60.368 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
17.844 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-96317 | HIGH 7.8 | microsoft windows_10_1809 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-96305 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-96302 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-96216 | HIGH 7.0 | microsoft windows_10_1809 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-88161 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-85918 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-84020 | HIGH 7.0 | microsoft windows_10_21h2 Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-71347 | MED 6.4 | microsoft windows_10_1607 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-42978 | HIGH 7.8 | microsoft windows_10_1809 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-32089 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Windows Speech Brokered Api allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2025-62573 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2023-28273 | HIGH 7.0 | microsoft windows_10_1607 Windows Clip Service Elevation of Privilege Vulnerability | 0.2% | — |
| CVE-2023-23393 | HIGH 7.0 | microsoft windows_10_1809 Windows BrokerInfrastructure Service Elevation of Privilege Vulnerability | 0.2% | — |
| CVE-2026-87707 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-87706 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-87691 | HIGH 7.8 | microsoft windows_11_23h2 Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-85933 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-85867 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-85860 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-34336 | HIGH 7.8 | microsoft windows_10_1607 Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-58543 | MED 6.3 | microsoft windows_11_24h2 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges with a physical attack. | 0.2% | — |
| CVE-2026-32224 | HIGH 7.0 | microsoft windows_11_26h1 Use after free in Windows Server Update Service allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-40410 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows SMB Client allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-32195 | HIGH 7.0 | microsoft windows_11_26h1 Stack-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-27917 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows WFP NDIS Lightweight Filter Driver (wfplwfs.sys) allows an authorized attacker to elevate privileges locally. | 0.2% | — |