Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

Microsoft

91,472 known vulnerabilities

1,058
CRITICAL
11,903
HIGH
5,674
MEDIUM
354
LOW

Top Products

windows 8173 windows server 2016 5644 windows server 2019 5279 windows server 2012 4134 windows 10 3588 windows server 2022 3387 windows server 2008 3078 windows 10 1809 2579 windows 10 21h2 2553 windows 10 22h2 2550
18,990 CVEs · Page 163/380
7.8
CVE-2023-35353

Connected User Experiences and Telemetry Elevation of Privilege Vulnerability

 7.5
CVE-2023-35352

Windows Remote Desktop Security Feature Bypass Vulnerability

 6.6
CVE-2023-35351

Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability

 7.2
CVE-2023-35350

Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability

 6.5
CVE-2023-35348

Active Directory Federation Service Security Feature Bypass Vulnerability

 7.1
CVE-2023-35347

Microsoft Install Service Elevation of Privilege Vulnerability

 6.6
CVE-2023-35346

Windows DNS Server Remote Code Execution Vulnerability

 6.6
CVE-2023-35345

Windows DNS Server Remote Code Execution Vulnerability

 6.6
CVE-2023-35344

Windows DNS Server Remote Code Execution Vulnerability

 7.8
CVE-2023-35343

Windows Geolocation Service Remote Code Execution Vulnerability

 7.8
CVE-2023-35342

Windows Image Acquisition Elevation of Privilege Vulnerability

 6.2
CVE-2023-35341

Microsoft DirectMusic Information Disclosure Vulnerability

 7.8
CVE-2023-35340

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

 7.5
CVE-2023-35339

Windows CryptoAPI Denial of Service Vulnerability

 7.5
CVE-2023-35338

Windows Peer Name Resolution Protocol Denial of Service Vulnerability

 7.8
CVE-2023-35337

Win32k Elevation of Privilege Vulnerability

 6.5
CVE-2023-35336

Windows MSHTML Platform Security Feature Bypass Vulnerability

 8.2
CVE-2023-35335

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

 8.8
CVE-2023-35333

MediaWiki PandocUpload Extension Remote Code Execution Vulnerability

 6.8
CVE-2023-35332

Windows Remote Desktop Protocol Security Feature Bypass

 6.5
CVE-2023-35331

Windows Local Security Authority (LSA) Denial of Service Vulnerability

 7.5
CVE-2023-35330

Windows Extended Negotiation Denial of Service Vulnerability

 6.5
CVE-2023-35329

Windows Authentication Denial of Service Vulnerability

 7.8
CVE-2023-35328

Windows Transaction Manager Elevation of Privilege Vulnerability

 5.5
CVE-2023-35326

Windows CDP User Components Information Disclosure Vulnerability

 7.5
CVE-2023-35325

Windows Print Spooler Information Disclosure Vulnerability

 5.5
CVE-2023-35324

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

 7.8
CVE-2023-35323

Windows OLE Remote Code Execution Vulnerability

 8.8
CVE-2023-35322

Windows Deployment Services Remote Code Execution Vulnerability

 6.5
CVE-2023-35321

Windows Deployment Services Denial of Service Vulnerability

 7.8
CVE-2023-35320

Connected User Experiences and Telemetry Elevation of Privilege Vulnerability

 6.5
CVE-2023-35319

Remote Procedure Call Runtime Denial of Service Vulnerability

 6.5
CVE-2023-35318

Remote Procedure Call Runtime Denial of Service Vulnerability

 7.8
CVE-2023-35317

Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability

 6.5
CVE-2023-35316

Remote Procedure Call Runtime Information Disclosure Vulnerability

 8.8
CVE-2023-35315

Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability

 6.5
CVE-2023-35314

Remote Procedure Call Runtime Denial of Service Vulnerability

 7.8
CVE-2023-35313

Windows Online Certificate Status Protocol (OCSP) SnapIn Remote Code Execution Vulnerability

 7.8
CVE-2023-35312

Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability

 8.8
CVE-2023-35311 KEV

Microsoft Outlook Security Feature Bypass Vulnerability

 6.6
CVE-2023-35310

Windows DNS Server Remote Code Execution Vulnerability

 7.5
CVE-2023-35309

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

 6.5
CVE-2023-35308

Windows MSHTML Platform Security Feature Bypass Vulnerability

 5.5
CVE-2023-35306

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

 7.8
CVE-2023-35305

Windows Kernel Elevation of Privilege Vulnerability

 7.8
CVE-2023-35304

Windows Kernel Elevation of Privilege Vulnerability

 8.8
CVE-2023-35303

USB Audio Class System Driver Remote Code Execution Vulnerability

 8.8
CVE-2023-35302

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

 8.8
CVE-2023-35300

Remote Procedure Call Runtime Remote Code Execution Vulnerability

 7.8
CVE-2023-35299

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Frequently Asked Questions

How many CVEs affect Microsoft?

Microsoft has 91,472 CVE records in our database, including 2628 critical and 63090 high severity vulnerabilities. 351 of these are listed in CISA's Known Exploited Vulnerabilities catalog.

What are the most severe Microsoft vulnerabilities?

Microsoft has 2628 critical severity (CVSS 9.0+) and 63090 high severity (CVSS 7.0-8.9) vulnerabilities. 351 vulnerabilities are confirmed as actively exploited in the wild.

How can I scan for Microsoft vulnerabilities?

CyberStrike's AI-powered security agents automatically detect vulnerabilities in Microsoft products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.

Detect Microsoft Vulnerabilities

CyberStrike scans your infrastructure for Microsoft vulnerabilities and provides real-time remediation guidance.

Get Started