M
Vendor security profile402 actively exploited CVEs
microsoft
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs5.824
Critical390
CISA KEV402
Public exploit499
Patch rate%74
Avg. CVSS7.4
12-month vulnerability rate
47
66
110
87
29
326
294
732
788
540
1146
33
CVE KEV
CVE severity distribution
5.824toplam CVE
Critical390 (7%)
High3.625 (62%)
Medium1.517 (26%)
Low41 (1%)
Uncertain251 (4%)
Patch and exploitation view
%74
Verified patch
%7
CISA KEV
%9
Public exploit
4.289Patch available
0Partial
260Workaround
0Vendor: no patch
1.275Unknown
Latest vulnerabilities
10.0
CVE-2026-96207
Microsoft Partner Center Elevation of Privilege Vulnerability
M
Patch verifiedEPSS %0
9.9
CVE-2026-94510
Microsoft Bookings Elevation of Privilege Vulnerability
M
Patch verifiedEPSS %0
9.8
CVE-2026-88131
Microsoft Dataverse Remote Code Execution Vulnerability
M
Patch verifiedEPSS %1
7.7
CVE-2026-83947
Azure Event Grid Spoofing Vulnerability
M
Patch verifiedEPSS %0
8.7
CVE-2026-83943
Azure API Center Information Disclosure Vulnerability
M
Patch verifiedEPSS %0
9.8
CVE-2026-77900
Azure App Service Remote Code Execution Vulnerability
M
Patch verifiedEPSS %0
9.6
CVE-2026-69435
Azure SRE Agent Elevation of Privilege Vulnerability
M
Patch verifiedEPSS %0
5.4
CVE-2026-106272
Vulnerability in Google Chrome
G
Patch status unknownEPSS %0
5.4
CVE-2026-106236
Vulnerability in Google Chrome
G
Patch status unknownEPSS %0
8.6
CVE-2026-106186
Vulnerability in Google Chrome
G
Patch status unknownEPSS %0