60.368 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
17.844 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-72992 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-72991 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-72990 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-72988 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-72967 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-72965 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-72957 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally. | 0.3% | — |
| CVE-2026-72953 | HIGH 7.8 | microsoft windows_10_21h2 Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-72946 | HIGH 7.8 | microsoft windows_11_24h2 Heap-based buffer overflow in Storage Port Driver allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-72944 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-72941 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-71345 | HIGH 7.8 | microsoft windows_10_1607 Out-of-bounds write in Windows Spaceport.sys allows an authorized attacker to execute code locally. | 0.3% | — |
| CVE-2026-71343 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to execute code locally. | 0.3% | — |
| CVE-2026-71337 | HIGH 7.8 | microsoft windows_10_21h2 Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-71334 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows NFS Portmapper allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-70584 | HIGH 7.8 | microsoft windows_10_1607 Access of resource using incompatible type ('type confusion') in Windows Core Messaging allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-70583 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-70581 | HIGH 7.8 | microsoft windows_10_1607 Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-70574 | HIGH 7.8 | microsoft windows_10_1607 Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-70572 | HIGH 7.8 | microsoft windows_10_1607 Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-70569 | HIGH 7.8 | microsoft windows_11_23h2 Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-70564 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-70289 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-69921 | HIGH 7.8 | microsoft windows_10_21h2 Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-69900 | HIGH 7.8 | microsoft windows_10_21h2 Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally. | 0.3% | — |