Skip to content
Sign in

Vendor

Microsoft

Alert
No CISA KEV deadline is open. CISA last added a Microsoft CVE on 13 Oct.

Tracked since 26 Jan · latest article 29 Oct · RSS · API

That product is not in Microsoft’s coverage, so the whole vendor is shown.

0Open KEV deadlines

None open

8Added to KEV · 90 days

of 390 in the full CISA catalogue · all time

13High exploit odds · current

EPSS top 5%, not in KEV

5Articles · 7 days

usual rate

Exploited, by due date390

Microsoft CVEs in CISA KEV with their federal deadlines. None is open.

Exploited Microsoft CVEs
CVEProductAddedFederal deadlineArticles
In CISA KEVCVE-2026-96951Windows13 OctPassed 16 Oct13
In CISA KEVCVE-2026-65660SharePoint25 SepPassed 28 Sep5
In CISA KEVCVE-2026-81963Windows8 SepPassed 22 Sep14
In CISA KEVCVE-2026-85880Windows8 SepPassed 22 Sep22
In CISA KEVCVE-2019-1068SQL Server26 AugPassed 29 Aug9
In CISA KEVCVE-2026-33824Internet Key Exchange (IKE) Service Extensions18 AugPassed 21 Aug14
Show 54 moreCSV of 390 entries for Microsoft330 older entries are in the CSV.

Patch cadence and exploit odds

How often CISA adds Microsoft CVEs, how many have a fix, and where their exploit odds sit.

Added to CISA KEV per quarter

16Q1 ’258Q2 ’255Q3 ’2510Q4 ’2512Q1 ’2615Q2 ’2612Q3 ’261Q4 ’26
Show as table
Added to CISA KEV per quarter
QuarterAdded
Q1 202516
Q2 20258
Q3 20255
Q4 202510
Q1 202612
Q2 202615
Q3 202612
Q4 20261

Fix listed

165 of 169 CVEs in coverage

4 CVEs have no vendor fix recorded yet.

EPSS percentile of each CVE

One dot per CVE; a red diamond marks those in CISA KEV.

