Aller au contenu
Appaloosa Scout
Sélection de la langue
fr en

Windows

Windows Windows 11 23H2 · 2023-H2

Advisory officiel

Windows Windows 11 23H2 · 2023-H2 corrige 2486 CVE, dont 63 activement exploitées (CISA KEV). Les versions antérieures restent exposées à ces vulnérabilités.

Date de sortie
Fin de support
CVE corrigées
2486

108 critique · 2151 élevé

KEV CISA
63

CVE corrigées

CVE
CVE-2026-33824
CRITICAL 9.8 KEV

Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.

CVE-2026-21510
HIGH 8.8 KEV

Windows Shell Security Feature Bypass Vulnerability

CVE-2026-21513
HIGH 8.8 KEV

MSHTML Framework Security Feature Bypass Vulnerability

CVE-2025-33053
HIGH 8.8 KEV

Internet Shortcut Files Remote Code Execution Vulnerability

CVE-2025-33073 Exploit
HIGH 8.8 KEV

Windows SMB Client Elevation of Privilege Vulnerability

CVE-2024-49039
HIGH 8.8 KEV

Windows Task Scheduler Elevation of Privilege Vulnerability

CVE-2024-43461
HIGH 8.8 KEV

Windows MSHTML Platform Spoofing Vulnerability

CVE-2024-30040
HIGH 8.8 KEV

Windows MSHTML Platform Security Feature Bypass Vulnerability

CVE-2024-29988
HIGH 8.8 KEV

SmartScreen Prompt Security Feature Bypass Vulnerability

CVE-2023-36025
HIGH 8.8 KEV

Windows SmartScreen Security Feature Bypass Vulnerability

CVE-2024-21412
HIGH 8.1 KEV

Internet Shortcut Files Security Feature Bypass Vulnerability

CVE-2026-81963
HIGH 7.8 KEV

Windows Update Stack Elevation of Privilege Vulnerability

CVE-2026-21519
HIGH 7.8 KEV

Desktop Window Manager Elevation of Privilege Vulnerability

CVE-2026-21533
HIGH 7.8 KEV

Windows Remote Desktop Services Elevation of Privilege Vulnerability

CVE-2025-62221
HIGH 7.8 KEV

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2025-24990
HIGH 7.8 KEV

Windows Agere Modem Driver Elevation of Privilege Vulnerability

CVE-2025-59230
HIGH 7.8 KEV

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

CVE-2025-30400
HIGH 7.8 KEV

Microsoft DWM Core Library Elevation of Privilege Vulnerability

CVE-2025-32701
HIGH 7.8 KEV

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2025-32706
HIGH 7.8 KEV

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2025-32709
HIGH 7.8 KEV

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2025-29824
HIGH 7.8 KEV

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2025-24985
HIGH 7.8 KEV

Windows Fast FAT File System Driver Remote Code Execution Vulnerability

CVE-2025-24993
HIGH 7.8 KEV

Windows NTFS Remote Code Execution Vulnerability

CVE-2025-21418
HIGH 7.8 KEV

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2025-21333 Exploit
HIGH 7.8 KEV

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

CVE-2025-21334
HIGH 7.8 KEV

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

CVE-2025-21335
HIGH 7.8 KEV

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

CVE-2024-49138 Exploit
HIGH 7.8 KEV

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2024-43572
HIGH 7.8 KEV

Microsoft Management Console Remote Code Execution Vulnerability

CVE-2024-38014
HIGH 7.8 KEV

Windows Installer Elevation of Privilege Vulnerability

CVE-2024-38107
HIGH 7.8 KEV

Windows Power Dependency Coordinator Elevation of Privilege Vulnerability

CVE-2024-38193 Exploit
HIGH 7.8 KEV

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2024-38080
HIGH 7.8 KEV

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2024-35250
HIGH 7.8 KEV

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

CVE-2024-30051
HIGH 7.8 KEV

Windows DWM Core Library Elevation of Privilege Vulnerability

CVE-2024-26169
HIGH 7.8 KEV

Windows Error Reporting Service Elevation of Privilege Vulnerability

CVE-2024-21338 Exploit
HIGH 7.8 KEV

Windows Kernel Elevation of Privilege Vulnerability

CVE-2023-36033
HIGH 7.8 KEV

Windows DWM Core Library Elevation of Privilege Vulnerability

CVE-2023-36036
HIGH 7.8 KEV

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2023-36424
HIGH 7.8 KEV

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2024-21351
HIGH 7.6 KEV

Windows SmartScreen Security Feature Bypass Vulnerability

CVE-2025-30397 Exploit
HIGH 7.5 KEV

Scripting Engine Memory Corruption Vulnerability

CVE-2024-38178
HIGH 7.5 KEV

Scripting Engine Memory Corruption Vulnerability

CVE-2024-38112
HIGH 7.5 KEV

Windows MSHTML Platform Spoofing Vulnerability

CVE-2025-21391
HIGH 7.1 KEV

Windows Storage Elevation of Privilege Vulnerability

CVE-2026-68820
HIGH 7.0 KEV

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2025-62215
HIGH 7.0 KEV

Windows Kernel Elevation of Privilege Vulnerability

CVE-2025-26633 Exploit
HIGH 7.0 KEV

Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.

CVE-2024-38106
HIGH 7.0 KEV

Windows Kernel Elevation of Privilege Vulnerability

CVE-2024-30088
HIGH 7.0 KEV

Windows Kernel Elevation of Privilege Vulnerability

CVE-2025-24054 Exploit
HIGH 6.5 KEV

NTLM Hash Disclosure Spoofing Vulnerability

CVE-2024-43451
HIGH 6.5 KEV

NTLM Hash Disclosure Spoofing Vulnerability

CVE-2024-43573
MEDIUM 6.5 KEV

Windows MSHTML Platform Spoofing Vulnerability

CVE-2024-38213
MEDIUM 6.5 KEV

Windows Mark of the Web Security Feature Bypass Vulnerability

CVE-2026-21525
MEDIUM 6.2 KEV

Windows Remote Access Connection Manager Denial of Service Vulnerability

CVE-2026-20805
MEDIUM 5.5 KEV

Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally.

CVE-2025-24991
HIGH 5.5 KEV

Windows NTFS Information Disclosure Vulnerability

CVE-2013-3900
MEDIUM 5.5 KEV

WinVerifyTrust Signature Validation Vulnerability

CVE-2024-38217
MEDIUM 5.4 KEV

Windows Mark of the Web Security Feature Bypass Vulnerability

CVE-2025-47827
HIGH 4.6 KEV

MITRE CVE-2025-47827: Secure Boot bypass in IGEL OS before 11

CVE-2025-24984
HIGH 4.6 KEV

Windows NTFS Information Disclosure Vulnerability

CVE-2026-32202 Exploit
MEDIUM 4.3 KEV

Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network.

CVE-2025-49708
CRITICAL 9.9

Microsoft Graphics Component Elevation of Privilege Vulnerability

CVE-2026-77493
CRITICAL 9.8

Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

CVE-2026-73009
CRITICAL 9.8

Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.

CVE-2026-72983
CRITICAL 9.8

Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a network.

CVE-2026-72982
CRITICAL 9.8

Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.

CVE-2026-70296
CRITICAL 9.8

Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

CVE-2026-69910
CRITICAL 9.8

Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network.

CVE-2026-69824
CRITICAL 9.8

Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an unauthorized attacker to execute code over a network.

CVE-2026-69829
CRITICAL 9.8

Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.

CVE-2026-69768
CRITICAL 9.8

Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to execute code over a network.

CVE-2026-69715
CRITICAL 9.8

Out-of-bounds read in Windows Direct Show allows an unauthorized attacker to execute code over a network.

CVE-2026-69590
CRITICAL 9.8

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

CVE-2026-69586
CRITICAL 9.8

Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network.

CVE-2026-69579
CRITICAL 9.8

Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

CVE-2026-69525
CRITICAL 9.8

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

CVE-2026-69496
CRITICAL 9.8

Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network.

CVE-2026-69491
CRITICAL 9.8

Heap-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.

CVE-2026-69463
CRITICAL 9.8

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network.

CVE-2026-69431
CRITICAL 9.8

Heap-based buffer overflow in Telnet Client allows an unauthorized attacker to execute code over a network.

CVE-2026-68839
CRITICAL 9.8

Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-69276
HIGH 9.8

Microsoft UxTheme Library (uxtheme.dll) Remote Code Execution Vulnerability

CVE-2026-69408
HIGH 9.8

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

CVE-2026-69493
HIGH 9.8

Windows Event Logging Service Remote Code Execution Vulnerability

CVE-2026-69769
CRITICAL 9.8

Windows HTTP Print Provider Remote Code Execution Vulnerability

CVE-2026-69819
HIGH 9.8

RPC Runtime Library Remote Code Execution Vulnerability

CVE-2026-62815
CRITICAL 9.8

Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.

CVE-2026-49172
CRITICAL 9.8

Heap-based buffer overflow in Windows FTP Service allows an unauthorized attacker to execute code over a network.

CVE-2026-42990
CRITICAL 9.8

Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code over a network.

CVE-2026-47291
CRITICAL 9.8

Integer overflow or wraparound in Windows HTTP.sys allows an unauthorized attacker to execute code over a network.

CVE-2026-45657
CRITICAL 9.8

Use after free in Windows Kernel allows an unauthorized attacker to execute code over a network.

CVE-2026-44815
CRITICAL 9.8

Stack-based buffer overflow in Windows DHCP Client allows an unauthorized attacker to execute code over a network.

CVE-2026-41096
CRITICAL 9.8

Windows DNS Client Remote Code Execution Vulnerability

CVE-2025-60724
CRITICAL 9.8

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

CVE-2025-53766
CRITICAL 9.8

Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.

CVE-2025-47981
CRITICAL 9.8

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

CVE-2025-21298
CRITICAL 9.8

Windows OLE Remote Code Execution Vulnerability

CVE-2025-21307
CRITICAL 9.8

Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

CVE-2024-49112
CRITICAL 9.8

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVE-2024-38063
CRITICAL 9.8

Windows TCP/IP Remote Code Execution Vulnerability

CVE-2024-38140
CRITICAL 9.8

Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

CVE-2024-38199
HIGH 9.8

Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability

CVE-2024-30080
CRITICAL 9.8

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVE-2023-36028
HIGH 9.8

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

CVE-2023-36397
CRITICAL 9.8

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

CVE-2016-9535
CRITICAL 9.8

tif_predict.h and tif_predict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when d…

CVE-2026-42904
CRITICAL 9.6

Heap-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to elevate privileges over an adjacent network.

CVE-2026-40402
CRITICAL 9.3

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2026-45602
CRITICAL 9.1

No cwe for this issue in Windows DHCP Server allows an unauthorized attacker to perform tampering over a network.

CVE-2025-10263
CRITICAL 9.1

Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C…

CVE-2025-50171
HIGH 9.1

Remote Desktop Spoofing Vulnerability

CVE-2026-83992
HIGH 8.8

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

CVE-2026-81955
HIGH 8.8

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

CVE-2026-80096
HIGH 8.8

Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.

CVE-2026-80083
HIGH 8.8

Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally.

CVE-2026-77495
HIGH 8.8

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

CVE-2026-73023
HIGH 8.8

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

CVE-2026-73012
HIGH 8.8

Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network.

CVE-2026-73013
HIGH 8.8

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

CVE-2026-73016
HIGH 8.8

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

CVE-2026-73006
HIGH 8.8

Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

CVE-2026-72986
HIGH 8.8

Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.

CVE-2026-72959
HIGH 8.8

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

CVE-2026-72960
HIGH 8.8

Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.

CVE-2026-72950
HIGH 8.8

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

CVE-2026-72940
HIGH 8.8

Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network.

CVE-2026-71352
HIGH 8.8

Integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager allows an authorized attacker to execute code over a network.

CVE-2026-70586
HIGH 8.8

Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to execute code over a network.

CVE-2026-70203
HIGH 8.8

Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.

CVE-2026-69860
HIGH 8.8

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

CVE-2026-69676
HIGH 8.8

Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network.

CVE-2026-69669
HIGH 8.8

Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to execute code over a network.

CVE-2026-69628
HIGH 8.8

Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to execute code over a network.

CVE-2026-69603
HIGH 8.8

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.

CVE-2026-69598
HIGH 8.8

Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute code over a network.

CVE-2026-69601
HIGH 8.8

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

CVE-2026-69518
HIGH 8.8

Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network.

CVE-2026-69499
HIGH 8.8

Integer overflow or wraparound in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

CVE-2026-69461
HIGH 8.8

Stack-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network.

CVE-2026-69291
HIGH 8.8

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-62706
HIGH 8.8

Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

CVE-2026-68828
HIGH 8.8

Remote Desktop Client Remote Code Execution Vulnerability

CVE-2026-69334
HIGH 8.8

Windows Volume Manager Extension Driver Remote Code Execution Vulnerability

CVE-2026-69360
HIGH 8.8

Microsoft Office Word Remote Code Execution Vulnerability

CVE-2026-69386
HIGH 8.8

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

CVE-2026-69434
HIGH 8.8

Windows URL Moniker Remote Code Execution Vulnerability

CVE-2026-69485
HIGH 8.8

Remote Desktop Client Remote Code Execution Vulnerability

CVE-2026-69494
HIGH 8.8

Windows Event Logging Service Remote Code Execution Vulnerability

CVE-2026-69495
HIGH 8.8

Windows Event Logging Service Remote Code Execution Vulnerability

CVE-2026-69511
HIGH 8.8

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

CVE-2026-69740
CRITICAL 8.8

Windows Hello Elevation of Privilege Vulnerability

CVE-2026-69772
HIGH 8.8

Windows Network File System Remote Code Execution Vulnerability

CVE-2026-69784
CRITICAL 8.8

Windows Hello Elevation of Privilege Vulnerability

CVE-2026-72933
HIGH 8.8

Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability

CVE-2026-73018
CRITICAL 8.8

Graphic Fonts Remote Code Execution Vulnerability

CVE-2026-77504
CRITICAL 8.8

Microsoft Office Word Remote Code Execution Vulnerability

CVE-2026-83996
HIGH 8.8

Windows Error Reporting Elevation of Privilege Vulnerability

CVE-2026-83998
HIGH 8.8

Remote Desktop Client Remote Code Execution Vulnerability

CVE-2026-62822
HIGH 8.8

Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network.

CVE-2026-62816
HIGH 8.8

Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.

CVE-2026-62817
HIGH 8.8

Out-of-bounds write in Windows DNS allows an unauthorized attacker to execute code over an adjacent network.

CVE-2026-62800
HIGH 8.8

Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.

CVE-2026-62795
HIGH 8.8

Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.

CVE-2026-62785
HIGH 8.8

Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.

CVE-2026-62790
HIGH 8.8

Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.

CVE-2026-62784
HIGH 8.8

Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to execute code over a network.

CVE-2026-49179
HIGH 8.8

Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows an unauthorized attacker to execute code…

CVE-2026-47653
HIGH 8.8

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-47289
HIGH 8.8

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-42985
HIGH 8.8

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-34329
HIGH 8.8

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVE-2026-40403
CRITICAL 8.8

Windows Graphics Component Remote Code Execution Vulnerability

CVE-2026-32225
HIGH 8.8

Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-26167
HIGH 8.8

Windows Push Notifications Elevation of Privilege Vulnerability

CVE-2026-26178
HIGH 8.8

Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability

CVE-2026-32157
CRITICAL 8.8

Remote Desktop Client Remote Code Execution Vulnerability

CVE-2026-23669
HIGH 8.8

RPC Runtime Library Remote Code Execution Vulnerability

CVE-2026-25177
HIGH 8.8

Active Directory Domain Services Elevation of Privilege Vulnerability

CVE-2026-25188
HIGH 8.8

Windows Telephony Service Elevation of Privilege Vulnerability

CVE-2026-21255
HIGH 8.8

Windows Hyper-V Security Feature Bypass Vulnerability

CVE-2026-20868
HIGH 8.8

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

CVE-2025-62456
HIGH 8.8

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

CVE-2025-62549
HIGH 8.8

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2025-64678
HIGH 8.8

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2025-58715
HIGH 8.8

Windows Speech Runtime Elevation of Privilege Vulnerability

CVE-2025-58716
HIGH 8.8

Windows Speech Runtime Elevation of Privilege Vulnerability

CVE-2025-58718
HIGH 8.8

Remote Desktop Client Remote Code Execution Vulnerability

CVE-2025-59295
HIGH 8.8

Windows URL Parsing Remote Code Execution Vulnerability

CVE-2025-54110
HIGH 8.8

Windows Kernel Elevation of Privilege Vulnerability

CVE-2025-54918
CRITICAL 8.8

Windows NTLM Elevation of Privilege Vulnerability

CVE-2025-55234
HIGH 8.8

Windows SMB Elevation of Privilege Vulnerability

CVE-2025-53131
HIGH 8.8

Windows Media Remote Code Execution Vulnerability

CVE-2025-53143
HIGH 8.8

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVE-2025-53144
HIGH 8.8

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVE-2025-53145
HIGH 8.8

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVE-2025-53778
CRITICAL 8.8

Windows NTLM Elevation of Privilege Vulnerability

CVE-2025-47986
HIGH 8.8

Universal Print Management Service Elevation of Privilege Vulnerability

CVE-2025-48817
HIGH 8.8

Remote Desktop Client Remote Code Execution Vulnerability

CVE-2025-49687
HIGH 8.8

Windows Input Method Editor (IME) Elevation of Privilege Vulnerability

CVE-2025-49723
HIGH 8.8

Windows StateRepository API Server file Tampering Vulnerability

CVE-2025-49724
HIGH 8.8

Windows Connected Devices Platform Service Remote Code Execution Vulnerability

CVE-2025-49740
HIGH 8.8

Windows SmartScreen Security Feature Bypass Vulnerability

CVE-2025-33064
HIGH 8.8

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2025-33066
HIGH 8.8

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2025-29840
HIGH 8.8

Windows Media Remote Code Execution Vulnerability

CVE-2025-29962
HIGH 8.8

Windows Media Remote Code Execution Vulnerability

CVE-2025-29963
HIGH 8.8

Windows Media Remote Code Execution Vulnerability

CVE-2025-29964
HIGH 8.8

Windows Media Remote Code Execution Vulnerability

CVE-2025-29966
CRITICAL 8.8

Remote Desktop Client Remote Code Execution Vulnerability

CVE-2025-29967
CRITICAL 8.8

Remote Desktop Client Remote Code Execution Vulnerability

CVE-2025-21205
HIGH 8.8

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21221
HIGH 8.8

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21222
HIGH 8.8

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-26669
HIGH 8.8

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

CVE-2025-27477
HIGH 8.8

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-27481
HIGH 8.8

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-24051
HIGH 8.8

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2025-24056
HIGH 8.8

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-26645
CRITICAL 8.8

Remote Desktop Client Remote Code Execution Vulnerability

CVE-2025-21190
HIGH 8.8

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21200
HIGH 8.8

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21201
HIGH 8.8

Windows Telephony Server Remote Code Execution Vulnerability

CVE-2025-21368
HIGH 8.8

Microsoft Digest Authentication Remote Code Execution Vulnerability

CVE-2025-21369
HIGH 8.8

Microsoft Digest Authentication Remote Code Execution Vulnerability

CVE-2025-21371
HIGH 8.8

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21406
HIGH 8.8

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21407
HIGH 8.8

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21223
HIGH 8.8

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21233
HIGH 8.8

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21236
HIGH 8.8

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21237
HIGH 8.8

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21238
HIGH 8.8

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21239
HIGH 8.8

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21240
HIGH 8.8

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21241
HIGH 8.8

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21243
HIGH 8.8

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21244
HIGH 8.8

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21245
HIGH 8.8

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21246
HIGH 8.8

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21248
HIGH 8.8

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21250
HIGH 8.8

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21252
HIGH 8.8

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21266
HIGH 8.8

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21273
HIGH 8.8

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21282
HIGH 8.8

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21286
HIGH 8.8

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21291
HIGH 8.8

Windows Direct Show Remote Code Execution Vulnerability

CVE-2025-21292
HIGH 8.8

Windows Search Service Elevation of Privilege Vulnerability

CVE-2025-21293
HIGH 8.8

Active Directory Domain Services Elevation of Privilege Vulnerability

CVE-2025-21302
HIGH 8.8

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21303
HIGH 8.8

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21305
HIGH 8.8

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21306
HIGH 8.8

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21339
HIGH 8.8

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21409
HIGH 8.8

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21411
HIGH 8.8

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21413
HIGH 8.8

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21417
HIGH 8.8

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2024-49080
HIGH 8.8

Windows IP Routing Management Snapin Remote Code Execution Vulnerability

CVE-2024-49102
HIGH 8.8

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2024-49104
HIGH 8.8

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2024-49117
CRITICAL 8.8

Windows Hyper-V Remote Code Execution Vulnerability

CVE-2024-43620
HIGH 8.8

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2024-43621
HIGH 8.8

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2024-43622
HIGH 8.8

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2024-43624
HIGH 8.8

Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability

CVE-2024-43627
HIGH 8.8

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2024-43628
HIGH 8.8

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2024-43635
HIGH 8.8

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2024-43517
HIGH 8.8

Microsoft ActiveX Data Objects Remote Code Execution Vulnerability

CVE-2024-43518
HIGH 8.8

Windows Telephony Server Remote Code Execution Vulnerability

CVE-2024-43519
HIGH 8.8

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2024-43532
HIGH 8.8

Remote Registry Service Elevation of Privilege Vulnerability

CVE-2024-43533
HIGH 8.8

Remote Desktop Client Remote Code Execution Vulnerability

CVE-2024-43599
HIGH 8.8

Remote Desktop Client Remote Code Execution Vulnerability

CVE-2024-6197
HIGH 8.8

Hackerone: CVE-2024-6197 Freeing stack buffer in utf8asn1str

CVE-2024-38259
HIGH 8.8

Microsoft Management Console Remote Code Execution Vulnerability

CVE-2024-38114
HIGH 8.8

Windows IP Routing Management Snapin Remote Code Execution Vulnerability

CVE-2024-38115
HIGH 8.8

Windows IP Routing Management Snapin Remote Code Execution Vulnerability

CVE-2024-38116
HIGH 8.8

Windows IP Routing Management Snapin Remote Code Execution Vulnerability

CVE-2024-38130
HIGH 8.8

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2024-38131
HIGH 8.8

Clipboard Virtual Channel Extension Remote Code Execution Vulnerability

CVE-2024-38144
HIGH 8.8

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

CVE-2024-38180
HIGH 8.8

Windows SmartScreen Security Feature Bypass Vulnerability

CVE-2024-21417
HIGH 8.8

Windows Text Services Framework Elevation of Privilege Vulnerability

CVE-2024-28899
HIGH 8.8

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-30013
HIGH 8.8

Windows MultiPoint Services Remote Code Execution Vulnerability

CVE-2024-37973
HIGH 8.8

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-38053
HIGH 8.8

Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability

CVE-2024-38060
CRITICAL 8.8

Windows Imaging Component Remote Code Execution Vulnerability

CVE-2024-38104
HIGH 8.8

Windows Fax Service Remote Code Execution Vulnerability

CVE-2024-30097
HIGH 8.8

Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability

CVE-2024-30078
HIGH 8.8

Windows Wi-Fi Driver Remote Code Execution Vulnerability

CVE-2024-30068
HIGH 8.8

Windows Kernel Elevation of Privilege Vulnerability

CVE-2024-30006
HIGH 8.8

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2024-30009
HIGH 8.8

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2024-30017
HIGH 8.8

Windows Hyper-V Remote Code Execution Vulnerability

CVE-2024-20678
HIGH 8.8

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVE-2024-26179
HIGH 8.8

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2024-26200
HIGH 8.8

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2024-26205
HIGH 8.8

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2024-26210
HIGH 8.8

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2024-26214
HIGH 8.8

Microsoft WDAC SQL Server ODBC Driver Remote Code Execution Vulnerability

CVE-2024-26244
HIGH 8.8

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2024-21435
HIGH 8.8

Windows OLE Remote Code Execution Vulnerability

CVE-2024-21440
HIGH 8.8

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVE-2024-21441
HIGH 8.8

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2024-21444
HIGH 8.8

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2024-21450
HIGH 8.8

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2024-21451
HIGH 8.8

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVE-2024-26159
HIGH 8.8

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVE-2024-26161
HIGH 8.8

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2024-26162
HIGH 8.8

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVE-2024-26166
HIGH 8.8

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2024-21420
HIGH 8.8

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2024-21391
HIGH 8.8

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2024-21375
HIGH 8.8

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2024-21367
HIGH 8.8

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2024-21368
HIGH 8.8

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2024-21369
HIGH 8.8

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2024-21370
HIGH 8.8

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2024-21372
HIGH 8.8

Windows OLE Remote Code Execution Vulnerability

CVE-2024-21361
HIGH 8.8

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2024-21365
HIGH 8.8

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2024-21366
HIGH 8.8

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2024-21358
HIGH 8.8

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2024-21359
HIGH 8.8

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2024-21360
HIGH 8.8

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2024-21350
HIGH 8.8

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2024-21352
HIGH 8.8

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2024-21349
HIGH 8.8

Microsoft ActiveX Data Objects Remote Code Execution Vulnerability

CVE-2024-20674
CRITICAL 8.8

Windows Kerberos Security Feature Bypass Vulnerability

CVE-2023-35630
CRITICAL 8.8

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

CVE-2023-35639
HIGH 8.8

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVE-2023-35641
CRITICAL 8.8

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

CVE-2023-36006
HIGH 8.8

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2023-36017
HIGH 8.8

Windows Scripting Engine Memory Corruption Vulnerability

CVE-2023-36400
CRITICAL 8.8

Windows HMAC Key Derivation Elevation of Privilege Vulnerability

CVE-2023-36402
HIGH 8.8

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2023-36423
HIGH 8.8

Microsoft Remote Registry Service Remote Code Execution Vulnerability

CVE-2025-48822
CRITICAL 8.6

Windows Hyper-V Discrete Device Assignment (DDA) Remote Code Execution Vulnerability

CVE-2025-27737
HIGH 8.6

Windows Security Zone Mapping Security Feature Bypass Vulnerability

CVE-2022-2601
HIGH 8.6

A buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead to an overflow when calculating the max_glyph_size value, all…

CVE-2026-69638
HIGH 8.4

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

CVE-2026-69479
HIGH 8.4

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

CVE-2026-77503
HIGH 8.4

Windows NTFS Elevation of Privilege Vulnerability

CVE-2026-45641
HIGH 8.4

Access of resource using incompatible type ('type confusion') in Windows Hyper-V allows an unauthorized attacker to execute code locally.

