60.304 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
17.829 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-45604 | MED 5.5 | microsoft windows_11_23h2 Out-of-bounds read in Windows Application Identity (AppID) Subsystem allows an authorized attacker to disclose information locally. | 0.3% | — |
| CVE-2026-20806 | MED 5.5 | microsoft windows_10_1809 Access of resource using incompatible type ('type confusion') in Windows COM allows an authorized attacker to disclose information locally. | 0.3% | — |
| CVE-2025-27732 | HIGH 7.0 | microsoft windows_10_1507 Sensitive data storage in improperly locked memory in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-97804 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-88109 | HIGH 7.8 | microsoft 365_apps Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-69909 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-62708 | MED 6.4 | microsoft windows_11_24h2 Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack. | 0.3% | — |
| CVE-2026-55000 | MED 6.4 | microsoft windows_11_24h2 Use after free in Windows USB Print Driver allows an unauthorized attacker to elevate privileges with a physical attack. | 0.3% | — |
| CVE-2026-40404 | HIGH 7.8 | microsoft windows_10_1607 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | 0.3% | — |
| CVE-2026-32079 | MED 5.5 | microsoft windows_10_1607 Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. | 0.3% | — |
| CVE-2023-24899 | HIGH 7.0 | microsoft windows_11_21h2 Windows Graphics Component Elevation of Privilege Vulnerability | 0.3% | — |
| CVE-2026-72927 | MED 6.7 | microsoft windows_10_1607 Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-70330 | MED 6.7 | microsoft windows_10_1607 Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-70304 | MED 6.7 | microsoft windows_10_1607 Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-65799 | MED 6.7 | microsoft windows_10_1607 Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-50680 | HIGH 8.2 | microsoft windows_10_1809 Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-49165 | HIGH 7.1 | microsoft windows_10_1607 Use of uninitialized resource in Microsoft Windows App Store allows an authorized attacker to disclose information locally. | 0.3% | — |
| CVE-2026-45608 | MED 6.8 | microsoft windows_10_1607 Out-of-bounds read in Windows DHCP Client allows an unauthorized attacker to disclose information locally. | 0.3% | — |
| CVE-2026-85804 | HIGH 7.8 | microsoft windows_11_23h2 Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-70076 | HIGH 7.0 | microsoft windows_11_24h2 Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-77503 | HIGH 8.4 | microsoft windows_10_1607 Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-69680 | HIGH 8.1 | microsoft windows_10_1607 Origin validation error in Windows DNS allows an unauthorized attacker to perform spoofing over a network. | 0.3% | — |
| CVE-2026-70130 | HIGH 8.4 | microsoft 365_apps Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. | 0.3% | — |
| CVE-2026-54992 | HIGH 8.4 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code locally. | 0.3% | — |
| CVE-2026-49184 | HIGH 8.4 | microsoft windows_10_1607 Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. | 0.3% | — |