IT
60.267 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync

Microsoft vulnerabilities

17.794 CVE

Microsoft vulnerabilities
Identifier Severity, sort descending Product and flaw EPSS, sort descending In KEV since, sort descending
CVE-2026-69406 MED 5.5 microsoft windows_10_1607 Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally. 0.5% —
CVE-2026-69351 MED 5.5 microsoft windows_10_1607 Exposure of private personal information to an unauthorized actor in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to disclose information locally. 0.5% —
CVE-2026-69339 MED 5.5 microsoft windows_11_24h2 Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally. 0.5% —
CVE-2026-69315 MED 5.5 microsoft windows_10_1809 Exposure of sensitive system information to an unauthorized control sphere in Windows License Manager allows an authorized attacker to disclose information locally. 0.5% —
CVE-2026-69294 MED 5.5 microsoft windows_10_1809 Generation of error message containing sensitive information in Microsoft COM for Windows allows an authorized attacker to disclose information locally. 0.5% —
CVE-2026-68886 MED 5.5 microsoft windows_10_1607 Use after free in Windows Network Connection Broker allows an authorized attacker to disclose information locally. 0.5% —
CVE-2026-68873 MED 5.5 microsoft windows_11_23h2 Insertion of sensitive information into log file in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information locally. 0.5% —
CVE-2026-68852 MED 5.5 microsoft windows_10_1607 Use of uninitialized resource in Microsoft Account allows an authorized attacker to disclose information locally. 0.5% —
CVE-2026-68842 MED 5.5 microsoft windows_11_24h2 Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally. 0.5% —
CVE-2026-54123 MED 5.5 microsoft defender_for_endpoint Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally. 0.5% —
CVE-2026-56184 MED 5.5 microsoft windows_10_21h2 Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an authorized attacker to disclose information locally. 0.5% —
CVE-2026-50681 MED 5.5 microsoft windows_10_1607 Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally. 0.5% —
CVE-2026-50483 MED 5.5 microsoft windows_11_24h2 Exposure of sensitive information to an unauthorized actor in Microsoft Graphics Component allows an authorized attacker to disclose information locally. 0.5% —
CVE-2026-50473 MED 5.5 microsoft windows_10_1607 Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. 0.5% —
CVE-2026-50456 MED 5.5 microsoft windows_10_1607 Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. 0.5% —
CVE-2026-50442 MED 5.5 microsoft windows_10_1607 Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. 0.5% —
CVE-2026-50434 MED 5.5 microsoft windows_10_21h2 Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally. 0.5% —
CVE-2026-50431 MED 5.5 microsoft windows_10_1607 Windows Quality of Service (QoS) Packet Scheduler Information Disclosure Vulnerability 0.5% —
CVE-2026-50430 MED 5.5 microsoft windows_10_1607 Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally. 0.5% —
CVE-2026-50409 MED 5.5 microsoft windows_10_1607 Exposure of sensitive information to an unauthorized actor in Windows Overlay Filter allows an authorized attacker to disclose information locally. 0.5% —
CVE-2026-50394 MED 5.5 microsoft windows_10_1607 Exposure of sensitive information to an unauthorized actor in Windows Media allows an authorized attacker to disclose information locally. 0.5% —
CVE-2026-50389 MED 5.5 microsoft windows_10_1607 Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. 0.5% —
CVE-2026-50352 MED 5.5 microsoft windows_10_1607 Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally. 0.5% —
CVE-2026-50339 MED 5.5 microsoft windows_10_1809 Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally. 0.5% —
CVE-2026-50334 MED 5.5 microsoft windows_10_1607 Exposure of sensitive information to an unauthorized actor in Windows Notification allows an authorized attacker to disclose information locally. 0.5% —