CVE-2026-45607
HIGH 8.4

Out-of-bounds read in Windows Hyper-V allows an unauthorized attacker to execute code locally.

CVE-2026-44810
HIGH 8.4

Improper authentication in Windows Cryptographic Services allows an unauthorized attacker to elevate privileges locally.

CVE-2026-32091
HIGH 8.4

Microsoft Brokering File System Elevation of Privilege Vulnerability

CVE-2026-32162
HIGH 8.4

Windows COM Elevation of Privilege Vulnerability

CVE-2025-33067
HIGH 8.4

Windows Task Scheduler Elevation of Privilege Vulnerability

CVE-2025-26678
HIGH 8.4

Windows Defender Application Control Security Feature Bypass Vulnerability

CVE-2025-24084
CRITICAL 8.4

Windows Subsystem for Linux (WSL2) Kernel Remote Code Execution Vulnerability

CVE-2024-49105
CRITICAL 8.4

Remote Desktop Client Remote Code Execution Vulnerability

CVE-2024-37984
HIGH 8.4

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-29050
HIGH 8.4

Windows Cryptographic Services Remote Code Execution Vulnerability

CVE-2024-43574
HIGH 8.3

Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability

CVE-2023-40547
HIGH 8.3

A remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. This flaw allow…

CVE-2026-81354
HIGH 8.2

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.

CVE-2026-72962
HIGH 8.2

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-72961
HIGH 8.2

Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

CVE-2026-69906
HIGH 8.2

Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

CVE-2026-69874
HIGH 8.2

Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally.

CVE-2026-69846
HIGH 8.2

Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

CVE-2026-69820
HIGH 8.2

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.

CVE-2026-47652
HIGH 8.2

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.

CVE-2026-83997
HIGH 8.1

Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

CVE-2026-78449
HIGH 8.1

Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.

CVE-2026-72981
HIGH 8.1

Use after free in IP Helper allows an unauthorized attacker to execute code over a network.

CVE-2026-72936
HIGH 8.1

Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network.

CVE-2026-70563
HIGH 8.1

Improper link resolution before file access ('link following') in Windows Shell allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-70342
HIGH 8.1

Use after free in Windows Ancillary Function Driver for WinSock allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-69438
HIGH 8.1

Incorrect conversion between numeric types in Microsoft JScript allows an unauthorized attacker to execute code over a network.

CVE-2026-69325
HIGH 8.1

Microsoft JScript Remote Code Execution Vulnerability

CVE-2026-69524
HIGH 8.1

Windows Active Directory Domain Services Remote Code Execution Vulnerability

CVE-2026-69546
HIGH 8.1

Windows Active Directory Domain Services Remote Code Execution Vulnerability

CVE-2026-69732
HIGH 8.1

Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability

CVE-2026-69786
HIGH 8.1

Windows Text Shaping Remote Code Execution Vulnerability

CVE-2026-62889
HIGH 8.1

Double free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.

CVE-2026-62819
HIGH 8.1

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

CVE-2026-62792
HIGH 8.1

Stack-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to execute code over a network.

CVE-2026-62781
HIGH 8.1

Heap-based buffer overflow in RPC Runtime allows an unauthorized attacker to execute code over a network.

CVE-2026-45635
HIGH 8.1

Access of resource using incompatible type ('type confusion') in Universal Plug and Play (upnp.dll) allows an unauthorized attacker to execute code over a netw…

CVE-2026-45599
HIGH 8.1

Use after free in Universal Plug and Play (upnp.dll) allows an unauthorized attacker to execute code over a network.

CVE-2026-42981
HIGH 8.1

Integer underflow (wrap or wraparound) in Windows Performance Monitor allows an unauthorized attacker to execute code over a network.

CVE-2026-42974
HIGH 8.1

Integer overflow or wraparound in Windows Performance Monitor allows an unauthorized attacker to execute code over a network.

CVE-2026-40415
HIGH 8.1

Windows TCP/IP Remote Code Execution Vulnerability

CVE-2026-33827
HIGH 8.1

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an unauthorized attacker to execute code o…

CVE-2026-20856
HIGH 8.1

Improper input validation in Windows Server Update Service allows an unauthorized attacker to execute code over a network.

CVE-2025-50177
CRITICAL 8.1

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVE-2025-33054
HIGH 8.1

Remote Desktop Spoofing Vulnerability

CVE-2025-29828
CRITICAL 8.1

Windows Schannel Remote Code Execution Vulnerability

CVE-2025-33070
CRITICAL 8.1

Windows Netlogon Elevation of Privilege Vulnerability

CVE-2025-26663
CRITICAL 8.1

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVE-2025-26670
CRITICAL 8.1

Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability

CVE-2025-24035
CRITICAL 8.1

Windows Remote Desktop Services Remote Code Execution Vulnerability

CVE-2025-21376
CRITICAL 8.1

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVE-2025-21224
HIGH 8.1

Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability

CVE-2025-21294
CRITICAL 8.1

Microsoft Digest Authentication Remote Code Execution Vulnerability

CVE-2025-21295
CRITICAL 8.1

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

CVE-2024-49118
CRITICAL 8.1

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVE-2024-49122
CRITICAL 8.1

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVE-2024-49123
CRITICAL 8.1

Windows Remote Desktop Services Remote Code Execution Vulnerability

CVE-2024-49124
CRITICAL 8.1

Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability

CVE-2024-49126
CRITICAL 8.1

Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability

CVE-2024-49127
CRITICAL 8.1

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVE-2024-49132
CRITICAL 8.1

Windows Remote Desktop Services Remote Code Execution Vulnerability

CVE-2024-43625
CRITICAL 8.1

Microsoft Windows VMSwitch Elevation of Privilege Vulnerability

CVE-2024-43582
CRITICAL 8.1

Remote Desktop Protocol Server Remote Code Execution Vulnerability

CVE-2024-38240
HIGH 8.1

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

CVE-2024-38045
HIGH 8.1

Windows TCP/IP Remote Code Execution Vulnerability

CVE-2024-21416
HIGH 8.1

Windows TCP/IP Remote Code Execution Vulnerability

CVE-2024-30020
HIGH 8.1

Windows Cryptographic Services Remote Code Execution Vulnerability

CVE-2024-21407
CRITICAL 8.1

Windows Hyper-V Remote Code Execution Vulnerability

CVE-2024-21357
HIGH 8.1

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

CVE-2024-20652
HIGH 8.1

Windows HTML Platforms Security Feature Bypass Vulnerability

CVE-2023-35628
CRITICAL 8.1

Windows MSHTML Platform Remote Code Execution Vulnerability

CVE-2026-69875
HIGH 8.0

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.

CVE-2026-69847
HIGH 8.0

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.

CVE-2026-69826
HIGH 8.0

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.

CVE-2026-69773
HIGH 8.0

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.

CVE-2026-69727
HIGH 8.0

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.

CVE-2026-69717
HIGH 8.0

Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network.

CVE-2026-69689
HIGH 8.0

Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges over a network.

CVE-2026-69681
HIGH 8.0

Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges over a network.

CVE-2026-69643
HIGH 8.0

Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network.

CVE-2026-69623
HIGH 8.0

Heap-based buffer overflow in Windows HTTP Print Provider allows an authorized attacker to execute code over a network.

CVE-2026-69625
HIGH 8.0

Heap-based buffer overflow in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges over a network.

CVE-2026-69619
HIGH 8.0

Out-of-bounds read in Windows exFAT File System allows an authorized attacker to elevate privileges over a network.

CVE-2026-69503
HIGH 8.0

Stack-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges over a network.

CVE-2026-69505
HIGH 8.0

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.

CVE-2026-69481
HIGH 8.0

Heap-based buffer overflow in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network.

CVE-2026-69423
HIGH 8.0

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges over a network.

CVE-2026-69371
HIGH 8.0

Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges over a network.

CVE-2026-69332
HIGH 8.0

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.

CVE-2026-69322
HIGH 8.0

Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network.

CVE-2026-68838
HIGH 8.0

Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.

CVE-2026-68834
HIGH 8.0

Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.

CVE-2026-68827
HIGH 8.0

Integer underflow (wrap or wraparound) in Windows GDI+ allows an authorized attacker to elevate privileges over a network.

CVE-2026-68876
HIGH 8.0

Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

CVE-2026-68878
HIGH 8.0

Windows Fast FAT Driver Elevation of Privilege Vulnerability

CVE-2026-68880
HIGH 8.0

Windows Win32k Elevation of Privilege Vulnerability

CVE-2026-68894
HIGH 8.0

Windows Error Reporting Elevation of Privilege Vulnerability

CVE-2026-69271
HIGH 8.0

Microsoft Standard XPS Elevation of Privilege Vulnerability

CVE-2026-69301
HIGH 8.0

Windows Win32k Elevation of Privilege Vulnerability

CVE-2026-69346
HIGH 8.0

Windows Print Spooler Components Elevation of Privilege Vulnerability

CVE-2026-69365
HIGH 8.0

Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability

CVE-2026-69418
HIGH 8.0

Volume Manager Driver Elevation of Privilege Vulnerability

CVE-2026-69427
HIGH 8.0

Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability

CVE-2026-69458
HIGH 8.0

Windows BitLocker Elevation of Privilege Vulnerability

CVE-2026-69462
HIGH 8.0

Windows Error Reporting Elevation of Privilege Vulnerability

CVE-2026-69512
HIGH 8.0

Windows Spaceport.sys Elevation of Privilege Vulnerability

CVE-2026-69714
HIGH 8.0

Windows Device Association Service Elevation of Privilege Vulnerability

CVE-2026-69762
HIGH 8.0

Windows Win32k Elevation of Privilege Vulnerability

CVE-2026-69807
HIGH 8.0

PowerShell Elevation of Privilege Vulnerability

CVE-2026-25172
HIGH 8.0

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2026-25173
HIGH 8.0

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2026-26111
HIGH 8.0

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2026-20931
HIGH 8.0

External control of file name or path in Windows Telephony Service allows an authorized attacker to elevate privileges over an adjacent network.

CVE-2025-60715
HIGH 8.0

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2025-62452
HIGH 8.0

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2025-47972
HIGH 8.0

Windows Input Method Editor (IME) Elevation of Privilege Vulnerability

CVE-2025-49691
HIGH 8.0

Windows Miracast Wireless Display Remote Code Execution Vulnerability

CVE-2025-27487
HIGH 8.0

Remote Desktop Client Remote Code Execution Vulnerability

CVE-2024-30092
HIGH 8.0

Windows Hyper-V Remote Code Execution Vulnerability

CVE-2024-37969
HIGH 8.0

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-37970
HIGH 8.0

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-37971
HIGH 8.0

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-37972
HIGH 8.0

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-37974
HIGH 8.0

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-37975
HIGH 8.0

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-37977
HIGH 8.0

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-37978
HIGH 8.0

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-37981
HIGH 8.0

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-37986
HIGH 8.0

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-37987
HIGH 8.0

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-37988
HIGH 8.0

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-37989
HIGH 8.0

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-38010
HIGH 8.0

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-38011
HIGH 8.0

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-30077
HIGH 8.0

Windows OLE Remote Code Execution Vulnerability

CVE-2024-26180
HIGH 8.0

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-26189
HIGH 8.0

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-26240
HIGH 8.0

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-28925
HIGH 8.0

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-20654
HIGH 8.0

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVE-2023-35634
HIGH 8.0

Windows Bluetooth Driver Remote Code Execution Vulnerability

CVE-2023-36425
HIGH 8.0

Windows Distributed File System (DFS) Remote Code Execution Vulnerability

CVE-2026-6726
HIGH 7.9

An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker with elevated privileges to obtain a cred…

CVE-2026-48575
HIGH 7.9

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

CVE-2026-48576
HIGH 7.9

No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

CVE-2026-48578
HIGH 7.9

Improper access control in Windows Secure Boot allows an authorized attacker to elevate privileges locally.

CVE-2026-48568
HIGH 7.9

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

CVE-2026-48570
HIGH 7.9

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

CVE-2026-48573
HIGH 7.9

No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

CVE-2026-47656
HIGH 7.9

Protection mechanism failure in Windows Boot Manager allows an authorized attacker to bypass a security feature locally.

CVE-2026-45588
HIGH 7.9

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

CVE-2026-84000
HIGH 7.8

Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally.

CVE-2026-83987
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83988
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83990
HIGH 7.8

Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

CVE-2026-83979
HIGH 7.8

Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83980
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83981
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83982
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83983
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83985
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83974
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83976
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83977
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83978
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83968
HIGH 7.8

Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83969
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83970
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83971
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83972
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83973
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83954
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83955
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83967
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83498
HIGH 7.8

Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

CVE-2026-83942
HIGH 7.8

Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-80075
HIGH 7.8

Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally.

CVE-2026-78448
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-77904
HIGH 7.8

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-77500
HIGH 7.8

Release of invalid pointer or reference in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

CVE-2026-77489
HIGH 7.8

Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-73024
HIGH 7.8

Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-73026
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-73020
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-73021
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-73011
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-73014
HIGH 7.8

Missing authorization in Data Sharing Service Client allows an authorized attacker to elevate privileges locally.

CVE-2026-73015
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-73007
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72997
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-73000
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-73001
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-73002
HIGH 7.8

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72992
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72993
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72994
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72995
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72996
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72990
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72991
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72988
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72965
HIGH 7.8

Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72967
HIGH 7.8

Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.

CVE-2026-72953
HIGH 7.8

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-72941
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72944
HIGH 7.8

Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72929
HIGH 7.8

Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-71343
HIGH 7.8

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to execute code locally.

CVE-2026-71345
HIGH 7.8

Out-of-bounds write in Windows Spaceport.sys allows an authorized attacker to execute code locally.

CVE-2026-71334
HIGH 7.8

Heap-based buffer overflow in Windows NFS Portmapper allows an authorized attacker to elevate privileges locally.

CVE-2026-71337
HIGH 7.8

Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally.

CVE-2026-70574
HIGH 7.8

Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-70581
HIGH 7.8

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-70569
HIGH 7.8

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-70572
HIGH 7.8

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-70564
HIGH 7.8

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

CVE-2026-70289
HIGH 7.8

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-69921
HIGH 7.8

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

CVE-2026-69907
HIGH 7.8

Improper handling of insufficient permissions or privileges in Windows Enterprise App Management allows an authorized attacker to elevate privileges locally.

CVE-2026-69900
HIGH 7.8

Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-69864
HIGH 7.8

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.

CVE-2026-69841
HIGH 7.8

Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-69844
HIGH 7.8

Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-69822
HIGH 7.8

Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally.

CVE-2026-69787
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69738
HIGH 7.8

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69707
HIGH 7.8

Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.

CVE-2026-69709
HIGH 7.8

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

CVE-2026-69691
HIGH 7.8

Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-69685
HIGH 7.8

Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.

CVE-2026-69687
HIGH 7.8

Integer underflow (wrap or wraparound) in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.

CVE-2026-69612
HIGH 7.8

Absolute path traversal in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-69604
HIGH 7.8

Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69608
HIGH 7.8

Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-69589
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69592
HIGH 7.8

Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-69593
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69583
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69584
HIGH 7.8

Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-69585
HIGH 7.8

Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-69580
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69582
HIGH 7.8

Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-69571
HIGH 7.8

Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.

CVE-2026-69532
HIGH 7.8

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-69513
HIGH 7.8

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-69489
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69475
HIGH 7.8

Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

CVE-2026-69476
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69467
HIGH 7.8

Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

CVE-2026-69456
HIGH 7.8

Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.

CVE-2026-69450
HIGH 7.8

Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-69426
HIGH 7.8

Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to execute code locally.

CVE-2026-69420
HIGH 7.8

Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges locally.

CVE-2026-69421
HIGH 7.8

Integer underflow (wrap or wraparound) in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-69407
HIGH 7.8

Integer overflow or wraparound in Volume Manager Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-69391
HIGH 7.8

Stack-based buffer overflow in Windows Broker Infrastructure Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69352
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69323
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69312
HIGH 7.8

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-69307
HIGH 7.8

Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.

CVE-2026-69298
HIGH 7.8

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69293
HIGH 7.8

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69295
HIGH 7.8

Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-69284
HIGH 7.8

Heap-based buffer overflow in Windows DCOM Server allows an authorized attacker to elevate privileges locally.

CVE-2026-69270
HIGH 7.8

Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.

CVE-2026-69265
HIGH 7.8

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-68892
HIGH 7.8

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.

CVE-2026-68875
HIGH 7.8

Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally.

CVE-2026-68848
HIGH 7.8

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

CVE-2026-68844
HIGH 7.8

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally.

CVE-2026-68845
HIGH 7.8

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

CVE-2026-68841
HIGH 7.8

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-68832
HIGH 7.8

Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-62697
HIGH 7.8

Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

CVE-2026-56172
HIGH 7.8

Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.

CVE-2026-56177
HIGH 7.8

Use after free in Windows Server allows an authorized attacker to elevate privileges locally.

CVE-2026-62810
HIGH 7.8

Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability

CVE-2026-68877
HIGH 7.8

Windows Storage Spaces Controller Remote Code Execution Vulnerability

CVE-2026-68885
HIGH 7.8

Microsoft Standard XPS Elevation of Privilege Vulnerability

CVE-2026-68888
HIGH 7.8

Microsoft Standard XPS Elevation of Privilege Vulnerability

CVE-2026-68890
HIGH 7.8

Microsoft Standard XPS Elevation of Privilege Vulnerability

CVE-2026-68896
HIGH 7.8

Microsoft Windows Search Component Elevation of Privilege Vulnerability

CVE-2026-69269
HIGH 7.8

Microsoft Standard XPS Elevation of Privilege Vulnerability

CVE-2026-69277
HIGH 7.8

Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability

CVE-2026-69283
HIGH 7.8

Windows CD-ROM Driver Elevation of Privilege Vulnerability

CVE-2026-69289
HIGH 7.8

Windows Setup Files Cleanup Elevation of Privilege Vulnerability

CVE-2026-69290
HIGH 7.8

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

CVE-2026-69324
HIGH 7.8

Windows Performance Monitor Elevation of Privilege Vulnerability

CVE-2026-69328
HIGH 7.8

Windows Storage Elevation of Privilege Vulnerability

CVE-2026-69359
HIGH 7.8

Active Directory Domain Services Elevation of Privilege Vulnerability

CVE-2026-69368
HIGH 7.8

Windows Overlay Filter Elevation of Privilege Vulnerability

CVE-2026-69377
HIGH 7.8

Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

CVE-2026-69389
HIGH 7.8

Windows Storage Management Provider Elevation of Privilege Vulnerability

CVE-2026-69392
HIGH 7.8

Windows Shell Elevation of Privilege Vulnerability

CVE-2026-69424
HIGH 7.8

Windows Distributed File System (DFS) Elevation of Privilege Vulnerability

CVE-2026-69432
HIGH 7.8

Volume Manager Driver Elevation of Privilege Vulnerability

CVE-2026-69433
HIGH 7.8

Windows Error Reporting Elevation of Privilege Vulnerability

CVE-2026-69436
HIGH 7.8

Windows Error Reporting Elevation of Privilege Vulnerability

CVE-2026-69444
HIGH 7.8

Microsoft Windows Speech Elevation of Privilege Vulnerability

CVE-2026-69445
HIGH 7.8

Windows Compressed Folder Elevation of Privilege Vulnerability

CVE-2026-69447
HIGH 7.8

Windows Audio Service Elevation of Privilege Vulnerability

CVE-2026-69455
HIGH 7.8

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

CVE-2026-69459
HIGH 7.8

Windows Power Dependency Coordinator Elevation of Privilege Vulnerability

CVE-2026-69478
HIGH 7.8

Windows Device Association Service Elevation of Privilege Vulnerability

CVE-2026-69480
HIGH 7.8

Windows Partition Management Driver Elevation of Privilege Vulnerability

CVE-2026-69509
HIGH 7.8

Role: Windows Fax Service Elevation of Privilege Vulnerability

CVE-2026-69528
HIGH 7.8

Windows Shell Elevation of Privilege Vulnerability

CVE-2026-69534
HIGH 7.8

Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

CVE-2026-69535
HIGH 7.8

Windows Spaceport.sys Elevation of Privilege Vulnerability

CVE-2026-69538
HIGH 7.8

Windows Spaceport.sys Remote Code Execution Vulnerability

CVE-2026-69541
HIGH 7.8

Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability

CVE-2026-69561
HIGH 7.8

Windows CD-ROM Driver Elevation of Privilege Vulnerability

CVE-2026-69576
HIGH 7.8

Graphic Fonts Elevation of Privilege Vulnerability

CVE-2026-69725
CRITICAL 7.8

Windows Hello Elevation of Privilege Vulnerability

CVE-2026-69731
HIGH 7.8

HID Class Driver Elevation of Privilege Vulnerability

CVE-2026-69758
HIGH 7.8

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

CVE-2026-69785
HIGH 7.8

Windows Smart Card Elevation of Privilege Vulnerability

CVE-2026-69790
HIGH 7.8

Windows Credential Providers Elevation of Privilege Vulnerability

CVE-2026-69799
CRITICAL 7.8

Windows Hello Elevation of Privilege Vulnerability

CVE-2026-69801
HIGH 7.8

Windows Audio Service Elevation of Privilege Vulnerability

CVE-2026-70583
HIGH 7.8

Windows Core Messaging Elevation of Privilege Vulnerability

CVE-2026-70584
HIGH 7.8

Windows Core Messaging Elevation of Privilege Vulnerability

CVE-2026-78447
HIGH 7.8

Windows Biometric Service Elevation of Privilege Vulnerability

CVE-2026-83975
HIGH 7.8

Windows Biometric Service Elevation of Privilege Vulnerability

CVE-2026-83986
HIGH 7.8

Windows Biometric Service Elevation of Privilege Vulnerability

CVE-2026-83995
HIGH 7.8

Windows NTFS Elevation of Privilege Vulnerability

CVE-2026-70346
HIGH 7.8

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-70347
HIGH 7.8

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-70344
HIGH 7.8

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-70345
HIGH 7.8

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-66799
HIGH 7.8

Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally.

CVE-2026-65814
HIGH 7.8

Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-65786
HIGH 7.8

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-65787
HIGH 7.8

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-65790
HIGH 7.8

Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

CVE-2026-65773
HIGH 7.8

Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-65774
HIGH 7.8

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-65775
HIGH 7.8

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-65671
HIGH 7.8

Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally.

CVE-2026-65672
HIGH 7.8

Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally.

CVE-2026-62894
HIGH 7.8

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-62888
HIGH 7.8

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-62890
HIGH 7.8

Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally.

CVE-2026-62885
HIGH 7.8

Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-62876
HIGH 7.8

Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-62877
HIGH 7.8

Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-62880
HIGH 7.8

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-62832
HIGH 7.8

Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.

CVE-2026-62811
HIGH 7.8

Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-62797
HIGH 7.8

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-62783
HIGH 7.8

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-62777
HIGH 7.8

Missing authentication for critical function in Windows License Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-62768
HIGH 7.8

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-62770
HIGH 7.8

Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privileges locally.

CVE-2026-62771
HIGH 7.8

Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-62755
HIGH 7.8

Stack-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally.

