Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

Microsoft

91,472 known vulnerabilities

1,058
CRITICAL
11,903
HIGH
5,674
MEDIUM
354
LOW

Top Products

windows 8173 windows server 2016 5644 windows server 2019 5279 windows server 2012 4134 windows 10 3588 windows server 2022 3387 windows server 2008 3078 windows 10 1809 2579 windows 10 21h2 2553 windows 10 22h2 2550
18,990 CVEs · Page 236/380
5.5
CVE-2021-34496

Windows GDI Information Disclosure Vulnerability

8.8
CVE-2021-34494

Windows DNS Server Remote Code Execution Vulnerability

6.7
CVE-2021-34493

Windows Partition Management Driver Elevation of Privilege Vulnerability

8.1
CVE-2021-34492

Windows Certificate Spoofing Vulnerability

5.5
CVE-2021-34491

Win32k Information Disclosure Vulnerability

7.5
CVE-2021-34490

Windows TCP/IP Driver Denial of Service Vulnerability

7.8
CVE-2021-34489

DirectWrite Remote Code Execution Vulnerability

7.8
CVE-2021-34488

Windows Console Driver Elevation of Privilege Vulnerability

7.8
CVE-2021-34479

Microsoft Visual Studio Spoofing Vulnerability

7.8
CVE-2021-34477

Visual Studio Code .NET Runtime Elevation of Privilege Vulnerability

7.5
CVE-2021-34476

Bowser.sys Denial of Service Vulnerability

8.0
CVE-2021-34474

Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability

9.1
CVE-2021-34473 KEV

Microsoft Exchange Server Remote Code Execution Vulnerability

8.0
CVE-2021-34470

Microsoft Exchange Server Elevation of Privilege Vulnerability

8.2
CVE-2021-34469

Microsoft Office Security Feature Bypass Vulnerability

7.1
CVE-2021-34468

Microsoft SharePoint Server Remote Code Execution Vulnerability

7.5
CVE-2021-33788

Windows LSA Denial of Service Vulnerability

8.1
CVE-2021-33786

Windows LSA Security Feature Bypass Vulnerability

7.5
CVE-2021-33785

Windows AF_UNIX Socket Provider Denial of Service Vulnerability

7.8
CVE-2021-33784

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

6.5
CVE-2021-33783

Windows SMB Information Disclosure Vulnerability

5.5
CVE-2021-33782

Windows Authenticode Spoofing Vulnerability

8.1
CVE-2021-33781

Azure AD Security Feature Bypass Vulnerability

8.8
CVE-2021-33780

Windows DNS Server Remote Code Execution Vulnerability

8.1
CVE-2021-33779

Windows AD FS Security Feature Bypass Vulnerability

7.8
CVE-2021-33778

HEVC Video Extensions Remote Code Execution Vulnerability

7.8
CVE-2021-33777

HEVC Video Extensions Remote Code Execution Vulnerability

7.8
CVE-2021-33776

HEVC Video Extensions Remote Code Execution Vulnerability

7.8
CVE-2021-33775

HEVC Video Extensions Remote Code Execution Vulnerability

7.0
CVE-2021-33774

Windows Event Tracing Elevation of Privilege Vulnerability

7.8
CVE-2021-33773

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

7.5
CVE-2021-33772

Windows TCP/IP Driver Denial of Service Vulnerability

7.8
CVE-2021-33771 KEV

Windows Kernel Elevation of Privilege Vulnerability

8.0
CVE-2021-33768

Microsoft Exchange Server Elevation of Privilege Vulnerability

8.2
CVE-2021-33767

Open Enclave SDK Elevation of Privilege Vulnerability

7.3
CVE-2021-33766 KEV

Microsoft Exchange Server Information Disclosure Vulnerability

6.2
CVE-2021-33765

Windows Installer Spoofing Vulnerability

5.9
CVE-2021-33764

Windows Key Distribution Center Information Disclosure Vulnerability

5.5
CVE-2021-33763

Windows Remote Access Connection Manager Information Disclosure Vulnerability

7.8
CVE-2021-33761

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

5.5
CVE-2021-33760

Media Foundation Information Disclosure Vulnerability

7.8
CVE-2021-33759

Windows Desktop Bridge Elevation of Privilege Vulnerability

7.7
CVE-2021-33758

Windows Hyper-V Denial of Service Vulnerability

5.3
CVE-2021-33757

Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability

8.8
CVE-2021-33756

Windows DNS Snap-in Remote Code Execution Vulnerability

6.3
CVE-2021-33755

Windows Hyper-V Denial of Service Vulnerability

8.0
CVE-2021-33754

Windows DNS Server Remote Code Execution Vulnerability

4.7
CVE-2021-33753

Microsoft Bing Search Spoofing Vulnerability

8.8
CVE-2021-33752

Windows DNS Snap-in Remote Code Execution Vulnerability

7.0
CVE-2021-33751

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

Frequently Asked Questions

How many CVEs affect Microsoft?

Microsoft has 91,472 CVE records in our database, including 2628 critical and 63090 high severity vulnerabilities. 351 of these are listed in CISA's Known Exploited Vulnerabilities catalog.

What are the most severe Microsoft vulnerabilities?

Microsoft has 2628 critical severity (CVSS 9.0+) and 63090 high severity (CVSS 7.0-8.9) vulnerabilities. 351 vulnerabilities are confirmed as actively exploited in the wild.

How can I scan for Microsoft vulnerabilities?

CyberStrike's AI-powered security agents automatically detect vulnerabilities in Microsoft products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.

Detect Microsoft Vulnerabilities

CyberStrike scans your infrastructure for Microsoft vulnerabilities and provides real-time remediation guidance.

Get Started