Microsoft
91,472 known vulnerabilities
Top Products
An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Windows
A remote code execution vulnerability exists when Microsoft Access fails to properly handle objects in memory, aka "Micr
A remote code execution vulnerability exists when Skype for Business and Microsoft Lync clients fail to properly sanitiz
A tampering vulnerability exists when Microsoft Outlook does not properly handle specific attachment types when renderin
A denial of service vulnerability exists when Windows improperly handles objects in memory, aka "Windows Denial of Servi
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "
A security feature bypass vulnerability exists when Microsoft WordPad improperly handles embedded OLE objects, aka "Word
A command injection vulnerability exists in the Microsoft Wireless Display Adapter (MWDA) when the Microsoft Wireless Di
An information disclosure vulnerability exists in Windows Mail Client when a message is opened, aka "Windows Mail Client
A denial of service vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it fails to properly handle
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft E
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially c
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory,
An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft brow
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi
An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft brow
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft brow
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi
A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka ".N
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory,
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle o
A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle obj
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft E
A spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content, aka "Microsoft Edge Spoofi
A security feature bypass vulnerability exists in the Microsoft Chakra scripting engine that allows Control Flow Guard (
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft E
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft E
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft E
A Remote Code Execution vulnerability exists in .NET software when the software fails to check the source markup of a fi
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet
A security feature bypass vulnerability exists when Skype for Business or Lync do not properly parse UNC path links shar
A Tampering vulnerability exists when Microsoft Macro Assembler improperly validates code, aka "Microsoft Macro Assemble
A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code int
A denial of service vulnerability exists when Windows improperly handles File Transfer Protocol (FTP) connections, aka "
An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privileg
A remote code execution vulnerability exists in Visual Studio software when the software does not check the source marku
A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated,
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft E
A security feature bypass vulnerability exists when Microsoft Internet Explorer improperly handles requests involving UN
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5 and 11.1 binaries load shared librarie
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10,1, 10.5 and 11.1 could allow a local user to e
Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successful exploita
Adobe Flash Player versions 29.0.0.171 and earlier have an Out-of-bounds read vulnerability. Successful exploitation cou
Frequently Asked Questions
How many CVEs affect Microsoft?
Microsoft has 91,472 CVE records in our database, including 2628 critical and 63090 high severity vulnerabilities. 351 of these are listed in CISA's Known Exploited Vulnerabilities catalog.
What are the most severe Microsoft vulnerabilities?
Microsoft has 2628 critical severity (CVSS 9.0+) and 63090 high severity (CVSS 7.0-8.9) vulnerabilities. 351 vulnerabilities are confirmed as actively exploited in the wild.
How can I scan for Microsoft vulnerabilities?
CyberStrike's AI-powered security agents automatically detect vulnerabilities in Microsoft products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.
Detect Microsoft Vulnerabilities
CyberStrike scans your infrastructure for Microsoft vulnerabilities and provides real-time remediation guidance.
Get Started