CVE-2026-62758
HIGH 7.8

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-62751
HIGH 7.8

Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally.

CVE-2026-62752
HIGH 7.8

Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.

CVE-2026-62741
HIGH 7.8

Integer underflow (wrap or wraparound) in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-62747
HIGH 7.8

Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

CVE-2026-62735
HIGH 7.8

Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-62736
HIGH 7.8

Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally.

CVE-2026-62739
HIGH 7.8

Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-62732
HIGH 7.8

Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

CVE-2026-62733
HIGH 7.8

Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-62717
HIGH 7.8

Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

CVE-2026-62719
HIGH 7.8

Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

CVE-2026-62721
HIGH 7.8

Insufficient granularity of access control in User-Mode Power Service (UMPS) allows an authorized attacker to elevate privileges locally.

CVE-2026-62711
HIGH 7.8

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-62712
HIGH 7.8

Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-62713
HIGH 7.8

Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-62707
HIGH 7.8

Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

CVE-2026-62710
HIGH 7.8

Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

CVE-2026-62696
HIGH 7.8

Integer underflow (wrap or wraparound) in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

CVE-2026-62698
HIGH 7.8

Numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to elevate privileges locally.

CVE-2026-62700
HIGH 7.8

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-62701
HIGH 7.8

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

CVE-2026-62692
HIGH 7.8

Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

CVE-2026-62695
HIGH 7.8

Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.

CVE-2026-61937
HIGH 7.8

Integer overflow or wraparound in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-61932
HIGH 7.8

Access of resource using incompatible type ('type confusion') in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-61934
HIGH 7.8

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-61925
HIGH 7.8

Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-61926
HIGH 7.8

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-61930
HIGH 7.8

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-61923
HIGH 7.8

Heap-based buffer overflow in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally.

CVE-2026-61367
HIGH 7.8

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

CVE-2026-61364
HIGH 7.8

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

CVE-2026-61365
HIGH 7.8

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

CVE-2026-61355
HIGH 7.8

Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

CVE-2026-61356
HIGH 7.8

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

CVE-2026-61358
HIGH 7.8

Improper link resolution before file access ('link following') in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker to elevate …

CVE-2026-61359
HIGH 7.8

Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.

CVE-2026-61349
HIGH 7.8

Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally.

CVE-2026-61353
HIGH 7.8

Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

CVE-2026-59127
HIGH 7.8

Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-56174
HIGH 7.8

Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally.

CVE-2026-54984
HIGH 7.8

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code locally.

CVE-2026-50471
HIGH 7.8

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

CVE-2026-58601
HIGH 7.8

Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-42982
HIGH 7.8

Improper validation of consistency within input in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

CVE-2026-44800
HIGH 7.8

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elev…

CVE-2026-8863
HIGH 7.8

Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to SecureBoot bypass. An attacker with administrative privileges or the ability to modify the bo…

CVE-2026-48574
HIGH 7.8

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally.

CVE-2026-48583
HIGH 7.8

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-45658
HIGH 7.8

Improper access control in Windows BitLocker allows an authorized attacker to bypass a security feature locally.

CVE-2026-45656
HIGH 7.8

Protection mechanism failure in Windows UEFI allows an authorized attacker to bypass a security feature locally.

CVE-2026-45636
HIGH 7.8

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

CVE-2026-45637
HIGH 7.8

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-45638
HIGH 7.8

Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-45605
HIGH 7.8

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

CVE-2026-45592
HIGH 7.8

Integer overflow or wraparound in Windows Internet (wininet.dll) allows an authorized attacker to elevate privileges locally.

CVE-2026-45593
HIGH 7.8

Use after free in Windows SDK allows an authorized attacker to elevate privileges locally.

CVE-2026-45586
HIGH 7.8

Improper link resolution before file access ('link following') in Windows Collaborative Translation Framework allows an authorized attacker to elevate privileg…

CVE-2026-45487
HIGH 7.8

Time-of-check time-of-use (TOCTOU) race condition in Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

CVE-2026-44812
HIGH 7.8

Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.

CVE-2026-44802
HIGH 7.8

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-44803
HIGH 7.8

Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.

CVE-2026-42989
HIGH 7.8

Improper link resolution before file access ('link following') in Winlogon allows an authorized attacker to elevate privileges locally.

CVE-2026-42991
HIGH 7.8

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elev…

CVE-2026-42983
HIGH 7.8

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-42986
HIGH 7.8

Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

CVE-2026-42977
HIGH 7.8

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elev…

CVE-2026-42978
HIGH 7.8

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elev…

CVE-2026-42979
HIGH 7.8

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elev…

CVE-2026-42980
HIGH 7.8

Integer underflow (wrap or wraparound) in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-42916
HIGH 7.8

Integer overflow or wraparound in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-42905
HIGH 7.8

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-42837
HIGH 7.8

Out-of-bounds read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-42828
HIGH 7.8

Buffer over-read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-40404
HIGH 7.8

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

CVE-2026-40409
HIGH 7.8

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

CVE-2026-41092
HIGH 7.8

Improper access control in Microsoft Kinect allows an authorized attacker to elevate privileges locally.

CVE-2026-33828
HIGH 7.8

Trust boundary violation in Windows Attestation allows an authorized attacker to elevate privileges locally.

CVE-2026-41088
HIGH 7.8

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privile…

CVE-2026-40397
HIGH 7.8

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-40399
HIGH 7.8

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileg…

CVE-2026-35417
HIGH 7.8

Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

CVE-2026-34336
HIGH 7.8

Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-33841
HIGH 7.8

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-34330
HIGH 7.8

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate p…

CVE-2026-33834
HIGH 7.8

Windows Event Logging Service Elevation of Privilege Vulnerability

CVE-2026-33835
HIGH 7.8

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2026-33837
HIGH 7.8

Windows TCP/IP Local Elevation of Privilege Vulnerability

CVE-2026-33838
HIGH 7.8

Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability

CVE-2026-34333
HIGH 7.8

Windows Win32k Elevation of Privilege Vulnerability

CVE-2026-34334
HIGH 7.8

Windows TCP/IP Elevation of Privilege Vulnerability

CVE-2026-34337
HIGH 7.8

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2026-34338
HIGH 7.8

Windows Telephony Service Elevation of Privilege Vulnerability

CVE-2026-34343
HIGH 7.8

Windows Application Identity (AppID) Subsystem Elevation of Privilege Vulnerability

CVE-2026-34344
HIGH 7.8

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2026-34351
HIGH 7.8

Windows TCP/IP Elevation of Privilege Vulnerability

CVE-2026-35415
HIGH 7.8

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

CVE-2026-35418
HIGH 7.8

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2026-35421
CRITICAL 7.8

Windows GDI Remote Code Execution Vulnerability

CVE-2026-40377
HIGH 7.8

Microsoft Cryptographic Services Elevation of Privilege Vulnerability

CVE-2026-40382
HIGH 7.8

Windows Telephony Service Elevation of Privilege Vulnerability

CVE-2026-40398
HIGH 7.8

Windows Remote Desktop Services Elevation of Privilege Vulnerability

CVE-2026-40407
HIGH 7.8

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2026-40408
HIGH 7.8

Windows WAN ARP Driver Elevation of Privilege Vulnerability

CVE-2026-33098
HIGH 7.8

Use after free in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-32154
HIGH 7.8

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-32152
HIGH 7.8

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-32153
HIGH 7.8

Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.

CVE-2026-20930
HIGH 7.8

Windows Management Services Elevation of Privilege Vulnerability

CVE-2026-26153
HIGH 7.8

Windows Encrypted File System (EFS) Elevation of Privilege Vulnerability

CVE-2026-26156
HIGH 7.8

Windows Hyper-V Remote Code Execution Vulnerability

CVE-2026-26159
HIGH 7.8

Remote Desktop Licensing Service Elevation of Privilege Vulnerability

CVE-2026-26160
HIGH 7.8

Remote Desktop Licensing Service Elevation of Privilege Vulnerability

CVE-2026-26161
HIGH 7.8

Windows Sensor Data Service Elevation of Privilege Vulnerability

CVE-2026-26162
HIGH 7.8

Windows OLE Elevation of Privilege Vulnerability

CVE-2026-26163
HIGH 7.8

Windows Kernel Elevation of Privilege Vulnerability

CVE-2026-26168
HIGH 7.8

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2026-26170
HIGH 7.8

PowerShell Elevation of Privilege Vulnerability

CVE-2026-26172
HIGH 7.8

Windows Push Notifications Elevation of Privilege Vulnerability

CVE-2026-26176
HIGH 7.8

Windows Client Side Caching driver (csc.sys) Elevation of Privilege Vulnerability

CVE-2026-26179
HIGH 7.8

Windows Kernel Elevation of Privilege Vulnerability

CVE-2026-26180
HIGH 7.8

Windows Kernel Elevation of Privilege Vulnerability

CVE-2026-26181
HIGH 7.8

Microsoft Brokering File System Elevation of Privilege Vulnerability

CVE-2026-26184
HIGH 7.8

Windows Projected File System Elevation of Privilege Vulnerability

CVE-2026-27907
HIGH 7.8

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

CVE-2026-27909
HIGH 7.8

Windows Search Service Elevation of Privilege Vulnerability

CVE-2026-27910
HIGH 7.8

Windows Installer Elevation of Privilege Vulnerability

CVE-2026-27911
HIGH 7.8

Windows User Interface Core Elevation of Privilege Vulnerability

CVE-2026-27914
HIGH 7.8

Microsoft Management Console Elevation of Privilege Vulnerability

CVE-2026-27915
HIGH 7.8

Windows UPnP Device Host Elevation of Privilege Vulnerability

CVE-2026-27916
HIGH 7.8

Windows UPnP Device Host Elevation of Privilege Vulnerability

CVE-2026-27918
HIGH 7.8

Windows Shell Elevation of Privilege Vulnerability

CVE-2026-27919
HIGH 7.8

Windows UPnP Device Host Elevation of Privilege Vulnerability

CVE-2026-27920
HIGH 7.8

Windows UPnP Device Host Elevation of Privilege Vulnerability

CVE-2026-27923
HIGH 7.8

Desktop Window Manager Elevation of Privilege Vulnerability

CVE-2026-27924
HIGH 7.8

Desktop Window Manager Elevation of Privilege Vulnerability

CVE-2026-27927
HIGH 7.8

Windows Projected File System Elevation of Privilege Vulnerability

CVE-2026-32069
HIGH 7.8

Windows Projected File System Elevation of Privilege Vulnerability

CVE-2026-32074
HIGH 7.8

Windows Projected File System Elevation of Privilege Vulnerability

CVE-2026-32076
HIGH 7.8

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

CVE-2026-32077
HIGH 7.8

Windows UPnP Device Host Elevation of Privilege Vulnerability

CVE-2026-32078
HIGH 7.8

Windows Projected File System Elevation of Privilege Vulnerability

CVE-2026-32089
HIGH 7.8

Windows Speech Brokered Api Elevation of Privilege Vulnerability

CVE-2026-32090
HIGH 7.8

Windows Speech Brokered Api Elevation of Privilege Vulnerability

CVE-2026-32155
HIGH 7.8

Desktop Window Manager Elevation of Privilege Vulnerability

CVE-2026-32158
HIGH 7.8

Windows Push Notifications Elevation of Privilege Vulnerability

CVE-2026-32159
HIGH 7.8

Windows Push Notifications Elevation of Privilege Vulnerability

CVE-2026-32160
HIGH 7.8

Windows Push Notifications Elevation of Privilege Vulnerability

CVE-2026-32163
HIGH 7.8

Windows User Interface Core Elevation of Privilege Vulnerability

CVE-2026-32164
HIGH 7.8

Windows User Interface Core Elevation of Privilege Vulnerability

CVE-2026-32165
HIGH 7.8

Windows User Interface Core Elevation of Privilege Vulnerability

CVE-2026-32183
HIGH 7.8

Windows Snipping Tool Remote Code Execution Vulnerability

CVE-2026-24293
HIGH 7.8

Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-24294
HIGH 7.8

Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally.

CVE-2026-24289
HIGH 7.8

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-23672
HIGH 7.8

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

CVE-2026-23673
HIGH 7.8

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

CVE-2026-24287
HIGH 7.8

Windows Kernel Elevation of Privilege Vulnerability

CVE-2026-24290
HIGH 7.8

Windows Projected File System Elevation of Privilege Vulnerability

CVE-2026-24291
HIGH 7.8

Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability

CVE-2026-24292
HIGH 7.8

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

CVE-2026-25165
HIGH 7.8

Performance Counters for Windows Elevation of Privilege Vulnerability

CVE-2026-25174
HIGH 7.8

Windows Extensible File Allocation Table Elevation of Privilege Vulnerability

CVE-2026-25175
HIGH 7.8

Windows NTFS Elevation of Privilege Vulnerability

CVE-2026-25176
HIGH 7.8

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2026-25187
HIGH 7.8

Winlogon Elevation of Privilege Vulnerability

CVE-2026-25190
HIGH 7.8

Windows GDI Remote Code Execution Vulnerability

CVE-2026-26128
HIGH 7.8

Windows SMB Server Elevation of Privilege Vulnerability

CVE-2026-26132
HIGH 7.8

Windows Kernel Elevation of Privilege Vulnerability

CVE-2026-21231
HIGH 7.8

Windows Kernel Elevation of Privilege Vulnerability

CVE-2026-21232
HIGH 7.8

Windows HTTP.sys Elevation of Privilege Vulnerability

CVE-2026-21236
HIGH 7.8

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2026-21238
HIGH 7.8

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2026-21239
HIGH 7.8

Windows Kernel Elevation of Privilege Vulnerability

CVE-2026-21240
HIGH 7.8

Windows HTTP.sys Elevation of Privilege Vulnerability

CVE-2026-21246
HIGH 7.8

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2026-20940
HIGH 7.8

Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-20938
HIGH 7.8

Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

CVE-2026-20924
HIGH 7.8

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.

CVE-2026-20920
HIGH 7.8

Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.

CVE-2026-20922
HIGH 7.8

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

CVE-2026-20923
HIGH 7.8

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.

CVE-2026-20873
HIGH 7.8

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to ele…

CVE-2026-20874
HIGH 7.8

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to ele…

CVE-2026-20877
HIGH 7.8

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.

CVE-2026-20918
HIGH 7.8

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to ele…

CVE-2026-20867
HIGH 7.8

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to ele…

CVE-2026-20871
HIGH 7.8

Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-20861
HIGH 7.8

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to ele…

CVE-2026-20864
HIGH 7.8

Heap-based buffer overflow in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.

CVE-2026-20865
HIGH 7.8

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.

CVE-2026-20866
HIGH 7.8

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to ele…

CVE-2026-20857
HIGH 7.8

Untrusted pointer dereference in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-20858
HIGH 7.8

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.

CVE-2026-20860
HIGH 7.8

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privile…

CVE-2026-20840
HIGH 7.8

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

CVE-2026-20843
HIGH 7.8

Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.

CVE-2026-20832
HIGH 7.8

Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege Vulnerability

CVE-2026-20837
HIGH 7.8

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally.

CVE-2026-20826
HIGH 7.8

Concurrent execution using shared resource with improper synchronization ('race condition') in Tablet Windows User Interface (TWINUI) Subsystem allows an autho…

CVE-2026-20831
HIGH 7.8

Time-of-check time-of-use (toctou) race condition in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-20820
HIGH 7.8

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-20822
HIGH 7.8

Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

CVE-2026-20816
HIGH 7.8

Time-of-check time-of-use (toctou) race condition in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-20817
HIGH 7.8

Improper handling of insufficient permissions or privileges in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-20809
HIGH 7.8

Time-of-check time-of-use (toctou) race condition in Windows Kernel Memory allows an authorized attacker to elevate privileges locally.

CVE-2026-20811
HIGH 7.8

Access of resource using incompatible type ('type confusion') in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.

CVE-2023-31096
HIGH 7.8

MITRE: CVE-2023-31096 Windows Agere Soft Modem Driver Elevation of Privilege Vulnerability

CVE-2024-55414
HIGH 7.8

Windows Motorola Soft Modem Driver Elevation of Privilege Vulnerability

CVE-2025-54100
HIGH 7.8

PowerShell Remote Code Execution Vulnerability

CVE-2025-55233
HIGH 7.8

Windows Projected File System Elevation of Privilege Vulnerability

CVE-2025-59516
HIGH 7.8

Windows Storage VSP Driver Elevation of Privilege Vulnerability

CVE-2025-59517
HIGH 7.8

Windows Storage VSP Driver Elevation of Privilege Vulnerability

CVE-2025-62454
HIGH 7.8

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2025-62457
HIGH 7.8

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2025-62458
HIGH 7.8

Win32k Elevation of Privilege Vulnerability

CVE-2025-62461
HIGH 7.8

Windows Projected File System Elevation of Privilege Vulnerability

CVE-2025-62462
HIGH 7.8

Windows Projected File System Elevation of Privilege Vulnerability

CVE-2025-62464
HIGH 7.8

Windows Projected File System Elevation of Privilege Vulnerability

CVE-2025-62466
HIGH 7.8

Windows Client-Side Caching Elevation of Privilege Vulnerability

CVE-2025-62467
HIGH 7.8

Windows Projected File System Elevation of Privilege Vulnerability

CVE-2025-62470
HIGH 7.8

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2025-62472
HIGH 7.8

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

CVE-2025-62474
HIGH 7.8

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

CVE-2025-62571
HIGH 7.8

Windows Installer Elevation of Privilege Vulnerability

CVE-2025-64661
HIGH 7.8

Windows Shell Elevation of Privilege Vulnerability

CVE-2025-64673
HIGH 7.8

Windows Storage VSP Driver Elevation of Privilege Vulnerability

CVE-2025-64679
HIGH 7.8

Windows DWM Core Library Elevation of Privilege Vulnerability

CVE-2025-64680
HIGH 7.8

Windows DWM Core Library Elevation of Privilege Vulnerability

CVE-2025-59505
HIGH 7.8

Windows Smart Card Reader Elevation of Privilege Vulnerability

CVE-2025-59511
HIGH 7.8

Windows WLAN Service Elevation of Privilege Vulnerability

CVE-2025-59512
HIGH 7.8

Customer Experience Improvement Program (CEIP) Elevation of Privilege Vulnerability

CVE-2025-59514
HIGH 7.8

Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

CVE-2025-60703
HIGH 7.8

Windows Remote Desktop Services Elevation of Privilege Vulnerability

CVE-2025-60705
HIGH 7.8

Windows Client-Side Caching Elevation of Privilege Vulnerability

CVE-2025-60707
HIGH 7.8

Multimedia Class Scheduler Service (MMCSS) Driver Elevation of Privilege Vulnerability

CVE-2025-60709
HIGH 7.8

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2025-60714
HIGH 7.8

Windows OLE Remote Code Execution Vulnerability

CVE-2025-60720
HIGH 7.8

Windows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege Vulnerability

CVE-2025-24052
HIGH 7.8

Windows Agere Modem Driver Elevation of Privilege Vulnerability

CVE-2025-50152
HIGH 7.8

Windows Kernel Elevation of Privilege Vulnerability

CVE-2025-50175
HIGH 7.8

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-53150
HIGH 7.8

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-53768
HIGH 7.8

Xbox IStorageService Elevation of Privilege Vulnerability

CVE-2025-55328
HIGH 7.8

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2025-55339
HIGH 7.8

Windows Network Driver Interface Specification (NDIS) Driver Elevation of Privilege Vulnerability

CVE-2025-55680
HIGH 7.8

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2025-55692
HIGH 7.8

Windows Error Reporting Service Elevation of Privilege Vulnerability

CVE-2025-55696
HIGH 7.8

NtQueryInformation Token function (ntifs.h) Elevation of Privilege Vulnerability

CVE-2025-55701
HIGH 7.8

Windows Authentication Elevation of Privilege Vulnerability

CVE-2025-58714
HIGH 7.8

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2025-58720
HIGH 7.8

Windows Cryptographic Services Information Disclosure Vulnerability

CVE-2025-58722
HIGH 7.8

Microsoft DWM Core Library Elevation of Privilege Vulnerability

CVE-2025-58728
HIGH 7.8

Windows Bluetooth Service Elevation of Privilege Vulnerability

CVE-2025-59187
HIGH 7.8

Windows Kernel Elevation of Privilege Vulnerability

CVE-2025-59191
HIGH 7.8

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

CVE-2025-59192
HIGH 7.8

Storport.sys Driver Elevation of Privilege Vulnerability

CVE-2025-59199
HIGH 7.8

Software Protection Platform (SPP) Elevation of Privilege Vulnerability

CVE-2025-59201
HIGH 7.8

Network Connection Status Indicator (NCSI) Elevation of Privilege Vulnerability

CVE-2025-59207
HIGH 7.8

Windows Kernel Elevation of Privilege Vulnerability

CVE-2025-59242
HIGH 7.8

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2025-59254 Exploit
HIGH 7.8

Microsoft DWM Core Library Elevation of Privilege Vulnerability

CVE-2025-59255
HIGH 7.8

Windows DWM Core Library Elevation of Privilege Vulnerability

CVE-2025-59275
HIGH 7.8

Windows Authentication Elevation of Privilege Vulnerability

CVE-2025-59277
HIGH 7.8

Windows Authentication Elevation of Privilege Vulnerability

CVE-2025-59278
HIGH 7.8

Windows Authentication Elevation of Privilege Vulnerability

CVE-2025-59290
HIGH 7.8

Windows Bluetooth Service Elevation of Privilege Vulnerability

CVE-2025-53800
CRITICAL 7.8

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2025-53801
HIGH 7.8

Microsoft DWM Core Library Elevation of Privilege Vulnerability

CVE-2025-54091
HIGH 7.8

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2025-54092
HIGH 7.8

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2025-54098
HIGH 7.8

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2025-54102
HIGH 7.8

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

CVE-2025-54111
HIGH 7.8

Windows UI XAML Phone DatePickerFlyout Elevation of Privilege Vulnerability

CVE-2025-54894
HIGH 7.8

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability

CVE-2025-54895
HIGH 7.8

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Elevation of Privilege Vulnerability

CVE-2025-54912
HIGH 7.8

Windows BitLocker Elevation of Privilege Vulnerability

CVE-2025-54913
HIGH 7.8

Windows UI XAML Maps MapControlSettings Elevation of Privilege Vulnerability

CVE-2025-54916
HIGH 7.8

Windows NTFS Remote Code Execution Vulnerability

CVE-2025-55224
CRITICAL 7.8

Windows Hyper-V Remote Code Execution Vulnerability

CVE-2025-55228
CRITICAL 7.8

Windows Graphics Component Remote Code Execution Vulnerability

CVE-2025-49761
HIGH 7.8

Windows Kernel Elevation of Privilege Vulnerability

CVE-2025-50153
HIGH 7.8

Desktop Window Manager Elevation of Privilege Vulnerability

CVE-2025-50155
HIGH 7.8

Windows Push Notifications Apps Elevation of Privilege Vulnerability

CVE-2025-50168
HIGH 7.8

Win32k Elevation of Privilege Vulnerability

CVE-2025-50170
HIGH 7.8

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2025-50173
HIGH 7.8

Windows Installer Elevation of Privilege Vulnerability

CVE-2025-50176
CRITICAL 7.8

DirectX Graphics Kernel Remote Code Execution Vulnerability

CVE-2025-53132
HIGH 7.8

Win32k Elevation of Privilege Vulnerability

CVE-2025-53141
HIGH 7.8

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2025-53149
HIGH 7.8

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

CVE-2025-53151
HIGH 7.8

Windows Kernel Elevation of Privilege Vulnerability

CVE-2025-53152
HIGH 7.8

Desktop Windows Manager Remote Code Execution Vulnerability

CVE-2025-53154
HIGH 7.8

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2025-53155
HIGH 7.8

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2025-53723
HIGH 7.8

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2025-53724
HIGH 7.8

Windows Push Notifications Apps Elevation of Privilege Vulnerability

CVE-2025-53725
HIGH 7.8

Windows Push Notifications Apps Elevation of Privilege Vulnerability

CVE-2025-53726
HIGH 7.8

Windows Push Notifications Apps Elevation of Privilege Vulnerability

CVE-2025-53789
HIGH 7.8

Windows StateRepository API Server file Elevation of Privilege Vulnerability

CVE-2025-55230
HIGH 7.8

Windows MBT Transport Driver Elevation of Privilege Vulnerability

CVE-2025-47159
HIGH 7.8

Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability

CVE-2025-47971
HIGH 7.8

Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

CVE-2025-47973
HIGH 7.8

Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

CVE-2025-47976
HIGH 7.8

Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability

CVE-2025-47982
HIGH 7.8

Windows Storage VSP Driver Elevation of Privilege Vulnerability

CVE-2025-47985
HIGH 7.8

Windows Event Tracing Elevation of Privilege Vulnerability

CVE-2025-47987 Exploit
HIGH 7.8

Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability

CVE-2025-47991
HIGH 7.8

Windows Input Method Editor (IME) Elevation of Privilege Vulnerability

CVE-2025-47996
HIGH 7.8

Windows MBT Transport Driver Elevation of Privilege Vulnerability

CVE-2025-48000
HIGH 7.8

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

CVE-2025-48799
HIGH 7.8

Windows Update Service Elevation of Privilege Vulnerability

CVE-2025-48805
HIGH 7.8

Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability

CVE-2025-48806
HIGH 7.8

Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability

CVE-2025-48815
HIGH 7.8

Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability

CVE-2025-48816
HIGH 7.8

HID Class Driver Elevation of Privilege Vulnerability

CVE-2025-48820
HIGH 7.8

Windows AppX Deployment Service Elevation of Privilege Vulnerability

CVE-2025-49659
HIGH 7.8

Windows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege Vulnerability

CVE-2025-49660
HIGH 7.8

Windows Event Tracing Elevation of Privilege Vulnerability

CVE-2025-49661
HIGH 7.8

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2025-49665
HIGH 7.8

Workspace Broker Elevation of Privilege Vulnerability

CVE-2025-49667
HIGH 7.8

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

CVE-2025-49675
HIGH 7.8

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

CVE-2025-49679
HIGH 7.8

Windows Shell Elevation of Privilege Vulnerability

CVE-2025-49683 Exploit
HIGH 7.8

Microsoft Virtual Hard Disk Remote Code Execution Vulnerability

CVE-2025-49686
HIGH 7.8

Windows TCP/IP Driver Elevation of Privilege Vulnerability

CVE-2025-49689
HIGH 7.8

Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

CVE-2025-49693
HIGH 7.8

Microsoft Brokering File System Elevation of Privilege Vulnerability

CVE-2025-49721
HIGH 7.8

Windows Fast FAT File System Driver Elevation of Privilege Vulnerability

CVE-2025-49725
HIGH 7.8

Windows Notification Elevation of Privilege Vulnerability

CVE-2025-49726
HIGH 7.8

Windows Notification Elevation of Privilege Vulnerability

CVE-2025-49730 Exploit
HIGH 7.8

Microsoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability

CVE-2025-49732
HIGH 7.8

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2025-49733
HIGH 7.8

Win32k Elevation of Privilege Vulnerability

CVE-2025-49742
HIGH 7.8

Windows Graphics Component Remote Code Execution Vulnerability

CVE-2025-32712
HIGH 7.8

Win32k Elevation of Privilege Vulnerability

CVE-2025-32713
HIGH 7.8

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2025-32714
HIGH 7.8

Windows Installer Elevation of Privilege Vulnerability

CVE-2025-32716
HIGH 7.8

Windows Media Elevation of Privilege Vulnerability

CVE-2025-32718
HIGH 7.8

Windows SMB Client Elevation of Privilege Vulnerability

CVE-2025-33075
HIGH 7.8

Windows Installer Elevation of Privilege Vulnerability

CVE-2025-47955
HIGH 7.8

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

CVE-2025-30388
HIGH 7.8

Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.

