Microsoft
Security Risk Profile
59
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 1000 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from June 25, 2026 to present
1000
Total CVEs
716
Critical+High
8
Exploited
107
Unpatched
Threat Assessment
Avg CVSS
7.4
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
107
Critical/High
Risk Level
59/100
medium
⚠️ 8 Active Exploits⚡ 1 Zero-Days🆕 49Fresh (<7d)📈 920 in Last 30 Days
Severity Distribution
Critical
90High
626Medium
236Low
16Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
9Age Distribution
Common Weaknesses (CWE)
1
Use After Free
188
2
Buffer Overflow
130
3
Race Condition
66
4
Integer Overflow
33
5
Infoleak
32
Most Affected Products
1. Microsoft Windows 102996
2. Microsoft Windows 112332
3. Microsoft Windows Server 20251166
4. Linux Linux kernel1042
5. Microsoft Windows Server 2019934
Recent Vulnerabilities
See more →CVE-2026-57990
CVSS 7.4high
7/24/2026🔧 No Patch
CVE-2026-57978
CVSS 5.4medium
7/24/2026
CVE-2026-57989
CVSS 7.4high
7/24/2026
CVE-2026-58275
CVSS 10.0critical
Azure DNS Elevation of Privilege Vulnerability
7/23/2026🔧 No Patch
CVE-2026-35425
CVSS 8.0high
Azure API Management (APIM) Remote Code Execution Vulnerability
7/23/2026🔧 No Patch
CVE-2026-56167
CVSS 8.5high
Azure AI Search Elevation of Privilege Vulnerability
7/23/2026🔧 No Patch
CVE-2026-56160
CVSS 9.1critical
Azure Red Hat OpenShift (ARO) Elevation of Privilege Vulnerability
7/23/2026🔧 No Patch
CVE-2026-49159
CVSS 6.5medium
Microsoft Graph Information Disclosure Vulnerability
7/23/2026🔧 No Patch
CVE-2026-62825
CVSS 10.0critical
Azure Key Vault Elevation of Privilege Vulnerability
7/23/2026🔧 No Patch
CVE-2026-50517
CVSS 9.9critical
Microsoft M365 Copilot Remote Code Execution Vulnerability
7/23/2026🔧 No Patch
Monitor Microsoft in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.