Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

Microsoft

91,472 known vulnerabilities

1,058
CRITICAL
11,903
HIGH
5,674
MEDIUM
354
LOW

Top Products

windows 8173 windows server 2016 5644 windows server 2019 5279 windows server 2012 4134 windows 10 3588 windows server 2022 3387 windows server 2008 3078 windows 10 1809 2579 windows 10 21h2 2553 windows 10 22h2 2550
18,990 CVEs · Page 218/380
6.8
CVE-2022-21892

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

7.6
CVE-2022-21891

Microsoft Dynamics 365 (on-premises) Spoofing Vulnerability

7.5
CVE-2022-21890

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

7.5
CVE-2022-21889

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

7.8
CVE-2022-21888

Windows Modern Execution Server Remote Code Execution Vulnerability

7.0
CVE-2022-21887

Win32k Elevation of Privilege Vulnerability

7.8
CVE-2022-21885

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

7.8
CVE-2022-21884

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability

7.5
CVE-2022-21883

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

7.0
CVE-2022-21882 KEV

Win32k Elevation of Privilege Vulnerability

7.0
CVE-2022-21881

Windows Kernel Elevation of Privilege Vulnerability

7.5
CVE-2022-21880

Windows GDI+ Information Disclosure Vulnerability

5.5
CVE-2022-21879

Windows Kernel Elevation of Privilege Vulnerability

7.8
CVE-2022-21878

Windows Geolocation Service Remote Code Execution Vulnerability

5.5
CVE-2022-21877

Storage Spaces Controller Information Disclosure Vulnerability

5.5
CVE-2022-21876

Win32k Information Disclosure Vulnerability

7.0
CVE-2022-21875

Windows Storage Elevation of Privilege Vulnerability

7.8
CVE-2022-21874

Windows Security Center API Remote Code Execution Vulnerability

7.0
CVE-2022-21873

Tile Data Repository Elevation of Privilege Vulnerability

7.0
CVE-2022-21872

Windows Event Tracing Elevation of Privilege Vulnerability

7.0
CVE-2022-21871

Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability

7.0
CVE-2022-21870

Tablet Windows User Interface Application Core Elevation of Privilege Vulnerability

7.0
CVE-2022-21869

Clipboard User Service Elevation of Privilege Vulnerability

7.0
CVE-2022-21868

Windows Devices Human Interface Elevation of Privilege Vulnerability

7.0
CVE-2022-21867

Windows Push Notifications Apps Elevation of Privilege Vulnerability

7.0
CVE-2022-21866

Windows System Launcher Elevation of Privilege Vulnerability

7.0
CVE-2022-21865

Connected Devices Platform Service Elevation of Privilege Vulnerability

7.0
CVE-2022-21864

Windows UI Immersive Server API Elevation of Privilege Vulnerability

7.0
CVE-2022-21863

Windows StateRepository API Server file Elevation of Privilege Vulnerability

7.0
CVE-2022-21862

Windows Application Model Core API Elevation of Privilege Vulnerability

7.0
CVE-2022-21861

Task Flow Data Engine Elevation of Privilege Vulnerability

7.0
CVE-2022-21860

Windows AppContracts API Server Elevation of Privilege Vulnerability

7.0
CVE-2022-21859

Windows Accounts Control Elevation of Privilege Vulnerability

7.8
CVE-2022-21858

Windows Bind Filter Driver Elevation of Privilege Vulnerability

8.8
CVE-2022-21857

Active Directory Domain Services Elevation of Privilege Vulnerability

9.0
CVE-2022-21855

Microsoft Exchange Server Remote Code Execution Vulnerability

7.8
CVE-2022-21852

Windows DWM Core Library Elevation of Privilege Vulnerability

8.8
CVE-2022-21851

Remote Desktop Client Remote Code Execution Vulnerability

8.8
CVE-2022-21850

Remote Desktop Client Remote Code Execution Vulnerability

9.8
CVE-2022-21849

Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability

7.5
CVE-2022-21848

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

6.5
CVE-2022-21847

Windows Hyper-V Denial of Service Vulnerability

9.0
CVE-2022-21846

Microsoft Exchange Server Remote Code Execution Vulnerability

7.5
CVE-2022-21843

Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability

7.8
CVE-2022-21842

Microsoft Word Remote Code Execution Vulnerability

7.8
CVE-2022-21841

Microsoft Excel Remote Code Execution Vulnerability

8.8
CVE-2022-21840

Microsoft Office Remote Code Execution Vulnerability

6.1
CVE-2022-21839

Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability

5.5
CVE-2022-21838

Windows Cleanup Manager Elevation of Privilege Vulnerability

8.3
CVE-2022-21837

Microsoft SharePoint Server Remote Code Execution Vulnerability

Frequently Asked Questions

How many CVEs affect Microsoft?

Microsoft has 91,472 CVE records in our database, including 2628 critical and 63090 high severity vulnerabilities. 351 of these are listed in CISA's Known Exploited Vulnerabilities catalog.

What are the most severe Microsoft vulnerabilities?

Microsoft has 2628 critical severity (CVSS 9.0+) and 63090 high severity (CVSS 7.0-8.9) vulnerabilities. 351 vulnerabilities are confirmed as actively exploited in the wild.

How can I scan for Microsoft vulnerabilities?

CyberStrike's AI-powered security agents automatically detect vulnerabilities in Microsoft products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.

Detect Microsoft Vulnerabilities

CyberStrike scans your infrastructure for Microsoft vulnerabilities and provides real-time remediation guidance.

Get Started