top 5%CVE-2019-0708: 100th percentile, in CISA KEVCVE-2025-53770: 100th percentile, in CISA KEVCVE-2025-49704: 100th percentile, in CISA KEVCVE-2020-0688: 100th percentile, in CISA KEVCVE-2017-0144: 99.9th percentile, in CISA KEVCVE-2025-49706: 99.9th percentile, in CISA KEVCVE-2008-4250: 99.9th percentile, in CISA KEVCVE-2018-0802: 99.8th percentile, in CISA KEVCVE-2010-0249: 99.8th percentile, in CISA KEVCVE-2022-26923: 99.7th percentile, in CISA KEVCVE-2025-33073: 99.7th percentile, in CISA KEVCVE-2010-0806: 99.7th percentile, in CISA KEVCVE-2024-43468: 99.6th percentile, in CISA KEVCVE-2026-45659: 99.6th percentile, in CISA KEVCVE-2026-33824: 99.6th percentile, in CISA KEVCVE-2008-0015: 99.5th percentile, in CISA KEVCVE-2026-32202: 99.4th percentile, in CISA KEVCVE-2026-21509: 99.4th percentile, in CISA KEVCVE-2026-42897: 99.4th percentile, in CISA KEVCVE-2026-55040: 99.4th percentile, in CISA KEVCVE-2026-45498: 99.2th percentile, in CISA KEVCVE-2026-21510: 99.2th percentile, in CISA KEVCVE-2023-21529: 99.1th percentile, in CISA KEVCVE-2019-1068: 99.1th percentile, in CISA KEVCVE-2009-1537: 98.9th percentile, in CISA KEVCVE-2026-32201: 98.7th percentile, in CISA KEVCVE-2009-0238: 98.7th percentile, in CISA KEVCVE-2023-21674: 98.4th percentile, in CISA KEVCVE-2026-20963: 98.2th percentile, in CISA KEVCVE-2012-1854: 97.6th percentile, in CISA KEVCVE-2026-58644: 96.9th percentile, in CISA KEVCVE-2026-21513: 96.9th percentile, in CISA KEVCVE-2023-36424: 96.1th percentile, in CISA KEVCVE-2026-96951: 95.6th percentile, in CISA KEVCVE-2026-68820: 95.1th percentile, in CISA KEVCVE-2026-41091: 94.9th percentile, in CISA KEVCVE-2026-65660: 94.9th percentile, in CISA KEVCVE-2026-33825: 94th percentile, in CISA KEVCVE-2026-21525: 92th percentile, in CISA KEVCVE-2025-60710: 91.7th percentile, in CISA KEVCVE-2026-21533: 90.9th percentile, in CISA KEVCVE-2026-50522: 87.5th percentile, in CISA KEVCVE-2025-62221: 84.7th percentile, in CISA KEVCVE-2026-21519: 84.6th percentile, in CISA KEVCVE-2026-21514: 75.6th percentile, in CISA KEVCVE-2026-69836: 74.8th percentile, in CISA KEVCVE-2026-56164: 63.2th percentile, in CISA KEVCVE-2026-81963: 33.5th percentile, in CISA KEVCVE-2026-85880: 32.8th percentile, in CISA KEVCVE-2026-56155: 28.2th percentile, in CISA KEVCVE-2025-53771: 100th percentileCVE-2026-41089: 99.6th percentileCVE-2026-49160: 99.1th percentileCVE-2026-33112: 98.3th percentileCVE-2026-47291: 97.9th percentileCVE-2020-17103: 97.8th percentileCVE-2026-45657: 96.8th percentileCVE-2026-26119: 96th percentileCVE-2026-40372: 96th percentileCVE-2026-50656: 95.9th percentileCVE-2025-32711: 95.4th percentileCVE-2026-20841: 95.3th percentileCVE-2022-21894: 95.1th percentileCVE-2026-42824: 94.6th percentileCVE-2026-42980: 94.1th percentileCVE-2026-41103: 92.7th percentileCVE-2026-50507: 92.3th percentileCVE-2026-24294: 92th percentileCVE-2026-40369: 91.8th percentileCVE-2026-24289: 91.6th percentileCVE-2026-40364: 91.4th percentileCVE-2026-26030: 90.3th percentileCVE-2026-23668: 89.7th percentileCVE-2026-45586: 89.5th percentileCVE-2026-96940: 86.2th percentileCVE-2026-41096: 85.9th percentileCVE-2026-25592: 85th percentileCVE-2025-24052: 84.3th percentileCVE-2025-54100: 82.8th percentileCVE-2026-26127: 82th percentileCVE-2026-21262: 81.9th percentileCVE-2026-26132: 81.3th percentileCVE-2026-45585: 79.6th percentileCVE-2025-29827: 76.7th percentileCVE-2026-65674: 76.1th percentileCVE-2023-36880: 76th percentileCVE-2026-21536: 75.8th percentileCVE-2026-70242: 75.4th percentileCVE-2026-21520: 74.8th percentileCVE-2026-69414: 72th percentileCVE-2026-70291: 71th percentileCVE-2026-26144: 69.7th percentileCVE-2026-33096: 69.3th percentileCVE-2026-97749: 68.1th percentileCVE-2026-42898: 68th percentileCVE-2026-45504: 67.7th percentileCVE-2026-88156: 67.5th percentileCVE-2026-97016: 67.5th percentileCVE-2026-44815: 65.7th percentileCVE-2026-26121: 65.3th percentileCVE-2026-48567: 63.9th percentileCVE-2026-26118: 62.8th percentileCVE-2026-103572: 62.6th percentileCVE-2026-45495: 62.5th percentileCVE-2026-62893: 62.1th percentileCVE-2026-62815: 62.1th percentileCVE-2026-69730: 62.1th percentileCVE-2026-69829: 62.1th percentileCVE-2026-62878: 62.1th percentileCVE-2026-69525: 62.1th percentileCVE-2026-63520: 61.4th percentileCVE-2026-23669: 61.2th percentileCVE-2026-57092: 60.1th percentileCVE-2026-102870: 59.9th percentileCVE-2026-56162: 59.7th percentileCVE-2026-65669: 58.6th percentileCVE-2026-42826: 57.9th percentileCVE-2026-33827: 57.8th percentileCVE-2026-69502: 56.5th percentileCVE-2026-65667: 56.5th percentileCVE-2026-63508: 56.4th percentileCVE-2026-70197: 56.2th percentileCVE-2026-108398: 55.9th percentileCVE-2026-54121: 55.9th percentileCVE-2026-47301: 