60.267 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
17.794 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-66311 | MED 6.2 | microsoft edge_chromium Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering locally. | 0.4% | — |
| CVE-2025-59242 | HIGH 7.8 | microsoft windows_10_1507 Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2025-55701 | HIGH 7.8 | microsoft windows_10_1507 Improper validation of specified type of input in Microsoft Windows allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2025-21372 | HIGH 7.8 | microsoft windows_11_24h2 Microsoft Brokering File System Elevation of Privilege Vulnerability | 0.4% | — |
| CVE-2026-83902 | HIGH 7.8 | microsoft windows_10_1809 Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-83765 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-83763 | HIGH 7.8 | microsoft windows_10_1809 Access of resource using incompatible type ('type confusion') in Windows Input System allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-83719 | MED 5.5 | microsoft windows_10_1809 Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-83668 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-83664 | MED 5.5 | microsoft windows_10_1607 Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-70255 | HIGH 7.8 | microsoft windows_10_1809 Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-70151 | HIGH 7.8 | microsoft windows_10_21h2 Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-70132 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-70074 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-70041 | MED 5.5 | microsoft windows_10_1607 Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-70017 | MED 5.5 | microsoft windows_10_1809 Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-69954 | MED 5.5 | microsoft windows_10_1607 Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-69919 | MED 5.5 | microsoft windows_11_24h2 Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-69914 | MED 5.5 | microsoft windows_10_1809 Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-83501 | MED 5.5 | microsoft windows_11_23h2 Out-of-bounds read in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-78454 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-77492 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-77488 | MED 5.5 | microsoft sql_server_2017 Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-72945 | MED 5.5 | microsoft windows_10_1607 Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-72937 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally. | 0.4% | — |