60.304 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
17.829 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-70288 | MED 5.5 | microsoft windows_10_1607 Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-50520 | HIGH 8.4 | microsoft visual_studio_code Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code locally. | 0.4% | — |
| CVE-2022-26828 | HIGH 7.0 | microsoft windows_10 Windows Bluetooth Driver Elevation of Privilege Vulnerability | 0.4% | — |
| CVE-2026-81964 | MED 5.5 | microsoft windows_10_21h2 Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally. | 0.4% | — |
| CVE-2026-70216 | MED 5.5 | microsoft windows_10_1607 Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally. | 0.4% | — |
| CVE-2026-62879 | MED 5.5 | microsoft windows_10_1809 Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally. | 0.4% | — |
| CVE-2026-32073 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-24290 | HIGH 7.8 | microsoft windows_10_1809 Improper access control in Windows Projected File System allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2025-60717 | HIGH 7.0 | microsoft windows_10_1809 Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2025-59515 | HIGH 7.0 | microsoft windows_10_1809 Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2025-59504 | HIGH 7.3 | microsoft azure_monitor_agent Heap-based buffer overflow in Azure Monitor Agent allows an unauthorized attacker to execute code locally. | 0.4% | — |
| CVE-2025-58737 | HIGH 7.0 | microsoft windows_server_2012 Use after free in Windows Remote Desktop allows an unauthorized attacker to execute code locally. | 0.4% | — |
| CVE-2025-55334 | MED 6.2 | microsoft windows_11_22h2 Cleartext storage of sensitive information in Windows Kernel allows an unauthorized attacker to bypass a security feature locally. | 0.4% | — |
| CVE-2025-47991 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-69403 | MED 5.5 | microsoft windows_10_1607 Missing authorization in Windows SMB Server allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-69267 | MED 6.5 | microsoft windows_10_1809 Insufficient granularity of access control in Windows Connected User Experiences and Telemetry allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-62775 | MED 5.5 | microsoft windows_11_26h1 Incorrect authorization in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-59135 | MED 5.5 | microsoft windows_10_1607 Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-58545 | MED 5.5 | microsoft windows_10_1607 Improper access control in Windows Kernel allows an authorized attacker to bypass a security feature locally. | 0.4% | — |
| CVE-2026-50312 | MED 4.7 | microsoft windows_10_1607 Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-49167 | MED 4.7 | microsoft windows_10_1809 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2025-58738 | HIGH 7.0 | microsoft windows_10_1507 Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. | 0.4% | — |
| CVE-2025-58736 | HIGH 7.0 | microsoft windows_10_1507 Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. | 0.4% | — |
| CVE-2025-58734 | HIGH 7.0 | microsoft windows_10_1507 Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. | 0.4% | — |
| CVE-2025-58733 | HIGH 7.0 | microsoft windows_10_1507 Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. | 0.4% | — |