60.267 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
17.794 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-87714 | MED 6.5 | microsoft windows_10_1607 Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network. | 0.4% | — |
| CVE-2026-85910 | MED 5.5 | microsoft windows_11_24h2 Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-85909 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-83849 | MED 5.5 | microsoft windows_10_21h2 Out-of-bounds read in Windows Hello allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-83794 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Portable Device MTP Driver allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-70270 | MED 5.5 | microsoft windows_10_1607 Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-70173 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-70141 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-103567 | MED 5.5 | microsoft windows_10_1809 Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2025-59203 | MED 5.5 | microsoft windows_10_1507 Insertion of sensitive information into log file in Windows StateRepository API allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2025-59201 | HIGH 7.8 | microsoft windows_10_1507 Improper access control in Network Connection Status Indicator (NCSI) allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2025-59197 | MED 5.5 | microsoft windows_10_1507 Insertion of sensitive information into log file in Windows ETL Channel allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2025-53147 | HIGH 7.0 | microsoft windows_10_1507 Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2025-32704 | HIGH 8.4 | microsoft 365_apps Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 0.4% | — |
| CVE-2022-34706 | HIGH 7.8 | microsoft windows_10 Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability | 0.4% | — |
| CVE-2026-96957 | HIGH 8.8 | microsoft .net Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network. | 0.4% | — |
| CVE-2026-88226 | MED 4.6 | microsoft windows_10_1607 Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack. | 0.4% | — |
| CVE-2026-83892 | MED 5.5 | microsoft windows_10_1809 Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-83884 | MED 5.5 | microsoft windows_10_1809 Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-55026 | MED 6.2 | microsoft 365_apps Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-20956 | HIGH 7.8 | microsoft 365_apps Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 0.4% | — |
| CVE-2025-59243 | HIGH 7.8 | microsoft 365_apps Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 0.4% | — |
| CVE-2023-23379 | HIGH 7.8 | microsoft defender_for_iot Microsoft Defender for IoT Elevation of Privilege Vulnerability | 0.4% | — |
| CVE-2023-28225 | HIGH 7.8 | microsoft windows_10_1507 Windows NTLM Elevation of Privilege Vulnerability | 0.4% | — |
| CVE-2025-53726 | HIGH 7.8 | microsoft windows_10_1507 Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacker to elevate privileges locally. | 0.4% | — |