Microsoft : Vulnerability Statistics
Vulnerability Trends Over Time
| Year | Overflow | Memory Corruption | Sql Injection | XSS | Directory Traversal | File Inclusion | CSRF | XXE | SSRF | Open Redirect | Input Validation |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 2015 | 10 | 271 | 0 | 31 | 2 | 0 | 1 | 2 | 1 | 0 | 0 |
| 2016 | 1 | 177 | 0 | 15 | 0 | 0 | 0 | 1 | 0 | 1 | 0 |
| 2017 | 252 | 191 | 0 | 20 | 0 | 0 | 2 | 3 | 0 | 2 | 60 |
| 2018 | 16 | 184 | 0 | 53 | 1 | 9 | 2 | 7 | 3 | 1 | 37 |
| 2019 | 8 | 135 | 0 | 47 | 4 | 4 | 3 | 8 | 0 | 3 | 46 |
| 2020 | 4 | 91 | 0 | 81 | 1 | 1 | 1 | 0 | 0 | 3 | 29 |
| 2021 | 10 | 36 | 3 | 10 | 1 | 0 | 1 | 0 | 1 | 0 | 3 |
| 2022 | 7 | 7 | 1 | 2 | 1 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2023 | 3 | 10 | 0 | 24 | 1 | 0 | 0 | 1 | 0 | 0 | 1 |
| 2024 | 2 | 6 | 0 | 11 | 1 | 0 | 1 | 0 | 2 | 0 | 2 |
| 2025 | 37 | 46 | 0 | 1 | 1 | 0 | 0 | 0 | 4 | 0 | 0 |
| Total | 350 | 1154 | 4 | 295 | 13 | 14 | 11 | 22 | 11 | 10 | 179 |
Vulnerabilities by impact types
| Year | Code Execution | Bypass | Privilege Escalation | Denial of Service | Information Leak |
|---|---|---|---|---|---|
| 2015 | 325 | 0 | 79 | 228 | 42 |
| 2016 | 229 | 0 | 108 | 128 | 74 |
| 2017 | 280 | 3 | 93 | 57 | 192 |
| 2018 | 292 | 2 | 153 | 34 | 151 |
| 2019 | 333 | 1 | 192 | 49 | 177 |
| 2020 | 343 | 0 | 556 | 48 | 178 |
| 2021 | 310 | 5 | 266 | 53 | 127 |
| 2022 | 312 | 1 | 391 | 65 | 102 |
| 2023 | 358 | 0 | 261 | 115 | 125 |
| 2024 | 417 | 5 | 301 | 108 | 96 |
| 2025 | 159 | 0 | 58 | 29 | 21 |
| Total | 3358 | 17 | 2458 | 914 | 1285 |
This page lists vulnerability statistics for all products of Microsoft. Vulnerability statistics provide a quick overview for security vulnerabilities related to software products of Microsoft. You can view products or security vulnerabilities of Microsoft products.