CVE-2025-24063
HIGH 7.8

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

CVE-2025-30385
HIGH 7.8

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2025-21204
HIGH 7.8

Windows Process Activation Elevation of Privilege Vulnerability

CVE-2025-24058
HIGH 7.8

Windows DWM Core Library Elevation of Privilege Vulnerability

CVE-2025-24060
HIGH 7.8

Microsoft DWM Core Library Elevation of Privilege Vulnerability

CVE-2025-24062
HIGH 7.8

Microsoft DWM Core Library Elevation of Privilege Vulnerability

CVE-2025-24073
HIGH 7.8

Microsoft DWM Core Library Elevation of Privilege Vulnerability

CVE-2025-24074
HIGH 7.8

Microsoft DWM Core Library Elevation of Privilege Vulnerability

CVE-2025-26639
HIGH 7.8

Windows USB Print Driver Elevation of Privilege Vulnerability

CVE-2025-26648
HIGH 7.8

Windows Kernel Elevation of Privilege Vulnerability

CVE-2025-26666
HIGH 7.8

Windows Media Remote Code Execution Vulnerability

CVE-2025-26674
HIGH 7.8

Windows Media Remote Code Execution Vulnerability

CVE-2025-26675
HIGH 7.8

Windows Subsystem for Linux Elevation of Privilege Vulnerability

CVE-2025-26679
HIGH 7.8

RPC Endpoint Mapper Service Elevation of Privilege Vulnerability

CVE-2025-26688
HIGH 7.8

Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

CVE-2025-27476
HIGH 7.8

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-27490
HIGH 7.8

Windows Bluetooth Service Elevation of Privilege Vulnerability

CVE-2025-27727
HIGH 7.8

Windows Installer Elevation of Privilege Vulnerability

CVE-2025-27729
HIGH 7.8

Windows Shell Remote Code Execution Vulnerability

CVE-2025-27730
HIGH 7.8

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-27731
HIGH 7.8

Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability

CVE-2025-27739
HIGH 7.8

Windows Kernel Elevation of Privilege Vulnerability

CVE-2025-29811
HIGH 7.8

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability

CVE-2025-29812
HIGH 7.8

DirectX Graphics Kernel Elevation of Privilege Vulnerability

CVE-2025-21180
HIGH 7.8

Windows exFAT File System Remote Code Execution Vulnerability

CVE-2025-24044
HIGH 7.8

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

CVE-2025-24046
HIGH 7.8

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

CVE-2025-24048
HIGH 7.8

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2025-24050
HIGH 7.8

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2025-24059
HIGH 7.8

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2025-24061
HIGH 7.8

Windows Mark of the Web Security Feature Bypass Vulnerability

CVE-2025-24066
HIGH 7.8

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

CVE-2025-24067
HIGH 7.8

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

CVE-2025-24072
HIGH 7.8

Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability

CVE-2025-24995
HIGH 7.8

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

CVE-2025-21358
HIGH 7.8

Windows Core Messaging Elevation of Privileges Vulnerability

CVE-2025-21359
HIGH 7.8

Windows Kernel Security Feature Bypass Vulnerability

CVE-2025-21367
HIGH 7.8

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

CVE-2025-21373
HIGH 7.8

Windows Installer Elevation of Privilege Vulnerability

CVE-2025-21375
HIGH 7.8

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

CVE-2025-21420
HIGH 7.8

Windows Disk Cleanup Tool Elevation of Privilege Vulnerability

CVE-2025-21338
HIGH 7.8

GDI+ Remote Code Execution Vulnerability

CVE-2025-21234
HIGH 7.8

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

CVE-2025-21235
HIGH 7.8

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

CVE-2025-21275
HIGH 7.8

Windows App Package Installer Elevation of Privilege Vulnerability

CVE-2025-21281
HIGH 7.8

Microsoft COM for Windows Elevation of Privilege Vulnerability

CVE-2025-21287
HIGH 7.8

Windows Installer Elevation of Privilege Vulnerability

CVE-2025-21325
HIGH 7.8

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

CVE-2025-21370
HIGH 7.8

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

CVE-2025-21378
HIGH 7.8

Windows CSC Service Elevation of Privilege Vulnerability

CVE-2025-21382
HIGH 7.8

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2024-49072
HIGH 7.8

Windows Task Scheduler Elevation of Privilege Vulnerability

CVE-2024-49076
HIGH 7.8

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

CVE-2024-49079
HIGH 7.8

Input Method Editor (IME) Remote Code Execution Vulnerability

CVE-2024-49088
HIGH 7.8

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2024-49090
HIGH 7.8

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2024-49114
HIGH 7.8

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2024-43530
HIGH 7.8

Windows Update Stack Elevation of Privilege Vulnerability

CVE-2024-43623
HIGH 7.8

Windows NT OS Kernel Elevation of Privilege Vulnerability

CVE-2024-43626
HIGH 7.8

Windows Telephony Service Elevation of Privilege Vulnerability

CVE-2024-43629
HIGH 7.8

Windows DWM Core Library Elevation of Privilege Vulnerability

CVE-2024-43636
HIGH 7.8

Win32k Elevation of Privilege Vulnerability

CVE-2024-43640
HIGH 7.8

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

CVE-2024-43641
HIGH 7.8

Windows Registry Elevation of Privilege Vulnerability

CVE-2024-43644
HIGH 7.8

Windows Client-Side Caching Elevation of Privilege Vulnerability

CVE-2024-49046
HIGH 7.8

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

CVE-2024-43501
HIGH 7.8

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2024-43509
HIGH 7.8

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2024-43514
HIGH 7.8

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

CVE-2024-43516
HIGH 7.8

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

CVE-2024-43528
HIGH 7.8

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

CVE-2024-43551
HIGH 7.8

Windows Storage Elevation of Privilege Vulnerability

CVE-2024-43556
HIGH 7.8

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2024-43560
HIGH 7.8

Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability

CVE-2024-43563
HIGH 7.8

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2024-43583
HIGH 7.8

Winlogon Elevation of Privilege Vulnerability

CVE-2024-38249
HIGH 7.8

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2024-38250
HIGH 7.8

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2024-38252
HIGH 7.8

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

CVE-2024-38253
HIGH 7.8

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

CVE-2024-38245
HIGH 7.8

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

CVE-2024-38247
HIGH 7.8

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2024-38241
HIGH 7.8

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

CVE-2024-38242
HIGH 7.8

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

CVE-2024-38243
HIGH 7.8

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

CVE-2024-38244
HIGH 7.8

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

CVE-2024-38237
HIGH 7.8

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

CVE-2024-38238
HIGH 7.8

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

CVE-2024-38046
HIGH 7.8

PowerShell Elevation of Privilege Vulnerability

CVE-2024-30073
HIGH 7.8

Windows Security Zone Mapping Security Feature Bypass Vulnerability

CVE-2024-38117
HIGH 7.8

NTFS Elevation of Privilege Vulnerability

CVE-2024-38125
HIGH 7.8

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

CVE-2024-38127
HIGH 7.8

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2024-38133
HIGH 7.8

Windows Kernel Elevation of Privilege Vulnerability

CVE-2024-38134
HIGH 7.8

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

CVE-2024-38135
HIGH 7.8

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

CVE-2024-38141
HIGH 7.8

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2024-38142
HIGH 7.8

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

CVE-2024-38147
HIGH 7.8

Microsoft DWM Core Library Elevation of Privilege Vulnerability

CVE-2024-38150
HIGH 7.8

Windows DWM Core Library Elevation of Privilege Vulnerability

CVE-2024-38152
HIGH 7.8

Windows OLE Remote Code Execution Vulnerability

CVE-2024-38153
HIGH 7.8

Windows Kernel Elevation of Privilege Vulnerability

CVE-2024-38184
HIGH 7.8

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

CVE-2024-38185
HIGH 7.8

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

CVE-2024-38186
HIGH 7.8

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

CVE-2024-38187
HIGH 7.8

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

CVE-2024-38191
HIGH 7.8

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

CVE-2024-38196
HIGH 7.8

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2024-38215
HIGH 7.8

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2024-30079
HIGH 7.8

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

CVE-2024-38034
HIGH 7.8

Windows Filtering Platform Elevation of Privilege Vulnerability

CVE-2024-38043
HIGH 7.8

PowerShell Elevation of Privilege Vulnerability

CVE-2024-38047
HIGH 7.8

PowerShell Elevation of Privilege Vulnerability

CVE-2024-38050
HIGH 7.8

Windows Workstation Service Elevation of Privilege Vulnerability

CVE-2024-38051
HIGH 7.8

Windows Graphics Component Remote Code Execution Vulnerability

CVE-2024-38052
HIGH 7.8

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

CVE-2024-38054
HIGH 7.8

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

CVE-2024-38057
HIGH 7.8

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

CVE-2024-38059
HIGH 7.8

Win32k Elevation of Privilege Vulnerability

CVE-2024-38062
HIGH 7.8

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

CVE-2024-38070
HIGH 7.8

Windows LockDown Policy (WLDP) Security Feature Bypass Vulnerability

CVE-2024-38079
HIGH 7.8

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2024-38085
HIGH 7.8

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2024-38517
MEDIUM 7.8

Github: CVE-2024-38517 TenCent RapidJSON Elevation of Privilege Vulnerability

CVE-2024-39684
MEDIUM 7.8

Github: CVE-2024-39684 TenCent RapidJSON Elevation of Privilege Vulnerability

CVE-2024-30095
HIGH 7.8

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2024-30089
HIGH 7.8

Microsoft Streaming Service Elevation of Privilege Vulnerability

CVE-2024-30091
HIGH 7.8

Win32k Elevation of Privilege Vulnerability

CVE-2024-30094
HIGH 7.8

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2024-30085
HIGH 7.8

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2024-30086
HIGH 7.8

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

CVE-2024-30087
HIGH 7.8

Win32k Elevation of Privilege Vulnerability

CVE-2024-30082
HIGH 7.8

Win32k Elevation of Privilege Vulnerability

CVE-2024-30072
HIGH 7.8

Microsoft Event Trace Log File Parsing Remote Code Execution Vulnerability

CVE-2024-29994
HIGH 7.8

Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability

CVE-2024-29996
HIGH 7.8

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2024-30018
HIGH 7.8

Windows Kernel Elevation of Privilege Vulnerability

CVE-2024-30025
HIGH 7.8

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2024-30027
HIGH 7.8

NTFS Elevation of Privilege Vulnerability

CVE-2024-30028
HIGH 7.8

Win32k Elevation of Privilege Vulnerability

CVE-2024-30031
HIGH 7.8

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

CVE-2024-30032
HIGH 7.8

Windows DWM Core Library Elevation of Privilege Vulnerability

CVE-2024-30035
HIGH 7.8

Windows DWM Core Library Elevation of Privilege Vulnerability

CVE-2024-30038
HIGH 7.8

Win32k Elevation of Privilege Vulnerability

CVE-2024-30049
HIGH 7.8

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

CVE-2024-20693
HIGH 7.8

Windows Kernel Elevation of Privilege Vulnerability

CVE-2024-21447
HIGH 7.8

Windows Authentication Elevation of Privilege Vulnerability

CVE-2024-26158
HIGH 7.8

Microsoft Install Service Elevation of Privilege Vulnerability

CVE-2024-26175
HIGH 7.8

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-26211
HIGH 7.8

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

CVE-2024-26218
HIGH 7.8

Windows Kernel Elevation of Privilege Vulnerability

CVE-2024-26228
HIGH 7.8

Windows Cryptographic Services Security Feature Bypass Vulnerability

CVE-2024-26229
HIGH 7.8

Windows CSC Service Elevation of Privilege Vulnerability

CVE-2024-26230
HIGH 7.8

Windows Telephony Server Elevation of Privilege Vulnerability

CVE-2024-26237
HIGH 7.8

Windows Defender Credential Guard Elevation of Privilege Vulnerability

CVE-2024-26239
HIGH 7.8

Windows Telephony Server Elevation of Privilege Vulnerability

CVE-2024-26241
HIGH 7.8

Win32k Elevation of Privilege Vulnerability

CVE-2024-26256
HIGH 7.8

Libarchive Remote Code Execution Vulnerability

CVE-2024-28920
HIGH 7.8

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-29052
HIGH 7.8

Windows Storage Elevation of Privilege Vulnerability

CVE-2024-29061
HIGH 7.8

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-21431
HIGH 7.8

Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability

CVE-2024-21434
HIGH 7.8

Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability

CVE-2024-21436
HIGH 7.8

Windows Installer Elevation of Privilege Vulnerability

CVE-2024-21437
HIGH 7.8

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2024-21442
HIGH 7.8

Windows USB Print Driver Elevation of Privilege Vulnerability

CVE-2024-21446
HIGH 7.8

NTFS Elevation of Privilege Vulnerability

CVE-2024-26170
HIGH 7.8

Windows Composite Image File System (CimFS) Elevation of Privilege Vulnerability

CVE-2024-26173
HIGH 7.8

Windows Kernel Elevation of Privilege Vulnerability

CVE-2024-26176
HIGH 7.8

Windows Kernel Elevation of Privilege Vulnerability

CVE-2024-26178
HIGH 7.8

Windows Kernel Elevation of Privilege Vulnerability

CVE-2024-21363
HIGH 7.8

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVE-2024-21354
HIGH 7.8

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability

CVE-2024-21346
HIGH 7.8

Win32k Elevation of Privilege Vulnerability

CVE-2024-20653
HIGH 7.8

Microsoft Common Log File System Elevation of Privilege Vulnerability

CVE-2024-20658
HIGH 7.8

Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

CVE-2024-20681
HIGH 7.8

Windows Subsystem for Linux Elevation of Privilege Vulnerability

CVE-2024-20682
HIGH 7.8

Windows Cryptographic Services Remote Code Execution Vulnerability

CVE-2024-20683
HIGH 7.8

Win32k Elevation of Privilege Vulnerability

CVE-2024-20698
HIGH 7.8

Windows Kernel Elevation of Privilege Vulnerability

CVE-2024-21309
HIGH 7.8

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

CVE-2024-21310
HIGH 7.8

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2023-21740
HIGH 7.8

Windows Media Remote Code Execution Vulnerability

CVE-2023-35631
HIGH 7.8

Win32k Elevation of Privilege Vulnerability

CVE-2023-35644
HIGH 7.8

Windows Sysmain Service Elevation of Privilege Vulnerability

CVE-2023-36011
HIGH 7.8

Win32k Elevation of Privilege Vulnerability

CVE-2023-36391
HIGH 7.8

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability

CVE-2023-36696
HIGH 7.8

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2023-36047
HIGH 7.8

Windows Authentication Elevation of Privilege Vulnerability

CVE-2023-36393
HIGH 7.8

Windows User Interface Application Core Remote Code Execution Vulnerability

CVE-2023-36396
HIGH 7.8

Windows Compressed Folder Remote Code Execution Vulnerability

CVE-2023-36407
HIGH 7.8

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2023-36408
HIGH 7.8

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2023-36705
HIGH 7.8

Windows Installer Elevation of Privilege Vulnerability

CVE-2023-36719
HIGH 7.8

Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability

CVE-2026-20852
HIGH 7.7

Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally.

CVE-2026-20804
HIGH 7.7

Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally.

CVE-2025-53139
HIGH 7.7

Windows Hello Security Feature Bypass Vulnerability

CVE-2025-59200
HIGH 7.7

Data Sharing Service Spoofing Vulnerability

CVE-2025-6965 Exploit
HIGH 7.7

There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead…

CVE-2025-29833
CRITICAL 7.7

Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability

CVE-2024-43584
HIGH 7.7

Windows Scripting Engine Security Feature Bypass Vulnerability

CVE-2026-73017
HIGH 7.5

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to execute code locally.

CVE-2026-72949
HIGH 7.5

Null pointer dereference in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to deny service over a network.

CVE-2026-72932
HIGH 7.5

Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.

CVE-2026-71330
HIGH 7.5

Exposure of sensitive system information to an unauthorized control sphere in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to dis…

CVE-2026-70587
HIGH 7.5

Improper null termination in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network.

CVE-2026-69881
HIGH 7.5

Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network.

CVE-2026-69890
HIGH 7.5

Use after free in Windows Virtual Trusted Platform Module allows an authorized attacker to elevate privileges locally.

CVE-2026-69852
HIGH 7.5

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

CVE-2026-69760
HIGH 7.5

Out-of-bounds read in Windows Kerberos allows an unauthorized attacker to deny service over a network.

CVE-2026-69599
HIGH 7.5

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.

CVE-2026-69588
HIGH 7.5

Missing release of memory after effective lifetime in Windows TCP/IP allows an unauthorized attacker to deny service over a network.

CVE-2026-69587
HIGH 7.5

Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network.

CVE-2026-69539
HIGH 7.5

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.

CVE-2026-69514
HIGH 7.5

Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.

CVE-2026-69428
HIGH 7.5

Out-of-bounds read in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.

CVE-2026-68887
HIGH 7.5

Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to deny service over a network.

CVE-2026-62759
HIGH 7.5

Authentication bypass by spoofing in Windows Netlogon allows an unauthorized attacker to perform spoofing over an adjacent network.

CVE-2026-62813
HIGH 7.5

Windows Active Directory Domain Services Remote Code Execution Vulnerability

CVE-2026-69329
HIGH 7.5

BranchCache Denial of Service Vulnerability

CVE-2026-69397
HIGH 7.5

Microsoft OpenSSH for Windows Remote Code Execution Vulnerability

CVE-2026-69429
HIGH 7.5

Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability

CVE-2026-69710
CRITICAL 7.5

Windows Hello Elevation of Privilege Vulnerability

CVE-2026-69793
HIGH 7.5

Windows TCP/IP Security Feature Bypass Vulnerability

CVE-2026-69809
HIGH 7.5

Windows Active Directory Domain Services Denial of Service Vulnerability

CVE-2026-70570
HIGH 7.5

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2026-70579
HIGH 7.5

Windows Mobile Broadband Information Disclosure Vulnerability

CVE-2026-81355
CRITICAL 7.5

Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability

CVE-2026-83989
HIGH 7.5

Windows Services for NFS ONCRPC XDR Driver Denial of Service Vulnerability

CVE-2026-84001
HIGH 7.5

Windows Key Distribution Center Denial of Service Vulnerability

CVE-2026-61363
HIGH 7.5

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-61352
HIGH 7.5

Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute…

CVE-2026-59132
HIGH 7.5

Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network.

CVE-2026-59134
HIGH 7.5

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-54113
HIGH 7.5

Allocation of resources without limits or throttling in Windows Kernel allows an unauthorized attacker to deny service over a network.

CVE-2026-50696
HIGH 7.5

Heap-based buffer overflow in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.

CVE-2026-40378
HIGH 7.5

Memory allocation with excessive size value in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over …

CVE-2026-49160
HIGH 7.5

Uncontrolled resource consumption in HTTP/2 allows an unauthorized attacker to deny service over a network.

CVE-2026-48563
HIGH 7.5

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-45639
HIGH 7.5

Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.

CVE-2026-42992
HIGH 7.5

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-42993
HIGH 7.5

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-44799
HIGH 7.5

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-44801
HIGH 7.5

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-42913
HIGH 7.5

Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute…

CVE-2026-42908
HIGH 7.5

Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.

CVE-2026-42909
HIGH 7.5

Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute…

CVE-2026-32161
CRITICAL 7.5

Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability

CVE-2026-35424
HIGH 7.5

Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability

CVE-2026-40406
HIGH 7.5

Windows TCP/IP Information Disclosure Vulnerability

CVE-2026-33096
HIGH 7.5

Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to deny service over a network.

CVE-2026-32071
HIGH 7.5

Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability

CVE-2026-23674
HIGH 7.5

MapUrlToZone Security Feature Bypass Vulnerability

CVE-2026-25181
HIGH 7.5

GDI+ Information Disclosure Vulnerability

CVE-2026-20846
HIGH 7.5

Buffer over-read in Windows GDI+ allows an unauthorized attacker to deny service over a network.

CVE-2026-20934
HIGH 7.5

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate priv…

CVE-2026-20926
HIGH 7.5

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate priv…

CVE-2026-20929
HIGH 7.5

Improper access control in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network.

CVE-2026-20919
HIGH 7.5

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate priv…

CVE-2026-20921
HIGH 7.5

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate priv…

CVE-2026-20875
HIGH 7.5

Null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.

CVE-2026-20848
HIGH 7.5

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate priv…

CVE-2026-20849
HIGH 7.5

Reliance on untrusted inputs in a security decision in Windows Kerberos allows an authorized attacker to elevate privileges over a network.

CVE-2025-64658
HIGH 7.5

Windows File Explorer Elevation of Privilege Vulnerability

CVE-2025-60704
HIGH 7.5

Windows Kerberos Elevation of Privilege Vulnerability

CVE-2025-55326
HIGH 7.5

Windows Connected Devices Platform Service (Cdpsvc) Remote Code Execution Vulnerability

CVE-2025-58726
HIGH 7.5

Windows SMB Server Elevation of Privilege Vulnerability

CVE-2025-59502
MEDIUM 7.5

Remote Procedure Call Denial of Service Vulnerability

CVE-2025-53805
HIGH 7.5

HTTP.sys Denial of Service Vulnerability

CVE-2025-54919
HIGH 7.5

Windows Graphics Component Remote Code Execution Vulnerability

CVE-2025-53722
HIGH 7.5

Windows Remote Desktop Services Denial of Service Vulnerability

CVE-2025-47984
HIGH 7.5

Windows GDI Information Disclosure Vulnerability

CVE-2025-48814
HIGH 7.5

Remote Desktop Licensing Service Security Feature Bypass Vulnerability

CVE-2025-32724
HIGH 7.5

Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability

CVE-2025-33056
HIGH 7.5

Windows Local Security Authority (LSA) Denial of Service Vulnerability

CVE-2025-29842
HIGH 7.5

UrlMon Security Feature Bypass Vulnerability

CVE-2025-29969
HIGH 7.5

MS-EVEN RPC Remote Code Execution Vulnerability

CVE-2025-29971
HIGH 7.5

Web Threat Defense (WTD.sys) Denial of Service Vulnerability

CVE-2025-26687
HIGH 7.5

Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network.

