Microsoft controls the foundations of enterprise IT (Windows, Office) while pivoting toward the Azure cloud and AI. Through its large investment and partnership with OpenAI, it embedded generative AI early across its products (e.g., Copilot), reinforcing Azure's growth.
Its public-sector business is substantial, with a dedicated government cloud (Azure Government) and participation in the Department of Defense's major cloud contract (JWCC). It is a key software and cloud supplier to the federal government, with deep ties in cybersecurity as well.
What the data shows
- Across our collection, federal contracts total $1,923,990,343 (26 awards), spanning 3 awarding agencies. The largest is Department of Defense ($1,813,522,681, ~94% of the total).
- Awards are concentrated in a single agency.
- Also: 8 SEC filings tracked; 377 known-exploited vulnerabilities (KEV) in its products.
Federal contracts (USAspending)
| Amount | Awarding agency | Scope (original) |
|---|---|---|
| ≈$220.5M | Department of Defense /Defense Information Systems Agency | MICROSOFT CONSULTING SERVICES (MCS) AND MICROSOFT PREMIER SUPPORT (MPS) FOR THE UNITED STA... ↗ |
| ≈$172.5M | Department of Defense /Defense Information Systems Agency | ARMY CYBER COMMANDS MICROSOFT CONSULTING SERVICES AND MICROSOFT PREMIER SUPPORT ↗ |
| ≈$160.7M | Department of Defense /Defense Information Systems Agency | IGF::OT::IGF - METSS FOR USMC ↗ |
| ≈$148M | Department of Defense /Defense Information Systems Agency | IGF::OT::IGF LABOR ↗ |
| ≈$119.5M | Department of Defense /Defense Information Systems Agency | MICROSOFT CONSULTING SERVICES (MCS) AND UNIFIED SUPPORT FOR THE U.S. NAVY / PROGRAM EXECUT... ↗ |
| ≈$104.4M | Department of Defense /Department of the Navy | MICROSOFT UNIFIED SUPPORT (MUS) ↗ |
| ≈$101.5M | Department of Defense /Defense Information Systems Agency | SE31&SE34 MCS LABOR ↗ |
| ≈$80.5M | Department of Defense /Department of the Army | MICROSOFT CONSULTING SERVICES - LABOR ↗ |
| ≈$79.1M | Department of Defense /Defense Information Systems Agency | MICROSOFT CONSULTING SERVICE LABOR ↗ |
| ≈$76M | Department of Agriculture /Office of the Chief Financial Officer | MICROSOFT AZURE STRATUS HSTXXX0000002144 93A34F ↗ |
→ AI-related federal spending ranking ・ → Defense contract ranking
Sources of funding (by agency)
The main agencies funding this company and cumulative amounts, from this site's collected contract data. Click an agency for details.
Federal contract awards over time (past 9 fiscal years)
Federal contract awards to Microsoft has risen about 51% from FY2017 to FY2025 (≈$354.8M to ≈$534.4M).
| Fiscal year | Awarded |
|---|---|
| FY2025 | ≈$534.4M |
| FY2024 | ≈$518.4M |
| FY2023 | ≈$498.3M |
| FY2022 | ≈$470.6M |
| FY2021 | ≈$422M |
| FY2020 | ≈$502.7M |
| FY2019 | ≈$403M |
| FY2018 | ≈$468.9M |
| FY2017 | ≈$354.8M |
Total federal contract awards (award types A–D) to this company per fiscal year (starting October). Source: USAspending. May be revised.
SEC filings (EDGAR)
- Current report (8-K) 2026-06-05 Microsoft director Reid Hoffman will not stand for re-election at the 2026 annual meeting (8-K, June 2026) Explained
- Current report (8-K) 2026-05-14 View on SEC ↗
- Current report (8-K) 2026-04-29 View on SEC ↗
- Quarterly report (10-Q) 2026-04-29 View on SEC ↗
- Current report (8-K) 2026-01-28 View on SEC ↗
- Quarterly report (10-Q) 2026-01-28 View on SEC ↗
- Current report (8-K) 2025-12-08 View on SEC ↗
- Current report (8-K) 2025-10-29 View on SEC ↗
Security (CISA KEV)
CISA’s Known Exploited Vulnerabilities (KEV) catalog lists 377 entries for Microsoft products. The most recent are shown below.
- CVE-2026-45498 2026-05-20 Microsoft Defender — Microsoft Defender Denial of Service Vulnerability ↗
- CVE-2026-41091 2026-05-20 Microsoft Defender — Microsoft Defender Link Following Vulnerability ↗
- CVE-2010-0806 2026-05-20 Microsoft Internet Explorer — Microsoft Internet Explorer Use-After-Free Vulnerabili... ↗
- CVE-2010-0249 2026-05-20 Microsoft Internet Explorer — Microsoft Internet Explorer Use-After-Free Vulnerabili... ↗
- CVE-2009-1537 2026-05-20 Microsoft DirectX — Microsoft DirectX NULL Byte Overwrite Vulnerability ↗
- CVE-2008-4250 2026-05-20 Microsoft Windows — Microsoft Windows Buffer Overflow Vulnerability ↗
Timeline
Events tied to this entity, newest first, from the data this site tracks.
Based on real dates within this site's collected set (contracts = start date / filings = filing date / rules = publication date). Not exhaustive.
FAQ
What are its main businesses?
How is it tied to government?
What defines its AI strategy?
Sources (primary)
Entity ID (UEI):FMVPEWNJGLM1
This page is an independent organization that joins the U.S. official data below. Verify the exact, latest, and complete details with each official source.