FULLTEXT DEL 1 AV 3
10-K – 2026-07-29 – msft-20260630.htm
10-K FY false 0000789019 P2Y P5Y P3Y P1Y http://fasb.org/us-gaap/2025#DerivativeAssets http://fasb.org/us-gaap/2025#DerivativeAssets http://fasb.org/us-gaap/2025#DerivativeLiabilities http://fasb.org/us-gaap/2025#DerivativeLiabilities http://fasb.org/us-gaap/2025#ShortTermInvestments http://fasb.org/us-gaap/2025#ShortTermInvestments http://fasb.org/us-gaap/2025#OtherAssetsCurrent http://fasb.org/us-gaap/2025#OtherAssetsCurrent http://fasb.org/us-gaap/2025#LongTermInvestments http://fasb.org/us-gaap/2025#LongTermInvestments http://fasb.org/us-gaap/2025#OtherAssetsNoncurrent http://fasb.org/us-gaap/2025#OtherAssetsNoncurrent http://fasb.org/us-gaap/2025#OtherLiabilitiesCurrent http://fasb.org/us-gaap/2025#OtherLiabilitiesCurrent http://fasb.org/us-gaap/2025#OtherLiabilitiesNoncurrent http://fasb.org/us-gaap/2025#OtherLiabilitiesNoncurrent 2014 2015 2016 2017 2004 2005 2006 2007 2008 2009 2010 2011 2012 2013 2021 2022 2023 2024 2025 http://fasb.org/srt/2025#ChiefExecutiveOfficerMember 268 0000789019 srt:MaximumMember 2026-06-30 0000789019 us-gaap:FairValueInputsLevel2Member 2025-06-30 0000789019 us-gaap:DebtSecuritiesMember us-gaap:FairValueInputsLevel2Member us-gaap:AssetBackedSecuritiesMember 2026-06-30 0000789019 us-gaap:ForeignGovernmentDebtSecuritiesMember 2025-06-30 0000789019 msft:OperatingLeaseLiabilitiesMember 2025-06-30 0000789019 us-gaap:AccumulatedGainLossNetCashFlowHedgeParentMember 2025-06-30 0000789019 msft:AmyEHoodMember 2026-06-30 0000789019 us-gaap:AccumulatedNetUnrealizedInvestmentGainLossMember 2026-06-30 0000789019 us-gaap:PerformanceSharesMember 2025-07-01 2026-06-30 0000789019 srt:MaximumMember msft:IssuanceOfLongTermDebtSevenMember 2026-06-30 0000789019 msft:OtherMeasurementMember us-gaap:EquitySecuritiesMember 2025-06-30 0000789019 msft:MorePersonalComputingMember 2024-06-30 0000789019 us-gaap:DesignatedAsHedgingInstrumentMember us-gaap:ForeignExchangeContractMember 2026-06-30 0000789019 msft:IssuanceOfLongTermDebtNineMember srt:MaximumMember 2025-07-01 2026-06-30 0000789019 us-gaap:EquityContractMember us-gaap:NonoperatingIncomeExpenseMember 2025-07-01 2026-06-30 0000789019 srt:MinimumMember us-gaap:BuildingAndBuildingImprovementsMember 2026-06-30 0000789019 msft:ActivisionBlizzardIncMember 2023-10-13 0000789019 us-gaap:NonoperatingIncomeExpenseMember us-gaap:AccumulatedGainLossNetCashFlowHedgeParentMember 2024-07-01 2025-06-30 0000789019 us-gaap:FairValueInputsLevel3Member us-gaap:DebtSecuritiesMember us-gaap:USStatesAndPoliticalSubdivisionsMember 2026-06-30 0000789019 msft:IssuanceOfLongTermDebtSixMember 2026-06-30 0000789019 us-gaap:OtherNoncurrentAssetsMember 2025-06-30 0000789019 us-gaap:NonoperatingIncomeExpenseMember us-gaap:InterestRateContractMember us-gaap:FairValueHedgingMember 2023-07-01 2024-06-30 0000789019 msft:IssuanceOfLongTermDebtElevenMember 2025-06-30 0000789019 msft:IssuanceOfLongTermDebtFiveMember srt:MinimumMember 2026-06-30 0000789019 us-gaap:NonoperatingIncomeExpenseMember us-gaap:ForeignExchangeContractMember 2025-07-01 2026-06-30 0000789019 us-gaap:EquityContractMember us-gaap:LongMember us-gaap:NondesignatedMember 2025-06-30 0000789019 msft:IssuanceOfLongTermDebtThirteenMember 2026-06-30 0000789019 msft:AmyEHoodMember 2026-04-01 2026-06-30 0000789019 srt:MaximumMember msft:IssuanceOfLongTermDebtSevenMember 2025-07-01 2026-06-30 0000789019 msft:ServerProductsAndCloudServicesMember 2023-07-01 2024-06-30 0000789019 us-gaap:DomesticCountryMember 2026-06-30 0000789019 msft:ShareRepurchaseProgramTwentyTwentyOneMember 2023-10-01 2023-12-31 0000789019 us-gaap:ContractualRightsMember 2026-06-30 0000789019 msft:IntelligentCloudMember 2023-07-01 2024-06-30 0000789019 msft:IssuanceOfLongTermDebtSixMember 2025-07-01 2026-06-30 0000789019 msft:SearchAdvertisingMember 2023-07-01 2024-06-30 0000789019 msft:WindowsAndDevicesMember 2023-07-01 2024-06-30 0000789019 us-gaap:CommonStockIncludingAdditionalPaidInCapitalMember 2023-06-30 0000789019 srt:MaximumMember us-gaap:BuildingAndBuildingImprovementsMember 2026-06-30 0000789019 us-gaap:CustomerRelationshipsMember 2024-07-01 2025-06-30 0000789019 us-gaap:EquitySecuritiesMember 2025-07-01 2026-06-30 0000789019 us-gaap:DebtSecuritiesMember us-gaap:FairValueInputsLevel2Member us-gaap:CorporateDebtSecuritiesMember 2025-06-30 0000789019 us-gaap:AccumulatedNetUnrealizedInvestmentGainLossMember 2025-07-01 2026-06-30 0000789019 us-gaap:RestrictedStockMember 2026-06-30 0000789019 us-gaap:EmployeeStockMember 2023-07-01 2024-06-30 0000789019 us-gaap:FairValueInputsLevel1Member 2025-06-30 0000789019 msft:ShareRepurchaseProgramTwentyTwentyOneAndTwentyTwentyFourMember 2024-07-01 2025-06-30 0000789019 us-gaap:DesignatedAsHedgingInstrumentMember us-gaap:LongMember us-gaap:ForeignExchangeContractMember 2025-06-30 0000789019 msft:IssuanceOfLongTermDebtTwelveMember srt:MinimumMember 2026-06-30 0000789019 msft:ServerProductsAndCloudServicesMember 2024-07-01 2025-06-30 0000789019 msft:ProductivityAndBusinessProcessesMember 2024-07-01 2025-06-30 0000789019 msft:IssuanceOfLongTermDebtSevenMember 2025-07-01 2026-06-30 0000789019 msft:OtherProductsAndServicesMember 2025-07-01 2026-06-30 0000789019 msft:IssuanceOfLongTermDebtTenMember 2025-07-01 2026-06-30 0000789019 us-gaap:CustomerRelationshipsMember 2026-06-30 0000789019 msft:IssuanceOfLongTermDebtOneMember 2025-06-30 0000789019 us-gaap:RestrictedStockMember srt:MaximumMember 2025-07-01 2026-06-30 0000789019 2024-05-01 2024-05-01 0000789019 msft:ActivisionBlizzardIncMember 2023-10-13 2023-10-13 0000789019 msft:O2026Q2DividendsMember 2025-10-01 2025-12-31 0000789019 srt:MinimumMember msft:IssuanceOfLongTermDebtEightMember 2025-07-01 2026-06-30 0000789019 msft:FinanceLeaseMember 2026-06-30 0000789019 srt:MaximumMember 2023-07-01 2024-06-30 0000789019 us-gaap:DebtSecuritiesMember us-gaap:USGovernmentAgenciesDebtSecuritiesMember us-gaap:FairValueInputsLevel2Member 2025-06-30 0000789019 2024-07-01 2024-09-30 0000789019 us-gaap:CustomerRelationshipsMember 2025-06-30 0000789019 msft:IssuanceOfLongTermDebtFourMember 2025-06-30 0000789019 msft:XBOXMember 2025-07-01 2026-06-30 0000789019 us-gaap:DerivativeMember 2026-06-30 0000789019 2023-06-30 0000789019 country:US 2024-07-01 2025-06-30 0000789019 us-gaap:OtherContractMember us-gaap:NonoperatingIncomeExpenseMember 2024-07-01 2025-06-30 0000789019 us-gaap:DebtSecuritiesMember us-gaap:FairValueInputsLevel2Member us-gaap:USStatesAndPoliticalSubdivisionsMember 2025-06-30 0000789019 us-gaap:TechnologyBasedIntangibleAssetsMember msft:ActivisionBlizzardIncMember 2023-10-13 2023-10-13 0000789019 us-gaap:CashMember 2025-06-30 0000789019 us-gaap:RestrictedStockMember 2025-06-30 0000789019 us-gaap:RetainedEarningsMember 2024-07-01 2025-06-30 0000789019 2026-05-01 2026-05-01 0000789019 msft:ShareRepurchaseProgramTwentyTwentyOneMember 2023-07-01 2023-09-30 0000789019 us-gaap:EquityContractMember us-gaap:NondesignatedMember us-gaap:ShortMember 2026-06-30 0000789019 msft:IssuanceOfLongTermDebtElevenMember 2025-07-01 2026-06-30 0000789019 msft:ShareRepurchaseProgramTwentyTwentyFourMember 2024-09-16 0000789019 msft:EnterpriseAndPartnerServicesMember 2023-07-01 2024-06-30 0000789019 msft:EnterpriseAndPartnerServicesMember 2024-07-01 2025-06-30 0000789019 msft:MicrosoftCloudMember 2024-07-01 2025-06-30 0000789019 msft:ActivisionBlizzardIncMember 2022-07-01 2023-06-30 0000789019 us-gaap:AccumulatedNetUnrealizedInvestmentGainLossMember us-gaap:NonoperatingIncomeExpenseMember 2025-07-01 2026-06-30 0000789019 us-gaap:EquitySecuritiesMember 2023-07-01 2024-06-30 0000789019 us-gaap:AccumulatedOtherComprehensiveIncomeMember 2025-07-01 2026-06-30 0000789019 us-gaap:NonUsMember 2025-06-30 0000789019 msft:IssuanceOfLongTermDebtFiveMember 2026-06-30 0000789019 us-gaap:FairValueInputsLevel3Member us-gaap:DebtSecuritiesMember us-gaap:USStatesAndPoliticalSubdivisionsMember 2025-06-30 0000789019 2026-07-23 0000789019 srt:MinimumMember 2023-07-01 2024-06-30 0000789019 us-gaap:AccumulatedGainLossNetCashFlowHedgeParentMember 2023-06-30 0000789019 us-gaap:FurnitureAndFixturesMember srt:MaximumMember 2026-06-30 0000789019 msft:IssuanceOfLongTermDebtTwelveMember srt:MaximumMember 2026-06-30 0000789019 us-gaap:SoftwareAndSoftwareDevelopmentCostsMember 2026-06-30 0000789019 us-gaap:DebtSecuritiesMember us-gaap:FairValueInputsLevel2Member us-gaap:CertificatesOfDepositMember 2026-06-30 0000789019 msft:IssuanceOfLongTermDebtThirteenMember 2025-07-01 2026-06-30 0000789019 us-gaap:DesignatedAsHedgingInstrumentMember us-gaap:LongMember us-gaap:ForeignExchangeContractMember 2026-06-30 0000789019 us-gaap:AccumulatedOtherComprehensiveIncomeMember 2026-06-30 0000789019 us-gaap:ForeignExchangeContractMember us-gaap:CashFlowHedgingMember 2025-07-01 2026-06-30 0000789019 srt:MinimumMember 2024-07-01 2025-06-30 0000789019 msft:IssuanceOfLongTermDebtTwoMember 2025-07-01 2026-06-30 0000789019 msft:IntelligentCloudMember 2024-07-01 2025-06-30 0000789019 msft:IssuanceOfLongTermDebtFourMember 2025-07-01 2026-06-30 0000789019 msft:IssuanceOfLongTermDebtTenMember 2025-06-30 0000789019 us-gaap:AssetBackedSecuritiesMember 2026-06-30 0000789019 us-gaap:DebtSecuritiesMember 2025-07-01 2026-06-30 0000789019 us-gaap:RestrictedStockMember 2024-07-01 2025-06-30 0000789019 us-gaap:AccumulatedNetUnrealizedInvestmentGainLossMember 2023-06-30 0000789019 us-gaap:USTreasuryAndGovernmentMember 2025-06-30 0000789019 us-gaap:AccumulatedOtherComprehensiveIncomeMember 2024-07-01 2025-06-30 0000789019 msft:O2025Q2DividendsMember 2024-10-01 2024-12-31 0000789019 msft:OpenAIGlobalLlcMember 2023-07-01 2024-06-30 0000789019 msft:IntelligentCloudMember 2025-07-01 2026-06-30 0000789019 us-gaap:NondesignatedMember us-gaap:ForeignExchangeContractMember us-gaap:ShortMember 2025-06-30 0000789019 us-gaap:LongMember us-gaap:NondesignatedMember us-gaap:ForeignExchangeContractMember 2026-06-30 0000789019 us-gaap:CashFlowHedgingMember us-gaap:OtherComprehensiveIncomeMember 2025-07-01 2026-06-30 0000789019 msft:XBOXMember 2023-07-01 2024-06-30 0000789019 us-gaap:ServiceOtherMember 2025-07-01 2026-06-30 0000789019 us-gaap:CommonStockIncludingAdditionalPaidInCapitalMember 2024-07-01 2025-06-30 0000789019 msft:ActivisionBlizzardIncMember us-gaap:MarketingRelatedIntangibleAssetsMember 2023-10-13 0000789019 us-gaap:OtherCurrentLiabilitiesMember 2025-06-30 0000789019 msft:LongTermInvestmentsMember 2025-06-30 0000789019 msft:NotesTwoPointSixTwoFivePercentDueMayTwoTwentyThirtyThreeMember 2025-07-01 2026-06-30 0000789019 us-gaap:DesignatedAsHedgingInstrumentMember us-gaap:LongMember us-gaap:InterestRateContractMember 2025-06-30 0000789019 msft:OpenAIGlobalLlcMember 2025-07-01 2026-06-30 0000789019 2026-06-30 0000789019 us-gaap:NonoperatingIncomeExpenseMember us-gaap:ForeignExchangeContractMember 2024-07-01 2025-06-30 0000789019 msft:IssuanceOfLongTermDebtElevenMember srt:MaximumMember 2026-06-30 0000789019 us-gaap:AccumulatedOtherComprehensiveIncomeMember 2025-06-30 0000789019 us-gaap:USStatesAndPoliticalSubdivisionsMember 2025-06-30 0000789019 msft:EquityAndOtherInvestmentsMember 2026-06-30 0000789019 us-gaap:DebtSecuritiesMember 2026-06-30 0000789019 us-gaap:CorporateDebtSecuritiesMember 2025-06-30 0000789019 us-gaap:OtherContractMember us-gaap:NonoperatingIncomeExpenseMember 2023-07-01 2024-06-30 0000789019 msft:SearchAdvertisingMember 2025-07-01 2026-06-30 0000789019 us-gaap:RestrictedStockMember 2025-07-01 2026-06-30 0000789019 srt:MinimumMember us-gaap:FurnitureAndFixturesMember 2026-06-30 0000789019 msft:MicrosoftCloudMember 2025-07-01 2026-06-30 0000789019 msft:O2026Q3DividendsMember 2026-01-01 2026-03-31 0000789019 msft:IntelligentCloudMember 2024-06-30 0000789019 us-gaap:NonoperatingIncomeExpenseMember us-gaap:ForeignExchangeContractMember us-gaap:CashFlowHedgingMember 2024-07-01 2025-06-30 0000789019 srt:MinimumMember msft:IssuanceOfLongTermDebtElevenMember 2025-07-01 2026-06-30 0000789019 country:US 2025-06-30 0000789019 us-gaap:RetainedEarningsMember 2023-06-30 0000789019 msft:MicrosoftThreeSixFiveCommercialProductsAndCloudServicesMember 2024-07-01 2025-06-30 0000789019 us-gaap:UnsecuredDebtMember 2025-07-01 2026-06-30 0000789019 us-gaap:USStatesAndPoliticalSubdivisionsMember 2026-06-30 0000789019 srt:MaximumMember msft:IssuanceOfLongTermDebtSixMember 2025-07-01 2026-06-30 0000789019 msft:OtherProductsAndServicesMember 2023-07-01 2024-06-30 0000789019 us-gaap:OtherCurrentAssetsMember 2026-06-30 0000789019 msft:O2026Q1DividendsMember 2025-07-01 2025-09-30 0000789019 us-gaap:MarketingRelatedIntangibleAssetsMember 2025-06-30 0000789019 srt:MinimumMember 2026-06-30 0000789019 us-gaap:DebtSecuritiesMember us-gaap:FairValueInputsLevel2Member us-gaap:CommercialPaperMember 2025-06-30 0000789019 us-gaap:EquitySecuritiesMember 2025-06-30 0000789019 msft:IssuanceOfLongTermDebtTwelveMember srt:MaximumMember 2025-07-01 2026-06-30 0000789019 msft:IssuanceOfLongTermDebtFiveMember 2025-06-30 0000789019 srt:MinimumMember msft:IssuanceOfLongTermDebtSixMember 2025-07-01 2026-06-30 0000789019 msft:MorePersonalComputingMember 2024-07-01 2025-06-30 0000789019 msft:LinkedInCorporationMember 2024-07-01 2025-06-30 0000789019 us-gaap:AccumulatedOtherComprehensiveIncomeMember 2024-06-30 0000789019 us-gaap:EquityContractMember us-gaap:NondesignatedMember 2026-06-30 0000789019 2025-07-01 2025-09-30 0000789019 us-gaap:NonUsMember 2024-06-30 0000789019 msft:IssuanceOfLongTermDebtThirteenMember srt:MaximumMember 2026-06-30 0000789019 us-gaap:AccumulatedNetUnrealizedInvestmentGainLossMember us-gaap:NonoperatingIncomeExpenseMember 2023-07-01 2024-06-30 0000789019 us-gaap:EmployeeStockMember 2024-06-30 0000789019 msft:IssuanceOfLongTermDebtOneMember 2026-06-30 0000789019 msft:IssuanceOfLongTermDebtThreeMember 2025-06-30 0000789019 msft:ShareRepurchaseProgramTwentyTwentyFourMember 2026-01-01 2026-03-31 0000789019 msft:IssuanceOfLongTermDebtTwoMember 2025-06-30 0000789019 msft:MicrosoftThreeSixFiveConsumerProductsAndCloudServicesMember 2024-07-01 2025-06-30 0000789019 us-gaap:EmployeeStockMember 2025-07-01 2026-06-30 0000789019 us-gaap:FairValueInputsLevel3Member us-gaap:DebtSecuritiesMember us-gaap:CorporateDebtSecuritiesMember 2026-06-30 0000789019 us-gaap:DebtSecuritiesMember us-gaap:FairValueInputsLevel2Member us-gaap:ForeignGovernmentDebtSecuritiesMember 2025-06-30 0000789019 msft:IssuanceOfLongTermDebtSevenMember 2026-06-30 0000789019 us-gaap:USTreasuryAndGovernmentMember 2026-06-30 0000789019 2024-06-30 0000789019 msft:IssuanceOfLongTermDebtTwoMember 2026-06-30 0000789019 msft:OtherMeasurementMember us-gaap:EquitySecuritiesMember 2026-06-30 0000789019 us-gaap:ContractualRightsMember 2025-06-30 0000789019 msft:IssuanceOfLongTermDebtSixMember 2025-06-30 0000789019 us-gaap:RetainedEarningsMember 2025-06-30 0000789019 us-gaap:NonoperatingIncomeExpenseMember us-gaap:AccumulatedGainLossNetCashFlowHedgeParentMember 2025-07-01 2026-06-30 0000789019 msft:IssuanceOfLongTermDebtNineMember 2026-06-30 0000789019 us-gaap:DesignatedAsHedgingInstrumentMember us-gaap:InterestRateContractMember 2026-06-30 0000789019 us-gaap:CommonStockIncludingAdditionalPaidInCapitalMember 2025-06-30 0000789019 us-gaap:OtherNoncurrentLiabilitiesMember 2026-06-30 0000789019 us-gaap:DebtSecuritiesMember us-gaap:USTreasurySecuritiesMember us-gaap:FairValueInputsLevel1Member 2026-06-30 0000789019 msft:NotesThreePointOneTwoFivePercentDueDecemberSixTwentyTwentyEightMember 2025-07-01 2026-06-30 0000789019 msft:OperatingLeaseLiabilitiesMember 2026-06-30 0000789019 msft:IssuanceOfLongTermDebtNineMember srt:MaximumMember 2026-06-30 0000789019 msft:LinkedInCorporationMember 2025-07-01 2026-06-30 0000789019 us-gaap:AssetBackedSecuritiesMember 2025-06-30 0000789019 us-gaap:MarketingRelatedIntangibleAssetsMember 2024-07-01 2025-06-30 0000789019 us-gaap:EquityContractMember us-gaap:LongMember us-gaap:NondesignatedMember 2026-06-30 0000789019 us-gaap:ForeignExchangeContractMember us-gaap:CashFlowHedgingMember 2023-07-01 2024-06-30 0000789019 msft:DynamicsProductsAndCloudServicesMember 2025-07-01 2026-06-30 0000789019 msft:IssuanceOfLongTermDebtTwelveMember 2025-06-30 0000789019 msft:MicrosoftThreeSixFiveConsumerProductsAndCloudServicesMember 2023-07-01 2024-06-30 0000789019 us-gaap:EquitySecuritiesMember 2024-07-01 2025-06-30 0000789019 us-gaap:RetainedEarningsMember 2026-06-30 0000789019 us-gaap:AccumulatedGainLossNetCashFlowHedgeParentMember 2024-06-30 0000789019 2026-07-01 msft:CommercialCustomersMember 2026-06-30 0000789019 us-gaap:FairValueInputsLevel3Member us-gaap:DebtSecuritiesMember us-gaap:CorporateDebtSecuritiesMember 2025-06-30 0000789019 us-gaap:DebtSecuritiesMember us-gaap:FairValueInputsLevel2Member us-gaap:USGovernmentAgenciesDebtSecuritiesMember 2026-06-30 0000789019 msft:IssuanceOfLongTermDebtNineMember 2025-06-30 0000789019 us-gaap:DebtSecuritiesMember 2025-06-30 0000789019 us-gaap:TechnologyBasedIntangibleAssetsMember msft:ActivisionBlizzardIncMember 2023-10-13 0000789019 us-gaap:DebtSecuritiesMember us-gaap:USTreasurySecuritiesMember us-gaap:FairValueInputsLevel1Member 2025-06-30 0000789019 us-gaap:ServiceOtherMember 2023-07-01 2024-06-30 0000789019 country:US 2024-06-30 0000789019 us-gaap:FairValueInputsLevel3Member 2026-06-30 0000789019 us-gaap:FairValueInputsLevel1Member us-gaap:EquitySecuritiesMember 2025-06-30 0000789019 us-gaap:OtherContractMember us-gaap:LongMember us-gaap:NondesignatedMember 2026-06-30 0000789019 msft:O2025Q3DividendsMember 2025-01-01 2025-03-31 0000789019 us-gaap:ContractualRightsMember 2024-07-01 2025-06-30 0000789019 us-gaap:EquityContractMember us-gaap:NondesignatedMember us-gaap:ShortMember 2025-06-30 0000789019 msft:ProductivityAndBusinessProcessesMember 2025-07-01 2026-06-30 0000789019 us-gaap:RetainedEarningsMember 2024-06-30 0000789019 msft:AccumulatedTranslationAdjustmentAndOtherMember 2025-07-01 2026-06-30 0000789019 msft:ActivisionBlizzardIncMember us-gaap:MarketingRelatedIntangibleAssetsMember 2023-10-13 2023-10-13 0000789019 msft:IssuanceOfLongTermDebtTenMember 2026-06-30 0000789019 msft:AccumulatedTranslationAdjustmentAndOtherMember 2024-06-30 0000789019 msft:IssuanceOfLongTermDebtNineMember srt:MinimumMember 2026-06-30 0000789019 us-gaap:OtherContractMember us-gaap:LongMember us-gaap:NondesignatedMember 2025-06-30 0000789019 msft:ProductivityAndBusinessProcessesMember 2025-06-30 0000789019 msft:IntelligentCloudMember 2025-06-30 0000789019 us-gaap:NonoperatingIncomeExpenseMember us-gaap:InterestRateContractMember us-gaap:FairValueHedgingMember 2024-07-01 2025-06-30 0000789019 msft:MorePersonalComputingMember 2025-06-30 0000789019 msft:IssuanceOfLongTermDebtNineMember srt:MinimumMember 2025-07-01 2026-06-30 0000789019 us-gaap:DesignatedAsHedgingInstrumentMember us-gaap:ForeignExchangeContractMember 2025-06-30 0000789019 us-gaap:PerformanceSharesMember 2023-07-01 2024-06-30 0000789019 us-gaap:PerformanceSharesMember msft:ExecutiveIncentivePlanMember 2025-07-01 2026-06-30 0000789019 msft:IssuanceOfLongTermDebtTenMember srt:MinimumMember 2025-07-01 2026-06-30 0000789019 msft:IssuanceOfLongTermDebtEightMember 2025-07-01 2026-06-30 0000789019 us-gaap:DebtSecuritiesMember 2023-07-01 2024-06-30 0000789019 us-gaap:DomesticCountryMember 2025-07-01 2026-06-30 0000789019 us-gaap:InternalRevenueServiceIRSMember 2023-09-26 2023-09-26 0000789019 us-gaap:OtherContractMember us-gaap:NondesignatedMember 2026-06-30 0000789019 msft:ServerProductsAndCloudServicesMember 2025-07-01 2026-06-30 0000789019 msft:IssuanceOfLongTermDebtThreeMember 2026-06-30 0000789019 us-gaap:AccumulatedGainLossNetCashFlowHedgeParentMember 2023-07-01 2024-06-30 0000789019 us-gaap:TechnologyBasedIntangibleAssetsMember 2025-07-01 2026-06-30 0000789019 us-gaap:DebtSecuritiesMember us-gaap:FairValueInputsLevel2Member us-gaap:CommercialPaperMember 2026-06-30 0000789019 us-gaap:AccumulatedOtherComprehensiveIncomeMember 2023-07-01 2024-06-30 0000789019 us-gaap:AccumulatedOtherComprehensiveIncomeMember 2023-06-30 0000789019 msft:IssuanceOfLongTermDebtNineMember 2025-07-01 2026-06-30 0000789019 msft:IssuanceOfLongTermDebtThirteenMember 2025-06-30 0000789019 2025-10-01 2025-12-31 0000789019 msft:ShareRepurchaseProgramTwentyTwentyOneMember 2024-10-01 2024-12-31 0000789019 us-gaap:TechnologyBasedIntangibleAssetsMember 2024-07-01 2025-06-30 0000789019 us-gaap:NonoperatingIncomeExpenseMember us-gaap:ForeignExchangeContractMember us-gaap:CashFlowHedgingMember 2025-07-01 2026-06-30 0000789019 us-gaap:NondesignatedMember us-gaap:ForeignExchangeContractMember 2026-06-30 0000789019 us-gaap:OtherNoncurrentLiabilitiesMember 2025-06-30 0000789019 us-gaap:NonUsMember 2026-06-30 0000789019 us-gaap:OtherContractMember us-gaap:NondesignatedMember us-gaap:ShortMember 2025-06-30 0000789019 us-gaap:ProductMember 2023-07-01 2024-06-30 0000789019 msft:SearchAdvertisingMember 2024-07-01 2025-06-30 0000789019 2026-07-01 2026-06-30 0000789019 us-gaap:DebtSecuritiesMember 2024-07-01 2025-06-30 0000789019 us-gaap:CorporateDebtSecuritiesMember 2026-06-30 0000789019 msft:CommercialCustomersMember 2026-06-30 0000789019 us-gaap:DesignatedAsHedgingInstrumentMember us-gaap:LongMember us-gaap:InterestRateContractMember 2026-06-30 0000789019 msft:RegionalOperatingCentersMember 2025-07-01 2026-06-30 0000789019 us-gaap:EquitySecuritiesMember 2026-06-30 0000789019 msft:IssuanceOfLongTermDebtOneMember 2025-07-01 2026-06-30 0000789019 msft:ShareRepurchaseProgramTwentyTwentyFourMember 2026-04-01 2026-06-30 0000789019 us-gaap:EarliestTaxYearMember msft:FederalAndStateMember 2025-07-01 2026-06-30 0000789019 msft:IssuanceOfLongTermDebtTwelveMember 2026-06-30 0000789019 msft:ShareRepurchaseProgramTwentyTwentyFourMember 2026-06-30 0000789019 us-gaap:AccumulatedGainLossNetCashFlowHedgeParentMember 2025-07-01 2026-06-30 0000789019 us-gaap:FairValueInputsLevel2Member 2026-06-30 0000789019 msft:ShareRepurchaseProgramTwentyTwentyOneMember 2021-09-14 0000789019 msft:OtherProductsAndServicesMember 2024-07-01 2025-06-30 0000789019 us-gaap:CommonStockMember 2025-07-01 2026-06-30 0000789019 srt:MinimumMember msft:IssuanceOfLongTermDebtThirteenMember 2025-07-01 2026-06-30 0000789019 us-gaap:OtherContractMember us-gaap:NonoperatingIncomeExpenseMember 2025-07-01 