microsoft Vulnerability Advisory Catalog

Total 14,846 security vulnerabilities recorded for microsoft software and firmware.

← Back to All Vendors
Component: edge_chromium

Authentication bypass using an alternate path or channel in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering over ...

📅 2026-07-17
CVSS 5.4 Dossier →
Component: remote_desktop_web_client

Exposure of private personal information to an unauthorized actor in Windows RDP allows an unauthorized attacker to disclose information over a networ...

📅 2026-07-17
CVSS 7.1 Dossier →
Component: sharepoint_server

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to p...

📅 2026-07-16
CVSS 4.6 Dossier →
Component: terminal

Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code over a network....

📅 2026-07-16
CVSS 7.5 Dossier →
Component: windows_admin_center

Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an unauthorized attacker to perfor...

📅 2026-07-16
CVSS 6.1 Dossier →
Component: windows_10_21h2

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to ...

📅 2026-07-16
CVSS 7.0 Dossier →
Component: .net_framework

Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network....

📅 2026-07-14
CVSS 6.5 Dossier →
Component: .net

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network....

📅 2026-07-14
CVSS 7.5 Dossier →
Component: .net_framework

Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: .net_framework

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: .net_framework

Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network....

📅 2026-07-14
CVSS 7.5 Dossier →
Component: .net_framework

Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: .net

Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network....

📅 2026-07-14
CVSS 8.2 Dossier →
Component: .net_framework

Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network....

📅 2026-07-14
CVSS 7.5 Dossier →
Component: .net

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tampering locally....

📅 2026-07-14
CVSS 7.0 Dossier →
Component: .net_framework

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network....

📅 2026-07-14
CVSS 7.5 Dossier →
Component: .net

Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network....

📅 2026-07-14
CVSS 7.5 Dossier →
Component: visual_studio_2022

Protection mechanism failure in Visual Studio allows an unauthorized attacker to execute code locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: .net_framework

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network....

📅 2026-07-14
CVSS 8.1 Dossier →
Component: .net

Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network....

📅 2026-07-14
CVSS 8.8 Dossier →
Component: .net_framework

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network....

📅 2026-07-14
CVSS 7.5 Dossier →
Component: configuration_manager_2503

Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network....

📅 2026-07-14
CVSS 8.8 Dossier →
Component: .net

Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network....

📅 2026-07-14
CVSS 8.8 Dossier →
Component: windows_10_1809

Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security feature locally....

📅 2026-07-14
CVSS 6.0 Dossier →
Page 1 of 619 (14,846 Total Records)