Azure Active Directory Elevation of Privilege Vulnerability
Azure · MSRC
CVE tracker
Microsoft Patch Tuesday
What Microsoft fixes on the second Tuesday of every month – straight from the official Security Update Guide: number of vulnerabilities, critical and already exploited ones (zero-days), affected products and the history of the last 24 months.
All CVEs – Patch Tuesday June 2026
220 vulnerabilities
Azure HorizonDB Elevation of Privilege Vulnerability
Azure · MSRC
Dynamics 365 Elevation of Privilege Vulnerability
Other · MSRC
Microsoft Azure Synapse Elevation of Privilege Vulnerability
Azure · MSRC
Nuance PowerScribe Remote Code Execution Vulnerability
Other · MSRC
DHCP Client Service Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5094123 KB5094128 KB5094127 KB5094125 · MSRC
Windows Kernel Remote Code Execution Vulnerability
HTTP.sys Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5094123 KB5094128 KB5094127 KB5094125 · MSRC
M365 Copilot Information Disclosure Vulnerability
Apps · MSRC
Microsoft Exchange Online Elevation of Privilege Vulnerability
Server software (Exchange, SharePoint …) · MSRC
Dynamics 365 Customer Voice Spoofing Vulnerability
Microsoft Dynamics · MSRC
Microsoft Exchange Online Information Disclosure Vulnerability
Server software (Exchange, SharePoint …) · MSRC
Azure Kubernetes Service (AKS) Remote Code Execution Vulnerability
Azure · MSRC
Microsoft Entra ID Spoofing Vulnerability
Browser (Edge) · MSRC
Remote Desktop Client Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5094123 KB5094128 KB5094127 KB5094125 · MSRC
Windows Active Directory Domain Services Remote Code Execution Vulnerability
Remote Desktop Client Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5094123 KB5094128 KB5094127 KB5094125 · MSRC
Microsoft 365 Copilot's Business Chat Elevation of Privilege Vulnerability
Apps · MSRC
Microsoft Cryptographic Services Elevation of Privilege Vulnerability
Microsoft Outlook and Word Remote Code Execution Vulnerability
Microsoft Office · KB5002880 KB5002881 KB5002874 KB5002876 · MSRC
Microsoft Outlook and Word Remote Code Execution Vulnerability
Microsoft Office · KB5002880 KB5002881 KB5002874 KB5002876 · MSRC
Microsoft Office Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
Windows Hyper-V Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5094123 KB5094128 KB5094127 KB5094125 · MSRC
Windows Hyper-V Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5094128 KB5094127 KB5094125 KB5094126 · MSRC
Microsoft Outlook and Word Remote Code Execution Vulnerability
Microsoft Office · MSRC
Microsoft Azure Network Adapter Elevation of Privilege Vulnerability
Other · MSRC
Windows Hyper-V Remote Code Execution Vulnerability
Windows Deployment Services (WDS) Remote Code Execution
Windows, Windows ESU (Extended Security Updates) · KB5094123 KB5094128 KB5094125 KB5094122 · MSRC
Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5094123 KB5094128 KB5094127 KB5094125 · MSRC
Windows Graphics Component Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates), Microsoft Office, Apps · KB5094123 KB5094128 KB5094127 KB5094125 · MSRC
Windows Graphics Component Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates), Microsoft Office, Apps · KB5094123 KB5094128 KB5094127 KB5094125 · MSRC
Windows Media Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5094123 KB5094128 KB5094127 KB5094125 · MSRC
Azure Bot Service Elevation of Privilege Vulnerability
Azure · MSRC
Microsoft M365 Copilot Remote Code Execution Vulnerability
Apps · MSRC
Remote Desktop Client Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5094123 KB5094128 KB5094127 KB5094125 · MSRC
Remote Desktop Client Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5094123 KB5094128 KB5094127 KB5094125 · MSRC
Remote Desktop Client Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5094123 KB5094128 KB5094127 KB5094125 · MSRC
Microsoft Cost Management Information Disclosure Vulnerability
Azure · MSRC
Remote Desktop Client Remote Code Execution Vulnerability
Remote Desktop Client Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5094123 KB5094128 KB5094127 KB5094125 · MSRC
Windows Kerberos Key Distribution Center (KDC) Remote Code Execution
Windows, Windows ESU (Extended Security Updates) · KB5094123 KB5094128 KB5094125 KB5094122 · MSRC
M365 Copilot Information Disclosure Vulnerability
Apps · MSRC
Microsoft Copilot Tampering Vulnerability
Apps · MSRC
Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability
Browser (Edge) · MSRC
Microsoft Graph Information Disclosure Vulnerability
Azure · MSRC
Microsoft Office Information Disclosure Vulnerability
Microsoft Office · MSRC
Azure Stack Edge Remote Code Execution Vulnerability
Azure · MSRC
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.