60.304 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
17.829 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-96947 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-96946 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-96935 | MED 5.5 | microsoft windows_10_1607 Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-96933 | HIGH 7.8 | microsoft windows_10_1607 Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-96931 | HIGH 7.8 | microsoft windows_10_1607 Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-96916 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-96912 | HIGH 7.8 | microsoft windows_10_1809 Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-96847 | HIGH 7.8 | microsoft windows_10_1607 Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-96843 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-96324 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-96249 | HIGH 7.8 | microsoft windows_11_24h2 Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-96118 | HIGH 7.8 | microsoft windows_10_1607 Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-83872 | HIGH 7.8 | microsoft windows_10_1607 Incorrect conversion between numeric types in Windows TCP/IP allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-83861 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-83859 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-83857 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-69506 | MED 4.7 | microsoft windows_10_1607 Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-105006 | MED 6.4 | microsoft windows_10_1607 Use after free in HID class driver allows an unauthorized attacker to elevate privileges with a physical attack. | 0.4% | — |
| CVE-2026-69713 | MED 4.4 | microsoft windows_10_1607 Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. | 0.4% | — |
| CVE-2026-47631 | HIGH 8.1 | microsoft exchange_server Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network. | 0.4% | — |
| CVE-2026-45658 | HIGH 7.8 | microsoft windows_10_1607 Improper access control in Windows BitLocker allows an authorized attacker to bypass a security feature locally. | 0.4% | — |
| CVE-2026-32084 | MED 5.5 | microsoft windows_10_1607 Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2025-55697 | HIGH 7.8 | microsoft windows_server_2022_23h2 Heap-based buffer overflow in Azure Local allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2023-35378 | HIGH 7.0 | microsoft windows_10_1809 Windows Projected File System Elevation of Privilege Vulnerability | 0.4% | — |
| CVE-2026-85811 | HIGH 7.5 | microsoft windows_10_1607 Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over an adjacent network. | 0.4% | — |