Microsoft
91,472 known vulnerabilities
Top Products
Windows Server Service Security Feature Bypass Vulnerability
Windows SMB Witness Service Security Feature Bypass Vulnerability
Windows DNS Spoofing Vulnerability
Windows Kernel Information Disclosure Vulnerability
Windows Hello Remote Code Execution Vulnerability
Microsoft PostScript Printer Driver Remote Code Execution Vulnerability
Windows Installer Information Disclosure Vulnerability
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
Windows Hyper-V Denial of Service Vulnerability
Windows Container Manager Service Elevation of Privilege Vulnerability
Windows iSCSI Discovery Service Denial of Service Vulnerability
Windows Bus Filter Driver Elevation of Privilege Vulnerability
Windows Collaborative Translation Framework Elevation of Privilege Vulnerability
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
Microsoft ODBC Driver Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Windows GDI Elevation of Privilege Vulnerability
Windows Media Remote Code Execution Vulnerability
Remote Procedure Call Runtime Denial of Service Vulnerability
Windows Filtering Platform Elevation of Privilege Vulnerability
iSCSI Target WMI Provider Remote Code Execution Vulnerability
Windows Geolocation Service Remote Code Execution Vulnerability
Windows Media Remote Code Execution Vulnerability
Windows Authentication Elevation of Privilege Vulnerability
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
Remote Desktop Client Remote Code Execution Vulnerability
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Microsoft Streaming Service Elevation of Privilege Vulnerability
GDI Elevation of Privilege Vulnerability
Windows GDI Elevation of Privilege Vulnerability
Microsoft SharePoint Server Elevation of Privilege Vulnerability
DHCP Server Service Information Disclosure Vulnerability
Sysinternals Process Monitor for Windows Denial of Service Vulnerability
Windows Remote Desktop Security Feature Bypass Vulnerability
Windows Group Policy Elevation of Privilege Vulnerability
NTFS Elevation of Privilege Vulnerability
Windows CryptoAPI Denial of Service Vulnerability
Azure DevOps Server Spoofing Vulnerability
Azure DevOps Server Spoofing Vulnerability
Improper input validation in the Zoom for Windows, Zoom Rooms, Zoom VDI Windows Meeting clients before 5.14.0 may all
Improper privilege management in Zoom for Windows, Zoom Rooms for Windows, and Zoom VDI for Windows clients before 5.14.
Zoom VDI client installer prior to 5.14.0 contains an improper access control vulnerability. A malicious user may pote
Windows Snipping Tool Information Disclosure Vulnerability
A potential security vulnerability has been identified with a version of the HP Softpaq installer that can lead to arbit
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
VMware Tools for Windows (12.x.y prior to 12.1.5, 11.x.y and 10.x.y) contains a denial-of-service vulnerability in the V
Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corr
Microsoft Office Remote Code Execution Vulnerability
A buffer overflow in EasyPlayerPro-Win v3.2.19.0106 to v3.6.19.0823 allows attackers to cause a Denial of Service (DoS)
Frequently Asked Questions
How many CVEs affect Microsoft?
Microsoft has 91,472 CVE records in our database, including 2628 critical and 63090 high severity vulnerabilities. 351 of these are listed in CISA's Known Exploited Vulnerabilities catalog.
What are the most severe Microsoft vulnerabilities?
Microsoft has 2628 critical severity (CVSS 9.0+) and 63090 high severity (CVSS 7.0-8.9) vulnerabilities. 351 vulnerabilities are confirmed as actively exploited in the wild.
How can I scan for Microsoft vulnerabilities?
CyberStrike's AI-powered security agents automatically detect vulnerabilities in Microsoft products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.
Detect Microsoft Vulnerabilities
CyberStrike scans your infrastructure for Microsoft vulnerabilities and provides real-time remediation guidance.
Get Started