Microsoft
91,472 known vulnerabilities
Top Products
Windows Hyper-V Remote Code Execution Vulnerability
Windows Update Service Elevation of Privilege Vulnerability
Windows Container Execution Agent Elevation of Privilege Vulnerability
Windows Virtual Registry Provider Elevation of Privilege Vulnerability
Windows Win32k Elevation of Privilege Vulnerability
Windows Installer Elevation of Privilege Vulnerability
Windows Graphics Component Remote Code Execution Vulnerability
Windows App-V Overlay Filter Elevation of Privilege Vulnerability
Microsoft Power BI Information Disclosure Vulnerability
Internet Explorer Memory Corruption Vulnerability
HEVC Video Extensions Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
Windows Event Tracing Information Disclosure Vulnerability
Microsoft SharePoint Server Spoofing Vulnerability
DirectX Elevation of Privilege Vulnerability
Windows Error Reporting Elevation of Privilege Vulnerability
HEVC Video Extensions Remote Code Execution Vulnerability
Windows Update Stack Setup Elevation of Privilege Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 db2fm is vulnerable to
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauthe
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local us
Inappropriate implementation in Compositing in Google Chrome on Linux and Windows prior to 89.0.4389.72 allowed a remote
Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 89.0.4389.72 allowed a remote at
IBM Security Verify Bridge contains hard-coded credentials, such as a password or cryptographic key, which it uses for i
IBM Security Verify Bridge uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt hi
Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vuln
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
.NET Core Remote Code Execution Vulnerability
Visual Studio Code npm-script Extension Remote Code Execution Vulnerability
Windows PKU2U Elevation of Privilege Vulnerability
Microsoft Teams iOS Information Disclosure Vulnerability
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
.NET Core Remote Code Execution Vulnerability
.NET Framework Denial of Service Vulnerability
Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
Windows DirectX Information Disclosure Vulnerability
<p>Depending on configuration of various package managers it is possible for an attacker to insert a malicious package i
Windows Event Tracing Elevation of Privilege Vulnerability
Windows Event Tracing Elevation of Privilege Vulnerability
Microsoft Dataverse Information Disclosure Vulnerability
Microsoft Edge for Android Information Disclosure Vulnerability
Skype for Business and Lync Denial of Service Vulnerability
Windows Console Driver Denial of Service Vulnerability
Frequently Asked Questions
How many CVEs affect Microsoft?
Microsoft has 91,472 CVE records in our database, including 2628 critical and 63090 high severity vulnerabilities. 351 of these are listed in CISA's Known Exploited Vulnerabilities catalog.
What are the most severe Microsoft vulnerabilities?
Microsoft has 2628 critical severity (CVSS 9.0+) and 63090 high severity (CVSS 7.0-8.9) vulnerabilities. 351 vulnerabilities are confirmed as actively exploited in the wild.
How can I scan for Microsoft vulnerabilities?
CyberStrike's AI-powered security agents automatically detect vulnerabilities in Microsoft products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.
Detect Microsoft Vulnerabilities
CyberStrike scans your infrastructure for Microsoft vulnerabilities and provides real-time remediation guidance.
Get Started