Skip to content

cveboard RSS feed

Microsoft

Microsoft has 390 entries in CISA's Known Exploited Vulnerabilities catalog; the latest was added on Oct 13, 2026.

Tuesday, October 13
- CISA KEV CVE-2026-96951
  Microsoft Windows Command Injection Vulnerability
  - Microsoft Windows
  - High
  - CVSS 8.8
  - EPSS 1.51%
  - Fixed version listed
  CISA due Oct 16, 2026
- GitHub CVE-2026-105016
  Microsoft Security Advisory CVE-2026-105016 - Microsoft QUIC Remote Code Execution Vulnerability
  - Microsoft .NET 10.0 runtime
  - Critical
  - CVSS 9.8
  - EPSS 0.99%
  - Fixed version listed
  19:56 UTC
- GitHub CVE-2026-88092
  Microsoft Security Advisory CVE-2026-88092 - ASP.NET Core Security Feature Bypass Vulnerability
  - Microsoft ASP.NET Core 10.0
  - Critical
  - CVSS 9.4
  - EPSS 0.79%
  - Fixed version listed
  20:40 UTC
- GitHub CVE-2026-70188
  Microsoft Security Advisory CVE-2026-70188 - ASP.NET Core Security Feature Bypass Vulnerability
  - Microsoft ASP.NET Core 10.0
  - Critical
  - CVSS 9.1
  - EPSS 0.83%
  - Fixed version listed
  20:37 UTC
Tuesday, October 6
- GitHub CVE-2026-105794
  MsQuic: Improper Certificate Validation in Microsoft.Native.Quic.MsQuic.OpenSSL
  - microsoft msquic
  - Critical
  - CVSS 9.1
  - EPSS 1%
  - Fixed version listed
  15:33 UTC
Friday, September 25
- CISA KEV CVE-2026-65660
  Microsoft SharePoint Code Injection Vulnerability
  - Microsoft SharePoint
  - High
  - CVSS 8.8
  - EPSS 2.1%
  - Fixed version listed
  CISA due Sep 28, 2026