Vulnerability intelligence
VULONE Vulnerability Database
Stay ahead of what gets exploited. Every CVE from NVD, enriched every 30 minutes with EPSS, CISA KEV, ransomware linkage and automated analysis.
401,174CVE records
2,562Published, last 7 days
1,734In CISA KEV
1,412Critical, last 30 days
5,599Analysed
08:17 UTCLast NVD sync
Filters Show:
1,415 results. Microsoft.
Page 1 of 71| ID | Severity | Score | Technology | Weakness | CISA KEV | Exploit | EPSS | Published |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-88097 | High | 7.8 |  Microsoft Edge Chromium | Use after free | - | - | 0.26% | Sep 18, 2026 |
| CVE-2026-85887 | High | 7.7 | Microsoft 365 Copilot | Incorrect permission assignment | - | - | 0.84% | Sep 18, 2026 |
| CVE-2026-85917 | High | 7.5 | Microsoft Foundry | Server-side request forgery (SSRF) | - | - | 0.97% | Sep 17, 2026 |
| CVE-2026-85885 | High | 8.8 | Microsoft 365 Copilot | Command injection | - | - | 0.72% | Sep 17, 2026 |
| CVE-2026-77903 | High | 8.1 | Microsoft Dataverse | Authentication bypass by spoofing | - | - | 0.37% | Sep 17, 2026 |
| CVE-2026-68791 | High | 7.5 | Microsoft Azure Machine Learning | Incorrect authorization | - | - | 0.54% | Sep 17, 2026 |
| CVE-2026-85893 | High | 8.8 | Microsoft Edge Chromium | Use after free | - | - | 0.82% | Sep 15, 2026 |
| CVE-2026-69486 | High | 8.8 | Microsoft Edge Chromium | Heap-based buffer overflow | - | - | 0.82% | Sep 15, 2026 |
| CVE-2026-85921 | High | 8.2 | Microsoft Windows 11 26h1 | Double free | - | - | 0.35% | Sep 14, 2026 |
| CVE-2026-85892 | High | 7.8 | Microsoft Edge Chromium | Race condition | - | - | 0.20% | Sep 14, 2026 |
| CVE-2026-69646 | High | 8.3 | Microsoft Skype For Business Server +1 | Improper verification of cryptogra | - | - | 0.32% | Sep 8, 2026 |
| CVE-2026-66307 | High | 7.5 | Microsoft Skype For Business Server +1 | CWE-191 | - | - | 1.2% | Sep 8, 2026 |
| CVE-2026-66305 | High | 7.1 | Microsoft Skype For Business Server +1 | CWE-603 | - | - | 0.53% | Sep 8, 2026 |
| CVE-2026-66304 | High | 7.5 | Microsoft Skype For Business Server +1 | Server-side request forgery (SSRF) | - | - | 0.97% | Sep 8, 2026 |
| CVE-2026-85880 | High | 7.8 | Microsoft Windows 10 1607 +7 | Heap-based buffer overflow | Listed | Confirmed | 3.6% | Sep 8, 2026 |
| CVE-2026-85877 | High | 8.8 | Microsoft Windows 11 24h2 | Heap-based buffer overflow | - | - | 0.82% | Sep 8, 2026 |
| CVE-2026-85360 | High | 7.0 | Microsoft Windows 10 1607 +12 | Use after free | - | - | 0.26% | Sep 8, 2026 |
| CVE-2026-84003 | High | 7.4 | Microsoft Azure\/Msal Node | Authentication bypass by capture-r | - | - | 0.60% | Sep 8, 2026 |
| CVE-2026-84001 | High | 7.5 | Microsoft Windows 10 1607 +12 | Out-of-bounds read | - | - | 1.2% | Sep 8, 2026 |
| CVE-2026-84000 | High | 7.8 | Microsoft Windows 10 1607 +12 | Heap-based buffer overflow | - | - | 0.33% | Sep 8, 2026 |
