Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

Microsoft

91,472 known vulnerabilities

1,058
CRITICAL
11,903
HIGH
5,674
MEDIUM
354
LOW

Top Products

windows 8173 windows server 2016 5644 windows server 2019 5279 windows server 2012 4134 windows 10 3588 windows server 2022 3387 windows server 2008 3078 windows 10 1809 2579 windows 10 21h2 2553 windows 10 22h2 2550
18,990 CVEs · Page 243/380
7.1
CVE-2021-28446

Windows Portmapping Information Disclosure Vulnerability

8.1
CVE-2021-28445

Windows Network File System Remote Code Execution Vulnerability

5.7
CVE-2021-28444

Windows Hyper-V Security Feature Bypass Vulnerability

5.5
CVE-2021-28443

Windows Console Driver Denial of Service Vulnerability

6.5
CVE-2021-28442

Windows TCP/IP Information Disclosure Vulnerability

6.5
CVE-2021-28441

Windows Hyper-V Information Disclosure Vulnerability

7.0
CVE-2021-28440

Windows Installer Elevation of Privilege Vulnerability

7.5
CVE-2021-28439

Windows TCP/IP Driver Denial of Service Vulnerability

5.5
CVE-2021-28438

Windows Console Driver Denial of Service Vulnerability

5.5
CVE-2021-28437

Windows Installer Information Disclosure Vulnerability

7.8
CVE-2021-28436

Windows Speech Runtime Elevation of Privilege Vulnerability

5.5
CVE-2021-28435

Windows Event Tracing Information Disclosure Vulnerability

8.8
CVE-2021-28434

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8
CVE-2021-28358

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8
CVE-2021-28357

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8
CVE-2021-28356

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8
CVE-2021-28355

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8
CVE-2021-28354

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8
CVE-2021-28353

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8
CVE-2021-28352

Remote Procedure Call Runtime Remote Code Execution Vulnerability

7.8
CVE-2021-28351

Windows Speech Runtime Elevation of Privilege Vulnerability

7.8
CVE-2021-28350

Windows GDI+ Remote Code Execution Vulnerability

7.8
CVE-2021-28349

Windows GDI+ Remote Code Execution Vulnerability

7.8
CVE-2021-28348

Windows GDI+ Remote Code Execution Vulnerability

7.8
CVE-2021-28347

Windows Speech Runtime Elevation of Privilege Vulnerability

8.8
CVE-2021-28346

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8
CVE-2021-28345

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8
CVE-2021-28344

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8
CVE-2021-28343

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8
CVE-2021-28342

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8
CVE-2021-28341

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8
CVE-2021-28340

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8
CVE-2021-28339

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8
CVE-2021-28338

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8
CVE-2021-28337

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8
CVE-2021-28336

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8
CVE-2021-28335

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8
CVE-2021-28334

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8
CVE-2021-28333

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8
CVE-2021-28332

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8
CVE-2021-28331

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8
CVE-2021-28330

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8
CVE-2021-28329

Remote Procedure Call Runtime Remote Code Execution Vulnerability

6.5
CVE-2021-28328

Windows DNS Information Disclosure Vulnerability

8.8
CVE-2021-28327

Remote Procedure Call Runtime Remote Code Execution Vulnerability

5.5
CVE-2021-28326

Windows AppX Deployment Server Denial of Service Vulnerability

6.5
CVE-2021-28325

Windows SMB Information Disclosure Vulnerability

7.5
CVE-2021-28324

Windows SMB Information Disclosure Vulnerability

6.5
CVE-2021-28323

Windows DNS Information Disclosure Vulnerability

7.8
CVE-2021-28322

Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability

Frequently Asked Questions

How many CVEs affect Microsoft?

Microsoft has 91,472 CVE records in our database, including 2628 critical and 63090 high severity vulnerabilities. 351 of these are listed in CISA's Known Exploited Vulnerabilities catalog.

What are the most severe Microsoft vulnerabilities?

Microsoft has 2628 critical severity (CVSS 9.0+) and 63090 high severity (CVSS 7.0-8.9) vulnerabilities. 351 vulnerabilities are confirmed as actively exploited in the wild.

How can I scan for Microsoft vulnerabilities?

CyberStrike's AI-powered security agents automatically detect vulnerabilities in Microsoft products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.

Detect Microsoft Vulnerabilities

CyberStrike scans your infrastructure for Microsoft vulnerabilities and provides real-time remediation guidance.

Get Started