Microsoft

Number 2 by total vulnerabilities in the catalog.

Computed from the whole catalog when the site is built.

Compare with another vendor

Total vulnerabilities

14,368

Critical

505

High

8,100

Known Exploited

392

Exploit available

323

Visible in Bangladesh

23,818

Services seen by internet scanning

Network, no login needed

27.1%

Of 11,724 scored records

New vulnerabilities per year, by severity

Critical
High
Medium
Low
None or not scored

5,588 2,794

20031 total:Critical: 0High: 1Medium: 0Low: 0None or not scored: 0
20041 total:Critical: 0High: 1Medium: 0Low: 0None or not scored: 0
20050 total:Critical: 0High: 0Medium: 0Low: 0None or not scored: 0
20061 total:Critical: 0High: 1Medium: 0Low: 0None or not scored: 0
2006
20071 total:Critical: 0High: 1Medium: 0Low: 0None or not scored: 0
20081 total:Critical: 1High: 0Medium: 0Low: 0None or not scored: 0
200912 total:Critical: 0High: 12Medium: 0Low: 0None or not scored: 0
201011 total:Critical: 0High: 11Medium: 0Low: 0None or not scored: 0
2010
20115 total:Critical: 1High: 4Medium: 0Low: 0None or not scored: 0
201211 total:Critical: 1High: 10Medium: 0Low: 0None or not scored: 0
201313 total:Critical: 0High: 11Medium: 2Low: 0None or not scored: 0
201414 total:Critical: 1High: 12Medium: 1Low: 0None or not scored: 0
2014
201519 total:Critical: 1High: 16Medium: 2Low: 0None or not scored: 0
201620 total:Critical: 0High: 17Medium: 3Low: 0None or not scored: 0
2017680 total:Critical: 2High: 25Medium: 2Low: 0None or not scored: 651
2018695 total:Critical: 0High: 17Medium: 2Low: 1None or not scored: 675
2018
2019843 total:Critical: 10High: 104Medium: 80Low: 0None or not scored: 649
20201,265 total:Critical: 11High: 399Medium: 203Low: 3None or not scored: 649
2021891 total:Critical: 36High: 596Medium: 233Low: 7None or not scored: 19
2022933 total:Critical: 20High: 643Medium: 263Low: 7None or not scored: 0
2022
2023995 total:Critical: 35High: 674Medium: 277Low: 9None or not scored: 0
20241,112 total:Critical: 37High: 780Medium: 291Low: 3None or not scored: 1
20251,256 total:Critical: 49High: 874Medium: 323Low: 10None or not scored: 0
2026 (incomplete)5,588 total:Critical: 300High: 3,891Medium: 1,383Low: 14None or not scored: 0
2026

Show as table

Period	Total	Critical	High	Medium	Low	None or not scored
2026 (incomplete)	5,588	300	3,891	1,383	14	0
2025	1,256	49	874	323	10	0
2024	1,112	37	780	291	3	1
2023	995	35	674	277	9	0
2022	933	20	643	263	7	0
2021	891	36	596	233	7	19
2020	1,265	11	399	203	3	649
2019	843	10	104	80	0	649
2018	695	0	17	2	1	675
2017	680	2	25	2	0	651
2016	20	0	17	3	0	0
2015	19	1	16	2	0	0
2014	14	1	12	1	0	0
2013	13	0	11	2	0	0
2012	11	1	10	0	0	0
2011	5	1	4	0	0	0
2010	11	0	11	0	0	0
2009	12	0	12	0	0	0
2008	1	1	0	0	0	0
2007	1	0	1	0	0	0
2006	1	0	1	0	0	0
2005	0	0	0	0	0	0
2004	1	0	1	0	0	0
2003	1	0	1	0	0	0

Top products

Product	Total	Critical/High
Windows 10 Version 1607	2,523	1,874
Windows 10 Version 1809	1,921	1,453
Microsoft 365 Apps for Enterprise	933	735
Windows 10 Version 1507	851	593
Windows	662	57
Windows 11 Version 24H2	302	243
Microsoft Edge (Chromium-based)	297	127
Microsoft SharePoint Enterprise Server 2016	268	158
Windows 10 Version 1803	264	186
Microsoft Edge	248	0

Top bug types

Bug type	Total	Critical/High
Memory Corruption	4,478	3,688
Race Condition	386	336
Improper Input Validation	230	146
Improper Access Control	226	175
Cross-Site Scripting	216	92
Improper Link Resolution Before File Access ('Link Following')	189	158
Information Disclosure	187	31
Untrusted Pointer Dereference	179	138
Stack-based Buffer Overflow	173	169
Buffer Over-read	170	59

Known to be attacked

CVE	Title	Published	Severity	EPSS
CVE-2026-124194	Microsoft Outlook Spoofing Vulnerability	2026-11-10	Medium	n/a
CVE-2026-96951	Windows Shell Security Feature Bypass Vulnerability	2026-10-13	High	9.8%
CVE-2026-85880	Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability	2026-09-08	High	0.4%
CVE-2026-81963	Windows Update Stack Elevation of Privilege Vulnerability	2026-09-08	High	0.4%
CVE-2026-68820	Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability	2026-08-11	High	8.6%
CVE-2026-65660	Microsoft SharePoint Server Remote Code Execution Vulnerability	2026-08-11	High	9.9%
CVE-2026-58644	Microsoft SharePoint Remote Code Execution Vulnerability	2026-07-14	Critical	15.9%
CVE-2026-56164	Microsoft SharePoint Server Elevation of Privilege Vulnerability	2026-07-14	Medium	1.0%
CVE-2026-56155	Active Directory Federation Services Elevation of Privilege Vulnerability	2026-07-14	High	0.3%
CVE-2026-55040	Microsoft SharePoint Server Security Feature Bypass Vulnerability	2026-07-14	Critical	69.5%

Newest vulnerabilities

CVE	Title	Published	Severity	EPSS
CVE-2026-97015	Windows BitLocker Security Feature Bypass Vulnerability	2026-11-10	Medium	n/a
CVE-2026-97013	Windows Shell Elevation of Privilege Vulnerability	2026-11-10	High	n/a
CVE-2026-97006	Windows DNS Information Disclosure Vulnerability	2026-11-10	Medium	n/a
CVE-2026-97002	Microsoft Windows VMSwitch Elevation of Privilege Vulnerability	2026-11-10	High	n/a
CVE-2026-97000	Windows USM Communication Manager Elevation of Privilege Vulnerability	2026-11-10	High	n/a
CVE-2026-96994	Winsock Elevation of Privilege Vulnerability	2026-11-10	High	n/a
CVE-2026-96993	Windows Performance Monitor Remote Code Execution Vulnerability	2026-11-10	High	n/a
CVE-2026-96992	Windows PCI Bus Driver Elevation of Privilege Vulnerability	2026-11-10	Medium	n/a
CVE-2026-96989	Secondary Logon Information Disclosure Vulnerability	2026-11-10	Medium	n/a
CVE-2026-96988	Windows DNS Information Disclosure Vulnerability	2026-11-10	Medium	n/a