M
Microsoft
Security Risk Profile
58
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 1000 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 25, 2026 to present
1000
Total CVEs
673
Critical+High
11
Exploited
91
Unpatched
Threat Assessment
Avg CVSS
7.4
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
91
Critical/High
Risk Level
58/100
medium
⚠️ 11 Active Exploits⚡ 4 Zero-Days🆕 24Fresh (<7d)📈 829 in Last 30 Days
Severity Distribution
Critical
125High
548Medium
248Low
35Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
Buffer Overflow
123
2
Use After Free
119
3
Integer Overflow
30
4
Race Condition
29
5
Input Validation
20
Most Affected Products
1. Microsoft Windows 101669
2. Microsoft Windows 111533
3. Microsoft Windows Server 2025642
4. Microsoft Windows Server 2022582
5. Microsoft Windows Server 2012563
Recent Vulnerabilities
See more →CVE-2026-83711
CVSS 10.0critical
Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability
Sep 3, 2026🔧 No Patch
CVE-2026-62906
CVSS 7.4high
Microsoft Discovery Studio Information Disclosure Vulnerability
Sep 3, 2026🔧 No Patch
CVE-2026-70352
CVSS 10.0critical
Azure AI Language Elevation of Privilege Vulnerability
Sep 3, 2026🔧 No Patch
CVE-2026-69857
CVSS 8.5high
Azure Cosmos DB Spoofing Vulnerability
Sep 3, 2026🔧 No Patch
CVE-2026-70178
CVSS 8.5high
Microsoft Fabric Elevation of Privilege Vulnerability
Sep 3, 2026🔧 No Patch
CVE-2026-65818
CVSS 8.5high
Power Automate Elevation of Privilege Vulnerability
Sep 3, 2026🔧 No Patch
CVE-2026-62916
CVSS 9.1critical
Microsoft Entra ID Elevation of Privilege Vulnerability
Sep 3, 2026🔧 No Patch
CVE-2026-80098
CVSS 9.3critical
Copilot Studio Elevation of Privilege Vulnerability
Sep 3, 2026🔧 No Patch
CVE-2026-83941
CVSS 9.9critical
Sep 3, 2026🔧 No Patch
CVE-2026-9852
CVSS 4.6EPSS 0%medium
Sep 3, 2026🔧 No Patch
Monitor Microsoft in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.