affected by an Access of Unini… | |
| CVE-2026-7349 | Medium | 0.2% | 7.5 | Use after free in Cast in Google Chrome prior to 147.0.7727.138 allowed an attac… | |
| CVE-2026-27269 | Medium | 0.2% | 7.8 | Premiere Pro versions 25.5 and earlier are affected by an out-of-bounds read vul… |