Microsoft
91,472 known vulnerabilities
Top Products
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windo
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka '
An information disclosure vulnerability exists in the way Windows Error Reporting (WER) handles objects in memory, aka '
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka '
An information disclosure vulnerability exists in the way Windows Error Reporting (WER) handles objects in memory, aka '
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScrip
A security feature bypass vulnerability exists when Windows Host Guardian Service improperly handles hashes recorded and
An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation
An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles fi
An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) IIS modul
An elevation of privilege vulnerability exists when Windows Modules Installer Service improperly handles class object me
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle o
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle o
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle o
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka '
A denial of service vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file o
An information disclosure vulnerability exists in the way that Microsoft Edge handles cross-origin requests, aka 'Micros
A security feature bypass vulnerability exists when Windows Kernel fails to properly sanitize certain parameters.To expl
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Window
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windo
An elevation of privilege vulnerability exists when Windows Error Reporting improperly handles objects in memory.To expl
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windo
An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Fo
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windo
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScrip
A security feature bypass vulnerability exists in Microsoft Outlook when Office fails to enforce security settings confi
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obje
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obje
A remote code execution vulnerability exists when Microsoft Word for Android fails to properly handle certain files.To e
An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.To exploit thi
A spoofing vulnerability exists when theMicrosoft Edge (Chromium-based) in IE Mode improperly handles specific redirects
A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft
An information disclosure vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windo
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScrip
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScrip
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScrip
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScrip
An elevation of privilege vulnerability exists when an OLE Automation component improperly handles memory.To exploit thi
An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in
An elevation of privilege vulnerability exists in the way that the Windows Network List Service handles objects in memor
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle o
An information disclosure vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol
An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handle
An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard
An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard
Frequently Asked Questions
How many CVEs affect Microsoft?
Microsoft has 91,472 CVE records in our database, including 2628 critical and 63090 high severity vulnerabilities. 351 of these are listed in CISA's Known Exploited Vulnerabilities catalog.
What are the most severe Microsoft vulnerabilities?
Microsoft has 2628 critical severity (CVSS 9.0+) and 63090 high severity (CVSS 7.0-8.9) vulnerabilities. 351 vulnerabilities are confirmed as actively exploited in the wild.
How can I scan for Microsoft vulnerabilities?
CyberStrike's AI-powered security agents automatically detect vulnerabilities in Microsoft products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.
Detect Microsoft Vulnerabilities
CyberStrike scans your infrastructure for Microsoft vulnerabilities and provides real-time remediation guidance.
Get Started