60.368 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
17.844 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-88181 | HIGH 7.8 | microsoft windows_10_1809 Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-88100 | HIGH 7.8 | microsoft windows_11_24h2 Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-88071 | HIGH 7.8 | microsoft windows_11_23h2 Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-85837 | HIGH 7.8 | microsoft windows_11_24h2 Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-85836 | HIGH 7.8 | microsoft windows_11_24h2 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-85822 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-85820 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-85807 | HIGH 7.8 | microsoft windows_10_1607 Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-85800 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-85796 | HIGH 7.8 | microsoft windows_10_1607 Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-85795 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Windows Text Services Framework allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-85377 | HIGH 7.8 | microsoft windows_10_1607 Access of resource using incompatible type ('type confusion') in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-85375 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-85373 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-69549 | HIGH 7.0 | microsoft windows_10_1809 Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2025-64658 | HIGH 7.5 | microsoft windows_10_1809 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Shell allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2025-29973 | HIGH 7.0 | microsoft azure_file_sync Improper access control in Azure File Sync allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-97794 | HIGH 7.8 | microsoft windows_11_23h2 Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-96928 | HIGH 7.8 | microsoft windows_10_1607 Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-96920 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-96867 | HIGH 7.8 | microsoft windows_10_1607 Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally. | 0.3% | — |
| CVE-2026-96863 | MED 6.8 | microsoft windows_11_23h2 Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack. | 0.3% | — |
| CVE-2026-96856 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-96318 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-96312 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 0.3% | — |