Microsoft
A
TRUSTED
8,019
Total CVEs
6,431
Crit / High
1,549
Medium
3%
Unpatched
3%
Patched
7.6
Avg CVSS
209
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB
How we collect data →
CVE Trend by Year
Patch Coverage
✓ 256 patched ✗ 280 unpatched ~ 7,472 under review ⏳ 12 pending score
Stock — NASDAQ:MSFT
Yahoo Finance ↗
$393.10
Price (MSFT)
+8.00 (+2.08%)
Today's Change
$393.64
Day High
$384.15
Day Low
$385.10
Prev Close
18185622
Volume
Yahoo Finance via Directus cache · updated daily · 2026-07-13
Stock vs CVE Correlation — NASDAQ:MSFT
click legend to toggle ↑
2026-03-20 → 2026-07-13
HIGH/CRITICAL CVEs in period — stock price impact next trading day:
| CVE ID | CVSS | Published | Stock on day | Next day Δ | +7d Δ |
|---|---|---|---|---|---|
| CVE-2026-58596 | 8.3 | 2026-07-12 | $393.10 | — | — |
| CVE-2026-58281 | 8.3 | 2026-07-11 | $393.10 | — | — |
| CVE-2026-47646 | 9.3 | 2026-07-08 | $383.34 | +0.27% | — |
| CVE-2026-58525 | 8.2 | 2026-07-08 | $383.34 | +0.27% | — |
| CVE-2026-58523 | 6.5 | 2026-07-03 | $386.74 | +0.54% | — |
| CVE-2026-58597 | 4.3 | 2026-07-03 | $386.74 | +0.54% | — |
| CVE-2026-58524 | 5.4 | 2026-07-03 | $386.74 | +0.54% | — |
| CVE-2026-58522 | 6.8 | 2026-07-03 | $386.74 | +0.54% | — |
| CVE-2026-58300 | 6.2 | 2026-07-03 | $386.74 | +0.54% | — |
| CVE-2026-58299 | 7.5 | 2026-07-03 | $386.74 | +0.54% | — |
Alpha Vantage · EOD prices · not financial advice
Intelligence by Audience
PoC Available
2 / 20 shown
CISA KEV (Exploited)
209
Shodan Dorks
ssl:"microsoft" port:443
org:"Microsoft" http.status:200
Top EPSS (Exploitation Probability)
🎯 Bug Bounty Program: https://www.microsoft.com/en-us/msrc/bounty
Quick Facts for Reporting
Total CVEs tracked
8,019
Critical severity
432
Actively exploited (CISA)
209
Unpatched ratio
3%
Avg CVSS score
7.6
Security grade
A (TRUSTED)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-10-13
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-10-13
Security Risk Score (for investors)
HIGH
Vuln Volume
GOOD
Patch Responsiveness
HIGH
CISA Exposure
NASDAQ:MSFT currently trades at
$393.10,
up +8.00 (2.08%) today.
Security risk grade: A — TRUSTED.
