Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

Microsoft

91,472 known vulnerabilities

1,058
CRITICAL
11,903
HIGH
5,674
MEDIUM
354
LOW

Top Products

windows 8173 windows server 2016 5644 windows server 2019 5279 windows server 2012 4134 windows 10 3588 windows server 2022 3387 windows server 2008 3078 windows 10 1809 2579 windows 10 21h2 2553 windows 10 22h2 2550
18,990 CVEs · Page 254/380
5.5
CVE-2020-17138

Windows Error Reporting Information Disclosure Vulnerability

7.8
CVE-2020-17137

DirectX Graphics Kernel Elevation of Privilege Vulnerability

7.8
CVE-2020-17136

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

6.4
CVE-2020-17135

Azure DevOps Server Spoofing Vulnerability

7.8
CVE-2020-17134

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

6.5
CVE-2020-17133

Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability

9.1
CVE-2020-17132

Microsoft Exchange Remote Code Execution Vulnerability

4.2
CVE-2020-17131

Chakra Scripting Engine Memory Corruption Vulnerability

6.5
CVE-2020-17130

Microsoft Excel Security Feature Bypass Vulnerability

7.8
CVE-2020-17129

Microsoft Excel Remote Code Execution Vulnerability

7.8
CVE-2020-17128

Microsoft Excel Remote Code Execution Vulnerability

7.8
CVE-2020-17127

Microsoft Excel Remote Code Execution Vulnerability

5.5
CVE-2020-17126

Microsoft Excel Information Disclosure Vulnerability

7.8
CVE-2020-17125

Microsoft Excel Remote Code Execution Vulnerability

7.8
CVE-2020-17124

Microsoft PowerPoint Remote Code Execution Vulnerability

7.8
CVE-2020-17123

Microsoft Excel Remote Code Execution Vulnerability

7.8
CVE-2020-17122

Microsoft Excel Remote Code Execution Vulnerability

8.8
CVE-2020-17121

Microsoft SharePoint Remote Code Execution Vulnerability

5.3
CVE-2020-17120

Microsoft SharePoint Information Disclosure Vulnerability

6.5
CVE-2020-17119

Microsoft Outlook Information Disclosure Vulnerability

8.1
CVE-2020-17118

Microsoft SharePoint Remote Code Execution Vulnerability

6.6
CVE-2020-17117

Microsoft Exchange Remote Code Execution Vulnerability

8.0
CVE-2020-17115

Microsoft SharePoint Server Spoofing Vulnerability

7.0
CVE-2020-17103

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

6.8
CVE-2020-17099

Windows Lock Screen Security Feature Bypass Vulnerability

5.5
CVE-2020-17098

Windows GDI+ Information Disclosure Vulnerability

3.3
CVE-2020-17097

Windows Digital Media Receiver Elevation of Privilege Vulnerability

7.5
CVE-2020-17096

Windows NTFS Remote Code Execution Vulnerability

8.5
CVE-2020-17095

Windows Hyper-V Remote Code Execution Vulnerability

5.5
CVE-2020-17094

Windows Error Reporting Information Disclosure Vulnerability

7.8
CVE-2020-17092

Windows Network Connections Service Elevation of Privilege Vulnerability

7.1
CVE-2020-17089

Microsoft SharePoint Elevation of Privilege Vulnerability

7.4
CVE-2020-17002

Azure SDK for C Security Feature Bypass Vulnerability

6.5
CVE-2020-16996

Kerberos Security Feature Bypass Vulnerability

7.4
CVE-2020-16971

Azure SDK for Java Security Feature Bypass Vulnerability

7.8
CVE-2020-16964

Windows Backup Engine Elevation of Privilege Vulnerability

7.8
CVE-2020-16963

Windows Backup Engine Elevation of Privilege Vulnerability

7.8
CVE-2020-16962

Windows Backup Engine Elevation of Privilege Vulnerability

7.8
CVE-2020-16961

Windows Backup Engine Elevation of Privilege Vulnerability

7.8
CVE-2020-16960

Windows Backup Engine Elevation of Privilege Vulnerability

7.8
CVE-2020-16959

Windows Backup Engine Elevation of Privilege Vulnerability

7.8
CVE-2020-16958

Windows Backup Engine Elevation of Privilege Vulnerability

7.8
CVE-2020-2049

A local privilege escalation vulnerability exists in Palo Alto Networks Cortex XDR Agent on the Windows platform that al

6.5
CVE-2020-26966

Searching for a single word from the address bar caused an mDNS request to be sent on the local network searching for a

5.7
CVE-2020-10146

The Microsoft Teams online service contains a stored cross-site scripting vulnerability in the displayName parameter tha

7.3
CVE-2020-26233

Git Credential Manager Core (GCM Core) is a secure Git credential helper built on .NET Core that runs on Windows and mac

5.3
CVE-2020-26235

In Rust time crate from version 0.2.7 and before version 0.2.23, unix-like operating systems may segfault due to derefer

9.1
CVE-2020-4006 KEV

VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector address have a command i

5.3
CVE-2020-4771

IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.10.and 7.1.0.000 through 7.1.11 could allow a remote attack

7.8
CVE-2020-28421

CA Unified Infrastructure Management 20.1 and earlier contains a vulnerability in the robot (controller) component that

Frequently Asked Questions

How many CVEs affect Microsoft?

Microsoft has 91,472 CVE records in our database, including 2628 critical and 63090 high severity vulnerabilities. 351 of these are listed in CISA's Known Exploited Vulnerabilities catalog.

What are the most severe Microsoft vulnerabilities?

Microsoft has 2628 critical severity (CVSS 9.0+) and 63090 high severity (CVSS 7.0-8.9) vulnerabilities. 351 vulnerabilities are confirmed as actively exploited in the wild.

How can I scan for Microsoft vulnerabilities?

CyberStrike's AI-powered security agents automatically detect vulnerabilities in Microsoft products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.

Detect Microsoft Vulnerabilities

CyberStrike scans your infrastructure for Microsoft vulnerabilities and provides real-time remediation guidance.

Get Started