Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

Microsoft

91,472 known vulnerabilities

1,058
CRITICAL
11,903
HIGH
5,674
MEDIUM
354
LOW

Top Products

windows 8173 windows server 2016 5644 windows server 2019 5279 windows server 2012 4134 windows 10 3588 windows server 2022 3387 windows server 2008 3078 windows 10 1809 2579 windows 10 21h2 2553 windows 10 22h2 2550
18,990 CVEs · Page 123/380
5.5
CVE-2024-34134

Illustrator versions 28.5, 27.9.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to dis

7.8
CVE-2024-34133

Illustrator versions 28.5, 27.9.4 and earlier are affected by an out-of-bounds write vulnerability that could result in

5.5
CVE-2024-34127

InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an out-of-bounds read vulnerability that could le

5.5
CVE-2024-34118

Illustrator versions 28.5, 27.9.4 and earlier are affected by an Improper Input Validation vulnerability that could lead

7.8
CVE-2024-34117

Photoshop Desktop versions 24.7.3, 25.9.1 and earlier are affected by a Use After Free vulnerability that could result i

7.8
CVE-2024-41858

InCopy versions 18.5.2, 19.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could resu

7.8
CVE-2024-38163

Windows Update Stack Elevation of Privilege Vulnerability

6.8
CVE-2024-38223

Windows Initial Machine Configuration Elevation of Privilege Vulnerability

7.8
CVE-2024-38215

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

6.5
CVE-2024-38214

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

6.5
CVE-2024-38213 KEV

Windows Mark of the Web Security Feature Bypass Vulnerability

8.2
CVE-2024-38211

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

7.0
CVE-2024-38201

Azure Stack Hub Elevation of Privilege Vulnerability

9.8
CVE-2024-38199

Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability

7.5
CVE-2024-38198

Windows Print Spooler Elevation of Privilege Vulnerability

6.5
CVE-2024-38197

Microsoft Teams for iOS Spoofing Vulnerability

7.8
CVE-2024-38196

Windows Common Log File System Driver Elevation of Privilege Vulnerability

7.8
CVE-2024-38195

Azure CycleCloud Remote Code Execution Vulnerability

7.8
CVE-2024-38193 KEV

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

7.8
CVE-2024-38191

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

8.8
CVE-2024-38189 KEV

Microsoft Project Remote Code Execution Vulnerability

7.8
CVE-2024-38187

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

7.8
CVE-2024-38186

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

7.8
CVE-2024-38185

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

7.8
CVE-2024-38184

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

8.8
CVE-2024-38180

Windows SmartScreen Security Feature Bypass Vulnerability

7.5
CVE-2024-38178 KEV

Scripting Engine Memory Corruption Vulnerability

7.8
CVE-2024-38177

Windows App Installer Spoofing Vulnerability

6.7
CVE-2024-38173

Microsoft Outlook Remote Code Execution Vulnerability

7.8
CVE-2024-38172

Microsoft Excel Remote Code Execution Vulnerability

7.8
CVE-2024-38171

Microsoft PowerPoint Remote Code Execution Vulnerability

7.1
CVE-2024-38170

Microsoft Excel Remote Code Execution Vulnerability

7.8
CVE-2024-38169

Microsoft Office Visio Remote Code Execution Vulnerability

7.5
CVE-2024-38168

.NET and Visual Studio Denial of Service Vulnerability

6.5
CVE-2024-38167

.NET and Visual Studio Information Disclosure Vulnerability

6.5
CVE-2024-38165

Windows Compressed Folder Tampering Vulnerability

7.8
CVE-2024-38162

Azure Connected Machine Agent Elevation of Privilege Vulnerability

6.8
CVE-2024-38161

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

9.1
CVE-2024-38160

Windows Network Virtualization Remote Code Execution Vulnerability

9.1
CVE-2024-38159

Windows Network Virtualization Remote Code Execution Vulnerability

7.0
CVE-2024-38158

Azure IoT SDK Remote Code Execution Vulnerability

7.0
CVE-2024-38157

Azure IoT SDK Remote Code Execution Vulnerability

5.5
CVE-2024-38155

Security Center Broker Information Disclosure Vulnerability

8.8
CVE-2024-38154

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

7.8
CVE-2024-38153

Windows Kernel Elevation of Privilege Vulnerability

7.8
CVE-2024-38152

Windows OLE Remote Code Execution Vulnerability

5.5
CVE-2024-38151

Windows Kernel Information Disclosure Vulnerability

7.8
CVE-2024-38150

Windows DWM Core Library Elevation of Privilege Vulnerability

7.5
CVE-2024-38148

Windows Secure Channel Denial of Service Vulnerability

7.8
CVE-2024-38147

Microsoft DWM Core Library Elevation of Privilege Vulnerability

Frequently Asked Questions

How many CVEs affect Microsoft?

Microsoft has 91,472 CVE records in our database, including 2628 critical and 63090 high severity vulnerabilities. 351 of these are listed in CISA's Known Exploited Vulnerabilities catalog.

What are the most severe Microsoft vulnerabilities?

Microsoft has 2628 critical severity (CVSS 9.0+) and 63090 high severity (CVSS 7.0-8.9) vulnerabilities. 351 vulnerabilities are confirmed as actively exploited in the wild.

How can I scan for Microsoft vulnerabilities?

CyberStrike's AI-powered security agents automatically detect vulnerabilities in Microsoft products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.

Detect Microsoft Vulnerabilities

CyberStrike scans your infrastructure for Microsoft vulnerabilities and provides real-time remediation guidance.

Get Started