Microsoft vulnerabilities

16,564 CVEs affecting Microsoft products, 404 known to be exploited (CISA KEV), with EPSS scores. Most affected: Windows Server 2016, Windows Server 2019, Windows Server 2012, Windows Server 2022, Windows Server 2008.

• Windows Server 2016: 5,654 CVEs
• Windows Server 2019: 5,547 CVEs
• Windows Server 2012: 4,645 CVEs
• Windows Server 2022: 3,973 CVEs
• Windows Server 2008: 3,552 CVEs
• Windows 10 1809: 3,126 CVEs
• Windows 10 21h2: 3,069 CVEs
• Windows 10 22h2: 3,068 CVEs
• Windows 10: 2,976 CVEs
• Windows 10 1607: 2,696 CVEs