M
Microsoft
Security Risk Profile
58
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 1000 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 25, 2026 to present
1000
Total CVEs
672
Critical+High
12
Exploited
93
Unpatched
Threat Assessment
Avg CVSS
7.4
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
93
Critical/High
Risk Level
58/100
medium
⚠️ 12 Active Exploits⚡ 5 Zero-Days🆕 18Fresh (<7d)📈 784 in Last 30 Days
Severity Distribution
Critical
124High
548Medium
247Low
36Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
Buffer Overflow
126
2
Use After Free
119
3
Integer Overflow
29
4
Race Condition
28
5
Input Validation
20
Most Affected Products
1. Microsoft Windows 101669
2. Microsoft Windows 111534
3. Microsoft Windows Server 2025642
4. Microsoft Windows Server 2022582
5. Microsoft Windows Server 2012563
Recent Vulnerabilities
See more →CVE-2026-20508
CVSS 6.7medium
Sep 7, 2026🔧 No Patch
CVE-2026-20516
CVSS 5.5medium
Sep 7, 2026🔧 No Patch
CVE-2026-20502
CVSS 8.4high
Sep 7, 2026🔧 No Patch
CVE-2026-20501
CVSS 8.4high
Sep 7, 2026🔧 No Patch
bleepingcomputer-20260904132201
unknown
New CrowdStrike 'FalconFlank' zero-day grants SYSTEM privileges
Sep 4, 2026⚠ Exploited⚡ Zero-Day🔧 No Patch
CVE-2026-83711
CVSS 10.0critical
Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability
Sep 3, 2026🔧 No Patch
CVE-2026-62906
CVSS 7.4high
Microsoft Discovery Studio Information Disclosure Vulnerability
Sep 3, 2026🔧 No Patch
CVE-2026-70352
CVSS 10.0critical
Azure AI Language Elevation of Privilege Vulnerability
Sep 3, 2026🔧 No Patch
CVE-2026-69857
CVSS 8.5high
Azure Cosmos DB Spoofing Vulnerability
Sep 3, 2026🔧 No Patch
CVE-2026-70178
CVSS 8.5high
Microsoft Fabric Elevation of Privilege Vulnerability
Sep 3, 2026🔧 No Patch
Monitor Microsoft in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.