Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

Microsoft

91,472 known vulnerabilities

1,058
CRITICAL
11,903
HIGH
5,674
MEDIUM
354
LOW

Top Products

windows 8173 windows server 2016 5644 windows server 2019 5279 windows server 2012 4134 windows 10 3588 windows server 2022 3387 windows server 2008 3078 windows 10 1809 2579 windows 10 21h2 2553 windows 10 22h2 2550
18,990 CVEs · Page 126/380
7.8
CVE-2024-38070

Windows LockDown Policy (WLDP) Security Feature Bypass Vulnerability

7.0
CVE-2024-38069

Windows Enroll Engine Security Feature Bypass Vulnerability

7.5
CVE-2024-38068

Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

7.5
CVE-2024-38067

Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

7.8
CVE-2024-38066

Windows Win32k Elevation of Privilege Vulnerability

6.8
CVE-2024-38065

Secure Boot Security Feature Bypass Vulnerability

7.5
CVE-2024-38064

Windows TCP/IP Information Disclosure Vulnerability

7.8
CVE-2024-38062

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

7.5
CVE-2024-38061

DCOM Remote Cross-Session Activation Elevation of Privilege Vulnerability

8.8
CVE-2024-38060

Windows Imaging Component Remote Code Execution Vulnerability

7.8
CVE-2024-38059

Win32k Elevation of Privilege Vulnerability

6.8
CVE-2024-38058

BitLocker Security Feature Bypass Vulnerability

7.8
CVE-2024-38057

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

5.5
CVE-2024-38056

Microsoft Windows Codecs Library Information Disclosure Vulnerability

5.5
CVE-2024-38055

Microsoft Windows Codecs Library Information Disclosure Vulnerability

7.8
CVE-2024-38054

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

8.8
CVE-2024-38053

Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability

7.8
CVE-2024-38052

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

7.8
CVE-2024-38051

Windows Graphics Component Remote Code Execution Vulnerability

7.8
CVE-2024-38050

Windows Workstation Service Elevation of Privilege Vulnerability

6.6
CVE-2024-38049

Windows Distributed Transaction Coordinator Remote Code Execution Vulnerability

6.5
CVE-2024-38048

Windows Network Driver Interface Specification (NDIS) Denial of Service Vulnerability

7.8
CVE-2024-38047

PowerShell Elevation of Privilege Vulnerability

7.2
CVE-2024-38044

DHCP Server Service Remote Code Execution Vulnerability

7.8
CVE-2024-38043

PowerShell Elevation of Privilege Vulnerability

5.5
CVE-2024-38041

Windows Kernel Information Disclosure Vulnerability

7.8
CVE-2024-38034

Windows Filtering Platform Elevation of Privilege Vulnerability

7.3
CVE-2024-38033

PowerShell Elevation of Privilege Vulnerability

7.1
CVE-2024-38032

Microsoft Xbox Remote Code Execution Vulnerability

7.5
CVE-2024-38031

Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

6.5
CVE-2024-38030

Windows Themes Spoofing Vulnerability

7.2
CVE-2024-38028

Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability

6.5
CVE-2024-38027

Windows Line Printer Daemon Service Denial of Service Vulnerability

7.2
CVE-2024-38025

Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability

7.2
CVE-2024-38024

Microsoft SharePoint Server Remote Code Execution Vulnerability

7.2
CVE-2024-38023

Microsoft SharePoint Server Remote Code Execution Vulnerability

7.0
CVE-2024-38022

Windows Image Acquisition Elevation of Privilege Vulnerability

8.8
CVE-2024-38021

Microsoft Outlook Remote Code Execution Vulnerability

6.5
CVE-2024-38020

Microsoft Outlook Spoofing Vulnerability

7.2
CVE-2024-38019

Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability

5.5
CVE-2024-38017

Microsoft Message Queuing Information Disclosure Vulnerability

7.5
CVE-2024-38015

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

6.7
CVE-2024-38013

Microsoft Windows Server Backup Elevation of Privilege Vulnerability

8.0
CVE-2024-38011

Secure Boot Security Feature Bypass Vulnerability

8.0
CVE-2024-38010

Secure Boot Security Feature Bypass Vulnerability

8.0
CVE-2024-37989

Secure Boot Security Feature Bypass Vulnerability

8.0
CVE-2024-37988

Secure Boot Security Feature Bypass Vulnerability

8.0
CVE-2024-37987

Secure Boot Security Feature Bypass Vulnerability

8.0
CVE-2024-37986

Secure Boot Security Feature Bypass Vulnerability

8.4
CVE-2024-37984

Secure Boot Security Feature Bypass Vulnerability

Frequently Asked Questions

How many CVEs affect Microsoft?

Microsoft has 91,472 CVE records in our database, including 2628 critical and 63090 high severity vulnerabilities. 351 of these are listed in CISA's Known Exploited Vulnerabilities catalog.

What are the most severe Microsoft vulnerabilities?

Microsoft has 2628 critical severity (CVSS 9.0+) and 63090 high severity (CVSS 7.0-8.9) vulnerabilities. 351 vulnerabilities are confirmed as actively exploited in the wild.

How can I scan for Microsoft vulnerabilities?

CyberStrike's AI-powered security agents automatically detect vulnerabilities in Microsoft products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.

Detect Microsoft Vulnerabilities

CyberStrike scans your infrastructure for Microsoft vulnerabilities and provides real-time remediation guidance.

Get Started