Where
AND
-Infinity
0

Vendor Risk Score

See how microsoft compares to other vendors in security performance

View Risk Score →

Software

microsoft windows server 2016
4212
microsoft windows server 2019
4134
microsoft windows
3374
microsoft windows 10
3142
microsoft windows server 2022
3060
microsoft windows operating system
2732
microsoft windows 11
2202
microsoft windows server 2012 r2
2137
microsoft windows server
1960
microsoft windows server 2025
1906
microsoft windows server 2012
1792
microsoft edge
1569
microsoft windows 7
1557
microsoft windows 10 1809
1542
microsoft windows 10 21h2
1502
microsoft windows 10 22h2
1493
microsoft windows 11 24h2
1449
microsoft windows 10 1607
1327
microsoft edge (chromium-based)
1249
microsoft windows 11 23h2
1243
microsoft windows server 2022 23h2
1227
microsoft windows server 2022, 23h2 edition
1029
microsoft windows rt
1013
microsoft windows server 2008
1007
microsoft windows 11 25h2
1004
microsoft windows 8.1
820
microsoft windows 11 26h1
798
microsoft windows 11 22h2
746
microsoft windows server 2008 r2
643
microsoft edge beta
633
microsoft windows 10 1507
617
microsoft 365 apps for enterprise
554
microsoft windows server 2008 r2 for itanium-based systems
545
microsoft 365 apps
497
microsoft windows vista
446
microsoft office
443
microsoft windows rt 8.1
433
microsoft office ltsc 2021 for 64-bit editions
426
microsoft office ltsc 2021 for 32-bit editions
425
microsoft windows xp
425
microsoft office 2019 for 32-bit editions
423
microsoft office 2019 for 64-bit editions
423
microsoft office ltsc 2024 for 32-bit editions
384
microsoft office ltsc 2024 for 64-bit editions
384
microsoft office ltsc for mac 2021
341
microsoft windows 11 21h2
328
microsoft office ltsc for mac 2024
316
microsoft cbl2 kernel 5.15.186.1-1
303
microsoft office long term servicing channel
295
microsoft excel
225
Severity
7.8
Buffer Overflow
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

1 / 2
Source: Microsoft
First published (updated )
Severity
7.8
Buffer Overflow
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

1 / 2
Source: Microsoft
First published (updated )
Severity
7.8
Buffer Overflow
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

1 / 2
Source: Microsoft
First published (updated )
Severity
7.8
Buffer Overflow
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

1 / 2
Source: Microsoft
First published (updated )
Severity
7.8
Buffer Overflow
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

1 / 2
Source: Microsoft
First published (updated )
Severity
7.8
Buffer Overflow
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

1 / 2
Source: Microsoft
First published (updated )
Severity
7.8
Buffer Overflow
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

1 / 2
Source: Microsoft
First published (updated )
Severity
7.8
Buffer Overflow
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

1 / 2
Source: Microsoft
First published (updated )
Severity
7.8
Buffer Overflow
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

1 / 2
Source: Microsoft
First published (updated )
Severity
7.8
Buffer Overflow
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

1 / 2
Source: Microsoft
First published (updated )
Severity
7.8
Buffer Overflow
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

1 / 2
Source: Microsoft
First published (updated )
Severity
7.8
Buffer Overflow
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

1 / 2
Source: Microsoft
First published (updated )
Severity
7.8
Buffer Overflow
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

1 / 2
Source: Microsoft
First published (updated )
Severity
7.8
Buffer Overflow
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

1 / 2
Source: Microsoft
First published (updated )
Severity
7.8
Input Validation, Buffer Overflow
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

1 / 2
Source: Microsoft
First published (updated )
Severity
7.8
Integer Overflow
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

1 / 2
Source: Microsoft
First published (updated )
Severity
7.8
Buffer Overflow
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

1 / 2
Source: Microsoft
First published (updated )
Severity
7.8
Buffer Overflow
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

1 / 2
Source: Microsoft
First published (updated )
Severity
8.1
Use After Free
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

1 / 2
Source: Microsoft
First published (updated )
Severity
7.4
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C

Authentication bypass by capture-replay in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to perform spoofing over a network.

1 / 2
Source: Microsoft
First published (updated )
Severity
7.8
Buffer Overflow
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft Graphics Component Elevation of Privilege Vulnerability

1 / 2
Source: Microsoft
First published (updated )
Severity
8.1
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft Failover Cluster Remote Code Execution Vulnerability

1 / 2
Source: Microsoft
First published (updated )
Severity
8.1
Use After Free
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.

1 / 2
Source: Microsoft
First published (updated )
Severity
7.5
Buffer Overflow
AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

Graphics Kernel Remote Code Execution Vulnerability

1 / 2
Source: Microsoft
First published (updated )
Severity
7
Use After Free
AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

1 / 2
Source: Microsoft
First published (updated )
Severity
7.5
Null Pointer Dereference
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Invalid Pointer Dereference in CMP Server via Crafted protectionAlg

1 / 5
Source: Microsoft
First published (updated )
Severity
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Issue summary: When OpenSSL processes QUIC traffic from a peer that repeatedly sends ack-eliciting packets while not acknowledging ACK-only responses, the QUIC stack can retain ACK-only packet metadata for the lifetime of the connection.

1 / 5
Source: Launchpad
First published (updated )
Severity
7.5
Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Heap Buffer Overflow in CMS Key Unwrapping

1 / 5
Source: Microsoft
First published (updated )
Severity
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Excessive Memory Use Buffering DTLS Records for a Future Epoch

1 / 5
Source: Microsoft
First published (updated )
Severity
7.8
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

1 / 2
Source: Microsoft
First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203