en
Microsoft is a global technology company that develops and provides software, cloud services, developer tools, devices, and AI-based services. It supports individual users and organizations across consumer computing, workplace productivity, IT infrastructure, and application development.
As of 10/19/2026, Microsoft recorded 1,412 security vulnerabilities in the last 90 days across 161 products, including 1,036 rated High or above and 5 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, Windows Server 2025 had the most security vulnerabilities in the Microsoft ecosystem, with 708 vulnerabilities—approximately 50.14% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-80092Microsoft Identity Web Elevation of Privilege VulnerabilityCVE-2026-109461Microsoft Authentication Library (MSAL) for Node.js Information Disclosure VulnerabilityCVE-2026-109468ASP.NET Core Denial of Service VulnerabilityCVE-2026-108455Microsoft Office PowerPoint Information Disclosure VulnerabilityCVE-2026-108454Microsoft Office PowerPoint Information Disclosure Vulnerability17,456 Results | Page 1 of 1,746
| SeverityMedium |
| SeverityHigh |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| SeverityHigh |
| SeverityHigh |
| SeverityHigh |
| SeverityHigh |