60.368 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
17.844 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-85365 | HIGH 7.0 | microsoft windows_10_1607 Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-32165 | HIGH 7.8 | microsoft windows_10_1809 Use after free in Windows User Interface Core allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-32158 | HIGH 7.8 | microsoft windows_10_1809 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-32083 | HIGH 7.0 | microsoft windows_10_1607 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-32082 | HIGH 7.0 | microsoft windows_10_1607 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-96307 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-85914 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-84019 | HIGH 7.0 | microsoft windows_10_1809 Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-34341 | HIGH 7.0 | microsoft windows_10_1607 Double free in Windows Link-Layer Discovery Protocol (LLDP) allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-42836 | HIGH 7.0 | microsoft windows_10_1607 Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2025-59205 | HIGH 7.0 | microsoft windows_10_1507 Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2025-58727 | HIGH 7.0 | microsoft windows_10_21h2 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-85876 | HIGH 7.0 | microsoft sql_server_2019 Use after free in SQL Server allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-84009 | MED 4.7 | microsoft windows_10_1809 Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attacker to perform tampering locally. | 0.2% | — |
| CVE-2026-32153 | HIGH 7.8 | microsoft windows_10_1809 Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-85329 | HIGH 7.0 | microsoft windows_10_1607 Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Account allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-85357 | HIGH 7.0 | microsoft windows_11_23h2 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Phone Service allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-96919 | HIGH 7.0 | microsoft windows_10_1809 Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-88146 | HIGH 7.0 | microsoft windows_10_1809 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-32088 | MED 6.1 | microsoft windows_10_1809 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Biometric Service allows an unauthorized attacker to bypass a security feature with a physical attack. | 0.2% | — |
| CVE-2026-20930 | HIGH 7.8 | microsoft windows_10_1809 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-42979 | HIGH 7.8 | microsoft windows_10_1809 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-42977 | HIGH 7.8 | microsoft windows_10_1809 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-27918 | HIGH 7.8 | microsoft windows_10_1809 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Shell allows an authorized attacker to elevate privileges locally. | 0.2% | — |
| CVE-2026-27927 | HIGH 7.8 | microsoft windows_10_1809 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Projected File System allows an authorized attacker to elevate privileges locally. | 0.2% | — |