59.967 CVE tracked
807 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
17.565 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-97789 | HIGH 7.5 | microsoft windows_server_2022 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 0.6% | — |
| CVE-2026-96071 | HIGH 7.5 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network. | 0.6% | — |
| CVE-2026-85936 | HIGH 8.8 | microsoft windows_10_1607 Double free in Windows Shell allows an unauthorized attacker to execute code over a network. | 0.6% | — |
| CVE-2026-85339 | HIGH 8.8 | microsoft windows_10_1607 Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine | 0.6% | — |
| CVE-2025-49721 | HIGH 7.8 | microsoft windows_10_1507 Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to elevate privileges locally. | 0.6% | — |
| CVE-2023-29333 | LOW 3.3 | microsoft 365_apps Microsoft Access Denial of Service Vulnerability | 0.6% | — |
| CVE-2022-35820 | HIGH 7.8 | microsoft windows_10 Windows Bluetooth Driver Elevation of Privilege Vulnerability | 0.6% | — |
| CVE-2021-43239 | HIGH 7.1 | microsoft windows_10 Windows Recovery Environment Agent Elevation of Privilege Vulnerability | 0.6% | — |
| CVE-2021-34456 | HIGH 7.8 | microsoft windows_10 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | 0.6% | — |
| CVE-2025-32707 | HIGH 7.8 | microsoft windows_10_1507 Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally. | 0.6% | — |
| CVE-2021-27096 | HIGH 7.8 | microsoft windows_10 NTFS Elevation of Privilege Vulnerability | 0.6% | — |
| CVE-2021-27091 | HIGH 7.8 | microsoft windows_7 RPC Endpoint Mapper Service Elevation of Privilege Vulnerability | 0.6% | — |
| CVE-2026-32223 | MED 6.8 | microsoft windows_11_24h2 Heap-based buffer overflow in Windows USB Print Driver allows an unauthorized attacker to elevate privileges with a physical attack. | 0.6% | — |
| CVE-2026-20835 | MED 5.5 | microsoft windows_11_24h2 Out-of-bounds read in Capability Access Management Service (camsvc) allows an authorized attacker to disclose information locally. | 0.6% | — |
| CVE-2026-20829 | MED 5.5 | microsoft windows_10_1809 Out-of-bounds read in Windows TPM allows an authorized attacker to disclose information locally. | 0.6% | — |
| CVE-2025-49691 | HIGH 8.0 | microsoft windows_10_1507 Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over an adjacent network. | 0.6% | — |
| CVE-2025-29978 | HIGH 7.8 | microsoft 365_apps Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. | 0.6% | — |
| CVE-2025-26639 | HIGH 7.8 | microsoft windows_10_21h2 Integer overflow or wraparound in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. | 0.6% | — |
| CVE-2023-24945 | MED 5.5 | microsoft windows_10_1507 Windows iSCSI Target Service Information Disclosure Vulnerability | 0.6% | — |
| CVE-2023-28263 | MED 5.5 | microsoft visual_studio_2019 Visual Studio Information Disclosure Vulnerability | 0.6% | — |
| CVE-2023-28253 | MED 5.5 | microsoft windows_10_1507 Windows Kernel Information Disclosure Vulnerability | 0.6% | — |
| CVE-2026-88121 | HIGH 8.0 | microsoft windows_10_1607 Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network. | 0.6% | — |
| CVE-2026-83838 | HIGH 8.0 | microsoft windows_10_1607 Integer underflow (wrap or wraparound) in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network. | 0.6% | — |
| CVE-2026-68831 | MED 5.5 | microsoft windows_10_1607 Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker to disclose information locally. | 0.6% | — |
| CVE-2025-21287 | HIGH 7.8 | microsoft windows_10_1507 Windows Installer Elevation of Privilege Vulnerability | 0.6% | — |