2026-06-30 0000789019 msft:ShareRepurchaseProgramTwentyTwentyFourMember 2025-07-01 2026-06-30 0000789019 country:IE 2025-07-01 2026-06-30 0000789019 us-gaap:CustomerRelationshipsMember 2025-07-01 2026-06-30 0000789019 msft:MicrosoftCloudMember 2023-07-01 2024-06-30 0000789019 msft:MicrosoftThreeSixFiveCommercialProductsAndCloudServicesMember 2025-07-01 2026-06-30 0000789019 srt:MinimumMember us-gaap:ComputerEquipmentMember 2026-06-30 0000789019 msft:ShareRepurchaseProgramTwentyTwentyOneMember 2025-01-01 2025-03-31 0000789019 msft:IntelligentCloudMember 2026-06-30 0000789019 us-gaap:NonoperatingIncomeExpenseMember us-gaap:ForeignExchangeContractMember 2023-07-01 2024-06-30 0000789019 us-gaap:ProductMember 2025-07-01 2026-06-30 0000789019 2025-07-01 2026-06-30 0000789019 us-gaap:EmployeeStockMember 2026-06-30 0000789019 msft:MorePersonalComputingMember 2025-07-01 2026-06-30 0000789019 us-gaap:ForeignCountryMember 2026-06-30 0000789019 msft:IssuanceOfLongTermDebtFourMember 2026-06-30 0000789019 msft:MicrosoftThreeSixFiveConsumerProductsAndCloudServicesMember 2025-07-01 2026-06-30 0000789019 us-gaap:FairValueInputsLevel1Member 2026-06-30 0000789019 msft:AccumulatedTranslationAdjustmentAndOtherMember 2024-07-01 2025-06-30 0000789019 srt:MaximumMember 2025-07-01 2026-06-30 0000789019 us-gaap:EquityContractMember us-gaap:NondesignatedMember 2025-06-30 0000789019 us-gaap:RestrictedStockMember 2023-07-01 2024-06-30 0000789019 msft:ShareRepurchaseProgramTwentyTwentyFourMember 2025-10-01 2025-12-31 0000789019 us-gaap:DebtSecuritiesMember us-gaap:FairValueInputsLevel2Member us-gaap:CorporateDebtSecuritiesMember 2026-06-30 0000789019 us-gaap:NonUsMember 2025-07-01 2026-06-30 0000789019 us-gaap:RevenueCommissionersIrelandMember 2025-07-01 2026-06-30 0000789019 msft:MorePersonalComputingMember 2026-06-30 0000789019 msft:IssuanceOfLongTermDebtTenMember srt:MaximumMember 2026-06-30 0000789019 us-gaap:NonUsMember 2024-07-01 2025-06-30 0000789019 msft:IssuanceOfLongTermDebtThreeMember 2025-07-01 2026-06-30 0000789019 msft:IssuanceOfLongTermDebtElevenMember srt:MaximumMember 2025-07-01 2026-06-30 0000789019 country:US 2025-07-01 2026-06-30 0000789019 msft:OperatingLeaseMember 2026-06-30 0000789019 msft:ShareRepurchaseProgramTwentyTwentyOneMember 2024-01-01 2024-03-31 0000789019 msft:ProductivityAndBusinessProcessesMember 2024-06-30 0000789019 srt:MinimumMember 2025-07-01 2026-06-30 0000789019 us-gaap:NonoperatingIncomeExpenseMember us-gaap:AccumulatedGainLossNetCashFlowHedgeParentMember 2023-07-01 2024-06-30 0000789019 2025-05-01 2025-05-01 0000789019 msft:IssuanceOfLongTermDebtEightMember 2026-06-30 0000789019 us-gaap:ContractualRightsMember 2025-07-01 2026-06-30 0000789019 2024-10-01 2024-12-31 0000789019 us-gaap:NondesignatedMember us-gaap:ForeignExchangeContractMember 2025-06-30 0000789019 2025-04-01 2025-06-30 0000789019 us-gaap:CommonStockIncludingAdditionalPaidInCapitalMember 2026-06-30 0000789019 us-gaap:AccumulatedNetUnrealizedInvestmentGainLossMember 2023-07-01 2024-06-30 0000789019 us-gaap:LatestTaxYearMember msft:FederalAndStateMember 2025-07-01 2026-06-30 0000789019 srt:MaximumMember 2024-07-01 2025-06-30 0000789019 us-gaap:FairValueInputsLevel3Member 2025-06-30 0000789019 msft:ShareRepurchaseProgramTwentyTwentyOneAndTwentyTwentyFourMember 2025-04-01 2025-06-30 0000789019 us-gaap:ServiceOtherMember 2024-07-01 2025-06-30 0000789019 msft:IssuanceOfLongTermDebtSevenMember 2025-06-30 0000789019 us-gaap:AccumulatedNetUnrealizedInvestmentGainLossMember us-gaap:NonoperatingIncomeExpenseMember 2024-07-01 2025-06-30 0000789019 us-gaap:PerformanceSharesMember 2024-07-01 2025-06-30 0000789019 2026-01-01 2026-03-31 0000789019 us-gaap:EmployeeStockMember 2024-07-01 2025-06-30 0000789019 us-gaap:OtherContractMember us-gaap:NondesignatedMember us-gaap:ShortMember 2026-06-30 0000789019 msft:MorePersonalComputingMember 2023-07-01 2024-06-30 0000789019 msft:DynamicsProductsAndCloudServicesMember 2024-07-01 2025-06-30 0000789019 us-gaap:DebtSecuritiesMember us-gaap:FairValueInputsLevel2Member us-gaap:ForeignGovernmentDebtSecuritiesMember 2026-06-30 0000789019 country:US 2023-07-01 2024-06-30 0000789019 msft:IssuanceOfLongTermDebtEightMember srt:MaximumMember 2025-07-01 2026-06-30 0000789019 us-gaap:CommonStockIncludingAdditionalPaidInCapitalMember 2024-06-30 0000789019 msft:IssuanceOfLongTermDebtEightMember srt:MaximumMember 2026-06-30 0000789019 msft:O2025Q4DividendsMember 2025-04-01 2025-06-30 0000789019 us-gaap:NonUsMember 2023-07-01 2024-06-30 0000789019 msft:IssuanceOfLongTermDebtTwelveMember srt:MinimumMember 2025-07-01 2026-06-30 0000789019 us-gaap:AccumulatedGainLossNetCashFlowHedgeParentMember 2024-07-01 2025-06-30 0000789019 us-gaap:EquityContractMember us-gaap:NonoperatingIncomeExpenseMember 2023-07-01 2024-06-30 0000789019 us-gaap:TechnologyBasedIntangibleAssetsMember 2025-06-30 0000789019 msft:AccumulatedTranslationAdjustmentAndOtherMember 2023-06-30 0000789019 srt:MinimumMember msft:IssuanceOfLongTermDebtElevenMember 2026-06-30 0000789019 us-gaap:CommonStockIncludingAdditionalPaidInCapitalMember 2025-07-01 2026-06-30 0000789019 us-gaap:RetainedEarningsMember 2025-07-01 2026-06-30 0000789019 us-gaap:FairValueInputsLevel1Member us-gaap:EquitySecuritiesMember 2026-06-30 0000789019 srt:MaximumMember us-gaap:ComputerEquipmentMember 2026-06-30 0000789019 us-gaap:LongMember us-gaap:NondesignatedMember us-gaap:ForeignExchangeContractMember 2025-06-30 0000789019 us-gaap:DesignatedAsHedgingInstrumentMember us-gaap:InterestRateContractMember 2025-06-30 0000789019 us-gaap:OtherNoncurrentAssetsMember 2026-06-30 0000789019 msft:IssuanceOfLongTermDebtTenMember srt:MinimumMember 2026-06-30 0000789019 srt:MinimumMember msft:IssuanceOfLongTermDebtSixMember 2026-06-30 0000789019 us-gaap:EquityContractMember us-gaap:NonoperatingIncomeExpenseMember 2024-07-01 2025-06-30 0000789019 msft:ShareRepurchaseProgramTwentyTwentyOneMember 2024-07-01 2024-09-30 0000789019 us-gaap:DebtSecuritiesMember us-gaap:FairValueInputsLevel2Member us-gaap:USStatesAndPoliticalSubdivisionsMember 2026-06-30 0000789019 us-gaap:RetainedEarningsMember 2023-07-01 2024-06-30 0000789019 us-gaap:DebtSecuritiesMember us-gaap:FairValueInputsLevel2Member us-gaap:CertificatesOfDepositMember 2025-06-30 0000789019 2025-06-30 0000789019 us-gaap:CashMember 2026-06-30 0000789019 us-gaap:AccumulatedNetUnrealizedInvestmentGainLossMember 2024-06-30 0000789019 msft:AccumulatedTranslationAdjustmentAndOtherMember 2023-07-01 2024-06-30 0000789019 msft:LongTermInvestmentsMember 2026-06-30 0000789019 msft:IssuanceOfLongTermDebtEightMember 2025-06-30 0000789019 us-gaap:ShortTermInvestmentsMember 2026-06-30 0000789019 us-gaap:InternalRevenueServiceIRSMember 2025-07-01 2026-06-30 0000789019 us-gaap:MarketingRelatedIntangibleAssetsMember 2026-06-30 0000789019 msft:MicrosoftThreeSixFiveCommercialProductsAndCloudServicesMember 2023-07-01 2024-06-30 0000789019 msft:IssuanceOfLongTermDebtTenMember srt:MaximumMember 2025-07-01 2026-06-30 0000789019 us-gaap:EquitySecuritiesMember 2025-07-01 2026-06-30 0000789019 us-gaap:RestrictedStockUnitsRSUMember msft:ExecutiveIncentivePlanMember 2025-07-01 2026-06-30 0000789019 msft:ProductivityAndBusinessProcessesMember 2023-07-01 2024-06-30 0000789019 msft:AccumulatedTranslationAdjustmentAndOtherMember 2025-06-30 0000789019 us-gaap:AccumulatedNetUnrealizedInvestmentGainLossMember 2025-06-30 0000789019 us-gaap:CommonStockIncludingAdditionalPaidInCapitalMember 2023-07-01 2024-06-30 0000789019 msft:IssuanceOfLongTermDebtFiveMember srt:MaximumMember 2026-06-30 0000789019 srt:MinimumMember msft:IssuanceOfLongTermDebtSevenMember 2025-07-01 2026-06-30 0000789019 us-gaap:DerivativeMember 2025-06-30 0000789019 us-gaap:ForeignGovernmentDebtSecuritiesMember 2026-06-30 0000789019 us-gaap:ProductMember 2024-07-01 2025-06-30 0000789019 msft:O2026Q4DividendsMember 2026-04-01 2026-06-30 0000789019 us-gaap:DebtSecuritiesMember us-gaap:FairValueInputsLevel2Member us-gaap:AssetBackedSecuritiesMember 2025-06-30 0000789019 msft:DynamicsProductsAndCloudServicesMember 2023-07-01 2024-06-30 0000789019 msft:FinanceLeaseMember 2025-06-30 0000789019 msft:ProductivityAndBusinessProcessesMember 2026-06-30 0000789019 us-gaap:OtherContractMember us-gaap:NondesignatedMember 2025-06-30 0000789019 msft:RegionalOperatingCentersMember 2023-07-01 2024-06-30 0000789019 us-gaap:OtherCurrentLiabilitiesMember 2026-06-30 0000789019 us-gaap:StateAndLocalJurisdictionMember 2026-06-30 0000789019 msft:WindowsAndDevicesMember 2024-07-01 2025-06-30 0000789019 msft:ActivisionBlizzardIncMember us-gaap:CustomerRelationshipsMember 2023-10-13 0000789019 us-gaap:OtherCurrentAssetsMember 2025-06-30 0000789019 msft:BuildingBuildingImprovementsAndLeaseholdImprovementsMember 2026-06-30 0000789019 country:US 2026-06-30 0000789019 us-gaap:ForeignTaxJurisdictionOtherMember 2025-07-01 2026-06-30 0000789019 srt:MaximumMember msft:IssuanceOfLongTermDebtSixMember 2026-06-30 0000789019 msft:IssuanceOfLongTermDebtFiveMember 2025-07-01 2026-06-30 0000789019 us-gaap:TechnologyBasedIntangibleAssetsMember 2026-06-30 0000789019 us-gaap:ForeignExchangeContractMember us-gaap:CashFlowHedgingMember 2024-07-01 2025-06-30 0000789019 us-gaap:DebtSecuritiesMember 2025-07-01 2026-06-30 0000789019 msft:OpenAIGlobalLlcMember 2024-07-01 2025-06-30 0000789019 us-gaap:LeaseholdImprovementsMember srt:MinimumMember 2026-06-30 0000789019 2026-04-01 2026-06-30 0000789019 us-gaap:NonoperatingIncomeExpenseMember us-gaap:ForeignExchangeContractMember us-gaap:CashFlowHedgingMember 2023-07-01 2024-06-30 0000789019 msft:WindowsAndDevicesMember 2025-07-01 2026-06-30 0000789019 msft:LinkedInCorporationMember 2023-07-01 2024-06-30 0000789019 msft:ShareRepurchaseProgramTwentyTwentyOneMember 2024-04-01 2024-06-30 0000789019 srt:MinimumMember msft:IssuanceOfLongTermDebtEightMember 2026-06-30 0000789019 msft:ActivisionBlizzardIncMember 2023-07-01 2024-06-30 0000789019 msft:ActivisionBlizzardIncMember us-gaap:CustomerRelationshipsMember 2023-10-13 2023-10-13 0000789019 us-gaap:MarketingRelatedIntangibleAssetsMember 2025-07-01 2026-06-30 0000789019 us-gaap:NondesignatedMember us-gaap:ForeignExchangeContractMember us-gaap:ShortMember 2026-06-30 0000789019 msft:IssuanceOfLongTermDebtThirteenMember srt:MaximumMember 2025-07-01 2026-06-30 0000789019 msft:ActivisionBlizzardIncMember 2025-07-01 2026-06-30 0000789019 msft:OpenAIGlobalLlcMember 2026-06-30 0000789019 us-gaap:LeaseholdImprovementsMember srt:MaximumMember 2026-06-30 0000789019 2024-07-01 2025-06-30 0000789019 us-gaap:RestrictedStockMember srt:MinimumMember 2025-07-01 2026-06-30 0000789019 msft:XBOXMember 2024-07-01 2025-06-30 0000789019 msft:AccumulatedTranslationAdjustmentAndOtherMember 2026-06-30 0000789019 us-gaap:EmployeeStockMember 2025-06-30 0000789019 msft:RegionalOperatingCentersMember 2024-07-01 2025-06-30 0000789019 srt:MinimumMember msft:IssuanceOfLongTermDebtThirteenMember 2026-06-30 0000789019 us-gaap:NonoperatingIncomeExpenseMember us-gaap:InterestRateContractMember us-gaap:FairValueHedgingMember 2025-07-01 2026-06-30 0000789019 2025-12-31 0000789019 msft:IssuanceOfLongTermDebtTwelveMember 2025-07-01 2026-06-30 0000789019 us-gaap:AccumulatedNetUnrealizedInvestmentGainLossMember 2024-07-01 2025-06-30 0000789019 msft:ShareRepurchaseProgramTwentyTwentyFourMember 2025-07-01 2025-09-30 0000789019 msft:OtherOfficersOrDirectorsMember 2026-04-01 2026-06-30 0000789019 2025-01-01 2025-03-31 0000789019 msft:IssuanceOfLongTermDebtElevenMember 2026-06-30 0000789019 srt:MinimumMember msft:IssuanceOfLongTermDebtSevenMember 2026-06-30 0000789019 us-gaap:AccumulatedGainLossNetCashFlowHedgeParentMember 2026-06-30 0000789019 msft:O2025Q1DividendsMember 2024-07-01 2024-09-30 0000789019 msft:ShareRepurchaseProgramTwentyTwentyOneMember 2023-07-01 2024-06-30 0000789019 2023-07-01 2024-06-30 0000789019 us-gaap:ShortTermInvestmentsMember 2025-06-30 0000789019 msft:EnterpriseAndPartnerServicesMember 2025-07-01 2026-06-30 iso4217:EUR xbrli:pure msft:Segment xbrli:shares iso4217:USD xbrli:shares iso4217:USD UNITED STATES SECURITIES AND EXCHANGE COMMISSION Washington, D.C. 20549 FORM 10-K ☒ ANNUAL REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934 For the Fiscal Year Ended June 30 , 2026 OR ☐ TRANSITION REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934 For the Transition Period From to Commission File Number 001-37845 MICROSOFT CORPORATION Washington 91-1144442 (STATE OF INCORPORATION) (I.R.S. ID) ONE MICROSOFT WAY , REDMOND , Washington 98052-6399 ( 425 ) 882-8080 www.microsoft.com/investor Securities registered pursuant to Section 12(b) of the Act: Title of each class Trading Symbol Name of exchange on which registered Common stock, $ 0.00000625 par value per share MSFT Nasdaq 3.125% Notes due 2028 MSFT Nasdaq 2.625% Notes due 2033 MSFT Nasdaq Securities registered pursuant to Section 12(g) of the Act: N one Indicate by check mark if the registrant is a well-known seasoned issuer, as defined in Rule 405 of the Securities Act. Yes ☒ No ☐ Indicate by check mark if the registrant is not required to file reports pursuant to Section 13 or Section 15(d) of the Act. Yes ☐ No ☒ Indicate by check mark whether the registrant (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days. Yes ☒ No ☐ Indicate by check mark whether the registrant has submitted electronically every Interactive Data File required to be submitted pursuant to Rule 405 of Regulation S-T (§232.405 of this chapter) during the preceding 12 months (or for such shorter period that the registrant was required to submit such files). Yes ☒ No ☐ Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, a smaller reporting company, or an emerging growth company. See the definitions of “large accelerated filer,” “accelerated filer,” “smaller reporting company,” and “emerging growth company” in Rule 12b-2 of the Exchange Act. Large Accelerated Filer ☒ Accelerated Filer ☐ Non-accelerated Filer ☐ Smaller Reporting Company ☐ Emerging Growth Company ☐ If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. ☐ Indicate by check mark whether the registrant has filed a report on and attestation to its management’s assessment of the effectiveness of its internal control over financial reporting under Section 404(b) of the Sarbanes-Oxley Act (15 U.S.C. 7262(b)) by the registered public accounting firm that prepared or issued its audit report. ☒ If securities are registered pursuant to Section 12(b) of the Act, indicate by check mark whether the financial statements of the registrant included in the filing reflect the correction of an error to previously issued financial statements. ☐ Indicate by check mark whether any of those error corrections are restatements that required a recovery analysis of incentive-based compensation received by any of the registrant’s executive officers during the relevant recovery period pursuant to §240.10D-1(b). ☐ Indicate by check mark whether the registrant is a shell company (as defined in Rule 12b-2 of the Act). Yes ☐ No ☒ As of December 31, 2025, the aggregate market value of the registrant’s common stock held by non-affiliates of the registrant was $ 3.6 trillion based on the closing sale price as reported on the NASDAQ National Market System. As of July 23, 2026, there were 7,425,545,491 shares of common stock outstanding. DOCUMENTS INCORPORATED BY REFERENCE Portions of the definitive Proxy Statement to be delivered to shareholders in connection with the Annual Meeting of Shareholders to be held on December 8, 2026 are incorporated by reference into Part III. MICROSOFT CORPORATION FORM 10-K For the Fiscal Year Ended June 30, 2026 INDEX Page PART I Item 1. Business 3 Information about our Executive Officers 12 Item 1A. Risk Factors 14 Item 1B. Unresolved Staff Comments 29 Item 1C. Cybersecurity 29 Item 2. Properties 31 Item 3. Legal Proceedings 31 Item 4. Mine Safety Disclosures 31 PART II Item 5. Market for Registrant’s Common Equity, Related Stockholder Matters, and Issuer Purchases of Equity Securities 32 Item 6. [Reserved] 33 Item 7. Management’s Discussion and Analysis of Financial Condition and Results of Operations 34 Item 7A. Quantitative and Qualitative Disclosures About Market Risk 49 Item 8. Financial Statements and Supplementary Data 50 Item 9. Changes in and Disagreements with Accountants on Accounting and Financial Disclosure 89 Item 9A. Controls and Procedures 89 Report of Management on Internal Control over Financial Reporting 89 Report of Independent Registered Public Accounting Firm 90 Item 9B. Other Information 91 Item 9C. Disclosure Regarding Foreign Jurisdictions that Prevent Inspections 91 PART III Item 10. Directors, Executive Officers, and Corporate Governance 91 Item 11. Executive Compensation 91 Item 12. Security Ownership of Certain Beneficial Owners and Management and Related Stockholder Matters 92 Item 13. Certain Relationships and Related Transactions, and Director Independence 92 Item 14. Principal Accountant Fees and Services 92 PART IV Item 15. Exhibit and Financial Statement Schedules 93 Item 16. Form 10-K Summary 100 Signatures 101 2 PART I Item 1 Note About Forward-Looking Statements This report includes estimates, projections, statements relating to our business plans, objectives, and expected operating results that are “forward-looking statements” within the meaning of the Private Securities Litigation Reform Act of 1995, Section 27A of the Securities Act of 1933, and Section 21E of the Securities Exchange Act of 1934. Forward-looking statements may appear throughout this report, including the following sections: “Business” (Part I, Item 1 of this Form 10-K), “Risk Factors” (Part I, Item 1A of this Form 10-K), and “Management’s Discussion and Analysis of Financial Condition and Results of Operations” (Part II, Item 7 of this Form 10-K). These forward-looking statements generally are identified by the words “believe,” “project,” “expect,” “anticipate,” “estimate,” “intend,” “strategy,” “future,” “opportunity,” “plan,” “may,” “should,” “will,” “would,” “could,” “will be,” “will continue,” “will likely result,” and similar expressions. Forward-looking statements are based on current expectations and assumptions that are subject to risks and uncertainties that may cause actual results to differ materially. We describe risks and uncertainties that could cause actual results and events to differ materially in “Risk Factors,” “Management’s Discussion and Analysis of Financial Condition and Results of Operations,” and “Quantitative and Qualitative Disclosures About Market Risk” (Part II, Item 7A of this Form 10-K). Readers are cautioned not to place undue reliance on forward-looking statements, which speak only as of the date they are made. We undertake no obligation to update or revise publicly any forward-looking statements, whether because of new information, future events, or otherwise. PART I ITEM 1. B USINESS GENERAL Microsoft is a technology company committed to making digital technology and artificial intelligence (“AI”) available broadly and doing so responsibly. Our mission is to empower every person and every organization on the planet to achieve more. We develop and support a broad portfolio of technology solutions for individuals and businesses, focusing on secure, trusted, and innovative platforms and applications that meet evolving customer needs across AI, cloud computing, productivity and collaboration, and personal computing. We strive to create opportunity, growth, and impact in every country around the world. AI is fundamentally transforming productivity for every individual, organization, and industry. Microsoft's AI offerings span every layer of the technology stack, enabling transformative outcomes across sectors and unlocking opportunity for every country, community, and individual. We believe AI should be as empowering as it is powerful, and we’re committed to designing and deploying AI responsibly with safety and security from the outset. What We Offer Founded in 1975, we develop and support software, services, devices, and solutions that deliver new value for customers and help people and businesses realize their full potential. We offer an array of services, including cloud-based solutions that provide customers with AI, software, services, platforms, and content, and we provide solution support and consulting services. We also deliver relevant online advertising to a global audience. Our products include operating systems, server applications, business solution applications, software development tools, desktop and server management tools, and video games. We also design and sell devices, including PCs, tablets, gaming and entertainment consoles, other intelligent devices, and related accessories. Digital transformation and adoption of AI continues to revolutionize more business workstreams for organizations in every sector across the globe. For enterprises, digital technology empowers employees, optimizes operations, engages customers, and in some cases, changes the very core of products and services. 