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
Security News Google News
Recent CVEs
showing 20 of 8,020
| CVE ID | Severity | Patch | EPSS | Date |
|---|---|---|---|---|
| CVE-2026-69435 | 9.6 CRITICAL | UNKNOWN / UNPATCHED | 0.39% | 2026-10-08 |
| CVE-2026-94510 | 9.9 CRITICAL | UNKNOWN / UNPATCHED | 0.40% | 2026-10-08 |
| CVE-2026-83947 | 7.7 HIGH | UNKNOWN / UNPATCHED | 0.37% | 2026-10-08 |
| CVE-2026-77900 | 9.8 CRITICAL | UNKNOWN / UNPATCHED | 0.49% | 2026-10-08 |
| CVE-2026-88131 PoC | 9.8 CRITICAL | UNKNOWN / UNPATCHED | 0.84% | 2026-10-08 |
| CVE-2026-96207 | 10.0 CRITICAL | UNKNOWN / UNPATCHED | 0.48% | 2026-10-08 |
| CVE-2026-83943 | 8.7 HIGH | UNKNOWN / UNPATCHED | 0.38% | 2026-10-08 |
| CVE-2026-105790 | 6.4 MEDIUM | UNKNOWN / UNPATCHED | — | 2026-10-06 |
| CVE-2026-105789 | 5.4 MEDIUM | UNKNOWN / UNPATCHED | — | 2026-10-06 |
| CVE-2026-105788 | 8.8 HIGH | UNKNOWN / UNPATCHED | 1.05% | 2026-10-06 |
| CVE-2026-105791 | 7.5 HIGH | UNKNOWN / UNPATCHED | — | 2026-10-06 |
| CVE-2026-105795 | 3.1 LOW | PATCH UNDER REVIEW | — | 2026-10-06 |
| CVE-2026-105792 | 6.5 MEDIUM | UNKNOWN / UNPATCHED | — | 2026-10-06 |
| CVE-2026-105794 | ? N/A | PATCH UNDER REVIEW | — | 2026-10-06 |
| CVE-2026-105796 | 8.8 HIGH | PATCH UNDER REVIEW | 0.90% | 2026-10-06 |
| CVE-2026-105793 | 9.1 CRITICAL | UNKNOWN / UNPATCHED | — | 2026-10-06 |
| CVE-2026-96940 | 8.8 HIGH | UNKNOWN / UNPATCHED | — | 2026-10-02 |
| CVE-2026-100208 PoC | 7.5 HIGH | PATCH UNDER REVIEW | — | 2026-09-25 |
| CVE-2026-70125 | 8.8 HIGH | PATCH UNDER REVIEW | 0.44% | 2026-09-23 |
| CVE-2026-62874 | 10.0 CRITICAL | PATCH UNDER REVIEW | 0.32% | 2026-09-18 |
Intel
HQRedmond, Washington, United States
Founded1975
Employees228,000
CEOSatya Nadella
CTOKevin Scott
Ticker NASDAQ:MSFT ↗
CountryUSA
LicenseCommercial
Bug BountyView Program ↗
Trust ScoreA — TRUSTED
Max CVSS10.0
Last Updated2026-10-13
Top Weaknesses
CWE-122
Heap-Based Buffer Overflow
844 occurrences in Microsoft CVEs
(11% of total)
CWE-416
Use After Free
641 occurrences in Microsoft CVEs
(8% of total)
CWE-269
Improper Privilege Management
601 occurrences in Microsoft CVEs
(7% of total)
CWE-94
Code Injection
395 occurrences in Microsoft CVEs
(5% of total)
CWE-125
Out-of-Bounds Read
349 occurrences in Microsoft CVEs
(4% of total)
CWE-200
Sensitive Information Exposure
232 occurrences in Microsoft CVEs
(3% of total)
CWE-362
Race Condition
229 occurrences in Microsoft CVEs
(3% of total)
CWE-400
Uncontrolled Resource Consumption
213 occurrences in Microsoft CVEs
(3% of total)
Company Profile
Microsoft is a multinational technology company that develops, licenses, and supports a wide range of software products, services, and devices. Its most notable products include the Windows operating system, Microsoft Office productivity suite, Azure cloud computing platform, and various enterprise security solutions such as Microsoft Defender and Entra ID. Given the widespread deployment of its software, Microsoft is a primary focus for cybersecurity researchers and threat actors, with thousands of CVEs tracked across its product portfolio.
Response Metrics
Est. MTTR ⓘ
~468 days
(Critical)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
CVE Trend ⓘ ↗ +138% worse
CVE count 2026 vs 2025:
1249 → 2976 CVEs
Patch Speed ⓘ Excellent (<20% open)
3% of CVEs still unpatched.
Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
Financial Risk Estimate
Est. GDPR Low
€2.0M
Est. GDPR High
€20.0M
Based on 432 critical CVEs, 209 CISA KEV, 4% unpatched. Model: GDPR Art.83 · not legal advice.
Actions
Embed Badge
Microsoft A valtersit.com