Known Vulnerabilities for products from Microsoft
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Microsoft".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Additional devices specifications by Microsoft can be found at device.report : Microsoft
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-59162 json | Not Provided | 2026-07-10 | 2026-07-10 | |
| CVE-2026-59161 json | Not Provided | 2026-07-10 | 2026-07-10 | |
| CVE-2026-58597 json | Insufficient ui warning of dangerous operations in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform... | Not Provided | 2026-07-03 | 2026-07-06 |
| CVE-2026-58525 json | Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over ... | Not Provided | 2026-07-08 | 2026-07-09 |
| CVE-2026-58524 json | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allow... | Not Provided | 2026-07-03 | 2026-07-06 |
| CVE-2026-58523 json | Not Provided | 2026-07-03 | 2026-07-07 | |
| CVE-2026-58522 json | Relative path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally. | Not Provided | 2026-07-03 | 2026-07-07 |
| CVE-2026-58300 json | Not Provided | 2026-07-03 | 2026-07-06 | |
| CVE-2026-58299 json | Time-of-check time-of-use (toctou) race condition in Microsoft Edge for Android allows an unauthorized attacker to execute co... | Not Provided | 2026-07-03 | 2026-07-07 |
| CVE-2026-58298 json | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allow... | Not Provided | 2026-07-03 | 2026-07-07 |
| CVE-2026-58297 json | Exposure of private personal information to an unauthorized actor in Microsoft Edge for Android allows an unauthorized attack... | Not Provided | 2026-07-03 | 2026-07-07 |
| CVE-2026-58296 json | Exposure of private personal information to an unauthorized actor in Microsoft Edge for Android allows an unauthorized attack... | Not Provided | 2026-07-03 | 2026-07-07 |
| CVE-2026-58295 json | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attac... | Not Provided | 2026-07-03 | 2026-07-07 |
| CVE-2026-58293 json | External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over... | Not Provided | 2026-07-03 | 2026-07-07 |
| CVE-2026-58292 json | Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | Not Provided | 2026-07-03 | 2026-07-07 |
| CVE-2026-58291 json | Operation on a resource after expiration or release in Microsoft Edge (Chromium-based) allows an unauthorized attacker to dis... | Not Provided | 2026-07-03 | 2026-07-06 |
| CVE-2026-58290 json | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attac... | Not Provided | 2026-07-03 | 2026-07-07 |
| CVE-2026-58289 json | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attac... | Not Provided | 2026-07-03 | 2026-07-07 |
| CVE-2026-58288 json | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | Not Provided | 2026-07-03 | 2026-07-07 |
| CVE-2026-58287 json | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | Not Provided | 2026-07-03 | 2026-07-07 |
Known software with vulnerabilities from Microsoft
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Microsoft | .net Core | 1.0 |
| Application | Microsoft | .net Framework | - |
| Application | Microsoft | .net Windows Server | - |
| Application | Microsoft | 365 Apps | - |
| Application | Microsoft | 3d Viewer | - |
| Application | Microsoft | Access | - |
| Application | Microsoft | Access Multilingual User Interface Pack | 2007 |
| Application | Microsoft | Activesync | - |
| Application | Microsoft | Activex | - |
| Application | Microsoft | Active Directory | - |
| Application | Microsoft | Active Directory Application Mode | - |
| Application | Microsoft | Active Directory Federation Services | 1.0 |
| Application | Microsoft | Active Directory Lightweight Directory Service | - |
| Application | Microsoft | Active Directory Services | - |
| Application | Microsoft | Ampx | - |
| Application | Microsoft | Antigen | - |
| Application | Microsoft | Antispyware | - |
| Application | Microsoft | Applicationinspector | 1.0.1 |
| Application | Microsoft | Application Inspector | 1.0.23 |
| Application | Microsoft | Asp.net | - |