3 PART I Item 1 The Microsoft Cloud provides integration across the technology stack while offering openness, improving time to value, reducing costs, and increasing agility. Our cloud business benefits from three economies of scale: datacenters that deploy computational resources at significantly lower cost per unit than smaller ones; datacenters that coordinate and aggregate diverse customer, geographic, and application demand patterns, improving the utilization of computing, storage, and network resources; and multi-tenancy locations that lower application maintenance labor costs. We prioritize security above all else and we offer our customers integrated AI-driven products addressing security, compliance, identity, management, and privacy across customers’ multi-cloud, application, and device assets. The Ambitions That Drive Us To achieve our vision, our research and development efforts focus on three interconnected ambitions: • Reinvent productivity and business processes to help organizations and individuals work and collaborate more securely and efficiently. • Build the intelligent cloud and intelligent edge platform to provide a foundation for our customers’ digital workloads, including hybrid consistency, developer productivity, data and AI capabilities, and trusted security and compliance. • Create more personal computing experiences that empower people to play, create, and interact with technology in more intuitive, engaging, and dynamic ways. Our Future Opportunity We are focused on helping customers use the breadth and depth of the Microsoft Cloud to get the most value out of their digital spend while leading the AI platform wave across our solution areas. We continue to develop complete, intelligent solutions for our customers that empower people to be productive and collaborate, while safeguarding businesses and simplifying IT management. Our goal is to lead the industry in several distinct areas of technology over the long term, which we expect will translate to sustained growth. We are investing significant resources in: • Tackling security from all angles with our integrated, end-to-end solutions spanning security, compliance, identity, and management, across all clouds and platforms. • Transforming the workplace to deliver new, modern, modular business applications, drive deeper insights, and improve how people communicate, collaborate, learn, work, and interact with one another. • Building and running cloud-based services in ways that utilize ubiquitous computing to unleash new experiences and opportunities for businesses and individuals. • Applying AI and ambient intelligence to drive insights, revolutionize many types of work and business processes, and provide substantive productivity gains using Microsoft 365 Copilot and agents. • Helping customers drive frontier transformation by applying frontier AI capabilities, engineering expertise, and trusted platforms to reinvent how their organizations operate, improve decision-making, create new value, and deliver measurable business outcomes from AI. • Providing a unified intelligence layer for enterprise AI to ground AI in a continuously evolving understanding of an organization’s data. • Providing training on generative AI and greater access to digital learning and resources through skilling programs and initiatives, grants, and LinkedIn learning pathways. • Inventing new gaming experiences that bring people together around their shared love for games on any device and pushing the boundaries of innovation with console and PC gaming. • Leveraging Windows to fuel our cloud business, grow our share of the PC market, and drive increased engagement with our services like Microsoft Edge, Bing, Copilot, Microsoft Teams, Microsoft 365 Consumer, XBOX Game Pass, and more. Our future growth depends on our ability to transcend current product category definitions, business models, and sales motions. 4 PART I Item 1 Commitment to Sustainability Microsoft is committed to sustainability and our approach to addressing climate change starts with the sustainability of our own business. In 2020, we announced goals to become a carbon negative, water positive, and zero waste company by 2030. Since announcing these goals, we have seen major changes in both the technology sector and in our understanding of what it will take to meet our goals. More information about our progress toward these goals can be found in our annual Environmental Sustainability Report. OPERATING SEGMENTS We operate our business and report our financial performance using three segments: Productivity and Business Processes, Intelligent Cloud, and More Personal Computing. Our segments provide management with a comprehensive financial view of our key businesses. The segments enable the alignment of strategies and objectives across the development, sales, marketing, and services organizations, and they provide a framework for timely and rational allocation of resources within businesses. Additional information on our operating segments and geographic and product information is contained in Note 18 – Segment Information and Geographic Data of the Notes to Financial Statements (Part II, Item 8 of this Form 10-K). Our reportable segments are described below. Productivity and Business Processes Our Productivity and Business Processes segment consists of products and services in our portfolio of productivity, communication, and information services, spanning a variety of devices and platforms. This segment primarily comprises: • Microsoft 365 Commercial products and cloud services, including Microsoft 365 Commercial cloud, comprising Microsoft 365 Commercial, Enterprise Mobility + Security, the cloud portion of Windows Commercial, the per-user portion of Power BI, Exchange, SharePoint, Microsoft Teams, Microsoft 365 Security and Compliance, and Microsoft 365 Copilot; and Microsoft 365 Commercial products, comprising Windows Commercial on-premises and Office licensed on-premises. • Microsoft 365 Consumer products and cloud services, including Microsoft 365 Consumer subscriptions, Office licensed on-premises, and other consumer services. • LinkedIn, including Talent Solutions, Marketing Solutions, Premium Subscriptions, and Sales Solutions. • Dynamics products and cloud services, including Dynamics 365, comprising a set of intelligent, cloud-based applications across ERP, CRM, Power Apps, and Power Automate; and on-premises ERP and CRM applications. Microsoft 365 Commercial Products and Cloud Services Microsoft 365 Commercial is an AI-powered business and productivity solutions platform that brings together Office, Windows, Microsoft 365 Copilot, and Enterprise Mobility + Security to help organizations empower their employees. Growth depends on our ability to reach new users in new markets such as frontline workers, small and medium businesses, and growth markets, as well as add AI-enabled tools, features, and agentic scenarios to our core product and service offerings across communication, collaboration, analytics, security, compliance, and other AI business productivity categories. Microsoft 365 Commercial revenue is mainly affected by a combination of continued installed base growth and average revenue per user expansion, as well as the continued shift from Office licensed on-premises to Microsoft 365. Microsoft 365 Consumer Products and Cloud Services Microsoft 365 Consumer is designed to increase personal productivity and creativity through a range of products and services. Growth depends on our ability to reach new users, add value to our core product set with new features including AI tools, and continue to expand our product and service offerings into new markets. Microsoft 365 Consumer cloud revenue and Office Consumer products revenue is mainly affected by the percentage of customers that buy Office with their new devices and the continued shift from Office licensed on-premises to Microsoft 365 Consumer subscriptions. Microsoft 365 Consumer cloud revenue is also affected by the demand for communication and storage through Outlook.com and OneDrive, which is largely driven by subscriptions and advertising. 5 PART I Item 1 LinkedIn LinkedIn connects the world’s professionals to make them more productive and successful and transforms the way companies hire, market, sell, and learn. In addition to LinkedIn’s free services, LinkedIn offers monetized solutions designed to offer AI-enabled insights and productivity: Talent Solutions, Marketing Solutions, Premium Subscriptions, and Sales Solutions. Growth will depend on our ability to increase LinkedIn member engagement on the platform and our ability to continue offering insight and AI-enabled services that provide value for our members and customers. LinkedIn revenue is mainly affected by demand from enterprises and professionals for subscriptions to Talent Solutions, Sales Solutions, and Premium Subscriptions offerings, as well as member engagement and the quality of the sponsored content delivered to those members to drive Marketing Solutions. Dynamics Products and Cloud Services Dynamics provides cloud-based and on-premises business solutions for financial management, enterprise resource planning (“ERP”), customer relationship management (“CRM”), and supply chain management, as well as agentic AI and other low code application development platforms, for small and medium businesses, large organizations, and divisions of global enterprises. Dynamics revenue is driven by the number of users licensed and applications consumed, expansion of average revenue per user, and the continued shift to Dynamics 365, a unified set of cloud-based intelligent business applications, including our low code development platforms, such as Power Apps and Power Automate. Competition Competitors to Office include software and global application vendors, web-based and mobile application companies, AI-first application companies, as well as local application developers. We compete by providing secure, integrated industry-specific, and easy-to-use productivity and collaboration tools and services that create comprehensive solutions and work well with technologies our customers already have both on-premises or in the cloud. Windows faces competition from various software products and from alternative platforms and devices. Microsoft Defender for Endpoint competes with endpoint security solution providers. Our Enterprise Mobility + Security offerings compete with products from a range of competitors including identity vendors, security solution vendors, and numerous other security point solution vendors. LinkedIn faces competition from online professional networks; recruiting, talent management, and human resource services companies; job boards; companies that provide learning and development products and services; online and offline outlets that generate revenue from advertisers and marketers; and online and offline outlets for companies with lead generation and customer intelligence and insights. Dynamics competes with cloud-based and on-premises business solution providers. Intelligent Cloud Our Intelligent Cloud segment consists of our public, private, and hybrid server products and cloud services that power modern business and developers. This segment primarily comprises: • Server products and cloud services, including Azure and other cloud services, comprising cloud and AI consumption-based services, GitHub cloud services, Health and Life Sciences cloud services (formerly Nuance Healthcare cloud services), virtual desktop offerings, and other cloud services; and Server products, comprising SQL Server, Windows Server, Visual Studio, System Center, related Client Access Licenses (“CALs”), and other on-premises offerings. • Enterprise and partner services, including Enterprise Support Services, Industry Solutions, Microsoft Partner Network, and Learning Experience. 6 PART I Item 1 Server Products and Cloud Services Azure is a comprehensive set of cloud services that offer developers, IT professionals, and enterprises freedom to build, deploy, and manage applications on any platform or device. Customers can use Azure through our global network of datacenters for computing, networking, storage, mobile and web application services, AI, and Internet of Things. Azure enables customers to devote more resources to development and use of applications that benefit their organizations, rather than managing on-premises hardware and software. Azure revenue is mainly affected by infrastructure-as-a-service and platform-as-a-service consumption-based services. Azure AI offerings provide a competitive advantage as companies seek ways to optimize and scale their business with AI. We offer supercomputing power for AI at scale to run large workloads, complemented by our rapidly expanding portfolio of AI cloud services (including the latest models) and hardware, which includes custom-built silicon and strong partnerships with chip manufacturers. Azure AI Foundry is a unified platform for developers to design, customize, and manage AI applications and agents. Our server products are designed to make IT professionals, developers, and their systems more productive and efficient. Server software is integrated server infrastructure and middleware designed to support software applications built on the Windows Server operating system. This includes the server platform, database, business intelligence, storage, management and operations, virtualization, service-oriented architecture platform, security, and identity software. We also license standalone and software development lifecycle tools for software architects, developers, testers, and project managers. Server products revenue is mainly affected by purchases through volume licensing programs, licenses sold to OEMs, and retail packaged products. CALs provide access rights to certain server products, including SQL Server and Windows Server, and revenue is reported along with the associated server product. GitHub includes both cloud and on-premises offerings. GitHub provides a collaboration platform for developers to manage code and incorporate AI and agent-based tools across the software development lifecycle. Health and Life Sciences cloud services provides AI solutions to the healthcare industry. Enterprise and Partner Services Enterprise and partner services assist customers in developing, deploying, and managing Microsoft server solutions, Microsoft desktop solutions, and conversational AI and ambient intelligent solutions, along with providing training and certification to developers and IT professionals on various Microsoft products. Competition Azure faces diverse competition from cloud service providers and open-source offerings. Azure’s competitive advantage includes enabling a hybrid cloud, allowing deployment of existing datacenters with our public cloud into a single, cohesive infrastructure, and the ability to run at a scale that meets the needs of businesses of all sizes and complexities. Our AI offerings compete with AI products from hyperscalers, as well as products from other emerging competitors and other open-source offerings, many of which are also current or potential partners. Our Azure Security offerings include our cloud security solution and our security information and event management solution, which compete with providers in the cybersecurity and cloud security space. We believe our cloud’s global scale, coupled with our broad portfolio of identity and security solutions, allows us to effectively solve complex cybersecurity challenges for our customers and differentiates us from the competition. Our server products face competition from a wide variety of server operating systems and applications offered by companies with a range of market approaches. Vertically integrated computer manufacturers offer their own versions of the Unix operating system preinstalled on server hardware and nearly all computer manufacturers offer server hardware for the Linux operating system. We compete to provide enterprise-wide computing and point solutions with numerous commercial software vendors that offer solutions and middleware technology platforms, software applications for connectivity, security, hosting, database, and e-business servers. Our database, business intelligence, and data warehousing solutions offerings compete with products from providers in the data and analytics industry. Our system management solutions compete with server management and server virtualization platform providers. Our products for software developers compete against offerings from major technology providers, as well as open-source alternatives. 7 PART I Item 1 We believe our server products provide customers with advantages in performance, total costs of ownership, and productivity by delivering superior applications, development tools, compatibility with a broad base of hardware and software applications, security, and manageability. Our Enterprise and partner services business competes with a wide range of companies that provide strategy and business planning, application development, and infrastructure services, including multinational consulting firms and small niche businesses focused on specific technologies. More Personal Computing Our More Personal Computing segment consists of products and services that put customers at the center of the experience with our technology. This segment primarily comprises: • Windows and Devices, including Windows OEM licensing (Windows Pro and non-Pro licenses sold through the OEM channel) and Devices, comprising Surface and PC accessories. • XBOX (formerly Gaming), including XBOX hardware and XBOX content and services, comprising first- and third-party content (including games and in-game content), XBOX Game Pass and other subscriptions, XBOX Cloud Gaming, advertising, and other cloud services. • Search advertising (formerly Search and news advertising), comprising Bing, Copilot, Microsoft News, Microsoft Edge, and third-party affiliates. Windows and Devices The Windows operating system is designed to deliver a more personal computing experience for users by enabling consistency of experience, applications, and information across their devices. Windows OEM revenue is impacted significantly by the number of Windows operating system licenses purchased by OEMs, which they pre-install on the devices they sell. In addition to computing device market volume, Windows OEM revenue is impacted by: • The mix of computing devices based on form factor and screen size. • Differences in device market demand between developed markets and growth markets. • Growth of the AI PC category. • Attachment of Windows to devices shipped. • Customer mix between consumer, small and medium businesses, and large enterprises. • Changes in inventory levels in the OEM channel. • Pricing changes and promotions, pricing variation that occurs when the mix of devices manufactured shifts from local and regional system builders to large multinational OEMs, and different pricing of Windows versions licensed. • Constraints in the supply chain of device components. • Piracy. We design and sell devices, such as Surface (including Copilot+ PCs) and PC accessories. Our devices are designed to enable people and organizations to connect to the people and content that matter most using Windows and integrated Microsoft products and services. Surface is designed to help organizations, students, and consumers be more productive. Growth in Devices is dependent on total PC shipments, the ability to attract new customers, our product roadmap, and expanding into new categories. XBOX Microsoft is expanding how billions of people globally access and play video games on PC, console, mobile, and cloud. Our game content is developed through a collection of first-party studios creating iconic and differentiated gaming experiences. We continue to invest in gaming studios and content to expand our intellectual property roadmap and leverage new content creators. These unique gaming experiences are the cornerstone of XBOX Game Pass, a subscription service and gaming community with access to a curated library of first- and third-party titles. 8 PART I Item 1 The gamer remains at the heart of the XBOX ecosystem. We are identifying new opportunities to attract gamers across a variety of different end points through our first- and third-party content and business diversification across subscriptions, ads, and digital stores. We’ve seen new devices from third-party manufacturers along with key PC and mobile end points that help us empower gamers to play in a way that is most convenient to them. We are focused on growing the platform and expanding to new ecosystems to engage as many gamers as possible. XBOX enables people to connect and share online gaming experiences that are accessible on XBOX consoles, Windows-enabled devices, and other devices. XBOX is designed to benefit users by providing access to a network of certified applications and services and to benefit our developer and partner ecosystems by providing access to a large customer base. XBOX revenue is mainly affected by subscriptions and sales of first- and third-party content, as well as advertising. Growth of our XBOX business is determined by the overall active user base through XBOX enabled content, availability of games, providing exclusive game content that gamers seek, the computational power and reliability of the devices used to access our content and services, and the ability to create new experiences. Search Advertising Our Search advertising business is designed to deliver relevant search, native, and display advertising to a global audience. Microsoft Copilot is a digital companion designed to inform, entertain, and inspire. Our Microsoft Edge browser and Bing search engine with Copilot are key tools to enable user acquisition and engagement, while our technology platform enables accelerated delivery of digital advertising solutions. In addition to first-party tools, we have several partnerships with companies through which we provide and monetize search offerings. Growth depends on our ability to attract new users, understand intent, and match intent with relevant content on advertising offerings. Competition Windows faces competition from various software products and from alternative platforms and devices. We believe Windows competes effectively by giving customers choice, value, flexibility, security, an easy-to-use interface, and compatibility with a broad range of hardware and software applications, including those that enable productivity. Devices face competition from various computer, tablet, and hardware manufacturers who offer a unique combination of high-quality industrial design and innovative technologies across various price points. Many of these manufacturers are also current or potential partners and customers, including our Windows OEMs. XBOX and our cloud gaming services face competition from various online gaming ecosystems and game streaming services. Our gaming platform competes with other console platforms. We believe our gaming platform is effectively positioned against, and uniquely differentiated from, competitive products and services based on significant innovation in hardware architecture, user interface, developer tools, online gaming and entertainment services, and continued strong content from our own first-party game franchises as well as other digital content offerings. Our Search advertising business competes with search engines, and a wide array of websites, social platforms, and portals that provide content and online offerings to end users. HUMAN CAPITAL RESOURCES As of June 30, 2026, we employed approximately 223,000 people on a full-time basis, 121,000 in the U.S. and 102,000 internationally. Of the total employees, 89,000 were in operations, including product support and consulting services, datacenter operations, and manufacturing and distribution; 77,000 were in product research and development; 43,000 were in sales and marketing; and 14,000 were in general and administration. Certain employees are subject to collective bargaining agreements. We design our programs to attract, reward, and retain top talent while fostering continuous employee development and reinforcing our organizational culture and values. Our total compensation offering is both highly differentiated and competitive within the market, and we also monitor pay equity across multiple dimensions. We have invested significantly in employee wellbeing and offer a differentiated benefits package which includes many physical, emotional, and financial wellness programs. We also provide access to continuous learning through a wide range of internal and external content, supporting professional growth across roles and disciplines. Through our employee listening systems, we gather direct feedback from our workforce, enabling us to adapt our programs and address employee needs globally with real-time insights. Additionally, our culture prioritizes the security of both our customers and Microsoft, embedding this responsibility across all teams and functions. 