59.529 CVE tracked
803 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
17.194 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-69418 | HIGH 8.0 | microsoft windows_10_1607 Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges over a network. | 0.8% | — |
| CVE-2026-69371 | HIGH 8.0 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges over a network. | 0.8% | — |
| CVE-2026-69365 | HIGH 8.0 | microsoft windows_10_21h2 Out-of-bounds read in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges over a network. | 0.8% | — |
| CVE-2026-69346 | HIGH 8.0 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network. | 0.8% | — |
| CVE-2026-69332 | HIGH 8.0 | microsoft windows_10_1607 Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network. | 0.8% | — |
| CVE-2026-69322 | HIGH 8.0 | microsoft windows_11_23h2 Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network. | 0.8% | — |
| CVE-2026-69301 | HIGH 8.0 | microsoft windows_10_1607 Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network. | 0.8% | — |
| CVE-2026-69271 | HIGH 8.0 | microsoft windows_10_1607 Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network. | 0.8% | — |
| CVE-2026-68894 | HIGH 8.0 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network. | 0.8% | — |
| CVE-2026-68880 | HIGH 8.0 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network. | 0.8% | — |
| CVE-2026-68878 | HIGH 8.0 | microsoft windows_10_1607 Stack-based buffer overflow in Windows Fast FAT Driver allows an authorized attacker to elevate privileges over a network. | 0.8% | — |
| CVE-2026-68876 | HIGH 8.0 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges over a network. | 0.8% | — |
| CVE-2026-68838 | HIGH 8.0 | microsoft windows_10_1607 Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network. | 0.8% | — |
| CVE-2026-68834 | HIGH 8.0 | microsoft windows_10_1607 Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network. | 0.8% | — |
| CVE-2026-68827 | HIGH 8.0 | microsoft windows_10_1607 Integer underflow (wrap or wraparound) in Windows GDI+ allows an authorized attacker to elevate privileges over a network. | 0.8% | — |
| CVE-2026-66326 | MED 6.5 | microsoft edge_chromium Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-34332 | HIGH 8.0 | microsoft windows_server_2025 Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-26149 | CRIT 9.0 | microsoft power_apps Improper neutralization of escape, meta, or control sequences in Microsoft Power Apps allows an authorized attacker to perform spoofing over a network. | 0.8% | — |
| CVE-2025-59503 | CRIT 10.0 | microsoft azure_compute_resource_provider Server-side request forgery (ssrf) in Azure Compute Gallery allows an unauthorized attacker to elevate privileges over a network. | 0.8% | — |
| CVE-2021-43246 | MED 5.6 | microsoft windows_10 Windows Hyper-V Denial of Service Vulnerability | 0.8% | — |
| CVE-2020-1371 | HIGH 7.8 | microsoft windows_10 An elevation of privilege vulnerability exists when the Windows Event Logging Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Event Logging Service Elevation of | 0.8% | — |
| CVE-2020-1363 | HIGH 7.8 | microsoft windows_10 An elevation of privilege vulnerability exists when the Windows Picker Platform improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Picker Platform Elevation of Privilege Vu | 0.8% | — |
| CVE-2020-1352 | HIGH 7.8 | microsoft windows_10 An elevation of privilege vulnerability exists when the Windows USO Core Worker improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows USO Core Worker Elevation of Privilege Vu | 0.8% | — |
| CVE-2020-0935 | MED 5.5 | microsoft onedrive An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links, aka 'OneDrive for Windows Elevation of Privilege Vulnerability'. | 0.8% | — |
| CVE-2026-88219 | HIGH 8.8 | microsoft windows_10_1607 Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a network. | 0.8% | — |