Where
AND
-Infinity
0

Vendor Risk Score

See how microsoft compares to other vendors in security performance

View Risk Score →

Software

microsoft windows server 2016
3673
microsoft windows server 2019
3530
microsoft windows
3226
microsoft windows operating system
2846
microsoft windows server 2022
2440
microsoft windows 10
2322
microsoft windows server
1920
microsoft windows server 2012 r2
1637
microsoft windows 7
1549
microsoft windows 11
1477
microsoft edge
1330
microsoft windows server 2012
1251
microsoft windows 10 1809
1250
microsoft windows 10 21h2
1235
microsoft windows server 2025
1233
microsoft windows server 2022 23h2
1227
microsoft windows 10 22h2
1221
microsoft windows 11 24h2
1184
microsoft windows rt
1097
microsoft windows 10 1607
1059
microsoft edge (chromium-based)
1006
microsoft windows 11 23h2
1005
microsoft windows server 2022, 23h2 edition
1001
microsoft windows server 2008
861
microsoft windows 11 25h2
760
microsoft windows 8.1
731
microsoft windows 11 22h2
681
microsoft edge beta
644
microsoft windows server 2008 r2 for itanium-based systems
604
microsoft windows 10 1507
586
microsoft windows 11 26h1
553
microsoft windows server 2008 r2
489
microsoft windows vista
446
microsoft office
441
microsoft 365 apps for enterprise
431
microsoft windows xp
425
microsoft 365 apps
360
microsoft windows rt 8.1
337
microsoft office ltsc 2021 for 64-bit editions
297
microsoft office ltsc 2021 for 32-bit editions
296
microsoft office long term servicing channel
295
microsoft office 2019 for 32-bit editions
285
microsoft office 2019 for 64-bit editions
285
microsoft office ltsc 2024 for 32-bit editions
268
microsoft office ltsc 2024 for 64-bit editions
268
microsoft windows 11 21h2
261
microsoft office ltsc for mac 2021
243
microsoft office ltsc for mac 2024
225
microsoft cbl2 kernel 5.15.186.1-1
214
microsoft internet explorer
206

Microsoft EdgeMicrosoft Edge (Chromium-based) Information Disclosure Vulnerability

Risk 42
Severity
7.4
First published (updated )

Microsoft EdgeMicrosoft Edge (Chromium-based) Information Disclosure Vulnerability

Risk 42
Severity
7.4
First published (updated )

Microsoft Azure API Management (APIM)Azure API Management (APIM) Remote Code Execution Vulnerability

Risk 65
Severity
8
First published (updated )

Microsoft Azure AI SearchAzure AI Search Elevation of Privilege Vulnerability

Risk 55
Severity
8.5
First published (updated )

Nlnet Labs Unbound'dns-error-reporting: yes' leads to stack buffer overflow

Risk 46
Severity
7.5
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Nlnet Labs UnboundCross-zone wildcard cache poisoning via RRSIG.labels manipulation

Risk 46
Severity
7.5
First published (updated )

Nlnet Labs UnboundPacket of death for DNSCrypt over TCP

Risk 46
Severity
7.5
First published (updated )

Nlnet Labs UnboundRemote DNS-over-QUIC denial of service due to `quic-size` budget bypass

Risk 46
Severity
7.5
First published (updated )

Microsoft KVMKVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level

Risk 76
Severity
8.8
First published (updated )

Microsoft KiotaKiota: Code Generation Literal Injection in the PHP Generator

Risk 78
Severity
8.7
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Microsoft KiotaKiota: Code Generation Literal Injection in Kiota Ruby Generator

Risk 43
Severity
7.5
First published (updated )

Microsoft Windows TerminalWindows Terminal Remote Code Execution Vulnerability

Risk 69
Severity
7.5
First published (updated )

Microsoft Windows 11Windows Backup Service Elevation of Privilege Vulnerability

Risk 63
Severity
7
First published (updated )

Microsoft Remote Desktop Web ClientWindows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

Risk 43
Severity
7.5
First published (updated )

Secure Access Secure Access installerPrivilge misconfiguration in Secure Access installers

Risk 73
Severity
8.5
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Nginx NGINX PlusNGINX ngx_http_ssi_module vulnerability

Risk 52
Severity
8.3
First published (updated )

Microsoft AVMLInput Validation

Risk 43
Severity
7.5
First published (updated )

Busybox BusyboxUse After Free

Risk 43
Severity
7.5
First published (updated )

busyboxA heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to c…

Risk 43
Severity
7.5
First published (updated )

Busybox BusyboxA heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to ca…

Risk 43
Severity
7.5
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

busyboxA stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows attacker…

Risk 43
Severity
7.5
First published (updated )

CAI Content CredentialsCAI Content Credentials | Insufficiently Protected Credentials (CWE-522)

Risk 43
Severity
7.5
First published (updated )

CAI Content CredentialsCAI Content Credentials | Server-Side Request Forgery (SSRF) (CWE-918)

Risk 57
Severity
8.2
First published (updated )

CAI Content CredentialsCAI Content Credentials | Untrusted Search Path (CWE-426)

Risk 52
Severity
7.4
First published (updated )

CAI Content CredentialsCAI Content Credentials | Improper Input Validation (CWE-20)

Risk 43
Severity
7.5
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

CAI Content CredentialsCAI Content Credentials | Improper Input Validation (CWE-20)

Risk 43
Severity
7.5
First published (updated )

Adobe IllustratorIllustrator | Out-of-bounds Write (CWE-787)

Risk 68
Severity
7.8
First published (updated )

Adobe IllustratorIllustrator | Out-of-bounds Write (CWE-787)

Risk 68
Severity
7.8
First published (updated )

Adobe IllustratorIllustrator | Out-of-bounds Write (CWE-787)

Risk 68
Severity
7.8
First published (updated )

Adobe IllustratorIllustrator | Untrusted Search Path (CWE-426)

Risk 70
Severity
8.6
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203