Vulnerability intelligence
VULONE Vulnerability Database
Stay ahead of what gets exploited. Every CVE from NVD, enriched every 30 minutes with EPSS, CISA KEV, ransomware linkage and automated analysis.
398,493CVE records
2,864Published, last 7 days
1,726In CISA KEV
1,450Critical, last 30 days
5,599Analysed
15:16 UTCLast NVD sync
Filters Show:
16,359 results. Microsoft.
Page 1 of 818| ID | Severity | Score | Technology | Weakness | CISA KEV | Exploit | EPSS | Published |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-88097 | High | 7.8 |  Microsoft Edge Chromium | Use after free | — | — | 0.26% | Sep 18, 2026 |
| CVE-2026-85878 | Critical | 9.9 | Microsoft Azure Horizondb | Improper authorization | — | — | 0.78% | Sep 18, 2026 |
| CVE-2026-83946 | Medium | 6.1 | Microsoft Azure Portal | Cross-site scripting | — | — | 0.32% | Sep 18, 2026 |
| CVE-2026-69843 | Critical | 10.0 | Microsoft Fabric | Authentication bypass by spoofing | — | — | 0.90% | Sep 18, 2026 |
| CVE-2026-85917 | High | 7.5 | Microsoft Foundry | Server-side request forgery (SSRF) | — | — | 0.97% | Sep 17, 2026 |
| CVE-2026-85889 | Critical | 9.8 | Microsoft Azure Ai Foundry | Missing authentication for critica | — | — | 0.67% | Sep 17, 2026 |
| CVE-2026-85885 | High | 8.8 | Microsoft 365 Copilot | Command injection | — | — | 0.72% | Sep 17, 2026 |
| CVE-2026-83944 | Critical | 9.1 | Microsoft Azure Logic Apps | Improper access control | — | — | 0.44% | Sep 17, 2026 |
| CVE-2026-77903 | High | 8.1 | Microsoft Dataverse | Authentication bypass by spoofing | — | — | 0.37% | Sep 17, 2026 |
| CVE-2026-70200 | Critical | 9.8 | Microsoft Azure Logic Apps | Path traversal | — | — | 0.60% | Sep 17, 2026 |
| CVE-2026-70009 | Critical | 9.8 | Microsoft Azure Arc | Path traversal | — | — | 0.53% | Sep 17, 2026 |
| CVE-2026-69399 | Critical | 9.8 | Microsoft Azure Arc | CWE-441 | — | — | 0.48% | Sep 17, 2026 |
| CVE-2026-68791 | High | 7.5 | Microsoft Azure Machine Learning | Incorrect authorization | — | — | 0.54% | Sep 17, 2026 |
| CVE-2026-55946 | Medium | 5.9 | Microsoft Copilot | Command injection | — | — | 0.39% | Sep 17, 2026 |
| CVE-2026-85893 | High | 8.8 | Microsoft Edge Chromium | Use after free | — | — | 0.82% | Sep 15, 2026 |
| CVE-2026-69486 | High | 8.8 | Microsoft Edge Chromium | Heap-based buffer overflow | — | — | 0.82% | Sep 15, 2026 |
| CVE-2026-85892 | High | 7.8 | Microsoft Edge Chromium | Race condition | — | — | 0.20% | Sep 14, 2026 |
| CVE-2026-77490 | Medium | 6.1 | Microsoft Edge Chromium | Cross-site scripting | — | — | 0.41% | Sep 11, 2026 |
| CVE-2026-69646 | High | 8.3 | Microsoft Skype For Business Server +1 | Improper verification of cryptogra | — | — | 0.32% | Sep 8, 2026 |
| CVE-2026-69642 | Medium | 6.1 | Microsoft Skype For Business Server +1 | Cross-site scripting | — | — | 0.41% | Sep 8, 2026 |
