Vendor
Microsoft vulnerabilities
73 advisories tracked, 10 exploited in the wild according to CISA, 38 published in 2026.
Data refreshed 11 Oct 2026
Patch now
Exploited in the last two years (CISA KEV), or a 10%+ chance of exploitation in the next 30 days (EPSS).
CVE-2026-41091Defender for Endpoint and Antivirus
Microsoft Defender Elevation of Privilege VulnerabilityCVE-2026-45498Defender for Endpoint and Antivirus
Microsoft Defender Denial of Service VulnerabilityCVE-2026-33825Defender for Endpoint and Antivirus
Microsoft Defender Elevation of Privilege VulnerabilityCVE-2025-21385Sentinel and Purview
Microsoft Purview Information Disclosure Vulnerability
Products covered
Select a product to see only its advisories.
- Defender for Office 365, Identity, Cloud and IoTThe other Defender services and sensors8 tracked
- Defender for Endpoint and AntivirusDefender for Endpoint, Defender Antivirus, the antimalware platform and Malware Protection Engine33 tracked
- Sentinel and PurviewSIEM, data security and compliance14 tracked
- Entra IDIdentity and access (formerly Azure AD)25 tracked
All tracked advisories
Newest first. Full analysis marks the CVEs we've written up in depth; the rest link to an automatic summary.
| Published | CVE | Product | Issue | Severity | EPSS | Exploited |
|---|---|---|---|---|---|---|
| CVE-2026-62916 | Entra ID | Microsoft Entra ID Elevation of Privilege Vulnerability | CRITICAL 9.1 | 0.86% | – | |
| CVE-2026-83711 | Entra ID | Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability | CRITICAL 10 | 0.81% | – | |
| CVE-2026-83941 | Entra ID | Entra ID Elevation of Privilege Vulnerability | CRITICAL 9.9 | 0.78% | – | |
| CVE-2026-69836 | Entra ID | Microsoft Entra ID Remote Code Execution Vulnerability | CRITICAL 10 | 1.5% | – | |
| CVE-2026-69851 | Entra ID | Microsoft Entra ID Elevation of Privilege Vulnerability | CRITICAL 9.9 | 0.78% | – | |
| CVE-2026-69414 | Defender for Endpoint and Antivirus | Microsoft Defender Elevation of Privilege Vulnerability | HIGH 7.8 | 1.3% | – | |
| CVE-2026-54123 | Defender for Endpoint and Antivirus | Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability | MEDIUM 5.5 | 0.48% | – | |
| CVE-2026-65673 | Entra ID | Microsoft Entra Connect Elevation of Privilege Vulnerability | HIGH 7.8 | 0.32% | – | |
| CVE-2026-50481 | Entra ID | Azure Active Directory Elevation of Privilege Vulnerability | CRITICAL 9.9 | 0.82% | – | |
| CVE-2026-59115 | Entra ID | Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability | CRITICAL 9.9 | 1.0% | – | |
| CVE-2026-65668 | Sentinel and Purview | Microsoft Purview eDiscovery Elevation of Privilege Vulnerability | HIGH 8.8 | 0.78% | – | |
| CVE-2026-62869 | Entra ID | Azure Entra ID Spoofing Vulnerability | HIGH 8.8 | 0.44% | – | |
| CVE-2026-57106 | Sentinel and Purview | Data Quality Elevation of Privilege Vulnerability | CRITICAL 10 | 0.90% | – | |
| CVE-2026-50652 | Entra ID | Azure Active Directory Denial of Service Vulnerability | HIGH 7.5 | 1.7% | – | |
| CVE-2026-50653 | Entra ID | Azure Active Directory Denial of Service Vulnerability | HIGH 7.5 | 1.2% | – | |
| CVE-2026-55011 | Defender for Endpoint and Antivirus | Microsoft Defender Remote Code Execution Vulnerability | HIGH 7.8 | 0.47% | – | |
| CVE-2026-55012 | Defender for Endpoint and Antivirus | Microsoft Defender Remote Code Execution Vulnerability | HIGH 7.8 | 0.47% | – | |
| CVE-2026-50657 | Defender for Endpoint and Antivirus | Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability | MEDIUM 4.7 | 0.40% | – | |
| CVE-2026-50658 | Defender for Endpoint and Antivirus | Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability | HIGH 7 | 0.20% | – | |
| CVE-2026-56178 | Defender for Endpoint and Antivirus | Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability | MEDIUM 5.5 | 0.23% | – | |
