# Microsoft CVEs by CVSS Score

The CVSS score distribution of the CVEs with a Microsoft product in their product list.

Source: https://docs.deepinfo.com/reference/vulnerability/cvss-score-stats/examples/vendor-microsoft/

Last updated: 2026-09-24

---
`GET https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-stats-by-cvss-scores?vendor=microsoft`

The CVSS score distribution of the CVEs with a Microsoft product in their product list.

Example 2 of 5 · [CVSS Score Stats Examples](/reference/vulnerability/cvss-score-stats/examples/) · endpoint: [CVSS Score Stats](/reference/vulnerability/cvss-score-stats/)

Tags: `param` `vendor` · `value` `microsoft`

`vendor` alone narrows the counts to the CVEs whose product list includes a product of that vendor.

## What to Notice

`cve_count` is 26,878; the most common score is 7.8 (6,174 CVEs).

## Request

| Parameter | In | Value |
|---|---|---|
| `vendor` | query | `microsoft` |

```bash
curl 'https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-stats-by-cvss-scores?vendor=microsoft' \
  -H 'apikey: YOUR_API_KEY' \
  -H 'Accept: application/json'
```

## Response

### 200 · OK

`Content-Type: application/json` · `ratelimit-limit: 1` · `ratelimit-remaining: 0` · `ratelimit-reset: 1` · `x-ratelimit-limit-second: 1` · `x-ratelimit-remaining-second: 0` · `deepinfo-request-id: 5f0c6a8e-1b2d-4c3e-9f4a-7b8c9d0e1f2a`

```json
{
  "vendor": "microsoft",
  "product": "",
  "version": "",
  "cve_count": 26878,
  "cve_count_by_score": [
    {
      "score": 7.8,
      "cve_count": 6174
    },
    {
      "score": 8.8,
      "cve_count": 3040
    },
    {
      "score": 7.5,
      "cve_count": 2503
    },
    {
      "score": 5.5,
      "cve_count": 1862
    },
    {
      "score": 9.3,
      "cve_count": 1828
    },
    {
      "score": 6.5,
      "cve_count": 1293
    },
    {
      "score": 9.8,
      "cve_count": 1134
    },
    {
      "score": 4.3,
      "cve_count": 932
    },
    {
      "score": 10.0,
      "cve_count": 854
    },
    {
      "score": 5.0,
      "cve_count": 741
    },
    {
      "score": 7.0,
      "cve_count": 687
    },
    {
      "score": 5.4,
      "cve_count": 450
    },
    {
      "score": 7.2,
      "cve_count": 448
    },
    {
      "score": 6.8,
      "cve_count": 372
    },
    {
      "score": 8.1,
      "cve_count": 334
    },
    {
      "score": 5.3,
      "cve_count": 301
    },
    {
      "score": 7.1,
      "cve_count": 292
    },
    {
      "score": 6.1,
      "cve_count": 226
    },
    {
      "score": 3.3,
      "cve_count": 212
    },
    {
      "score": 7.3,
      "cve_count": 192
    },
    {
      "score": 8.3,
      "cve_count": 166
    },
    {
      "score": 4.7,
      "cve_count": 157
    },
    {
      "score": 7.6,
      "cve_count": 138
    },
    {
      "score": 8.0,
      "cve_count": 138
    },
    {
      "score": 4.6,
      "cve_count": 134
    },
    {
      "score": 6.7,
      "cve_count": 125
    },
    {
      "score": 9.6,
      "cve_count": 118
    },
    {
      "score": 5.9,
      "cve_count": 111
    },
    {
      "score": 4.9,
      "cve_count": 103
    },
    {
      "score": 2.1,
      "cve_count": 99
    },
    {
      "score": 8.4,
      "cve_count": 97
    },
    {
      "score": 6.6,
      "cve_count": 93
    },
    {
      "score": 5.1,
      "cve_count": 91
    },
    {
      "score": 4.4,
      "cve_count": 87
    },
    {
      "score": 2.6,
      "cve_count": 85
    },
    {
      "score": 6.9,
      "cve_count": 81
    },
    {
      "score": 6.2,
      "cve_count": 77
    },
    {
      "score": 6.4,
      "cve_count": 74
    },
    {
      "score": 9.1,
      "cve_count": 67
    },
    {
      "score": 8.2,
      "cve_count": 64
    },
    {
      "score": 9.0,
      "cve_count": 64
    },
    {
      "score": 4.2,
      "cve_count": 63
    },
    {
      "score": 3.1,
      "cve_count": 60
    },
    {
      "score": 6.3,
      "cve_count": 58
    },
    {
      "score": 5.7,
      "cve_count": 57
    },
    {
      "score": 8.6,
      "cve_count": 57
    },
    {
      "score": 7.4,
      "cve_count": 56
    },
    {
      "score": 5.8,
      "cve_count": 52
    },
    {
      "score": 8.5,
      "cve_count": 52
    },
    {
      "score": 9.9,
      "cve_count": 46
    },
    {
      "score": 4.0,
      "cve_count": 39
    },
    {
      "score": 3.5,
      "cve_count": 38
    },
    {
      "score": 7.7,
      "cve_count": 32
    },
    {
      "score": 4.8,
      "cve_count": 30
    },
    {
      "score": 5.6,
      "cve_count": 30
    },
    {
      "score": 8.7,
      "cve_count": 23
    },
    {
      "score": 6.0,
      "cve_count": 17
    },
    {
      "score": 7.9,
      "cve_count": 14
    },
    {
      "score": 1.9,
      "cve_count": 13
    },
    {
      "score": 3.7,
      "cve_count": 11
    },
    {
      "score": 4.1,
      "cve_count": 10
    },
    {
      "score": 1.8,
      "cve_count": 9
    },
    {
      "score": 3.6,
      "cve_count": 9
    },
    {
      "score": 4.5,
      "cve_count": 9
    },
    {
      "score": 2.3,
      "cve_count": 7
    },
    {
      "score": 2.8,
      "cve_count": 6
    },
    {
      "score": 2.5,
      "cve_count": 5
    },
    {
      "score": 9.4,
      "cve_count": 5
    },
    {
      "score": 2.7,
      "cve_count": 4
    },
    {
      "score": 2.4,
      "cve_count": 3
    },
    {
      "score": 3.0,
      "cve_count": 3
    },
    {
      "score": 3.9,
      "cve_count": 3
    },
    {
      "score": 5.2,
      "cve_count": 3
    },
    {
      "score": 3.4,
      "cve_count": 2
    },
    {
      "score": 3.8,
      "cve_count": 2
    },
    {
      "score": 0.0,
      "cve_count": 1
    },
    {
      "score": 1.3,
      "cve_count": 1
    },
    {
      "score": 1.7,
      "cve_count": 1
    },
    {
      "score": 2.2,
      "cve_count": 1
    },
    {
      "score": 8.9,
      "cve_count": 1
    },
    {
      "score": 9.5,
      "cve_count": 1
    }
  ]
}
```

## Related Examples

- [Apache Log4j CVEs by CVSS Score](/reference/vulnerability/cvss-score-stats/examples/vendor-product/)
- [Apache Log4j 2.14.1 by CVSS Score](/reference/vulnerability/cvss-score-stats/examples/vendor-product-version/)
- [Apache Log4j 2.x by CVSS Score](/reference/vulnerability/cvss-score-stats/examples/version-startswith/)