60.297 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
17.822 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-61931 | HIGH 7.8 | microsoft windows_10_1809 Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-49785 | HIGH 7.8 | microsoft windows_10_1607 Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally. | 0.4% | — |
| CVE-2026-102231 | HIGH 7.7 | microsoft visual_studio_code Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | 0.4% | — |
| CVE-2026-48566 | MED 5.5 | microsoft windows_11_24h2 Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-45491 | MED 6.2 | microsoft .net Improper link resolution before file access ('link following') in .NET allows an unauthorized attacker to perform tampering locally. | 0.4% | — |
| CVE-2026-42968 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Telephony Service allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2025-53137 | HIGH 7.0 | microsoft windows_10_1507 Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2023-21725 | MED 6.3 | microsoft windows_malicious_software_removal_tool Windows Malicious Software Removal Tool Elevation of Privilege Vulnerability | 0.4% | — |
| CVE-2026-96921 | MED 5.5 | microsoft windows_10_1607 Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-96851 | MED 5.5 | microsoft windows_10_1607 Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-96849 | MED 5.5 | microsoft windows_11_26h1 Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-96848 | MED 5.5 | microsoft windows_10_1809 Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-96314 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-96247 | MED 5.5 | microsoft windows_10_1607 Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-85336 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-65680 | MED 6.7 | microsoft onedrive Improper link resolution before file access ('link following') in Microsoft OneDrive allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-27906 | MED 4.4 | microsoft windows_10_21h2 Improper input validation in Windows Hello allows an authorized attacker to bypass a security feature locally. | 0.4% | — |
| CVE-2025-59221 | HIGH 7.0 | microsoft 365_apps Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 0.4% | — |
| CVE-2024-26243 | HIGH 7.0 | microsoft windows_10_21h2 Windows USB Print Driver Elevation of Privilege Vulnerability | 0.4% | — |
| CVE-2024-26236 | HIGH 7.0 | microsoft windows_server_2022_23h2 Windows Update Stack Elevation of Privilege Vulnerability | 0.4% | — |
| CVE-2026-87698 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-20842 | HIGH 7.0 | microsoft windows_10_21h2 Use after free in Windows DWM allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2022-23283 | HIGH 7.0 | microsoft windows_10 Windows ALPC Elevation of Privilege Vulnerability | 0.4% | — |
| CVE-2026-97790 | MED 5.5 | microsoft windows_11_24h2 Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally. | 0.4% | — |
| CVE-2026-45466 | LOW 3.3 | microsoft 365_apps Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally. | 0.4% | — |