60.304 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
17.829 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2025-59238 | HIGH 7.8 | microsoft 365_apps Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. | 0.4% | — |
| CVE-2025-59226 | HIGH 7.8 | microsoft 365_apps Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally. | 0.4% | — |
| CVE-2025-59225 | HIGH 7.8 | microsoft 365_apps Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 0.4% | — |
| CVE-2025-59224 | HIGH 7.8 | microsoft 365_apps Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 0.4% | — |
| CVE-2025-59223 | HIGH 7.8 | microsoft 365_apps Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 0.4% | — |
| CVE-2025-54112 | HIGH 7.0 | microsoft windows_10_1507 Use after free in Microsoft Virtual Hard Drive allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2025-54111 | HIGH 7.8 | microsoft windows_10_1507 Use after free in Windows UI XAML Phone DatePickerFlyout allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2025-53802 | HIGH 7.0 | microsoft windows_10_21h2 Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2025-49738 | HIGH 7.8 | microsoft pc_manager Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2025-26649 | HIGH 7.0 | microsoft windows_11_22h2 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Secure Channel allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-96857 | MED 5.5 | microsoft windows_10_1809 Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-96183 | MED 5.5 | microsoft windows_11_24h2 Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-83864 | MED 5.5 | microsoft windows_10_1607 Improper access control in Windows NTFS allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-102214 | HIGH 8.8 | microsoft windows_10_1607 Use after free in Windows Hyper-V allows an authorized attacker to execute code locally. | 0.4% | — |
| CVE-2026-49791 | HIGH 7.1 | microsoft windows_10_1607 Improper link resolution before file access ('link following') in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-21255 | HIGH 8.8 | microsoft windows_10_1607 Improper access control in Windows Hyper-V allows an authorized attacker to bypass a security feature locally. | 0.4% | — |
| CVE-2025-59273 | HIGH 7.3 | microsoft azure_event_grid Improper access control in Azure Event Grid allows an unauthorized attacker to elevate privileges over a network. | 0.4% | — |
| CVE-2025-49699 | HIGH 7.0 | microsoft 365_apps Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | 0.4% | — |
| CVE-2026-83883 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-83882 | HIGH 7.8 | microsoft windows_10_1809 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-83881 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-83876 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Windows Shell allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-70285 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-70121 | HIGH 7.8 | microsoft windows_10_1809 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-70114 | HIGH 7.8 | microsoft windows_11_23h2 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 0.4% | — |