CVE-2025-26641
HIGH 7.5

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2025-26668
HIGH 7.5

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2025-26673
HIGH 7.5

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

CVE-2025-26686
CRITICAL 7.5

Windows TCP/IP Remote Code Execution Vulnerability

CVE-2025-27469
HIGH 7.5

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

CVE-2025-27473
HIGH 7.5

HTTP.sys Denial of Service Vulnerability

CVE-2025-27484
HIGH 7.5

Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

CVE-2025-29810
HIGH 7.5

Active Directory Domain Services Elevation of Privilege Vulnerability

CVE-2025-26634
HIGH 7.5

Windows Core Messaging Elevation of Privileges Vulnerability

CVE-2025-21181
HIGH 7.5

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2025-21351
HIGH 7.5

Windows Active Directory Domain Services API Denial of Service Vulnerability

CVE-2025-21207
HIGH 7.5

Windows Connected Devices Platform Service (Cdpsvc) Denial of Service Vulnerability

CVE-2025-21220
HIGH 7.5

Microsoft Message Queuing Information Disclosure Vulnerability

CVE-2025-21230
HIGH 7.5

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2025-21231
HIGH 7.5

IP Helper Denial of Service Vulnerability

CVE-2025-21251
HIGH 7.5

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2025-21270
HIGH 7.5

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2025-21276
HIGH 7.5

Windows MapUrlToZone Denial of Service Vulnerability

CVE-2025-21277
HIGH 7.5

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2025-21285
HIGH 7.5

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2025-21289
HIGH 7.5

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2025-21290
HIGH 7.5

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2025-21296
CRITICAL 7.5

BranchCache Remote Code Execution Vulnerability

CVE-2025-21300
HIGH 7.5

Windows Universal Plug and Play (UPnP) Device Host Denial of Service Vulnerability

CVE-2025-21330
HIGH 7.5

Windows Remote Desktop Services Denial of Service Vulnerability

CVE-2025-21343
HIGH 7.5

Windows Web Threat Defense User Service Information Disclosure Vulnerability

CVE-2025-21389
HIGH 7.5

Windows Universal Plug and Play (UPnP) Device Host Denial of Service Vulnerability

CVE-2024-49075
HIGH 7.5

Windows Remote Desktop Services Denial of Service Vulnerability

CVE-2024-49096
HIGH 7.5

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2024-49113
HIGH 7.5

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

CVE-2024-49121
HIGH 7.5

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

CVE-2024-43452
HIGH 7.5

Windows Registry Elevation of Privilege Vulnerability

CVE-2024-43642
HIGH 7.5

Windows SMB Denial of Service Vulnerability

CVE-2024-38149
HIGH 7.5

BranchCache Denial of Service Vulnerability

CVE-2024-43506
HIGH 7.5

BranchCache Denial of Service Vulnerability

CVE-2024-43515
HIGH 7.5

Internet Small Computer Systems Interface (iSCSI) Denial of Service Vulnerability

CVE-2024-43562
HIGH 7.5

Windows Network Address Translation (NAT) Denial of Service Vulnerability

CVE-2024-43565
HIGH 7.5

Windows Network Address Translation (NAT) Denial of Service Vulnerability

CVE-2024-38257
HIGH 7.5

Microsoft AllJoyn API Information Disclosure Vulnerability

CVE-2024-38119
HIGH 7.5

Windows Network Address Translation (NAT) Remote Code Execution Vulnerability

CVE-2024-38126
HIGH 7.5

Windows Network Address Translation (NAT) Denial of Service Vulnerability

CVE-2024-38132
HIGH 7.5

Windows Network Address Translation (NAT) Denial of Service Vulnerability

CVE-2024-38145
HIGH 7.5

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

CVE-2024-38146
HIGH 7.5

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

CVE-2024-38148
HIGH 7.5

Windows Secure Channel Denial of Service Vulnerability

CVE-2024-38198
HIGH 7.5

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2024-30098
HIGH 7.5

Windows Cryptographic Services Security Feature Bypass Vulnerability

CVE-2024-3596
HIGH 7.5

CERT/CC: CVE-2024-3596 RADIUS Protocol Spoofing Vulnerability

CVE-2024-38061
HIGH 7.5

DCOM Remote Cross-Session Activation Elevation of Privilege Vulnerability

CVE-2024-38064
HIGH 7.5

Windows TCP/IP Information Disclosure Vulnerability

CVE-2024-38068
HIGH 7.5

Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

CVE-2024-38078
HIGH 7.5

Xbox Wireless Adapter Remote Code Execution Vulnerability

CVE-2024-38091
HIGH 7.5

Microsoft WS-Discovery Denial of Service Vulnerability

CVE-2024-30014
HIGH 7.5

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2024-30015
HIGH 7.5

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2024-30022
HIGH 7.5

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2024-30023
HIGH 7.5

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2024-30024
HIGH 7.5

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2024-30029
HIGH 7.5

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2024-26219
HIGH 7.5

HTTP.sys Denial of Service Vulnerability

CVE-2024-26248
HIGH 7.5

Windows Kerberos Elevation of Privilege Vulnerability

CVE-2024-26254
HIGH 7.5

Microsoft Virtual Machine Bus (VMBus) Denial of Service Vulnerability

CVE-2024-28896
HIGH 7.5

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-21438
HIGH 7.5

Microsoft AllJoyn API Denial of Service Vulnerability

CVE-2024-26190
HIGH 7.5

Microsoft QUIC Denial of Service Vulnerability

CVE-2024-21406
HIGH 7.5

Windows Printing Service Spoofing Vulnerability

CVE-2024-21347
HIGH 7.5

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVE-2024-21348
HIGH 7.5

Internet Connection Sharing (ICS) Denial of Service Vulnerability

CVE-2024-21342
HIGH 7.5

Windows DNS Client Denial of Service Vulnerability

CVE-2024-20661
HIGH 7.5

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2024-20687
HIGH 7.5

Microsoft AllJoyn API Denial of Service Vulnerability

CVE-2024-20700
CRITICAL 7.5

Windows Hyper-V Remote Code Execution Vulnerability

CVE-2024-21307
HIGH 7.5

Remote Desktop Client Remote Code Execution Vulnerability

CVE-2023-36004
HIGH 7.5

Windows DPAPI (Data Protection Application Programming Interface) Spoofing Vulnerability

CVE-2023-36005
HIGH 7.5

Windows Telephony Server Elevation of Privilege Vulnerability

CVE-2026-69347
HIGH 7.4

Windows Fast FAT Driver Remote Code Execution Vulnerability

CVE-2026-40413
HIGH 7.4

Windows TCP/IP Denial of Service Vulnerability

CVE-2026-40414
HIGH 7.4

Windows TCP/IP Denial of Service Vulnerability

CVE-2026-32156
HIGH 7.4

Windows UPnP Device Host Remote Code Execution Vulnerability

CVE-2026-20853
HIGH 7.4

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows WalletService allows an unauthorized attacker to elevate…

CVE-2026-20844
HIGH 7.4

Use after free in Windows Clipboard Server allows an unauthorized attacker to elevate privileges locally.

CVE-2025-48004
HIGH 7.4

Microsoft Brokering File System Elevation of Privilege Vulnerability

CVE-2025-55335
HIGH 7.4

Windows NTFS Elevation of Privilege Vulnerability

CVE-2025-55687
HIGH 7.4

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

CVE-2025-54103
HIGH 7.4

Windows Management Service Elevation of Privilege Vulnerability

CVE-2025-49690
HIGH 7.4

Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability

CVE-2024-43550
HIGH 7.4

Windows Secure Channel Spoofing Vulnerability

CVE-2024-43553
HIGH 7.4

NT OS Kernel Elevation of Privilege Vulnerability

CVE-2024-26194
HIGH 7.4

Secure Boot Security Feature Bypass Vulnerability

CVE-2026-58640
HIGH 7.3

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

CVE-2026-32149
HIGH 7.3

Windows Hyper-V Remote Code Execution Vulnerability

CVE-2026-21235
HIGH 7.3

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2026-21244 Exploit
HIGH 7.3

Windows Hyper-V Remote Code Execution Vulnerability

CVE-2026-21247
HIGH 7.3

Windows Hyper-V Remote Code Execution Vulnerability

CVE-2026-21248 Exploit
HIGH 7.3

Windows Hyper-V Remote Code Execution Vulnerability

CVE-2025-62565
HIGH 7.3

Windows File Explorer Elevation of Privilege Vulnerability

CVE-2025-25004
HIGH 7.3

PowerShell Elevation of Privilege Vulnerability

CVE-2025-54116
HIGH 7.3

Windows MultiPoint Services Elevation of Privilege Vulnerability

CVE-2025-54911
HIGH 7.3

Windows BitLocker Elevation of Privilege Vulnerability

CVE-2025-55236
CRITICAL 7.3

Graphics Kernel Remote Code Execution Vulnerability

CVE-2025-50159
HIGH 7.3

Remote Access Point-to-Point Protocol (PPP) EAP-TLS Elevation of Privilege Vulnerability

CVE-2025-50161
HIGH 7.3

Win32k Elevation of Privilege Vulnerability

CVE-2025-49680
HIGH 7.3

Windows Performance Recorder (WPR) Denial of Service Vulnerability

CVE-2025-49682
HIGH 7.3

Windows Media Elevation of Privilege Vulnerability

CVE-2025-32721
HIGH 7.3

Windows Recovery Driver Elevation of Privilege Vulnerability

CVE-2025-24076 Exploit
HIGH 7.3

Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability

CVE-2025-24994
HIGH 7.3

Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability

CVE-2025-21331
HIGH 7.3

Windows Installer Elevation of Privilege Vulnerability

CVE-2024-49107
HIGH 7.3

WmsRepair Service Elevation of Privilege Vulnerability

CVE-2024-43529
HIGH 7.3

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2024-43552
HIGH 7.3

Windows Shell Remote Code Execution Vulnerability

CVE-2024-43495
HIGH 7.3

Windows libarchive Remote Code Execution Vulnerability

CVE-2024-38202
HIGH 7.3

Windows Update Stack Elevation of Privilege Vulnerability

CVE-2024-38033
HIGH 7.3

PowerShell Elevation of Privilege Vulnerability

CVE-2024-30093
HIGH 7.3

Windows Storage Elevation of Privilege Vulnerability

CVE-2024-26232
HIGH 7.3

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVE-2024-21443
HIGH 7.3

Windows Kernel Elevation of Privilege Vulnerability

CVE-2024-20696
HIGH 7.3

Windows libarchive Remote Code Execution Vulnerability

CVE-2024-20697
HIGH 7.3

Windows libarchive Remote Code Execution Vulnerability

CVE-2024-49089
HIGH 7.2

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2024-38239
HIGH 7.2

Windows Kerberos Elevation of Privilege Vulnerability

CVE-2024-38019
HIGH 7.2

Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability

CVE-2024-38025
HIGH 7.2

Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability

CVE-2024-38028
HIGH 7.2

Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability

CVE-2024-26208
HIGH 7.2

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVE-2023-36401
HIGH 7.2

Microsoft Remote Registry Service Remote Code Execution Vulnerability

CVE-2026-69688
HIGH 7.1

Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.

CVE-2026-69602
HIGH 7.1

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges over a network.

CVE-2026-69597
HIGH 7.1

Use after free in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network.

CVE-2026-69536
HIGH 7.1

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.

CVE-2026-69482
HIGH 7.1

Creation of temporary file in directory with insecure permissions in Windows Error Reporting allows an authorized attacker to perform tampering locally.

CVE-2026-69460
HIGH 7.1

Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges over a network.

CVE-2026-69396
HIGH 7.1

Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network.

CVE-2026-69366
HIGH 7.1

Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network.

CVE-2026-69340
HIGH 7.1

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.

CVE-2026-69313
HIGH 7.1

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.

CVE-2026-69314
HIGH 7.1

Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges over a network.

CVE-2026-69305
HIGH 7.1

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network.

CVE-2026-69296
HIGH 7.1

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges over a network.

CVE-2026-68889
HIGH 7.1

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.

CVE-2026-68846
HIGH 7.1

Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network.

CVE-2026-68835
HIGH 7.1

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.

CVE-2026-69272
HIGH 7.1

Microsoft Standard XPS Elevation of Privilege Vulnerability

CVE-2026-69274
HIGH 7.1

Windows Win32k Elevation of Privilege Vulnerability

CVE-2026-69336
HIGH 7.1

Microsoft Standard XPS Elevation of Privilege Vulnerability

CVE-2026-69337
HIGH 7.1

Windows Registry Elevation of Privilege Vulnerability

CVE-2026-69357
HIGH 7.1

Windows NDIS Elevation of Privilege Vulnerability

CVE-2026-69358
HIGH 7.1

Remote Desktop Client Remote Code Execution Vulnerability

CVE-2026-69364
HIGH 7.1

Windows Print Spooler Components Elevation of Privilege Vulnerability

CVE-2026-69384
HIGH 7.1

Virtual Hard Disk (VHD) Miniport Driver Denial of Service Vulnerability

CVE-2026-69451
HIGH 7.1

Windows Management Instrumentation Elevation of Privilege Vulnerability

CVE-2026-69553
HIGH 7.1

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2026-69706
HIGH 7.1

Windows Win32k Elevation of Privilege Vulnerability

CVE-2026-69757
HIGH 7.1

Windows TCP/IP Elevation of Privilege Vulnerability

CVE-2026-69761
HIGH 7.1

Windows TCP/IP Elevation of Privilege Vulnerability

CVE-2026-69775
HIGH 7.1

Windows DWM Core Library Elevation of Privilege Vulnerability

CVE-2026-40401
HIGH 7.1

Windows TCP/IP Denial of Service Vulnerability

CVE-2026-26151
HIGH 7.1

Remote Desktop Spoofing Vulnerability

CVE-2025-64720
HIGH 7.1

LIBPNG is vulnerable to a buffer overflow in `png_image_read_composite` via incorrect palette premultiplication

CVE-2025-65018
HIGH 7.1

LIBPNG is vulnerable to a heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`

CVE-2025-59208
HIGH 7.1

Windows MapUrlToZone Information Disclosure Vulnerability

CVE-2025-48819
HIGH 7.1

Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

CVE-2025-48821
HIGH 7.1

Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

CVE-2025-27491
CRITICAL 7.1

Windows Hyper-V Remote Code Execution Vulnerability

CVE-2025-29809
HIGH 7.1

Windows Kerberos Security Feature Bypass Vulnerability

CVE-2025-21419
HIGH 7.1

Windows Setup Files Cleanup Elevation of Privilege Vulnerability

CVE-2025-21299
HIGH 7.1

Windows Kerberos Security Feature Bypass Vulnerability

CVE-2024-20659
HIGH 7.1

Windows Hyper-V Security Feature Bypass Vulnerability

CVE-2024-43581
HIGH 7.1

Microsoft OpenSSH for Windows Remote Code Execution Vulnerability

CVE-2024-43615
HIGH 7.1

Microsoft OpenSSH for Windows Remote Code Execution Vulnerability

CVE-2024-30081
HIGH 7.1

Windows NTLM Spoofing Vulnerability

CVE-2024-38032
HIGH 7.1

Microsoft Xbox Remote Code Execution Vulnerability

CVE-2024-29062
HIGH 7.1

Secure Boot Security Feature Bypass Vulnerability

CVE-2023-36046
HIGH 7.1

Windows Authentication Denial of Service Vulnerability

CVE-2023-36399
HIGH 7.1

Windows Storage Elevation of Privilege Vulnerability

CVE-2022-3775
HIGH 7.1

When rendering certain unicode sequences, grub2's font code doesn't proper validate if the informed glyph's width and height is constrained within bitmap size.…

CVE-2026-83940
HIGH 7.0

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

CVE-2026-80093
HIGH 7.0

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-77905
HIGH 7.0

Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

CVE-2026-77894
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privi…

CVE-2026-73022
HIGH 7.0

Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

CVE-2026-73005
HIGH 7.0

Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.

CVE-2026-73003
HIGH 7.0

Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

CVE-2026-72963
HIGH 7.0

Use after free in Windows Modern Execution Server allows an authorized attacker to elevate privileges locally.

CVE-2026-72952
HIGH 7.0

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally.

CVE-2026-72930
HIGH 7.0

Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to execute code locally.

CVE-2026-71353
HIGH 7.0

Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.

CVE-2026-72926
HIGH 7.0

Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.

CVE-2026-71351
HIGH 7.0

Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.

CVE-2026-71342
HIGH 7.0

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-71340
HIGH 7.0

Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally.

CVE-2026-71332
HIGH 7.0

Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.

CVE-2026-71333
HIGH 7.0

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-70573
HIGH 7.0

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-70577
HIGH 7.0

Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

CVE-2026-70565
HIGH 7.0

Use after free in Windows AF_UNIX Socket Provider allows an authorized attacker to elevate privileges locally.

CVE-2026-70568
HIGH 7.0

Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.

CVE-2026-70562
HIGH 7.0

Double free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

CVE-2026-70283
HIGH 7.0

Incorrect authorization in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-69911
HIGH 7.0

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-69891
HIGH 7.0

Use after free in Windows Media allows an authorized attacker to elevate privileges locally.

CVE-2026-69889
HIGH 7.0

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69859
HIGH 7.0

Time-of-check time-of-use (toctou) race condition in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.

CVE-2026-69866
HIGH 7.0

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69834
HIGH 7.0

Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally.

CVE-2026-69838
HIGH 7.0

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

CVE-2026-69816
HIGH 7.0

Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally.

CVE-2026-69817
HIGH 7.0

Use after free in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-69814
HIGH 7.0

Use after free in Windows Credential Providers allows an authorized attacker to elevate privileges locally.

CVE-2026-69791
HIGH 7.0

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69692
HIGH 7.0

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69693
HIGH 7.0

Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally.

CVE-2026-69694
HIGH 7.0

Deserialization of untrusted data in Windows IP Address Management (IPAM) Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69682
HIGH 7.0

Use after free in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69648
HIGH 7.0

Use after free in Windows Notification allows an authorized attacker to elevate privileges locally.

CVE-2026-69645
HIGH 7.0

Use after free in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

CVE-2026-69630
HIGH 7.0

Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-69621
HIGH 7.0

Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69610
HIGH 7.0

Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-69613
HIGH 7.0

Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.

CVE-2026-69605
HIGH 7.0

Use after free in Microsoft Install Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69606
HIGH 7.0

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.

CVE-2026-69600
HIGH 7.0

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-69578
HIGH 7.0

Numeric truncation error in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-69581
HIGH 7.0

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69573
HIGH 7.0

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-69574
HIGH 7.0

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69575
HIGH 7.0

Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

CVE-2026-69567
HIGH 7.0

Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-69501
HIGH 7.0

Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

CVE-2026-69470
HIGH 7.0

Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.

CVE-2026-69472
HIGH 7.0

Use after free in Windows Devices Human Interface allows an authorized attacker to elevate privileges locally.

CVE-2026-69473
HIGH 7.0

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-69466
HIGH 7.0

Time-of-check time-of-use (toctou) race condition in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-69430
HIGH 7.0

Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69413
HIGH 7.0

Use after free in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.

CVE-2026-69404
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileg…

CVE-2026-69379
HIGH 7.0

Improper link resolution before file access ('link following') in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-69319
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Video Driver allows an authorized attacker to elevat…

CVE-2026-69310
HIGH 7.0

Use after free in Windows DNS allows an authorized attacker to elevate privileges locally.

CVE-2026-69299
HIGH 7.0

Use after free in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.

CVE-2026-69287
HIGH 7.0

Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

CVE-2026-69281
HIGH 7.0

Use after free in Windows License Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-68897
HIGH 7.0

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.

CVE-2026-68884
HIGH 7.0

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-68847
HIGH 7.0

Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.

CVE-2026-68837
HIGH 7.0

Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally.

CVE-2026-68840
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Driver allows an authorized attacker to elevate priv…

CVE-2026-68824
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User Experiences and Telemetry allows an autho…

CVE-2026-68825
HIGH 7.0

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-62694
HIGH 7.0

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-50349
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authoriz…

CVE-2026-69275
HIGH 7.0

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

CVE-2026-69279
HIGH 7.0

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2026-69280
HIGH 7.0

Windows Push Notifications Elevation of Privilege Vulnerability

CVE-2026-69300
HIGH 7.0

Windows Push Notifications Elevation of Privilege Vulnerability

CVE-2026-69309
HIGH 7.0

Windows Print Spooler Components Elevation of Privilege Vulnerability

CVE-2026-69311
HIGH 7.0

Windows Audio Service Elevation of Privilege Vulnerability

CVE-2026-69331
HIGH 7.0

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

CVE-2026-69335
HIGH 7.0

Windows Win32k Elevation of Privilege Vulnerability

CVE-2026-69341
HIGH 7.0

Windows Image Acquisition Elevation of Privilege Vulnerability

CVE-2026-69362
HIGH 7.0

Windows Error Reporting Elevation of Privilege Vulnerability

CVE-2026-69383
HIGH 7.0

Windows Shell Elevation of Privilege Vulnerability

CVE-2026-69385
HIGH 7.0

Windows TCP/IP Elevation of Privilege Vulnerability

CVE-2026-69388
HIGH 7.0

Windows Bluetooth Service Elevation of Privilege Vulnerability

CVE-2026-69394
HIGH 7.0

Windows Audio Service Elevation of Privilege Vulnerability

CVE-2026-69398
HIGH 7.0

Windows Bluetooth Service Elevation of Privilege Vulnerability

CVE-2026-69441
HIGH 7.0

Windows Installer Elevation of Privilege Vulnerability

CVE-2026-69448
HIGH 7.0

Windows Bluetooth Service Elevation of Privilege Vulnerability

CVE-2026-69468
HIGH 7.0

Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability

CVE-2026-69488
HIGH 7.0

Windows Device Association Service Elevation of Privilege Vulnerability

CVE-2026-69492
HIGH 7.0

Windows Partition Management Driver Elevation of Privilege Vulnerability

CVE-2026-69498
HIGH 7.0

Windows Win32k Elevation of Privilege Vulnerability

CVE-2026-69500
HIGH 7.0

Windows Image Acquisition Elevation of Privilege Vulnerability

CVE-2026-69516
HIGH 7.0

Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability

CVE-2026-69517
HIGH 7.0

Windows Wireless Networking Elevation of Privilege Vulnerability

CVE-2026-69540
HIGH 7.0

Windows Audio Service Elevation of Privilege Vulnerability

CVE-2026-69549
HIGH 7.0

Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability

CVE-2026-69560
HIGH 7.0

Windows Work Folder Service Elevation of Privilege Vulnerability

CVE-2026-69563
HIGH 7.0

Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

CVE-2026-69611
HIGH 7.0

Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability

CVE-2026-69652
HIGH 7.0

Windows Win32k Elevation of Privilege Vulnerability

CVE-2026-69654
HIGH 7.0

Windows Accounts Control Elevation of Privilege Vulnerability

CVE-2026-69708
HIGH 7.0

Windows Web Platform Storage Elevation of Privilege Vulnerability

CVE-2026-69711
HIGH 7.0

Windows Device Association Service Elevation of Privilege Vulnerability

CVE-2026-69735
HIGH 7.0

Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

CVE-2026-69779
HIGH 7.0

Windows Win32k Elevation of Privilege Vulnerability

CVE-2026-70578
HIGH 7.0

Windows Credential Guard Elevation of Privilege Vulnerability

CVE-2026-85360
HIGH 7.0

Windows Kernel Elevation of Privilege Vulnerability

CVE-2026-62727
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to eleva…

CVE-2026-70307
HIGH 7.0

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-65788
HIGH 7.0

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-65678
HIGH 7.0

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-62908
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to elevate p…

CVE-2026-62892
HIGH 7.0

Use after free in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally.

CVE-2026-62788
HIGH 7.0

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-62780
HIGH 7.0

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-62773
HIGH 7.0

Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.

CVE-2026-62774
HIGH 7.0

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-62748
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to eleva…

CVE-2026-62753
HIGH 7.0

Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-62729
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to eleva…

CVE-2026-62734
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to eleva…

CVE-2026-62723
HIGH 7.0

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

CVE-2026-62724
HIGH 7.0

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

CVE-2026-62725
HIGH 7.0

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

CVE-2026-62726
HIGH 7.0

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

CVE-2026-62728
HIGH 7.0

Time-of-check time-of-use (toctou) race condition in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-61939
HIGH 7.0

Use after free in Winlogon allows an authorized attacker to elevate privileges locally.

CVE-2026-62690
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elev…

CVE-2026-61929
HIGH 7.0

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-61366
HIGH 7.0

Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.

