Microsoft
91,472 known vulnerabilities
Top Products
Windows PDEV Elevation of Privilege Vulnerability
Windows NT OS Kernel Elevation of Privilege Vulnerability
Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability
Windows Installer Elevation of Privilege Vulnerability
Raw Image Extension Remote Code Execution Vulnerability
Windows Event Tracing Remote Code Execution Vulnerability
Windows Fast FAT File System Driver Elevation of Privilege Vulnerability
Windows DWM Core Library Elevation of Privilege Vulnerability
Windows Inking COM Elevation of Privilege Vulnerability
Windows DWM Core Library Elevation of Privilege Vulnerability
Windows ALPC Elevation of Privilege Vulnerability
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Remote Desktop Client Remote Code Execution Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
Windows ALPC Elevation of Privilege Vulnerability
Paint 3D Remote Code Execution Vulnerability
Windows Common Log File System Driver Information Disclosure Vulnerability
Microsoft Defender for Endpoint Spoofing Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Defender for IoT Elevation of Privilege Vulnerability
Microsoft Defender for IoT Remote Code Execution Vulnerability
Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
Media Foundation Information Disclosure Vulnerability
HEVC Video Extensions Remote Code Execution Vulnerability
HEVC Video Extensions Remote Code Execution Vulnerability
Remote Desktop Client Remote Code Execution Vulnerability
Media Foundation Information Disclosure Vulnerability
Windows Hyper-V Denial of Service Vulnerability
Windows Media Center Update Denial of Service Vulnerability
Xbox Live Auth Manager for Windows Elevation of Privilege Vulnerability
Tor Browser 9.0.7 on Windows 10 build 10586 is vulnerable to information disclosure. This could allow local attackers to
This issues due to insufficient verification of the various input values from user’s input. The vulnerability allows rem
Uncaught exceptions that can be generated in Trend Micro ServerProtection 6.0/5.8 Information Server could allow a remot
Integer overflow conditions that exist in Trend Micro ServerProtect 6.0/5.8 Information Server could allow a remote atta
Trend Micro ServerProtect 6.0/5.8 Information Server uses a static credential to perform authentication when a specific
A security link following local privilege escalation vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Se
A security link following local privilege escalation vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Se
An security agent resource exhaustion denial-of-service vulnerability in Trend Micro Apex One, Trend Micro Apex One as a
A vulnerability in Qlik Sense Enterprise on Windows could allow an remote attacker to enumerate domain user accounts. An
Pritunl Client through 1.2.3019.52 on Windows allows local privilege escalation, related to an ACL entry for CREATOR OWN
Docker Desktop before 4.5.1 on Windows allows attackers to move arbitrary files. NOTE: this issue exists because of an i
SAS Web Report Studio 4.4 allows XSS. /SASWebReportStudio/logonAndRender.do has two parameters: saspfs_request_backlabel
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Read
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.
Frequently Asked Questions
How many CVEs affect Microsoft?
Microsoft has 91,472 CVE records in our database, including 2628 critical and 63090 high severity vulnerabilities. 351 of these are listed in CISA's Known Exploited Vulnerabilities catalog.
What are the most severe Microsoft vulnerabilities?
Microsoft has 2628 critical severity (CVSS 9.0+) and 63090 high severity (CVSS 7.0-8.9) vulnerabilities. 351 vulnerabilities are confirmed as actively exploited in the wild.
How can I scan for Microsoft vulnerabilities?
CyberStrike's AI-powered security agents automatically detect vulnerabilities in Microsoft products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.
Detect Microsoft Vulnerabilities
CyberStrike scans your infrastructure for Microsoft vulnerabilities and provides real-time remediation guidance.
Get Started