9 PART I Item 1 OPERATIONS We have a global operations service center covering the Americas, Asia Pacific, Europe, and the Middle East that supports our business operations, including customer contract and order processing, billing, credit and collections, customer lifecycle AI and cloud operations, and vendor management and logistics. In addition to our operations center, we also operate datacenters throughout each of these regions. We continue to align our datacenter locations and server capacity to meet the evolving needs of our customers, particularly given the growing demand for AI services. Our datacenters depend on the availability of permitted and buildable land, predictable energy, networking supplies, and servers, including graphics processing units and other components. We engage third-party manufacturers to produce our devices and have implemented measures to enhance supply chain efficiency and resilience, including the ability to relocate production geographically. There are few qualified suppliers for certain components of our servers and devices. Extended or unforeseen disruptions, or limited availability of components from these suppliers could impact our ability to operate our datacenters and manufacture devices on time to meet consumer demand. RESEARCH AND DEVELOPMENT Product and Service Development Our success is based on our ability to create new and compelling products, services, and experiences for our users, initiate and embrace disruptive technology trends, enter new geographic and product markets, and drive broad adoption of our products and services. We make significant investments in research and development for new and existing products, services, and technologies, including tools and platforms spanning digital work and life experiences, cloud computing, AI, devices, security, and operating systems. We develop most of our products and services internally which allows us to maintain competitive advantages that come from product differentiation and closer technical control over our products and services. It also gives us the freedom to decide which modifications and enhancements are most important and when they should be implemented. We strive to obtain information as early as possible about changing usage patterns and hardware advances that may affect software and hardware design. Before releasing new software platforms, and as we make significant modifications to existing platforms, we provide application vendors with a range of resources and guidelines for development, training, and testing. We plan to continue to make significant investments in a broad range of product research and development activities, including AI-based products and services. We will coordinate our research and development across operating segments and leverage the results across the company, as appropriate. This includes continuing to support fundamental research, which provides us with a unique perspective on future trends and contributes to our innovation. Intellectual Property We protect our intellectual property investments in a variety of ways. We work actively in the U.S. and internationally to ensure the enforcement of copyright, patent, trademark, trade secret, and other protections that apply to our software and hardware products, services, business plans, and branding. While we employ much of our internally-developed intellectual property in our products and services, we also engage in outbound licensing of specific patented technologies that are incorporated into licensees’ products. From time to time, we enter into broader cross-license agreements with other technology companies covering entire groups of patents. We may also purchase or license technology that we incorporate into our products and services. At times, we make select intellectual property broadly available at no or low cost to achieve a strategic objective, such as promoting industry standards, advancing interoperability, supporting societal and/or environmental efforts, or attracting and enabling our external development community. Our engagement with open-source software also causes us to license our intellectual property rights broadly in certain situations. While it may be necessary in the future to seek or renew licenses relating to various aspects of our products and services, we believe, based upon past experience and industry practice, such licenses generally can be obtained on commercially reasonable terms. We believe our continuing research and product development are not materially dependent on any single license or other agreement with a third-party relating to the development of our products. 10 PART I Item 1 DISTRIBUTION, SALES, AND MARKETING Distribution occurs through a combination of direct and indirect channels. Direct sales activities serve customers ranging from large multinational enterprises and public sector organizations to small and medium-sized businesses. Indirect sales activities serve customers through a broad network of partners that support the sale, deployment, and management of Microsoft products and services worldwide. The indirect channel extends the reach of commercial offerings and supports customers across industries, geographies, and organization sizes. Sales and distribution models continue to evolve to support cloud-based, subscription-based, and consumption-based offerings while maintaining multiple options through which customers may acquire and manage our products and services. OEMs license and preinstall certain Microsoft software on devices that are sold to end customers. In addition, certain products and services are available through online purchasing channels and digital marketplaces. LICENSING OPTIONS We offer a range of volume purchasing programs that enable organizations of varying sizes to acquire software, cloud services, and related support benefits through direct and partner-assisted purchasing arrangements. These programs provide customers with flexible purchasing, deployment, and management options and are tailored to large enterprises, mid-sized organizations, small businesses, educational institutions, and government entities. GOVERNMENT REGULATION We are subject to a wide range of laws, regulations, and legal requirements in the U.S. and globally, including those that may apply to our products, services, and infrastructure, and those that impose requirements related to user privacy, telecommunications, data storage and protection, advertising, and online content. These requirements are continually evolving, and they can be unclear and vary significantly across jurisdictions. We have implemented comprehensive compliance programs across our operations to adapt to these changes and to maintain customer and regulator confidence. We monitor regulatory developments around the world and implement policies, controls, and technical safeguards so that our operations, products, and services meet applicable legal standards. Our business teams, with legal support, manage the compliance programs and prepare external regulatory and commercial reporting, and our internal audit teams conduct reviews of the programs and processes. While we have a unified approach to regulatory compliance, some of the programs and processes are tailored to meet specific regulatory obligations, such as with the creation of independent compliance functions required by the European Union (“EU”) Digital Markets Act and the EU Digital Services Act, which oversee, monitor, and assess the company’s compliance with these acts. For a description of the risks we face related to regulatory matters, refer to Risk Factors (Part I, Item 1A of this Form 10-K). 11 PART I Item 1 INFORMATION ABOUT OUR EXECUTIV E OFFICERS Our executive officers as of July 29, 2026 were as follows: Name Age Position with the Company Satya Nadella 58 Chairman and Chief Executive Officer Judson B. Althoff 53 Chief Executive Officer, Microsoft Commercial Business Amy L. Coleman 54 Executive Vice President and Chief Human Resources Officer Amy E. Hood 54 Executive Vice President and Chief Financial Officer Takeshi Numoto 55 Executive Vice President and Chief Marketing Officer Bradford L. Smith 67 Vice Chair and President Mr. Nadella was appointed Chairman of the Board in June 2021 and Chief Executive Officer in February 2014. He served as Executive Vice President, Cloud and Enterprise from July 2013 until that time. From 2011 to 2013, Mr. Nadella served as President, Server and Tools. From 2009 to 2011, he was Senior Vice President, Online Services Division. From 2008 to 2009, he was Senior Vice President, Search, Portal, and Advertising. Since joining Microsoft in 1992, Mr. Nadella’s roles also included Vice President of the Business Division. Mr. Althoff was appointed Chief Executive Officer, Microsoft Commercial Business in October 2025. He previously served as Executive Vice President and Chief Commercial Officer since July 2021. He served as Executive Vice President, Worldwide Commercial Business from July 2017 until July 2021. Prior to that, Mr. Althoff served as the President of Microsoft North America. Mr. Althoff joined Microsoft in March 2013 as President of Microsoft North America. Mr. Althoff also serves on the Board of Directors of Ecolab Inc. and General Electric Company, operating as GE Aerospace. Ms. Coleman was appointed Executive Vice President and Chief Human Resources Officer in March 2025. She previously served as Corporate Vice President, Human Resources and Corporation Functions since January 2021. Prior to that, Ms. Coleman served as Vice President Human Resources and Corporate Functions since September 2020. Since joining Microsoft in 2009, Ms. Coleman has held various positions of increasing authority. Ms. Hood was appointed Executive Vice President and Chief Financial Officer in July 2013, subsequent to her appointment as Chief Financial Officer in May 2013. From 2010 to 2013, Ms. Hood was Chief Financial Officer of the Microsoft Business Division. Since joining Microsoft in 2002, Ms. Hood has also held finance-related positions in the Server and Tools Business and the corporate finance organization. Mr. Numoto was appointed Executive Vice President and Chief Marketing Officer in October 2023. He served as Executive Vice President and Commercial Chief Marketing Officer from March 2020. Mr. Numoto served as a Corporate Vice President, Cloud Marketing from January 2012. Prior to that, Mr. Numoto served as a Corporate Vice President for Office 365 Marketing from 2004, where he led the transformation from traditional on-premises packaged software to the introduction of Office 365. Since joining Microsoft in 1997, Mr. Numoto has held multiple roles in Windows Program Management and Office Marketing. Mr. Smith was appointed Vice Chair and President in September 2021. Prior to that, he served as President and Chief Legal Officer since September 2015. He served as Executive Vice President, General Counsel, and Secretary from 2011 to 2015, and served as Senior Vice President, General Counsel, and Secretary from 2001 to 2011. Mr. Smith was also named Chief Compliance Officer in 2002. Since joining Microsoft in 1993, he was Deputy General Counsel for Worldwide Sales and previously was responsible for managing the European Law and Corporate Affairs Group, based in Paris. Mr. Smith also serves on the Board of Directors of Netflix, Inc. 12 PART I Item 1 AVAILABLE INFORMATION Our Internet address is www.microsoft.com. At our Investor Relations website, www.microsoft.com/investor, we make available free of charge a variety of information for investors. Our goal is to maintain the Investor Relations website as a portal through which investors can easily find or navigate to pertinent information about us, including: • Our annual report on Form 10-K, quarterly reports on Form 10-Q, current reports on Form 8-K, and any amendments to those reports, as soon as reasonably practicable after we electronically file that material with, or furnish it to, the Securities and Exchange Commission (“SEC”) at www.sec.gov. • Information on our business strategies, financial results, and metrics for investors. • Announcements of investor conferences, speeches, and events at which our executives talk about our product, service, and competitive strategies. Archives of these events are also available. • Press releases on quarterly earnings, product and service announcements, and legal developments. • Corporate governance information including our articles of incorporation, bylaws, governance guidelines, committee charters, codes of conduct and ethics, corporate responsibility initiatives, and other governance-related policies. • Other news and announcements that we may post from time to time that investors might find useful or interesting. • Opportunities to sign up for email alerts to have information pushed in real time. We publish a variety of reports and resources related to our Corporate Responsibility programs and progress on our Reports Hub website, www.microsoft.com/corporate-responsibility/reports-hub, including the Environmental Sustainability Report, Microsoft Digital Defense Report, and Microsoft Impact Summary. The information found on these websites is not part of, or incorporated by reference into, this or any other report we file with, or furnish to, the SEC. In addition to these channels, we use social media to communicate to the public. It is possible that the information we post on social media could be deemed to be material to investors. We encourage investors, the media, and others interested in Microsoft to review the information we post on the social media channels listed on our Investor Relations website. 13 PART I Item 1A ITEM 1A. RIS K FACTORS Our operations and financial results are subject to various risks and uncertainties, including those described below, that could adversely affect our business, operations, financial condition, results of operations, liquidity, and the trading price of our common stock. Statements in this section reflect our beliefs and opinions as to matters that could adversely affect us in the future. References to past events are provided by way of example only and are not intended to be a complete listing or a representation as to whether or not such matters have occurred in the past. STRATEGIC AND COMPETITIVE RISKS We face intense competition across all markets for our products and services, which could adversely affect our results of operations. Competition in the technology sector Our competitors range in size from diversified global companies with significant research and development resources to small, specialized firms who may be more effective in deploying technical, marketing, and financial resources. Barriers to entry in many of our businesses are low and many of the areas in which we compete evolve rapidly with changing and disruptive technologies, shifting user needs, and frequent introductions of new products and services. If we do not continue to innovate and provide products, devices, and services that appeal to businesses and consumers, we may not remain competitive, which could adversely affect our business, financial condition, and results of operations. Competition among platform-based ecosystems An important element of our business model has been to create platform-based ecosystems on which many participants can build diverse solutions. A well-established ecosystem creates beneficial network effects among users, application developers, and the platform provider that can accelerate growth. Establishing significant scale in the marketplace is necessary to meet consumer demand and to achieve and maintain attractive margins. Firms offering competing platforms may make it more difficult to attract and retain customers. • A competing vertically-integrated model, in which a single firm controls the hardware and software elements of a product and related services, has succeeded with some consumer products such as PCs, tablets, smartphones, gaming consoles, wearables, and other endpoint devices. Competitors pursuing this model also earn revenue from services integrated with the hardware and software platform, including applications and content sold through their integrated marketplaces. They may also be able to claim security and performance benefits from their vertically-integrated offer. We also offer some vertically-integrated hardware and software products and services. Expansion of our vertically-integrated capabilities, including developing proprietary hardware, infrastructure, and artificial intelligence (“AI”) models, could increase our cost structure, reduce margins, and expose us to operational risks. • We derive substantial revenue from licenses of Windows operating systems on PCs. We face significant competition from competing platforms developed for new types of devices, including smartphones and tablets. These devices compete on multiple bases including price and the perceived utility of the device and its platform. Users continue to turn to these devices to perform functions that in the past were performed by PCs. Even if many users view these devices as complementary to a PC, the prevalence of these devices may make it more difficult to attract application developers to our PC operating system platforms. Competing with operating systems licensed at low or no cost may decrease our PC operating system margins. Popular products or services offered on competing platforms could increase their competitive strength. In addition, some of our devices compete with products made by our OEM partners, which may affect their commitment to our platform. • Competing platforms have content and application marketplaces with scale and significant installed bases. The variety and utility of content and applications available on a platform are important to device purchasing decisions. Users may incur costs to move data and buy new content and applications when switching platforms. To compete successfully, we must enlist developers to write applications for our platform and ensure that these applications have high quality, security, customer appeal, and value. Efforts to compete with competitors’ content and application marketplaces may increase our cost of revenue and lower our operating margins. Competitors’ rules governing their content and applications marketplaces may restrict our ability to distribute products and services through them in accordance with our technical and business model objectives. 