Microsoft
91,472 known vulnerabilities
Top Products
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
Open Management Infrastructure Elevation of Privilege Vulnerability
Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability
Win32k Elevation of Privilege Vulnerability
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Windows Storage Information Disclosure Vulnerability
Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability
Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability
Microsoft Windows Update Client Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows BitLocker Security Feature Bypass Vulnerability
Windows Event Tracing Elevation of Privilege Vulnerability
Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
Windows Key Storage Provider Security Feature Bypass Vulnerability
Win32k Elevation of Privilege Vulnerability
Windows SMB Elevation of Privilege Vulnerability
Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability
Windows SMB Information Disclosure Vulnerability
Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability
Windows DNS Elevation of Privilege Vulnerability
Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability
Windows Subsystem for Linux Elevation of Privilege Vulnerability
Windows WLAN AutoConfig Service Remote Code Execution Vulnerability
Windows Event Tracing Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Installer Information Disclosure Vulnerability
Windows Installer Denial of Service Vulnerability
Windows SMB Information Disclosure Vulnerability
Windows Authenticode Spoofing Vulnerability
Azure Sphere Information Disclosure Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Bind Filter Driver Elevation of Privilege Vulnerability
Visual Studio Remote Code Execution Vulnerability
Visual Studio Code Spoofing Vulnerability
Windows Scripting Engine Memory Corruption Vulnerability
Visual Studio Elevation of Privilege Vulnerability
IBM Security Secret Server up to 11.0 stores sensitive information in URL parameters. This may lead to information discl
IBM Security Secret Server up to 11.0 could allow an attacker to enumerate usernames due to improper input validation. I
IBM Security Secret Server up to 11.0 could allow a remote attacker to obtain sensitive information when a detailed tech
An arbitrary file download and execution vulnerability was found in the HShell.dll of handysoft Co., Ltd groupware Activ
Download of code without integrity check vulnerability in NEXACRO14 Runtime ActiveX control of tobesoft Co., Ltd allows
A heap overflow issue was found in ARK library of bandisoft Co., Ltd when the Ark_DigPathA function parsed a file path.
Inappropriate implementation in the ChromeOS Readiness Tool installer on Windows prior to 1.0.2.0 loosens DCOM access ri
Adobe After Effects version 18.1 (and earlier) is affected by a potential Command injection vulnerability when chained w
Adobe Media Encoder version 15.1 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a special
Adobe Genuine Services version 7.1 (and earlier) is affected by an Insecure file permission vulnerability during install
Adobe Illustrator version 25.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially c
Frequently Asked Questions
How many CVEs affect Microsoft?
Microsoft has 91,472 CVE records in our database, including 2628 critical and 63090 high severity vulnerabilities. 351 of these are listed in CISA's Known Exploited Vulnerabilities catalog.
What are the most severe Microsoft vulnerabilities?
Microsoft has 2628 critical severity (CVSS 9.0+) and 63090 high severity (CVSS 7.0-8.9) vulnerabilities. 351 vulnerabilities are confirmed as actively exploited in the wild.
How can I scan for Microsoft vulnerabilities?
CyberStrike's AI-powered security agents automatically detect vulnerabilities in Microsoft products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.
Detect Microsoft Vulnerabilities
CyberStrike scans your infrastructure for Microsoft vulnerabilities and provides real-time remediation guidance.
Get Started