Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

Microsoft

91,472 known vulnerabilities

1,058
CRITICAL
11,903
HIGH
5,674
MEDIUM
354
LOW

Top Products

windows 8173 windows server 2016 5644 windows server 2019 5279 windows server 2012 4134 windows 10 3588 windows server 2022 3387 windows server 2008 3078 windows 10 1809 2579 windows 10 21h2 2553 windows 10 22h2 2550
18,990 CVEs · Page 153/380
7.2
CVE-2023-36786

Skype for Business Remote Code Execution Vulnerability

 7.8
CVE-2023-36785

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

 7.2
CVE-2023-36780

Skype for Business Remote Code Execution Vulnerability

 8.0
CVE-2023-36778

Microsoft Exchange Server Remote Code Execution Vulnerability

 7.0
CVE-2023-36776

Win32k Elevation of Privilege Vulnerability

 7.8
CVE-2023-36743

Win32k Elevation of Privilege Vulnerability

 7.8
CVE-2023-36737

Azure Network Watcher VM Agent Elevation of Privilege Vulnerability

 7.8
CVE-2023-36732

Win32k Elevation of Privilege Vulnerability

 7.8
CVE-2023-36731

Win32k Elevation of Privilege Vulnerability

 7.8
CVE-2023-36730

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

 7.8
CVE-2023-36729

Named Pipe File System Elevation of Privilege Vulnerability

 5.5
CVE-2023-36728

Microsoft SQL Server Denial of Service Vulnerability

 7.8
CVE-2023-36726

Windows Internet Key Exchange (IKE) Extension Elevation of Privilege Vulnerability

 7.8
CVE-2023-36725

Windows Kernel Elevation of Privilege Vulnerability

 5.5
CVE-2023-36724

Windows Power Management Service Information Disclosure Vulnerability

 7.8
CVE-2023-36723

Windows Container Manager Service Elevation of Privilege Vulnerability

 4.4
CVE-2023-36722

Active Directory Domain Services Information Disclosure Vulnerability

 7.0
CVE-2023-36721

Windows Error Reporting Service Elevation of Privilege Vulnerability

 7.5
CVE-2023-36720

Windows Mixed Reality Developer Tools Denial of Service Vulnerability

 7.8
CVE-2023-36718

Microsoft Virtual Trusted Platform Module Remote Code Execution Vulnerability

 6.5
CVE-2023-36717

Windows Virtual Trusted Platform Module Denial of Service Vulnerability

 5.5
CVE-2023-36713

Windows Common Log File System Driver Information Disclosure Vulnerability

 7.8
CVE-2023-36712

Windows Kernel Elevation of Privilege Vulnerability

 7.8
CVE-2023-36711

Windows Runtime C++ Template Library Elevation of Privilege Vulnerability

 7.8
CVE-2023-36710

Windows Media Foundation Core Remote Code Execution Vulnerability

 7.5
CVE-2023-36709

Microsoft AllJoyn API Denial of Service Vulnerability

 6.5
CVE-2023-36707

Windows Deployment Services Denial of Service Vulnerability

 6.5
CVE-2023-36706

Windows Deployment Services Information Disclosure Vulnerability

 7.8
CVE-2023-36704

Windows Setup Files Cleanup Remote Code Execution Vulnerability

 7.5
CVE-2023-36703

DHCP Server Service Denial of Service Vulnerability

 7.8
CVE-2023-36702

Microsoft DirectMusic Remote Code Execution Vulnerability

 7.8
CVE-2023-36701

Microsoft Resilient File System (ReFS) Elevation of Privilege Vulnerability

 4.4
CVE-2023-36698

Windows Kernel Security Feature Bypass Vulnerability

 6.8
CVE-2023-36697

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

 7.5
CVE-2023-36606

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

 7.4
CVE-2023-36605

Windows Named Pipe Filesystem Elevation of Privilege Vulnerability

 7.5
CVE-2023-36603

Windows TCP/IP Denial of Service Vulnerability

 7.5
CVE-2023-36602

Windows TCP/IP Denial of Service Vulnerability

 7.8
CVE-2023-36598

Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability

 7.5
CVE-2023-36596

Remote Procedure Call Information Disclosure Vulnerability

 7.8
CVE-2023-36594

Windows Graphics Component Elevation of Privilege Vulnerability

 7.8
CVE-2023-36593

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

 7.3
CVE-2023-36592

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

 7.3
CVE-2023-36591

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

 7.3
CVE-2023-36590

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

 7.3
CVE-2023-36589

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

 7.5
CVE-2023-36585

Windows upnphost.dll Denial of Service Vulnerability

 5.4
CVE-2023-36584 KEV

Windows Mark of the Web Security Feature Bypass Vulnerability

 7.3
CVE-2023-36583

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

 7.3
CVE-2023-36582

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

Frequently Asked Questions

How many CVEs affect Microsoft?

Microsoft has 91,472 CVE records in our database, including 2628 critical and 63090 high severity vulnerabilities. 351 of these are listed in CISA's Known Exploited Vulnerabilities catalog.

What are the most severe Microsoft vulnerabilities?

Microsoft has 2628 critical severity (CVSS 9.0+) and 63090 high severity (CVSS 7.0-8.9) vulnerabilities. 351 vulnerabilities are confirmed as actively exploited in the wild.

How can I scan for Microsoft vulnerabilities?

CyberStrike's AI-powered security agents automatically detect vulnerabilities in Microsoft products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.

Detect Microsoft Vulnerabilities

CyberStrike scans your infrastructure for Microsoft vulnerabilities and provides real-time remediation guidance.

Get Started