| CVE-2026-57100 | Entra ID | Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability | CRITICAL 9.9 | 0.78% | – | |
| CVE-2026-45480 | Entra ID | Azure Active Directory Elevation of Privilege Vulnerability | CRITICAL 10 | 0.90% | – | |
| CVE-2026-50656 | Defender for Endpoint and Antivirus | Microsoft Defender Elevation of Privilege Vulnerability | HIGH 7.8 | 0.37% | – | |
| CVE-2026-45647 | Defender for Endpoint and Antivirus | Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability | MEDIUM 5.5 | 0.23% | – | |
| CVE-2026-33843 | Entra ID | Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability | CRITICAL 9.1 | 0.86% | – | |
| CVE-2026-42901 | Entra ID | Microsoft Entra ID Elevation of Privilege Vulnerability | CRITICAL 10 | 0.46% | – | |
| CVE-2026-41091Full analysis | Defender for Endpoint and Antivirus | Microsoft Defender Elevation of Privilege Vulnerability | HIGH 7.8 | 0.44% | Yes | |
| CVE-2026-45498Full analysis | Defender for Endpoint and Antivirus | Microsoft Defender Denial of Service Vulnerability | MEDIUM 4 | 1.3% | Yes | |
| CVE-2026-45584 | Defender for Endpoint and Antivirus | Microsoft Defender Remote Code Execution Vulnerability | HIGH 8.1 | 0.71% | – | |
| CVE-2026-40379 | Entra ID | Azure Entra ID Spoofing Vulnerability | CRITICAL 9.3 | 0.95% | – | |
| CVE-2026-26150 | Sentinel and Purview | Microsoft Purview eDiscovery Elevation of Privilege Vulnerability | HIGH 8.6 | 1.1% | – | |
| CVE-2026-35431 | Entra ID | Microsoft Entra ID Entitlement Management Spoofing Vulnerability | CRITICAL 10 | 0.90% | – | |
| CVE-2026-33825 | Defender for Endpoint and Antivirus | Microsoft Defender Elevation of Privilege Vulnerability | HIGH 7.8 | 0.40% | Yes · ransomware | |
| CVE-2026-26138 | Sentinel and Purview | Microsoft Purview Elevation of Privilege Vulnerability | HIGH 8.6 | 1.1% | – | |
| CVE-2026-26139 | Sentinel and Purview | Microsoft Purview Elevation of Privilege Vulnerability | HIGH 8.6 | 0.97% | – | |
| CVE-2026-26148 | Entra ID | Microsoft Azure AD SSH Login extension for Linux Elevation of Privilege Vulnerability | HIGH 8.1 | 0.30% | – | |
| CVE-2026-21537 | Defender for Endpoint and Antivirus | Microsoft Defender for Endpoint Linux Extension Remote Code Execution Vulnerability | HIGH 8.8 | 0.53% | – | |
| CVE-2026-24305 | Entra ID | Azure Entra ID Elevation of Privilege Vulnerability | CRITICAL 9.3 | 0.55% | – | |
| CVE-2025-64676 | Sentinel and Purview | Microsoft Purview eDiscovery Remote Code Execution Vulnerability | HIGH 7.2 | 1.0% | – | |
| CVE-2025-62459 | Defender for Endpoint and Antivirus | Microsoft Defender Portal Spoofing Vulnerability | HIGH 8.3 | 0.31% | – | |
| CVE-2025-59497 | Defender for Endpoint and Antivirus | Microsoft Defender for Linux Denial of Service Vulnerability | HIGH 7 | 0.21% | – | |
| CVE-2025-59218 | Entra ID | Azure Entra ID Elevation of Privilege Vulnerability | CRITICAL 9.6 | 0.66% | – | |
| CVE-2025-59246 | Entra ID | Azure Entra ID Elevation of Privilege Vulnerability | CRITICAL 9.8 | 7.7% | – | |
| CVE-2025-55241 | Entra ID | Azure Entra ID Elevation of Privilege Vulnerability | CRITICAL 10 | 1.6% | – | |
| CVE-2025-53763 | Sentinel and Purview | Azure Databricks Elevation of Privilege Vulnerability | CRITICAL 9.8 | 0.67% | – | |
| CVE-2025-53762 | Sentinel and Purview | Microsoft Purview Elevation of Privilege Vulnerability | HIGH 8.7 | 0.83% | – | |
| CVE-2025-47161 | Defender for Endpoint and Antivirus | Microsoft Defender for Endpoint Elevation of Privilege Vulnerability | HIGH 7.8 | 0.80% | – | |
| CVE-2025-26684 | Defender for Endpoint and Antivirus | Microsoft Defender Elevation of Privilege Vulnerability | MEDIUM 6.7 | 0.44% | – | |
