60.282 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
17.807 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-62904 | MED 5.4 | microsoft edge_chromium Incorrect authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. | 0.4% | — |
| CVE-2026-66325 | MED 6.1 | microsoft edge_chromium Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | 0.4% | — |
| CVE-2026-57980 | MED 5.4 | microsoft edge_chromium Authentication bypass using an alternate path or channel in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering over a network. | 0.4% | — |
| CVE-2025-59290 | HIGH 7.8 | microsoft windows_10_21h2 Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2025-58716 | HIGH 8.8 | microsoft windows_10_1507 Improper input validation in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2025-58715 | HIGH 8.8 | microsoft windows_10_1507 Integer overflow or wraparound in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-83732 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-108399 | HIGH 7.2 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2025-21195 | MED 6.0 | microsoft azure_service_fabric Improper link resolution before file access ('link following') in Service Fabric allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2023-38176 | HIGH 7.0 | microsoft azure_arc-enabled_servers Azure Arc-Enabled Servers Elevation of Privilege Vulnerability | 0.4% | — |
| CVE-2026-55946 | MED 6.1 | microsoft copilot Ai command injection in Microsoft Copilot allows an unauthorized attacker to disclose information over a network. | 0.4% | — |
| CVE-2026-45461 | HIGH 8.4 | microsoft 365_apps Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | 0.4% | — |
| CVE-2025-54919 | HIGH 7.5 | microsoft windows_10_1809 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to execute code locally. | 0.4% | — |
| CVE-2026-24303 | CRIT 9.6 | microsoft partner_center Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network. | 0.4% | — |
| CVE-2026-20865 | HIGH 7.8 | microsoft windows_10_1809 Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-20863 | HIGH 7.0 | microsoft windows_11_23h2 Double free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-20822 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-85815 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-85794 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-85374 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-83913 | HIGH 7.8 | microsoft windows_10_21h2 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-83903 | HIGH 7.8 | microsoft windows_11_24h2 Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-83877 | HIGH 7.8 | microsoft windows_10_1809 Integer overflow or wraparound in HID Parser Library allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-83760 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-83690 | HIGH 7.8 | microsoft windows_10_1809 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 0.4% | — |