Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

Microsoft

91,472 known vulnerabilities

1,058
CRITICAL
11,903
HIGH
5,674
MEDIUM
354
LOW

Top Products

windows 8173 windows server 2016 5644 windows server 2019 5279 windows server 2012 4134 windows 10 3588 windows server 2022 3387 windows server 2008 3078 windows 10 1809 2579 windows 10 21h2 2553 windows 10 22h2 2550
18,990 CVEs · Page 116/380
4.3
CVE-2024-49384

Excessive attack surface in acep-collector service due to binding to an unrestricted IP address. The following products

4.3
CVE-2024-49383

Excessive attack surface in acep-importer service due to binding to an unrestricted IP address. The following products a

4.3
CVE-2024-49382

Excessive attack surface in archive-server service due to binding to an unrestricted IP address. The following products

6.3
CVE-2024-0129

NVIDIA NeMo contains a vulnerability in SaveRestoreConnector where a user may cause a path traversal issue via an unsafe

8.8
CVE-2024-45733

In Splunk Enterprise for Windows versions below 9.2.3 and 9.1.6, a low-privileged user that does not hold the "admin" or

8.0
CVE-2024-45731

In Splunk Enterprise for Windows versions below 9.3.1, 9.2.3, and 9.1.6, a low-privileged user that does not hold the "a

5.5
CVE-2024-9469

A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with W

7.4
CVE-2024-43610

Exposure of Sensitive Information to an Unauthorized Actor in Copilot Studio allows a unauthenticated attacker to view s

7.8
CVE-2024-47425

Adobe Framemaker versions 2020.6, 2022.4 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerabi

7.8
CVE-2024-47424

Adobe Framemaker versions 2020.6, 2022.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability tha

7.8
CVE-2024-47423

Adobe Framemaker versions 2020.6, 2022.4 and earlier are affected by an Unrestricted Upload of File with Dangerous Type

7.8
CVE-2024-47422

Adobe Framemaker versions 2020.6, 2022.4 and earlier are affected by an Untrusted Search Path vulnerability that could l

7.8
CVE-2024-47421

Adobe Framemaker versions 2020.6, 2022.4 and earlier are affected by an out-of-bounds read vulnerability when parsing a

7.8
CVE-2024-45137

InDesign Desktop versions 19.4, 18.5.3 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vu

7.8
CVE-2024-45136

InCopy versions 19.4, 18.5.3 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerabilit

7.8
CVE-2024-45152

Substance3D - Stager versions 3.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result i

7.8
CVE-2024-45144

Substance3D - Stager versions 3.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result i

7.8
CVE-2024-45143

Substance3D - Stager versions 3.0.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could re

7.8
CVE-2024-45142

Substance3D - Stager versions 3.0.3 and earlier are affected by a Write-what-where Condition vulnerability that could al

7.8
CVE-2024-45141

Substance3D - Stager versions 3.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result i

7.8
CVE-2024-45140

Substance3D - Stager versions 3.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result i

7.8
CVE-2024-45139

Substance3D - Stager versions 3.0.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could re

7.8
CVE-2024-45138

Substance3D - Stager versions 3.0.3 and earlier are affected by a Use After Free vulnerability that could result in arbi

8.2
CVE-2024-45720

On Windows platforms, a "best fit" character encoding conversion of command line arguments to Subversion's executables (

5.5
CVE-2024-47420

Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to discl

5.5
CVE-2024-47419

Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to discl

7.8
CVE-2024-47418

Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrar

7.8
CVE-2024-47417

Animate versions 23.0.7, 24.0.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result

7.8
CVE-2024-47416

Animate versions 23.0.7, 24.0.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could r

7.8
CVE-2024-47415

Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrar

7.8
CVE-2024-47414

Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrar

7.8
CVE-2024-47413

Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrar

7.8
CVE-2024-47412

Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrar

7.8
CVE-2024-47411

Animate versions 23.0.7, 24.0.4 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could

7.8
CVE-2024-47410

Animate versions 23.0.7, 24.0.4 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could resul

7.8
CVE-2024-45150

Dimension versions 4.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary

7.8
CVE-2024-45146

Dimension versions 4.0.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code

7.8
CVE-2024-43616

Microsoft Office Remote Code Execution Vulnerability

7.1
CVE-2024-43615

Microsoft OpenSSH for Windows Remote Code Execution Vulnerability

5.5
CVE-2024-43614

Relative path traversal in Microsoft Defender for Endpoint allows an authorized attacker to perform spoofing locally.

6.9
CVE-2024-43612

Power BI Report Server Spoofing Vulnerability

8.8
CVE-2024-43611

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

6.5
CVE-2024-43609

Microsoft Office Spoofing Vulnerability

8.8
CVE-2024-43608

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

8.8
CVE-2024-43607

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

5.7
CVE-2024-43604

Outlook for Android Elevation of Privilege Vulnerability

5.5
CVE-2024-43603

Visual Studio Collector Service Denial of Service Vulnerability

7.8
CVE-2024-43601

Visual Studio Code for Linux Remote Code Execution Vulnerability

8.8
CVE-2024-43599

Remote Desktop Client Remote Code Execution Vulnerability

8.8
CVE-2024-43593

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Frequently Asked Questions

How many CVEs affect Microsoft?

Microsoft has 91,472 CVE records in our database, including 2628 critical and 63090 high severity vulnerabilities. 351 of these are listed in CISA's Known Exploited Vulnerabilities catalog.

What are the most severe Microsoft vulnerabilities?

Microsoft has 2628 critical severity (CVSS 9.0+) and 63090 high severity (CVSS 7.0-8.9) vulnerabilities. 351 vulnerabilities are confirmed as actively exploited in the wild.

How can I scan for Microsoft vulnerabilities?

CyberStrike's AI-powered security agents automatically detect vulnerabilities in Microsoft products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.

Detect Microsoft Vulnerabilities

CyberStrike scans your infrastructure for Microsoft vulnerabilities and provides real-time remediation guidance.

Get Started