60.368 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
17.844 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-96309 | HIGH 7.8 | microsoft windows_10_21h2 Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-96308 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-96244 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-96223 | HIGH 7.8 | microsoft windows_11_24h2 Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-96217 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-88179 | HIGH 7.8 | microsoft windows_10_1607 Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-88168 | HIGH 7.8 | microsoft windows_10_1809 Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-85915 | HIGH 7.8 | microsoft windows_10_1809 Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-85332 | HIGH 7.8 | microsoft windows_10_1809 Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-85327 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-84016 | HIGH 7.8 | microsoft windows_10_1607 Out-of-bounds write in Windows EAPHost Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-84013 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-70185 | HIGH 8.8 | microsoft windows_10_1607 Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature locally. | 0.3% | — |
| CVE-2026-69895 | MED 4.7 | microsoft windows_10_1607 Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally. | 0.3% | — |
| CVE-2026-69853 | MED 4.7 | microsoft windows_10_1607 Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally. | 0.3% | — |
| CVE-2026-69483 | MED 4.7 | microsoft windows_10_1607 Out-of-bounds read in Windows Image Acquisition allows an authorized attacker to disclose information locally. | 0.3% | — |
| CVE-2026-69316 | MED 4.7 | microsoft windows_10_1607 Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally. | 0.3% | — |
| CVE-2026-68891 | MED 4.7 | microsoft windows_10_1607 Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally. | 0.3% | — |
| CVE-2026-68849 | MED 4.7 | microsoft windows_10_21h2 Out-of-bounds read in Windows Bluetooth Port Driver allows an authorized attacker to disclose information locally. | 0.3% | — |
| CVE-2026-59131 | MED 5.6 | microsoft windows_10_1607 No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally. | 0.3% | — |
| CVE-2026-50310 | MED 4.7 | microsoft windows_10_1809 Integer overflow or wraparound in Windows Devices Human Interface allows an authorized attacker to disclose information locally. | 0.3% | — |
| CVE-2026-33119 | MED 5.4 | microsoft edge User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | 0.3% | — |
| CVE-2026-23667 | HIGH 7.0 | microsoft windows_10_1809 Use after free in Broadcast DVR allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2023-24920 | MED 5.4 | microsoft dynamics_365 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | 0.3% | — |
| CVE-2026-87700 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 0.3% | — |