55.9th percentileCVE-2026-69465: 55.9th percentileCVE-2026-33109: 53.6th percentileCVE-2026-69524: 53.5th percentileCVE-2026-69510: 53.5th percentileCVE-2026-65789: 53.5th percentileCVE-2026-72981: 53.5th percentileCVE-2026-55007: 53.5th percentileCVE-2026-33120: 53.4th percentileCVE-2026-62911: 52.9th percentileCVE-2026-69380: 52.8th percentileCVE-2026-102866: 51.8th percentileCVE-2026-50502: 51.3th percentileCVE-2025-48804: 51.2th percentileCVE-2026-26128: 51th percentileCVE-2026-26123: 50.1th percentileCVE-2026-40361: 48.9th percentileCVE-2026-42823: 48.8th percentileCVE-2026-26113: 47.5th percentileCVE-2026-24293: 45.4th percentileCVE-2026-62823: 45.2th percentileCVE-2026-33826: 45.1th percentileCVE-2026-80097: 45.1th percentileCVE-2026-35421: 45th percentileCVE-2026-26110: 43.5th percentileCVE-2026-50661: 41.5th percentileCVE-2026-27912: 35.2th percentileCVE-2026-23665: 35th percentileCVE-2026-45501: 34.5th percentileCVE-2026-62832: 31th percentileCVE-2026-50454: 31th percentileCVE-2026-72971: 30.2th percentileCVE-2026-114148: 29.2th percentileCVE-2026-85921: 28.5th percentileCVE-2026-24287: 28.1th percentileCVE-2026-83498: 26.7th percentileCVE-2026-62735: 26.6th percentileCVE-2026-32190: 25.9th percentileCVE-2026-49176: 25.9th percentileCVE-2026-45492: 23th percentileCVE-2026-45494: 23th percentileCVE-2026-62721: 22.5th percentileCVE-2026-66804: 22.5th percentileCVE-2026-50343: 22.5th percentileCVE-2026-55945: 8.2th percentile050100
Show as table
FIRST EPSS percentiles across CVEs in coverage
CVEEPSS percentile
CVE-2019-0708100
CVE-2025-53770100
CVE-2025-49704100
CVE-2020-0688100
CVE-2025-53771100
CVE-2017-014499.9
CVE-2025-4970699.9
CVE-2008-425099.9
CVE-2018-080299.8
CVE-2010-024999.8
CVE-2022-2692399.7
CVE-2025-3307399.7
CVE-2010-080699.7
CVE-2024-4346899.6
CVE-2026-4565999.6
CVE-2026-3382499.6
CVE-2026-4108999.6
CVE-2008-001599.5
CVE-2026-3220299.4
CVE-2026-2150999.4
CVE-2026-4289799.4
CVE-2026-5504099.4
CVE-2026-4549899.2
CVE-2026-2151099.2
CVE-2023-2152999.1
CVE-2019-106899.1
CVE-2026-4916099.1
CVE-2009-153798.9
CVE-2026-3220198.7
CVE-2009-023898.7
CVE-2023-2167498.4
CVE-2026-3311298.3
CVE-2026-2096398.2
CVE-2026-4729197.9
CVE-2020-1710397.8
CVE-2012-185497.6
CVE-2026-5864496.9
CVE-2026-2151396.9
CVE-2026-4565796.8
CVE-2023-3642496.1
CVE-2026-2611996
CVE-2026-4037296
CVE-2026-5065695.9
CVE-2026-9695195.6
CVE-2025-3271195.4
CVE-2026-2084195.3
CVE-2026-6882095.1
CVE-2022-2189495.1
CVE-2026-4109194.9
CVE-2026-6566094.9
CVE-2026-4282494.6
CVE-2026-4298094.1
CVE-2026-3382594
CVE-2026-4110392.7
CVE-2026-5050792.3
CVE-2026-2152592
CVE-2026-2429492
CVE-2026-4036991.8
CVE-2025-6071091.7
CVE-2026-2428991.6
CVE-2026-4036491.4
CVE-2026-2153390.9
CVE-2026-2603090.3
CVE-2026-2366889.7
CVE-2026-4558689.5
CVE-2026-5052287.5
CVE-2026-9694086.2
CVE-2026-4109685.9
CVE-2026-2559285
CVE-2025-6222184.7
CVE-2026-2151984.6
CVE-2025-2405284.3
CVE-2025-5410082.8
CVE-2026-2612782
CVE-2026-2126281.9
CVE-2026-2613281.3
CVE-2026-4558579.6
CVE-2025-2982776.7
CVE-2026-6567476.1
CVE-2023-3688076
CVE-2026-2153675.8
CVE-2026-2151475.6
CVE-2026-7024275.4
CVE-2026-6983674.8
CVE-2026-2152074.8
CVE-2026-6941472
CVE-2026-7029171
CVE-2026-2614469.7
CVE-2026-3309669.3
CVE-2026-9774968.1
CVE-2026-4289868
CVE-2026-4550467.7
CVE-2026-8815667.5
CVE-2026-9701667.5
CVE-2026-4481565.7
CVE-2026-2612165.3
CVE-2026-4856763.9
CVE-2026-5616463.2
CVE-2026-2611862.8
CVE-2026-10357262.6
CVE-2026-4549562.5
CVE-2026-6289362.1
CVE-2026-6281562.1
CVE-2026-6973062.1
CVE-2026-6982962.1
CVE-2026-6287862.1
CVE-2026-6952562.1
CVE-2026-6352061.4
CVE-2026-2366961.2
CVE-2026-5709260.1
CVE-2026-10287059.9
CVE-2026-5616259.7
CVE-2026-6566958.6
CVE-2026-4282657.9
CVE-2026-3382757.8
CVE-2026-6950256.5
CVE-2026-6566756.5
CVE-2026-6350856.4
CVE-2026-7019756.2
CVE-2026-10839855.9
CVE-2026-5412155.9
CVE-2026-4730155.9
CVE-2026-6946555.9
CVE-2026-3310953.6
CVE-2026-6952453.5
CVE-2026-6951053.5
CVE-2026-6578953.5
CVE-2026-7298153.5
CVE-2026-5500753.5
CVE-2026-3312053.4
CVE-2026-6291152.9
CVE-2026-6938052.8
CVE-2026-10286651.8
CVE-2026-5050251.3
CVE-2025-4880451.2
CVE-2026-2612851
CVE-2026-2612350.1
CVE-2026-4036148.9
CVE-2026-4282348.8
CVE-2026-2611347.5
CVE-2026-2429345.4
CVE-2026-6282345.2
CVE-2026-3382645.1
CVE-2026-8009745.1
CVE-2026-3542145
CVE-2026-2611043.5
CVE-2026-5066141.5
CVE-2026-2791235.2
CVE-2026-2366535
CVE-2026-4550134.5
CVE-2026-8196333.5
CVE-2026-8588032.8
CVE-2026-6283231
CVE-2026-5045431
CVE-2026-7297130.2
CVE-2026-11414829.2
CVE-2026-8592128.5
CVE-2026-5615528.2
CVE-2026-2428728.1
CVE-2026-8349826.7
CVE-2026-6273526.6
CVE-2026-3219025.9
CVE-2026-4917625.9
CVE-2026-4549223
CVE-2026-4549423
CVE-2026-6272122.5
CVE-2026-6680422.5
CVE-2026-5034322.5
CVE-2026-559458.2

Coverage375 articles · all time

The latest 50 of 375 articles naming Microsoft, in the shared story grammar.

Full timeline
Quiet for 4 dayslast report 29 Oct50 articles14 outlets

50 articles from 14 outlets since 9 Sep. Quiet since 29 Oct.

Now9 Sep16192327258111417212529First reportArs Technica · 9 Sep, 21:06CISA alert25 Sep, 16:01 · official
  • Wed 9 Sep, 21:06 UTC. Ars Technica, first report. BlueMoon Exploit Kit Races to Exploit Fresh Chrome and Windows Flaws. Cites a CVE in CISA KEV.
  • Thu 10 Sep, 07:00 UTC. Security Affairs, its first report on the story. Chrome and Windows Zero Days Fuel BlueMoon Espionage Campaigns. Cites a CVE in CISA KEV.
  • Thu 10 Sep, 07:30 UTC. SecurityWeek, its first report on the story. Microsoft Defender Zero Day Bypasses Patches to Expose Windows Systems.
  • Thu 10 Sep, 08:37 UTC. Security Affairs. CISA Warns of Exploited Magento Flaw Enabling Remote Code Execution. Cites a CVE in CISA KEV.
  • Thu 10 Sep, 12:49 UTC. SOCRadar, its first report on the story. Public ShieldCrash PoC Claims to Bypass Microsoft Defender Fix.
  • Thu 10 Sep, 16:12 UTC. Dark Reading, its first report on the story. Windows Defender Patch Bypass Exposes SYSTEM Files to Attackers.
  • Thu 10 Sep, 17:25 UTC. SecurityOnline, its first report on the story. Chrome Zero Day Chain Targeted NGOs Before Google’s Patch Arrived. Cites a CVE in CISA KEV.
  • Sat 12 Sep, 11:30 UTC. SecurityWeek. Chrome Zero Days Fuel BlueMoon Exploit Kit’s Espionage Surge. Cites a CVE in CISA KEV.
  • Tue 15 Sep, 04:41 UTC. SecurityOnline. Microsoft Fixes Windows 11 RDS Failures and CVE-2026-62721.
  • Tue 15 Sep, 11:30 UTC. Security Affairs. China-Linked Groups Exploited Chrome Patch Gap to Target NGOs. Cites a CVE in CISA KEV.
  • Wed 16 Sep, 10:11 UTC. Securelist, its first report on the story. NightEagle Hackers Hide Exchange Backdoor Behind Stolen VPN Access. Cites a CVE in CISA KEV.
  • Wed 16 Sep, 17:13 UTC. Dark Reading. Browser Extensions Hijacked AI Assistants in Five Major Browsers.
  • Fri 18 Sep, 11:23 UTC. SecurityWeek. Microsoft Fixes 18 Azure and Copilot Flaws, Urges Windows Update.
  • Mon 21 Sep, 09:13 UTC. SecurityOnline. NightEagle Hackers Target Russian Firms With GhostContainer Backdoor. Cites a CVE in CISA KEV.
  • Mon 21 Sep, 09:13 UTC. Security Affairs. AI Agents Expose New Attack Paths Through Skills and Memory.
  • Thu 24 Sep, 09:59 UTC. SecurityOnline. Chinese Hackers Exploited Chrome and Windows Zero Days in Espionage Attacks. Cites a CVE in CISA KEV.
  • Fri 25 Sep, 08:23 UTC. SecurityOnline. Attackers Exploit SharePoint Flaw to Deploy Stealthy Web Shells. Cites a CVE in CISA KEV.
  • Fri 25 Sep, 16:01 UTC. CISA, its first report on the story. CISA Warns of Actively Exploited Microsoft SharePoint Code Flaw. Cites a CVE in CISA KEV.
  • Fri 25 Sep, 17:00 UTC. CISA. CISA Flags Actively Exploited SharePoint and MikroTik Flaws. Cites a CVE in CISA KEV.
  • Fri 25 Sep, 21:31 UTC. Security Affairs. CISA Warns of Active MikroTik RouterOS Attacks and SharePoint Flaw. Cites a CVE in CISA KEV.
  • Sun 27 Sep, 09:46 UTC. SecurityWeek. Attackers Exploit Patched Microsoft SharePoint Flaw to Deploy Webshells. Cites a CVE in CISA KEV.
  • Fri 2 Oct, 10:05 UTC. SecurityWeek. Warlock Ransomware Expands SharePoint Attacks Against Critical Sectors. Cites a CVE in CISA KEV.
  • Sat 3 Oct, 03:00 UTC. SecurityOnline. Microsoft Reissues Exchange Updates With New CVE-2026-96940 Flaw.
  • Mon 5 Oct, 17:58 UTC. The Hacker News, its first report on the story. Microsoft Patches Exchange Flaw That Exposes Colleagues’ Mailboxes.
  • Tue 6 Oct, 14:27 UTC. Security Affairs. Microsoft Patches Exchange Flaw That Could Expose Staff Mailboxes.
  • Tue 13 Oct, 21:13 UTC. thezdi.com, its first report on the story. Adobe and Microsoft Patch Thousands of Flaws in Record Update. Cites a CVE in CISA KEV.
  • Tue 13 Oct, 23:01 UTC. Dark Reading. Microsoft patches actively exploited Windows flaw that bypasses security checks. Cites a CVE in CISA KEV.
  • Tue 13 Oct, 23:31 UTC. Rapid7, its first report on the story. Microsoft Patches Windows Shell Zero Day Exploited in the Wild. Cites a CVE in CISA KEV.
  • Wed 14 Oct, 00:01 UTC. Krebs on Security, its first report on the story. Microsoft fixes over 1,400 flaws, including a Windows zero day. Cites a CVE in CISA KEV.
  • Wed 14 Oct, 00:03 UTC. CISA. CISA flags actively exploited Windows flaw with 16 October patch deadline. Cites a CVE in CISA KEV.
  • Wed 14 Oct, 04:37 UTC. SecurityOnline. Microsoft patches Copilot flaw that could let attackers run code via files.
  • Wed 14 Oct, 04:37 UTC. SecurityOnline. Microsoft Fixes Actively Exploited Windows Flaw in Record Patch Release. Cites a CVE in CISA KEV.
  • Wed 14 Oct, 05:14 UTC. The Hacker News. Microsoft patches 1,413 flaws as hackers exploit Windows bug. Cites a CVE in CISA KEV.
  • Wed 14 Oct, 07:01 UTC. The Hacker News. Windows Defender flaw let attackers bypass a protected enclave.
  • Wed 14 Oct, 07:31 UTC. SecurityWeek. Microsoft’s record 1,413 fixes include a Windows flaw exploited to bypass security warnings. Cites a CVE in CISA KEV.
  • Wed 14 Oct, 08:01 UTC. SecurityOnline. Broadcom Moves VMware to Monthly Security Updates as AI Speeds Flaw Discovery. Cites a CVE in CISA KEV.
  • Wed 14 Oct, 09:14 UTC. Infosecurity, its first report on the story. Microsoft Fixes Record 1,411 Flaws as Patch Tuesday Strain Grows. Cites a CVE in CISA KEV.
  • Wed 14 Oct, 12:11 UTC. Malwarebytes, its first report on the story. Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Zero Day. Cites a CVE in CISA KEV.
  • Wed 14 Oct, 14:37 UTC. Security Affairs. Microsoft fixes 1,415 flaws as exploited Windows bug puts users at risk. Cites a CVE in CISA KEV.
  • Wed 14 Oct, 21:41 UTC. Security Affairs. CISA Flags Actively Exploited Windows Flaw That Bypasses Security Protections. Cites a CVE in CISA KEV.
  • Tue 20 Oct, 12:31 UTC. The Hacker News. APT28 Breaches NATO Naval Shipbuilder and Steals Credentials in Week-Long Intrusion. Cites a CVE in CISA KEV.
  • Thu 22 Oct, 06:07 UTC. Securelist. BlackX UEFI bootkit targets Central Asian diplomats via Secure Boot flaw.
  • Thu 22 Oct, 11:41 UTC. SecurityOnline. APT41 Uses a BlackX UEFI Bootkit to Bypass Secure Boot in Central Asia.
  • Mon 26 Oct, 03:19 UTC. SecurityOnline. Microsoft issues out of band .NET fixes for four flaws. Cites a CVE in CISA KEV.
  • Mon 26 Oct, 13:30 UTC. Infosecurity. Microsoft patches critical .NET flaw that risks memory corruption. Cites a CVE in CISA KEV.
  • Wed 28 Oct, 01:00 UTC. SecurityOnline. AuthMask flaw lets Android apps steal Microsoft tokens.
  • Wed 28 Oct, 09:02 UTC. The Hacker News. Anthropic AI model chains flaws into browser and OS exploits.
  • Wed 28 Oct, 18:01 UTC. SecurityOnline. Anthropic’s AI research uncovers flaws across major platforms.
  • Wed 28 Oct, 18:30 UTC. The Hacker News. Researcher details Edge sandbox escape using logic flaws.
  • Thu 29 Oct, 15:30 UTC. The Hacker News. Google says Gemini 4 Carbon leads benchmarks for cyber tasks.
  • Known exploited CVE
  • CVE not in KEV
  • No CVE
  • Larger: an outlet’s first report
  • Square: official source
  • Coverage over time
Show all 50 articles as a list
  1. Wed 9 SepDay 01
    1. BlueMoon Exploit Kit Races to Exploit Fresh Chrome and Windows Flaws21:06 · Ars Technica · First report · Exploited CVE · Known exploited CVE
  2. Thu 10 SepDay 16
    1. Chrome and Windows Zero Days Fuel BlueMoon Espionage Campaigns07:00 · Security Affairs · Known exploited CVE
    2. Microsoft Defender Zero Day Bypasses Patches to Expose Windows Systems07:30 · SecurityWeek
    3. CISA Warns of Exploited Magento Flaw Enabling Remote Code Execution08:37 · Security Affairs · Known exploited CVE
    Show 3 more from 10 Sep
    1. Public ShieldCrash PoC Claims to Bypass Microsoft Defender Fix12:49 · SOCRadar
    2. Windows Defender Patch Bypass Exposes SYSTEM Files to Attackers16:12 · Dark Reading
    3. Chrome Zero Day Chain Targeted NGOs Before Google’s Patch Arrived17:25 · SecurityOnline · Known exploited CVE

  3. Quiet for 2 days

    Sat 12 SepDay 31
    1. Chrome Zero Days Fuel BlueMoon Exploit Kit’s Espionage Surge11:30 · SecurityWeek · Known exploited CVE

  4. Quiet for 3 days

    Tue 15 SepDay 62
    1. Microsoft Fixes Windows 11 RDS Failures and CVE-2026-6272104:41 · SecurityOnline · Picked up again
    2. China-Linked Groups Exploited Chrome Patch Gap to Target NGOs11:30 · Security Affairs · Known exploited CVE
  5. Wed 16 SepDay 72
    1. NightEagle Hackers Hide Exchange Backdoor Behind Stolen VPN Access10:11 · Securelist · Known exploited CVE
    2. Browser Extensions Hijacked AI Assistants in Five Major Browsers17:13 · Dark Reading

  6. Quiet for 2 days

    Fri 18 SepDay 91
    1. Microsoft Fixes 18 Azure and Copilot Flaws, Urges Windows Update11:23 · SecurityWeek

  7. Quiet for 3 days

    Mon 21 SepDay 122
    1. NightEagle Hackers Target Russian Firms With GhostContainer Backdoor09:13 · SecurityOnline · Picked up again · Known exploited CVE
    2. AI Agents Expose New Attack Paths Through Skills and Memory09:13 · Security Affairs

  8. Quiet for 3 days

    Thu 24 SepDay 151
    1. Chinese Hackers Exploited Chrome and Windows Zero Days in Espionage Attacks09:59 · SecurityOnline · Picked up again · Known exploited CVE
  9. Fri 25 SepDay 164
    1. Attackers Exploit SharePoint Flaw to Deploy Stealthy Web Shells08:23 · SecurityOnline · Known exploited CVE
    2. CISA Warns of Actively Exploited Microsoft SharePoint Code Flaw16:01 · CISA · official · CISA alert · Known exploited CVE
    3. CISA Flags Actively Exploited SharePoint and MikroTik Flaws17:00 · CISA · official · Known exploited CVE
    4. CISA Warns of Active MikroTik RouterOS Attacks and SharePoint Flaw21:31 · Security Affairs · Known exploited CVE

  10. Quiet for 2 days

    Sun 27 SepDay 181
    1. Attackers Exploit Patched Microsoft SharePoint Flaw to Deploy Webshells09:46 · SecurityWeek · Known exploited CVE

  11. Quiet for 5 days

    Fri 2 OctDay 231
    1. Warlock Ransomware Expands SharePoint Attacks Against Critical Sectors10:05 · SecurityWeek · Picked up again · Known exploited CVE
  12. Sat 3 OctDay 241
    1. Microsoft Reissues Exchange Updates With New CVE-2026-96940 Flaw03:00 · SecurityOnline

  13. Quiet for 3 days

    Mon 5 OctDay 261
    1. Microsoft Patches Exchange Flaw That Exposes Colleagues’ Mailboxes17:58 · The Hacker News · Picked up again
  14. Tue 6 OctDay 271
    1. Microsoft Patches Exchange Flaw That Could Expose Staff Mailboxes14:27 · Security Affairs

  15. Quiet for 7 days

    Tue 13 OctDay 343
    1. Adobe and Microsoft Patch Thousands of Flaws in Record Update21:13 · thezdi.com · Picked up again · Known exploited CVE
    2. Microsoft patches actively exploited Windows flaw that bypasses security checks23:01 · Dark Reading · Known exploited CVE
    3. Microsoft Patches Windows Shell Zero Day Exploited in the Wild23:31 · Rapid7 · Known exploited CVE
  16. Wed 14 OctDay 3512
    1. Microsoft fixes over 1,400 flaws, including a Windows zero day00:01 · Krebs on Security · Known exploited CVE
    2. CISA flags actively exploited Windows flaw with 16 October patch deadline00:03 · CISA · official · Known exploited CVE
    3. Microsoft patches Copilot flaw that could let attackers run code via files04:37 · SecurityOnline
    Show 9 more from 14 Oct
    1. Microsoft Fixes Actively Exploited Windows Flaw in Record Patch Release04:37 · SecurityOnline · Known exploited CVE
    2. Microsoft patches 1,413 flaws as hackers exploit Windows bug05:14 · The Hacker News · Known exploited CVE
    3. Windows Defender flaw let attackers bypass a protected enclave07:01 · The Hacker News
    4. Microsoft’s record 1,413 fixes include a Windows flaw exploited to bypass security warnings07:31 · SecurityWeek · Known exploited CVE
    5. Broadcom Moves VMware to Monthly Security Updates as AI Speeds Flaw Discovery08:01 · SecurityOnline · Known exploited CVE
    6. Microsoft Fixes Record 1,411 Flaws as Patch Tuesday Strain Grows09:14 · Infosecurity · Known exploited CVE
    7. Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Zero Day12:11 · Malwarebytes · Known exploited CVE
    8. Microsoft fixes 1,415 flaws as exploited Windows bug puts users at risk14:37 · Security Affairs · Known exploited CVE
    9. CISA Flags Actively Exploited Windows Flaw That Bypasses Security Protections21:41 · Security Affairs · Known exploited CVE

  17. Quiet for 6 days

    Tue 20 OctDay 411
    1. APT28 Breaches NATO Naval Shipbuilder and Steals Credentials in Week-Long Intrusion12:31 · The Hacker News · Picked up again · Known exploited CVE

  18. Quiet for 2 days

    Thu 22 OctDay 432
    1. BlackX UEFI bootkit targets Central Asian diplomats via Secure Boot flaw06:07 · Securelist
    2. APT41 Uses a BlackX UEFI Bootkit to Bypass Secure Boot in Central Asia11:41 · SecurityOnline

  19. Quiet for 4 days

    Mon 26 OctDay 472
    1. Microsoft issues out of band .NET fixes for four flaws03:19 · SecurityOnline · Picked up again · Known exploited CVE
    2. Microsoft patches critical .NET flaw that risks memory corruption13:30 · Infosecurity · Known exploited CVE
  20. Wed 28 OctDay 494
    1. AuthMask flaw lets Android apps steal Microsoft tokens01:00 · SecurityOnline
    2. Anthropic AI model chains flaws into browser and OS exploits09:02 · The Hacker News
    3. Anthropic’s AI research uncovers flaws across major platforms18:01 · SecurityOnline
    4. Researcher details Edge sandbox escape using logic flaws18:30 · The Hacker News
  21. Thu 29 OctDay 501
    1. Google says Gemini 4 Carbon leads benchmarks for cyber tasks15:30 · The Hacker News