CVE-2026-61348
HIGH 7.0

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-61346
HIGH 7.0

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-59122
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to eleva…

CVE-2026-59125
HIGH 7.0

Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-59126
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Event Logging Service allows an authorized attacker to e…

CVE-2026-50472
HIGH 7.0

Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally.

CVE-2026-58629
HIGH 7.0

Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.

CVE-2026-56173
HIGH 7.0

Use after free in Windows WebView allows an authorized attacker to elevate privileges locally.

CVE-2026-48571
HIGH 7.0

Use after free in Windows App Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-48572
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows App Installer allows an authorized attacker to elevate p…

CVE-2026-47648
HIGH 7.0

Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally.

CVE-2026-45653
HIGH 7.0

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-45640
HIGH 7.0

Use after free in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-45598
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authoriz…

CVE-2026-45601
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authoriz…

CVE-2026-45603
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authoriz…

CVE-2026-45596
HIGH 7.0

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-45597
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in UI Automation Manager (uiamanager.dll) allows an authorized atta…

CVE-2026-42984
HIGH 7.0

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-42911
HIGH 7.0

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-42912
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to eleva…

CVE-2026-42836
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.dll) allows an authorized atta…

CVE-2026-41108
HIGH 7.0

Heap-based buffer overflow in Microsoft Windows DNS allows an authorized attacker to elevate privileges locally.

CVE-2026-34335
HIGH 7.0

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2025-54518
HIGH 7.0

Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a dif…

CVE-2026-35416
HIGH 7.0

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privile…

CVE-2026-34345
HIGH 7.0

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privile…

CVE-2026-33839
HIGH 7.0

Win32k Elevation of Privilege Vulnerability

CVE-2026-34331
HIGH 7.0

Win32k Elevation of Privilege Vulnerability

CVE-2026-34340
HIGH 7.0

Windows Projected File System Elevation of Privilege Vulnerability

CVE-2026-34341
HIGH 7.0

Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability

CVE-2026-34342
HIGH 7.0

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2026-34347
HIGH 7.0

Windows Win32k Elevation of Privilege Vulnerability

CVE-2026-40410
HIGH 7.0

Windows SMB Client Elevation of Privilege Vulnerability

CVE-2026-42825
HIGH 7.0

Windows Telephony Service Elevation of Privilege Vulnerability

CVE-2026-33104
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate p…

CVE-2026-33099
HIGH 7.0

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-33100
HIGH 7.0

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-25184
HIGH 7.0

Applocker Filter Driver (applockerfltr.sys) Elevation of Privilege Vulnerability

CVE-2026-26152
HIGH 7.0

Microsoft Cryptographic Services Elevation of Privilege Vulnerability

CVE-2026-26165
HIGH 7.0

Windows Shell Elevation of Privilege Vulnerability

CVE-2026-26166
HIGH 7.0

Windows Shell Elevation of Privilege Vulnerability

CVE-2026-26173
HIGH 7.0

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2026-26174
HIGH 7.0

Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability

CVE-2026-26177
HIGH 7.0

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2026-26182
HIGH 7.0

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2026-27908
HIGH 7.0

Windows TDI Translation Driver (tdx.sys) Elevation of Privilege Vulnerability

CVE-2026-27917
HIGH 7.0

Windows WFP NDIS Lightweight Filter Driver (wfplwfs.sys) Elevation of Privilege Vulnerability

CVE-2026-27921
HIGH 7.0

Windows TDI Translation Driver (tdx.sys) Elevation of Privilege Vulnerability

CVE-2026-27922
HIGH 7.0

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2026-27926
HIGH 7.0

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2026-27929
HIGH 7.0

Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability

CVE-2026-32068
HIGH 7.0

Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability

CVE-2026-32070
HIGH 7.0

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2026-32073
HIGH 7.0

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2026-32075
HIGH 7.0

Windows UPnP Device Host Elevation of Privilege Vulnerability

CVE-2026-32082
HIGH 7.0

Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability

CVE-2026-32083
HIGH 7.0

Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability

CVE-2026-32086
HIGH 7.0

Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability

CVE-2026-32087
HIGH 7.0

Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability

CVE-2026-32093
HIGH 7.0

Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability

CVE-2026-32150
HIGH 7.0

Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability

CVE-2026-24285
HIGH 7.0

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-23667
HIGH 7.0

Broadcast DVR Elevation of Privilege Vulnerability

CVE-2026-23668
HIGH 7.0

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2026-23671
HIGH 7.0

Windows Bluetooth RFCOM Protocol Driver Elevation of Privilege Vulnerability

CVE-2026-24295
HIGH 7.0

Windows Device Association Service Elevation of Privilege Vulnerability

CVE-2026-24296
HIGH 7.0

Windows Device Association Service Elevation of Privilege Vulnerability

CVE-2026-25170
HIGH 7.0

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2026-25171
HIGH 7.0

Windows Authentication Elevation of Privilege Vulnerability

CVE-2026-25178
HIGH 7.0

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2026-25179
HIGH 7.0

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2026-21234
HIGH 7.0

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

CVE-2026-21237
HIGH 7.0

Windows Subsystem for Linux Elevation of Privilege Vulnerability

CVE-2026-21241
HIGH 7.0

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2026-21242
HIGH 7.0

Windows Subsystem for Linux Elevation of Privilege Vulnerability

CVE-2026-21253
HIGH 7.0

Mailslot File System Elevation of Privilege Vulnerability

CVE-2026-21508
HIGH 7.0

Windows Storage Elevation of Privilege Vulnerability

CVE-2026-20869
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Local Session Manager (LSM) allows an authorized attacke…

CVE-2026-20863
HIGH 7.0

Double free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.

CVE-2026-20842
HIGH 7.0

Use after free in Windows DWM allows an authorized attacker to elevate privileges locally.

CVE-2026-20836
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an authorized attacker to elevate privile…

CVE-2026-20814
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an authorized attacker to elevate privile…

CVE-2025-54957
HIGH 7.0

Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir.

CVE-2025-62573
HIGH 7.0

DirectX Graphics Kernel Elevation of Privilege Vulnerability

CVE-2025-59506
HIGH 7.0

DirectX Graphics Kernel Elevation of Privilege Vulnerability

CVE-2025-59507
HIGH 7.0

Windows Speech Runtime Elevation of Privilege Vulnerability

CVE-2025-59508
HIGH 7.0

Windows Speech Recognition Elevation of Privilege Vulnerability

CVE-2025-59515
HIGH 7.0

Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

CVE-2025-60716
CRITICAL 7.0

DirectX Graphics Kernel Elevation of Privilege Vulnerability

CVE-2025-60717
HIGH 7.0

Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

CVE-2025-60719
HIGH 7.0

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2025-62213
HIGH 7.0

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2025-62217
HIGH 7.0

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2025-62218
HIGH 7.0

Microsoft Wireless Provisioning System Elevation of Privilege Vulnerability

CVE-2025-62219
HIGH 7.0

Microsoft Wireless Provisioning System Elevation of Privilege Vulnerability

CVE-2025-53717
HIGH 7.0

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

CVE-2025-55331
HIGH 7.0

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

CVE-2025-55340
HIGH 7.0

Windows Remote Desktop Protocol Security Feature Bypass

CVE-2025-55678
HIGH 7.0

DirectX Graphics Kernel Elevation of Privilege Vulnerability

CVE-2025-55681
HIGH 7.0

Desktop Window Manager Elevation of Privilege Vulnerability

CVE-2025-55685
HIGH 7.0

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

CVE-2025-55686
HIGH 7.0

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

CVE-2025-55689
HIGH 7.0

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

CVE-2025-58725
HIGH 7.0

Windows COM+ Event System Service Elevation of Privilege Vulnerability

CVE-2025-58727
HIGH 7.0

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

CVE-2025-58730
HIGH 7.0

Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability

CVE-2025-58731
HIGH 7.0

Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability

CVE-2025-58732
HIGH 7.0

Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability

CVE-2025-58733
HIGH 7.0

Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability

CVE-2025-58734
HIGH 7.0

Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability

CVE-2025-58735
HIGH 7.0

Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability

CVE-2025-58736
HIGH 7.0

Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability

CVE-2025-58738
HIGH 7.0

Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability

CVE-2025-59193
HIGH 7.0

Windows Management Services Elevation of Privilege Vulnerability

CVE-2025-59194
HIGH 7.0

Windows Kernel Elevation of Privilege Vulnerability

CVE-2025-59195
HIGH 7.0

Windows Graphics Component Denial of Service Vulnerability

CVE-2025-59196
HIGH 7.0

Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability

CVE-2025-59202
HIGH 7.0

Windows Remote Desktop Services Elevation of Privilege Vulnerability

CVE-2025-59205
HIGH 7.0

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2025-59261
HIGH 7.0

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2025-59282
HIGH 7.0

Internet Information Services (IIS) Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability

CVE-2025-59289
HIGH 7.0

Windows Bluetooth Service Elevation of Privilege Vulnerability

CVE-2025-49734
HIGH 7.0

PowerShell Direct Elevation of Privilege Vulnerability

CVE-2025-53802
HIGH 7.0

Windows Bluetooth Service Elevation of Privilege Vulnerability

CVE-2025-53807
HIGH 7.0

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2025-54093
HIGH 7.0

Windows TCP/IP Driver Elevation of Privilege Vulnerability

CVE-2025-54099
HIGH 7.0

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2025-54112
HIGH 7.0

Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

CVE-2025-54114
HIGH 7.0

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

CVE-2025-54115
HIGH 7.0

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2025-55223
HIGH 7.0

DirectX Graphics Kernel Elevation of Privilege Vulnerability

CVE-2025-59220
HIGH 7.0

Windows Bluetooth Service Elevation of Privilege Vulnerability

CVE-2025-49762
HIGH 7.0

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2025-50158
HIGH 7.0

Windows NTFS Information Disclosure Vulnerability

CVE-2025-50167
HIGH 7.0

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2025-53134
HIGH 7.0

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2025-53135
HIGH 7.0

DirectX Graphics Kernel Elevation of Privilege Vulnerability

CVE-2025-53137
HIGH 7.0

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2025-53140
HIGH 7.0

Windows Kernel Transaction Manager Elevation of Privilege Vulnerability

CVE-2025-53142
HIGH 7.0

Microsoft Brokering File System Elevation of Privilege Vulnerability

CVE-2025-53147
HIGH 7.0

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2025-53718
HIGH 7.0

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2025-53721
HIGH 7.0

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

CVE-2025-47975
HIGH 7.0

Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability

CVE-2025-49678
HIGH 7.0

NTFS Elevation of Privilege Vulnerability

CVE-2025-49685
HIGH 7.0

Windows Search Service Elevation of Privilege Vulnerability

CVE-2025-49727
HIGH 7.0

Win32k Elevation of Privilege Vulnerability

CVE-2025-49744 Exploit
HIGH 7.0

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2025-27468
HIGH 7.0

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

CVE-2025-29841
HIGH 7.0

Universal Print Management Service Elevation of Privilege Vulnerability

CVE-2025-21191
HIGH 7.0

Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability

CVE-2025-26640
HIGH 7.0

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-26649
HIGH 7.0

Windows Secure Channel Elevation of Privilege Vulnerability

CVE-2025-26665
HIGH 7.0

Windows upnphost.dll Elevation of Privilege Vulnerability

CVE-2025-27475
HIGH 7.0

Windows Update Stack Elevation of Privilege Vulnerability

CVE-2025-27478
HIGH 7.0

Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability

CVE-2025-27492
HIGH 7.0

Windows Secure Channel Elevation of Privilege Vulnerability

CVE-2025-27732
HIGH 7.0

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2025-21184
HIGH 7.0

Windows Core Messaging Elevation of Privileges Vulnerability

CVE-2025-21414
HIGH 7.0

Windows Core Messaging Elevation of Privileges Vulnerability

CVE-2024-49084
HIGH 7.0

Windows Kernel Elevation of Privilege Vulnerability

CVE-2024-49095
HIGH 7.0

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

CVE-2024-49097
HIGH 7.0

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

CVE-2024-43511
HIGH 7.0

Windows Kernel Elevation of Privilege Vulnerability

CVE-2024-43522
HIGH 7.0

Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability

CVE-2024-43535
HIGH 7.0

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

CVE-2024-38246
HIGH 7.0

Win32k Elevation of Privilege Vulnerability

CVE-2024-38248
HIGH 7.0

Windows Storage Elevation of Privilege Vulnerability

CVE-2024-38136
HIGH 7.0

Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability

CVE-2024-38137
HIGH 7.0

Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability

CVE-2024-38022
HIGH 7.0

Windows Image Acquisition Elevation of Privilege Vulnerability

CVE-2024-38069
HIGH 7.0

Windows Enroll Engine Security Feature Bypass Vulnerability

CVE-2024-35265
HIGH 7.0

Windows Perception Service Elevation of Privilege Vulnerability

CVE-2024-30099
HIGH 7.0

Windows Kernel Elevation of Privilege Vulnerability

CVE-2024-30090
HIGH 7.0

Microsoft Streaming Service Elevation of Privilege Vulnerability

CVE-2024-30084
HIGH 7.0

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

CVE-2024-26242
HIGH 7.0

Windows Telephony Server Elevation of Privilege Vulnerability

CVE-2024-26243
HIGH 7.0

Windows USB Print Driver Elevation of Privilege Vulnerability

CVE-2024-21432
HIGH 7.0

Windows Update Stack Elevation of Privilege Vulnerability

CVE-2024-21433
HIGH 7.0

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2024-21439
HIGH 7.0

Windows Telephony Server Elevation of Privilege Vulnerability

CVE-2024-21445
HIGH 7.0

Windows USB Print Driver Elevation of Privilege Vulnerability

CVE-2024-21405
HIGH 7.0

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability

CVE-2024-21371
HIGH 7.0

Windows Kernel Elevation of Privilege Vulnerability

CVE-2024-21355
HIGH 7.0

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability

CVE-2024-20657
HIGH 7.0

Windows Group Policy Elevation of Privilege Vulnerability

CVE-2023-36403
HIGH 7.0

Windows Kernel Elevation of Privilege Vulnerability

CVE-2023-36405
HIGH 7.0

Windows Kernel Elevation of Privilege Vulnerability

CVE-2023-36427
HIGH 7.0

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2020-17103
HIGH 7.0

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2026-78451
MEDIUM 6.8

Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-77892
MEDIUM 6.8

No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-72999
MEDIUM 6.8

Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-72985
MEDIUM 6.8

Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-71350
MEDIUM 6.8

Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.

CVE-2026-71348
MEDIUM 6.8

Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.

CVE-2026-71349
MEDIUM 6.8

Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.

CVE-2026-71329
MEDIUM 6.8

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.

CVE-2026-69566
MEDIUM 6.8

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.

CVE-2026-69490
MEDIUM 6.8

Out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-68833
MEDIUM 6.8

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.

CVE-2026-62702
MEDIUM 6.8

Null pointer dereference in Windows Graphics Kernel allows an unauthorized attacker to deny service over a network.

CVE-2026-62699
MEDIUM 6.8

Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an unauthorized attacker to execute code with a physical attack.

CVE-2026-50507
MEDIUM 6.8

Missing authentication for critical function in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

CVE-2026-45608
MEDIUM 6.8

Out-of-bounds read in Windows DHCP Client allows an unauthorized attacker to disclose information locally.

CVE-2025-49751
HIGH 6.8

Windows Hyper-V Denial of Service Vulnerability

CVE-2025-47999
HIGH 6.8

Windows Hyper-V Denial of Service Vulnerability

CVE-2025-48001
HIGH 6.8

Windows BitLocker Security Feature Bypass Vulnerability

CVE-2025-48003
HIGH 6.8

Windows BitLocker Security Feature Bypass Vulnerability

CVE-2025-48800
HIGH 6.8

Windows BitLocker Security Feature Bypass Vulnerability

CVE-2025-48804
HIGH 6.8

Windows BitLocker Security Feature Bypass Vulnerability

CVE-2025-48818
HIGH 6.8

Windows BitLocker Security Feature Bypass Vulnerability

CVE-2025-26637
HIGH 6.8

Windows BitLocker Security Feature Bypass Vulnerability

CVE-2025-21349
HIGH 6.8

Windows Remote Desktop Configuration Service Tampering Vulnerability

CVE-2025-21211
HIGH 6.8

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-49073
HIGH 6.8

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability

CVE-2024-49077
HIGH 6.8

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability

CVE-2024-49078
HIGH 6.8

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability

CVE-2024-49082
HIGH 6.8

Windows File Explorer Information Disclosure Vulnerability

CVE-2024-49083
HIGH 6.8

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability

CVE-2024-49092
HIGH 6.8

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability

CVE-2024-49110
HIGH 6.8

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability

CVE-2024-43449
HIGH 6.8

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

CVE-2024-43634
HIGH 6.8

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

CVE-2024-43637
HIGH 6.8

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

CVE-2024-43638
HIGH 6.8

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

CVE-2024-43643
HIGH 6.8

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

CVE-2024-43523
HIGH 6.8

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVE-2024-43524
HIGH 6.8

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVE-2024-43525
HIGH 6.8

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVE-2024-43526
HIGH 6.8

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVE-2024-43536
HIGH 6.8

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVE-2024-43543
HIGH 6.8

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVE-2024-38161
HIGH 6.8

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVE-2024-38223
HIGH 6.8

Windows Initial Machine Configuration Elevation of Privilege Vulnerability

CVE-2024-26184
HIGH 6.8

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-38058
HIGH 6.8

BitLocker Security Feature Bypass Vulnerability

CVE-2024-38065
HIGH 6.8

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-30076
MEDIUM 6.8

Windows Container Manager Service Elevation of Privilege Vulnerability

CVE-2024-29997
HIGH 6.8

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVE-2024-29998
HIGH 6.8

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVE-2024-29999
HIGH 6.8

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVE-2024-30000
HIGH 6.8

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVE-2024-30001
HIGH 6.8

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVE-2024-30002
HIGH 6.8

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVE-2024-30003
HIGH 6.8

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVE-2024-30004
HIGH 6.8

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVE-2024-30005
HIGH 6.8

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVE-2024-30012
HIGH 6.8

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVE-2024-30021
HIGH 6.8

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVE-2024-26168
HIGH 6.8

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-26252
HIGH 6.8

Windows rndismp6.sys Remote Code Execution Vulnerability

CVE-2024-26253
HIGH 6.8

Windows rndismp6.sys Remote Code Execution Vulnerability

CVE-2024-28897
HIGH 6.8

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-21429
HIGH 6.8

Windows USB Hub Driver Remote Code Execution Vulnerability

CVE-2024-21341
MEDIUM 6.8

Windows Kernel Remote Code Execution Vulnerability

CVE-2026-72935
MEDIUM 6.7

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-71339
MEDIUM 6.7

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-69350
HIGH 6.7

Windows Overlay Filter Elevation of Privilege Vulnerability

CVE-2026-69373
HIGH 6.7

Windows Overlay Filter Elevation of Privilege Vulnerability

CVE-2026-69449
HIGH 6.7

Windows BitLocker Remote Code Execution Vulnerability

CVE-2026-72927
HIGH 6.7

Winsock Elevation of Privilege Vulnerability

CVE-2026-70330
MEDIUM 6.7

Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.

CVE-2026-70304
MEDIUM 6.7

Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.

CVE-2026-65799
MEDIUM 6.7

Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally.

CVE-2026-65795
MEDIUM 6.7

Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.

CVE-2026-65797
MEDIUM 6.7

Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.

CVE-2026-65798
MEDIUM 6.7

Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.

CVE-2026-62881
MEDIUM 6.7

Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.

CVE-2026-62883
MEDIUM 6.7

Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.

CVE-2026-62769
MEDIUM 6.7

Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.

CVE-2026-32170
MEDIUM 6.7

Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally.

CVE-2026-21530
HIGH 6.7

Windows Rich Text Edit Elevation of Privilege Vulnerability

CVE-2026-41097
HIGH 6.7

Secure Boot Security Feature Bypass Vulnerability

CVE-2026-20876
MEDIUM 6.7

Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

CVE-2025-53808
HIGH 6.7

Windows Defender Firewall Service Elevation of Privilege Vulnerability

CVE-2025-53810
HIGH 6.7

Windows Defender Firewall Service Elevation of Privilege Vulnerability

CVE-2025-54094
HIGH 6.7

Windows Defender Firewall Service Elevation of Privilege Vulnerability

CVE-2025-54104
HIGH 6.7

Windows Defender Firewall Service Elevation of Privilege Vulnerability

CVE-2025-54109
HIGH 6.7

Windows Defender Firewall Service Elevation of Privilege Vulnerability

CVE-2025-54915
HIGH 6.7

Windows Defender Firewall Service Elevation of Privilege Vulnerability

CVE-2025-55226
CRITICAL 6.7

Graphics Kernel Remote Code Execution Vulnerability

CVE-2025-48807
CRITICAL 6.7

Windows Hyper-V Remote Code Execution Vulnerability

CVE-2025-49743
HIGH 6.7

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2025-48803
HIGH 6.7

Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability

CVE-2025-48811
HIGH 6.7

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

CVE-2025-3052
HIGH 6.7

Cert CC: CVE-2025-3052 InsydeH2O Secure Boot Bypass

CVE-2025-26681
HIGH 6.7

Win32k Elevation of Privilege Vulnerability

CVE-2024-7344
HIGH 6.7

Cert CC: CVE-2024-7344 Howyar Taiwan Secure Boot Bypass

CVE-2024-43631
HIGH 6.7

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

CVE-2024-43646
HIGH 6.7

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

CVE-2024-37976
HIGH 6.7

Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability

CVE-2024-37982
HIGH 6.7

Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability

CVE-2024-37983
HIGH 6.7

Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability

CVE-2024-21302
HIGH 6.7

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

CVE-2024-38013
HIGH 6.7

Microsoft Windows Server Backup Elevation of Privilege Vulnerability

CVE-2024-30063
MEDIUM 6.7

Windows Distributed File System (DFS) Remote Code Execution Vulnerability

CVE-2024-20669
HIGH 6.7

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-23593
HIGH 6.7

Lenovo: CVE-2024-23593 Modify Boot Manager and Escalate Privileges

CVE-2024-26171
HIGH 6.7

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-26234
HIGH 6.7

Proxy Driver Spoofing Vulnerability

CVE-2024-26250
HIGH 6.7

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-28903
HIGH 6.7

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-28919
HIGH 6.7

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-28921
HIGH 6.7

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-28924
HIGH 6.7

Secure Boot Security Feature Bypass Vulnerability

CVE-2023-36003
HIGH 6.7

XAML Diagnostics Elevation of Privilege Vulnerability

CVE-2023-24932
HIGH 6.7

Secure Boot Security Feature Bypass Vulnerability

CVE-2026-69469
MEDIUM 6.6

Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2025-2884
MEDIUM 6.6

TCG TPM2.0 Reference implementation's CryptHmacSign helper function is vulnerable to Out-of-Bounds read due to the lack of validation the signature scheme with…

CVE-2025-24987
HIGH 6.6

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

CVE-2025-24988
HIGH 6.6

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

CVE-2025-21226
HIGH 6.6

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-21227
HIGH 6.6

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-21228
HIGH 6.6

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-21229
HIGH 6.6

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-21232
HIGH 6.6

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-21249
HIGH 6.6

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-21255
HIGH 6.6

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-21256
HIGH 6.6

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-21258
HIGH 6.6

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-21260
HIGH 6.6

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-21261
HIGH 6.6

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-21263
HIGH 6.6

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-21265
HIGH 6.6

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-21310
HIGH 6.6

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-21324
HIGH 6.6

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-21327
HIGH 6.6

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-21341
HIGH 6.6

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2024-49081
HIGH 6.6

Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability

CVE-2024-49094
HIGH 6.6

Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability

CVE-2024-49101
HIGH 6.6

Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability

CVE-2024-49109
HIGH 6.6

Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability

CVE-2024-49111
HIGH 6.6

Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability

CVE-2024-38049
HIGH 6.6

Windows Distributed Transaction Coordinator Remote Code Execution Vulnerability

CVE-2024-20666
HIGH 6.6

BitLocker Security Feature Bypass Vulnerability

CVE-2026-78453
MEDIUM 6.5

Integer underflow (wrap or wraparound) in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information over a network.

CVE-2026-72942
MEDIUM 6.5

Out-of-bounds read in Windows Spaceport.sys allows an unauthorized attacker to disclose information over a network.

CVE-2026-72939
MEDIUM 6.5

Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to deny service over a network.

CVE-2026-70019
MEDIUM 6.5

Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network.

CVE-2026-69374
MEDIUM 6.5

Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network.

CVE-2026-68898
MEDIUM 6.5

Out-of-bounds read in Windows iSCSI allows an unauthorized attacker to deny service over a network.

CVE-2026-69267
MEDIUM 6.5

Insufficient granularity of access control in Windows Connected User Experiences and Telemetry allows an authorized attacker to disclose information locally.

