Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

Microsoft

91,472 known vulnerabilities

1,058
CRITICAL
11,903
HIGH
5,674
MEDIUM
354
LOW

Top Products

windows 8173 windows server 2016 5644 windows server 2019 5279 windows server 2012 4134 windows 10 3588 windows server 2022 3387 windows server 2008 3078 windows 10 1809 2579 windows 10 21h2 2553 windows 10 22h2 2550
18,990 CVEs · Page 248/380
7.8
CVE-2021-24096

Windows Kernel Elevation of Privilege Vulnerability

9.8
CVE-2021-24094

Windows TCP/IP Remote Code Execution Vulnerability

8.8
CVE-2021-24093

Windows Graphics Component Remote Code Execution Vulnerability

7.8
CVE-2021-24092

Microsoft Defender Elevation of Privilege Vulnerability

7.8
CVE-2021-24091

Windows Camera Codec Pack Remote Code Execution Vulnerability

8.8
CVE-2021-24088

Windows Local Spooler Remote Code Execution Vulnerability

7.5
CVE-2021-24086

Windows TCP/IP Denial of Service Vulnerability

6.5
CVE-2021-24085

Microsoft Exchange Server Spoofing Vulnerability

5.5
CVE-2021-24084

Windows Mobile Device Management Information Disclosure Vulnerability

7.8
CVE-2021-24083

Windows Address Book Remote Code Execution Vulnerability

4.3
CVE-2021-24082

Microsoft.PowerShell.Utility Module WDAC Security Feature Bypass Vulnerability

7.8
CVE-2021-24081

Microsoft Windows Codecs Library Remote Code Execution Vulnerability

6.5
CVE-2021-24080

Windows Trust Verification API Denial of Service Vulnerability

5.5
CVE-2021-24079

Windows Backup Engine Information Disclosure Vulnerability

9.8
CVE-2021-24078

Windows DNS Server Remote Code Execution Vulnerability

9.8
CVE-2021-24077

Windows Fax Service Remote Code Execution Vulnerability

5.5
CVE-2021-24076

Microsoft Windows VMSwitch Information Disclosure Vulnerability

6.8
CVE-2021-24075

Microsoft Windows VMSwitch Denial of Service Vulnerability

9.8
CVE-2021-24074

Windows TCP/IP Remote Code Execution Vulnerability

6.5
CVE-2021-24073

Skype for Business and Lync Spoofing Vulnerability

8.8
CVE-2021-24072

Microsoft SharePoint Server Remote Code Execution Vulnerability

5.3
CVE-2021-24071

Microsoft SharePoint Information Disclosure Vulnerability

7.8
CVE-2021-24070

Microsoft Excel Remote Code Execution Vulnerability

7.8
CVE-2021-24069

Microsoft Excel Remote Code Execution Vulnerability

7.8
CVE-2021-24068

Microsoft Excel Remote Code Execution Vulnerability

7.8
CVE-2021-24067

Microsoft Excel Remote Code Execution Vulnerability

8.8
CVE-2021-24066

Microsoft SharePoint Remote Code Execution Vulnerability

7.5
CVE-2021-1734

Windows Remote Procedure Call Information Disclosure Vulnerability

7.8
CVE-2021-1733

Sysinternals PsExec Elevation of Privilege Vulnerability

7.8
CVE-2021-1732 KEV

Windows Win32k Elevation of Privilege Vulnerability

5.5
CVE-2021-1731

PFX Encryption Security Feature Bypass Vulnerability

5.4
CVE-2021-1730

<p>A spoofing vulnerability exists in Microsoft Exchange Server which could result in an attack that would allow a malic

8.8
CVE-2021-1728

System Center Operations Manager Elevation of Privilege Vulnerability

7.8
CVE-2021-1727

Windows Installer Elevation of Privilege Vulnerability

8.0
CVE-2021-1726

Microsoft SharePoint Server Spoofing Vulnerability

6.1
CVE-2021-1724

Microsoft Dynamics Business Central Cross-site Scripting Vulnerability

8.1
CVE-2021-1722

Windows Fax Service Remote Code Execution Vulnerability

6.5
CVE-2021-1721

.NET Core and Visual Studio Denial of Service Vulnerability

7.8
CVE-2021-1698

Windows Win32k Elevation of Privilege Vulnerability

7.0
CVE-2021-1639

Visual Studio Code Remote Code Execution Vulnerability

8.8
CVE-2020-17162

Microsoft Windows Security Feature Bypass Vulnerability

7.8
CVE-2021-21066

Adobe Bridge version 11.0 (and earlier) is affected by an out-of-bounds write vulnerability when parsing TTF files that

7.8
CVE-2021-21065

Adobe Bridge version 11.0 (and earlier) is affected by an out-of-bounds write vulnerability when parsing TTF files that

5.5
CVE-2021-1450

A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client could allow a

7.8
CVE-2021-26677

A local authenticated escalation of privilege vulnerability was discovered in Aruba ClearPass Policy Manager version(s):

7.1
CVE-2020-29075

Acrobat Reader DC versions 2020.013.20066 (and earlier), 2020.001.30010 (and earlier) and 2017.011.30180 (and earlier) a

5.5
CVE-2021-23827

Keybase Desktop Client before 5.6.0 on Windows and macOS, and before 5.6.1 on Linux, allows an attacker to obtain potent

8.8
CVE-2021-21157

Use after free in Web Sockets in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially

9.6
CVE-2021-21155

Heap buffer overflow in Tab Strip in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker who had c

9.6
CVE-2021-21150

Use after free in Downloads in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker who had comprom

Frequently Asked Questions

How many CVEs affect Microsoft?

Microsoft has 91,472 CVE records in our database, including 2628 critical and 63090 high severity vulnerabilities. 351 of these are listed in CISA's Known Exploited Vulnerabilities catalog.

What are the most severe Microsoft vulnerabilities?

Microsoft has 2628 critical severity (CVSS 9.0+) and 63090 high severity (CVSS 7.0-8.9) vulnerabilities. 351 vulnerabilities are confirmed as actively exploited in the wild.

How can I scan for Microsoft vulnerabilities?

CyberStrike's AI-powered security agents automatically detect vulnerabilities in Microsoft products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.

Detect Microsoft Vulnerabilities

CyberStrike scans your infrastructure for Microsoft vulnerabilities and provides real-time remediation guidance.

Get Started