60.368 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
17.844 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-83767 | HIGH 7.8 | microsoft windows_10_1607 Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83728 | HIGH 8.8 | microsoft windows_10_1607 Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally. | 0.3% | — |
| CVE-2026-100203 | HIGH 7.0 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-100201 | HIGH 7.0 | microsoft windows_10_1809 Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-100200 | HIGH 7.0 | microsoft windows_11_23h2 Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-33828 | HIGH 7.8 | microsoft windows_10_1607 Trust boundary violation in Windows Attestation allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-33841 | HIGH 7.8 | microsoft windows_10_21h2 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-26141 | HIGH 7.8 | microsoft azure_automation_hybrid_worker_windows_extension Improper authentication in Azure Arc allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-25167 | HIGH 7.4 | microsoft windows_11_24h2 Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-88089 | MED 6.7 | microsoft sql_server_2017 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally. | 0.3% | — |
| CVE-2026-45654 | HIGH 7.9 | microsoft windows_11_24h2 Improper access control in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. | 0.3% | — |
| CVE-2026-58611 | HIGH 7.8 | microsoft xbox_gaming_services Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-96997 | HIGH 7.8 | microsoft 365_apps Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-96995 | HIGH 7.8 | microsoft 365_apps Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83916 | HIGH 7.0 | microsoft windows_10_1607 Double free in Windows Error Reporting allows an authorized attacker to execute code locally. | 0.3% | — |
| CVE-2026-83915 | HIGH 7.0 | microsoft windows_10_1809 Use after free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83911 | HIGH 7.0 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83908 | HIGH 7.0 | microsoft windows_10_1607 Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83901 | HIGH 7.0 | microsoft windows_10_1809 Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83675 | HIGH 7.0 | microsoft windows_11_24h2 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83575 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83574 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83566 | HIGH 7.0 | microsoft windows_11_24h2 Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83564 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-72969 | HIGH 7.0 | microsoft windows_11_23h2 Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |