Microsoft
91,472 known vulnerabilities
Top Products
Windows Server Service Elevation of Privilege Vulnerability
Windows CD-ROM File System Driver Remote Code Execution Vulnerability
Windows Security Support Provider Interface Information Disclosure Vulnerability
Active Directory Domain Services Elevation of Privilege Vulnerability
Windows Secure Channel Denial of Service Vulnerability
Microsoft ODBC Driver Remote Code Execution Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability
Windows Workstation Service Elevation of Privilege Vulnerability
Windows Server Remotely Accessible Registry Keys Information Disclosure Vulnerability
Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Windows USB Serial Driver Information Disclosure Vulnerability
Windows ALPC Elevation of Privilege Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
Windows Storage Elevation of Privilege Vulnerability
Windows DHCP Client Information Disclosure Vulnerability
Windows Distributed File System (DFS) Information Disclosure Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
StorSimple 8000 Series Elevation of Privilege Vulnerability
Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
Windows Resilient File System Elevation of Privilege
Microsoft Office Spoofing Vulnerability
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
Windows Group Policy Preference Client Elevation of Privilege Vulnerability
Windows Local Session Manager (LSM) Denial of Service Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability
Windows Kernel Memory Information Disclosure Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
Windows Group Policy Preference Client Elevation of Privilege Vulnerability
Windows Group Policy Preference Client Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
Windows Win32k Elevation of Privilege Vulnerability
Windows Graphics Component Information Disclosure Vulnerability
Windows WLAN Service Elevation of Privilege Vulnerability
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Windows Event Logging Service Denial of Service Vulnerability
Windows DHCP Client Elevation of Privilege Vulnerability
Windows Hyper-V Elevation of Privilege Vulnerability
Windows Active Directory Certificate Services Security Feature Bypass
Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
Active Directory Certificate Services Elevation of Privilege Vulnerability
Frequently Asked Questions
How many CVEs affect Microsoft?
Microsoft has 91,472 CVE records in our database, including 2628 critical and 63090 high severity vulnerabilities. 351 of these are listed in CISA's Known Exploited Vulnerabilities catalog.
What are the most severe Microsoft vulnerabilities?
Microsoft has 2628 critical severity (CVSS 9.0+) and 63090 high severity (CVSS 7.0-8.9) vulnerabilities. 351 vulnerabilities are confirmed as actively exploited in the wild.
How can I scan for Microsoft vulnerabilities?
CyberStrike's AI-powered security agents automatically detect vulnerabilities in Microsoft products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.
Detect Microsoft Vulnerabilities
CyberStrike scans your infrastructure for Microsoft vulnerabilities and provides real-time remediation guidance.
Get Started