Microsoft
91,472 known vulnerabilities
Top Products
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges over an adjacent n
Out-of-bounds read in Windows Active Directory allows an authorized attacker to deny service over a network.
Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attack
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges loc
Use after free in Windows Media allows an authorized attacker to elevate privileges locally.
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an a
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
Null pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to elevate privileges with a physical attack.
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an au
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges over a ne
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a ph
Time-of-check time-of-use (toctou) race condition in Microsoft Defender allows an authorized attacker to elevate privile
Exposure of private personal information to an unauthorized actor in Microsoft Defender allows an authorized attacker to
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally.
Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unautho
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
Improper restriction of names for files and other resources in Github Copilot allows an unauthorized attacker to execute
Deserialization of untrusted data in Windows Wireless Wide Area Network Service allows an authorized attacker to elevate
Use after free in Windows Message Queuing allows an authorized attacker to execute code over a network.
Buffer over-read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an
Insufficient granularity of access control in Windows Event Logging Service allows an authorized attacker to execute cod
Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code loca
Use after free in Windows Netlogon allows an authorized attacker to elevate privileges over a network.
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges local
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Off-by-one error in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a netwo
Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose information over a
Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally.
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code with
Out-of-bounds read in Code Integrity DLL (ci.dll) allows an authorized attacker to elevate privileges locally.
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
Improper neutralization of special elements used in a command ('command injection') in Windows Clipboard User Service al
Use after free in Microsoft Windows DNS allows an unauthorized attacker to elevate privileges over a network.
Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.
Buffer over-read in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network.
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
Exposure of sensitive information to an unauthorized actor in Microsoft Graphics Component allows an authorized attacker
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
Heap-based buffer overflow in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to elevate
Untrusted pointer dereference in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally.
Frequently Asked Questions
How many CVEs affect Microsoft?
Microsoft has 91,472 CVE records in our database, including 2628 critical and 63090 high severity vulnerabilities. 351 of these are listed in CISA's Known Exploited Vulnerabilities catalog.
What are the most severe Microsoft vulnerabilities?
Microsoft has 2628 critical severity (CVSS 9.0+) and 63090 high severity (CVSS 7.0-8.9) vulnerabilities. 351 vulnerabilities are confirmed as actively exploited in the wild.
How can I scan for Microsoft vulnerabilities?
CyberStrike's AI-powered security agents automatically detect vulnerabilities in Microsoft products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.
Detect Microsoft Vulnerabilities
CyberStrike scans your infrastructure for Microsoft vulnerabilities and provides real-time remediation guidance.
Get Started