https://exploit-radar.com/en/flux/marques/microsoft.xml Exploit Radar: exploited Microsoft vulnerabilities The latest additions to CISA’s catalog of exploited vulnerabilities for Microsoft products. 2026-09-25T00:00:00Z Exploit Radar https://exploit-radar.com/en/cve/CVE-2026-65660/ CVE-2026-65660 — Microsoft SharePoint Server 2026-09-25T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on September 25, 2026. https://exploit-radar.com/en/cve/CVE-2026-81963/ CVE-2026-81963 — Microsoft Windows 2026-09-08T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. Start with internet-facing devices. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on September 8, 2026. https://exploit-radar.com/en/cve/CVE-2026-85880/ CVE-2026-85880 — Microsoft Windows 2026-09-08T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. Start with internet-facing devices. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on September 8, 2026. https://exploit-radar.com/en/cve/CVE-2019-1068/ CVE-2019-1068 — Microsoft SQL Server 2026-08-26T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on August 26, 2026. https://exploit-radar.com/en/cve/CVE-2026-33824/ CVE-2026-33824 — Microsoft Windows 2026-08-18T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. Start with internet-facing devices. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on August 18, 2026. https://exploit-radar.com/en/cve/CVE-2026-55040/ CVE-2026-55040 — Microsoft SharePoint Server 2026-08-18T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on August 18, 2026. https://exploit-radar.com/en/cve/CVE-2026-68820/ CVE-2026-68820 — Microsoft Windows 2026-08-11T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. Start with internet-facing devices. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on August 11, 2026. https://exploit-radar.com/en/cve/CVE-2026-50522/ CVE-2026-50522 — Microsoft SharePoint Server 2026-07-22T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on July 22, 2026. https://exploit-radar.com/en/cve/CVE-2026-58644/ CVE-2026-58644 — Microsoft SharePoint Server 2026-07-16T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on July 16, 2026. https://exploit-radar.com/en/cve/CVE-2026-56164/ CVE-2026-56164 — Microsoft SharePoint Server 2026-07-14T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on July 14, 2026. https://exploit-radar.com/en/cve/CVE-2026-56155/ CVE-2026-56155 — Microsoft AD FS 2026-07-14T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. Start with internet-facing devices. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on July 14, 2026. https://exploit-radar.com/en/cve/CVE-2026-45659/ CVE-2026-45659 — Microsoft SharePoint Server 2026-07-01T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on July 1, 2026. https://exploit-radar.com/en/cve/CVE-2008-4250/ CVE-2008-4250 — Microsoft Windows 2026-05-20T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on May 20, 2026. https://exploit-radar.com/en/cve/CVE-2009-1537/ CVE-2009-1537 — Microsoft Windows 2026-05-20T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on May 20, 2026. https://exploit-radar.com/en/cve/CVE-2010-0249/ CVE-2010-0249 — Microsoft Internet Explorer / Edge (legacy) 2026-05-20T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on May 20, 2026. https://exploit-radar.com/en/cve/CVE-2010-0806/ CVE-2010-0806 — Microsoft Internet Explorer / Edge (legacy) 2026-05-20T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on May 20, 2026. https://exploit-radar.com/en/cve/CVE-2026-41091/ CVE-2026-41091 — Microsoft Defender 2026-05-20T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on May 20, 2026. https://exploit-radar.com/en/cve/CVE-2026-45498/ CVE-2026-45498 — Microsoft Defender 2026-05-20T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on May 20, 2026. https://exploit-radar.com/en/cve/CVE-2026-42897/ CVE-2026-42897 — Microsoft Exchange Server 2026-05-15T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on May 15, 2026. https://exploit-radar.com/en/cve/CVE-2026-32202/ CVE-2026-32202 — Microsoft Windows 2026-04-28T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on April 28, 2026. https://exploit-radar.com/en/cve/CVE-2026-33825/ CVE-2026-33825 — Microsoft Defender 2026-04-22T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 14 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on April 22, 2026. https://exploit-radar.com/en/cve/CVE-2009-0238/ CVE-2009-0238 — Microsoft Office 2026-04-14T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on April 14, 2026. https://exploit-radar.com/en/cve/CVE-2026-32201/ CVE-2026-32201 — Microsoft SharePoint Server 2026-04-14T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on April 14, 2026. https://exploit-radar.com/en/cve/CVE-2023-21529/ CVE-2023-21529 — Microsoft Exchange Server 2026-04-13T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 14 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on April 13, 2026. https://exploit-radar.com/en/cve/CVE-2012-1854/ CVE-2012-1854 — Microsoft Office 2026-04-13T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on April 13, 2026. https://exploit-radar.com/en/cve/CVE-2023-36424/ CVE-2023-36424 — Microsoft Windows 2026-04-13T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on April 13, 2026. https://exploit-radar.com/en/cve/CVE-2025-60710/ CVE-2025-60710 — Microsoft Windows 2026-04-13T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 14 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on April 13, 2026. https://exploit-radar.com/en/cve/CVE-2026-20963/ CVE-2026-20963 — Microsoft SharePoint Server 2026-03-18T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on March 18, 2026. https://exploit-radar.com/en/cve/CVE-2008-0015/ CVE-2008-0015 — Microsoft Windows 2026-02-17T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 17, 2026. https://exploit-radar.com/en/cve/CVE-2024-43468/ CVE-2024-43468 — Microsoft Configuration Manager 2026-02-12T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 12, 2026. https://exploit-radar.com/en/cve/CVE-2026-21510/ CVE-2026-21510 — Microsoft Windows 2026-02-10T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 10, 2026. https://exploit-radar.com/en/cve/CVE-2026-21513/ CVE-2026-21513 — Microsoft Windows 2026-02-10T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 10, 2026. https://exploit-radar.com/en/cve/CVE-2026-21514/ CVE-2026-21514 — Microsoft Office 2026-02-10T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 10, 2026. https://exploit-radar.com/en/cve/CVE-2026-21519/ CVE-2026-21519 — Microsoft Windows 2026-02-10T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 10, 2026. https://exploit-radar.com/en/cve/CVE-2026-21533/ CVE-2026-21533 — Microsoft Windows 2026-02-10T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 10, 2026. https://exploit-radar.com/en/cve/CVE-2026-21525/ CVE-2026-21525 — Microsoft Windows 2026-02-10T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 10, 2026. https://exploit-radar.com/en/cve/CVE-2026-21509/ CVE-2026-21509 — Microsoft Office 2026-01-26T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on January 26, 2026. https://exploit-radar.com/en/cve/CVE-2026-20805/ CVE-2026-20805 — Microsoft Windows 2026-01-13T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on January 13, 2026. https://exploit-radar.com/en/cve/CVE-2009-0556/ CVE-2009-0556 — Microsoft Office 2026-01-07T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on January 7, 2026. https://exploit-radar.com/en/cve/CVE-2025-62221/ CVE-2025-62221 — Microsoft Windows 2025-12-09T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on December 9, 2025. https://exploit-radar.com/en/cve/CVE-2025-62215/ CVE-2025-62215 — Microsoft Windows 2025-11-12T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on November 12, 2025. https://exploit-radar.com/en/cve/CVE-2025-59287/ CVE-2025-59287 — Microsoft Windows 2025-10-24T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 24, 2025. https://exploit-radar.com/en/cve/CVE-2025-33073/ CVE-2025-33073 — Microsoft Windows 2025-10-20T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 20, 2025. https://exploit-radar.com/en/cve/CVE-2025-24990/ CVE-2025-24990 — Microsoft Windows 2025-10-14T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 14, 2025. https://exploit-radar.com/en/cve/CVE-2025-59230/ CVE-2025-59230 — Microsoft Windows 2025-10-14T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 14, 2025. https://exploit-radar.com/en/cve/CVE-2011-3402/ CVE-2011-3402 — Microsoft Windows 2025-10-06T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 6, 2025. https://exploit-radar.com/en/cve/CVE-2013-3918/ CVE-2013-3918 — Microsoft Windows 2025-10-06T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 6, 2025. https://exploit-radar.com/en/cve/CVE-2010-3962/ CVE-2010-3962 — Microsoft Internet Explorer / Edge (legacy) 2025-10-06T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 6, 2025. https://exploit-radar.com/en/cve/CVE-2021-43226/ CVE-2021-43226 — Microsoft Windows 2025-10-06T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on October 6, 2025. https://exploit-radar.com/en/cve/CVE-2007-0671/ CVE-2007-0671 — Microsoft Office 2025-08-12T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on August 12, 2025.