60.267 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
17.794 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2023-35363 | HIGH 7.8 | microsoft windows_10_1809 Windows Kernel Elevation of Privilege Vulnerability | 0.5% | — |
| CVE-2023-21765 | HIGH 7.8 | microsoft windows_10 Windows Print Spooler Elevation of Privilege Vulnerability | 0.5% | — |
| CVE-2026-108448 | HIGH 7.5 | microsoft 365_apps Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | 0.5% | — |
| CVE-2026-70250 | HIGH 8.8 | microsoft windows_server_2012 Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network. | 0.5% | — |
| CVE-2026-20859 | HIGH 7.8 | microsoft windows_11_24h2 Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. | 0.5% | — |
| CVE-2026-78446 | HIGH 7.5 | microsoft windows_10_1607 Use after free in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network. | 0.5% | — |
| CVE-2026-20839 | MED 5.5 | microsoft windows_10_1607 Improper access control in Windows Client-Side Caching (CSC) Service allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2025-25004 | HIGH 7.3 | microsoft powershell Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally. | 0.5% | — |
| CVE-2026-70092 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally. | 0.5% | — |
| CVE-2026-45496 | MED 5.5 | microsoft visual_studio_code Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | 0.5% | — |
| CVE-2026-45466 | LOW 3.3 | microsoft 365_apps Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-45459 | LOW 3.3 | microsoft 365_apps Protection mechanism failure in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally. | 0.5% | — |
| CVE-2026-20941 | HIGH 7.8 | microsoft windows_11_24h2 Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally. | 0.5% | — |
| CVE-2022-44699 | MED 5.5 | microsoft azure_network_watcher_agent Azure Network Watcher Agent Security Feature Bypass Vulnerability | 0.5% | — |
| CVE-2026-103578 | MED 6.8 | microsoft windows_11_26h1 Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack. | 0.5% | — |
| CVE-2026-62829 | MED 4.6 | microsoft sharepoint_server Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 0.5% | — |
| CVE-2025-59198 | MED 5.0 | microsoft windows_10_1507 Improper input validation in Microsoft Windows Search Component allows an authorized attacker to deny service locally. | 0.5% | — |
| CVE-2025-58735 | HIGH 7.0 | microsoft windows_10_1507 Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. | 0.5% | — |
| CVE-2025-58732 | HIGH 7.0 | microsoft windows_10_1507 Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. | 0.5% | — |
| CVE-2025-26648 | HIGH 7.8 | microsoft windows_10_1507 Sensitive data storage in improperly locked memory in Windows Kernel allows an authorized attacker to elevate privileges locally. | 0.5% | — |
| CVE-2025-21370 | HIGH 7.8 | microsoft windows_11_22h2 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability | 0.5% | — |
| CVE-2026-69789 | HIGH 7.5 | microsoft windows_10_1607 Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network. | 0.5% | — |
| CVE-2026-55898 | MED 6.1 | microsoft 365_apps Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | 0.5% | — |
| CVE-2025-64669 | HIGH 7.8 | microsoft windows_admin_center Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges locally. | 0.5% | — |
| CVE-2025-62455 | HIGH 7.8 | microsoft windows_10_1607 Improper input validation in Windows Message Queuing allows an authorized attacker to elevate privileges locally. | 0.5% | — |