60.267 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
17.794 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-96858 | MED 5.5 | microsoft windows_10_21h2 Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally. | 0.5% | — |
| CVE-2026-50678 | MED 6.6 | microsoft 365_apps Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-45595 | MED 5.4 | microsoft windows_10_1607 Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feature over a network. | 0.5% | — |
| CVE-2026-42891 | MED 6.5 | microsoft edge_chromium User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | 0.5% | — |
| CVE-2026-25169 | MED 6.2 | microsoft windows_10_1607 Divide by zero in Microsoft Graphics Component allows an unauthorized attacker to deny service locally. | 0.5% | — |
| CVE-2025-29816 | HIGH 7.5 | microsoft 365_apps Improper input validation in Microsoft Office Word allows an unauthorized attacker to bypass a security feature over a network. | 0.5% | — |
| CVE-2026-69382 | MED 5.9 | microsoft exchange_server Use of a broken or risky cryptographic algorithm in Microsoft Exchange Server allows an unauthorized attacker to disclose information over a network. | 0.5% | — |
| CVE-2025-26640 | HIGH 7.0 | microsoft windows_10_1809 Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally. | 0.5% | — |
| CVE-2023-36769 | MED 4.6 | microsoft onenote Microsoft OneNote Spoofing Vulnerability | 0.5% | — |
| CVE-2023-21767 | HIGH 7.8 | microsoft windows_10 Windows Overlay Filter Elevation of Privilege Vulnerability | 0.5% | — |
| CVE-2023-21754 | HIGH 7.8 | microsoft windows_10_1607 Windows Kernel Elevation of Privilege Vulnerability | 0.5% | — |
| CVE-2023-21558 | HIGH 7.8 | microsoft windows_10 Windows Error Reporting Service Elevation of Privilege Vulnerability | 0.5% | — |
| CVE-2026-83755 | MED 5.5 | microsoft windows_10_1607 Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-83747 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Error Reporting allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-83737 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-83733 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-83723 | MED 5.5 | microsoft windows_10_1607 Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-83695 | MED 5.5 | microsoft windows_10_1607 Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-83686 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-83671 | MED 6.5 | microsoft windows_10_1809 Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-83571 | MED 5.5 | microsoft windows_10_1607 Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-83565 | MED 5.5 | microsoft windows_10_1607 Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-70227 | MED 5.5 | microsoft windows_11_23h2 Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-70135 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally. | 0.5% | — |
| CVE-2026-70090 | MED 5.5 | microsoft windows_10_1607 Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose information locally. | 0.5% | — |