Microsoft
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 1000 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from October 13, 2026 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →CISA Confirms Active Exploitation of Node2Shell / HTTP2Shell
Microsoft's October Patch Tuesday fixed 1,413 vulnerabilities. In one month. That's more than they patched in any single year on record. One was already being actively exploited. CISA told federal agencies to patch it within 3 days.
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
zchunk before 1.5.5 Heap Out-of-Bounds Read via read_preface()
Out-of-band .NET patches landed Oct 25 for the Brotli CVE — fixed builds are 8.0.33 / 9.0.22 / 10.0.14, and PowerShell got fixes too
Resource Exhaustion in MICE Service
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Monitor Microsoft in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.