Exploited vulnerabilities (CISA KEV)

CVE-2026-96951 High · 8.8 KEV High · 52 CWE-77 Oct 13, 2026

Microsoft Windows Command Injection Vulnerability

Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-85880 High · 7.8 KEV High · 54 CWE-122 Sep 8, 2026

Microsoft Windows Heap-Based Buffer Overflow Vulnerability

Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.

CVE-2026-81963 High · 7.8 KEV High · 46 CWE-59 Sep 8, 2026

Microsoft Windows Link Following Vulnerability

Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.

CVE-2026-68820 High · 7.0 KEV High · 51 Public exploit CWE-416 Aug 11, 2026

Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-65660 High · 8.8 KEV High · 59 Public exploit CWE-94 Aug 11, 2026

Microsoft SharePoint Code Injection Vulnerability

Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-55040 Critical · 9.1 KEV Urgent · 73 Public exploit CWE-1390 Jul 14, 2026

Microsoft SharePoint Weak Authentication Vulnerability

Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-58644 Critical · 9.8 KEV High · 67 Public exploit CWE-502 Jul 14, 2026

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

CVE-2026-56164 Critical · 9.8 KEV High · 63 Public exploit CWE-306 Jul 14, 2026

Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability

Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-56155 High · 7.8 KEV High · 45 CWE-1220 Jul 14, 2026

Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability

Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate privileges locally.

CVE-2026-50522 Critical · 9.8 KEV High · 67 Public exploit CWE-502 Jul 14, 2026

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

CVE-2026-45659 High · 8.8 KEV Urgent · 70 Public exploit Ransomware CWE-502 May 22, 2026

Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-45498 High · 7.5 KEV High · 57 Public exploit CWE-400 May 20, 2026

Microsoft Defender Denial of Service Vulnerability

CVE-2026-41091 High · 7.8 KEV High · 53 Public exploit CWE-59 May 20, 2026

Microsoft Defender Link Following Vulnerability

Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally.

CVE-2026-42897 Medium · 6.1 KEV High · 50 Public exploit CWE-79 May 14, 2026

Microsoft Exchange Server Cross-Site Scripting Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-33825 High · 7.8 KEV High · 62 Public exploit Ransomware CWE-1220 Apr 14, 2026

Microsoft Defender Insufficient Granularity of Access Control Vulnerability

Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally.

CVE-2026-33824 Critical · 9.8 KEV High · 65 Public exploit CWE-415 Apr 14, 2026

Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability

Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.

CVE-2026-32201 Medium · 6.5 KEV High · 62 Public exploit CWE-20 Apr 14, 2026

Microsoft SharePoint Server Improper Input Validation Vulnerability

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-32202 Medium · 4.3 KEV High · 66 Public exploit CWE-693 Apr 14, 2026

Microsoft Windows Protection Mechanism Failure Vulnerability

Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-21533 High · 7.8 KEV High · 61 Public exploit CWE-269 Feb 10, 2026

Microsoft Windows Improper Privilege Management Vulnerability

Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.

CVE-2026-21519 High · 7.8 KEV High · 54 CWE-843 Feb 10, 2026

Microsoft Windows Type Confusion Vulnerability

Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-21525 Medium · 6.2 KEV High · 52 CWE-476 Feb 10, 2026

Microsoft Windows NULL Pointer Dereference Vulnerability

Null pointer dereference in Windows Remote Access Connection Manager allows an unauthorized attacker to deny service locally.

CVE-2026-21514 High · 7.8 KEV High · 58 Public exploit CWE-807 Feb 10, 2026

Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability

Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.

CVE-2026-21510 High · 8.8 KEV High · 62 Public exploit CWE-693 Feb 10, 2026

Microsoft Windows Shell Protection Mechanism Failure Vulnerability

Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-21513 High · 8.8 KEV High · 56 CWE-693 Feb 10, 2026

Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability

Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-21509 High · 7.8 KEV High · 62 Public exploit CWE-807 Jan 26, 2026

Microsoft Office Security Feature Bypass Vulnerability

Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a security feature locally.