Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

Microsoft

91,472 known vulnerabilities

1,058
CRITICAL
11,903
HIGH
5,674
MEDIUM
354
LOW

Top Products

windows 8173 windows server 2016 5644 windows server 2019 5279 windows server 2012 4134 windows 10 3588 windows server 2022 3387 windows server 2008 3078 windows 10 1809 2579 windows 10 21h2 2553 windows 10 22h2 2550
18,990 CVEs · Page 114/380
8.8
CVE-2024-49005

SQL Server Native Client Remote Code Execution Vulnerability

 8.8
CVE-2024-49004

SQL Server Native Client Remote Code Execution Vulnerability

 8.8
CVE-2024-49003

SQL Server Native Client Remote Code Execution Vulnerability

 8.8
CVE-2024-49002

SQL Server Native Client Remote Code Execution Vulnerability

 8.8
CVE-2024-49001

SQL Server Native Client Remote Code Execution Vulnerability

 8.8
CVE-2024-49000

SQL Server Native Client Remote Code Execution Vulnerability

 8.8
CVE-2024-48999

SQL Server Native Client Remote Code Execution Vulnerability

 8.8
CVE-2024-48998

SQL Server Native Client Remote Code Execution Vulnerability

 8.8
CVE-2024-48997

SQL Server Native Client Remote Code Execution Vulnerability

 8.8
CVE-2024-48996

SQL Server Native Client Remote Code Execution Vulnerability

 8.8
CVE-2024-48995

SQL Server Native Client Remote Code Execution Vulnerability

 8.8
CVE-2024-48994

SQL Server Native Client Remote Code Execution Vulnerability

 8.8
CVE-2024-48993

SQL Server Native Client Remote Code Execution Vulnerability

 6.7
CVE-2024-43646

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

 6.7
CVE-2024-43645

Windows Defender Application Control (WDAC) Security Feature Bypass Vulnerability

 7.8
CVE-2024-43644

Windows Client-Side Caching Elevation of Privilege Vulnerability

 6.8
CVE-2024-43643

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

 7.5
CVE-2024-43642

Windows SMB Denial of Service Vulnerability

 7.8
CVE-2024-43641

Windows Registry Elevation of Privilege Vulnerability

 7.8
CVE-2024-43640

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

 9.8
CVE-2024-43639

Windows KDC Proxy Remote Code Execution Vulnerability

 6.8
CVE-2024-43638

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

 6.8
CVE-2024-43637

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

 7.8
CVE-2024-43636

Win32k Elevation of Privilege Vulnerability

 8.8
CVE-2024-43635

Windows Telephony Service Remote Code Execution Vulnerability

 6.8
CVE-2024-43634

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

 6.5
CVE-2024-43633

Windows Hyper-V Denial of Service Vulnerability

 6.7
CVE-2024-43631

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

 7.8
CVE-2024-43630

Windows Kernel Elevation of Privilege Vulnerability

 7.8
CVE-2024-43629

Windows DWM Core Library Elevation of Privilege Vulnerability

 8.8
CVE-2024-43628

Windows Telephony Service Remote Code Execution Vulnerability

 8.8
CVE-2024-43627

Windows Telephony Service Remote Code Execution Vulnerability

 7.8
CVE-2024-43626

Windows Telephony Service Elevation of Privilege Vulnerability

 8.1
CVE-2024-43625

Microsoft Windows VMSwitch Elevation of Privilege Vulnerability

 8.8
CVE-2024-43624

Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability

 7.8
CVE-2024-43623

Windows NT OS Kernel Elevation of Privilege Vulnerability

 8.8
CVE-2024-43622

Windows Telephony Service Remote Code Execution Vulnerability

 8.8
CVE-2024-43621

Windows Telephony Service Remote Code Execution Vulnerability

 8.8
CVE-2024-43620

Windows Telephony Service Remote Code Execution Vulnerability

 9.9
CVE-2024-43602

Azure CycleCloud Remote Code Execution Vulnerability

 8.1
CVE-2024-43598

LightGBM Remote Code Execution Vulnerability

 7.8
CVE-2024-43530

Windows Update Stack Elevation of Privilege Vulnerability

 7.5
CVE-2024-43499

.NET and Visual Studio Denial of Service Vulnerability

 9.8
CVE-2024-43498

.NET and Visual Studio Remote Code Execution Vulnerability

 8.8
CVE-2024-43462

SQL Server Native Client Remote Code Execution Vulnerability

 8.8
CVE-2024-43459

SQL Server Native Client Remote Code Execution Vulnerability

 7.5
CVE-2024-43452

Windows Registry Elevation of Privilege Vulnerability

 6.5
CVE-2024-43451 KEV

NTLM Hash Disclosure Spoofing Vulnerability

 7.5
CVE-2024-43450

Windows DNS Spoofing Vulnerability

 6.8
CVE-2024-43449

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

Frequently Asked Questions

How many CVEs affect Microsoft?

Microsoft has 91,472 CVE records in our database, including 2628 critical and 63090 high severity vulnerabilities. 351 of these are listed in CISA's Known Exploited Vulnerabilities catalog.

What are the most severe Microsoft vulnerabilities?

Microsoft has 2628 critical severity (CVSS 9.0+) and 63090 high severity (CVSS 7.0-8.9) vulnerabilities. 351 vulnerabilities are confirmed as actively exploited in the wild.

How can I scan for Microsoft vulnerabilities?

CyberStrike's AI-powered security agents automatically detect vulnerabilities in Microsoft products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.

Detect Microsoft Vulnerabilities

CyberStrike scans your infrastructure for Microsoft vulnerabilities and provides real-time remediation guidance.

Get Started