60.368 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
17.844 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-85829 | HIGH 7.8 | microsoft windows_10_1607 Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-85368 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-85366 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-85358 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-85356 | HIGH 7.8 | microsoft windows_10_1607 Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-85341 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-45656 | HIGH 7.8 | microsoft windows_10_1607 Protection mechanism failure in Windows UEFI allows an authorized attacker to bypass a security feature locally. | 0.3% | — |
| CVE-2026-45642 | LOW 3.9 | microsoft windows_10_1607 Improper input validation in Microsoft Azure Attestation service and Device Health Attestation Service allows an authorized attacker to perform spoofing with a physical attack. | 0.3% | — |
| CVE-2026-41088 | HIGH 7.8 | microsoft windows_10_21h2 Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-32170 | MED 6.7 | microsoft windows_10_1607 Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-21530 | MED 6.7 | microsoft windows_10_1607 Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2025-49742 | HIGH 7.8 | microsoft windows_10_1507 Integer overflow or wraparound in Microsoft Graphics Component allows an authorized attacker to execute code locally. | 0.3% | — |
| CVE-2025-49733 | HIGH 7.8 | microsoft windows_10_1809 Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2025-49732 | HIGH 7.8 | microsoft windows_10_1507 Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2025-49725 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Windows Notification allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-88090 | MED 5.4 | microsoft edge_chromium Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network. | 0.3% | — |
| CVE-2026-96862 | HIGH 7.8 | microsoft windows_10_1607 Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-85927 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-85871 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-85869 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-85318 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-44814 | MED 5.5 | microsoft windows_11_26h1 Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally. | 0.3% | — |
| CVE-2026-0390 | MED 6.7 | microsoft windows_10_1607 Reliance on untrusted inputs in a security decision in Windows Boot Loader allows an authorized attacker to bypass a security feature locally. | 0.3% | — |
| CVE-2026-20844 | HIGH 7.4 | microsoft windows_10_1607 Use after free in Windows Clipboard Server allows an unauthorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2025-62224 | MED 5.5 | microsoft edge User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an authorized attacker to perform spoofing over a network. | 0.3% | — |