14 PART I Item 1A For all of these reasons, we may not be able to compete successfully against our current and future competitors, which could adversely affect our business, operations, financial condition, and results of operations. Business model competition Companies compete with us based on a growing variety of business models. • We are investing in AI across the entire company and infusing AI capabilities into our offerings. AI technology and services are a highly competitive and rapidly evolving market, and new competitors continue to enter the market. Our AI offerings compete with AI products from hyperscalers, open-source offerings, and frontier model providers, some of which are also current or potential partners. To compete effectively we must also be responsive to technological change, new and potential regulatory developments, and public scrutiny. • A material part of our business involves cloud-based services available across the spectrum of computing devices. We and our competitors continue to devote significant resources to developing and deploying cloud-based strategies and services for consumers and business customers. • Even as we transition more of our business to infrastructure-, platform-, and software-as-a-service business models, the license-based proprietary software model generates a substantial portion of our software revenue. We bear the costs of converting original ideas into software products through investments in research and development, offsetting these costs with the revenue received from licensing our products. Many of our competitors also develop and sell software to businesses and consumers under this model. • Other competitors develop and offer free applications, online services, and content, and make money by selling third-party advertising. Advertising revenue funds development of products and services these competitors provide to users at little or no cost, competing directly with our revenue-generating products. • Some companies compete with us by modifying and then distributing open-source software at little or no cost to end users, developing, making available, or using AI models that are open, and earning revenue on advertising or integrated products and services. These firms do not bear the full costs of research and development for the open-source products. Some open-source products mimic the features and functionality of our products. The competitive pressures described above may cause decreased sales volumes, price reductions, and/or increased operating costs, such as for research and development, marketing, and sales incentives, which could adversely affect our financial condition and results of operations. Our cloud and AI strategy requires substantial investments and depends on evolving customer demand, technological developments, competitive dynamics, and regulatory conditions, any of which could adversely affect our business, financial condition, and results of operations. We have made and are continuing to make significant capital and operational investments to develop, train, deploy, and support AI models and related cloud-based services, including building and expanding datacenters, acquiring necessary components, and securing energy resources. These investments are being made at significant scale and on an accelerated timeline, require substantial and increasing capital expenditures and continued access to capital, and are in advance of fully developed revenue streams. The associated revenue may not be realized in the expected timeframes or at expected levels. Our capital and operational investments are complex and involve projects in multiple locations around the world that expose us to increased compliance risks and political challenges, among others. Our ability to fund these investments depends on our ability to generate sufficient cash flows and obtain financing on acceptable terms. Adverse changes in interest rates, credit markets, investor sentiment, our credit ratings, or other factors affecting capital availability could increase our cost of capital or limit our ability to execute our infrastructure strategy. The financial success of these investments depends on a number of uncertain factors, including customer demand for cloud-based and AI products and services and continued customer use of Azure to build, train, deploy, and run AI workloads, our ability to price and monetize those services at levels sufficient to recover our costs, competitive dynamics affecting pricing, and the pace of adoption of AI. Customers may reduce, delay, or shift AI workloads to competing platforms, on-premises or local deployments, or other alternatives. If adoption of our AI services develops more slowly than expected, or if customers do not continue to utilize Azure for AI workloads at anticipated levels, we may not realize the expected returns on our investments. 15 PART I Item 1A Demand for cloud-based and AI products and services is evolving and difficult to forecast. Overestimation of demand or misalignment of capacity investments may result in underutilization of infrastructure and may lead to impairment of assets on our balance sheet. Conversely, demand exceeding available capacity limits our ability to meet customer needs in a timely manner. The cost structure for AI products and services is subject to significant uncertainty, including with respect to model training and inference costs, the availability and pricing of components, and energy costs. If these costs increase, remain elevated, or fail to decline, or if pricing for AI products and services declines as a result of competition, commoditization, or other market forces, our margins, financial condition, and results of operations could be adversely affected. Our AI strategy also depends in part on strategic relationships with third parties that provide technologies, models, products, and services that enhance our offerings. These relationships may change over time, and many of these partners compete with us with respect to certain products and services. Changes in strategic priorities, contractual arrangements, our access to third-party technologies, or key commercial relationships could adversely affect the competitiveness of our AI products and services. In some cases, these parties are significant customers of Azure and other cloud services. The economic benefits we expect to derive from these relationships, including through commercial arrangements, technology access, and Azure consumption, may not be realized or sustained. As we manage infrastructure capacity constraints and evolving customer demand, we may modify capacity allocations, deployment priorities, pricing, or other commercial arrangements. Strategic partners and other customers may likewise adjust their purchasing decisions, deployment strategies, workloads, or anticipated use of our products and services. As a result, expected consumption or anticipated demand may not materialize, may be delayed or reduced, or may decline over time. Any such developments could adversely affect our business, financial condition, and results of operations. Our success depends on our ability to develop, deliver, and maintain competitive cloud-based and AI products and services that achieve broad customer adoption and sustainable revenue growth. Our ability to succeed depends on our ability to develop and deliver differentiated products and services that meet evolving customer needs, achieve broad adoption, maintain customer trust, and generate sustainable revenue and growth. The markets for cloud-based and AI products and services are highly dynamic, characterized by shifting customer expectations, increasing regulatory and governmental scrutiny, intense competition, and rapid technological change, such as the accelerating importance of agentic computing. Whether we succeed in cloud-based and AI products and services depends on our execution in several areas, including: • Continuing to bring to market compelling cloud-based and AI products and services that generate increasing traffic and market share. • Driving customer adoption, usage, and retention of our cloud-based and AI products and services. • Effectively monetizing our cloud-based and AI products through pricing models that reflect their value while remaining competitive. • Attracting third parties to utilize, build on, and extend our cloud and AI platforms. • Ensuring our cloud-based and AI services meet the reliability expectations and specific requirements of our customers and maintain the security of their data as well as help them meet their own compliance needs. • Making our suite of cloud-based and AI products and services platform-agnostic and maintaining the utility, compatibility, and performance of our cloud-based and AI products and services on the growing array of computing devices, including PCs, smartphones, tablets, gaming consoles, and other devices. Our success depends on our ability to execute effectively across product development, go-to-market, customer acquisition, and customer retention initiatives. Failure to do so could reduce adoption, market share, and revenue growth. If we are not effective in executing organizational and technical changes to increase efficiency and accelerate innovation, or if we fail to generate sufficient usage of our new products and services, the timing or magnitude of any revenue growth may not be in line with these costs. This could adversely affect our operations, financial condition, and results of operations. Our cloud-based and AI products and services may be misused by customers, users, or malicious actors for unintended, fraudulent, abusive, or unlawful purposes. Our efforts to detect, prevent, and mitigate such misuse may not be successful, which could result in reputational harm, regulatory scrutiny, service disruptions, or adverse impacts on our business, financial condition, and results of operations. 16 PART I Item 1A RISKS RELATING TO THE EVOLUTION OF OUR BUSINESS We make significant investments in products and services that may not achieve expected returns. We will continue to make significant investments in research, development, and marketing for existing products, services, and technologies, including AI-based products and services. We also invest in the development and acquisition of a variety of hardware for productivity, communication, and entertainment, including PCs, tablets, and gaming devices. Investments in new technology are speculative. Commercial success depends on many factors, including innovation, developer support, and effective distribution and marketing. If customers do not perceive our latest offerings as providing significant new functionality or other value, they may reduce their purchases of new software and hardware products or upgrades, unfavorably affecting revenue. We may not achieve significant revenue from new product, service, and distribution channel investments for several years, if at all. New products and services may not be profitable or may not achieve operating margins as high as we have experienced historically. We may not get engagement in certain features that drive post-sale monetization opportunities. Our data-handling practices across our products and services will continue to be under scrutiny. Perceptions of mismanagement, driven by regulatory activity or negative public reaction to our practices or product experiences, could negatively impact product and feature adoption. Developing new technologies is complex. It can require long development and testing periods. We could experience significant delays in new releases or significant problems in creating new products or services. These factors could adversely affect our business, financial condition, and results of operations. Acquisitions, joint ventures, and strategic alliances could have an adverse effect on our business. We expect to continue making acquisitions and entering into joint ventures and strategic alliances as part of our long-term business strategy. For example, in October 2023 we completed our acquisition of Activision Blizzard , Inc. Additionally, we have a long-term strategic partnership with OpenAI. Acquisitions and other transactions and arrangements involve significant challenges and risks, including that they do not advance our business strategy, that we get an unsatisfactory return on our investment, that they raise new compliance-related obligations and challenges, that we have difficulty integrating and retaining new employees, business systems, and technology, that they distract management from our other businesses, or that announced transactions may not be completed. If an arrangement fails to adequately anticipate changing circumstances and interests of a party, it may result in early termination or renegotiation of the arrangement. We also have limited ability to control or influence third parties with whom we have arrangements, which may impact our ability to realize the anticipated benefits. The success of these transactions and arrangements depend in part on our ability to leverage them to enhance our existing products and services or develop compelling new ones, as well as the acquired companies’ ability to meet our policies and processes in areas such as data governance, privacy, digital safety, responsible AI, and cybersecurity. It may take longer than expected to realize the full economic benefits from these transactions and arrangements, such as increased revenue or enhanced efficiencies, or the benefits may ultimately be smaller than we expected, which could cause an impairment of goodwill or intangibles. We have recorded, and may in the future be required to record, a significant charge in our consolidated financial statements during the period in which any impairment of our goodwill or amortizable intangible assets is determined, negatively affecting our results of operations. In addition, these transactions and arrangements have been and may be subject to legal and regulatory challenge. These events could adversely affect our business, operations, financial condition, and results of operations. CYBERSECURITY, DATA PRIVACY, AND PLATFORM ABUSE RISKS Cyberattacks and security vulnerabilities could lead to reduced revenue, increased costs, liability claims, or harm to our reputation or competitive position. Security of our information technology Threats to security can take a variety of forms. Threat actors, including individual and groups of hackers and sophisticated organizations, including nation-states, state-sponsored organizations, or cybercriminal groups, continuously undertake attacks that pose threats to our customers and our internal infrastructure, and we have experienced cybersecurity incidents in which such actors have gained unauthorized access to our systems and data, as well as customer, partner, and supplier systems and data. These actors use a wide variety of methods, which include developing and deploying malicious software; exploiting known, latent, or potential vulnerabilities or intentionally designed processes in our or third-party hardware, software, or other infrastructure to attack our products and services or gain access to our networks and datacenters; using social engineering and AI-assisted techniques to induce our employees, users, partners, suppliers, or customers to disclose sensitive information, such as passwords, or take other actions to gain access to our data or our users’ or customers’ data; or acting in a coordinated manner or conducting coordinated attacks. For example, as previously disclosed in our Form 8-K filed with the Securities and Exchange 17 PART I Item 1A Commission on January 19, 2024 and amended on March 8, 2024, beginning in late November 2023, a nation-state associated threat actor used a password spray attack to compromise a legacy test account and, in turn, gain access to Microsoft email accounts. The threat actor used information it obtained to gain unauthorized access to some of our source code repositories and internal systems, and the threat actor could continue to utilize this and other information to attempt to gain access to our systems or otherwise adversely affect our business and results of operations. This incident has and may continue to result in harm to our reputation and customer relationships. Nation-state and state-sponsored actors can sustain malicious activities for extended periods and deploy significant resources to plan and carry out attacks. Nation-state attacks against us, our customers, suppliers, or partners have and may continue to intensify due to our transparency to our customers, other stakeholders, and the public about cyberattacks, and during elections or periods of intense diplomatic or armed conflict. Challenges or failures to update or apply security patches to all hardware and devices connected to our systems, including end-of-life and end-of-support equipment, have and may continue to result in unauthorized access to our systems and data in the future. Cyber incidents and attacks, individually or in the aggregate, could adversely affect our financial condition, results of operations, competitive position, and reputation, or expose us to legal or regulatory risk. Cyberthreats are constantly evolving and becoming increasingly sophisticated and complex, increasing the difficulty of preventing, detecting and successfully defending against them. Threat actors also utilize emerging technologies such as AI and machine learning to, among other things, increase the speed and scale of attacks by generating and refining malicious content and code, automate reconnaissance and targeting, accelerate their ability to detect or exploit vulnerabilities, and rapidly iterate on attack techniques, which can broaden the scope, intensity, and sophistication of campaigns and reduce the time we have to identify and mitigate emerging threats. Our current capabilities may not detect certain vulnerabilities or new attack methods, which may allow them to persist in the environment over long periods of time. It may be difficult to determine the best way to investigate, mitigate, contain, and remediate the harm caused by a cyber incident. Such efforts may not be successful, and we may make errors or fail to take necessary actions. It is possible that threat actors may gain undetected access to other networks and systems after establishing a foothold on an internal system. Cyber incidents and attacks can have cascading impacts that unfold with increasing speed across our internal networks and systems, as well as those of our partners and customers. In addition, it may take considerable time for us to investigate and evaluate the full impact of incidents, particularly for sophisticated attacks. As a result of these and other factors, we may not be able to provide prompt, full, and reliable information about the incident to our customers, partners, suppliers, regulators, and the public. Breaches of our facilities, network, or data security can disrupt the security of our systems and business applications, impair our ability to provide services to our customers and protect the privacy of their data, result in product development delays, compromise confidential or technical business information, result in theft or misuse of our intellectual property or other assets, subject us to ransomware attacks, require us to allocate more resources to improve technologies or remediate the impacts of attacks, or otherwise adversely affect our business. In addition, actions taken to remediate an incident could result in outages, data losses, and disruptions of our services. Our internal environment continues to evolve. Often, we are early adopters of new devices and technologies. We embrace new ways of sharing data and communicating internally and with partners and customers using methods such as social networking and other consumer-oriented technologies. Increasing use of AI, including models, algorithms, copilots, and autonomous or semi-autonomous agents, in our internal or third-party systems may create new attack surfaces or methods for adversaries. Our business policies and internal security controls may not keep pace with emerging threats or the evolving regulatory landscape. Inadequate account security or organizational security practices, including those of companies we have acquired or those of the third parties we utilize, have resulted and may result in unauthorized access to our systems and data, including customer systems and data. For example, passwords may not be rotated and employee access may not be updated or removed on a timely basis. Further, third parties that we utilize may also face the AI-based enhanced cybersecurity risk as described elsewhere in these risk factors. Employees or third parties may intentionally compromise our or our users’ security or systems or reveal confidential information, and laws in certain jurisdictions may compel actions by such parties against our interests and could limit our recourse. Malicious actors have and may continue to exploit the supply chain to compromise our systems by, for example, injecting malware, including through software updates or compromised supplier or open-source software code, accounts, or hardware. Incidents involving the supply chain, including third-party vendors, suppliers, service providers, open-source software, or customer environments, may adversely affect our systems and our products and services, even where our own systems are not directly compromised. 