Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

Microsoft

91,472 known vulnerabilities

1,058
CRITICAL
11,903
HIGH
5,674
MEDIUM
354
LOW

Top Products

windows 8173 windows server 2016 5644 windows server 2019 5279 windows server 2012 4134 windows 10 3588 windows server 2022 3387 windows server 2008 3078 windows 10 1809 2579 windows 10 21h2 2553 windows 10 22h2 2550
18,990 CVEs · Page 142/380
5.5
CVE-2024-21377

Windows DNS Information Disclosure Vulnerability

 9.0
CVE-2024-21376

Microsoft Azure Kubernetes Service Confidential Container Remote Code Execution Vulnerability

 8.8
CVE-2024-21375

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

 5.0
CVE-2024-21374

Microsoft Teams for Android Information Disclosure Vulnerability

 8.8
CVE-2024-21372

Windows OLE Remote Code Execution Vulnerability

 7.0
CVE-2024-21371

Windows Kernel Elevation of Privilege Vulnerability

 8.8
CVE-2024-21370

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

 8.8
CVE-2024-21369

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

 8.8
CVE-2024-21368

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

 8.8
CVE-2024-21367

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

 8.8
CVE-2024-21366

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

 8.8
CVE-2024-21365

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

 9.3
CVE-2024-21364

Microsoft Azure Site Recovery Elevation of Privilege Vulnerability

 7.8
CVE-2024-21363

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

 5.5
CVE-2024-21362

Windows Kernel Security Feature Bypass Vulnerability

 8.8
CVE-2024-21361

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

 8.8
CVE-2024-21360

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

 8.8
CVE-2024-21359

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

 8.8
CVE-2024-21358

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

 8.1
CVE-2024-21357

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

 6.5
CVE-2024-21356

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

 7.0
CVE-2024-21355

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability

 7.8
CVE-2024-21354

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability

 8.8
CVE-2024-21353

Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability

 8.8
CVE-2024-21352

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

 7.6
CVE-2024-21351 KEV

Windows SmartScreen Security Feature Bypass Vulnerability

 8.8
CVE-2024-21350

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

 8.8
CVE-2024-21349

Microsoft ActiveX Data Objects Remote Code Execution Vulnerability

 7.5
CVE-2024-21348

Internet Connection Sharing (ICS) Denial of Service Vulnerability

 7.5
CVE-2024-21347

Microsoft ODBC Driver Remote Code Execution Vulnerability

 7.8
CVE-2024-21346

Win32k Elevation of Privilege Vulnerability

 8.8
CVE-2024-21345

Windows Kernel Elevation of Privilege Vulnerability

 5.9
CVE-2024-21344

Windows Network Address Translation (NAT) Denial of Service Vulnerability

 5.9
CVE-2024-21343

Windows Network Address Translation (NAT) Denial of Service Vulnerability

 7.5
CVE-2024-21342

Windows DNS Client Denial of Service Vulnerability

 6.8
CVE-2024-21341

Windows Kernel Remote Code Execution Vulnerability

 4.6
CVE-2024-21340

Windows Kernel Information Disclosure Vulnerability

 6.4
CVE-2024-21339

Windows USB Generic Parent Driver Remote Code Execution Vulnerability

 7.8
CVE-2024-21338 KEV

Windows Kernel Elevation of Privilege Vulnerability

 7.3
CVE-2024-21329

Azure Connected Machine Agent Elevation of Privilege Vulnerability

 7.6
CVE-2024-21328

Dynamics 365 Sales Spoofing Vulnerability

 7.6
CVE-2024-21327

Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability

 7.8
CVE-2024-21315

Microsoft Defender for Endpoint Protection Elevation of Privilege Vulnerability

 4.1
CVE-2024-21304

Trusted Compute Base Elevation of Privilege Vulnerability

 5.7
CVE-2024-20695

Skype for Business Information Disclosure Vulnerability

 6.5
CVE-2024-20684

Windows Hyper-V Denial of Service Vulnerability

 6.5
CVE-2024-20679

Azure Stack Hub Spoofing Vulnerability

 7.8
CVE-2024-20673

Microsoft Office Remote Code Execution Vulnerability

 7.5
CVE-2024-20667

Azure DevOps Server Remote Code Execution Vulnerability

 9.8
CVE-2024-25110

The UAMQP is a general purpose C library for AMQP 1.0. During a call to open_get_offered_capabilities, a memory allocati

Frequently Asked Questions

How many CVEs affect Microsoft?

Microsoft has 91,472 CVE records in our database, including 2628 critical and 63090 high severity vulnerabilities. 351 of these are listed in CISA's Known Exploited Vulnerabilities catalog.

What are the most severe Microsoft vulnerabilities?

Microsoft has 2628 critical severity (CVSS 9.0+) and 63090 high severity (CVSS 7.0-8.9) vulnerabilities. 351 vulnerabilities are confirmed as actively exploited in the wild.

How can I scan for Microsoft vulnerabilities?

CyberStrike's AI-powered security agents automatically detect vulnerabilities in Microsoft products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.

Detect Microsoft Vulnerabilities

CyberStrike scans your infrastructure for Microsoft vulnerabilities and provides real-time remediation guidance.

Get Started