60.368 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
17.844 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-32190 | HIGH 8.4 | microsoft 365_apps Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | 0.3% | — |
| CVE-2025-48000 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-96914 | HIGH 8.8 | microsoft windows_10_1607 Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-88093 | HIGH 7.8 | microsoft windows_10_1809 Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83845 | HIGH 8.4 | microsoft windows_10_21h2 Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoofing locally. | 0.3% | — |
| CVE-2026-83787 | MED 5.5 | microsoft windows_10_1607 Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security feature locally. | 0.3% | — |
| CVE-2026-83715 | HIGH 7.1 | microsoft windows_10_1607 Missing authentication for critical function in Windows Error Reporting allows an authorized attacker to perform tampering locally. | 0.3% | — |
| CVE-2026-70235 | MED 5.5 | microsoft windows_11_24h2 Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally. | 0.3% | — |
| CVE-2026-70057 | MED 5.5 | microsoft windows_10_1607 Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally. | 0.3% | — |
| CVE-2023-24914 | HIGH 7.0 | microsoft windows_11_22h2 Win32k Elevation of Privilege Vulnerability | 0.3% | — |
| CVE-2023-23385 | HIGH 7.0 | microsoft windows_10_1507 Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability | 0.3% | — |
| CVE-2026-85870 | HIGH 7.0 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83854 | MED 5.5 | microsoft windows_10_1809 Improper access control in Windows Notification allows an authorized attacker to disclose information locally. | 0.3% | — |
| CVE-2026-83793 | HIGH 7.0 | microsoft windows_10_21h2 Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83785 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83580 | HIGH 7.0 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-70237 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-100217 | HIGH 7.8 | microsoft windows_10_1607 Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-42916 | HIGH 7.8 | microsoft windows_10_1607 Integer overflow or wraparound in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-42837 | HIGH 7.8 | microsoft windows_10_1809 Out-of-bounds read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-42828 | HIGH 7.8 | microsoft windows_10_1809 Buffer over-read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-34343 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Application Identity (AppID) Subsystem allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-97799 | HIGH 7.8 | microsoft windows_11_24h2 Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83756 | HIGH 7.8 | microsoft windows_10_21h2 Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-69974 | MED 4.7 | microsoft windows_10_1809 Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally. | 0.3% | — |