Microsoft
91,472 known vulnerabilities
Top Products
Windows Kernel Elevation of Privilege Vulnerability
Windows TCP/IP Remote Code Execution Vulnerability
Windows Graphics Component Remote Code Execution Vulnerability
Microsoft Defender Elevation of Privilege Vulnerability
Windows Camera Codec Pack Remote Code Execution Vulnerability
Windows Local Spooler Remote Code Execution Vulnerability
Windows TCP/IP Denial of Service Vulnerability
Microsoft Exchange Server Spoofing Vulnerability
Windows Mobile Device Management Information Disclosure Vulnerability
Windows Address Book Remote Code Execution Vulnerability
Microsoft.PowerShell.Utility Module WDAC Security Feature Bypass Vulnerability
Microsoft Windows Codecs Library Remote Code Execution Vulnerability
Windows Trust Verification API Denial of Service Vulnerability
Windows Backup Engine Information Disclosure Vulnerability
Windows DNS Server Remote Code Execution Vulnerability
Windows Fax Service Remote Code Execution Vulnerability
Microsoft Windows VMSwitch Information Disclosure Vulnerability
Microsoft Windows VMSwitch Denial of Service Vulnerability
Windows TCP/IP Remote Code Execution Vulnerability
Skype for Business and Lync Spoofing Vulnerability
Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft SharePoint Information Disclosure Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
Microsoft SharePoint Remote Code Execution Vulnerability
Windows Remote Procedure Call Information Disclosure Vulnerability
Sysinternals PsExec Elevation of Privilege Vulnerability
Windows Win32k Elevation of Privilege Vulnerability
PFX Encryption Security Feature Bypass Vulnerability
<p>A spoofing vulnerability exists in Microsoft Exchange Server which could result in an attack that would allow a malic
System Center Operations Manager Elevation of Privilege Vulnerability
Windows Installer Elevation of Privilege Vulnerability
Microsoft SharePoint Server Spoofing Vulnerability
Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
Windows Fax Service Remote Code Execution Vulnerability
.NET Core and Visual Studio Denial of Service Vulnerability
Windows Win32k Elevation of Privilege Vulnerability
Visual Studio Code Remote Code Execution Vulnerability
Microsoft Windows Security Feature Bypass Vulnerability
Adobe Bridge version 11.0 (and earlier) is affected by an out-of-bounds write vulnerability when parsing TTF files that
Adobe Bridge version 11.0 (and earlier) is affected by an out-of-bounds write vulnerability when parsing TTF files that
A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client could allow a
A local authenticated escalation of privilege vulnerability was discovered in Aruba ClearPass Policy Manager version(s):
Acrobat Reader DC versions 2020.013.20066 (and earlier), 2020.001.30010 (and earlier) and 2017.011.30180 (and earlier) a
Keybase Desktop Client before 5.6.0 on Windows and macOS, and before 5.6.1 on Linux, allows an attacker to obtain potent
Use after free in Web Sockets in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially
Heap buffer overflow in Tab Strip in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker who had c
Use after free in Downloads in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker who had comprom
Frequently Asked Questions
How many CVEs affect Microsoft?
Microsoft has 91,472 CVE records in our database, including 2628 critical and 63090 high severity vulnerabilities. 351 of these are listed in CISA's Known Exploited Vulnerabilities catalog.
What are the most severe Microsoft vulnerabilities?
Microsoft has 2628 critical severity (CVSS 9.0+) and 63090 high severity (CVSS 7.0-8.9) vulnerabilities. 351 vulnerabilities are confirmed as actively exploited in the wild.
How can I scan for Microsoft vulnerabilities?
CyberStrike's AI-powered security agents automatically detect vulnerabilities in Microsoft products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.
Detect Microsoft Vulnerabilities
CyberStrike scans your infrastructure for Microsoft vulnerabilities and provides real-time remediation guidance.
Get Started