Vulnerabilities
Tracked app vulnerabilities
15,667 CVEs affect a tracked app or OS (all severities, all platforms). 286 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 15,667
- Actively exploited
- 286
- Publication window
- 2007-08-28 → 2026-08-19
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2026-32221
HIGH 8.4
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally. |
|
CVE-2026-32220
MEDIUM 4.4
Improper access control in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally. |
|
CVE-2026-32202
MEDIUM 4.3
KEV
Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network. |
|
CVE-2026-32154
HIGH 7.8
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-32153
HIGH 7.8
Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-32152
HIGH 7.8
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-32219
HIGH 7.0
Microsoft Brokering File System Elevation of Privilege Vulnerability |
|
CVE-2026-32218
HIGH 5.5
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2026-32217
HIGH 5.5
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2026-32216
HIGH 5.5
Windows Redirected Drive Buffering System Denial of Service Vulnerability |
|
CVE-2026-32215
HIGH 5.5
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2026-32214
HIGH 5.5
Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability |
|
CVE-2026-32212
HIGH 5.5
Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability |
|
CVE-2026-32195
HIGH 7.0
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-32183
HIGH 7.8
Windows Snipping Tool Remote Code Execution Vulnerability |
|
CVE-2026-32181
HIGH 5.5
Connected User Experiences and Telemetry Service Denial of Service Vulnerability |
|
CVE-2026-32165
HIGH 7.8
Windows User Interface Core Elevation of Privilege Vulnerability |
|
CVE-2026-32164
HIGH 7.8
Windows User Interface Core Elevation of Privilege Vulnerability |
|
CVE-2026-32163
HIGH 7.8
Windows User Interface Core Elevation of Privilege Vulnerability |
|
CVE-2026-32162
HIGH 8.4
Windows COM Elevation of Privilege Vulnerability |
|
CVE-2026-32160
HIGH 7.8
Windows Push Notifications Elevation of Privilege Vulnerability |
|
CVE-2026-32159
HIGH 7.8
Windows Push Notifications Elevation of Privilege Vulnerability |
|
CVE-2026-32158
HIGH 7.8
Windows Push Notifications Elevation of Privilege Vulnerability |
|
CVE-2026-32157
CRITICAL 8.8
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2026-32156
HIGH 7.4
Windows UPnP Device Host Remote Code Execution Vulnerability |
|
CVE-2026-32155
HIGH 7.8
Desktop Window Manager Elevation of Privilege Vulnerability |
|
CVE-2026-32151
HIGH 6.5
Windows Shell Information Disclosure Vulnerability |
|
CVE-2026-32150
HIGH 7.0
Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability |
|
CVE-2026-32149
HIGH 7.3
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2026-32093
HIGH 7.0
Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability |
|
CVE-2026-32091
HIGH 8.4
Microsoft Brokering File System Elevation of Privilege Vulnerability |
|
CVE-2026-32090
HIGH 7.8
Windows Speech Brokered Api Elevation of Privilege Vulnerability |
|
CVE-2026-32089
HIGH 7.8
Windows Speech Brokered Api Elevation of Privilege Vulnerability |
|
CVE-2026-32088
HIGH 6.1
Windows Biometric Service Security Feature Bypass Vulnerability |
|
CVE-2026-32087
HIGH 7.0
Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability |
|
CVE-2026-32086
HIGH 7.0
Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability |
|
CVE-2026-32085
HIGH 5.5
Remote Procedure Call Information Disclosure Vulnerability |
|
CVE-2026-32084
HIGH 5.5
Windows Print Spooler Information Disclosure Vulnerability |
|
CVE-2026-32083
HIGH 7.0
Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability |
|
CVE-2026-32082
HIGH 7.0
Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability |
|
CVE-2026-32081
HIGH 5.5
Package Catalog Information Disclosure Vulnerability |
|
CVE-2026-32080
HIGH 7.0
Windows WalletService Elevation of Privilege Vulnerability |
|
CVE-2026-32079
HIGH 5.5
Web Account Manager Information Disclosure Vulnerability |
|
CVE-2026-32078
HIGH 7.8
Windows Projected File System Elevation of Privilege Vulnerability |
|
CVE-2026-32077
HIGH 7.8
Windows UPnP Device Host Elevation of Privilege Vulnerability |
|
CVE-2026-32076
HIGH 7.8
Windows Storage Spaces Controller Elevation of Privilege Vulnerability |
|
CVE-2026-32075
HIGH 7.0
Windows UPnP Device Host Elevation of Privilege Vulnerability |
|
CVE-2026-32074
HIGH 7.8
Windows Projected File System Elevation of Privilege Vulnerability |
|
CVE-2026-32073
HIGH 7.0
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2026-32072
HIGH 6.2
Active Directory Spoofing Vulnerability |