60.304 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
17.829 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-83582 | MED 4.7 | microsoft windows_10_1607 Use after free in Windows Graphics Kernel allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-70077 | MED 4.7 | microsoft windows_10_1607 Use after free in Windows Kernel allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-70063 | MED 4.7 | microsoft windows_10_1607 Out-of-bounds read in Windows Kernel allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-102221 | MED 4.4 | microsoft windows_10_1607 No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. | 0.4% | — |
| CVE-2026-69383 | HIGH 7.0 | microsoft windows_11_23h2 External control of file name or path in Windows Shell allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-45488 | MED 5.4 | microsoft edge_chromium User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | 0.4% | — |
| CVE-2026-45634 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows DHCP Server allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2023-23939 | LOW 3.9 | microsoft azure_setup_kubectl Azure/setup-kubectl is a GitHub Action for installing Kubectl. This vulnerability only impacts versions before version 3. An insecure temporary creation of a file allows other actors on the Actions runner to replace the Kubectl binary created by this action be | 0.4% | — |
| CVE-2026-96865 | MED 5.6 | microsoft windows_10_1607 Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-88134 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-88128 | HIGH 7.8 | microsoft windows_10_1809 Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-87702 | HIGH 7.8 | microsoft windows_10_1607 Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-87699 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-87694 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-85911 | HIGH 7.8 | microsoft windows_10_1809 Use after free in Windows StateRepository API allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-85905 | HIGH 8.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-85874 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally. | 0.4% | — |
| CVE-2026-83863 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-83850 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-83833 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-83832 | HIGH 7.8 | microsoft windows_10_1809 Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-83829 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-83828 | HIGH 7.8 | microsoft windows_11_24h2 Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-83826 | HIGH 7.8 | microsoft windows_11_23h2 Untrusted pointer dereference in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-83796 | HIGH 7.8 | microsoft windows_11_23h2 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 0.4% | — |