60.368 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
17.844 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-69650 | HIGH 7.8 | microsoft windows_10_1607 Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-32155 | HIGH 7.8 | microsoft windows_10_21h2 Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-32078 | HIGH 7.8 | microsoft windows_10_1809 Use after free in Windows Projected File System allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-32076 | HIGH 7.8 | microsoft windows_11_23h2 Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2025-59189 | HIGH 7.4 | microsoft windows_11_24h2 Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-83505 | HIGH 7.0 | microsoft windows_10_1607 Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-50512 | HIGH 7.8 | microsoft pc_manager Missing authentication for critical function in Microsoft PC Manager allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-32074 | HIGH 7.8 | microsoft windows_10_1809 Double free in Windows Projected File System allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-32069 | HIGH 7.8 | microsoft windows_10_1809 Double free in Windows Projected File System allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-88143 | MED 6.7 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-70071 | MED 5.5 | microsoft windows_10_1607 Improper verification of cryptographic signature in DNS Server allows an authorized attacker to perform tampering locally. | 0.3% | — |
| CVE-2026-88097 | HIGH 8.1 | microsoft edge_chromium Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-61349 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-54125 | HIGH 7.8 | microsoft windows_10_1809 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-50689 | HIGH 7.8 | microsoft windows_10_1809 Use after free in Windows Clipboard Server allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-50677 | HIGH 7.8 | microsoft windows_11_24h2 Use after free in Windows Media allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-50458 | HIGH 7.8 | microsoft windows_11_24h2 Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-50457 | HIGH 7.8 | microsoft windows_10_1809 Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-50427 | HIGH 7.8 | microsoft windows_10_1809 Use after free in Content Delivery Manager allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-50385 | HIGH 8.8 | microsoft windows_11_24h2 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-50361 | HIGH 7.8 | microsoft windows_11_24h2 Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-50305 | HIGH 7.8 | microsoft windows_11_24h2 Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-26183 | HIGH 7.8 | microsoft windows_server_2012 Improper access control in Windows RPC API allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-26159 | HIGH 7.8 | microsoft windows_10_1607 Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2025-27468 | HIGH 7.0 | microsoft windows_10_1507 Improper privilege management in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. | 0.3% | — |