IT
60.297 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync

Microsoft vulnerabilities

17.822 CVE

Microsoft vulnerabilities
Identifier Severity, sort descending Product and flaw EPSS, sort descending In KEV since, sort descending
CVE-2026-83637 HIGH 7.8 microsoft windows_10_1607 Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. 0.4% —
CVE-2026-83579 HIGH 7.8 microsoft windows_10_1607 Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally. 0.4% —
CVE-2026-83570 HIGH 7.8 microsoft windows_10_1607 Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. 0.4% —
CVE-2026-83567 HIGH 7.8 microsoft windows_10_1607 Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. 0.4% —
CVE-2026-83518 HIGH 7.8 microsoft windows_11_23h2 Heap-based buffer overflow in RPC Runtime allows an authorized attacker to elevate privileges locally. 0.4% —
CVE-2026-83514 HIGH 7.8 microsoft windows_10_1607 Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally. 0.4% —
CVE-2026-83513 HIGH 7.8 microsoft windows_10_1607 Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. 0.4% —
CVE-2026-83508 HIGH 7.8 microsoft windows_10_1607 Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. 0.4% —
CVE-2026-70566 HIGH 7.8 microsoft windows_10_1607 Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally. 0.4% —
CVE-2026-70225 HIGH 7.8 microsoft windows_10_1607 Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. 0.4% —
CVE-2026-70172 HIGH 7.8 microsoft windows_10_1607 Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally. 0.4% —
CVE-2026-70143 HIGH 7.8 microsoft windows_10_1607 Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally. 0.4% —
CVE-2026-70139 HIGH 7.8 microsoft windows_10_1607 Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally. 0.4% —
CVE-2026-70138 HIGH 7.8 microsoft windows_10_1607 Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally. 0.4% —
CVE-2026-70113 HIGH 7.8 microsoft windows_10_1607 Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate privileges locally. 0.4% —
CVE-2026-70112 HIGH 7.8 microsoft windows_10_1809 Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally. 0.4% —
CVE-2026-70064 HIGH 7.8 microsoft windows_10_1607 Integer underflow (wrap or wraparound) in Windows Kerberos allows an authorized attacker to elevate privileges locally. 0.4% —
CVE-2026-70059 HIGH 7.8 microsoft windows_10_1607 Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally. 0.4% —
CVE-2026-70048 HIGH 7.8 microsoft windows_10_1607 Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally. 0.4% —
CVE-2026-70010 HIGH 7.8 microsoft windows_10_1607 Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. 0.4% —
CVE-2026-70008 HIGH 7.8 microsoft windows_10_21h2 Integer overflow or wraparound in Windows IP Over USB Service allows an authorized attacker to elevate privileges locally. 0.4% —
CVE-2026-69884 HIGH 7.8 microsoft windows_10_1607 Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally. 0.4% —
CVE-2026-69850 HIGH 7.8 microsoft windows_10_1607 Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges locally. 0.4% —
CVE-2026-69798 HIGH 7.8 microsoft windows_10_1607 Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally. 0.4% —
CVE-2026-69633 HIGH 7.8 microsoft windows_10_1607 Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally. 0.4% —