60.368 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
17.844 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2025-54114 | HIGH 7.0 | microsoft windows_10_1607 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2025-54108 | HIGH 7.0 | microsoft windows_11_24h2 Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2025-53807 | HIGH 7.0 | microsoft windows_10_1809 Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2023-35362 | HIGH 7.8 | microsoft windows_10_1507 Windows Clip Service Elevation of Privilege Vulnerability | 0.3% | — |
| CVE-2026-88127 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-88110 | HIGH 7.0 | microsoft windows_11_24h2 Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-85872 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-85868 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83827 | HIGH 7.0 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83790 | HIGH 7.0 | microsoft windows_10_21h2 Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83751 | HIGH 7.0 | microsoft windows_11_24h2 Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83740 | HIGH 7.0 | microsoft windows_10_1809 Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83720 | HIGH 7.0 | microsoft windows_11_26h1 Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83718 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83710 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83708 | HIGH 7.0 | microsoft windows_10_1607 Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83707 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83702 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83701 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83696 | HIGH 7.0 | microsoft windows_10_1809 Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83694 | HIGH 7.0 | microsoft windows_10_1607 Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83689 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83687 | HIGH 7.0 | microsoft windows_11_23h2 Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83682 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83676 | HIGH 7.0 | microsoft windows_10_21h2 Integer underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate privileges locally. | 0.3% | — |