M
Vendor security profile403 actively exploited CVEs
microsoft
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs7.210
Critical453
CISA KEV403
Public exploit502
Patch rate%86
Avg. CVSS7.4
12-month vulnerability rate
47
66
111
87
28
326
294
732
788
540
1146
1418
CVE KEV
CVE severity distribution
7.210toplam CVE
Critical453 (6%)
High4.602 (64%)
Medium1.868 (26%)
Low41 (1%)
Uncertain246 (3%)
Patch and exploitation view
%86
Verified patch
%6
CISA KEV
%7
Public exploit
6.215Patch available
0Partial
254Workaround
0Vendor: no patch
741Unknown
Latest vulnerabilities
8.8
CVE-2026-97781
Microsoft Office OneNote Remote Code Execution Vulnerability
M
Patch verified
9.8
CVE-2026-105016
Microsoft QUIC Remote Code Execution Vulnerability
M
Patch verified
7.5
CVE-2026-97801
.NET Framework Tampering Vulnerability
M
Patch verified
8.8
CVE-2026-108463
Windows SmartScreen Security Feature Bypass Vulnerability
M
Patch verified
8.8
CVE-2026-108471
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
M
Patch verified
7.8
CVE-2026-108136
Microsoft Windows Search Component Elevation of Privilege Vulnerability
M
Patch verified
7.0
CVE-2026-108135
Windows Backup Engine Elevation of Privilege Vulnerability
M
Patch verified
7.0
CVE-2026-108134
Windows Autopilot Elevation of Privilege Vulnerability
M
Patch verified
7.8
CVE-2026-108133
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
M
Patch verified
7.0
CVE-2026-108132
Windows Kerberos Elevation of Privilege Vulnerability
M
Patch verified