60.304 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
17.829 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-69978 | MED 5.6 | microsoft windows_10_1809 Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally. | 0.4% | — |
| CVE-2026-69832 | MED 5.6 | microsoft windows_10_1607 Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-59130 | MED 5.6 | microsoft windows_10_1607 No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-24297 | MED 6.5 | microsoft windows_10_1607 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kerberos allows an unauthorized attacker to bypass a security feature over a network. | 0.4% | — |
| CVE-2025-55322 | HIGH 7.3 | microsoft omniparser Binding to an unrestricted ip address in GitHub allows an unauthorized attacker to execute code over a network. | 0.4% | — |
| CVE-2025-49685 | HIGH 7.0 | microsoft windows_10_1809 Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2024-35265 | HIGH 7.0 | microsoft windows_10_1809 Windows Perception Service Elevation of Privilege Vulnerability | 0.4% | — |
| CVE-2021-41334 | HIGH 7.0 | microsoft windows_10 Windows Desktop Bridge Elevation of Privilege Vulnerability | 0.4% | — |
| CVE-2026-96913 | HIGH 8.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2025-55240 | HIGH 7.3 | microsoft visual_studio_2017 Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2024-21417 | HIGH 8.8 | microsoft windows_10_1809 Windows Text Services Framework Elevation of Privilege Vulnerability | 0.4% | — |
| CVE-2023-21566 | HIGH 7.8 | microsoft visual_studio_2017 Visual Studio Elevation of Privilege Vulnerability | 0.4% | — |
| CVE-2026-45602 | CRIT 9.1 | microsoft windows_10_1607 No cwe for this issue in Windows DHCP Server allows an unauthorized attacker to perform tampering over a network. | 0.4% | — |
| CVE-2026-32216 | MED 5.5 | microsoft windows_11_26h1 Null pointer dereference in Windows Redirected Drive Buffering allows an authorized attacker to deny service locally. | 0.4% | — |
| CVE-2025-64673 | HIGH 7.8 | microsoft windows_10_1809 Improper access control in Storvsp.sys Driver allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2025-62474 | HIGH 7.8 | microsoft windows_10_1607 Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2025-55316 | HIGH 7.8 | microsoft azure_connected_machine_agent External control of file name or path in Azure Arc allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2024-49060 | HIGH 8.8 | microsoft azure_stack_hci Azure Stack HCI Elevation of Privilege Vulnerability | 0.4% | — |
| CVE-2026-108136 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-102216 | HIGH 7.8 | microsoft windows_10_1607 Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-102215 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-102205 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-102201 | HIGH 7.8 | microsoft windows_10_1809 Use after free in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-102196 | HIGH 7.8 | microsoft windows_10_1809 Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-102186 | MED 4.7 | microsoft windows_10_1607 Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose information locally. | 0.4% | — |