IT
60.368 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync

Microsoft vulnerabilities

17.844 CVE

Microsoft vulnerabilities
Identifier Severity, sort descending Product and flaw EPSS, sort descending In KEV since, sort descending
CVE-2026-69692 HIGH 7.0 microsoft windows_10_1607 Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. 0.3% —
CVE-2026-69654 HIGH 7.0 microsoft windows_10_1607 Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally. 0.3% —
CVE-2026-69652 HIGH 7.0 microsoft windows_10_1607 Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. 0.3% —
CVE-2026-69648 HIGH 7.0 microsoft windows_10_21h2 Use after free in Windows Notification allows an authorized attacker to elevate privileges locally. 0.3% —
CVE-2026-69645 HIGH 7.0 microsoft windows_10_1607 Use after free in Windows Message Queuing allows an authorized attacker to elevate privileges locally. 0.3% —
CVE-2026-69630 HIGH 7.0 microsoft windows_10_1607 Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally. 0.3% —
CVE-2026-69621 HIGH 7.0 microsoft windows_10_1607 Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally. 0.3% —
CVE-2026-69617 HIGH 7.0 microsoft windows_11_26h1 Out-of-bounds read in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally. 0.3% —
CVE-2026-69613 HIGH 7.0 microsoft windows_10_1607 Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally. 0.3% —
CVE-2026-69611 HIGH 7.0 microsoft windows_10_1607 Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. 0.3% —
CVE-2026-69610 HIGH 7.0 microsoft windows_10_1607 Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally. 0.3% —
CVE-2026-69606 HIGH 7.0 microsoft windows_11_23h2 Use after free in Windows Shell allows an authorized attacker to elevate privileges locally. 0.3% —
CVE-2026-69605 HIGH 7.0 microsoft windows_10_21h2 Use after free in Microsoft Install Service allows an authorized attacker to elevate privileges locally. 0.3% —
CVE-2026-69600 HIGH 7.0 microsoft windows_10_1607 Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. 0.3% —
CVE-2026-69578 HIGH 7.0 microsoft windows_10_1607 Numeric truncation error in Windows Kernel allows an authorized attacker to elevate privileges locally. 0.3% —
CVE-2026-69575 HIGH 7.0 microsoft windows_10_1607 Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. 0.3% —
CVE-2026-69574 HIGH 7.0 microsoft windows_10_1809 Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. 0.3% —
CVE-2026-69573 HIGH 7.0 microsoft windows_10_1607 Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. 0.3% —
CVE-2026-69567 HIGH 7.0 microsoft windows_10_1607 Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally. 0.3% —
CVE-2026-69564 HIGH 7.0 microsoft windows_10_1607 Heap-based buffer overflow in Windows Online Certificate Status Protocol (OCSP) allows an authorized attacker to elevate privileges locally. 0.3% —
CVE-2026-69560 HIGH 7.0 microsoft windows_10_1607 Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally. 0.3% —
CVE-2026-69540 HIGH 7.0 microsoft windows_10_1809 Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. 0.3% —
CVE-2026-69517 HIGH 7.0 microsoft windows_10_1809 Use after free in Windows Wireless Networking allows an authorized attacker to elevate privileges locally. 0.3% —
CVE-2026-69516 HIGH 7.0 microsoft windows_10_1809 Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally. 0.3% —
CVE-2026-69501 HIGH 7.0 microsoft windows_10_21h2 Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. 0.3% —