CVE-2026-62801
MEDIUM 6.5

Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an unauthorized attacker to bypass a security featu…

CVE-2026-62762
HIGH 6.5

Windows Active Directory Domain Services Denial of Service Vulnerability

CVE-2026-77896
HIGH 6.5

Windows Remote Desktop Client Denial of Service Vulnerability

CVE-2026-65794
MEDIUM 6.5

Buffer over-read in Windows SMB Client allows an unauthorized attacker to disclose information over a network.

CVE-2026-62782
MEDIUM 6.5

Out-of-bounds read in Windows SMB Client allows an unauthorized attacker to disclose information over a network.

CVE-2026-62750
MEDIUM 6.5

Partial string comparison in Windows HTTP Protocol Stack allows an unauthorized attacker to perform tampering over an adjacent network.

CVE-2026-61921
MEDIUM 6.5

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

CVE-2026-61924
MEDIUM 6.5

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

CVE-2026-61918
MEDIUM 6.5

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

CVE-2026-59138
MEDIUM 6.5

Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network.

CVE-2026-61345
MEDIUM 6.5

Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network.

CVE-2026-34348
MEDIUM 6.5

Protection mechanism failure in Windows Event Logging Service allows an authorized attacker to disclose information over a network.

CVE-2026-42907
MEDIUM 6.5

Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information over a network.

CVE-2026-42903
MEDIUM 6.5

Null pointer dereference in Windows Kerberos allows an authorized attacker to deny service over a network.

CVE-2026-35422
HIGH 6.5

Windows TCP/IP Driver Security Feature Bypass Vulnerability

CVE-2026-26155
HIGH 6.5

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

CVE-2026-27925
HIGH 6.5

Windows UPnP Device Host Information Disclosure Vulnerability

CVE-2026-32151
HIGH 6.5

Windows Shell Information Disclosure Vulnerability

CVE-2026-20925
MEDIUM 6.5

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-20872
MEDIUM 6.5

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-20847
MEDIUM 6.5

Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to perform spoofing over a network.

CVE-2026-20812
MEDIUM 6.5

Improper input validation in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to perform tampering over a network.

CVE-2025-62463
HIGH 6.5

DirectX Graphics Kernel Denial of Service Vulnerability

CVE-2025-62465
HIGH 6.5

DirectX Graphics Kernel Denial of Service Vulnerability

CVE-2025-62473
HIGH 6.5

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

CVE-2025-64670
HIGH 6.5

Windows DirectX Information Disclosure Vulnerability

CVE-2025-60708
HIGH 6.5

Storvsp.sys Driver Denial of Service Vulnerability

CVE-2025-55700
HIGH 6.5

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

CVE-2025-58717
HIGH 6.5

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

CVE-2025-58729
HIGH 6.5

Windows Local Session Manager (LSM) Denial of Service Vulnerability

CVE-2025-58739
HIGH 6.5

Microsoft Windows File Explorer Spoofing Vulnerability

CVE-2025-59185
HIGH 6.5

NTLM Hash Disclosure Spoofing Vulnerability

CVE-2025-59214
HIGH 6.5

Microsoft Windows File Explorer Spoofing Vulnerability

CVE-2025-59244
HIGH 6.5

NTLM Hash Disclosure Spoofing Vulnerability

CVE-2025-59259
HIGH 6.5

Windows Local Session Manager (LSM) Denial of Service Vulnerability

CVE-2025-50154 Exploit
HIGH 6.5

Microsoft Windows File Explorer Spoofing Vulnerability

CVE-2025-50166
HIGH 6.5

Windows Distributed Transaction Coordinator (MSDTC) Information Disclosure Vulnerability

CVE-2025-50172
HIGH 6.5

DirectX Graphics Kernel Denial of Service Vulnerability

CVE-2025-53716
HIGH 6.5

Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability

CVE-2025-48802
HIGH 6.5

Windows SMB Server Spoofing Vulnerability

CVE-2025-32715
HIGH 6.5

Remote Desktop Protocol Client Information Disclosure Vulnerability

CVE-2025-33057
HIGH 6.5

Windows Local Security Authority (LSA) Denial of Service Vulnerability

CVE-2025-29830
HIGH 6.5

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

CVE-2025-29832
HIGH 6.5

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

CVE-2025-29835
HIGH 6.5

Windows Remote Access Connection Manager Information Disclosure Vulnerability

CVE-2025-29836
HIGH 6.5

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

CVE-2025-29958
HIGH 6.5

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

CVE-2025-29959
HIGH 6.5

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

CVE-2025-29960
HIGH 6.5

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

CVE-2025-29961
HIGH 6.5

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

CVE-2025-21197
HIGH 6.5

Windows NTFS Information Disclosure Vulnerability

CVE-2025-26635
HIGH 6.5

Windows Hello Security Feature Bypass Vulnerability

CVE-2025-26651
HIGH 6.5

Windows Local Session Manager (LSM) Denial of Service Vulnerability

CVE-2025-26672
HIGH 6.5

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

CVE-2025-27738
HIGH 6.5

Windows Resilient File System (ReFS) Information Disclosure Vulnerability

CVE-2025-24071 Exploit
HIGH 6.5

Microsoft Windows File Explorer Spoofing Vulnerability

CVE-2025-24996
HIGH 6.5

NTLM Hash Disclosure Spoofing Vulnerability

CVE-2025-21212
HIGH 6.5

Internet Connection Sharing (ICS) Denial of Service Vulnerability

CVE-2025-21216
HIGH 6.5

Internet Connection Sharing (ICS) Denial of Service Vulnerability

CVE-2025-21254
HIGH 6.5

Internet Connection Sharing (ICS) Denial of Service Vulnerability

CVE-2025-21352
HIGH 6.5

Internet Connection Sharing (ICS) Denial of Service Vulnerability

CVE-2025-21377
HIGH 6.5

NTLM Hash Disclosure Spoofing Vulnerability

CVE-2025-21217
HIGH 6.5

Windows NTLM Spoofing Vulnerability

CVE-2025-21272
HIGH 6.5

Windows COM Server Information Disclosure Vulnerability

CVE-2025-21288
HIGH 6.5

Windows COM Server Information Disclosure Vulnerability

CVE-2025-21301
HIGH 6.5

Windows Geolocation Service Information Disclosure Vulnerability

CVE-2025-21308
HIGH 6.5

Windows Themes Spoofing Vulnerability

CVE-2025-21314
HIGH 6.5

Windows SmartScreen Spoofing Vulnerability

CVE-2024-43633
HIGH 6.5

Windows Hyper-V Denial of Service Vulnerability

CVE-2024-43534
HIGH 6.5

Windows Graphics Component Information Disclosure Vulnerability

CVE-2024-43537
HIGH 6.5

Windows Mobile Broadband Driver Denial of Service Vulnerability

CVE-2024-43538
HIGH 6.5

Windows Mobile Broadband Driver Denial of Service Vulnerability

CVE-2024-43540
HIGH 6.5

Windows Mobile Broadband Driver Denial of Service Vulnerability

CVE-2024-43542
HIGH 6.5

Windows Mobile Broadband Driver Denial of Service Vulnerability

CVE-2024-43547
HIGH 6.5

Windows Kerberos Information Disclosure Vulnerability

CVE-2024-43555
HIGH 6.5

Windows Mobile Broadband Driver Denial of Service Vulnerability

CVE-2024-43557
HIGH 6.5

Windows Mobile Broadband Driver Denial of Service Vulnerability

CVE-2024-43558
HIGH 6.5

Windows Mobile Broadband Driver Denial of Service Vulnerability

CVE-2024-43559
HIGH 6.5

Windows Mobile Broadband Driver Denial of Service Vulnerability

CVE-2024-43561
HIGH 6.5

Windows Mobile Broadband Driver Denial of Service Vulnerability

CVE-2024-38234
MEDIUM 6.5

Windows Networking Denial of Service Vulnerability

CVE-2024-38235
MEDIUM 6.5

Windows Hyper-V Denial of Service Vulnerability

CVE-2024-38165
HIGH 6.5

Windows Compressed Folder Tampering Vulnerability

CVE-2024-38027
HIGH 6.5

Windows Line Printer Daemon Service Denial of Service Vulnerability

CVE-2024-38030
HIGH 6.5

Windows Themes Spoofing Vulnerability

CVE-2024-38048
HIGH 6.5

Windows Network Driver Interface Specification (NDIS) Denial of Service Vulnerability

CVE-2024-38101
HIGH 6.5

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

CVE-2024-38102
HIGH 6.5

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

CVE-2024-38105
HIGH 6.5

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

CVE-2024-26183
HIGH 6.5

Windows Kerberos Denial of Service Vulnerability

CVE-2024-26185
HIGH 6.5

Windows Compressed Folder Tampering Vulnerability

CVE-2024-21356
MEDIUM 6.5

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

CVE-2024-20684
MEDIUM 6.5

Windows Hyper-V Denial of Service Vulnerability

CVE-2024-20660
HIGH 6.5

Microsoft Message Queuing Information Disclosure Vulnerability

CVE-2024-20663
HIGH 6.5

Windows Message Queuing Client (MSMQC) Information Disclosure

CVE-2024-20664
HIGH 6.5

Microsoft Message Queuing Information Disclosure Vulnerability

CVE-2024-20680
HIGH 6.5

Windows Message Queuing Client (MSMQC) Information Disclosure

CVE-2024-20690
HIGH 6.5

Windows Nearby Sharing Spoofing Vulnerability

CVE-2024-21314
HIGH 6.5

Microsoft Message Queuing Information Disclosure Vulnerability

CVE-2024-21320 Exploit
HIGH 6.5

Windows Themes Spoofing Vulnerability

CVE-2023-35642
HIGH 6.5

Internet Connection Sharing (ICS) Denial of Service Vulnerability

CVE-2023-36398
HIGH 6.5

Windows NTFS Information Disclosure Vulnerability

CVE-2026-72947
MEDIUM 6.4

Integer underflow (wrap or wraparound) in Windows File History Service allows an authorized attacker to elevate privileges locally.

CVE-2026-70582
HIGH 6.4

Windows Management Instrumentation Elevation of Privilege Vulnerability

CVE-2026-21265
MEDIUM 6.4

Windows Secure Boot stores Microsoft certificates in the UEFI KEK and DB. These original certificates are approaching expiration, and devices containing affect…

CVE-2024-43513
HIGH 6.4

BitLocker Security Feature Bypass Vulnerability

CVE-2024-43570
HIGH 6.4

Windows Kernel Elevation of Privilege Vulnerability

CVE-2024-23594
HIGH 6.4

Lenovo: CVE-2024-23594 Stack buffer overflow in Lenovo system recovery boot manager

CVE-2024-21339
MEDIUM 6.4

Windows USB Generic Parent Driver Remote Code Execution Vulnerability

CVE-2025-60723
HIGH 6.3

DirectX Graphics Kernel Denial of Service Vulnerability

CVE-2025-48813
HIGH 6.3

Virtual Secure Mode Spoofing Vulnerability

CVE-2024-28898
HIGH 6.3

Secure Boot Security Feature Bypass Vulnerability

CVE-2026-40380
HIGH 6.2

Windows Volume Manager Extension Driver Remote Code Execution Vulnerability

CVE-2026-32072
HIGH 6.2

Active Directory Spoofing Vulnerability

CVE-2026-25168
HIGH 6.2

Windows Graphics Component Denial of Service Vulnerability

CVE-2026-25169
HIGH 6.2

Windows Graphics Component Denial of Service Vulnerability

CVE-2026-20935
MEDIUM 6.2

Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an unauthorized attacker to disclose information locally.

CVE-2026-20821
MEDIUM 6.2

Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Call allows an unauthorized attacker to disclose information locally.

CVE-2025-55334
HIGH 6.2

Windows Kernel Security Feature Bypass Vulnerability

CVE-2025-47980
CRITICAL 6.2

Windows Imaging Component Information Disclosure Vulnerability

CVE-2025-29957
HIGH 6.2

Windows Deployment Services Denial of Service Vulnerability

CVE-2025-21278
HIGH 6.2

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

CVE-2024-38203
HIGH 6.2

Windows Package Library Manager Information Disclosure Vulnerability

CVE-2024-29064
HIGH 6.2

Windows Hyper-V Denial of Service Vulnerability

CVE-2026-26169
HIGH 6.1

Windows Kernel Memory Information Disclosure Vulnerability

CVE-2026-32088
HIGH 6.1

Windows Biometric Service Security Feature Bypass Vulnerability

CVE-2025-55330
HIGH 6.1

Windows BitLocker Security Feature Bypass Vulnerability

CVE-2025-55332
HIGH 6.1

Windows BitLocker Security Feature Bypass Vulnerability

CVE-2025-55333
HIGH 6.1

Windows BitLocker Security Feature Bypass Vulnerability

CVE-2025-55338
HIGH 6.1

Windows BitLocker Security Feature Bypass Vulnerability

CVE-2025-21202
HIGH 6.1

Windows Recovery Environment Agent Elevation of Privilege Vulnerability

CVE-2024-20665
HIGH 6.1

BitLocker Security Feature Bypass Vulnerability

CVE-2024-21316
HIGH 6.1

Windows Server Key Distribution Service Security Feature Bypass

CVE-2026-25250
MEDIUM 6.0

EAZ EazyFix 12.9 allows a Security Feature Bypass related to a "Missing Cryptographic Step" associated with "Secure Boot disable."

CVE-2025-27735
HIGH 6.0

Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability

CVE-2025-21347
HIGH 6.0

Windows Deployment Services Denial of Service Vulnerability

CVE-2026-6727
MEDIUM 5.9

A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A privileged local attacker with access to the TPM command interface may …

CVE-2025-48823
HIGH 5.9

Windows Cryptographic Services Information Disclosure Vulnerability

CVE-2025-29954
HIGH 5.9

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

CVE-2025-27471
HIGH 5.9

Microsoft Streaming Service Denial of Service Vulnerability

CVE-2025-21350
HIGH 5.9

Windows Kerberos Denial of Service Vulnerability

CVE-2025-21242
HIGH 5.9

Windows Kerberos Information Disclosure Vulnerability

CVE-2024-38264
HIGH 5.9

Microsoft Virtual Hard Disk (VHDX) Denial of Service Vulnerability

CVE-2024-37985
HIGH 5.9

Windows Kernel Information Disclosure Vulnerability

CVE-2024-21344
MEDIUM 5.9

Windows Network Address Translation (NAT) Denial of Service Vulnerability

CVE-2024-21343
MEDIUM 5.9

Windows Network Address Translation (NAT) Denial of Service Vulnerability

CVE-2026-69723
MEDIUM 5.7

Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information over a netwo…

CVE-2026-69591
MEDIUM 5.7

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information over a network.

CVE-2026-69569
MEDIUM 5.7

Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to deny service over a network.

CVE-2026-69572
MEDIUM 5.7

Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information over a network.

CVE-2026-69552
MEDIUM 5.7

Generation of error message containing sensitive information in Windows Print Spooler Components allows an authorized attacker to disclose information over a n…

CVE-2026-69507
MEDIUM 5.7

Insertion of sensitive information into externally-accessible file or directory in Microsoft Windows Search Component allows an authorized attacker to disclose…

CVE-2026-69393
MEDIUM 5.7

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information over a network.

CVE-2026-69349
MEDIUM 5.7

Use of uninitialized resource in Windows Management Instrumentation allows an authorized attacker to disclose information over a network.

CVE-2026-68874
MEDIUM 5.7

Out-of-bounds read in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information over a network.

CVE-2026-69317
HIGH 5.7

Windows Remote Desktop Client Information Disclosure Vulnerability

CVE-2026-23670
HIGH 5.7

Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability

CVE-2025-49722
HIGH 5.7

Windows Print Spooler Denial of Service Vulnerability

CVE-2025-29974
HIGH 5.7

Windows Kernel Information Disclosure Vulnerability

CVE-2024-21430
HIGH 5.7

Windows USB Attached SCSI (UAS) Protocol Remote Code Execution Vulnerability

CVE-2024-20692
HIGH 5.7

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

CVE-2024-21306
HIGH 5.7

Microsoft Bluetooth Driver Spoofing Vulnerability

CVE-2026-69832
MEDIUM 5.6

Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows an authorized attacker to disclose information locally.

CVE-2026-59130
MEDIUM 5.6

No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally.

CVE-2026-59131
MEDIUM 5.6

No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally.

CVE-2024-36350
CRITICAL 5.6

AMD: CVE-2024-36350 Transient Scheduler Attack in Store Queue

CVE-2024-36357
CRITICAL 5.6

AMD: CVE-2024-36357 Transient Scheduler Attack in L1 Data Queue

CVE-2025-21336
HIGH 5.6

Windows Cryptographic Information Disclosure Vulnerability

CVE-2024-43546
HIGH 5.6

Windows Cryptographic Information Disclosure Vulnerability

CVE-2026-83501
MEDIUM 5.5

Out-of-bounds read in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally.

CVE-2026-78454
MEDIUM 5.5

Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.

CVE-2026-77491
MEDIUM 5.5

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally.

CVE-2026-73004
MEDIUM 5.5

Missing authentication for critical function in Windows Autopilot allows an authorized attacker to perform tampering locally.

CVE-2026-73008
MEDIUM 5.5

Exposure of private personal information to an unauthorized actor in Windows Biometric Service allows an authorized attacker to disclose information locally.

CVE-2026-72964
MEDIUM 5.5

Missing authentication for critical function in Windows Internet Connection Sharing (ICS) allows an authorized attacker to perform tampering locally.

CVE-2026-72966
MEDIUM 5.5

Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally.

CVE-2026-72945
MEDIUM 5.5

Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to disclose information locally.

CVE-2026-71341
MEDIUM 5.5

Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to disclose information locally.

CVE-2026-70290
MEDIUM 5.5

Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-70145
MEDIUM 5.5

Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.

CVE-2026-69862
MEDIUM 5.5

Out-of-bounds read in Windows Wireless Wide Area Network Service allows an authorized attacker to disclose information locally.

CVE-2026-69808
MEDIUM 5.5

Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.

CVE-2026-69770
MEDIUM 5.5

Use of uninitialized resource in Windows Spaceport.sys allows an authorized attacker to disclose information locally.

CVE-2026-69741
MEDIUM 5.5

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.

CVE-2026-69684
MEDIUM 5.5

Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally.

CVE-2026-69674
MEDIUM 5.5

Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to bypass a security feature locally.

CVE-2026-69627
MEDIUM 5.5

Out-of-bounds read in Windows Remote Desktop Licensing Service allows an authorized attacker to disclose information locally.

CVE-2026-69616
MEDIUM 5.5

Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to disclose information locally.

CVE-2026-69618
MEDIUM 5.5

Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information locally.

CVE-2026-69609
MEDIUM 5.5

Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.

CVE-2026-69568
MEDIUM 5.5

Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to disclose information locally.

CVE-2026-69554
MEDIUM 5.5

Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally.

CVE-2026-69527
MEDIUM 5.5

Out-of-bounds read in Windows USB Mass Storage Class Driver allows an authorized attacker to disclose information locally.

CVE-2026-69504
MEDIUM 5.5

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-69457
MEDIUM 5.5

Out-of-bounds read in Windows USB Driver allows an authorized attacker to disclose information locally.

CVE-2026-69406
MEDIUM 5.5

Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.

CVE-2026-69403
MEDIUM 5.5

Missing authorization in Windows SMB Server allows an authorized attacker to disclose information locally.

CVE-2026-69390
MEDIUM 5.5

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.

CVE-2026-69351
MEDIUM 5.5

Exposure of private personal information to an unauthorized actor in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to disclo…

CVE-2026-69353
MEDIUM 5.5

Out-of-bounds read in Windows Text Shaping allows an authorized attacker to disclose information locally.

CVE-2026-69344
MEDIUM 5.5

Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.

CVE-2026-69343
MEDIUM 5.5

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.

CVE-2026-69318
MEDIUM 5.5

Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.

CVE-2026-69315
MEDIUM 5.5

Exposure of sensitive system information to an unauthorized control sphere in Windows License Manager allows an authorized attacker to disclose information loc…

CVE-2026-69294
MEDIUM 5.5

Generation of error message containing sensitive information in Microsoft COM for Windows allows an authorized attacker to disclose information locally.

CVE-2026-69286
MEDIUM 5.5

Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to disclose information locally.

CVE-2026-69288
MEDIUM 5.5

Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally.

CVE-2026-68886
MEDIUM 5.5

Use after free in Windows Network Connection Broker allows an authorized attacker to disclose information locally.

CVE-2026-68873
MEDIUM 5.5

Insertion of sensitive information into log file in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information local…

CVE-2026-68851
MEDIUM 5.5

Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-68831
MEDIUM 5.5

Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker to disclose information locally.

CVE-2026-68830
MEDIUM 5.5

Improper link resolution before file access ('link following') in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to disclose …

CVE-2026-68843
HIGH 5.5

Microsoft Office Word Information Disclosure Vulnerability

CVE-2026-68852
HIGH 5.5

Microsoft Account Information Disclosure Vulnerability

CVE-2026-68881
HIGH 5.5

Microsoft Standard XPS Information Disclosure Vulnerability

CVE-2026-68895
HIGH 5.5

Internet Storage Name Service Information Disclosure Vulnerability

CVE-2026-69303
HIGH 5.5

Push Message Routing Service Information Disclosure Vulnerability

CVE-2026-69308
HIGH 5.5

Microsoft Standard XPS Information Disclosure Vulnerability

CVE-2026-69321
HIGH 5.5

Windows Power Dependency Coordinator Tampering Vulnerability

CVE-2026-69345
HIGH 5.5

Microsoft Standard XPS Information Disclosure Vulnerability

CVE-2026-69367
HIGH 5.5

Microsoft Standard XPS Information Disclosure Vulnerability

CVE-2026-69376
HIGH 5.5

Microsoft Standard XPS Information Disclosure Vulnerability

CVE-2026-69453
HIGH 5.5

Microsoft Windows Search Component Tampering Vulnerability

CVE-2026-69531
HIGH 5.5

Microsoft Windows Speech Tampering Vulnerability

CVE-2026-69794
HIGH 5.5

Windows Encrypting File System (EFS) Information Disclosure Vulnerability

CVE-2026-72937
HIGH 5.5

Windows Storage Port Driver Information Disclosure Vulnerability

CVE-2026-77492
HIGH 5.5

Windows Storage Port Driver Information Disclosure Vulnerability

CVE-2026-83991
HIGH 5.5

Windows Cloud Files Mini Filter Driver Tampering Vulnerability

CVE-2026-65784
MEDIUM 5.5

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-65662
MEDIUM 5.5

Out-of-bounds read in Windows GDI allows an authorized attacker to disclose information locally.

CVE-2026-62887
MEDIUM 5.5

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-62798
MEDIUM 5.5

Untrusted pointer dereference in Windows Win32K allows an authorized attacker to disclose information locally.

CVE-2026-62793
MEDIUM 5.5

Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-62796
MEDIUM 5.5

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-62786
MEDIUM 5.5

Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.

CVE-2026-62743
MEDIUM 5.5

Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.

CVE-2026-62746
MEDIUM 5.5

Buffer over-read in Windows Win32K allows an authorized attacker to disclose information locally.

CVE-2026-62738
MEDIUM 5.5

Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.

CVE-2026-62740
MEDIUM 5.5

Use of uninitialized resource in Windows Imaging Component allows an authorized attacker to disclose information locally.

CVE-2026-62730
MEDIUM 5.5

Buffer over-read in Windows Wired AutoConfig Service allows an authorized attacker to disclose information locally.

CVE-2026-62703
MEDIUM 5.5

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.

CVE-2026-62709
MEDIUM 5.5

Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally.

CVE-2026-61936
MEDIUM 5.5

Missing authorization in Windows Defender Firewall Service allows an authorized attacker to bypass a security feature locally.

CVE-2026-61928
MEDIUM 5.5

Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform tampering locally.

CVE-2026-61360
MEDIUM 5.5

Untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose information locally.

CVE-2026-61347
MEDIUM 5.5

Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.

CVE-2026-59136
MEDIUM 5.5

Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose information locally.

CVE-2026-59137
MEDIUM 5.5

Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.

CVE-2026-59135
MEDIUM 5.5

Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.

CVE-2026-59128
MEDIUM 5.5

Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.

CVE-2026-33842
MEDIUM 5.5

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.

CVE-2026-34328
MEDIUM 5.5

Exposure of sensitive information to an unauthorized actor in Windows Audio Service allows an authorized attacker to disclose information locally.

CVE-2026-34346
MEDIUM 5.5

Cleartext transmission of sensitive information in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally.

CVE-2026-45604
MEDIUM 5.5

Out-of-bounds read in Windows Application Identity (AppID) Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-45606
MEDIUM 5.5

Out-of-bounds read in Microsoft UxTheme Library (uxtheme.dll) allows an authorized attacker to deny service locally.

