Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

Microsoft

91,472 known vulnerabilities

1,058
CRITICAL
11,903
HIGH
5,674
MEDIUM
354
LOW

Top Products

windows 8173 windows server 2016 5644 windows server 2019 5279 windows server 2012 4134 windows 10 3588 windows server 2022 3387 windows server 2008 3078 windows 10 1809 2579 windows 10 21h2 2553 windows 10 22h2 2550
18,990 CVEs · Page 189/380
8.8
CVE-2022-38045

Windows Server Service Elevation of Privilege Vulnerability

7.8
CVE-2022-38044

Windows CD-ROM File System Driver Remote Code Execution Vulnerability

5.5
CVE-2022-38043

Windows Security Support Provider Interface Information Disclosure Vulnerability

7.1
CVE-2022-38042

Active Directory Domain Services Elevation of Privilege Vulnerability

7.5
CVE-2022-38041

Windows Secure Channel Denial of Service Vulnerability

8.8
CVE-2022-38040

Microsoft ODBC Driver Remote Code Execution Vulnerability

7.8
CVE-2022-38039

Windows Kernel Elevation of Privilege Vulnerability

7.8
CVE-2022-38038

Windows Kernel Elevation of Privilege Vulnerability

7.8
CVE-2022-38037

Windows Kernel Elevation of Privilege Vulnerability

7.5
CVE-2022-38036

Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability

8.8
CVE-2022-38034

Windows Workstation Service Elevation of Privilege Vulnerability

6.5
CVE-2022-38033

Windows Server Remotely Accessible Registry Keys Information Disclosure Vulnerability

6.6
CVE-2022-38032

Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability

8.8
CVE-2022-38031

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

4.3
CVE-2022-38030

Windows USB Serial Driver Information Disclosure Vulnerability

7.0
CVE-2022-38029

Windows ALPC Elevation of Privilege Vulnerability

7.8
CVE-2022-38028 KEV

Windows Print Spooler Elevation of Privilege Vulnerability

7.0
CVE-2022-38027

Windows Storage Elevation of Privilege Vulnerability

5.5
CVE-2022-38026

Windows DHCP Client Information Disclosure Vulnerability

5.5
CVE-2022-38025

Windows Distributed File System (DFS) Information Disclosure Vulnerability

3.3
CVE-2022-38022

Windows Kernel Elevation of Privilege Vulnerability

7.0
CVE-2022-38021

Connected User Experiences and Telemetry Elevation of Privilege Vulnerability

6.8
CVE-2022-38017

StorSimple 8000 Series Elevation of Privilege Vulnerability

8.8
CVE-2022-38016

Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability

7.8
CVE-2022-38003

Windows Resilient File System Elevation of Privilege

6.5
CVE-2022-38001

Microsoft Office Spoofing Vulnerability

8.1
CVE-2022-38000

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

7.8
CVE-2022-37999

Windows Group Policy Preference Client Elevation of Privilege Vulnerability

7.7
CVE-2022-37998

Windows Local Session Manager (LSM) Denial of Service Vulnerability

7.8
CVE-2022-37997

Windows Graphics Component Elevation of Privilege Vulnerability

5.5
CVE-2022-37996

Windows Kernel Memory Information Disclosure Vulnerability

7.8
CVE-2022-37995

Windows Kernel Elevation of Privilege Vulnerability

7.8
CVE-2022-37994

Windows Group Policy Preference Client Elevation of Privilege Vulnerability

7.8
CVE-2022-37993

Windows Group Policy Preference Client Elevation of Privilege Vulnerability

7.8
CVE-2022-37991

Windows Kernel Elevation of Privilege Vulnerability

7.8
CVE-2022-37990

Windows Kernel Elevation of Privilege Vulnerability

7.8
CVE-2022-37989

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

7.8
CVE-2022-37988

Windows Kernel Elevation of Privilege Vulnerability

7.8
CVE-2022-37987

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

7.8
CVE-2022-37986

Windows Win32k Elevation of Privilege Vulnerability

5.5
CVE-2022-37985

Windows Graphics Component Information Disclosure Vulnerability

7.8
CVE-2022-37984

Windows WLAN Service Elevation of Privilege Vulnerability

7.8
CVE-2022-37983

Microsoft DWM Core Library Elevation of Privilege Vulnerability

8.8
CVE-2022-37982

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

4.3
CVE-2022-37981

Windows Event Logging Service Denial of Service Vulnerability

7.8
CVE-2022-37980

Windows DHCP Client Elevation of Privilege Vulnerability

7.8
CVE-2022-37979

Windows Hyper-V Elevation of Privilege Vulnerability

7.5
CVE-2022-37978

Windows Active Directory Certificate Services Security Feature Bypass

6.5
CVE-2022-37977

Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability

8.8
CVE-2022-37976

Active Directory Certificate Services Elevation of Privilege Vulnerability

Frequently Asked Questions

How many CVEs affect Microsoft?

Microsoft has 91,472 CVE records in our database, including 2628 critical and 63090 high severity vulnerabilities. 351 of these are listed in CISA's Known Exploited Vulnerabilities catalog.

What are the most severe Microsoft vulnerabilities?

Microsoft has 2628 critical severity (CVSS 9.0+) and 63090 high severity (CVSS 7.0-8.9) vulnerabilities. 351 vulnerabilities are confirmed as actively exploited in the wild.

How can I scan for Microsoft vulnerabilities?

CyberStrike's AI-powered security agents automatically detect vulnerabilities in Microsoft products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.

Detect Microsoft Vulnerabilities

CyberStrike scans your infrastructure for Microsoft vulnerabilities and provides real-time remediation guidance.

Get Started