Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

Microsoft

91,472 known vulnerabilities

1,058
CRITICAL
11,903
HIGH
5,674
MEDIUM
354
LOW

Top Products

windows 8173 windows server 2016 5644 windows server 2019 5279 windows server 2012 4134 windows 10 3588 windows server 2022 3387 windows server 2008 3078 windows 10 1809 2579 windows 10 21h2 2553 windows 10 22h2 2550
18,990 CVEs · Page 247/380
9.9
CVE-2021-26867

Windows Hyper-V Remote Code Execution Vulnerability

7.1
CVE-2021-26866

Windows Update Service Elevation of Privilege Vulnerability

8.8
CVE-2021-26865

Windows Container Execution Agent Elevation of Privilege Vulnerability

8.4
CVE-2021-26864

Windows Virtual Registry Provider Elevation of Privilege Vulnerability

7.0
CVE-2021-26863

Windows Win32k Elevation of Privilege Vulnerability

7.0
CVE-2021-26862

Windows Installer Elevation of Privilege Vulnerability

7.8
CVE-2021-26861

Windows Graphics Component Remote Code Execution Vulnerability

7.8
CVE-2021-26860

Windows App-V Overlay Filter Elevation of Privilege Vulnerability

7.7
CVE-2021-26859

Microsoft Power BI Information Disclosure Vulnerability

8.8
CVE-2021-26411 KEV

Internet Explorer Memory Corruption Vulnerability

7.8
CVE-2021-24110

HEVC Video Extensions Remote Code Execution Vulnerability

7.8
CVE-2021-24108

Microsoft Office Remote Code Execution Vulnerability

5.5
CVE-2021-24107

Windows Event Tracing Information Disclosure Vulnerability

4.6
CVE-2021-24104

Microsoft SharePoint Server Spoofing Vulnerability

7.0
CVE-2021-24095

DirectX Elevation of Privilege Vulnerability

7.8
CVE-2021-24090

Windows Error Reporting Elevation of Privilege Vulnerability

7.8
CVE-2021-24089

HEVC Video Extensions Remote Code Execution Vulnerability

7.1
CVE-2021-1729

Windows Update Stack Setup Elevation of Privilege Vulnerability

7.8
CVE-2021-1640

Windows Print Spooler Elevation of Privilege Vulnerability

7.8
CVE-2020-5025

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 db2fm is vulnerable to

7.5
CVE-2020-5024

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauthe

4.4
CVE-2020-4976

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local us

6.5
CVE-2021-21178

Inappropriate implementation in Compositing in Google Chrome on Linux and Windows prior to 89.0.4389.72 allowed a remote

8.1
CVE-2021-21172

Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 89.0.4389.72 allowed a remote at

7.5
CVE-2021-20442

IBM Security Verify Bridge contains hard-coded credentials, such as a password or cryptographic key, which it uses for i

5.9
CVE-2021-20441

IBM Security Verify Bridge uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt hi

5.5
CVE-2021-25252

Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vuln

9.1
CVE-2021-27078

Microsoft Exchange Server Remote Code Execution Vulnerability

7.8
CVE-2021-27065 KEV

Microsoft Exchange Server Remote Code Execution Vulnerability

7.8
CVE-2021-26858 KEV

Microsoft Exchange Server Remote Code Execution Vulnerability

7.8
CVE-2021-26857 KEV

Microsoft Exchange Server Remote Code Execution Vulnerability

9.1
CVE-2021-26855 KEV

Microsoft Exchange Server Remote Code Execution Vulnerability

6.6
CVE-2021-26854

Microsoft Exchange Server Remote Code Execution Vulnerability

9.1
CVE-2021-26412

Microsoft Exchange Server Remote Code Execution Vulnerability

8.1
CVE-2021-26701

.NET Core Remote Code Execution Vulnerability

7.8
CVE-2021-26700

Visual Studio Code npm-script Extension Remote Code Execution Vulnerability

7.8
CVE-2021-25195

Windows PKU2U Elevation of Privilege Vulnerability

5.7
CVE-2021-24114

Microsoft Teams iOS Information Disclosure Vulnerability

5.4
CVE-2021-24113

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

8.1
CVE-2021-24112

.NET Core Remote Code Execution Vulnerability

7.5
CVE-2021-24111

.NET Framework Denial of Service Vulnerability

6.8
CVE-2021-24109

Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

5.5
CVE-2021-24106

Windows DirectX Information Disclosure Vulnerability

8.4
CVE-2021-24105

<p>Depending on configuration of various package managers it is possible for an attacker to insert a malicious package i

7.8
CVE-2021-24103

Windows Event Tracing Elevation of Privilege Vulnerability

7.8
CVE-2021-24102

Windows Event Tracing Elevation of Privilege Vulnerability

6.5
CVE-2021-24101

Microsoft Dataverse Information Disclosure Vulnerability

5.0
CVE-2021-24100

Microsoft Edge for Android Information Disclosure Vulnerability

6.5
CVE-2021-24099

Skype for Business and Lync Denial of Service Vulnerability

5.5
CVE-2021-24098

Windows Console Driver Denial of Service Vulnerability

Frequently Asked Questions

How many CVEs affect Microsoft?

Microsoft has 91,472 CVE records in our database, including 2628 critical and 63090 high severity vulnerabilities. 351 of these are listed in CISA's Known Exploited Vulnerabilities catalog.

What are the most severe Microsoft vulnerabilities?

Microsoft has 2628 critical severity (CVSS 9.0+) and 63090 high severity (CVSS 7.0-8.9) vulnerabilities. 351 vulnerabilities are confirmed as actively exploited in the wild.

How can I scan for Microsoft vulnerabilities?

CyberStrike's AI-powered security agents automatically detect vulnerabilities in Microsoft products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.

Detect Microsoft Vulnerabilities

CyberStrike scans your infrastructure for Microsoft vulnerabilities and provides real-time remediation guidance.

Get Started