Microsoft
91,472 known vulnerabilities
Top Products
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.2 uses weaker than expected cryptographic algorithms
IBM DB2 Accessories Suite for Linux, UNIX, and Windows, DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.
A CWE-428 Windows Unquoted Search Path vulnerability exists in EcoStruxure Building Operation Enterprise Server installe
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a buffer overflo
A vulnerability in Trend Micro Apex One could allow an unprivileged user to abuse the product installer to reinstall the
Trend Micro Security 2020 (Consumer) contains a vulnerability in the installer package that could be exploited by placin
Trend Micro Security 2020 (Consumer) contains a vulnerability in the installer package that could be exploited by placin
Trend Micro Security 2020 (Consumer) contains a vulnerability in the installer package that could be exploited by placin
Incorrect default permissions in the Intel(R) RealSense(TM) D400 Series Dynamic Calibration Tool before version 2.11, ma
Improper access control in Installer for Intel(R) DAL SDK before version 2.1 for Windows may allow an authenticated user
Improper file permissions in the installer for the Intel(R) Media SDK for Windows before version 2019 R1 may allow an au
NVIDIA GeForce NOW application software on Windows, all versions prior to 2.0.25.119, contains a vulnerability in its op
Windows Spoofing Vulnerability
Azure DevOps Server and Team Foundation Services Spoofing Vulnerability
Windows Camera Codec Information Disclosure Vulnerability
HEVC Video Extensions Remote Code Execution Vulnerability
HEVC Video Extensions Remote Code Execution Vulnerability
HEVC Video Extensions Remote Code Execution Vulnerability
HEVC Video Extensions Remote Code Execution Vulnerability
HEVC Video Extensions Remote Code Execution Vulnerability
AV1 Video Extension Remote Code Execution Vulnerability
Visual Studio Code JSHint Extension Remote Code Execution Vulnerability
WebP Image Extensions Information Disclosure Vulnerability
HEIF Image Extensions Remote Code Execution Vulnerability
Visual Studio Tampering Vulnerability
Microsoft Teams Remote Code Execution Vulnerability
Microsoft Defender for Endpoint Security Feature Bypass Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Kernel Local Elevation of Privilege Vulnerability
Raw Image Extension Remote Code Execution Vulnerability
Microsoft Exchange Server Denial of Service Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
Raw Image Extension Remote Code Execution Vulnerability
Microsoft Raw Image Extension Information Disclosure Vulnerability
Raw Image Extension Remote Code Execution Vulnerability
Raw Image Extension Remote Code Execution Vulnerability
Windows Update Stack Elevation of Privilege Vulnerability
Windows Update Orchestrator Service Elevation of Privilege Vulnerability
Windows USO Core Worker Elevation of Privilege Vulnerability
Windows Update Orchestrator Service Elevation of Privilege Vulnerability
Windows Update Orchestrator Service Elevation of Privilege Vulnerability
Windows Delivery Optimization Information Disclosure Vulnerability
Windows Update Medic Service Elevation of Privilege Vulnerability
Windows NDIS Information Disclosure Vulnerability
Windows GDI+ Remote Code Execution Vulnerability
Microsoft Excel Security Feature Bypass Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
Frequently Asked Questions
How many CVEs affect Microsoft?
Microsoft has 91,472 CVE records in our database, including 2628 critical and 63090 high severity vulnerabilities. 351 of these are listed in CISA's Known Exploited Vulnerabilities catalog.
What are the most severe Microsoft vulnerabilities?
Microsoft has 2628 critical severity (CVSS 9.0+) and 63090 high severity (CVSS 7.0-8.9) vulnerabilities. 351 vulnerabilities are confirmed as actively exploited in the wild.
How can I scan for Microsoft vulnerabilities?
CyberStrike's AI-powered security agents automatically detect vulnerabilities in Microsoft products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.
Detect Microsoft Vulnerabilities
CyberStrike scans your infrastructure for Microsoft vulnerabilities and provides real-time remediation guidance.
Get Started