All CVEs in coverage169

Exploited first, then by EPSS

In the CVE tracker
  • CVE-2019-0708Exploited

    Microsoft Remote Desktop Services Remote Code Execution Vulnerability

    9.8Critical99.9% EPSS · 2 articles
  • CVE-2025-53770Exploited

    Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

    9.8Critical99.9% EPSS · 3 articles
  • CVE-2025-49704Exploited

    Microsoft SharePoint Code Injection Vulnerability

    8.8High99.9% EPSS · 1 article
  • CVE-2020-0688Exploited

    Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability

    8.8High99.9% EPSS · 1 article
  • CVE-2017-0144Exploited

    Microsoft SMBv1 Remote Code Execution Vulnerability

    8.8High99.2% EPSS · 1 article
  • CVE-2025-49706Exploited

    Microsoft SharePoint Improper Authentication Vulnerability

    6.5Medium99.0% EPSS · 1 article
  • CVE-2008-4250Exploited

    Microsoft Windows Buffer Overflow Vulnerability

    9.8Critical99% EPSS · 4 articles
  • CVE-2018-0802Exploited

    Microsoft Office Memory Corruption Vulnerability

    Not scored93% EPSS · 1 article
  • CVE-2010-0249Exploited

    Microsoft Internet Explorer Use-After-Free Vulnerability

    8.8High92% EPSS · 4 articles
  • CVE-2022-26923Exploited

    Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

    8.8High84% EPSS · 1 article
  • CVE-2025-33073Exploited

    Microsoft Windows SMB Client Improper Access Control Vulnerability

    8.8High83% EPSS · 1 article
  • CVE-2010-0806Exploited

    Microsoft Internet Explorer Use-After-Free Vulnerability

    8.8High82% EPSS · 4 articles
Show 157 more CVEs
  • CVE-2024-43468Exploited

    Microsoft Configuration Manager SQL Injection Vulnerability

    9.8Critical81% EPSS · 3 articles
  • CVE-2026-45659Exploited

    Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability

    8.8High80% EPSS · 12 articles
  • CVE-2026-33824Exploited

    Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability

    9.8Critical77% EPSS · 14 articles
  • CVE-2008-0015Exploited

    Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability

    Not scored77% EPSS · 2 articles
  • CVE-2026-32202Exploited

    Microsoft Windows Protection Mechanism Failure Vulnerability

    4.3Medium71% EPSS · 6 articles
  • CVE-2026-21509Exploited

    Microsoft Office Security Feature Bypass Vulnerability

    7.8High71% EPSS · 22 articles
  • CVE-2026-42897Exploited

    Microsoft Exchange Server Cross-Site Scripting Vulnerability

    8.1High71% EPSS · 14 articles
  • CVE-2026-55040Exploited

    Microsoft SharePoint Weak Authentication Vulnerability

    9.1Critical70% EPSS · 16 articles
  • CVE-2026-45498Exploited

    Microsoft Defender Denial of Service Vulnerability

    4.0Medium63% EPSS · 4 articles
  • CVE-2026-21510Exploited

    Microsoft Windows Shell Protection Mechanism Failure Vulnerability

    8.8High61% EPSS · 11 articles
  • CVE-2023-21529Exploited

    Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability

    8.8High59% EPSS · 7 articles
  • CVE-2019-1068Exploited

    Microsoft SQL Server Remote Code Execution Vulnerability

    8.8High57% EPSS · 9 articles
  • CVE-2009-1537Exploited

    Microsoft DirectX NULL Byte Overwrite Vulnerability

    8.8High51% EPSS · 4 articles
  • CVE-2026-32201Exploited

    Microsoft SharePoint Server Improper Input Validation Vulnerability

    6.5Medium43% EPSS · 14 articles
  • CVE-2009-0238Exploited

    Microsoft Office Remote Code Execution

    8.8High43% EPSS · 3 articles
  • CVE-2023-21674Exploited

    Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability

    8.8High34% EPSS · 1 article
  • CVE-2026-20963Exploited

    Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

    9.8Critical29% EPSS · 5 articles
  • CVE-2012-1854Exploited

    Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability

    7.8High21% EPSS · 4 articles
  • CVE-2026-58644Exploited

    Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

    9.8Critical16% EPSS · 14 articles
  • CVE-2026-21513Exploited

    Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability

    8.8High16% EPSS · 15 articles
  • CVE-2023-36424Exploited

    Microsoft Windows Out-of-Bounds Read Vulnerability

    7.8High12% EPSS · 5 articles
  • CVE-2026-96951Exploited

    Microsoft Windows Command Injection Vulnerability

    8.8High9.8% EPSS · 13 articles
  • CVE-2026-68820Exploited

    Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

    7.0High8.6% EPSS · 17 articles
  • CVE-2026-41091Exploited

    Microsoft Defender Link Following Vulnerability

    7.8High8.2% EPSS · 7 articles
  • CVE-2026-65660Exploited

    Microsoft SharePoint Code Injection Vulnerability

    8.8High8.2% EPSS · 5 articles
  • CVE-2026-33825Exploited

    Microsoft Defender Insufficient Granularity of Access Control Vulnerability

    7.8High6.8% EPSS · 17 articles
  • CVE-2026-21525Exploited

    Microsoft Windows NULL Pointer Dereference Vulnerability

    6.2Medium4.9% EPSS · 7 articles
  • CVE-2025-60710Exploited

    Microsoft Windows Link Following Vulnerability

    7.8High4.6% EPSS · 5 articles
  • CVE-2026-21533Exploited

    Microsoft Windows Improper Privilege Management Vulnerability

    7.8High4.2% EPSS · 7 articles
  • CVE-2026-50522Exploited

    Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

    9.8Critical3.0% EPSS · 9 articles
  • CVE-2025-62221Exploited

    Microsoft Windows Use After Free Vulnerability

    7.8High2.5% EPSS · 1 article
  • CVE-2026-21519Exploited

    Microsoft Windows Type Confusion Vulnerability

    7.8High2.5% EPSS · 7 articles
  • CVE-2026-21514Exploited

    Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability

    7.8High1.6% EPSS · 9 articles
  • CVE-2026-69836Exploited

    Microsoft Entra vulnerability

    10.0Critical1.5% EPSS · 3 articles
  • CVE-2026-56164Exploited

    Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability

    5.3Medium1.0% EPSS · 11 articles
  • CVE-2026-81963Exploited

    Microsoft Windows Link Following Vulnerability

    7.8High0.4% EPSS · 14 articles
  • CVE-2026-85880Exploited

    Microsoft Windows Heap-Based Buffer Overflow Vulnerability

    7.8High0.4% EPSS · 22 articles
  • CVE-2026-56155Exploited

    Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability

    7.8High0.3% EPSS · 7 articles
  • CVE-2025-53771

    Microsoft SharePoint Server Spoofing Vulnerability

    6.5Medium99.8% EPSS · 0 articles
  • CVE-2026-41089

    Microsoft Windows Server 2012 vulnerability

    9.8Critical80% EPSS · 9 articles
  • CVE-2026-49160

    Microsoft Windows 10 Version 1607 vulnerability

    7.5High57% EPSS · 7 articles
  • CVE-2026-33112

    Microsoft SharePoint Enterprise Server 2016 vulnerability

    8.8High31% EPSS · 1 article
  • CVE-2026-47291

    Microsoft Windows 10 Version 1607 vulnerability

    9.8Critical25% EPSS · 4 articles
  • CVE-2020-17103

    Microsoft Windows 10 Version 1809 vulnerability

    7.0High24% EPSS · 4 articles
  • CVE-2026-45657

    Microsoft Windows 11 version 23H2 vulnerability

    9.8Critical15% EPSS · 1 article
  • CVE-2026-26119

    Windows Admin Center Elevation of Privilege Vulnerability

    Not scored11% EPSS · 1 article
  • CVE-2026-40372

    Microsoft ASP.NET Core 10.0 vulnerability

    9.1Critical11% EPSS · 3 articles
  • CVE-2026-50656

    Microsoft Malware Protection Engine vulnerability

    7.8High11% EPSS · 13 articles
  • CVE-2025-32711

    Microsoft 365 Copilot vulnerability

    9.3Critical9.3% EPSS · 2 articles
  • CVE-2026-20841

    Windows Notepad App Remote Code Execution Vulnerability

    7.8High9.0% EPSS · 1 article
  • CVE-2022-21894

    Microsoft Windows 10 Version 1809 vulnerability

    4.4Medium8.6% EPSS · 2 articles
  • CVE-2026-42824

    Microsoft 365 Copilot vulnerability

    6.5Medium7.6% EPSS · 1 article
  • CVE-2026-42980

    Microsoft Windows 10 Version 1607 vulnerability

    7.8High7.0% EPSS · 1 article
  • CVE-2026-41103

    Microsoft Confluence SAML SSO plugin vulnerability

    9.1Critical5.4% EPSS · 4 articles
  • CVE-2026-50507

    Microsoft Windows 10 Version 1607 vulnerability

    6.8Medium5.0% EPSS · 4 articles
  • CVE-2026-24294

    Microsoft Windows 10 Version 1607 vulnerability

    7.8High4.8% EPSS · 1 article
  • CVE-2026-40369

    Microsoft Windows 11 Version 24H2 vulnerability

    7.8High4.7% EPSS · 1 article
  • CVE-2026-24289

    Windows Kernel Elevation of Privilege Vulnerability

    Not scored4.6% EPSS · 2 articles
  • CVE-2026-40364

    Microsoft 365 Apps for Enterprise vulnerability

    8.4High4.4% EPSS · 1 article
  • CVE-2026-26030

    microsoft semantic-kernel vulnerability

    10.0Critical3.9% EPSS · 1 article
  • CVE-2026-23668

    Windows Graphics Component Elevation of Privilege Vulnerability

    Not scored3.7% EPSS · 1 article
  • CVE-2026-45586

    Microsoft Windows 10 Version 1607 vulnerability

    7.8High3.6% EPSS · 5 articles
  • CVE-2026-96940

    Microsoft Exchange Server 2016 Cumulative Update 23 vulnerability

    8.8High2.8% EPSS · 3 articles
  • CVE-2026-41096

    Microsoft Windows 11 version 23H2 vulnerability

    9.8Critical2.7% EPSS · 5 articles
  • CVE-2026-25592

    Semantic Kernel has an Arbitrary File Write via AI Agent Function Calling in .NET SDK

