Microsoft
91,472 known vulnerabilities
Top Products
Windows Online Certificate Status Protocol (OCSP) Information Disclosure Vulnerability
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Microsoft Message Queuing Information Disclosure Vulnerability
Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability
Windows Group Policy Elevation of Privilege Vulnerability
Visual Studio Elevation of Privilege Vulnerability
Microsoft Online Certificate Status Protocol (OCSP) Remote Code Execution Vulnerability
Microsoft ODBC Driver Remote Code Execution Vulnerability
Microsoft Common Log File System Elevation of Privilege Vulnerability
Windows HTML Platforms Security Feature Bypass Vulnerability
NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability
Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability
A symbolic link manipulation vulnerability in Trellix Anti-Malware Engine prior to the January 2024 release allows an a
Azure uAMQP is a general purpose C library for AMQP 1.0. The UAMQP library is used by several clients to implement AMQP
IBM Db2 for Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 could allow a local user to escalate their privil
A vulnerability was found in Perl. This security issue occurs while Perl for Windows relies on the system path environme
Visual Studio Code Python Extension Remote Code Execution Vulnerability
An HCL UrbanCode Deploy Agent installed as a Windows service in a non-standard location could be subject to a denial of
IBM Aspera Console 3.4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaS
Inadequate validation of permissions when employing remote tools and macros via the context menu within Devolutions Re
An issue was discovered in Heimdal Thor agent versions 3.4.2 and before on Windows and 2.6.9 and before on macOS, allows
An issue was discovered in Heimdal Thor agent versions 3.4.2 and before 3.7.0 on Windows, allows attackers to bypass USB
An issue was discovered in Heimdal Thor agent versions 3.4.2 and before on Windows and 2.6.9 and before on macOS, allows
Windows Local Session Manager (LSM) Denial of Service Vulnerability
IBM Security Guardium Key Lifecycle Manager 4.3 is vulnerable to cross-site scripting. This vulnerability allows users t
IBM Security Guardium Key Lifecycle Manager 4.3 could allow an authenticated user to manipulate username data due to imp
IBM Security Guardium Key Lifecycle Manager 4.3 could allow a remote attacker to obtain sensitive information when a det
IBM Security Guardium Key Lifecycle Manager 4.3 could allow a remote attacker to traverse directories on the system. An
IBM Security Guardium Key Lifecycle Manager 4.3 could allow an authenticated user to upload files of a dangerous file ty
IBM Security Guardium Key Lifecycle Manager 4.3 contains plain text hard-coded credentials or other secrets in source co
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could r
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could r
An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4.1 and below that could
An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4.1 and below that could
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could r
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could r
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could r
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could r
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could r
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could r
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could r
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could r
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could r
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could r
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could r
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could r
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could r
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could r
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Type confusion in V8 in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corr
Frequently Asked Questions
How many CVEs affect Microsoft?
Microsoft has 91,472 CVE records in our database, including 2628 critical and 63090 high severity vulnerabilities. 351 of these are listed in CISA's Known Exploited Vulnerabilities catalog.
What are the most severe Microsoft vulnerabilities?
Microsoft has 2628 critical severity (CVSS 9.0+) and 63090 high severity (CVSS 7.0-8.9) vulnerabilities. 351 vulnerabilities are confirmed as actively exploited in the wild.
How can I scan for Microsoft vulnerabilities?
CyberStrike's AI-powered security agents automatically detect vulnerabilities in Microsoft products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.
Detect Microsoft Vulnerabilities
CyberStrike scans your infrastructure for Microsoft vulnerabilities and provides real-time remediation guidance.
Get Started