Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

Microsoft

91,472 known vulnerabilities

1,058
CRITICAL
11,903
HIGH
5,674
MEDIUM
354
LOW

Top Products

windows 8173 windows server 2016 5644 windows server 2019 5279 windows server 2012 4134 windows 10 3588 windows server 2022 3387 windows server 2008 3078 windows 10 1809 2579 windows 10 21h2 2553 windows 10 22h2 2550
18,990 CVEs · Page 252/380
5.5
CVE-2021-1676

Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability

8.8
CVE-2021-1674

Windows Remote Desktop Protocol Core Security Feature Bypass Vulnerability

8.8
CVE-2021-1673

Remote Procedure Call Runtime Remote Code Execution Vulnerability

5.5
CVE-2021-1672

Windows Projected File System FS Filter Driver Information Disclosure Vulnerability

8.8
CVE-2021-1671

Remote Procedure Call Runtime Remote Code Execution Vulnerability

5.5
CVE-2021-1670

Windows Projected File System FS Filter Driver Information Disclosure Vulnerability

8.8
CVE-2021-1669

Windows Remote Desktop Security Feature Bypass Vulnerability

7.8
CVE-2021-1668

Microsoft DTV-DVD Video Decoder Remote Code Execution Vulnerability

8.8
CVE-2021-1667

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8
CVE-2021-1666

Remote Procedure Call Runtime Remote Code Execution Vulnerability

7.8
CVE-2021-1665

GDI+ Remote Code Execution Vulnerability

8.8
CVE-2021-1664

Remote Procedure Call Runtime Remote Code Execution Vulnerability

5.5
CVE-2021-1663

Windows Projected File System FS Filter Driver Information Disclosure Vulnerability

7.8
CVE-2021-1662

Windows Event Tracing Elevation of Privilege Vulnerability

7.8
CVE-2021-1661

Windows Installer Elevation of Privilege Vulnerability

8.8
CVE-2021-1660

Remote Procedure Call Runtime Remote Code Execution Vulnerability

7.8
CVE-2021-1659

Windows CSC Service Elevation of Privilege Vulnerability

8.8
CVE-2021-1658

Remote Procedure Call Runtime Remote Code Execution Vulnerability

7.8
CVE-2021-1657

Windows Fax Compose Form Remote Code Execution Vulnerability

5.5
CVE-2021-1656

TPM Device Driver Information Disclosure Vulnerability

7.8
CVE-2021-1655

Windows CSC Service Elevation of Privilege Vulnerability

7.8
CVE-2021-1654

Windows CSC Service Elevation of Privilege Vulnerability

7.8
CVE-2021-1653

Windows CSC Service Elevation of Privilege Vulnerability

7.8
CVE-2021-1652

Windows CSC Service Elevation of Privilege Vulnerability

7.8
CVE-2021-1651

Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability

7.8
CVE-2021-1650

Windows Runtime C++ Template Library Elevation of Privilege Vulnerability

7.8
CVE-2021-1649

Active Template Library Elevation of Privilege Vulnerability

7.8
CVE-2021-1648

Microsoft splwow64 Elevation of Privilege Vulnerability

7.8
CVE-2021-1647 KEV

Microsoft Defender Remote Code Execution Vulnerability

6.6
CVE-2021-1646

Windows WLAN Service Elevation of Privilege Vulnerability

5.0
CVE-2021-1645

Windows Docker Information Disclosure Vulnerability

7.8
CVE-2021-1644

HEVC Video Extensions Remote Code Execution Vulnerability

7.8
CVE-2021-1643

HEVC Video Extensions Remote Code Execution Vulnerability

7.8
CVE-2021-1642

Windows AppX Deployment Extensions Elevation of Privilege Vulnerability

4.6
CVE-2021-1641

Microsoft SharePoint Server Spoofing Vulnerability

7.7
CVE-2021-1638

Microsoft is aware of the "Impersonation in the Passkey Entry Protocol" vulnerability. For more information re

5.5
CVE-2021-1637

Windows DNS Query Information Disclosure Vulnerability

8.8
CVE-2021-1636

Microsoft SQL Elevation of Privilege Vulnerability

3.3
CVE-2020-24003

Microsoft Skype through 8.59.0.77 on macOS has the disable-library-validation entitlement, which allows a local process

8.8
CVE-2020-16022

Insufficient policy enforcement in networking in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potent

7.1
CVE-2021-1060

NVIDIA vGPU software contains a vulnerability in the guest kernel mode driver and vGPU plugin, in which an input index i

7.1
CVE-2021-1058

NVIDIA vGPU software contains a vulnerability in the guest kernel mode driver and vGPU plugin, in which an input data si

4.4
CVE-2020-4606

IBM Security Verify Privilege Manager 10.8 is vulnerable to an XML External Entity Injection (XXE) attack when processin

5.3
CVE-2021-1055

NVIDIA GPU Display Driver for Windows, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) ha

5.5
CVE-2021-1054

NVIDIA GPU Display Driver for Windows, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) ha

5.5
CVE-2021-1053

NVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the kernel mode layer (nvlddm

7.8
CVE-2021-1052

NVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the kernel mode layer (nvlddm

8.4
CVE-2021-1051

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkD

5.3
CVE-2018-18689

The Portable Document Format (PDF) specification does not provide any information regarding the concrete procedure of ho

5.3
CVE-2018-18688

The Portable Document Format (PDF) specification does not provide any information regarding the concrete procedure of ho

Frequently Asked Questions

How many CVEs affect Microsoft?

Microsoft has 91,472 CVE records in our database, including 2628 critical and 63090 high severity vulnerabilities. 351 of these are listed in CISA's Known Exploited Vulnerabilities catalog.

What are the most severe Microsoft vulnerabilities?

Microsoft has 2628 critical severity (CVSS 9.0+) and 63090 high severity (CVSS 7.0-8.9) vulnerabilities. 351 vulnerabilities are confirmed as actively exploited in the wild.

How can I scan for Microsoft vulnerabilities?

CyberStrike's AI-powered security agents automatically detect vulnerabilities in Microsoft products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.

Detect Microsoft Vulnerabilities

CyberStrike scans your infrastructure for Microsoft vulnerabilities and provides real-time remediation guidance.

Get Started