60.304 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
17.829 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-70274 | HIGH 7.8 | microsoft windows_11_23h2 Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-70238 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-70177 | HIGH 7.8 | microsoft windows_10_1607 Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-70051 | HIGH 7.8 | microsoft windows_10_1809 Access of resource using incompatible type ('type confusion') in Windows SmartScreen allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-108133 | HIGH 7.8 | microsoft windows_server_2022 Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-105004 | HIGH 7.8 | microsoft windows_10_1607 Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-103553 | HIGH 7.8 | microsoft windows_10_1607 Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-102227 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally. | 0.4% | — |
| CVE-2025-64671 | HIGH 8.4 | microsoft github_copilot Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to execute code locally. | 0.4% | — |
| CVE-2026-96917 | HIGH 8.8 | microsoft windows_10_1809 Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-70218 | HIGH 7.8 | microsoft windows_11_24h2 Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-65777 | MED 5.3 | microsoft windows_11_23h2 Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network. | 0.4% | — |
| CVE-2026-66318 | HIGH 8.1 | microsoft edge_chromium Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. | 0.4% | — |
| CVE-2026-50452 | HIGH 7.0 | microsoft windows_10_1809 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privileges over a network. | 0.4% | — |
| CVE-2026-50348 | HIGH 7.0 | microsoft windows_10_1809 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privileges over a network. | 0.4% | — |
| CVE-2026-33822 | MED 6.1 | microsoft 365_apps Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-27925 | MED 6.5 | microsoft windows_10_1607 Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to disclose information over an adjacent network. | 0.4% | — |
| CVE-2025-53142 | HIGH 7.0 | microsoft windows_11_22h2 Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2023-32055 | MED 6.7 | microsoft windows_10_1507 Active Template Library Elevation of Privilege Vulnerability | 0.4% | — |
| CVE-2026-58649 | MED 6.5 | microsoft .net Origin validation error in .NET allows an unauthorized attacker to disclose information over a network. | 0.4% | — |
| CVE-2026-70338 | HIGH 7.8 | microsoft powershell Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally. | 0.4% | — |
| CVE-2026-50510 | HIGH 7.8 | microsoft github_copilot Improper restriction of names for files and other resources in Github Copilot allows an unauthorized attacker to execute code locally. | 0.4% | — |
| CVE-2026-50482 | HIGH 7.3 | microsoft windows_10_1607 Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. | 0.4% | — |
| CVE-2026-58640 | HIGH 7.3 | microsoft windows_10_1607 Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. | 0.4% | — |
| CVE-2026-49790 | HIGH 7.3 | microsoft windows_10_1607 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | 0.4% | — |