Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

Microsoft

91,472 known vulnerabilities

1,058
CRITICAL
11,903
HIGH
5,674
MEDIUM
354
LOW

Top Products

windows 8173 windows server 2016 5644 windows server 2019 5279 windows server 2012 4134 windows 10 3588 windows server 2022 3387 windows server 2008 3078 windows 10 1809 2579 windows 10 21h2 2553 windows 10 22h2 2550
18,990 CVEs · Page 169/380
7.5
CVE-2022-45450

Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Ac

4.1
CVE-2023-2679

Data leakage in Adobe connector in Snow Software SPE 9.27.0 on Windows allows privileged user to observe other users dat

6.7
CVE-2023-27382

Incorrect default permissions in the Audio Service for some Intel(R) NUC P14E Laptop Element software for Windows 10 bef

6.7
CVE-2022-41687

Insecure inherited permissions in the HotKey Services for some Intel(R) NUC P14E Laptop Element software for Windows 10

6.7
CVE-2022-41628

Uncontrolled search path element in the HotKey Services for some Intel(R) NUC P14E Laptop Element software for Windows 1

7.8
CVE-2023-29343

SysInternals Sysmon for Windows Elevation of Privilege Vulnerability

7.8
CVE-2023-29341

AV1 Video Extension Remote Code Execution Vulnerability

7.8
CVE-2023-29340

AV1 Video Extension Remote Code Execution Vulnerability

6.6
CVE-2023-29338

Visual Studio Code Spoofing Vulnerability

7.8
CVE-2023-29336 KEV

Win32k Elevation of Privilege Vulnerability

7.5
CVE-2023-29335

Microsoft Word Security Feature Bypass Vulnerability

3.3
CVE-2023-29333

Microsoft Access Denial of Service Vulnerability

8.1
CVE-2023-29325

Windows OLE Remote Code Execution Vulnerability

6.5
CVE-2023-29324

Windows MSHTML Platform Security Feature Bypass Vulnerability

5.3
CVE-2023-28290

Microsoft Remote Desktop app for Windows Information Disclosure Vulnerability

8.1
CVE-2023-28283

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

5.5
CVE-2023-28251

Windows Driver Revocation List Security Feature Bypass Vulnerability

7.2
CVE-2023-24955 KEV

Microsoft SharePoint Server Remote Code Execution Vulnerability

6.5
CVE-2023-24954

Microsoft SharePoint Server Information Disclosure Vulnerability

7.8
CVE-2023-24953

Microsoft Excel Remote Code Execution Vulnerability

6.5
CVE-2023-24950

Microsoft SharePoint Server Spoofing Vulnerability

7.8
CVE-2023-24949

Windows Kernel Elevation of Privilege Vulnerability

7.4
CVE-2023-24948

Windows Bluetooth Driver Elevation of Privilege Vulnerability

8.8
CVE-2023-24947

Windows Bluetooth Driver Remote Code Execution Vulnerability

7.8
CVE-2023-24946

Windows Backup Service Elevation of Privilege Vulnerability

5.5
CVE-2023-24945

Windows iSCSI Target Service Information Disclosure Vulnerability

6.5
CVE-2023-24944

Windows Bluetooth Driver Information Disclosure Vulnerability

9.8
CVE-2023-24943

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

7.5
CVE-2023-24942

Remote Procedure Call Runtime Denial of Service Vulnerability

9.8
CVE-2023-24941

Windows Network File System Remote Code Execution Vulnerability

7.5
CVE-2023-24940

Windows Pragmatic General Multicast (PGM) Denial of Service Vulnerability

7.5
CVE-2023-24939

Server for NFS Denial of Service Vulnerability

6.7
CVE-2023-24932

Secure Boot Security Feature Bypass Vulnerability

7.8
CVE-2023-24905

Remote Desktop Client Remote Code Execution Vulnerability

7.1
CVE-2023-24904

Windows Installer Elevation of Privilege Vulnerability

8.1
CVE-2023-24903

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

7.8
CVE-2023-24902

Win32k Elevation of Privilege Vulnerability

7.5
CVE-2023-24901

Windows NFS Portmapper Information Disclosure Vulnerability

5.9
CVE-2023-24900

Windows NTLM Security Support Provider Information Disclosure Vulnerability

7.0
CVE-2023-24899

Windows Graphics Component Elevation of Privilege Vulnerability

7.5
CVE-2023-24898

Windows SMB Denial of Service Vulnerability

4.7
CVE-2023-29354

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

7.5
CVE-2023-29350

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

9.8
CVE-2023-30268

CLTPHP <=6.0 is vulnerable to Improper Input Validation.

7.4
CVE-2023-24461

An improper certificate validation vulnerability exists in the BIG-IP Edge Client for Windows and macOS and may allow a

5.9
CVE-2023-22372

In the pre connection stage, an improper enforcement of message integrity vulnerability exists in BIG-IP Edge Client fo

8.8
CVE-2022-3405

Code execution and sensitive information disclosure due to excessive privileges assigned to Acronis Agent. The following

7.5
CVE-2022-30995

Sensitive information disclosure due to improper authentication. The following products are affected: Acronis Cyber Prot

7.5
CVE-2022-48482

3CX before 18 Update 2 Security Hotfix build 18.0.2.315 on Windows allows unauthenticated remote attackers to read certa

5.9
CVE-2023-26022

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to a denial of service as the server may

Frequently Asked Questions

How many CVEs affect Microsoft?

Microsoft has 91,472 CVE records in our database, including 2628 critical and 63090 high severity vulnerabilities. 351 of these are listed in CISA's Known Exploited Vulnerabilities catalog.

What are the most severe Microsoft vulnerabilities?

Microsoft has 2628 critical severity (CVSS 9.0+) and 63090 high severity (CVSS 7.0-8.9) vulnerabilities. 351 vulnerabilities are confirmed as actively exploited in the wild.

How can I scan for Microsoft vulnerabilities?

CyberStrike's AI-powered security agents automatically detect vulnerabilities in Microsoft products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.

Detect Microsoft Vulnerabilities

CyberStrike scans your infrastructure for Microsoft vulnerabilities and provides real-time remediation guidance.

Get Started