60.368 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
17.844 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-26153 | HIGH 7.8 | microsoft windows_10_1809 Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-42891 | MED 6.5 | microsoft edge_chromium User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | 0.3% | — |
| CVE-2026-32204 | HIGH 7.8 | microsoft azure_monitor_agent External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83724 | HIGH 7.0 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-42896 | HIGH 7.8 | microsoft windows_11_24h2 Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-25178 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-25171 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-25170 | HIGH 7.0 | microsoft windows_11_23h2 Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2025-48811 | MED 6.7 | microsoft windows_10_1507 Missing support for integrity check in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2025-48803 | MED 6.7 | microsoft windows_10_1507 Missing support for integrity check in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83999 | HIGH 7.0 | microsoft windows_11_24h2 Improper link resolution before file access ('link following') in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-77897 | HIGH 7.0 | microsoft power_automate_for_desktop Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-69379 | HIGH 7.0 | microsoft windows_11_23h2 Improper link resolution before file access ('link following') in Windows NTFS allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2023-21542 | HIGH 7.0 | microsoft windows_10_1607 Windows Installer Elevation of Privilege Vulnerability | 0.3% | — |
| CVE-2026-83917 | HIGH 7.0 | microsoft windows_10_1809 Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2025-53139 | HIGH 7.7 | microsoft windows_10_21h2 Cleartext transmission of sensitive information in Windows Hello allows an unauthorized attacker to bypass a security feature locally. | 0.3% | — |
| CVE-2025-49690 | HIGH 7.4 | microsoft windows_10_1809 Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an unauthorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-96855 | MED 5.5 | microsoft windows_10_1809 Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally. | 0.3% | — |
| CVE-2026-96316 | MED 5.5 | microsoft windows_10_1607 Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally. | 0.3% | — |
| CVE-2026-96315 | MED 5.5 | microsoft windows_10_1607 Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally. | 0.3% | — |
| CVE-2026-96311 | MED 5.5 | microsoft windows_10_1607 Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally. | 0.3% | — |
| CVE-2026-88162 | MED 5.5 | microsoft windows_10_1607 Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perform tampering locally. | 0.3% | — |
| CVE-2026-85791 | HIGH 7.0 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-84011 | MED 5.5 | microsoft windows_11_23h2 Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally. | 0.3% | — |
| CVE-2026-70573 | HIGH 7.0 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |