Microsoft Exchange Server Spoofing Vulnerability
Windows ESU (Extended Security Updates), Server software (Exchange, SharePoint …) · KB5094144 KB5094142 KB5094140 KB5094139 · MSRC
CVE tracker
Microsoft Patch Tuesday
What Microsoft fixes on the second Tuesday of every month – straight from the official Security Update Guide: number of vulnerabilities, critical and already exploited ones (zero-days), affected products and the history of the last 24 months.
All CVEs – Patch Tuesday May 2026
162 vulnerabilities
Microsoft Defender Elevation of Privilege Vulnerability
System Center and Defender · MSRC
Microsoft Defender Denial of Service Vulnerability
System Center and Defender · MSRC
Microsoft Power Pages Remote Code Execution Vulnerability
Microsoft Dynamics · MSRC
Azure Orbital Spatio Remote Code Execution Vulnerability
Azure · MSRC
Microsoft Planetary Computer Pro Information Disclosure Vulnerability
Other · MSRC
Azure Local Disconnected Operations (ALDO) Elevation of Privilege Vulnerability
Azure · MSRC
Azure DevOps Information Disclosure Vulnerability
Developer tools (.NET, Visual Studio …) · MSRC
Microsoft Entra ID Elevation of Privilege Vulnerability
Azure · MSRC
Azure Resource Manager Elevation of Privilege Vulnerability
Azure · MSRC
Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability
Azure · MSRC
Azure Virtual Network Gateway Remote Code Execution Vulnerability
Azure · MSRC
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
Windows Netlogon Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5087538 KB5087545 KB5087424 KB5087539 · MSRC
Windows DNS Client Remote Code Execution Vulnerability
Microsoft Team Events Portal Information Disclosure Vulnerability
Microsoft Office · MSRC
Azure Cloud Shell Spoofing Vulnerability
Azure · MSRC
Microsoft Authenticator Information Disclosure Vulnerability
Apps · MSRC
Azure Entra ID Spoofing Vulnerability
Azure · MSRC
Windows Hyper-V Elevation of Privilege Vulnerability
Microsoft Copilot Tampering Vulnerability
Apps · MSRC
Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability
Azure · MSRC
Microsoft SSO Plugin for Jira & Confluence Elevation of Privilege Vulnerability
Azure · MSRC
Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability
Azure · MSRC
Azure Machine Learning Notebook Spoofing Vulnerability
Azure · MSRC
Azure Privileged Identity Management (PIM) Elevation of Privilege Vulnerability
Azure · MSRC
Microsoft SharePoint Server Remote Code Execution Vulnerability
Windows Graphics Component Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5087538 KB5087545 KB5087424 KB5087544 · MSRC
Azure AI Foundry Elevation of Privilege Vulnerability
Azure · MSRC
Microsoft Office Remote Code Execution Vulnerability
Microsoft Outlook and Word Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
Microsoft Word Remote Code Execution Vulnerability
Microsoft Word Remote Code Execution Vulnerability
Microsoft Word Remote Code Execution Vulnerability
Microsoft Office · KB5002868 KB5002869 KB5002870 KB5002872 · MSRC
Microsoft Partner Center Spoofing Vulnerability
Azure · MSRC
Azure Monitor Action Group Notification System Elevation of Privilege Vulnerability
Azure · MSRC
Microsoft Defender Remote Code Execution Vulnerability
System Center and Defender · MSRC
Windows GDI Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5087538 KB5087545 KB5087424 KB5087544 · MSRC
Microsoft Office Remote Code Execution Vulnerability
Microsoft Office · MSRC
Azure Stack HCI Information Disclosure Vulnerability
Azure · MSRC
Microsoft Dynamics 365 Customer Insights Elevation of Privilege Vulnerability
Microsoft Dynamics · MSRC
Microsoft Global Secure Access (GSA) Information Disclosure Vulnerability
Azure · MSRC
M365 Copilot Information Disclosure Vulnerability
Apps · MSRC
M365 Copilot Information Disclosure Vulnerability
Apps · MSRC
Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5087538 KB5087545 KB5087424 KB5087544 · MSRC
Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability
Browser (Edge) · MSRC
M365 Copilot Information Disclosure Vulnerability
Apps · MSRC
Azure Logic Apps Elevation of Privilege Vulnerability
Azure · MSRC
Azure SDK for Java Security Feature Bypass Vulnerability
Azure · MSRC
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.