60.304 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
17.829 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2025-58731 | HIGH 7.0 | microsoft windows_11_22h2 Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. | 0.4% | — |
| CVE-2025-58730 | HIGH 7.0 | microsoft windows_10_1507 Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. | 0.4% | — |
| CVE-2024-26194 | HIGH 7.4 | microsoft windows_10_1507 Secure Boot Security Feature Bypass Vulnerability | 0.4% | — |
| CVE-2026-40416 | MED 4.3 | microsoft edge_chromium User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | 0.3% | — |
| CVE-2026-85906 | HIGH 7.8 | microsoft windows_10_21h2 Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83847 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83764 | MED 5.5 | microsoft windows_10_1809 Incorrect authorization in Windows Clipboard User Service allows an authorized attacker to disclose information locally. | 0.3% | — |
| CVE-2026-83658 | MED 5.5 | microsoft windows_10_1809 Improper access control in Windows Error Reporting allows an authorized attacker to disclose information locally. | 0.3% | — |
| CVE-2026-70247 | HIGH 7.8 | microsoft windows_10_1607 Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally. | 0.3% | — |
| CVE-2026-70123 | HIGH 7.8 | microsoft windows_10_1607 Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-69966 | HIGH 7.8 | microsoft windows_10_1607 Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-69963 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-105003 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-85921 | HIGH 8.2 | microsoft windows_11_26h1 Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83939 | HIGH 8.2 | microsoft windows_11_26h1 Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-81354 | HIGH 8.2 | microsoft windows_10_1809 Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-72962 | HIGH 8.2 | microsoft windows_10_1809 Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-72961 | HIGH 8.2 | microsoft windows_10_1607 Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-72958 | HIGH 8.2 | microsoft windows_11_24h2 Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-72935 | MED 6.7 | microsoft windows_10_1607 Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-71339 | MED 6.7 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-69906 | HIGH 8.2 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-69846 | HIGH 8.2 | microsoft windows_10_1607 Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-69820 | HIGH 8.2 | microsoft windows_10_21h2 Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-69449 | MED 6.7 | microsoft windows_10_1607 Heap-based buffer overflow in Windows BitLocker allows an authorized attacker to execute code locally. | 0.3% | — |