60.368 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
17.844 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-69293 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-69290 | HIGH 7.8 | microsoft windows_10_1607 Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-69284 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows DCOM Server allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-69283 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-69277 | HIGH 7.8 | microsoft windows_10_1607 Stack-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-69270 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-69269 | HIGH 7.8 | microsoft windows_10_1607 Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-69265 | HIGH 7.8 | microsoft windows_10_1607 Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-68892 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-68890 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-68888 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-68885 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-68877 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally. | 0.3% | — |
| CVE-2026-68875 | HIGH 7.8 | microsoft windows_10_1607 Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally. | 0.3% | — |
| CVE-2026-68850 | HIGH 7.8 | microsoft windows_11_24h2 Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-68848 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-68845 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-68844 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally. | 0.3% | — |
| CVE-2026-68841 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-68832 | HIGH 7.8 | microsoft windows_10_1607 Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-68787 | HIGH 7.8 | microsoft sql_server_2017 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally. | 0.3% | — |
| CVE-2026-62810 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-62697 | HIGH 7.8 | microsoft windows_10_21h2 Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-56198 | HIGH 7.8 | microsoft windows_11_24h2 Out-of-bounds read in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-56177 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Windows Server allows an authorized attacker to elevate privileges locally. | 0.3% | — |