Microsoft
91,472 known vulnerabilities
Top Products
Adobe Animate CC versions 19.2.1 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful
Scanguard through 2019-11-12 on Windows has Insecure Permissions for the installation directory, leading to privilege es
NVIDIA GeForce Experience (prior to 3.20.1) and Windows GPU Display Driver (all versions) contains a vulnerability in th
A security feature bypass vulnerability exists in Microsoft Office software by not enforcing macro settings on an Excel
A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly
A security feature bypass vulnerability exists in the way that Office Click-to-Run (C2R) components handle a specially c
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obje
A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications handlers corr
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka
A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications handlers corr
An information disclosure vulnerability exists in Microsoft SharePoint when an attacker uploads a specially crafted file
A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a vic
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Wi
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m
An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory,
An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory,
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Wi
An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory,
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle o
An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory,
An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'Di
A remote code execution vulnerability exists when Windows Media Foundation improperly parses specially crafted QuickTime
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft
An elevation of privilege vulnerability exists when Visual Studio fails to properly validate hardlinks while extracting
A security feature bypass vulnerability exists when Windows Netlogon improperly handles a secure communications channel,
An elevation of privilege vulnerability exists in the way that the StartTileData.dll handles file creation in protected
An elevation of privilege vulnerability exists in the way that the iphlpsvc.dll handles file creation allowing for a fil
An elevation of privilege vulnerability exists in the way that the dssvc.dll handles file creation allowing for a file o
A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly
An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka 'W
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations,
An elevation of privilege vulnerability exists due to a race condition in Windows Subsystem for Linux, aka 'Windows Subs
An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain
A security feature bypass vulnerability exists when Microsoft Edge improperly handles extension requests and fails to re
An information disclosure vulnerability exists in Windows Adobe Type Manager Font Driver (ATMFD.dll) when it fails to pr
An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'Di
An information disclosure vulnerability exists when the Windows Remote Procedure Call (RPC) runtime improperly initializ
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in
An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory,
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,
An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows
An information disclosure vulnerability exists in Microsoft Office software when the software fails to properly handle o
A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in
Frequently Asked Questions
How many CVEs affect Microsoft?
Microsoft has 91,472 CVE records in our database, including 2628 critical and 63090 high severity vulnerabilities. 351 of these are listed in CISA's Known Exploited Vulnerabilities catalog.
What are the most severe Microsoft vulnerabilities?
Microsoft has 2628 critical severity (CVSS 9.0+) and 63090 high severity (CVSS 7.0-8.9) vulnerabilities. 351 vulnerabilities are confirmed as actively exploited in the wild.
How can I scan for Microsoft vulnerabilities?
CyberStrike's AI-powered security agents automatically detect vulnerabilities in Microsoft products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.
Detect Microsoft Vulnerabilities
CyberStrike scans your infrastructure for Microsoft vulnerabilities and provides real-time remediation guidance.
Get Started