Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

Microsoft

91,472 known vulnerabilities

1,058
CRITICAL
11,903
HIGH
5,674
MEDIUM
354
LOW

Top Products

windows 8173 windows server 2016 5644 windows server 2019 5279 windows server 2012 4134 windows 10 3588 windows server 2022 3387 windows server 2008 3078 windows 10 1809 2579 windows 10 21h2 2553 windows 10 22h2 2550
18,990 CVEs · Page 224/380
6.5
CVE-2021-42305

Microsoft Exchange Server Spoofing Vulnerability

 6.6
CVE-2021-42304

Azure RTOS Elevation of Privilege Vulnerability

 6.6
CVE-2021-42303

Azure RTOS Elevation of Privilege Vulnerability

 6.6
CVE-2021-42302

Azure RTOS Elevation of Privilege Vulnerability

 3.3
CVE-2021-42301

Azure RTOS Information Disclosure Vulnerability

 6.0
CVE-2021-42300

Azure Sphere Tampering Vulnerability

 7.8
CVE-2021-42298

Microsoft Defender Remote Code Execution Vulnerability

 7.8
CVE-2021-42296

Microsoft Word Remote Code Execution Vulnerability

 7.8
CVE-2021-42292 KEV

Microsoft Excel Security Feature Bypass Vulnerability

 7.5
CVE-2021-42291

Active Directory Domain Services Elevation of Privilege Vulnerability

 5.7
CVE-2021-42288

Windows Hello Security Feature Bypass Vulnerability

 7.5
CVE-2021-42287 KEV

Active Directory Domain Services Elevation of Privilege Vulnerability

 7.8
CVE-2021-42286

Windows Core Shell SI Host Extension Framework for Composable Shell Elevation of Privilege Vulnerability

 7.8
CVE-2021-42285

Windows Kernel Elevation of Privilege Vulnerability

 6.8
CVE-2021-42284

Windows Hyper-V Denial of Service Vulnerability

 8.8
CVE-2021-42283

NTFS Elevation of Privilege Vulnerability

 7.5
CVE-2021-42282

Active Directory Domain Services Elevation of Privilege Vulnerability

 5.5
CVE-2021-42280

Windows Feedback Hub Elevation of Privilege Vulnerability

 4.2
CVE-2021-42279

Chakra Scripting Engine Memory Corruption Vulnerability

 7.5
CVE-2021-42278 KEV

Active Directory Domain Services Elevation of Privilege Vulnerability

 5.5
CVE-2021-42277

Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability

 7.8
CVE-2021-42276

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

 8.8
CVE-2021-42275

Microsoft COM for Windows Remote Code Execution Vulnerability

 6.8
CVE-2021-42274

Windows Hyper-V Discrete Device Assignment (DDA) Denial of Service Vulnerability

 5.5
CVE-2021-41379 KEV

Windows Installer Elevation of Privilege Vulnerability

 7.8
CVE-2021-41378

Windows NTFS Remote Code Execution Vulnerability

 7.8
CVE-2021-41377

Windows Fast FAT File System Driver Elevation of Privilege Vulnerability

 2.3
CVE-2021-41376

Azure Sphere Information Disclosure Vulnerability

 4.4
CVE-2021-41375

Azure Sphere Information Disclosure Vulnerability

 6.7
CVE-2021-41374

Azure Sphere Information Disclosure Vulnerability

 5.5
CVE-2021-41373

FSLogix Information Disclosure Vulnerability

 7.6
CVE-2021-41372

A Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF) vulnerability exists when Power BI Report Server Temp

 4.4
CVE-2021-41371

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

 7.8
CVE-2021-41370

NTFS Elevation of Privilege Vulnerability

 6.1
CVE-2021-41368

Microsoft Access Remote Code Execution Vulnerability

 7.8
CVE-2021-41367

NTFS Elevation of Privilege Vulnerability

 7.8
CVE-2021-41366

Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability

 7.5
CVE-2021-41356

Windows Denial of Service Vulnerability

 4.3
CVE-2021-41351

Microsoft Edge (Chrome based) Spoofing on IE Mode

 6.5
CVE-2021-41349

Microsoft Exchange Server Spoofing Vulnerability

 7.8
CVE-2021-40442

Microsoft Excel Remote Code Execution Vulnerability

 8.8
CVE-2021-38666

Remote Desktop Client Remote Code Execution Vulnerability

 7.4
CVE-2021-38665

Remote Desktop Protocol Client Information Disclosure Vulnerability

 4.4
CVE-2021-38631

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

 7.8
CVE-2021-36957

Windows Desktop Bridge Elevation of Privilege Vulnerability

 3.3
CVE-2021-26444

Azure RTOS Information Disclosure Vulnerability

 9.0
CVE-2021-26443

Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability

 6.1
CVE-2021-3641

Improper Link Resolution Before File Access ('Link Following') vulnerability in the EPAG component of Bitdefender Endpoi

 7.5
CVE-2021-35053

Possible system denial of service in case of arbitrary changing Firefox browser parameters. An attacker could change spe

 6.5
CVE-2021-38492

When delegating navigations to the operating system, Firefox would accept the `mk` scheme which might allow attackers to

Frequently Asked Questions

How many CVEs affect Microsoft?

Microsoft has 91,472 CVE records in our database, including 2628 critical and 63090 high severity vulnerabilities. 351 of these are listed in CISA's Known Exploited Vulnerabilities catalog.

What are the most severe Microsoft vulnerabilities?

Microsoft has 2628 critical severity (CVSS 9.0+) and 63090 high severity (CVSS 7.0-8.9) vulnerabilities. 351 vulnerabilities are confirmed as actively exploited in the wild.

How can I scan for Microsoft vulnerabilities?

CyberStrike's AI-powered security agents automatically detect vulnerabilities in Microsoft products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.

Detect Microsoft Vulnerabilities

CyberStrike scans your infrastructure for Microsoft vulnerabilities and provides real-time remediation guidance.

Get Started