MSRXMSRXSecurity
Vulnerabilities / Microsoft IIS

Microsoft IIS vulnerabilities

CISA has not confirmed any Microsoft IIS flaw as exploited in the past 365 days. Recent CVEs are listed below.

Scan a website for Microsoft IISCheck your dependenciesAll products

Source: CISA Known Exploited Vulnerabilities catalog 2026.10.28 (live), refreshed every 12 hours.