    10.0Critical2.6% EPSS · 2 articles
  • CVE-2025-24052

    Windows Agere Modem Driver Elevation of Privilege Vulnerability

    Not scored2.4% EPSS · 1 article
  • CVE-2025-54100

    PowerShell Remote Code Execution Vulnerability

    7.8High2.2% EPSS · 1 article
  • CVE-2026-26127

    .NET Denial of Service Vulnerability

    Not scored2.1% EPSS · 9 articles
  • CVE-2026-21262

    SQL Server Elevation of Privilege Vulnerability

    Not scored2.1% EPSS · 9 articles
  • CVE-2026-26132

    Windows Kernel Elevation of Privilege Vulnerability

    Not scored2.1% EPSS · 1 article
  • CVE-2026-45585

    Microsoft Windows 11 Version 24H2 vulnerability

    6.8Medium1.9% EPSS · 3 articles
  • CVE-2025-29827

    Microsoft Azure Automation vulnerability

    9.9Critical1.7% EPSS · 1 article
  • CVE-2026-65674

    Microsoft SQL Server 2019 (GDR) vulnerability

    8.8High1.6% EPSS · 3 articles
  • CVE-2023-36880

    Microsoft Edge (Chromium-based) vulnerability

    4.8Medium1.6% EPSS · 1 article
  • CVE-2026-21536

    Microsoft Devices Pricing Program Remote Code Execution Vulnerability

    Not scored1.6% EPSS · 5 articles
  • CVE-2026-70242

    Microsoft 365 Apps for Enterprise vulnerability

    9.8Critical1.6% EPSS · 2 articles
  • CVE-2026-21520

    Microsoft Copilot Studio vulnerability

    7.5High1.5% EPSS · 1 article
  • CVE-2026-69414

    Microsoft Malware Protection Engine vulnerability

    7.8High1.4% EPSS · 7 articles
  • CVE-2026-70291

    Microsoft 365 Apps for Enterprise vulnerability

    9.8Critical1.3% EPSS · 1 article
  • CVE-2026-26144

    Microsoft Excel Information Disclosure Vulnerability

    Not scored1.3% EPSS · 5 articles
  • CVE-2026-33096

    HTTP.sys Denial of Service Vulnerability

    7.5High1.3% EPSS · 3 articles
  • CVE-2026-97749

    Microsoft 365 Apps for Enterprise vulnerability

    9.8Critical1.2% EPSS · 1 article
  • CVE-2026-42898

    Microsoft Dynamics 365 (on-premises) version 9.1 vulnerability

    9.9Critical1.2% EPSS · 4 articles
  • CVE-2026-45504

    Microsoft Exchange Server 2016 Cumulative Update 23 vulnerability

    8.8High1.2% EPSS · 1 article
  • CVE-2026-88156

    Microsoft 365 Apps for Enterprise vulnerability

    9.8Critical1.2% EPSS · 1 article
  • CVE-2026-97016

    Microsoft 365 Apps for Enterprise vulnerability

    9.8Critical1.2% EPSS · 1 article
  • CVE-2026-44815

    Microsoft Windows 10 Version 1607 vulnerability

    9.8Critical1.1% EPSS · 1 article
  • CVE-2026-26121

    Azure IOT Explorer Spoofing Vulnerability

    Not scored1.1% EPSS · 1 article
  • CVE-2026-48567

    Microsoft Azure HorizonDB vulnerability

    10.0Critical1.0% EPSS · 1 article
  • CVE-2026-26118

    Azure MCP Server Tools Elevation of Privilege Vulnerability

    Not scored1.0% EPSS · 1 article
  • CVE-2026-103572

    Microsoft Visual Studio 2022 version 17.14 vulnerability

    8.8High1.0% EPSS · 1 article
  • CVE-2026-45495

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

    8.8High1.0% EPSS · 1 article
  • CVE-2026-62893

    Microsoft Windows Server 2012 vulnerability

    9.8Critical1.0% EPSS · 2 articles
  • CVE-2026-62815

    Microsoft Windows 11 version 23H2 vulnerability

    9.8Critical1.0% EPSS · 2 articles
  • CVE-2026-69730

    Microsoft Windows 10 Version 1607 vulnerability

    9.8Critical1.0% EPSS · 3 articles
  • CVE-2026-69829

    Microsoft Windows 10 Version 1607 vulnerability

    9.8Critical1.0% EPSS · 1 article
  • CVE-2026-62878

    Microsoft Windows Server 2012 vulnerability

    9.8Critical1.0% EPSS · 4 articles
  • CVE-2026-69525

    Microsoft Windows 10 Version 1607 vulnerability

    9.8Critical1.0% EPSS · 1 article
  • CVE-2026-63520

    Microsoft SharePoint Enterprise Server 2016 vulnerability

    8.1High1.0% EPSS · 5 articles
  • CVE-2026-23669

    RPC Runtime Library Remote Code Execution Vulnerability

    8.8High0.9% EPSS · 1 article
  • CVE-2026-57092

    Microsoft Windows 10 Version 1607 vulnerability

    9.9Critical0.9% EPSS · 1 article
  • CVE-2026-102870

    ASP.NET Core Remote Code Execution Vulnerability

    8.8High0.9% EPSS · 2 articles
  • CVE-2026-56162

    Microsoft Azure SQL Database vulnerability

    10.0Critical0.9% EPSS · 1 article
  • CVE-2026-65669

    Microsoft SQL Server Management Studio 22 vulnerability

    9.6Critical0.9% EPSS · 1 article
  • CVE-2026-42826

    Microsoft Azure DevOps vulnerability

    10.0Critical0.8% EPSS · 1 article
  • CVE-2026-33827

    Microsoft Windows 10 Version 1607 vulnerability

    8.1High0.8% EPSS · 4 articles
  • CVE-2026-69502

    Azure SQL Database Elevation of Privilege Vulnerability

    10.0Critical0.8% EPSS · 1 article
  • CVE-2026-65667

    Microsoft Teams vulnerability

    10.0Critical0.8% EPSS · 1 article
  • CVE-2026-63508

    Microsoft Planetary Computer Pro (GeoCatalog) vulnerability

    10.0Critical0.8% EPSS · 1 article
  • CVE-2026-70197

    .NET and Visual Studio Remote Code Execution Vulnerability

    8.1High0.8% EPSS · 2 articles
  • CVE-2026-108398

    Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 vulnerability

    8.8High0.8% EPSS · 6 articles
