Microsoft
91,472 known vulnerabilities
Top Products
Windows File History Service Elevation of Privilege Vulnerability
Windows Remote Access Connection Manager Information Disclosure Vulnerability
Microsoft Word Remote Code Execution Vulnerability
Microsoft Office Online Server Spoofing Vulnerability
Windows Hyper-V Remote Code Execution Vulnerability
Win32k Elevation of Privilege Vulnerability
Scripting Engine Memory Corruption Vulnerability
Windows MSHTML Platform Remote Code Execution Vulnerability
Windows HTML Platforms Security Feature Bypass Vulnerability
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Windows DNS Server Denial of Service Vulnerability
Windows DNS Server Remote Code Execution Vulnerability
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
GDI+ Information Disclosure Vulnerability
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Windows Font Driver Host Remote Code Execution Vulnerability
IBM InfoSphere Master Data Management Server 11.6 is vulnerable to cross-site request forgery which could allow an attac
A local privilege escalation (PE) vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows platforms t
IBM Secure External Authentication Server 2.4.3.2, 6.0.1, 6.0.2 and IBM Secure Proxy 3.4.3.2, 6.0.1, 6.0.2 could allow a
iDrive RemotePC before 7.6.48 on Windows allows privilege escalation. A local and low-privileged user can force RemotePC
iDrive RemotePC before 7.6.48 on Windows allows authentication bypass. A remote and unauthenticated attacker can bypass
iDrive RemotePC before 7.6.48 on Windows allows information disclosure. A locally authenticated attacker can read the sy
iDrive RemotePC before 7.6.48 on Windows allows information disclosure. A locally authenticated attacker can read an enc
iDrive RemotePC before 7.6.48 on Windows allows information disclosure. A man in the middle can recover a system's Perso
Visual Studio Code Remote Code Execution Vulnerability
Visual Studio Code Remote Code Execution Vulnerability
Windows DNS Server Remote Code Execution Vulnerability
Microsoft Exchange Server Elevation of Privilege Vulnerability
Microsoft Defender Remote Code Execution Vulnerability
Raw Image Extension Remote Code Execution Vulnerability
Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft SharePoint Server Information Disclosure Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
Microsoft SharePoint Server Spoofing Vulnerability
Win32k Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
Windows Installer Elevation of Privilege Vulnerability
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
Storage Spaces Controller Information Disclosure Vulnerability
Windows Kernel Remote Code Execution Vulnerability
Windows Remote Assistance Information Disclosure Vulnerability
Windows Address Book Remote Code Execution Vulnerability
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
Windows Kernel Memory Information Disclosure Vulnerability
Windows DNS Server Denial of Service Vulnerability
Windows GDI Elevation of Privilege Vulnerability
Windows MSHTML Platform Remote Code Execution Vulnerability
Frequently Asked Questions
How many CVEs affect Microsoft?
Microsoft has 91,472 CVE records in our database, including 2628 critical and 63090 high severity vulnerabilities. 351 of these are listed in CISA's Known Exploited Vulnerabilities catalog.
What are the most severe Microsoft vulnerabilities?
Microsoft has 2628 critical severity (CVSS 9.0+) and 63090 high severity (CVSS 7.0-8.9) vulnerabilities. 351 vulnerabilities are confirmed as actively exploited in the wild.
How can I scan for Microsoft vulnerabilities?
CyberStrike's AI-powered security agents automatically detect vulnerabilities in Microsoft products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.
Detect Microsoft Vulnerabilities
CyberStrike scans your infrastructure for Microsoft vulnerabilities and provides real-time remediation guidance.
Get Started