Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

Microsoft

91,472 known vulnerabilities

1,058
CRITICAL
11,903
HIGH
5,674
MEDIUM
354
LOW

Top Products

windows 8173 windows server 2016 5644 windows server 2019 5279 windows server 2012 4134 windows 10 3588 windows server 2022 3387 windows server 2008 3078 windows 10 1809 2579 windows 10 21h2 2553 windows 10 22h2 2550
18,990 CVEs · Page 176/380
8.2
CVE-2023-24892

Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability

 5.4
CVE-2023-24891

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

 6.5
CVE-2023-24890

Microsoft OneDrive for iOS Security Feature Bypass Vulnerability

 5.5
CVE-2023-24882

Microsoft OneDrive for Android Information Disclosure Vulnerability

 4.4
CVE-2023-24880 KEV

Windows SmartScreen Security Feature Bypass Vulnerability

 5.4
CVE-2023-24879

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

 8.8
CVE-2023-24876

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

 8.8
CVE-2023-24872

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

 8.8
CVE-2023-24871

Windows Bluetooth Service Remote Code Execution Vulnerability

 6.5
CVE-2023-24870

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

 8.1
CVE-2023-24869

Remote Procedure Call Runtime Remote Code Execution Vulnerability

 8.8
CVE-2023-24868

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

 8.8
CVE-2023-24867

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

 6.5
CVE-2023-24866

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

 6.5
CVE-2023-24865

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

 8.8
CVE-2023-24864

Microsoft PostScript and PCL6 Class Printer Driver Elevation of Privilege Vulnerability

 6.5
CVE-2023-24863

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

 5.5
CVE-2023-24862

Windows Secure Channel Denial of Service Vulnerability

 7.0
CVE-2023-24861

Windows Graphics Component Elevation of Privilege Vulnerability

 7.5
CVE-2023-24859

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

 7.5
CVE-2023-24858

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

 6.5
CVE-2023-24857

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

 7.5
CVE-2023-24856

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

 7.8
CVE-2023-23423

Windows Kernel Elevation of Privilege Vulnerability

 7.8
CVE-2023-23422

Windows Kernel Elevation of Privilege Vulnerability

 7.8
CVE-2023-23421

Windows Kernel Elevation of Privilege Vulnerability

 7.8
CVE-2023-23420

Windows Kernel Elevation of Privilege Vulnerability

 7.8
CVE-2023-23419

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

 7.8
CVE-2023-23418

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

 7.8
CVE-2023-23417

Windows Partition Management Driver Elevation of Privilege Vulnerability

 7.8
CVE-2023-23416

Windows Cryptographic Services Remote Code Execution Vulnerability

 9.8
CVE-2023-23415

Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability

 7.1
CVE-2023-23414

Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability

 8.8
CVE-2023-23413

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

 7.8
CVE-2023-23412

Windows Accounts Picture Elevation of Privilege Vulnerability

 6.5
CVE-2023-23411

Windows Hyper-V Denial of Service Vulnerability

 7.8
CVE-2023-23410

Windows HTTP.sys Elevation of Privilege Vulnerability

 5.5
CVE-2023-23409

Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability

 4.5
CVE-2023-23408

Azure Apache Ambari Spoofing Vulnerability

 7.1
CVE-2023-23407

Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability

 8.8
CVE-2023-23406

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

 8.1
CVE-2023-23405

Remote Procedure Call Runtime Remote Code Execution Vulnerability

 8.1
CVE-2023-23404

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

 8.8
CVE-2023-23403

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

 7.8
CVE-2023-23402

Windows Media Remote Code Execution Vulnerability

 7.8
CVE-2023-23401

Windows Media Remote Code Execution Vulnerability

 7.2
CVE-2023-23400

Windows DNS Server Remote Code Execution Vulnerability

 7.8
CVE-2023-23399

Microsoft Excel Remote Code Execution Vulnerability

 7.1
CVE-2023-23398

Microsoft Excel Spoofing Vulnerability

 9.8
CVE-2023-23397 KEV

Microsoft Outlook Elevation of Privilege Vulnerability

Frequently Asked Questions

How many CVEs affect Microsoft?

Microsoft has 91,472 CVE records in our database, including 2628 critical and 63090 high severity vulnerabilities. 351 of these are listed in CISA's Known Exploited Vulnerabilities catalog.

What are the most severe Microsoft vulnerabilities?

Microsoft has 2628 critical severity (CVSS 9.0+) and 63090 high severity (CVSS 7.0-8.9) vulnerabilities. 351 vulnerabilities are confirmed as actively exploited in the wild.

How can I scan for Microsoft vulnerabilities?

CyberStrike's AI-powered security agents automatically detect vulnerabilities in Microsoft products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.

Detect Microsoft Vulnerabilities

CyberStrike scans your infrastructure for Microsoft vulnerabilities and provides real-time remediation guidance.

Get Started