  • CVE-2026-54121

    Microsoft Windows 10 Version 1607 vulnerability

    8.8High0.8% EPSS · 2 articles
  • CVE-2026-47301

    Microsoft Configuration Manager vulnerability

    8.8High0.8% EPSS · 1 article
  • CVE-2026-69465

    Microsoft SharePoint Server Subscription Edition vulnerability

    8.8High0.8% EPSS · 2 articles
  • CVE-2026-33109

    Microsoft Azure Managed Instance for Apache Cassandra vulnerability

    9.9Critical0.7% EPSS · 2 articles
  • CVE-2026-69524

    Microsoft Windows 10 Version 1607 vulnerability

    8.1High0.7% EPSS · 1 article
  • CVE-2026-69510

    Microsoft Windows 10 Version 1607 vulnerability

    8.1High0.7% EPSS · 1 article
  • CVE-2026-65789

    Microsoft Windows Server 2016 vulnerability

    8.1High0.7% EPSS · 1 article
  • CVE-2026-72981

    Microsoft Windows 10 Version 1607 vulnerability

    8.1High0.7% EPSS · 1 article
  • CVE-2026-55007

    Microsoft Exchange Server 2019 Cumulative Update 14 vulnerability

    8.1High0.7% EPSS · 3 articles
  • CVE-2026-33120

    Microsoft SQL Server 2022 (GDR) vulnerability

    8.8High0.7% EPSS · 1 article
  • CVE-2026-62911

    Microsoft Exchange Server 2016 Cumulative Update 23 vulnerability

    8.0High0.7% EPSS · 3 articles
  • CVE-2026-69380

    Microsoft Exchange Server 2016 Cumulative Update 23 vulnerability

    8.1High0.7% EPSS · 2 articles
  • CVE-2026-102866

    Microsoft SharePoint Server Subscription Edition vulnerability

    8.1High0.7% EPSS · 3 articles
  • CVE-2026-50502

    Microsoft Windows 10 Version 1607 vulnerability

    8.0High0.7% EPSS · 1 article
  • CVE-2025-48804

    Microsoft Windows 10 Version 1507 vulnerability

    6.8Medium0.7% EPSS · 1 article
  • CVE-2026-26128

    Microsoft Windows 10 Version 1607 vulnerability

    7.8High0.7% EPSS · 1 article
  • CVE-2026-26123

    Microsoft Authenticator Information Disclosure Vulnerability

    5.5Medium0.6% EPSS · 3 articles
  • CVE-2026-40361

    Microsoft 365 Apps for Enterprise vulnerability

    8.4High0.6% EPSS · 3 articles
  • CVE-2026-42823

    Microsoft Azure Logic Apps vulnerability

    9.9Critical0.6% EPSS · 1 article
  • CVE-2026-26113

    Microsoft Office Remote Code Execution Vulnerability

    Not scored0.6% EPSS · 5 articles
  • CVE-2026-24293

    Microsoft Windows 10 Version 21H2 vulnerability

    7.8High0.5% EPSS · 1 article
  • CVE-2026-62823

    Microsoft Windows Server 2012 vulnerability

    8.8High0.5% EPSS · 1 article
  • CVE-2026-33826

    Microsoft Windows Server 2012 R2 vulnerability

    8.0High0.5% EPSS · 1 article
  • CVE-2026-80097

    Microsoft Authenticator for Android vulnerability

    8.6High0.5% EPSS · 3 articles
  • CVE-2026-35421

    Microsoft Windows 10 Version 1607 vulnerability

    7.8High0.5% EPSS · 1 article
  • CVE-2026-26110

    Microsoft Office Remote Code Execution Vulnerability

    Not scored0.5% EPSS · 6 articles
  • CVE-2026-50661

    Microsoft Windows 10 Version 1607 vulnerability

    6.1Medium0.5% EPSS · 2 articles
  • CVE-2026-27912

    Microsoft Windows Server 2012 vulnerability

    8.0High0.4% EPSS · 1 article
  • CVE-2026-23665

    Linux Azure Diagnostic extension (LAD) Elevation of Privilege Vulnerability

    Not scored0.4% EPSS · 1 article
  • CVE-2026-45501

    Microsoft Exchange Server 2016 Cumulative Update 23 vulnerability

    6.5Medium0.4% EPSS · 1 article
  • CVE-2026-62832

    Microsoft Windows 10 Version 21H2 vulnerability

    7.8High0.4% EPSS · 6 articles
  • CVE-2026-50454

    Microsoft Windows 11 Version 24H2 vulnerability

    7.8High0.4% EPSS · 1 article
  • CVE-2026-72971

    Microsoft Windows 11 version 26H1 vulnerability

    5.5Medium0.4% EPSS · 5 articles
  • CVE-2026-114148

    ASP.NET Core Elevation of Privilege Vulnerability

    Not scored0.4% EPSS · 2 articles
  • CVE-2026-85921

    Microsoft Windows 11 version 26H1 vulnerability

    8.2High0.3% EPSS · 1 article
  • CVE-2026-24287

    Windows Kernel Elevation of Privilege Vulnerability

    Not scored0.3% EPSS · 1 article
  • CVE-2026-83498

    Microsoft Windows 11 version 23H2 vulnerability

    7.8High0.3% EPSS · 1 article
  • CVE-2026-62735

    Microsoft Windows 10 Version 1607 vulnerability

    7.8High0.3% EPSS · 1 article
  • CVE-2026-32190

    Microsoft 365 Apps for Enterprise vulnerability

    8.4High0.3% EPSS · 2 articles
  • CVE-2026-49176

    Microsoft Windows 10 Version 1607 vulnerability

    7.8High0.3% EPSS · 1 article
  • CVE-2026-45492

    Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

    5.4Medium0.3% EPSS · 1 article
  • CVE-2026-45494

    Microsoft Edge (Chromium-based) Spoofing Vulnerability

    5.4Medium0.3% EPSS · 1 article
  • CVE-2026-62721

    Microsoft Windows 10 Version 1607 vulnerability

    7.8High0.3% EPSS · 1 article
  • CVE-2026-66804

    Microsoft Windows 10 Version 22H2 vulnerability

    7.8High0.3% EPSS · 1 article
  • CVE-2026-50343

    Microsoft Windows 10 Version 1809 vulnerability

    7.8High0.3% EPSS · 1 article
  • CVE-2026-55945

    Microsoft Edge (Chromium-based) vulnerability

    4.2Medium0.2% EPSS · 1 article
CyberSIXTSignal over noise
Updated AboutDevelopersSign in