18 PART I Item 1A Security of our products, services, devices, and customers’ data The security of our products and services is important in our customers’ decisions to purchase or use our products or services across cloud and on-premises environments. Security threats are a significant challenge to companies like us, whose business is providing technology products and services to others. Threats to, or attacks on, our own infrastructure, such as the nation-state attack described in the prior risk factor, have also affected our customers and may do so in the future. The reliability of our cloud-based services and the protection of customer data depend on the security of our infrastructure and the security of third-party infrastructure upon which we rely, which includes hardware, software, and other elements provided by third parties. Adversaries tend to focus their efforts on the most popular operating systems, programs, and services, including many of ours, as well as customers with sensitive data, and we expect that to continue. In addition, adversaries can attack our customers’ on-premises or cloud environments, sometimes exploiting previously unknown (“zero-day”) vulnerabilities. Product vulnerabilities can persist even after we have issued security patches if customers have not installed the most recent updates, or if attackers, potentially with the assistance of artificial intelligence, reconstruct and exploit the vulnerabilities before patching. Attackers may utilize vulnerabilities to install malware to further compromise customers’ systems. Adversaries will continue to attack customers as they embrace digital transformation. Adversaries that acquire user account information can use that information to compromise our users’ accounts, including where accounts share the same attributes such as passwords. Inadequate account security practices may also result in unauthorized access, and user activity may result in ransomware or other malicious software impacting a customer’s use of our products or services. Our products are highly complex and weaknesses may exist in our development processes. For example, code generated by AI could include errors, deficiencies, or vulnerabilities that increase our exposure to cyberattacks. Additionally, open-source software can also contain vulnerabilities that may make our products susceptible to cyberattacks as we increasingly incorporate open-source software into our products. Accordingly, our products have and may continue to contain vulnerabilities or undetected errors. Our customers operate complex systems with third-party hardware and software from multiple vendors that may include systems acquired over many years. They expect our products and services to support all these systems and products, including those that no longer incorporate the strongest current security advances or standards. As a result, we may not be able to discontinue support of our services for a product, service, standard, or feature solely because a more secure alternative is available. Failure to utilize the most current security advances and standards can increase our customers’ vulnerability to attack. Further, the rapid evolution of AI technologies and use cases may outpace the development, deployment, and effectiveness of security products, controls, and industry standards, particularly in complex customer environments, increasing the risk that security measures will be insufficient to address newly emerging threats. Customers of widely varied sizes and technical sophistication use our technology, and consequently may still have limited capabilities and resources to help them adopt and implement state-of-the-art cybersecurity practices and technologies. In addition, we must account for this wide variation of technical sophistication when defining default settings for our products and services, including security default settings, as these settings may limit or otherwise impact other aspects of operations and some customers may have limited capability to review and reset these defaults. Cyberattacks could adversely impact our customers even if our production services are not directly compromised. We are committed to notifying our customers whose systems have been impacted as we become aware and have actionable information for customers to help protect themselves. We are also committed to providing guidance and support on detection, tracking, and remediation. We may not be able to detect the existence or extent of these attacks for all of our customers or have information on how to detect or track an attack, especially where an attack involves on-premises software such as Exchange Server where we may have no or limited visibility into our customers’ computing environments. Any of the foregoing events could result in reputational harm, loss of revenue, increased costs, or otherwise adversely affect our business, financial condition, and results of operations. Development and deployment of defensive measures To defend against security threats to our internal infrastructure, our cloud-based services, and our customers’ systems, we must take a complex and multifaceted approach. This includes continuously engineering more secure products and services, and enhancing security, threat detection, and reliability features, including through the deployment of AI-based and automated defenses. We must also escalate and improve our development processes and the deployment of software updates to address security vulnerabilities in our own products as well as those provided by others in a timely manner. In addition, we must develop mitigation technologies that help to secure customers from attacks even 19 PART I Item 1A when software updates are not deployed, and maintain the digital security infrastructure that protects the integrity of our network, products, and services. Further, we must provide security tools such as firewalls, anti-virus software, and advanced security and information about the need to deploy security measures and the impact of doing so. The cost of these measures to protect products and customer-facing services could reduce our operating margins. If we fail to do these things well, actual or perceived security vulnerabilities in our processes, products, and services, data corruption issues, or reduced performance could harm our reputation and lead customers to exercise contractual or other remedies against us, reduce or delay future purchases of products or subscriptions to services, or to use competing products or services. Customers and third parties granted access to customer systems may fail to update their systems, continue to run software or operating systems we no longer support, may fail to timely install or enable security patches, or may otherwise fail to adopt adequate security practices, including in response to enhanced AI-based threats. Customers may also spend more on protecting their existing computer systems from attack, which could delay adoption of additional products or services. Customers in certain industries such as financial services, health care, and government have enhanced or specialized expectations and requirements to which we must develop and engineer our products and services. Any of these could adversely affect our reputation and results of operations. Actual or perceived vulnerabilities may lead to claims against us. Our license agreements typically contain provisions that eliminate or limit our exposure to liability, but these provisions may not withstand legal challenges. At times, to achieve commercial objectives, we may enter into agreements with larger liability exposure to customers. Our products operate in conjunction with and are dependent on products and components across a broad ecosystem of third parties. If there is a security vulnerability in one of these components, and if there is a security exploit targeting it, we could experience adverse impacts to our results of operations, reputation, or competitive position. Disclosure and misuse of personal data could result in liability and harm our reputation. As we continue to grow the number, breadth, and scale of our cloud-based offerings, we store and process increasingly large amounts of personal data of our customers and users. The continued occurrence of high-profile data breaches provides evidence of an external environment increasingly hostile to information security. Our security controls over personal data, our training of employees and third parties on data security, and other practices we follow may not prevent the improper disclosure or misuse of customer or user data we or our vendors store and manage. Relatedly, we may fail to identify or mitigate insider threat activities that could lead to the misuse of our systems or customer and user data. In addition, third parties who have limited access to our customer or user data may use this data in unauthorized ways. Improper disclosure or misuse could harm our reputation, lead to legal exposure to customers or users, or subject us to liability under laws that protect personal data, resulting in increased costs or loss of revenue. Our software products and services also enable our customers and users to store and process personal data on-premises or in a cloud-based environment we host. Government authorities can sometimes require us to produce customer or user data in response to valid legal orders. In the U.S. and elsewhere, we advocate for transparency concerning these requests and appropriate limitations on government authority to compel disclosure. Perceptions that the collection, use, and retention of personal information is not satisfactorily protected could inhibit sales of our products or services and could limit adoption of our cloud-based solutions by consumers, businesses, and government entities. Additional security measures we take to address customer or user concerns, or constraints on our flexibility to determine where and how to operate datacenters in response to customer or user expectations or governmental rules or actions, may increase costs or hinder sales of our products and services. We may not be able to protect information in our products and services from use by others . LinkedIn and other Microsoft products and services contain valuable information and content protected by contractual restrictions or technical measures. In certain cases, we have made commitments to our members and users to limit access to or use of this information. Limitations on our ability to prevent third parties from scraping or gathering information or content through use of bots or other measures and using it for their own benefit due to, among other things, changes in the law, interpretations of law, or increasing use of agentic AI, could adversely affect our business, financial condition, and results of operations. 20 PART I Item 1A Abuse of our platforms may harm our reputation or user engagement. Advertising, professional, marketplace, and gaming platform abuses For platform products and services that provide content or host ads that come from or can be influenced by third parties, our reputation or user engagement may be negatively affected by activity that is hostile or inappropriate. This activity may come from users impersonating other people or organizations, including through the use of AI technologies, dissemination of information that may be viewed as misleading or intended to manipulate the opinions of our users, or the use of our products or services that violates our terms of service or otherwise for objectionable or illegal ends. Preventing or responding to these actions may require us to make substantial investments in people and technology and these investments may not be successful, adversely affecting our business, financial condition, and results of operations. Other digital safety abuses Our services may be used to find, generate, store, or disseminate harmful or illegal content in violation of our terms or applicable law. We may not proactively discover such content due to scale, the limitations of existing technologies, and conflicting legal frameworks. This content may negatively affect users, our reputation, our brands, or could impact our business in certain markets. Regulatory enforcement is increasingly focused on product design, safety-by-design, and the responsibility of platform providers. At the same time, laws designed to reduce risks to children are driving new obligations for age-assurance systems, age-appropriate design, and parental controls across the online ecosystem, including within app stores and operating systems. In addition, certain AI technologies, including conversational or emotionally engaging AI systems, may present distinct risks for children and adolescents. Failure to comply with these requirements may subject us to enhanced regulatory oversight, civil or criminal liability, fines and penalties, or other reputational damage, which could adversely affect our business, financial condition, and results of operations. Our products and services, how they are used by customers, and how third-party products and services interact with them, may present security, privacy, and execution risks. Our products and services may contain defects in design, manufacture, or operation that make them insecure or ineffective for their intended purposes. For example, customers control our products and services, including our AI products, within their environments, and may deploy them in high-risk scenarios or utilize them inappropriately. Our products may also collect large amounts of data in manners which may not satisfy customers or regulatory requirements. Our customers also operate complex systems with third-party hardware and software from multiple vendors whose products or personnel may take or fail to take actions which impact the reliability or security of our products and services. If our products and services do not work as intended, are utilized in methods not intended, violate the law, or harm individuals or businesses, we may be subject to legal claims or enforcement actions. These risks, if realized, may increase our costs, damage our reputation, or adversely affect our results of operations. Issues in the development, deployment, and use of AI may result in reputational or competitive harm or liability . We are providing access to AI across our offerings and enabling customers and partners to build AI-based solutions using our platforms. These capabilities may be developed by Microsoft or third parties and are becoming an increasing part of our business. The increasing scale and adoption of AI amplifies challenges that may affect its development, deployment, and use, which could give rise to reputational, competitive, or legal harm. Our AI models and the methodologies used to train them may be flawed. Datasets may be overbroad, insufficient, or contain biased or inaccurate information. Content generated by AI systems may be offensive, illegal, inaccurate, or otherwise harmful. Ineffective or inadequate AI development or deployment practices by Microsoft or others could result in incidents that impair the acceptance of AI solutions, cause harm to individuals, customers, or society, or result in our products and services not working as intended. Human review of certain inputs and outputs or other forms of human oversight may be required, including for agentic AI systems that can take actions autonomously. Companion or highly-personalized AI systems may result in over-reliance or dependence by users that is harmful. Our implementation of AI systems could result in legal liability, regulatory action, litigation, brand, reputational, or competitive harm, or other adverse impacts. These risks may stem from issues related to AI model and system capabilities, intellectual property, data privacy, product liability, and other claims associated with AI training, outputs, and system behavior. They are further compounded by the evolving regulatory landscape, with new laws emerging globally and increased scrutiny from regulators and lawmakers. Certain AI technologies and use cases present ethical issues or may have broad or uneven impacts on society or vulnerable groups within society. There is also rising divergence globally in how to address these issues and impacts, with the result that we will need to navigate a web of different tensions across geographies. We have experienced, and expect to continue to experience, instances in which the AI solutions we enable or offer produce unintended consequences, are used or customized in unforeseen ways by customers or partners, or operate in a 21 PART I Item 1A manner inconsistent with our responsible AI policies and practices. These outcomes may give rise to public controversy, societal concerns, or regulatory actions relating to human rights, privacy, employment, or other social, economic, or political issues, and could adversely affect our reputation, competitive position, business, financial condition, and results of operations. OPERATIONAL RISKS We may be unable to develop and expand adequate infrastructure. Our increasing user traffic, our growth in services, and the complexity of our products and services demand more infrastructure capacity and computing power. We have spent and will continue to spend substantial amounts to build, purchase, or lease datacenters and equipment and to upgrade our technology and network infrastructure. Our infrastructure capacity depends on the availability of permitted and buildable land, predictable and affordable energy, networking supplies, and servers, including graphics processing units and other components. These demands continue to increase as we introduce new products and services and support the growth and the augmentation of existing services, and scale further the incorporation of AI features and/or functionality. We are rapidly growing our business of providing a platform and back-end hosting for services provided by third parties to their end users. In addition, infrastructure in certain geographies carries higher safety and reliability risks. Maintaining, securing, and expanding our infrastructure globally is expensive and complex. The availability, reliability, and cost of electrical power are critical to the operation and expansion of our datacenters. In many regions, electricity generation, transmission, and distribution infrastructure is experiencing increasing demand and capacity constraints. Limitations in power availability, delays in obtaining power connections, outages, shortages, increased energy costs, or requirements imposed by utilities, regulators, or other market participants could restrict our ability to develop or expand datacenter capacity. In addition, alternative energy sources and other emerging solutions may not be available in sufficient quantities, may not timely scale to meet our requirements, or may be available only at higher costs. If we are unable to secure adequate power resources on commercially reasonable terms, our ability to support customer demand and execute our growth strategy could be adversely affected. Our ability to develop additional capacity is also subject to land availability, zoning restrictions, environmental reviews, permitting requirements, and other regulatory approvals. Changes in governmental policies, permitting processes, environmental regulations, sustainability requirements, building standards, energy regulations, or other factors beyond our control may delay projects, restrict development opportunities, impose additional compliance obligations, or increase costs. We also face community opposition, state and local moratoriums, and hyper-local dissent, as well as increasingly coordinated opposition to infrastructure development across jurisdictions, including through the involvement or influence of elected officials, policymakers, and advocacy groups. Our failure to navigate successfully any of these challenges may delay projects, restrict development opportunities, impose additional compliance obligations, or increase costs. The construction and operation of datacenters also requires significant numbers of skilled technical, engineering, construction, and operational personnel. Labor shortages, competition for talent, wage inflation, labor disputes, immigration restrictions, or shortages of specialized contractors could increase operating and construction costs, extend project timelines, and adversely affect our ability to deploy infrastructure at the pace required to meet demand. We may experience supply problems. There are limited suppliers for certain critical device and datacenter components, and those items are in short supply. We continue to identify and evaluate opportunities to expand our datacenter locations and increase our server capacity to meet the evolving needs of our customers, particularly given the growing demand for AI products and services. Our competitors are also scaling their infrastructure and use some of the same suppliers and materials for hardware components as we do, which impacts price and availability. We depend on the timely availability of critical hardware, equipment, and components used to construct and operate datacenters and related infrastructure. We have experienced and may continue to experience supply constraints, including shortages of semiconductors, networking equipment, power systems, cooling equipment, and other key components. Expanding manufacturing or supply capacity for certain components may require significant investments and multi-year lead times. As components are delayed or become unavailable or more expensive, whether because of supplier capacity constraint, industry shortages, legal or regulatory changes that restrict supply sources, geopolitical tensions, trade restrictions, tariffs, transportation disruptions, supplier financial distress, natural disasters, public health events, instability in regions important to our or our suppliers’ supply chains, or other reasons, we may not obtain timely replacement supplies, or may be able to obtain supplies only by entering into long-term purchase commitments, price commitments, paying prices above prevailing market rates, or other arrangements on terms that are less favorable than prevailing market terms. Any delay or inability to obtain necessary equipment, hardware, or components on acceptable terms and timelines could delay infrastructure deployments, result in reduced sales, higher costs, or 22 PART I Item 1A inadequate datacenter capacity to support the delivery and continued development of our products and services. Component shortages, excess or obsolete inventory, or price reductions resulting in inventory adjustments have and may increase our cost of revenue. In addition to infrastructure, other products such as XBOX consoles, Surface devices, and other hardware are similarly subject to supply chain challenges and disruptions, resulting in shortages which could adversely affect our business, operations, financial condition, and results of operations. We may experience outages, disruptions, or capacity constraints if we fail to maintain and operate adequate infrastructure or secure the resources necessary to support it. Maintaining, securing, and operating our infrastructure requires that we maintain an Internet connectivity infrastructure and storage and compute capacity that is robust, resilient, and reliable within competitive, economic, and regulatory constraints that continue to evolve. The cost or availability of critical resources necessary to support our infrastructure, including power, networking supplies, servers, graphics processing units, and other components, could be adversely affected by a variety of factors, including supply chain and energy issues, evolving environmental or other regulations, and geopolitical disruptions. In addition to datacenters we own or operate, we rely on third-party providers, including colocation facilities, leased datacenters, and cloud infrastructure providers, to support portions of our operations. If any of these providers fail to meet our requirements, or experience service interruptions, operational failures, capacity constraints, physical damage, cybersecurity incidents, or other disruptions, our ability to provide services, maintain system