CVE-2026-45634
MEDIUM 5.5

Out-of-bounds read in Windows DHCP Server allows an authorized attacker to disclose information locally.

CVE-2026-45594
MEDIUM 5.5

Exposure of sensitive information to an unauthorized actor in Windows Application Identity (AppID) Subsystem allows an authorized attacker to disclose informat…

CVE-2026-42973
MEDIUM 5.5

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally.

CVE-2026-42968
MEDIUM 5.5

Out-of-bounds read in Windows Telephony Service allows an authorized attacker to disclose information locally.

CVE-2026-42969
MEDIUM 5.5

Use of uninitialized resource in Windows Push Notifications allows an authorized attacker to disclose information locally.

CVE-2026-42970
MEDIUM 5.5

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally.

CVE-2026-42971
MEDIUM 5.5

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally.

CVE-2026-42972
MEDIUM 5.5

Exposure of sensitive information to an unauthorized actor in Windows Hyper-V allows an authorized attacker to disclose information locally.

CVE-2026-42915
MEDIUM 5.5

Incorrect calculation of buffer size in Windows VMSwitch allows an authorized attacker to deny service locally.

CVE-2026-42906
MEDIUM 5.5

Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information locally.

CVE-2026-34339
HIGH 5.5

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

CVE-2026-20806
HIGH 5.5

Windows COM Server Information Disclosure Vulnerability

CVE-2026-27930
HIGH 5.5

Windows GDI Information Disclosure Vulnerability

CVE-2026-27931
HIGH 5.5

Windows GDI Information Disclosure Vulnerability

CVE-2026-32079
HIGH 5.5

Web Account Manager Information Disclosure Vulnerability

CVE-2026-32081
HIGH 5.5

Package Catalog Information Disclosure Vulnerability

CVE-2026-32084
HIGH 5.5

Windows Print Spooler Information Disclosure Vulnerability

CVE-2026-32085
HIGH 5.5

Remote Procedure Call Information Disclosure Vulnerability

CVE-2026-32181
HIGH 5.5

Connected User Experiences and Telemetry Service Denial of Service Vulnerability

CVE-2026-32212
HIGH 5.5

Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability

CVE-2026-32214
HIGH 5.5

Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability

CVE-2026-32215
HIGH 5.5

Windows Kernel Information Disclosure Vulnerability

CVE-2026-32217
HIGH 5.5

Windows Kernel Information Disclosure Vulnerability

CVE-2026-32218
HIGH 5.5

Windows Kernel Information Disclosure Vulnerability

CVE-2026-25180
HIGH 5.5

Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to disclose information locally.

CVE-2026-24282
HIGH 5.5

Push message Routing Service Elevation of Privilege Vulnerability

CVE-2026-25186
HIGH 5.5

Windows Accessibility Infrastructure (ATBroker.exe) Information Disclosure Vulnerability

CVE-2026-21222
HIGH 5.5

Windows Kernel Information Disclosure Vulnerability

CVE-2026-20939
MEDIUM 5.5

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.

CVE-2026-20932
MEDIUM 5.5

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.

CVE-2026-20937
MEDIUM 5.5

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.

CVE-2026-20862
MEDIUM 5.5

Exposure of sensitive information to an unauthorized actor in Windows Management Services allows an authorized attacker to disclose information locally.

CVE-2026-20838
MEDIUM 5.5

Generation of error message containing sensitive information in Windows Kernel allows an authorized attacker to disclose information locally.

CVE-2026-20839
MEDIUM 5.5

Improper access control in Windows Client-Side Caching (CSC) Service allows an authorized attacker to disclose information locally.

CVE-2026-20827
MEDIUM 5.5

Exposure of sensitive information to an unauthorized actor in Tablet Windows User Interface (TWINUI) Subsystem allows an authorized attacker to disclose inform…

CVE-2026-20829
MEDIUM 5.5

Out-of-bounds read in Windows TPM allows an authorized attacker to disclose information locally.

CVE-2026-20823
MEDIUM 5.5

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.

CVE-2026-20824
MEDIUM 5.5

Protection mechanism failure in Windows Remote Assistance allows an unauthorized attacker to bypass a security feature locally.

CVE-2026-20819
MEDIUM 5.5

Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally.

CVE-2025-62468
HIGH 5.5

Windows Defender Firewall Service Information Disclosure Vulnerability

CVE-2025-59509
HIGH 5.5

Windows Speech Recognition Information Disclosure Vulnerability

CVE-2025-59510
HIGH 5.5

Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability

CVE-2025-59513
HIGH 5.5

Windows Bluetooth RFCOM Protocol Driver Information Disclosure Vulnerability

CVE-2025-60706
HIGH 5.5

Windows Hyper-V Information Disclosure Vulnerability

CVE-2025-62208
HIGH 5.5

Windows License Manager Information Disclosure Vulnerability

CVE-2025-62209
HIGH 5.5

Windows License Manager Information Disclosure Vulnerability

CVE-2025-55325
HIGH 5.5

Windows Storage Management Provider Information Disclosure Vulnerability

CVE-2025-55336
HIGH 5.5

Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability

CVE-2025-55695
HIGH 5.5

Windows WLAN AutoConfig Service Information Disclosure Vulnerability

CVE-2025-55699
HIGH 5.5

Windows Kernel Information Disclosure Vulnerability

CVE-2025-59190
HIGH 5.5

Windows Search Service Denial of Service Vulnerability

CVE-2025-59197
HIGH 5.5

Windows ETL Channel Information Disclosure Vulnerability

CVE-2025-59203
HIGH 5.5

Windows State Repository API Server File Information Disclosure Vulnerability

CVE-2025-59204
HIGH 5.5

Windows Management Services Information Disclosure Vulnerability

CVE-2025-59209
HIGH 5.5

Windows Push Notification Information Disclosure Vulnerability

CVE-2025-59211
HIGH 5.5

Windows Push Notification Information Disclosure Vulnerability

CVE-2025-59253
HIGH 5.5

Windows Search Service Denial of Service Vulnerability

CVE-2025-53799
CRITICAL 5.5

Use of uninitialized resource in Windows Imaging Component allows an unauthorized attacker to disclose information locally.

CVE-2025-53803
HIGH 5.5

Windows Kernel Memory Information Disclosure Vulnerability

CVE-2025-53804
HIGH 5.5

Windows Kernel-Mode Driver Information Disclosure Vulnerability

CVE-2025-53136
HIGH 5.5

NT OS Kernel Information Disclosure Vulnerability

CVE-2025-48808
HIGH 5.5

Windows Kernel Information Disclosure Vulnerability

CVE-2025-49658
HIGH 5.5

Windows Transport Driver Interface (TDI) Translation Driver Information Disclosure Vulnerability

CVE-2025-49664
HIGH 5.5

Windows User-Mode Driver Framework Host Information Disclosure Vulnerability

CVE-2025-49684
HIGH 5.5

Windows Storage Port Driver Information Disclosure Vulnerability

CVE-2025-24065
HIGH 5.5

Windows Storage Management Provider Information Disclosure Vulnerability

CVE-2025-24068
HIGH 5.5

Windows Storage Management Provider Information Disclosure Vulnerability

CVE-2025-24069
HIGH 5.5

Windows Storage Management Provider Information Disclosure Vulnerability

CVE-2025-32719
HIGH 5.5

Windows Storage Management Provider Information Disclosure Vulnerability

CVE-2025-32720
HIGH 5.5

Windows Storage Management Provider Information Disclosure Vulnerability

CVE-2025-32722
HIGH 5.5

Windows Storage Port Driver Information Disclosure Vulnerability

CVE-2025-33052
HIGH 5.5

Windows DWM Core Library Information Disclosure Vulnerability

CVE-2025-33055
HIGH 5.5

Windows Storage Management Provider Information Disclosure Vulnerability

CVE-2025-33058
HIGH 5.5

Windows Storage Management Provider Information Disclosure Vulnerability

CVE-2025-33059
HIGH 5.5

Windows Storage Management Provider Information Disclosure Vulnerability

CVE-2025-33060
HIGH 5.5

Windows Storage Management Provider Information Disclosure Vulnerability

CVE-2025-33061
HIGH 5.5

Windows Storage Management Provider Information Disclosure Vulnerability

CVE-2025-33062
HIGH 5.5

Windows Storage Management Provider Information Disclosure Vulnerability

CVE-2025-33063
HIGH 5.5

Windows Storage Management Provider Information Disclosure Vulnerability

CVE-2025-33065
HIGH 5.5

Windows Storage Management Provider Information Disclosure Vulnerability

CVE-2025-29829
HIGH 5.5

Windows Trusted Runtime Interface Driver Information Disclosure Vulnerability

CVE-2025-29837
HIGH 5.5

Windows Installer Information Disclosure Vulnerability

CVE-2025-27736
HIGH 5.5

Windows Power Dependency Coordinator Information Disclosure Vulnerability

CVE-2025-27742
HIGH 5.5

NTFS Information Disclosure Vulnerability

CVE-2025-24992
HIGH 5.5

Windows NTFS Information Disclosure Vulnerability

CVE-2025-21257
HIGH 5.5

Windows WLAN AutoConfig Service Information Disclosure Vulnerability

CVE-2025-21274
HIGH 5.5

Windows Event Tracing Denial of Service Vulnerability

CVE-2025-21280
HIGH 5.5

Windows Virtual Trusted Platform Module Denial of Service Vulnerability

CVE-2025-21284
HIGH 5.5

Windows Virtual Trusted Platform Module Denial of Service Vulnerability

CVE-2025-21316
HIGH 5.5

Windows Kernel Memory Information Disclosure Vulnerability

CVE-2025-21317
HIGH 5.5

Windows Kernel Memory Information Disclosure Vulnerability

CVE-2025-21318
HIGH 5.5

Windows Kernel Memory Information Disclosure Vulnerability

CVE-2025-21319
HIGH 5.5

Windows Kernel Memory Information Disclosure Vulnerability

CVE-2025-21320
HIGH 5.5

Windows Kernel Memory Information Disclosure Vulnerability

CVE-2025-21321
HIGH 5.5

Windows Kernel Memory Information Disclosure Vulnerability

CVE-2025-21323
HIGH 5.5

Windows Kernel Memory Information Disclosure Vulnerability

CVE-2025-21340
HIGH 5.5

Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability

CVE-2025-21374
HIGH 5.5

Windows CSC Service Information Disclosure Vulnerability

CVE-2024-43500
HIGH 5.5

Windows Resilient File System (ReFS) Information Disclosure Vulnerability

CVE-2024-43508
HIGH 5.5

Windows Graphics Component Information Disclosure Vulnerability

CVE-2024-43554
HIGH 5.5

Windows Kernel-Mode Driver Information Disclosure Vulnerability

CVE-2024-43585
HIGH 5.5

Code Integrity Guard Security Feature Bypass Vulnerability

CVE-2024-38254
MEDIUM 5.5

Windows Authentication Information Disclosure Vulnerability

CVE-2024-38118
HIGH 5.5

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability

CVE-2024-38122
HIGH 5.5

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability

CVE-2024-38151
HIGH 5.5

Windows Kernel Information Disclosure Vulnerability

CVE-2024-38155
HIGH 5.5

Security Center Broker Information Disclosure Vulnerability

CVE-2024-38017
HIGH 5.5

Microsoft Message Queuing Information Disclosure Vulnerability

CVE-2024-38041
HIGH 5.5

Windows Kernel Information Disclosure Vulnerability

CVE-2024-38055
HIGH 5.5

Microsoft Windows Codecs Library Information Disclosure Vulnerability

CVE-2024-38056
HIGH 5.5

Microsoft Windows Codecs Library Information Disclosure Vulnerability

CVE-2024-30096
MEDIUM 5.5

Windows Cryptographic Services Information Disclosure Vulnerability

CVE-2024-30065
MEDIUM 5.5

Windows Themes Denial of Service Vulnerability

CVE-2024-30066
MEDIUM 5.5

Winlogon Elevation of Privilege Vulnerability

CVE-2024-30067
MEDIUM 5.5

Winlogon Elevation of Privilege Vulnerability

CVE-2024-30008
HIGH 5.5

Windows DWM Core Library Information Disclosure Vulnerability

CVE-2024-30016
HIGH 5.5

Windows Cryptographic Services Information Disclosure Vulnerability

CVE-2024-30034
HIGH 5.5

Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability

CVE-2024-30037
HIGH 5.5

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2024-30039
HIGH 5.5

Windows Remote Access Connection Manager Information Disclosure Vulnerability

CVE-2024-26172
HIGH 5.5

Windows DWM Core Library Information Disclosure Vulnerability

CVE-2024-26207
HIGH 5.5

Windows Remote Access Connection Manager Information Disclosure Vulnerability

CVE-2024-26209
HIGH 5.5

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

CVE-2024-26217
HIGH 5.5

Windows Remote Access Connection Manager Information Disclosure Vulnerability

CVE-2024-26255
HIGH 5.5

Windows Remote Access Connection Manager Information Disclosure Vulnerability

CVE-2024-28900
HIGH 5.5

Windows Remote Access Connection Manager Information Disclosure Vulnerability

CVE-2024-28901
HIGH 5.5

Windows Remote Access Connection Manager Information Disclosure Vulnerability

CVE-2024-28902
HIGH 5.5

Windows Remote Access Connection Manager Information Disclosure Vulnerability

CVE-2024-21408
CRITICAL 5.5

Windows Hyper-V Denial of Service Vulnerability

CVE-2024-26160
HIGH 5.5

Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability

CVE-2024-26174
HIGH 5.5

Windows Kernel Information Disclosure Vulnerability

CVE-2024-26177
HIGH 5.5

Windows Kernel Information Disclosure Vulnerability

CVE-2024-26181
HIGH 5.5

Windows Kernel Denial of Service Vulnerability

CVE-2024-21377
MEDIUM 5.5

Windows DNS Information Disclosure Vulnerability

CVE-2024-21362
MEDIUM 5.5

Windows Kernel Security Feature Bypass Vulnerability

CVE-2024-20694
HIGH 5.5

Windows CoreMessaging Information Disclosure Vulnerability

CVE-2024-20699
HIGH 5.5

Windows Hyper-V Denial of Service Vulnerability

CVE-2024-21311
HIGH 5.5

Windows Cryptographic Services Information Disclosure Vulnerability

CVE-2023-35635
HIGH 5.5

Windows Kernel Denial of Service Vulnerability

CVE-2023-36404
HIGH 5.5

Windows Kernel Information Disclosure Vulnerability

CVE-2023-36406
HIGH 5.5

Windows Hyper-V Information Disclosure Vulnerability

CVE-2023-36428
HIGH 5.5

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

CVE-2021-45985
HIGH 5.5

Mitre: CVE-2021-45985 Erroneous finalizer call in Lua leads to a heap-based buffer over-read

CVE-2020-35538
HIGH 5.5

Microsoft Security Update Guide entry — NVD enrichira.

CVE-2026-45595
MEDIUM 5.4

Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-35423
HIGH 5.4

Windows 11 Telnet Client Information Disclosure Vulnerability

CVE-2025-47160
HIGH 5.4

Windows Shortcut Files Security Feature Bypass Vulnerability

CVE-2025-29956
HIGH 5.4

Windows SMB Information Disclosure Vulnerability

CVE-2024-30050
MEDIUM 5.4

Windows Mark of the Web Security Feature Bypass Vulnerability

CVE-2026-78446
MEDIUM 5.3

Use after free in Windows Distributed File System (DFS) allows an authorized attacker to deny service over a network.

CVE-2026-70575
HIGH 5.3

Windows Schannel Denial of Service Vulnerability

CVE-2026-65777
MEDIUM 5.3

Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network.

CVE-2026-62757
MEDIUM 5.3

Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-45655
MEDIUM 5.3

Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

CVE-2026-42914
MEDIUM 5.3

Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network.

CVE-2026-25185
HIGH 5.3

Windows Shell Link Processing Spoofing Vulnerability

CVE-2026-20927
MEDIUM 5.3

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to deny service…

CVE-2025-62567
HIGH 5.3

Windows Hyper-V Denial of Service Vulnerability

CVE-2025-55229
HIGH 5.3

Windows Certificate Spoofing Vulnerability

CVE-2024-35270
HIGH 5.3

Windows iSCSI Service Denial of Service Vulnerability

CVE-2024-21313
HIGH 5.3

Windows TCP/IP Information Disclosure Vulnerability

CVE-2025-55679
HIGH 5.1

Windows Kernel Information Disclosure Vulnerability

CVE-2025-26644
HIGH 5.1

Windows Hello Spoofing Vulnerability

CVE-2026-61368
MEDIUM 5.0

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information locally.

CVE-2025-59198
HIGH 5.0

Windows Search Service Denial of Service Vulnerability

CVE-2024-43520
HIGH 5.0

Windows Kernel Denial of Service Vulnerability

CVE-2024-26220
HIGH 5.0

Windows Mobile Hotspot Information Disclosure Vulnerability

CVE-2026-69474
MEDIUM 4.8

Use after free in Windows Overlay Filter allows an authorized attacker to disclose information over a network.

CVE-2025-54101
HIGH 4.8

Windows SMB Client Remote Code Execution Vulnerability

CVE-2026-72931
MEDIUM 4.7

Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to deny service locally.

CVE-2026-69895
MEDIUM 4.7

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.

CVE-2026-69853
MEDIUM 4.7

Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.

CVE-2026-69483
MEDIUM 4.7

Out-of-bounds read in Windows Image Acquisition allows an authorized attacker to disclose information locally.

CVE-2026-69425
MEDIUM 4.7

Improper link resolution before file access ('link following') in Windows NTFS allows an authorized attacker to perform tampering locally.

CVE-2026-69316
MEDIUM 4.7

Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.

CVE-2026-68849
MEDIUM 4.7

Out-of-bounds read in Windows Bluetooth Port Driver allows an authorized attacker to disclose information locally.

CVE-2026-68891
HIGH 4.7

Microsoft Standard XPS Information Disclosure Vulnerability

CVE-2026-69771
HIGH 4.7

Windows Container Manager Service Security Feature Bypass Vulnerability

CVE-2026-69792
HIGH 4.7

Windows Win32K Security Feature Bypass Vulnerability

CVE-2025-58719
HIGH 4.7

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

CVE-2024-30071
HIGH 4.7

Windows Remote Access Connection Manager Information Disclosure Vulnerability

CVE-2024-30069
MEDIUM 4.7

Windows Remote Access Connection Manager Information Disclosure Vulnerability

CVE-2022-0001
HIGH 4.7

Intel: CVE-2022-0001 Branch History Injection

CVE-2024-20691
HIGH 4.7

Windows Themes Information Disclosure Vulnerability

CVE-2026-78508
MEDIUM 4.6

Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose information with a physical attack.

CVE-2026-78452
MEDIUM 4.6

Out-of-bounds read in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information with a physical attack.

CVE-2026-69548
MEDIUM 4.6

Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.

CVE-2026-69381
MEDIUM 4.6

Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.

CVE-2026-61350
MEDIUM 4.6

Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.

CVE-2026-20928
HIGH 4.6

Windows Recovery Environment Security Feature Bypass Vulnerability

CVE-2026-26175
HIGH 4.6

Windows Boot Manager Security Feature Bypass Vulnerability

CVE-2026-20834
MEDIUM 4.6

Absolute path traversal in Windows Shell allows an unauthorized attacker to perform spoofing with a physical attack.

CVE-2026-20828
MEDIUM 4.6

Out-of-bounds read in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to disclose information with a physical attack.

CVE-2025-21213
HIGH 4.6

Secure Boot Security Feature Bypass Vulnerability

CVE-2025-21215
HIGH 4.6

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-49087
HIGH 4.6

Windows Mobile Broadband Driver Information Disclosure Vulnerability

CVE-2024-21340
MEDIUM 4.6

Windows Kernel Information Disclosure Vulnerability

CVE-2026-72980
MEDIUM 4.4

Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally.

CVE-2026-69713
HIGH 4.4

Windows Secure Boot Security Feature Bypass Vulnerability

CVE-2026-32209
HIGH 4.4

Windows Filtering Platform (WFP) Security Feature Bypass Vulnerability

CVE-2026-27906
HIGH 4.4

Windows Hello Security Feature Bypass Vulnerability

CVE-2026-20962
MEDIUM 4.4

Use of uninitialized resource in Dynamic Root of Trust for Measurement (DRTM) allows an authorized attacker to disclose information locally.

CVE-2026-20825
MEDIUM 4.4

Improper access control in Windows Hyper-V allows an authorized attacker to disclose information locally.

CVE-2025-47969
HIGH 4.4

Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability

CVE-2025-24997
HIGH 4.4

DirectX Graphics Kernel File Denial of Service Vulnerability

CVE-2024-21305
HIGH 4.4

Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability

CVE-2026-78516
MEDIUM 4.3

Buffer over-read in Windows Storage allows an unauthorized attacker to disclose information with a physical attack.

CVE-2026-78455
MEDIUM 4.3

Out-of-bounds read in Xbox allows an unauthorized attacker to disclose information with a physical attack.

CVE-2026-73019
MEDIUM 4.3

Improper resolution of path equivalence in Windows URL Moniker allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-33829 Exploit
MEDIUM 4.3

Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-20936
MEDIUM 4.3

Out-of-bounds read in Windows NDIS allows an authorized attacker to disclose information with a physical attack.

CVE-2025-54107
HIGH 4.3

MapUrlToZone Security Feature Bypass Vulnerability

CVE-2025-54917
HIGH 4.3

MapUrlToZone Security Feature Bypass Vulnerability

CVE-2025-21247
HIGH 4.3

MapUrlToZone Security Feature Bypass Vulnerability

CVE-2025-24055
HIGH 4.3

Windows USB Video Class System Driver Information Disclosure Vulnerability

CVE-2025-21189
HIGH 4.3

MapUrlToZone Security Feature Bypass Vulnerability

CVE-2025-21219
HIGH 4.3

MapUrlToZone Security Feature Bypass Vulnerability

CVE-2025-21268
HIGH 4.3

MapUrlToZone Security Feature Bypass Vulnerability

CVE-2025-21269
HIGH 4.3

Windows HTML Platforms Security Feature Bypass Vulnerability

CVE-2025-21328
HIGH 4.3

MapUrlToZone Security Feature Bypass Vulnerability

CVE-2025-21329
HIGH 4.3

MapUrlToZone Security Feature Bypass Vulnerability

CVE-2025-21332
HIGH 4.3

MapUrlToZone Security Feature Bypass Vulnerability

CVE-2024-49098
HIGH 4.3

Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability

CVE-2024-49099
HIGH 4.3

Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability

CVE-2024-49103
HIGH 4.3

Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability

CVE-2025-21210
HIGH 4.2

Windows BitLocker Information Disclosure Vulnerability

CVE-2025-21214
HIGH 4.2

Windows BitLocker Information Disclosure Vulnerability

CVE-2024-38143
HIGH 4.2

Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability

CVE-2024-28922
HIGH 4.1

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-21304
MEDIUM 4.1

Trusted Compute Base Elevation of Privilege Vulnerability

CVE-2025-29839
HIGH 4.0

Windows Multiple UNC Provider Driver Information Disclosure Vulnerability

CVE-2026-45642
LOW 3.9

Improper input validation in Microsoft Azure Attestation service and Device Health Attestation Service allows an authorized attacker to perform spoofing with a…

CVE-2025-49760
MEDIUM 3.5

Windows Storage Spoofing Vulnerability

CVE-2026-21249
HIGH 3.3

Windows NTLM Spoofing Vulnerability

CVE-2025-59284
HIGH 3.3

Windows NTLM Spoofing Vulnerability

CVE-2025-21337
HIGH 3.3

Windows NTFS Elevation of Privilege Vulnerability

CVE-2025-59280
HIGH 3.1

Windows SMB Client Tampering Vulnerability

CVE-2025-21312
HIGH 2.4

Windows Smart Card Reader Information Disclosure Vulnerability

CVE-2025-59294
HIGH 2.1

Windows Taskbar Live Preview Information Disclosure Vulnerability

CVE-2023-24023
HIGH

Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir.

CVE-2024-9157
HIGH

Synaptics: CVE-2024-9157 Synaptics Service Binaries DLL Loading Vulnerability

CVE-2024-28923
HIGH

Secure Boot Security Feature Bypass Vulnerability

CVE-2023-28746
HIGH

Intel: CVE-2023-28746 Register File Data Sampling (RFDS)

CVE-2023-20588
HIGH

AMD: CVE-2023-20588 AMD Speculative Leaks Security Notice

CVE-2023-38039
LOW

Hackerone: CVE-2023-38039 HTTP headers eat all memory

CVE-2023-38545
HIGH

Hackerone: CVE-2023-38545 SOCKS5 heap buffer overflow

Déployer ce correctif Windows sur votre flotte

Appaloosa pousse les mises à jour Windows et vérifie leur application sur tout votre parc.

Gérer Windows avec Appaloosa