Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

Microsoft

91,472 known vulnerabilities

1,058
CRITICAL
11,903
HIGH
5,674
MEDIUM
354
LOW

Top Products

windows 8173 windows server 2016 5644 windows server 2019 5279 windows server 2012 4134 windows 10 3588 windows server 2022 3387 windows server 2008 3078 windows 10 1809 2579 windows 10 21h2 2553 windows 10 22h2 2550
18,990 CVEs · Page 127/380
8.0
CVE-2024-37981

Secure Boot Security Feature Bypass Vulnerability

 8.0
CVE-2024-37978

Secure Boot Security Feature Bypass Vulnerability

 8.0
CVE-2024-37977

Secure Boot Security Feature Bypass Vulnerability

 8.0
CVE-2024-37975

Secure Boot Security Feature Bypass Vulnerability

 8.0
CVE-2024-37974

Secure Boot Security Feature Bypass Vulnerability

 8.8
CVE-2024-37973

Secure Boot Security Feature Bypass Vulnerability

 8.0
CVE-2024-37972

Secure Boot Security Feature Bypass Vulnerability

 8.0
CVE-2024-37971

Secure Boot Security Feature Bypass Vulnerability

 8.0
CVE-2024-37970

Secure Boot Security Feature Bypass Vulnerability

 8.0
CVE-2024-37969

Secure Boot Security Feature Bypass Vulnerability

 8.8
CVE-2024-37336

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

 8.8
CVE-2024-37334

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

 8.8
CVE-2024-37333

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

 8.8
CVE-2024-37332

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

 8.8
CVE-2024-37331

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

 8.8
CVE-2024-37330

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

 8.8
CVE-2024-37329

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

 8.8
CVE-2024-37328

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

 8.8
CVE-2024-37327

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

 8.8
CVE-2024-37326

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

 8.8
CVE-2024-37324

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

 8.8
CVE-2024-37323

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

 8.8
CVE-2024-37322

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

 8.8
CVE-2024-37321

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

 8.8
CVE-2024-37320

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

 8.8
CVE-2024-37319

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

 8.8
CVE-2024-37318

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

 8.8
CVE-2024-35272

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

 8.8
CVE-2024-35271

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

 5.3
CVE-2024-35270

Windows iSCSI Service Denial of Service Vulnerability

 7.6
CVE-2024-35267

Azure DevOps Server Spoofing Vulnerability

 7.6
CVE-2024-35266

Azure DevOps Server Spoofing Vulnerability

 8.1
CVE-2024-35264

.NET and Visual Studio Remote Code Execution Vulnerability

 7.8
CVE-2024-35261

Azure Network Watcher VM Extension Elevation of Privilege Vulnerability

 8.8
CVE-2024-35256

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

 7.5
CVE-2024-32987

Microsoft SharePoint Server Information Disclosure Vulnerability

 7.5
CVE-2024-30105

.NET and Visual Studio Denial of Service Vulnerability

 7.5
CVE-2024-30098

Windows Cryptographic Services Security Feature Bypass Vulnerability

 7.1
CVE-2024-30081

Windows NTLM Spoofing Vulnerability

 7.8
CVE-2024-30079

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

 4.7
CVE-2024-30071

Windows Remote Access Connection Manager Information Disclosure Vulnerability

 7.3
CVE-2024-30061

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

 8.8
CVE-2024-30013

Windows MultiPoint Services Remote Code Execution Vulnerability

 8.8
CVE-2024-28928

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

 8.8
CVE-2024-28899

Secure Boot Security Feature Bypass Vulnerability

 6.8
CVE-2024-26184

Secure Boot Security Feature Bypass Vulnerability

 8.8
CVE-2024-21449

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

 8.8
CVE-2024-21428

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

 8.8
CVE-2024-21425

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

 8.8
CVE-2024-21415

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Frequently Asked Questions

How many CVEs affect Microsoft?

Microsoft has 91,472 CVE records in our database, including 2628 critical and 63090 high severity vulnerabilities. 351 of these are listed in CISA's Known Exploited Vulnerabilities catalog.

What are the most severe Microsoft vulnerabilities?

Microsoft has 2628 critical severity (CVSS 9.0+) and 63090 high severity (CVSS 7.0-8.9) vulnerabilities. 351 vulnerabilities are confirmed as actively exploited in the wild.

How can I scan for Microsoft vulnerabilities?

CyberStrike's AI-powered security agents automatically detect vulnerabilities in Microsoft products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.

Detect Microsoft Vulnerabilities

CyberStrike scans your infrastructure for Microsoft vulnerabilities and provides real-time remediation guidance.

Get Started