performance, or meet customer expectations could be negatively impacted. Inefficiencies or operational failures, including temporary or permanent loss of customer data, outages, insufficient Internet connectivity, insufficient or unavailable power or water supply, inefficient operation of our of our cloud-based and AI products and services on our infrastructure, or inadequate storage and compute capacity could diminish the actual or perceived quality of our products, services, and user experience, resulting in contractual liability, claims by customers and other third parties, regulatory actions, damage to our reputation, and loss of current and potential users, subscribers, and advertisers, each of which could adversely affect our business, operations, financial condition, and results of operations. We may experience other quality problems. Our AI and other software products and services also have and may in the future experience quality or reliability problems. The processes we use to develop our software are imperfect. Like all software, our software contains bugs and other defects that interfere with their intended operation. Our customers rely on us for critical business functions and multiple workloads. Many of our products and services are interdependent on one another. Our products and services may be impacted by interaction with third-party products and services. Our customers may also utilize their own or third-party products and services whose reliability is dependent on interaction with our products and services. Each of these circumstances potentially magnifies the impact of quality or reliability issues. Weaknesses in our processes could result in defects we do not detect and fix in pre-release testing, which could cause reduced sales, damage to our reputation, repair or remediation costs, delays in the release of new products or versions, or legal liability, any of which could adversely affect our business, financial condition, and results of operations. Although our license agreements typically contain provisions that eliminate or limit our exposure to liability, these provisions may not withstand legal challenge. Our datacenters and our hardware products such as XBOX consoles, Surface devices, and other devices we design and market are highly complex. Failure to prevent, detect, or address defects in design, manufacture, or associated software could adversely affect our business and results of operations. LEGAL, REGULATORY, AND LITIGATION RISKS We are subject to a variety of new, existing, and evolving legal and regulatory requirements that could adversely affect our results of operations. We are subject to a wide range of laws, regulations, and legal requirements in the U.S. and globally, including those that may apply to our products and online services offerings, and those that impose requirements related to user privacy, cybersecurity, telecommunications, data storage and protection, digital accessibility, advertising, and online safety. Laws in several jurisdictions, including EU Member State laws under the European Electronic Communications Code, increasingly define certain of our services as regulated services. This trend may continue with our offerings becoming subject to additional data protection, security, digital safety, law enforcement surveillance, and other obligations. Regulators and private litigants may assert that our collection, use, and management of customer data and other information is inconsistent with their laws and regulations, including laws that apply to the tracking of users via technology such as cookies. In addition, laws requiring us to 23 PART I Item 1A retrieve and produce customer data in response to compulsory legal demands from law enforcement and governmental authorities are evolving and the requests we are experiencing are increasing in volume and complexity. New, existing, and evolving laws and regulations, or interpretations or applications of existing laws and regulations in a manner inconsistent with our interpretations of such laws and regulations or our practices, may result in modification of our products and services, altered business models and operations, increased costs, reputational damage, and civil or criminal liability. Examples include laws and regulations regarding: • Competition laws and new market regulation: Government agencies closely scrutinize us under U.S. and foreign competition laws. Governments are actively enforcing competition laws and regulations and enacting new regulations to intervene in digital markets, and this includes markets such as the EU, the United Kingdom, the U.S., and China. Some jurisdictions also allow competitors or consumers to assert claims of anti-competitive conduct. U.S. and foreign antitrust authorities have previously brought enforcement actions and continue to scrutinize our business. Competition law enforcement actions and court decisions along with new market regulations may result in fines or hinder our ability to provide the benefits of our software to consumers and businesses, reducing the attractiveness of our products and the revenue that comes from them. New competition law actions or obligations under market regulation schemes could be initiated, potentially using previous actions as precedent. • AI: Legislative and regulatory action is evolving with respect to AI, which could increase costs or restrict opportunity. For example, the EU’s AI Act may increase costs or impact the provision or operation of our AI models and services in the European market. In addition, governments may impose restrictions on the development, deployment, availability, or cross-border access to advanced AI models based on safety, cybersecurity, or national security or may apply laws to AI models in ways we cannot anticipate. AI regulatory areas include model and system development and deployment, frontier model safety, transparency, content provenance, digital replicas, and AI companions. • Anti-corruption: The Foreign Corrupt Practices Act (“FCPA”) and other anti-corruption laws and regulations (“Anti-Corruption Laws”) prohibit corrupt payments by our employees, vendors, or agents, and the accounting provisions of the FCPA require us to maintain accurate books and records and adequate internal controls. From time to time, we receive inquiries from authorities in the U.S. and elsewhere which may be based on reports from employees and others about our business activities and our compliance with Anti-Corruption Laws. Periodically, we receive such reports directly and investigate them and also cooperate with investigations by U.S. and foreign law enforcement authorities. • Trade: Increasing trade laws, policies, sanctions, and other regulatory requirements also affect our operations in and outside the U.S. relating to trade and investment. Economic sanctions in the U.S., the EU, and other countries could prohibit business with restricted entities or countries. U.S. export controls restrict Microsoft from offering many of its products and services to, or making investments in, certain entities in specified countries. U.S. import controls restrict us from integrating certain information and communication technologies into our supply chain and allow for government review of transactions involving information and communications technology from countries determined to be foreign adversaries. Supply chain regulations may impact the availability of goods or result in additional regulatory scrutiny. Restrictions on data flows and outbound investment and customer sensitivities may limit our ability to leverage parts of our global engineering footprint to provide services in certain jurisdictions. Increased geopolitical instabilities and changing U.S. Administration priorities create an unpredictable trade landscape. U.S. tariffs, shifting AI export controls policies, and disagreements among governments on sanctions policies toward third countries, has and may continue to increase operational costs, create uncertainty in the continuity of our products, and accelerate sovereignty initiatives among international partners and customers. The volatility of U.S. tariffs has triggered economic uncertainty and could impact cloud and devices supply chain cost competitiveness. The potential replacement of the rescinded AI Diffusion Rule, expanded export license conditions, and other potential AI-related rulemakings could adversely affect Microsoft’s business, strategy, and operations. Periods of intense diplomatic or armed conflict, such as the conflicts in Ukraine and the Middle East could continue to result in (1) new and rapidly evolving sanctions and trade restrictions, which may impair trade with sanctioned individuals and countries, and (2) negative impacts to regional trade ecosystems among our customers, partners, and us. 24 PART I Item 1A • Cybersecurity: Legislative and regulatory actions related to cybersecurity may increase the costs associated with developing, implementing, or securing our products and services. The legal and regulatory environment in this area is complex and continues to evolve across multiple jurisdictions. As a result, there is considerable uncertainty regarding both current and future compliance obligations. This uncertainty increases the risk that we may incur additional operational costs, face regulatory enforcement actions, or encounter challenges in the development and deployment of our products. • Handling of personal data: Legal requirements relating to the collection, storage, handling, and transfer of personal data globally continue to evolve. The growth of our Internet- and cloud-based services internationally relies on the movement of data across national boundaries. Data protection authorities and governments in the EU and other markets have and may again restrict and/or block the use of services that involve the transfer of data across borders. New and evolving rules and restrictions on the flow of data across borders could increase the cost and complexity of delivering our products and services. In addition, the EU General Data Protection Regulation and other similar regulations impose a range of compliance obligations regarding the handling of personal data. New requirements related to the use of data, including the Data Act, add additional rules and restrictions on the use of data in our products and services. • Environmental, Social, and Governance: Laws, regulations, and policies relating to environmental, social, and governance matters are being developed and formalized in Europe, the U.S., and elsewhere, which may include greenhouse gas emissions and energy usage caps, permitting, reporting, procurement, operational, and infrastructure-siting requirements as well as specific, target-driven environmental, social, and governance frameworks and disclosure requirements. These laws, regulations, and policies may require significant investments or operational changes and may result in new or unexpected costs. In addition, in 2020 we announced goals to become carbon negative, water positive, and zero waste by 2030. AI development and deployment has and will likely continue to raise energy use and emissions, making it harder to meet these goals. Any failure or perceived failure to meet our sustainability goals, or to meet various sustainability regulatory requirements, could result in claims and lawsuits, regulatory actions, penalties, or damage to our reputation, each of which could adversely affect our business, operations, financial condition, and results of operations. How these laws and regulations apply to our business is often unclear, subject to change, and sometimes may conflict or be inconsistent from jurisdiction to jurisdiction. In addition, governments’ approach to enforcement, and our products and services, are continuing to evolve. Compliance with existing, expanding, or new laws and regulations may involve significant costs and operational efforts, or require changes in products or business practices that could adversely affect our results of operations. Noncompliance could result in the imposition of penalties, criminal sanctions, or orders to cease the alleged noncompliant activity. If our products do not meet customer expectations or legal requirements, we could face regulatory or legal actions, and our business, operations, financial condition, and results of operations could be adversely affected. We have claims and lawsuits against us that may result in adverse outcomes. We are subject to a variety of claims and lawsuits. These claims may arise from a wide variety of business practices and initiatives, including major new product releases, AI products and services, significant business transactions, warranty or product claims, employment practices, and regulation. As we continue to expand our business and offerings, we may experience new and novel legal claims. Adverse outcomes in some or all of these claims may result in significant monetary damages or injunctive relief that could adversely affect our ability to conduct our business. Litigation and other claims are subject to inherent uncertainties and management’s view of these matters may change in the future. An adverse impact to our financial condition and results of operations could occur for the period in which the effect of an unfavorable outcome becomes probable and reasonably estimable. Our business with government customers may present additional uncertainties. We derive substantial revenue from government contracts. Government contracts and regulatory requirements can present risks and challenges not present in private commercial agreements. For instance, we are subject to government audits and investigations relating to these contracts, and we are required to provide assurance and attestations about our products and processes. If we do not satisfy contractual or regulatory requirements, we could be suspended or debarred as a governmental contractor, we could incur civil and criminal fines and penalties, and under certain circumstances contracts may be rescinded. Some agreements may allow a government to terminate without cause and provide for higher liability limits for certain losses. Some contracts may be subject to periodic funding approval, reductions, cancellations, or delays which could adversely impact public-sector demand for our products and services. These events could negatively impact our financial condition, results of operations, and reputation. 25 PART I Item 1A We may have additional tax liabilities. We are subject to income taxes in the U.S. and many foreign jurisdictions. Significant judgment is required in determining our worldwide provision for income taxes. In the course of our business, there are many transactions and calculations where the ultimate tax determination is uncertain. We may recognize additional tax expense and be subject to additional tax liabilities due to changes in tax laws, regulations, and administrative practices and principles, including changes to the global tax framework, in various jurisdictions. In recent years, multiple domestic and international tax proposals were proposed to impose greater tax burdens on large multinational enterprises. The Organisation for Economic Co-operation and Development continues to advance proposals or guidance in international taxation, including global minimum tax. We are regularly under audit by tax authorities in different jurisdictions. Although we believe that our provision for income taxes and our tax estimates are reasonable, tax authorities may disagree with certain positions we have taken. In addition, economic and political pressures to increase tax revenue in various jurisdictions may make resolving tax disputes favorably more difficult. We are currently under IRS audit for prior tax years and have received Notices of Proposed Adjustment (“NOPAs”) from the IRS for the tax years 2004 to 2013. The primary issues in the NOPAs relate to intercompany transfer pricing. In the NOPAs, the IRS is seeking an additional tax payment of $28.9 billion plus penalties and interest. The final resolution of the proposed adjustments, and other audits or litigation, may differ from the amounts recorded in our consolidated financial statements and adversely affect our results of operations in the period or periods in which that determination is made. We earn a significant amount of our operating income outside the U.S. A change in the mix of earnings and losses in countries with differing statutory tax rates, changes in our business or structure, or the expiration of or disputes about certain tax agreements in a particular country may result in higher effective tax rates for the company. In addition, changes in U.S. federal and state or international tax laws applicable to corporate multinationals, other global fundamental law changes currently being considered by many countries, including in the U.S., and changes in taxing jurisdictions’ administrative interpretations, decisions, policies, and positions could adversely affect our financial condition and results of operations. INTELLECTUAL PROPERTY RISKS We face risks related to the protection and utilization of our intellectual property that may result in our business and operating results being harmed. Protecting our intellectual property rights and combating unlicensed copying and use of our software, source code, trade secrets, and other intellectual property on a global basis is difficult. Similarly, the absence of harmonized patent laws makes it more difficult to ensure consistent respect for patent rights. Source code, the detailed program commands for our software programs, is critical to our business. Unauthorized access to or disclosure of source code or other intellectual property may negatively impact future trade secret protection for that intellectual property. It may then become easier for third parties to compete with our products by copying functionality, which could adversely affect our results of operations. Unauthorized access to or disclosure of source code or other intellectual property also increases the security risks described elsewhere in these risk factors. Third parties may claim that we infringe their intellectual property. From time to time, others claim we infringe their intellectual property rights, including current copyright infringement and other claims arising from AI training, inference, and output. To resolve these claims, we may enter into royalty-bearing data access or licensing agreements on terms that are less favorable than currently available, stop selling or redesign affected products or services, or pay damages to satisfy indemnification commitments with our customers. Adverse outcomes could also include monetary damages or injunctive relief that may limit or prevent importing, marketing, and selling our products or services that have infringing technologies. We have paid significant amounts to settle claims related to the use of technology and intellectual property rights and to procure intellectual property rights as part of our strategy to manage this risk, and may continue to do so, which could adversely affect our results of operations. GENERAL RISKS If our reputation or our brands are damaged, our business and results of operations may be harmed . Our reputation and brands are globally recognized and are important to our business. Our reputation and brands affect our ability to attract and retain consumer, business, and public-sector customers. There are numerous ways our reputation or brands could be damaged. These include product safety, quality, or accessibility issues, our environmental impact and sustainability, supply chain practices, or human rights record. We may experience backlash from customers, government entities, advocacy groups, employees, and other stakeholders that disagree with our product offering 26 PART I Item 1A decisions, public policy positions, or corporate philanthropic initiatives. Damage to our reputation or our brands may occur from, among other things: • The introduction of new features, products, services, or terms of service that customers, users, or partners do not like. • Public scrutiny of our decisions regarding user privacy, data practices, content, or development and deployment of AI. • Data security breaches, cybersecurity incidents, responsible AI failures, compliance failures, or actions of partners or individual employees. Social media may increase the likelihood, speed, and magnitude of negative brand events. If our brands or reputation are damaged, it could adversely affect our business, results of operations, or ability to attract the most highly qualified employees. Adverse economic or market conditions could harm our business. Worsening economic conditions, including inflation, recession, pandemic, or other changes in economic conditions, periods of economic uncertainty, evolution of customer demand, technology investment cycles, interest rates, foreign exchange rates, or the timing and mix of customer spending, may cause lower or delayed IT spending and adversely affect our results of operations. If demand for computing power, PCs, servers, and other computing devices declines, or consumer or business spending for those products declines, our results of operations could be adversely affected. Our product distribution system relies on an extensive partner and retail network. OEMs building devices that run our software have also been a significant means of distribution. The impact of economic conditions on our partners, such as the bankruptcy of a major distributor, OEM, or retailer, could cause sales channel disruption. Challenging economic conditions also may impair the ability of our customers to pay for products and services they have purchased. As a result, allowances for doubtful accounts and write-offs of accounts receivable may increase. We maintain an investment portfolio of various holdings, types, and maturities. These investments are subject to general credit, liquidity, market, and interest rate risks, which may be exacerbated by market downturns or events that affect global financial markets. A significant part of our investment portfolio consists of U.S. government securities. If global financial markets decline for long periods, or if there is a downgrade of the U.S. government credit rating due to an actual or threatened default on government debt, our investment portfolio could be adversely affected and we could determine that more of our investments have experienced a decline in fair value, requiring impairment charges that could adversely affect our financial condition and results of operations. Catastrophic events or geopolitical conditions could disrupt our business. A disruption or failure of our systems, operations, or supply chain because of a major earthquake, weather event, cyberattack, terrorist attack, pandemic, or other catastrophic event could cause delays in completing sales, providing services, or performing other critical functions. As an example, our corporate headquarters, a significant portion of our research and development activities, and certain other essential business operations are in the Seattle, Washington area, and we have other business operations in the Silicon Valley area of California, both of which are seismically active regions. A catastrophic event that results in the destruction or disruption of any of our critical business or systems, or the infrastructure or systems they rely on, such as power grids, could harm our ability to conduct normal business operations or adversely affect our results of operations. Providing our customers with more services and solutions in the cloud puts a premium on the resilience of our systems and strength of our business continuity management plans and magnifies the potential negative consequences of prolonged service outages. Abrupt political change, terrorist activity, and armed conflict, such as the conflicts in Ukraine and the Middle East, pose economic and other risks, which may negatively impact our ability to sell to and collect from customers, increase our operating costs, or otherwise disrupt our operations in markets both directly and indirectly impacted by such events. These conditions also may add uncertainty to the timing and budget for technology investment decisions by our customers and may cause supply chain disruptions. Geopolitical change may result in changing regulatory systems and requirements and market interventions that could impact our operating strategies, access to national, regional, and global markets, hiring, and profitability. Geopolitical instability may lead to sanctions and impact our ability to do business in some markets or with some public-sector customers. Any of these changes could adversely affect our results of operations. Changes in geopolitical conditions also increase the security risks described elsewhere in these risk factors. 