Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

Microsoft

91,472 known vulnerabilities

1,058
CRITICAL
11,903
HIGH
5,674
MEDIUM
354
LOW

Top Products

windows 8173 windows server 2016 5644 windows server 2019 5279 windows server 2012 4134 windows 10 3588 windows server 2022 3387 windows server 2008 3078 windows 10 1809 2579 windows 10 21h2 2553 windows 10 22h2 2550
18,990 CVEs · Page 196/380
7.8
CVE-2022-35763

Storage Spaces Direct Elevation of Privilege Vulnerability

 7.8
CVE-2022-35762

Storage Spaces Direct Elevation of Privilege Vulnerability

 7.8
CVE-2022-35761

Windows Kernel Elevation of Privilege Vulnerability

 7.8
CVE-2022-35760

Microsoft ATA Port Driver Elevation of Privilege Vulnerability

 8.8
CVE-2022-34717

Microsoft Office Remote Code Execution Vulnerability

 5.9
CVE-2022-34716

.NET Spoofing Vulnerability

 9.8
CVE-2022-34715

Windows Network File System Remote Code Execution Vulnerability

 8.1
CVE-2022-34714

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

 7.8
CVE-2022-34713 KEV

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

 5.5
CVE-2022-34712

Windows Defender Credential Guard Information Disclosure Vulnerability

 5.5
CVE-2022-34710

Windows Defender Credential Guard Information Disclosure Vulnerability

 6.0
CVE-2022-34709

Windows Defender Credential Guard Security Feature Bypass Vulnerability

 5.5
CVE-2022-34708

Windows Kernel Information Disclosure Vulnerability

 7.8
CVE-2022-34707

Windows Kernel Elevation of Privilege Vulnerability

 7.8
CVE-2022-34706

Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability

 7.8
CVE-2022-34705

Windows Defender Credential Guard Elevation of Privilege Vulnerability

 4.7
CVE-2022-34704

Windows Defender Credential Guard Information Disclosure Vulnerability

 7.8
CVE-2022-34703

Windows Partition Management Driver Elevation of Privilege Vulnerability

 8.1
CVE-2022-34702

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

 7.5
CVE-2022-34701

Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability

 7.8
CVE-2022-34699

Windows Win32k Elevation of Privilege Vulnerability

 7.8
CVE-2022-34696

Windows Hyper-V Remote Code Execution Vulnerability

 5.3
CVE-2022-34692

Microsoft Exchange Server Information Disclosure Vulnerability

 8.8
CVE-2022-34691

Active Directory Domain Services Elevation of Privilege Vulnerability

 7.1
CVE-2022-34690

Windows Fax Service Elevation of Privilege Vulnerability

 7.8
CVE-2022-34687

Azure RTOS GUIX Studio Remote Code Execution Vulnerability

 5.5
CVE-2022-34686

Azure RTOS GUIX Studio Information Disclosure Vulnerability

 5.5
CVE-2022-34685

Azure RTOS GUIX Studio Information Disclosure Vulnerability

 7.8
CVE-2022-33670

Windows Partition Management Driver Elevation of Privilege Vulnerability

 9.6
CVE-2022-33649

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

 7.8
CVE-2022-33648

Microsoft Excel Remote Code Execution Vulnerability

 7.0
CVE-2022-33646

Azure Batch Node Agent Elevation of Privilege Vulnerability

 7.8
CVE-2022-33640

System Center Operations Manager: Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability

 8.3
CVE-2022-33636

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

 7.3
CVE-2022-33631

Microsoft Excel Security Feature Bypass Vulnerability

 5.5
CVE-2022-30197

Windows Kernel Information Disclosure Vulnerability

 7.5
CVE-2022-30194

Windows WebBrowser Control Remote Code Execution Vulnerability

 7.8
CVE-2022-30176

Azure RTOS GUIX Studio Remote Code Execution Vulnerability

 7.8
CVE-2022-30175

Azure RTOS GUIX Studio Remote Code Execution Vulnerability

 7.5
CVE-2022-30144

Windows Bluetooth Service Remote Code Execution Vulnerability

 6.5
CVE-2022-30134

Microsoft Exchange Server Information Disclosure Vulnerability

 9.8
CVE-2022-30133

Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability

 8.0
CVE-2022-24516

Microsoft Exchange Server Elevation of Privilege Vulnerability

 8.0
CVE-2022-24477

Microsoft Exchange Server Elevation of Privilege Vulnerability

 8.0
CVE-2022-21980

Microsoft Exchange Server Elevation of Privilege Vulnerability

 4.8
CVE-2022-21979

Microsoft Exchange Server Information Disclosure Vulnerability

 7.5
CVE-2022-26979

Foxit PDF Reader before 12.0.1 and PDF Editor before 12.0.1 allow a NULL pointer dereference when this.Span is used for

7.5
CVE-2022-27944

Foxit PDF Reader before 12.0.1 and PDF Editor before 12.0.1 allow an exportXFAData NULL pointer dereference.

 4.3
CVE-2022-28880

A Denial-of-Service vulnerability was discovered in the F-Secure Atlant and in certain WithSecure products while scannin

 7.8
CVE-2022-27535

Kaspersky VPN Secure Connection for Windows version up to 21.5 was vulnerable to arbitrary file deletion via abuse of it

Frequently Asked Questions

How many CVEs affect Microsoft?

Microsoft has 91,472 CVE records in our database, including 2628 critical and 63090 high severity vulnerabilities. 351 of these are listed in CISA's Known Exploited Vulnerabilities catalog.

What are the most severe Microsoft vulnerabilities?

Microsoft has 2628 critical severity (CVSS 9.0+) and 63090 high severity (CVSS 7.0-8.9) vulnerabilities. 351 vulnerabilities are confirmed as actively exploited in the wild.

How can I scan for Microsoft vulnerabilities?

CyberStrike's AI-powered security agents automatically detect vulnerabilities in Microsoft products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.

Detect Microsoft Vulnerabilities

CyberStrike scans your infrastructure for Microsoft vulnerabilities and provides real-time remediation guidance.

Get Started