Microsoft
91,472 known vulnerabilities
Top Products
IBM Sterling B2B Integrator 6.0.0.0 and 6.0.0.1 reveals sensitive information from a stack trace that could be used in f
A vulnerability in the London Trust Media Private Internet Access (PIA) VPN Client 1.0.2 (build 02363) for Windows could
A vulnerability in the exacqVision Enterprise System Manager (ESM) v5.12.2 application whereby unauthorized privilege es
A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) 5.4.0.1031 when parsing a la
A File Write can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the Ja
In Foxit Reader SDK (ActiveX) Professional 5.4.0.1031, an uninitialized object in IReader_ContentProvider::GetDocEventHa
A stack-based buffer overflow can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) 5.4.0.1031 when pa
A File Write can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the Ja
A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when
A use after free in the TextBox field Validate action in IReader_ContentProvider can occur for specially crafted PDF fil
An authentication bypass vulnerability in the password reset functionality in Zoho ManageEngine ADSelfService Plus befor
IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to a XML External Entity Injection (XXE) attack whe
Insufficient access control in the Intel(R) PROSet/Wireless WiFi Software driver before version 21.10 may allow an unaut
Improper permissions in the installer for the ITE Tech* Consumer Infrared Driver for Windows 10 versions before 5.4.3.0
Adobe Flash Player versions 32.0.0.192 and earlier, 32.0.0.192 and earlier, and 32.0.0.192 and earlier have an use after
An information disclosure vulnerability exists when affected Microsoft browsers improperly handle objects in memory. An
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft brow
An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations.
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An at
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard li
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft brow
A security feature bypass vulnerability exists in Edge that allows for bypassing Mark of the Web Tagging (MOTW). Failing
An elevation of privilege vulnerability exists when the Windows Shell fails to validate folder shortcuts. An attacker wh
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m
An elevation of privilege vulnerability exists in the way that the Windows Network File System (NFS) handles objects in
A security feature bypass vulnerability exists when Windows Secure Kernel Mode fails to properly handle objects in memor
A remote code execution vulnerability exists in the way that comctl32.dll handles objects in memory. The vulnerability c
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An at
A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass t
An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory. To expl
A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerabil
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memo
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memo
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall
A denial of service vulnerability exists in Skype for Business. An attacker who successfully exploited the vulnerability
An elevation of privilege exists in Windows Audio Service. An attacker who successfully exploited the vulnerability coul
An elevation of privilege exists in Windows Audio Service. An attacker who successfully exploited the vulnerability coul
An elevation of privilege exists in Windows Audio Service. An attacker who successfully exploited the vulnerability coul
A denial of service vulnerability exists when Windows improperly handles objects in memory. An attacker who successfully
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi
An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in M
Frequently Asked Questions
How many CVEs affect Microsoft?
Microsoft has 91,472 CVE records in our database, including 2628 critical and 63090 high severity vulnerabilities. 351 of these are listed in CISA's Known Exploited Vulnerabilities catalog.
What are the most severe Microsoft vulnerabilities?
Microsoft has 2628 critical severity (CVSS 9.0+) and 63090 high severity (CVSS 7.0-8.9) vulnerabilities. 351 vulnerabilities are confirmed as actively exploited in the wild.
How can I scan for Microsoft vulnerabilities?
CyberStrike's AI-powered security agents automatically detect vulnerabilities in Microsoft products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.
Detect Microsoft Vulnerabilities
CyberStrike scans your infrastructure for Microsoft vulnerabilities and provides real-time remediation guidance.
Get Started