27 PART I Item 1A The occurrence of regional epidemics or a global pandemic could adversely affect our business, operations, financial condition, and results of operations. The extent to which global pandemics impact our business going forward will depend on factors such as the duration and scope of the pandemic; governmental, business, and individuals' actions in response to the pandemic; and the impact on economic activity, including the possibility of recession or financial market instability. Measures to contain a global pandemic may intensify other risks described in these Risk Factors. The long-term effects of climate change on the global economy and the IT industry are unclear. Environmental regulations or changes in the supply, demand, or available sources of energy or other resources may affect the availability or cost of goods and services, including natural resources, necessary to run our business. Changes in climate where we operate may increase the costs of powering and cooling computer hardware we use to develop software and provide cloud-based services. Our global business exposes us to operational and economic risks. Our customers, employees, and infrastructure are located throughout the world and a significant part of our revenue comes from international sales. The global nature of our business creates operational, economic, and geopolitical risks. Global, regional, and local economic developments, monetary policy, geopolitical tension, restrictions on international trade, such as tariffs and other controls on imports or exports, inflation, and recession, as well as political and military disputes, could adversely affect our results of operations. Non-compliance with sanctions as well as general ecosystem disruptions could result in reputational harm, operational delays, monetary fines, loss of revenue, increased costs, loss of export privileges, or criminal sanctions, which could adversely affect our business, financial condition, and results of operations. In addition, our international growth strategy includes certain markets, the developing nature of which presents several risks, including deterioration of social, political, labor, or economic conditions in a country or region, and difficulties in staffing and managing foreign operations. Emerging nationalist and protectionist trends and concerns about human rights, the environment, and political expression in specific countries may significantly alter the trade and commercial environments. Changes to trade policy or agreements as a result of populism, protectionism, or economic nationalism may result in higher tariffs, local sourcing initiatives, and non-local sourcing restrictions, disagreements among governments on export controls and sanctions toward third countries, investment restrictions, or other developments that make it more difficult to operate and sell our products in foreign countries. Disruptions of these kinds in developed or emerging markets could negatively impact demand for our products and services, impair our ability to operate in certain regions, or increase operating costs. Although we hedge a portion of our international currency exposure, significant fluctuations in foreign exchange rates between the U.S. dollar and foreign currencies could adversely affect our results of operations. Our business depends on our ability to attract and retain talented employees. Our business is based on successfully attracting, training, and retaining talented employees representing diverse backgrounds, experiences, and skill sets. The market for highly skilled workers and leaders in our industry is extremely competitive. Maintaining our brand and reputation, as well as an inclusive work environment that enables all our employees to thrive, are important to our ability to recruit and retain employees. We are also limited in our ability to recruit internationally by restrictive domestic immigration laws. Restraints on the flow of technical and professional talent, including those derived from changes to U.S. immigration policies or laws, may inhibit our ability to adequately staff our research and development efforts. If we are less successful in our recruiting efforts, or if we cannot retain highly skilled workers and key leaders, our ability to develop and deliver successful products and services could be adversely affected. Effective succession planning is also important to our long-term success. Failure to ensure effective transfer of knowledge and smooth transitions involving key employees could hinder our strategic planning and execution. How employment-related laws are interpreted and applied to our workforce practices may result in increased operating costs and less flexibility in how we meet our workforce needs. Our global workforce is predominantly non-unionized, although we do have some employees in the U.S. and internationally who are represented by unions or works councils. In the U.S., there has been a general increase in workers exercising their right to form or join a union. The unionization of significant employee populations could result in higher costs and other operational changes necessary to respond to changing conditions and to establish new relationships with worker representatives. 28 PART I Item 1B, 1C ITEM 1B. UNRESOLVE D STAFF COMMENTS We have received no written comments regarding our periodic or current reports from the staff of the Securities and Exchange Commission that were issued 180 days or more preceding the end of our fiscal year 2026 that remain unresolved. ITEM 1C. CY BERSECURITY RISK MANAGEMENT AND STRATEGY Microsoft plays a central role in the world’s digital ecosystem. We have made it a top corporate priority to protect the computing environment used by our customers and employees and to support the resiliency of our cloud infrastructure and services, products, devices, and our internal corporate resources from determined adversaries. In response to the evolving cybersecurity threat landscape, we launched the Secure Future Initiative (“SFI”) in November 2023 and expanded the scope of SFI in May 2024. The SFI focuses our business strategy and efforts on continual improvement in cybersecurity protection. We operate a cybersecurity program and governance framework designed to protect our computing environments against cybersecurity threats, and we have controls, policies, and procedures to identify, manage, and mitigate cybersecurity threats. Annually, we assess our cybersecurity program’s alignment with applicable industry standards. We also undertake integrated planning and preparedness activities to support business continuity and operational resiliency. We assess our program's effectiveness through a range of validation activities, which may include tabletop simulations, production environment tests, penetration and vulnerability tests, red team exercises, and other related activities. We conduct mandatory cybersecurity training, provide employees with tools to report suspected incidents and assess their own security posture, and conduct real-time simulated employee education exercises, such as phishing email campaigns designed to emulate real-world attacks. We also engage in robust cybersecurity assessments and remediation efforts for acquired companies. Our computing environments, products, and services are reviewed by our internal audit teams as well as independent third-party assessors. We are committed to managing the most significant risks to our strategies and ambitions, including cybersecurity risks. The Enterprise Risk Management (“ERM”) organization supports management in this commitment by facilitating the semiannual risk assessment, which documents the priority and status of these risks and aligns them with our strategic mitigation efforts. ERM is structured using a framework based on the Committee of Sponsoring Organization guidelines that also aligns with the International Organization for Standardization 31000:2018 Risk Management Standard. We continuously monitor our computing environments, products, and services for vulnerabilities and signs of compromise, and we utilize our own security products, third-party security products, and leading artificial intelligence models to combat cybersecurity threats. We integrate security into our computing environments, products, and services through our Security Development Lifecycle (“SDL”). Our SDL introduces security and privacy considerations throughout all phases of our development process and through the adoption of zero-trust end-to-end architecture. When appropriate, we utilize external service providers and tools to assess, test, or otherwise assist our program. We also leverage third parties by working with external researchers, operating bug bounty programs, and managing coordinated vulnerability disclosure programs with security organizations. We maintain a systematic approach to assessing and controlling the cybersecurity risks presented by third-party service providers. We require third-party service providers to manage their cybersecurity risks in defined ways, undergo cybersecurity reviews, notify us of cyber events, and satisfy additional contractual requirements. We seek to improve the entire cybersecurity ecosystem through multistakeholder diplomacy to set and uphold expectations for state behavior, advancement of government policy that strengthens cybersecurity and resiliency, disruption and deterrence of cybercrime, protection of national security interests, and disruption of digital threats to democracies. We also establish processes and innovate solutions for us and our customers to address the growing number and complexity of cybersecurity regulations. 29 PART I Item 1C When we experience a cybersecurity incident, we utilize our well-established incident response plans that operate both across the company and at the product and services level. Incidents are first triaged for severity, and then more deeply assessed to establish a plan of record and activate internal and external notification, disclosure, and communication plans, as applicable. Engineering and development resources are mobilized to resolve or remediate the incident. Following resolution, we conduct post incident reviews for incidents that meet established criteria to capture learnings and strengthen our processes. We describe the risks from cybersecurity threats, including previous cybersecurity incidents, in section “Risk Factors” (Part I, Item 1A of this Form 10-K). As of the date of this Form 10-K, we do not believe any risks from cybersecurity threats have materially affected or are reasonably likely to materially affect us, including our results of operations or financial condition. However, the cybersecurity threat environment is increasingly challenging, and we, along with the entire digital ecosystem, are under constant and increasing threat. As discussed above, our business strategy is tied to the SFI and we are committed to continuously monitoring cybersecurity threats, enhancing the security of our products, investing in our cybersecurity infrastructure, and collaborating with peers, customers, service providers, regulators, and governments to advance our and the entire digital ecosystem’s cybersecurity defenses and resiliency. GOVERNANCE Our Board of Directors oversees cybersecurity risk. Cybersecurity reviews by the Board are scheduled to occur at least quarterly, or more frequently as determined to be necessary or advisable. Presentations to the Board of Directors are made by senior management, including our Chief Information Security Officer (“CISO”), our EVP of Microsoft Security, our EVP of Cloud + AI, and the head of our Customer Security and Trust organization. The presentations address topics such as cybersecurity threats, incidents, top risks and related remediation efforts, results from internal and third-party assessments, progress towards risk-mitigation goals, the functioning of our incident response program, regulatory developments, and digital diplomacy efforts. In addition, we have an escalation process in place to inform senior management and the Board of significant issues. Cybersecurity issues are also considered during separate Board meeting discussions regarding important matters like ERM, audit issues, operational budgeting, business continuity planning, mergers and acquisitions, brand management, and other relevant matters. Our CISO leads the strategy, engineering, and operations of cybersecurity across the company, and reports to the EVP of Cloud + AI. Our CISO has extensive experience assessing and managing cybersecurity programs and cybersecurity risk. Before joining Microsoft, our CISO served in a prior Chief Technology Officer role as well as in senior leadership, engineering, and operational roles within multiple organizations. In addition to the Board’s oversight of cybersecurity risk, to support the CISO, we have established a Cybersecurity Governance Council (“CGC”) charged with overseeing initiatives that safeguard Microsoft’s computing environments, products, and services. The CGC is comprised of an executive-level team of Deputy CISOs with cybersecurity backgrounds and expertise relevant to their roles. The CGC’s responsibilities include approving our enterprise security risk assessment process and results, determining the appropriate cybersecurity risk level and mitigations, reviewing the industry standard alignment, and supporting compliance with cybersecurity regulations. Our cybersecurity efforts are supported directly by Microsoft’s security and threat intelligence experts and our employees across the company, all of whom receive cybersecurity awareness training and education and are expected to support our efforts. 30 PART I Item 2, 3, 4 ITEM 2. PR OPERTIES Our corporate headquarters are located in Redmond, Washington. We have approximately 14 million square feet of space located in King County, Washington that is used for engineering, sales, marketing, and operations, among other general and administrative purposes. These facilities include approximately 12 million square feet of owned space situated on approximately 520 acres of land we own at our corporate headquarters, and approximately 2 million square feet of space we lease. We own and lease other facilities domestically and internationally, primarily for offices, datacenters, and research and development. The largest owned international properties include space in the following locations: China, India, Ireland, the Netherlands, and Sweden. The largest leased international properties include space in the following locations: Australia, Canada, China, France, Germany, India, Ireland, Japan, the Netherlands, and the United Kingdom. The table below shows a summary of the square footage of our properties owned and leased domestically and internationally as of June 30, 2026: (Square feet in millions) Location Owned Leased Total U.S. 41 24 65 International 17 30 47 Total 58 54 112 ITEM 3. LEGAL PROCEEDINGS Refer to Note 14 – Contingencies of the Notes to Financial Statements (Part II, Item 8 of this Form 10-K) for information regarding legal proceedings in which we are involved. ITEM 4. MINE SAFE TY DISCLOSURES Not applicable. 31 PART II Item 5 PAR T II ITEM 5. MARKET FOR REGISTRANT’S COM MON EQUITY, RELATED STOCKHOLDER MATTERS, AND ISSUER PURCHASES OF EQUITY SECURITIES MARKET AND STOCKHOLDERS Our common stock is traded on the NASDAQ Stock Market under the symbol MSFT. On July 23, 2026, there were 74,199 registered holders of record of our common stock. SHARE REPURCHASES AND DIVIDENDS Following are our monthly share repurchases for the fourth quarter of fiscal year 2026: Period Total Number of Shares Purchased Average Price Paid Per Share Total Number of Shares Purchased as Part of Publicly Announced Plans or Programs Approximate Dollar Value of Shares That May Yet Be Purchased Under the Plans or Programs (In millions) April 1, 2026 – April 30, 2026 1,002,119 $ 398.88 1,002,119 $ 43,630 May 1, 2026 – May 31, 2026 3,559,509 416.81 3,559,509 42,147 June 1, 2026 – June 30, 2026 3,828,061 396.19 3,828,061 40,630 8,389,689 8,389,689 All share repurchases were made using cash resources. Our share repurchases may occur through open market purchases or pursuant to a Rule 10b5-1 trading plan. The above table excludes shares repurchased to settle employee tax withholding related to the vesting of stock awards. Our Board of Directors declared the following dividends during the fourth quarter of fiscal year 2026: Declaration Date Record Date Payment Date Dividend Per Share Amount (In millions) June 10, 2026 August 20, 2026 September 10, 2026 $ 0.91 $ 6,759 We returned $10.2 billion to shareholders in the form of share repurchases and dividends in the fourth quarter of fiscal year 2026. Refer to Note 15 – Stockholders’ Equity of the Notes to Financial Statements (Part II, Item 8 of this Form 10-K) for further discussion regarding share repurchases and dividends. 32 PART II Item 6 ITEM 6. [R ESERVED] 33 PART II Item 7 ITEM 7. MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION AND RESULTS OF OPERATIONS The following Management’s Discussion and Analysis of Financial Condition and Results of Operations (“MD&A”) is intended to help the reader understand the results of operations and financial condition of Microsoft Corporation. MD&A is provided as a supplement to, and should be read in conjunction with, our consolidated financial statements and the accompanying Notes to Financial Statements (Part II, Item 8 of this Form 10-K). This section generally discusses the results of our operations for the year ended June 30, 2026 compared to the year ended June 30, 2025. For a discussion of the year ended June 30, 2025 compared to the year ended June 30, 2024, please refer to Part II, Item 7, “Management’s Discussion and Analysis of Financial Condition and Results of Operations” in our Annual Report on Form 10-K for the year ended June 30, 2025. OVERVIEW Microsoft is a technology company committed to making digital technology and artificial intelligence (“AI”) available broadly and doing so responsibly, with a mission to empower every person and every organization on the planet to achieve more. We create platforms and applications, powered by AI, that deliver innovative solutions that meet the evolving needs of our customers. We generate revenue by offering a wide range of cloud-based solutions, content, and other services to people and businesses; licensing and supporting an array of software products; delivering relevant online advertising to a global audience; and designing and selling devices. Our most significant expenses are related to compensating employees; supporting and investing in our cloud-based services, including datacenter operations; designing, manufacturing, marketing, and selling our other products and services; and income taxes. Highlights from fiscal year 2026 compared with fiscal year 2025 included: • Microsoft Cloud revenue increased 27% to $214.4 billion. • Commercial remaining performance obligation increased 84% to $678 billion. • Microsoft 365 Commercial cloud revenue increased 17%. • Microsoft 365 Consumer cloud revenue increased 28%. • LinkedIn revenue increased 11%.