| CVE-2025-26685 | Defender for Office 365, Identity, Cloud and IoT | Microsoft Defender for Identity Spoofing Vulnerability | MEDIUM 6.5 | 0.73% | – | |
| CVE-2025-21385 | Sentinel and Purview | Microsoft Purview Information Disclosure Vulnerability | HIGH 8.8 | 24% | – | |
| CVE-2024-49071 | Defender for Endpoint and Antivirus | Windows Defender Information Disclosure Vulnerability | MEDIUM 6.5 | 1.1% | – | |
| CVE-2024-49057 | Defender for Endpoint and Antivirus | Microsoft Defender for Endpoint on Android Spoofing Vulnerability | HIGH 8.1 | 1.7% | – | |
| CVE-2024-43614 | Defender for Endpoint and Antivirus | Microsoft Defender for Endpoint for Linux Spoofing Vulnerability | MEDIUM 5.5 | 0.65% | – | |
| CVE-2024-43477 | Entra ID | Microsoft Entra ID Elevation of Privilege Vulnerability | HIGH 7.5 | 1.0% | – | |
| CVE-2024-38089 | Defender for Office 365, Identity, Cloud and IoT | Microsoft Defender for IoT Elevation of Privilege Vulnerability | CRITICAL 9.1 | 1.2% | – | |
| CVE-2024-21322 | Defender for Office 365, Identity, Cloud and IoT | Microsoft Defender for IoT Remote Code Execution Vulnerability | HIGH 7.2 | 3.1% | – | |
| CVE-2024-21323 | Defender for Office 365, Identity, Cloud and IoT | Microsoft Defender for IoT Remote Code Execution Vulnerability | HIGH 8.8 | 3.2% | – | |
| CVE-2024-21324 | Defender for Office 365, Identity, Cloud and IoT | Microsoft Defender for IoT Elevation of Privilege Vulnerability | HIGH 7.2 | 2.3% | – | |
| CVE-2024-29053 | Defender for Office 365, Identity, Cloud and IoT | Microsoft Defender for IoT Remote Code Execution Vulnerability | HIGH 8.8 | 3.2% | – | |
| CVE-2024-29054 | Defender for Office 365, Identity, Cloud and IoT | Microsoft Defender for IoT Elevation of Privilege Vulnerability | HIGH 7.2 | 2.3% | – | |
| CVE-2024-29055 | Defender for Office 365, Identity, Cloud and IoT | Microsoft Defender for IoT Elevation of Privilege Vulnerability | HIGH 7.2 | 2.3% | – | |
| CVE-2024-20671 | Defender for Endpoint and Antivirus | Microsoft Defender Security Feature Bypass Vulnerability | MEDIUM 5.5 | 0.91% | – | |
| CVE-2024-21330 | Sentinel and Purview | Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability | HIGH 7.8 | 0.99% | – | |
| CVE-2024-21315 | Defender for Endpoint and Antivirus | Microsoft Defender for Endpoint Protection Elevation of Privilege Vulnerability | HIGH 7.8 | 0.64% | – | |
| CVE-2024-21381 | Entra ID | Microsoft Azure Active Directory B2C Spoofing Vulnerability | MEDIUM 6.8 | 0.42% | – | |
| CVE-2024-21401 | Entra ID | Microsoft Entra Jira Single-Sign-On Plugin Elevation of Privilege Vulnerability | CRITICAL 9.8 | 1.5% | – | |
| CVE-2022-44698 | Windows 10 Version 1809, Windows Server 2019, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 10 Version 1607, Windows Server 2016 | Windows SmartScreen Security Feature Bypass Vulnerability | MEDIUM 5.4 | 76% | Yes · ransomware | |
| CVE-2021-38647 | Sentinel and Purview | Open Management Infrastructure (OMI) Remote Code Execution Vulnerability | CRITICAL 9.8 | 100% | Yes · ransomware | |
| CVE-2021-38645 | Sentinel and Purview | Open Management Infrastructure Elevation of Privilege Vulnerability | HIGH 7.8 | 2.7% | Yes | |
| CVE-2021-38649 | Sentinel and Purview | Open Management Infrastructure Elevation of Privilege Vulnerability | HIGH 7 | 2.9% | Yes | |
| CVE-2021-38648 | Sentinel and Purview | Open Management Infrastructure Elevation of Privilege Vulnerability | HIGH 7.8 | 11% | Yes | |
| CVE-2021-1647 | Defender for Endpoint and Antivirus | Microsoft Defender Remote Code Execution Vulnerability | HIGH 7.8 | 39% | Yes | |
| CVE-2017-8540 | Defender for Endpoint and Antivirus | Malware Protection Engine Improper Restriction of Operations | HIGH 7.8 | 72% | Yes |
Sources: Microsoft security advisories, CISA KEV and FIRST EPSS. Severity is the vendor's own rating.