Vulnerability intelligence
VULONE Vulnerability Database
Stay ahead of what gets exploited. Every CVE from NVD, enriched every 30 minutes with EPSS, CISA KEV, ransomware linkage and automated analysis.
398,493CVE records
2,862Published, last 7 days
1,726In CISA KEV
1,447Critical, last 30 days
5,599Analysed
15:16 UTCLast NVD sync
Filters Show:
4,783 results. Microsoft.
Page 1 of 240| ID | Severity | Score | Technology | Weakness | CISA KEV | Exploit | EPSS | Published |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-83946 | Medium | 6.1 |  Microsoft Azure Portal | Cross-site scripting | — | — | 0.32% | Sep 18, 2026 |
| CVE-2026-55946 | Medium | 5.9 | Microsoft Copilot | Command injection | — | — | 0.39% | Sep 17, 2026 |
| CVE-2026-77490 | Medium | 6.1 | Microsoft Edge Chromium | Cross-site scripting | — | — | 0.41% | Sep 11, 2026 |
| CVE-2026-69642 | Medium | 6.1 | Microsoft Skype For Business Server +1 | Cross-site scripting | — | — | 0.41% | Sep 8, 2026 |
| CVE-2026-66308 | Medium | 6.5 | Microsoft Skype For Business Server +1 | Out-of-bounds read | — | — | 1.1% | Sep 8, 2026 |
| CVE-2026-66306 | Medium | 6.5 | Microsoft Skype For Business Server +1 | Error message information leak | — | — | 0.92% | Sep 8, 2026 |
| CVE-2026-66303 | Medium | 6.5 | Microsoft Skype For Business Server +1 | NULL pointer dereference | — | — | 1.1% | Sep 8, 2026 |
| CVE-2026-63523 | Medium | 6.1 | Microsoft Skype For Business Server +1 | Cross-site scripting | — | — | 0.55% | Sep 8, 2026 |
| CVE-2026-85875 | Medium | 5.5 | Microsoft 365 Apps +6 | Out-of-bounds read | — | — | 0.54% | Sep 8, 2026 |
| CVE-2026-83991 | Medium | 5.5 | Microsoft Windows 10 1809 +9 | Missing authentication for critica | — | — | 0.30% | Sep 8, 2026 |
| CVE-2026-83951 | Medium | 5.5 | Microsoft 365 Apps +4 | CWE-126 | — | — | 0.54% | Sep 8, 2026 |
| CVE-2026-83949 | Medium | 5.5 | Microsoft 365 Apps +4 | CWE-126 | — | — | 0.54% | Sep 8, 2026 |
| CVE-2026-83501 | Medium | 5.5 | Microsoft Windows 11 23h2 +4 | Out-of-bounds read | — | — | 0.40% | Sep 8, 2026 |
| CVE-2026-81958 | Medium | 5.5 | Microsoft 365 Apps +6 | Use of uninitialized resource | — | — | 0.54% | Sep 8, 2026 |
| CVE-2026-81401 | Medium | 5.5 | Microsoft 365 Apps +7 | Type confusion | — | — | 0.54% | Sep 8, 2026 |
| CVE-2026-81400 | Medium | 5.5 | Microsoft 365 Apps +6 | Out-of-bounds read | — | — | 0.54% | Sep 8, 2026 |
| CVE-2026-81399 | Medium | 5.5 | Microsoft 365 Apps +6 | CWE-126 | — | — | 0.54% | Sep 8, 2026 |
| CVE-2026-81395 | Medium | 5.5 | Microsoft 365 Apps +6 | Out-of-bounds read | — | — | 0.54% | Sep 8, 2026 |
| CVE-2026-81394 | Medium | 5.5 | Microsoft 365 Apps +6 | CWE-497 | — | — | 0.55% | Sep 8, 2026 |
| CVE-2026-81393 | Medium | 5.5 | Microsoft 365 Apps +6 | Out-of-bounds read | — | — | 0.54% | Sep 8, 2026 |
