60.368 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
17.844 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-35199 | MED 6.1 | microsoft symcrypt SymCrypt is the core cryptographic function library currently used by Windows. From 103.5.0 to before 103.11.0, The SymCryptXmssSign function passes a 64-bit leaf count value to a helper function that accepts a 32-bit parameter. For XMSS^MT parameter sets with | 0.3% | — |
| CVE-2026-83657 | MED 5.5 | microsoft windows_10_1809 Weak authentication in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally. | 0.3% | — |
| CVE-2026-21240 | HIGH 7.8 | microsoft windows_10_1809 Time-of-check time-of-use (toctou) race condition in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2023-32010 | HIGH 7.0 | microsoft windows_11_22h2 Windows Bus Filter Driver Elevation of Privilege Vulnerability | 0.3% | — |
| CVE-2026-97812 | HIGH 7.0 | microsoft windows_10_21h2 Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-97810 | HIGH 7.0 | microsoft windows_11_24h2 Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-97808 | HIGH 7.0 | microsoft windows_10_1809 Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-96923 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Workstation Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-96852 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-96323 | HIGH 7.0 | microsoft windows_10_21h2 Use after free in Windows Update allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-96310 | HIGH 7.0 | microsoft windows_10_21h2 Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-96304 | HIGH 7.0 | microsoft windows_10_21h2 Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-96301 | HIGH 7.0 | microsoft windows_10_21h2 Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-96254 | HIGH 7.0 | microsoft windows_10_21h2 Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-96253 | HIGH 7.0 | microsoft windows_10_21h2 Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-96250 | HIGH 7.0 | microsoft windows_10_21h2 Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-96209 | HIGH 7.0 | microsoft windows_10_1607 Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-88079 | HIGH 7.0 | microsoft windows_11_24h2 Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-88076 | HIGH 7.0 | microsoft windows_10_1607 Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-85376 | HIGH 7.8 | microsoft windows_10_1607 Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83866 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83853 | HIGH 7.0 | microsoft windows_10_21h2 Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-108468 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-108465 | HIGH 7.0 | microsoft windows_10_1809 Use after free in Windows Update Delivery Optimization allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-108461 | HIGH 7.0 | microsoft windows_10_1809 Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |