Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

Microsoft

91,472 known vulnerabilities

1,058
CRITICAL
11,903
HIGH
5,674
MEDIUM
354
LOW

Top Products

windows 8173 windows server 2016 5644 windows server 2019 5279 windows server 2012 4134 windows 10 3588 windows server 2022 3387 windows server 2008 3078 windows 10 1809 2579 windows 10 21h2 2553 windows 10 22h2 2550
18,990 CVEs · Page 240/380
7.8
CVE-2021-31214

Visual Studio Code Remote Code Execution Vulnerability

7.8
CVE-2021-31213

Visual Studio Code Remote Containers Extension Remote Code Execution Vulnerability

7.8
CVE-2021-31211

Visual Studio Code Remote Code Execution Vulnerability

6.5
CVE-2021-31209

Microsoft Exchange Server Spoofing Vulnerability

7.8
CVE-2021-31208

Windows Container Manager Service Elevation of Privilege Vulnerability

6.6
CVE-2021-31207 KEV

Microsoft Exchange Server Security Feature Bypass Vulnerability

6.5
CVE-2021-31205

Windows SMB Client Security Feature Bypass Vulnerability

7.3
CVE-2021-31204

.NET and Visual Studio Elevation of Privilege Vulnerability

7.2
CVE-2021-31200

Common Utilities Remote Code Execution Vulnerability

7.8
CVE-2021-31198

Microsoft Exchange Server Remote Code Execution Vulnerability

6.5
CVE-2021-31195

Microsoft Exchange Server Remote Code Execution Vulnerability

8.8
CVE-2021-31194

OLE Automation Remote Code Execution Vulnerability

7.8
CVE-2021-31193

Windows SSDP Service Elevation of Privilege Vulnerability

7.8
CVE-2021-31192

Windows Media Foundation Core Remote Code Execution Vulnerability

5.5
CVE-2021-31191

Windows Projected File System FS Filter Driver Information Disclosure Vulnerability

7.8
CVE-2021-31190

Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability

7.8
CVE-2021-31188

Windows Graphics Component Elevation of Privilege Vulnerability

7.8
CVE-2021-31187

Windows WalletService Elevation of Privilege Vulnerability

7.4
CVE-2021-31186

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

5.5
CVE-2021-31185

Windows Desktop Bridge Denial of Service Vulnerability

5.5
CVE-2021-31184

Microsoft Windows Infrared Data Association (IrDA) Information Disclosure Vulnerability

7.1
CVE-2021-31182

Microsoft Bluetooth Driver Spoofing Vulnerability

8.8
CVE-2021-31181

Microsoft SharePoint Remote Code Execution Vulnerability

7.8
CVE-2021-31180

Microsoft Office Graphics Remote Code Execution Vulnerability

7.8
CVE-2021-31179

Microsoft Office Remote Code Execution Vulnerability

5.5
CVE-2021-31178

Microsoft Office Information Disclosure Vulnerability

7.8
CVE-2021-31177

Microsoft Office Remote Code Execution Vulnerability

7.8
CVE-2021-31176

Microsoft Office Remote Code Execution Vulnerability

7.8
CVE-2021-31175

Microsoft Office Remote Code Execution Vulnerability

5.5
CVE-2021-31174

Microsoft Excel Information Disclosure Vulnerability

5.3
CVE-2021-31173

Microsoft SharePoint Server Information Disclosure Vulnerability

7.1
CVE-2021-31172

Microsoft SharePoint Server Spoofing Vulnerability

4.1
CVE-2021-31171

Microsoft SharePoint Information Disclosure Vulnerability

7.8
CVE-2021-31170

Windows Graphics Component Elevation of Privilege Vulnerability

7.8
CVE-2021-31169

Windows Container Manager Service Elevation of Privilege Vulnerability

7.8
CVE-2021-31168

Windows Container Manager Service Elevation of Privilege Vulnerability

7.8
CVE-2021-31167

Windows Container Manager Service Elevation of Privilege Vulnerability

9.8
CVE-2021-31166 KEV

HTTP Protocol Stack Remote Code Execution Vulnerability

7.8
CVE-2021-31165

Windows Container Manager Service Elevation of Privilege Vulnerability

5.5
CVE-2021-28479

Windows CSC Service Information Disclosure Vulnerability

7.6
CVE-2021-28478

Microsoft SharePoint Server Spoofing Vulnerability

9.9
CVE-2021-28476

Windows Hyper-V Remote Code Execution Vulnerability

8.8
CVE-2021-28474

Microsoft SharePoint Server Remote Code Execution Vulnerability

7.8
CVE-2021-28465

Web Media Extensions Remote Code Execution Vulnerability

6.1
CVE-2021-28461

Dynamics Finance and Operations Cross-site Scripting Vulnerability

8.8
CVE-2021-28455

Microsoft Jet Red Database Engine and Access Connectivity Engine Remote Code Execution Vulnerability

8.8
CVE-2021-27068

Visual Studio Remote Code Execution Vulnerability

7.2
CVE-2021-26422

Skype for Business and Lync Remote Code Execution Vulnerability

6.5
CVE-2021-26421

Skype for Business and Lync Spoofing Vulnerability

7.5
CVE-2021-26419

Scripting Engine Memory Corruption Vulnerability

Frequently Asked Questions

How many CVEs affect Microsoft?

Microsoft has 91,472 CVE records in our database, including 2628 critical and 63090 high severity vulnerabilities. 351 of these are listed in CISA's Known Exploited Vulnerabilities catalog.

What are the most severe Microsoft vulnerabilities?

Microsoft has 2628 critical severity (CVSS 9.0+) and 63090 high severity (CVSS 7.0-8.9) vulnerabilities. 351 vulnerabilities are confirmed as actively exploited in the wild.

How can I scan for Microsoft vulnerabilities?

CyberStrike's AI-powered security agents automatically detect vulnerabilities in Microsoft products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.

Detect Microsoft Vulnerabilities

CyberStrike scans your infrastructure for Microsoft vulnerabilities and provides real-time remediation guidance.

Get Started