60.304 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
17.829 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2025-59253 | MED 5.5 | microsoft windows_10_1507 Improper access control in Microsoft Windows Search Component allows an authorized attacker to deny service locally. | 0.3% | — |
| CVE-2025-55690 | HIGH 7.0 | microsoft windows_11_24h2 Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2022-0280 | HIGH 7.5 | microsoft windows A race condition vulnerability exists in the QuickClean feature of McAfee Total Protection for Windows prior to 16.0.43 that allows a local user to gain privilege elevation and perform an arbitrary file delete. This could lead to sensitive files being deleted | 0.3% | — |
| CVE-2026-32193 | HIGH 8.8 | microsoft azure_kubernetes_service Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Azure Kubernetes Service allows an authorized attacker to execute code locally. | 0.3% | — |
| CVE-2026-83509 | HIGH 7.0 | microsoft windows_10_1607 Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-32172 | HIGH 8.0 | microsoft power_apps Uncontrolled search path element in Microsoft Power Apps allows an unauthorized attacker to execute code over a network. | 0.3% | — |
| CVE-2022-34696 | HIGH 7.8 | microsoft windows_10 Windows Hyper-V Remote Code Execution Vulnerability | 0.3% | — |
| CVE-2026-50302 | MED 4.2 | microsoft windows_10_21h2 Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to bypass a security feature over a network. | 0.3% | — |
| CVE-2026-96243 | HIGH 7.8 | microsoft windows_10_1607 Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-85369 | HIGH 8.2 | microsoft windows_10_21h2 Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83920 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83918 | HIGH 7.8 | microsoft windows_10_1607 Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83912 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-84000 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally. | 0.3% | — |
| CVE-2026-83996 | HIGH 8.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83995 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83990 | HIGH 7.8 | microsoft windows_11_23h2 Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83988 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83987 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83986 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83985 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83983 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83982 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83981 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83980 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |