60.304 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
17.829 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2022-26807 | HIGH 7.0 | microsoft windows_10 Windows Work Folder Service Elevation of Privilege Vulnerability | 0.3% | — |
| CVE-2026-85850 | HIGH 7.8 | microsoft windows_11_26h1 Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-45482 | HIGH 8.4 | microsoft visual_studio_code Improper limitation of a pathname to a restricted directory ('path traversal') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | 0.3% | — |
| CVE-2026-35417 | HIGH 7.8 | microsoft windows_10_1809 Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-24287 | HIGH 7.8 | microsoft windows_10_1809 External control of file name or path in Windows Kernel allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-88147 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-72931 | MED 4.7 | microsoft windows_10_1607 Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to deny service locally. | 0.3% | — |
| CVE-2026-69905 | MED 5.5 | microsoft windows_10_1809 Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally. | 0.3% | — |
| CVE-2026-62909 | HIGH 7.8 | microsoft .net Uncaught exception in .NET allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-25179 | HIGH 7.0 | microsoft windows_10_1607 Improper validation of specified type of input in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2025-59202 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2025-55689 | HIGH 7.0 | microsoft windows_10_21h2 Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2025-55686 | HIGH 7.0 | microsoft windows_10_21h2 Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2025-55685 | HIGH 7.0 | microsoft windows_10_21h2 Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2025-55331 | HIGH 7.0 | microsoft windows_10_21h2 Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2025-53717 | HIGH 7.0 | microsoft windows_11_22h2 Reliance on untrusted inputs in a security decision in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2025-50174 | HIGH 7.0 | microsoft windows_11_24h2 Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2023-23412 | HIGH 7.8 | microsoft windows_10_1507 Windows Accounts Picture Elevation of Privilege Vulnerability | 0.3% | — |
| CVE-2026-85938 | MED 5.5 | microsoft windows_10_1809 Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally. | 0.3% | — |
| CVE-2026-85855 | HIGH 7.0 | microsoft windows_11_24h2 Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83922 | HIGH 7.8 | microsoft windows_10_21h2 Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2025-54092 | HIGH 7.8 | microsoft windows_10_1809 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83932 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83659 | HIGH 7.8 | microsoft windows_10_1607 Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-47652 | HIGH 8.2 | microsoft windows_11_23h2 Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally. | 0.3% | — |