Microsoft: exploited vulnerabilities

• 390exploited vulnerabilities
• 117used by ransomware
• Oct 13, 2026latest one added

• Windows 173
• Internet Explorer 36
• Office 29
• Win32k 25
• Exchange Server 17
• SharePoint 10
• SharePoint Server 5
• Defender 5
• Word 4
• Open Management Infrastructure (OMI) 4
• .NET Framework 3
• Active Directory 3
• Silverlight 3
• Excel 3
• SQL Server 2
• Windows 2
• PowerPoint 2
• XML Core Services 2
• SMBv1 server 2
• Edge 2
• Edge and Internet Explorer 2
• DirectX Graphics Kernel (DXGKRNL) 2
• Graphics Device Interface (GDI) 2
• SMBv1 2
• MSHTML 2
• Enhanced Cryptographic Provider 2
• Internet Key Exchange (IKE) Service Extensions 1
• Windows Ancillary Function Driver for WinSock 1
• Active Directory Federation Services 1
• DirectX 1

Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.