Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

Microsoft

91,472 known vulnerabilities

1,058
CRITICAL
11,903
HIGH
5,674
MEDIUM
354
LOW

Top Products

windows 8173 windows server 2016 5644 windows server 2019 5279 windows server 2012 4134 windows 10 3588 windows server 2022 3387 windows server 2008 3078 windows 10 1809 2579 windows 10 21h2 2553 windows 10 22h2 2550
18,990 CVEs · Page 154/380
7.5
CVE-2023-36581

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

7.5
CVE-2023-36579

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

7.3
CVE-2023-36578

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

8.8
CVE-2023-36577

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

5.5
CVE-2023-36576

Windows Kernel Information Disclosure Vulnerability

7.3
CVE-2023-36575

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

7.3
CVE-2023-36574

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

7.3
CVE-2023-36573

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

7.3
CVE-2023-36572

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

7.3
CVE-2023-36571

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

7.3
CVE-2023-36570

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

8.4
CVE-2023-36569

Microsoft Office Elevation of Privilege Vulnerability

7.0
CVE-2023-36568

Microsoft Office Click-To-Run Elevation of Privilege Vulnerability

7.5
CVE-2023-36567

Windows Deployment Services Information Disclosure Vulnerability

6.5
CVE-2023-36566

Microsoft Common Data Model SDK Denial of Service Vulnerability

7.0
CVE-2023-36565

Microsoft Office Graphics Elevation of Privilege Vulnerability

6.5
CVE-2023-36564

Windows Search Security Feature Bypass Vulnerability

6.5
CVE-2023-36563 KEV

Microsoft WordPad Information Disclosure Vulnerability

7.3
CVE-2023-36561

Azure DevOps Server Elevation of Privilege Vulnerability

7.8
CVE-2023-36557

PrintHTML API Remote Code Execution Vulnerability

7.5
CVE-2023-36438

Windows TCP/IP Information Disclosure Vulnerability

7.8
CVE-2023-36436

Windows MSHTML Platform Remote Code Execution Vulnerability

7.5
CVE-2023-36435

Microsoft QUIC Denial of Service Vulnerability

9.8
CVE-2023-36434

Windows IIS Server Elevation of Privilege Vulnerability

6.5
CVE-2023-36433

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

7.5
CVE-2023-36431

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

6.5
CVE-2023-36429

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

7.8
CVE-2023-36420

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

8.8
CVE-2023-36419

Azure HDInsight Apache Oozie Workflow Scheduler XXE Elevation of Privilege Vulnerability

7.8
CVE-2023-36418

Azure RTOS GUIX Studio Remote Code Execution Vulnerability

7.8
CVE-2023-36417

Microsoft SQL OLE DB Remote Code Execution Vulnerability

6.1
CVE-2023-36416

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

8.8
CVE-2023-36415

Azure Identity SDK Remote Code Execution Vulnerability

8.8
CVE-2023-36414

Azure Identity SDK Remote Code Execution Vulnerability

9.8
CVE-2023-35349

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

7.5
CVE-2023-29348

Windows Remote Desktop Gateway (RD Gateway) Information Disclosure Vulnerability

6.1
CVE-2022-48183

A vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS tamper detection mechanism t

6.1
CVE-2022-48182

A vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS tamper detection mechanism t

7.3
CVE-2023-45248

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protec

7.1
CVE-2023-45247

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acr

7.1
CVE-2023-45246

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acr

5.5
CVE-2023-45245

Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux

7.1
CVE-2023-45244

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acr

5.5
CVE-2023-45243

Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Cyber Protec

5.5
CVE-2023-45242

Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Cyber Protec

5.5
CVE-2023-45241

Sensitive information leak through log files. The following products are affected: Acronis Cyber Protect Cloud Agent (Li

5.5
CVE-2023-45240

Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux

5.5
CVE-2023-44214

Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux

5.5
CVE-2023-44213

Sensitive information disclosure due to excessive collection of system information. The following products are affected:

7.1
CVE-2023-44212

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acr

Frequently Asked Questions

How many CVEs affect Microsoft?

Microsoft has 91,472 CVE records in our database, including 2628 critical and 63090 high severity vulnerabilities. 351 of these are listed in CISA's Known Exploited Vulnerabilities catalog.

What are the most severe Microsoft vulnerabilities?

Microsoft has 2628 critical severity (CVSS 9.0+) and 63090 high severity (CVSS 7.0-8.9) vulnerabilities. 351 vulnerabilities are confirmed as actively exploited in the wild.

How can I scan for Microsoft vulnerabilities?

CyberStrike's AI-powered security agents automatically detect vulnerabilities in Microsoft products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.

Detect Microsoft Vulnerabilities

CyberStrike scans your infrastructure for Microsoft vulnerabilities and provides real-time remediation guidance.

Get Started