Microsoft vulnerabilities

17.565 CVE

Microsoft vulnerabilities
Identifier	Severity, sort descending	Product and flaw	EPSS, sort descending	In KEV since, sort descending
CVE-2025-33055	MED 5.5	microsoft windows_10_1507 Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.	0.6%	—
CVE-2023-23423	HIGH 7.8	microsoft windows_10 Windows Kernel Elevation of Privilege Vulnerability	0.6%	—
CVE-2023-23422	HIGH 7.8	microsoft windows_10 Windows Kernel Elevation of Privilege Vulnerability	0.6%	—
CVE-2023-21678	HIGH 7.8	microsoft windows_10_1607 Windows Print Spooler Elevation of Privilege Vulnerability	0.6%	—
CVE-2023-21559	MED 5.5	microsoft windows_10_1809 Windows Cryptographic Information Disclosure Vulnerability	0.6%	—
CVE-2023-21550	MED 5.5	microsoft windows_10_1809 Windows Cryptographic Information Disclosure Vulnerability	0.6%	—
CVE-2023-21540	MED 5.5	microsoft windows_10_1809 Windows Cryptographic Information Disclosure Vulnerability	0.6%	—
CVE-2026-56192	MED 5.5	microsoft 365_apps Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.	0.6%	—
CVE-2026-55142	MED 5.5	microsoft 365_apps Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.	0.6%	—
CVE-2026-55124	MED 5.5	microsoft 365_apps Improper validation of specified type of input in Microsoft Office Word allows an unauthorized attacker to disclose information locally.	0.6%	—
CVE-2026-55050	MED 5.5	microsoft 365_apps Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.	0.6%	—
CVE-2026-55047	MED 5.5	microsoft 365_apps Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.	0.6%	—
CVE-2026-55028	MED 5.5	microsoft 365_apps Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.	0.6%	—
CVE-2026-55027	MED 5.5	microsoft 365_apps Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.	0.6%	—
CVE-2026-55023	MED 5.5	microsoft 365_apps Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.	0.6%	—
CVE-2026-44821	MED 5.5	microsoft 365_apps Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.	0.6%	—
CVE-2025-59258	MED 6.2	microsoft windows_server_2012 Insertion of sensitive information into log file in Active Directory Federation Services allows an unauthorized attacker to disclose information locally.	0.6%	—
CVE-2025-27728	HIGH 7.8	microsoft windows_11_24h2 Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.	0.6%	—
CVE-2025-27490	HIGH 7.8	microsoft windows_10_21h2 Heap-based buffer overflow in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.	0.6%	—
CVE-2025-24074	HIGH 7.8	microsoft windows_10_1809 Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.	0.6%	—
CVE-2025-24073	HIGH 7.8	microsoft windows_10_1507 Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.	0.6%	—
CVE-2025-24062	HIGH 7.8	microsoft windows_10_21h2 Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.	0.6%	—
CVE-2025-24060	HIGH 7.8	microsoft windows_10_1809 Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.	0.6%	—
CVE-2025-24058	HIGH 7.8	microsoft windows_10_1809 Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.	0.6%	—
CVE-2025-24044	HIGH 7.8	microsoft windows_10_1507 Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.	0.6%	—