{"@context":{"@vocab":"https://schema.org/","dcterms":"http://purl.org/dc/terms/","prov":"http://www.w3.org/ns/prov#"},"@type":"Dataset","@id":"https://api.ai-analytics.org/api/v1/cisa/kev/by-vendor/Microsoft","_source":{"data_provider":"AI Analytics","data_provider_url":"https://api.ai-analytics.org","license":"https://creativecommons.org/publicdomain/zero/1.0/","dcterms:license":"https://creativecommons.org/publicdomain/zero/1.0/","generated_at":"2026-08-18T09:53:51.678Z","primary_source":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog"},"vendor":"Microsoft","summary":{"cve_count":383,"ransomware_count":112,"earliest_kev":"2021-11-03","latest_kev":"2026-08-11"},"by_product":[{"product":"Windows","n":170},{"product":"Internet Explorer","n":36},{"product":"Office","n":29},{"product":"Win32k","n":25},{"product":"Exchange Server","n":17},{"product":"SharePoint","n":8},{"product":"SharePoint Server","n":5},{"product":"Defender","n":5},{"product":"Word","n":4},{"product":"Open Management Infrastructure (OMI)","n":4},{"product":"Silverlight","n":3},{"product":"Excel","n":3},{"product":"Active Directory","n":3},{"product":".NET Framework","n":3},{"product":"XML Core Services","n":2}],"recent_cves":[{"cve_id":"CVE-2026-68820","product":"Windows Ancillary Function Driver for WinSock ","vulnerability_name":"Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability","date_added":"2026-08-11","known_ransomware_use":"Unknown","nvd_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68820"},{"cve_id":"CVE-2026-50522","product":"SharePoint","vulnerability_name":"Microsoft SharePoint Deserialization of Untrusted Data Vulnerability ","date_added":"2026-07-22","known_ransomware_use":"Unknown","nvd_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50522"},{"cve_id":"CVE-2026-58644","product":"SharePoint","vulnerability_name":"Microsoft SharePoint Deserialization of Untrusted Data Vulnerability","date_added":"2026-07-16","known_ransomware_use":"Unknown","nvd_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-58644"},{"cve_id":"CVE-2026-56164","product":"SharePoint Server","vulnerability_name":"Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability","date_added":"2026-07-14","known_ransomware_use":"Unknown","nvd_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56164"},{"cve_id":"CVE-2026-56155","product":"Active Directory Federation Services","vulnerability_name":"Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability ","date_added":"2026-07-14","known_ransomware_use":"Unknown","nvd_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56155"},{"cve_id":"CVE-2026-45659","product":"SharePoint Server","vulnerability_name":"Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability","date_added":"2026-07-01","known_ransomware_use":"Known","nvd_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45659"},{"cve_id":"CVE-2026-45498","product":"Defender","vulnerability_name":"Microsoft Defender Denial of Service Vulnerability","date_added":"2026-05-20","known_ransomware_use":"Unknown","nvd_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45498"},{"cve_id":"CVE-2026-41091","product":"Defender","vulnerability_name":"Microsoft Defender Link Following Vulnerability","date_added":"2026-05-20","known_ransomware_use":"Unknown","nvd_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-41091"},{"cve_id":"CVE-2010-0806","product":"Internet Explorer","vulnerability_name":"Microsoft Internet Explorer Use-After-Free Vulnerability","date_added":"2026-05-20","known_ransomware_use":"Unknown","nvd_url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0806"},{"cve_id":"CVE-2010-0249","product":"Internet Explorer","vulnerability_name":"Microsoft Internet Explorer Use-After-Free Vulnerability","date_added":"2026-05-20","known_ransomware_use":"Unknown","nvd_url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0249"},{"cve_id":"CVE-2009-1537","product":"DirectX","vulnerability_name":"Microsoft DirectX NULL Byte Overwrite Vulnerability","date_added":"2026-05-20","known_ransomware_use":"Unknown","nvd_url":"https://nvd.nist.gov/vuln/detail/CVE-2009-1537"},{"cve_id":"CVE-2008-4250","product":"Windows","vulnerability_name":"Microsoft Windows Buffer Overflow Vulnerability","date_added":"2026-05-20","known_ransomware_use":"Unknown","nvd_url":"https://nvd.nist.gov/vuln/detail/CVE-2008-4250"},{"cve_id":"CVE-2026-42897","product":"Microsoft","vulnerability_name":"Microsoft Exchange Server Cross-Site Scripting Vulnerability","date_added":"2026-05-15","known_ransomware_use":"Unknown","nvd_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42897"},{"cve_id":"CVE-2026-32202","product":"Windows","vulnerability_name":"Microsoft Windows Protection Mechanism Failure Vulnerability","date_added":"2026-04-28","known_ransomware_use":"Unknown","nvd_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-32202"},{"cve_id":"CVE-2026-33825","product":"Defender","vulnerability_name":"Microsoft Defender Insufficient Granularity of Access Control Vulnerability","date_added":"2026-04-22","known_ransomware_use":"Known","nvd_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33825"},{"cve_id":"CVE-2026-32201","product":"SharePoint Server","vulnerability_name":"Microsoft SharePoint Server Improper Input Validation Vulnerability","date_added":"2026-04-14","known_ransomware_use":"Unknown","nvd_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-32201"},{"cve_id":"CVE-2009-0238","product":"Office","vulnerability_name":"Microsoft Office Remote Code Execution","date_added":"2026-04-14","known_ransomware_use":"Unknown","nvd_url":"https://nvd.nist.gov/vuln/detail/CVE-2009-0238"},{"cve_id":"CVE-2023-36424","product":"Windows","vulnerability_name":"Microsoft Windows Out-of-Bounds Read Vulnerability","date_added":"2026-04-13","known_ransomware_use":"Unknown","nvd_url":"https://nvd.nist.gov/vuln/detail/CVE-2023-36424"},{"cve_id":"CVE-2023-21529","product":"Exchange Server","vulnerability_name":"Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability","date_added":"2026-04-13","known_ransomware_use":"Known","nvd_url":"https://nvd.nist.gov/vuln/detail/CVE-2023-21529"},{"cve_id":"CVE-2025-60710","product":"Windows","vulnerability_name":"Microsoft Windows Link Following Vulnerability","date_added":"2026-04-13","known_ransomware_use":"Known","nvd_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-60710"},{"cve_id":"CVE-2012-1854","product":"Visual Basic for Applications (VBA)","vulnerability_name":"Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability","date_added":"2026-04-13","known_ransomware_use":"Unknown","nvd_url":"https://nvd.nist.gov/vuln/detail/CVE-2012-1854"},{"cve_id":"CVE-2026-20963","product":"SharePoint","vulnerability_name":"Microsoft SharePoint Deserialization of Untrusted Data Vulnerability","date_added":"2026-03-18","known_ransomware_use":"Unknown","nvd_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-20963"},{"cve_id":"CVE-2008-0015","product":"Windows","vulnerability_name":" Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability","date_added":"2026-02-17","known_ransomware_use":"Unknown","nvd_url":"https://nvd.nist.gov/vuln/detail/CVE-2008-0015"},{"cve_id":"CVE-2024-43468","product":"Configuration Manager","vulnerability_name":"Microsoft Configuration Manager SQL Injection Vulnerability","date_added":"2026-02-12","known_ransomware_use":"Unknown","nvd_url":"https://nvd.nist.gov/vuln/detail/CVE-2024-43468"},{"cve_id":"CVE-2026-21514","product":"Office","vulnerability_name":"Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability","date_added":"2026-02-10","known_ransomware_use":"Unknown","nvd_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-21514"}]}