Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

Microsoft

91,472 known vulnerabilities

1,058
CRITICAL
11,903
HIGH
5,674
MEDIUM
354
LOW

Top Products

windows 8173 windows server 2016 5644 windows server 2019 5279 windows server 2012 4134 windows 10 3588 windows server 2022 3387 windows server 2008 3078 windows 10 1809 2579 windows 10 21h2 2553 windows 10 22h2 2550
18,990 CVEs · Page 235/380
7.8
CVE-2021-34455

Windows File History Service Elevation of Privilege Vulnerability

5.5
CVE-2021-34454

Windows Remote Access Connection Manager Information Disclosure Vulnerability

7.8
CVE-2021-34452

Microsoft Word Remote Code Execution Vulnerability

5.3
CVE-2021-34451

Microsoft Office Online Server Spoofing Vulnerability

8.5
CVE-2021-34450

Windows Hyper-V Remote Code Execution Vulnerability

7.0
CVE-2021-34449

Win32k Elevation of Privilege Vulnerability

6.8
CVE-2021-34448 KEV

Scripting Engine Memory Corruption Vulnerability

6.8
CVE-2021-34447

Windows MSHTML Platform Remote Code Execution Vulnerability

8.0
CVE-2021-34446

Windows HTML Platforms Security Feature Bypass Vulnerability

7.8
CVE-2021-34445

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

6.5
CVE-2021-34444

Windows DNS Server Denial of Service Vulnerability

8.8
CVE-2021-34442

Windows DNS Server Remote Code Execution Vulnerability

7.8
CVE-2021-34441

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

5.5
CVE-2021-34440

GDI+ Information Disclosure Vulnerability

7.8
CVE-2021-34439

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

7.8
CVE-2021-34438

Windows Font Driver Host Remote Code Execution Vulnerability

6.5
CVE-2020-4675

IBM InfoSphere Master Data Management Server 11.6 is vulnerable to cross-site request forgery which could allow an attac

7.8
CVE-2021-3042

A local privilege escalation (PE) vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows platforms t

7.5
CVE-2021-29725

IBM Secure External Authentication Server 2.4.3.2, 6.0.1, 6.0.2 and IBM Secure Proxy 3.4.3.2, 6.0.1, 6.0.2 could allow a

7.8
CVE-2021-34692

iDrive RemotePC before 7.6.48 on Windows allows privilege escalation. A local and low-privileged user can force RemotePC

9.8
CVE-2021-34690

iDrive RemotePC before 7.6.48 on Windows allows authentication bypass. A remote and unauthenticated attacker can bypass

5.5
CVE-2021-34689

iDrive RemotePC before 7.6.48 on Windows allows information disclosure. A locally authenticated attacker can read the sy

3.3
CVE-2021-34688

iDrive RemotePC before 7.6.48 on Windows allows information disclosure. A locally authenticated attacker can read an enc

5.3
CVE-2021-34687

iDrive RemotePC before 7.6.48 on Windows allows information disclosure. A man in the middle can recover a system's Perso

7.8
CVE-2021-34529

Visual Studio Code Remote Code Execution Vulnerability

7.8
CVE-2021-34528

Visual Studio Code Remote Code Execution Vulnerability

8.8
CVE-2021-34525

Windows DNS Server Remote Code Execution Vulnerability

9.0
CVE-2021-34523 KEV

Microsoft Exchange Server Elevation of Privilege Vulnerability

7.8
CVE-2021-34522

Microsoft Defender Remote Code Execution Vulnerability

7.8
CVE-2021-34521

Raw Image Extension Remote Code Execution Vulnerability

8.1
CVE-2021-34520

Microsoft SharePoint Server Remote Code Execution Vulnerability

5.3
CVE-2021-34519

Microsoft SharePoint Server Information Disclosure Vulnerability

7.8
CVE-2021-34518

Microsoft Excel Remote Code Execution Vulnerability

5.3
CVE-2021-34517

Microsoft SharePoint Server Spoofing Vulnerability

7.8
CVE-2021-34516

Win32k Elevation of Privilege Vulnerability

7.8
CVE-2021-34514

Windows Kernel Elevation of Privilege Vulnerability

7.8
CVE-2021-34513

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

7.8
CVE-2021-34512

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

7.8
CVE-2021-34511

Windows Installer Elevation of Privilege Vulnerability

7.8
CVE-2021-34510

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

5.5
CVE-2021-34509

Storage Spaces Controller Information Disclosure Vulnerability

8.8
CVE-2021-34508

Windows Kernel Remote Code Execution Vulnerability

6.5
CVE-2021-34507

Windows Remote Assistance Information Disclosure Vulnerability

7.8
CVE-2021-34504

Windows Address Book Remote Code Execution Vulnerability

7.8
CVE-2021-34503

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

7.8
CVE-2021-34501

Microsoft Excel Remote Code Execution Vulnerability

6.3
CVE-2021-34500

Windows Kernel Memory Information Disclosure Vulnerability

6.5
CVE-2021-34499

Windows DNS Server Denial of Service Vulnerability

7.8
CVE-2021-34498

Windows GDI Elevation of Privilege Vulnerability

6.8
CVE-2021-34497

Windows MSHTML Platform Remote Code Execution Vulnerability

Frequently Asked Questions

How many CVEs affect Microsoft?

Microsoft has 91,472 CVE records in our database, including 2628 critical and 63090 high severity vulnerabilities. 351 of these are listed in CISA's Known Exploited Vulnerabilities catalog.

What are the most severe Microsoft vulnerabilities?

Microsoft has 2628 critical severity (CVSS 9.0+) and 63090 high severity (CVSS 7.0-8.9) vulnerabilities. 351 vulnerabilities are confirmed as actively exploited in the wild.

How can I scan for Microsoft vulnerabilities?

CyberStrike's AI-powered security agents automatically detect vulnerabilities in Microsoft products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.

Detect Microsoft Vulnerabilities

CyberStrike scans your infrastructure for Microsoft vulnerabilities and provides real-time remediation guidance.

Get Started