60.368 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
17.844 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-85854 | HIGH 7.0 | microsoft windows_10_1809 Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-85853 | HIGH 7.0 | microsoft windows_10_1607 Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-32087 | HIGH 7.0 | microsoft windows_10_1607 Heap-based buffer overflow in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-26165 | HIGH 7.0 | microsoft windows_11_23h2 Use after free in Windows Shell allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-45653 | HIGH 7.0 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-42984 | HIGH 7.0 | microsoft windows_10_1809 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-97793 | HIGH 7.0 | microsoft windows_10_1809 Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-32176 | MED 6.7 | microsoft sql_server_2016 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2025-64661 | HIGH 7.8 | microsoft windows_10_1607 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Shell allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-41100 | MED 4.4 | microsoft 365_copilot Improper access control in M365 Copilot allows an authorized attacker to perform spoofing locally. | 0.2% | — |
| CVE-2026-40382 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-34338 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2025-62469 | HIGH 7.0 | microsoft windows_11_24h2 Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2025-59195 | HIGH 7.0 | microsoft windows_10_1809 Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to deny service locally. | 0.2% | — |
| CVE-2025-48813 | MED 6.3 | microsoft windows_10_1809 Use of a key past its expiration date in Virtual Secure Mode allows an authorized attacker to perform spoofing locally. | 0.2% | — |
| CVE-2026-0385 | MED 5.0 | microsoft edge_chromium Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability | 0.2% | — |
| CVE-2026-88085 | MED 6.4 | microsoft sql_server_2017 Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-85826 | HIGH 7.0 | microsoft windows_10_1607 Out-of-bounds write in Windows Fast FAT Driver allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-85823 | HIGH 7.0 | microsoft windows_11_24h2 Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-85810 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-85803 | HIGH 7.0 | microsoft windows_11_23h2 Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-85372 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-32160 | HIGH 7.8 | microsoft windows_10_1809 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-96868 | HIGH 7.0 | microsoft windows_11_24h2 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-96319 | HIGH 7.0 | microsoft windows_10_21h2 Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. | 0.2% | — |