Windows

United States Commercial www.microsoft.com/en-us/windows ↗ Bug Bounty ↗ 📈 NASDAQ:MSFT $393.10 (+2.08%)
B
MODERATE
125
Total CVEs
89
Crit / High
35
Medium
0%
Unpatched
86%
Patched
7.2
Avg CVSS
0
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB How we collect data →
// INTEL UPGRADE
Full Company Dossier — Coming Soon
Executive profiles, financial exposure, M&A risk, breach history & supply-chain threat mapping — all in one place.
OSINT FINANCIALS EXEC PROFILES BREACH DB
▸ CVE Trend by Year
▸ Patch Coverage
Patched
86%
Unpatched
0%
Under Review
14%
✓ 6 patched ✗ 0 unpatched ~ 1 under review
▸ Stock — NASDAQ:MSFT Yahoo Finance ↗
$393.10
Price (MSFT)
+8.00 (+2.08%)
Today's Change
$393.64
Day High
$384.15
Day Low
$385.10
Prev Close
18185622
Volume

Yahoo Finance via Directus cache · updated daily · 2026-07-13

▸ Stock vs CVE Correlation — NASDAQ:MSFT click legend to toggle ↑ 2026-03-20 → 2026-07-13
No CVEs found in the stock price history period for this vendor.
▸ Intelligence by Audience
PoC Available
4 / 20 shown
CISA KEV (Exploited)
0
Shodan Dorks
ssl:"windows" port:443
org:"Windows" http.status:200
Top EPSS (Exploitation Probability)
CVE-1999-0597 1.27% exploitation probability
CVE-1999-0200 0.48% exploitation probability
CVE-1999-0596 0.48% exploitation probability
CVE-1999-0594 0.48% exploitation probability
CVE-1999-0584 0.48% exploitation probability
🎯 Bug Bounty Program: https://www.microsoft.com/en-us/msrc/bounty
Quick Facts for Reporting
Total CVEs tracked
125
Critical severity
6
Actively exploited (CISA)
0
Unpatched ratio
0%
Avg CVSS score
7.2
Security grade
B (MODERATE)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-08-03
Security Risk Score (for investors)
MED
Vuln Volume
GOOD
Patch Responsiveness
LOW
CISA Exposure
NASDAQ:MSFT currently trades at $393.10, up +8.00 (2.08%) today. Security risk grade: B — MODERATE.
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
▸ Security News Google News
Microsoft Fixes 1,118 Vulnerabilities in October Patch Tuesday and Introduces New Risk Cohorts - CyberSecurityNews
CyberSecurityNews 7h ago
CISO perspectives on managing vulnerability risks in the age of AI - Microsoft
Microsoft 2026-10-06
Scalefusion launches vulnerability management capability for Windows and macOS endpoints - ET CIO
ET CIO 3d ago
Microsoft touts cost-saving AI model for cybersecurity - CNBC
CNBC 2026-07-27
The patch window is collapsing: Why security needs a new control plane - Microsoft Azure
Microsoft Azure 2026-08-25
Expanding Daybreak as the Cyber Defense Window Narrows - OpenAI
OpenAI 2026-08-10
▸ Recent CVEs showing 20 of 7
CVE IDSeverityPatchEPSSDate
CVE-2025-14394 4.3 MEDIUM PATCH UNDER REVIEW 0.01% 2025-12-13
CVE-1999-0603 10.0 CRITICAL PATCHED / FIX AVAILABLE 0.47% 1999-01-01
CVE-1999-0200 PoC 10.0 CRITICAL PATCHED / FIX AVAILABLE 0.48% 1999-01-01
CVE-1999-0597 PoC 10.0 CRITICAL PATCHED / FIX AVAILABLE 1.27% 1999-01-01
CVE-1999-0596 PoC 10.0 CRITICAL PATCHED / FIX AVAILABLE 0.48% 1999-01-01
CVE-1999-0594 PoC 10.0 CRITICAL PATCHED / FIX AVAILABLE 0.48% 1999-01-01
CVE-1999-0584 10.0 CRITICAL PATCHED / FIX AVAILABLE 0.48% 1999-01-01
View all 7 CVEs for Windows →
▸Intel
HQRedmond, United States
Founded1975
Employees228,000
CEOSatya Nadella
CTOKevin Scott
Ticker NASDAQ:MSFT ↗
CountryUnited States
LicenseCommercial
Bug BountyView Program ↗
Trust ScoreB — MODERATE
Max CVSS10.0
Last Updated2026-08-03
▸Top Weaknesses
CWE-416
Use After Free
32 occurrences in Windows CVEs (26% of total)
CWE-416 ⓘ
32
CWE-122
Heap-Based Buffer Overflow
18 occurrences in Windows CVEs (14% of total)
CWE-122 ⓘ
18
CWE-200
Sensitive Information Exposure
16 occurrences in Windows CVEs (13% of total)
CWE-200 ⓘ
16
CWE-362
Race Condition
12 occurrences in Windows CVEs (10% of total)
CWE-362 ⓘ
12
CWE-125
Out-of-Bounds Read
6 occurrences in Windows CVEs (5% of total)
CWE-125 ⓘ
6
CWE-284
Improper Access Control
4 occurrences in Windows CVEs (3% of total)
CWE-284 ⓘ
4
CWE-287
Improper Authentication
4 occurrences in Windows CVEs (3% of total)
CWE-287 ⓘ
4
CWE-121
Unknown Weakness Type
3 occurrences in Windows CVEs (2% of total)
CWE-121 ⓘ
3
▸Company Profile

Microsoft Windows is a widely used operating system developed by Microsoft Corporation, serving as the primary platform for personal computers, enterprise environments, and critical infrastructure globally. Its cybersecurity relevance is paramount due to its extensive attack surface, frequent vulnerability disclosures, and central role in defending against malware, ransomware, and nation-state threats. Microsoft's security initiatives include regular Patch Tuesday updates, the Microsoft Security Response Center (MSRC), and a mature bug bounty program.

▸Response Metrics
Est. MTTR ⓘ ~39 days (Good)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
Patch Speed ⓘ Good (20–40% open)
0% of CVEs still unpatched.  Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
▸ Financial Risk Estimate
Est. GDPR Low
€238K
Est. GDPR High
€2.4M

Based on 6 critical CVEs, 0 CISA KEV, 30% unpatched. Model: GDPR Art.83 · not legal advice.

▸Actions
⚖ Compare with another vendor
▸Embed Badge
Windows B valtersit.com