Microsoft
91,472 known vulnerabilities
Top Products
Adobe InCopy version 16.4 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitra
An untrusted search path vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker w
A file information exposure vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacke
An improper link resolution before file access vulnerability exists in the Palo Alto Networks Cortex XDR agent on Window
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
Remote Desktop Licensing Diagnoser Information Disclosure Vulnerability
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
Windows BackupKey Remote Protocol Security Feature Bypass Vulnerability
Workstation Service Remote Protocol Security Feature Bypass Vulnerability
Remote Procedure Call Runtime Remote Code Execution Vulnerability
Windows Defender Credential Guard Security Feature Bypass Vulnerability
Windows Kerberos Elevation of Privilege Vulnerability
Windows User Profile Service Elevation of Privilege Vulnerability
DirectX Graphics Kernel File Denial of Service Vulnerability
HEVC Video Extensions Remote Code Execution Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows GDI+ Information Disclosure Vulnerability
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Local Security Authority (Domain Policy) Remote Protocol Security Feature Bypass
DirectX Graphics Kernel Remote Code Execution Vulnerability
.NET Framework Denial of Service Vulnerability
Microsoft Cluster Port Driver Elevation of Privilege Vulnerability
Windows Installer Elevation of Privilege Vulnerability
HTTP Protocol Stack Remote Code Execution Vulnerability
Windows Defender Application Control Security Feature Bypass Vulnerability
Windows Hyper-V Security Feature Bypass Vulnerability
Windows GDI Information Disclosure Vulnerability
Windows GDI Elevation of Privilege Vulnerability
Windows DWM Core Library Elevation of Privilege Vulnerability
Windows Hyper-V Elevation of Privilege Vulnerability
Windows Hyper-V Security Feature Bypass Vulnerability
Windows Extensible Firmware Interface Security Feature Bypass Vulnerability
DirectX Graphics Kernel Remote Code Execution Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows DWM Core Library Elevation of Privilege Vulnerability
Windows User Profile Service Elevation of Privilege Vulnerability
Secure Boot Security Feature Bypass Vulnerability
Remote Desktop Protocol Remote Code Execution Vulnerability
Frequently Asked Questions
How many CVEs affect Microsoft?
Microsoft has 91,472 CVE records in our database, including 2628 critical and 63090 high severity vulnerabilities. 351 of these are listed in CISA's Known Exploited Vulnerabilities catalog.
What are the most severe Microsoft vulnerabilities?
Microsoft has 2628 critical severity (CVSS 9.0+) and 63090 high severity (CVSS 7.0-8.9) vulnerabilities. 351 vulnerabilities are confirmed as actively exploited in the wild.
How can I scan for Microsoft vulnerabilities?
CyberStrike's AI-powered security agents automatically detect vulnerabilities in Microsoft products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.
Detect Microsoft Vulnerabilities
CyberStrike scans your infrastructure for Microsoft vulnerabilities and provides real-time remediation guidance.
Get Started