Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

Microsoft

91,472 known vulnerabilities

1,058
CRITICAL
11,903
HIGH
5,674
MEDIUM
354
LOW

Top Products

windows 8173 windows server 2016 5644 windows server 2019 5279 windows server 2012 4134 windows 10 3588 windows server 2022 3387 windows server 2008 3078 windows 10 1809 2579 windows 10 21h2 2553 windows 10 22h2 2550
18,990 CVEs · Page 160/380
6.2
CVE-2023-35391

ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability

 6.5
CVE-2023-38254

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

 4.5
CVE-2023-38188

Azure Apache Hadoop Spoofing Vulnerability

 8.8
CVE-2023-38186

Windows Mobile Device Management Elevation of Privilege Vulnerability

 8.8
CVE-2023-38185

Microsoft Exchange Server Remote Code Execution Vulnerability

 7.5
CVE-2023-38184

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

 8.0
CVE-2023-38182

Microsoft Exchange Server Remote Code Execution Vulnerability

 8.8
CVE-2023-38181

Microsoft Exchange Server Spoofing Vulnerability

 7.5
CVE-2023-38178

.NET Core and Visual Studio Denial of Service Vulnerability

 7.0
CVE-2023-38176

Azure Arc-Enabled Servers Elevation of Privilege Vulnerability

 7.8
CVE-2023-38175

Microsoft Windows Defender Elevation of Privilege Vulnerability

 7.5
CVE-2023-38172

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

 7.8
CVE-2023-38170

HEVC Video Extensions Remote Code Execution Vulnerability

 8.8
CVE-2023-38169

Microsoft SQL OLE DB Remote Code Execution Vulnerability

 7.2
CVE-2023-38167

Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

 7.8
CVE-2023-38154

Windows Kernel Elevation of Privilege Vulnerability

 5.5
CVE-2023-36914

Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability

 6.5
CVE-2023-36913

Microsoft Message Queuing Information Disclosure Vulnerability

 7.5
CVE-2023-36912

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

 9.8
CVE-2023-36911

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

 9.8
CVE-2023-36910

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

 6.5
CVE-2023-36909

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

 6.5
CVE-2023-36908

Windows Hyper-V Information Disclosure Vulnerability

 5.5
CVE-2023-36907

Windows Cryptographic Services Information Disclosure Vulnerability

 5.5
CVE-2023-36906

Windows Cryptographic Services Information Disclosure Vulnerability

 5.5
CVE-2023-36905

Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability

 7.8
CVE-2023-36904

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

 7.8
CVE-2023-36903

Windows System Assessment Tool Elevation of Privilege Vulnerability

 7.8
CVE-2023-36900

Windows Common Log File System Driver Elevation of Privilege Vulnerability

 7.8
CVE-2023-36898

Tablet Windows User Interface Application Core Remote Code Execution Vulnerability

 8.1
CVE-2023-36897

Visual Studio Tools for Office Runtime Spoofing Vulnerability

 7.8
CVE-2023-36896

Microsoft Excel Remote Code Execution Vulnerability

 7.8
CVE-2023-36895

Microsoft Outlook Remote Code Execution Vulnerability

 6.5
CVE-2023-36894

Microsoft SharePoint Server Information Disclosure Vulnerability

 6.5
CVE-2023-36893

Microsoft Outlook Spoofing Vulnerability

 8.0
CVE-2023-36892

Microsoft SharePoint Server Spoofing Vulnerability

 8.0
CVE-2023-36891

Microsoft SharePoint Server Spoofing Vulnerability

 6.5
CVE-2023-36890

Microsoft SharePoint Server Information Disclosure Vulnerability

 5.5
CVE-2023-36889

Windows Group Policy Security Feature Bypass Vulnerability

 8.8
CVE-2023-36882

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

 4.5
CVE-2023-36881

Azure Apache Ambari Spoofing Vulnerability

 4.5
CVE-2023-36877

Azure Apache Oozie Spoofing Vulnerability

 7.1
CVE-2023-36876

Reliability Analysis Metrics Calculation (RacTask) Elevation of Privilege Vulnerability

 6.3
CVE-2023-36869

Azure DevOps Server Spoofing Vulnerability

 7.8
CVE-2023-36866

Microsoft Office Visio Remote Code Execution Vulnerability

 7.8
CVE-2023-36865

Microsoft Office Visio Remote Code Execution Vulnerability

 4.6
CVE-2023-35394

Azure HDInsight Jupyter Notebook Spoofing Vulnerability

 4.5
CVE-2023-35393

Azure Apache Hive Spoofing Vulnerability

 7.8
CVE-2023-35390

.NET and Visual Studio Remote Code Execution Vulnerability

 6.5
CVE-2023-35389

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

Frequently Asked Questions

How many CVEs affect Microsoft?

Microsoft has 91,472 CVE records in our database, including 2628 critical and 63090 high severity vulnerabilities. 351 of these are listed in CISA's Known Exploited Vulnerabilities catalog.

What are the most severe Microsoft vulnerabilities?

Microsoft has 2628 critical severity (CVSS 9.0+) and 63090 high severity (CVSS 7.0-8.9) vulnerabilities. 351 vulnerabilities are confirmed as actively exploited in the wild.

How can I scan for Microsoft vulnerabilities?

CyberStrike's AI-powered security agents automatically detect vulnerabilities in Microsoft products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.

Detect Microsoft Vulnerabilities

CyberStrike scans your infrastructure for Microsoft vulnerabilities and provides real-time remediation guidance.

Get Started