Microsoft-viva vs Facebook - Cyber Risk Comparison & Security Rating

Comparison Overview

Microsoft Viva

Facebook

Microsoft Viva

Redmond, US

Last Update: 11/03/2026

View Profile

Between 750 and 799

https://www.microsoft.com/microsoft-viva/overview

761/1000Fair

Grow together with Microsoft Viva, the first digital employee experience platform designed to help organizations meet the diverse and evolving needs of people by supporting their wellbeing and potential in a world of flexible work.

NAICS:5112

NAICS Definition:Software Publishers

Employees:None

Subsidiaries:49

12-month incidents

Known data breaches

Attack type number

Facebook

N/A

Last Update: 23/09/2026

View Profile

Between 650 and 699

https://www.meta.com

685/1000Weak

The Facebook company is now Meta. Meta builds technologies that help people connect, find communities, and grow businesses. When Facebook launched in 2004, it changed the way people connect. Apps like Messenger, Instagram and WhatsApp further empowered billions around t...

NAICS:5112

NAICS Definition:Software Publishers

Employees:27,058

Subsidiaries:0

12-month incidents

Known data breaches

Attack type number

Compliance Ranges Comparison

Based On Specific Ai Models Category

Microsoft Viva

ISO 27001Not verified

SOC2 Type 1Not verified

SOC2 Type 2Not verified

GDPRNot verified

PCI DSSNot verified

HIPAANot verified

Facebook

ISO 27001Not verified

SOC2 Type 1Not verified

SOC2 Type 2Not verified

GDPRNot verified

PCI DSSNot verified

HIPAANot verified

Benchmark & Cyber Underwriting Signals

Incidents vs Software Development Industry Avg (This Year)

No incidents recorded for Microsoft Viva in 2026.

Incidents

Incidents vs Software Development Industry Avg (This Year)

No incidents recorded for Facebook in 2026.

Incidents

Incident History - Microsoft Viva (X = Date, Y = Severity)

Microsoft Viva cyber incidents detection timeline including parent company and subsidiaries.

R - Ransomware

C - Cyber Attack

D - Data Breach

V - Vulnerability

Incident History - Facebook (X = Date, Y = Severity)

Facebook cyber incidents detection timeline including parent company and subsidiaries.

R - Ransomware

C - Cyber Attack

D - Data Breach

V - Vulnerability

Notable Incidents

Last Cyber / HR Incidents / Global...

Microsoft Viva

Incidents

No explicit notable incidents reported.

Facebook

Incidents

🔒 Incident : Cyber Attack

FAC4793447091625

🔒 Incident : Breach

FAC215421222

🔒 Incident : Data Leak

FAC2341251122

FAQ

Between Microsoft Viva company and Facebook company, which one has the best AI Cybersecurity Score ?

Between Microsoft Viva company and Facebook company, which one has experienced more cyber incidents in the past ?

Between Microsoft Viva company and Facebook company, which one has experienced more cyber incidents this year ?

Between Microsoft Viva company and Facebook company, which one has experienced at least one ransomware attack ?

Between Microsoft Viva company and Facebook company, which one has experienced at least one data breach ?

Between Microsoft Viva company and Facebook company, which one has experienced at least one targeted cyberattack ?

Between Microsoft Viva company and Facebook company, which one has experienced at least one vulnerability ?

Between Microsoft Viva company and Facebook company, which one holds the most compliance certifications ?

Between Microsoft Viva company and Facebook company, which one holds the fewest compliance certifications ?

Between Microsoft Viva company and Facebook company, which one has the most subsidiaries ?

Between Microsoft Viva company and Facebook company, which one has the largest number of employees ?

Between Microsoft Viva and Facebook, which company holds both SOC 2 Type 1 certifications ?

Between Microsoft Viva and Facebook, which company holds both SOC 2 Type 2 certifications ?

Which company is ISO 27001 certified - Microsoft Viva or Facebook ?

Which company is PCI DSS compliant - Microsoft Viva or Facebook ?

Between Microsoft Viva and Facebook, which company complies with HIPAA regulations for healthcare data ?

Between Microsoft Viva and Facebook, which company complies with GDPR requirements ?

Latest Global CVEs

CVE-2026-100739

SUMMARY

A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file viewresult.php. Performing a manipulation of the argument seno results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The vendor was contacted early about this disclosure but did not respond in any way.

PUBLISHED

Date2026-09-26

UPDATED

Date2026-09-26

RISK INFORMATION (Score: 7.3)

CVSS2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

Base Score: 7.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CVSS4

Base Score: 5.5

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

IMPACT SCORE

3.4

EXPLOITABILITY

3.9

REFERENCES

CVE-2026-94408

SUMMARY

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130)

PUBLISHED

Date2026-09-26

UPDATED

Date2026-09-26

RISK INFORMATION (Score: 4.9)

CVSS3

Base Score: 4.9

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

IMPACT SCORE

3.6

EXPLOITABILITY

1.2

REFERENCES

https://discuss.elastic.co/t/elasticsearch-8-19-22-9-4-7-9-5-3-security-update-esa-2026-184/390688

CVE-2026-94400

SUMMARY

Uncontrolled Resource Consumption (CWE-400) in Kibana can lead denial of service via Excessive Allocation (CAPEC-130)

PUBLISHED

Date2026-09-26

UPDATED

Date2026-09-26

RISK INFORMATION (Score: 6.5)

CVSS3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

IMPACT SCORE

3.6

EXPLOITABILITY

2.8

REFERENCES

https://discuss.elastic.co/t/kibana-8-19-22-9-4-7-9-5-3-security-update-esa-2026-181/390685

CVE-2026-94399

SUMMARY

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130)

PUBLISHED

Date2026-09-26

UPDATED

Date2026-09-26

RISK INFORMATION (Score: 6.5)

CVSS3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

IMPACT SCORE

3.6

EXPLOITABILITY

2.8

REFERENCES

https://discuss.elastic.co/t/elasticsearch-8-19-22-9-4-7-9-5-4-security-update-esa-2026-180/390684

CVE-2026-94398

SUMMARY

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130)

PUBLISHED

Date2026-09-26

UPDATED

Date2026-09-26

RISK INFORMATION (Score: 6.5)

CVSS3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

IMPACT SCORE

3.6

EXPLOITABILITY

2.8

REFERENCES

https://discuss.elastic.co/t/elasticsearch-8-19-22-9-4-7-9-5-4-security-update-esa-2026-179/390683