Skip to content
THREATWIRE

CVE Tracker · Microsoft

Microsoft Windows CVEs

216 Windows CVEs in the tracker, 212 in the CISA KEV catalogue.

All Microsoft CVEs · RSS feed for Microsoft Windows · Tracker data last updated 18 Oct 2026. Ranges come from the product data in KEV and NVD and can overlap when a CVE names several products.

Showing 50 of 216

  1. CVE-2026-96951CVSS 8.8 highEPSS 1.51%KEV2026-10-13

    Windows. Microsoft Windows Command Injection Vulnerability

  2. CVE-2026-88073CVSS 7.8 highEPSS 0.26%2026-10-13

    windows 10 21h2. Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

  3. CVE-2026-85797CVSS 7.5 highEPSS 0.91%2026-10-13

    windows 10 1607. Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.

  4. CVE-2026-85333CVSS 7.0 highEPSS 0.20%2026-10-13

    windows 10 1607. Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Perfor…

  5. CVE-2026-69918CVSS 7.8 highEPSS 0.35%2026-10-13

    windows 10 1607. Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges loca…

  6. CVE-2026-85880CVSS 7.8 highEPSS 3.62%KEV2026-09-08

    Windows. Microsoft Windows Heap-Based Buffer Overflow Vulnerability

  7. CVE-2026-81963CVSS 7.8 highEPSS 0.39%KEV2026-09-08

    Windows. Microsoft Windows Link Following Vulnerability

  8. CVE-2026-68820CVSS 7.0 highEPSS 0.33%KEV2026-08-11

    Windows Ancillary Function Driver for WinSock . Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

  9. CVE-2025-59287CVSS 9.8 criticalEPSS 100%KEV2025-10-14

    Windows. Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability

  10. CVE-2024-21412CVSS 8.1 highEPSS 99.4%KEV2024-02-13

    Windows. Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability

  11. CVE-2023-36884CVSS 7.5 highEPSS 98.9%KEV2023-07-11

    Windows. Microsoft Windows Search Remote Code Execution Vulnerability

  12. CVE-2022-30190CVSS 7.8 highEPSS 99.2%KEV2022-06-01

    Windows. Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

  13. CVE-2021-34527CVSS 8.8 highEPSS 100%KEV2021-07-02

    Windows. Microsoft Windows Print Spooler Remote Code Execution Vulnerability

  14. CVE-2017-0148CVSS 8.1 highEPSS 99.4%KEV2017-03-17

    SMBv1 server. Microsoft SMBv1 Server Remote Code Execution Vulnerability

  15. CVE-2017-0147CVSS 7.5 highEPSS 100%KEV2017-03-17

    SMBv1 server. Microsoft Windows SMBv1 Information Disclosure Vulnerability

  16. CVE-2017-0144CVSS 8.8 highEPSS 99.2%KEV2017-03-17

    SMBv1. Microsoft SMBv1 Remote Code Execution Vulnerability

  17. CVE-2026-32202No CVSSEPSS 4.90%KEV

    Windows. Microsoft Windows Protection Mechanism Failure Vulnerability

  18. CVE-2026-21533No CVSSEPSS 4.15%KEV

    Windows. Microsoft Windows Improper Privilege Management Vulnerability

  19. CVE-2026-21525No CVSSEPSS 4.83%KEV

    Windows. Microsoft Windows NULL Pointer Dereference Vulnerability

  20. CVE-2026-21519No CVSSEPSS 2.48%KEV

    Windows. Microsoft Windows Type Confusion Vulnerability

  21. CVE-2026-21513No CVSSEPSS 15.9%KEV

    Windows. Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability

  22. CVE-2026-21510No CVSSEPSS 24.5%KEV

    Windows. Microsoft Windows Shell Protection Mechanism Failure Vulnerability

  23. CVE-2026-20805No CVSSEPSS 7.46%KEV

    Windows. Microsoft Windows Information Disclosure Vulnerability

  24. CVE-2025-62221No CVSSEPSS 2.50%KEV

    Windows. Microsoft Windows Use After Free Vulnerability

  25. CVE-2025-62215No CVSSEPSS 4.46%KEV

    Windows. Microsoft Windows Race Condition Vulnerability

  26. CVE-2025-60710No CVSSEPSS 4.61%KEV

    Windows. Microsoft Windows Link Following Vulnerability

  27. CVE-2025-59230No CVSSEPSS 2.66%KEV

    Windows. Microsoft Windows Improper Access Control Vulnerability

  28. CVE-2025-33073No CVSSEPSS 82.7%KEV

    Windows. Microsoft Windows SMB Client Improper Access Control Vulnerability

  29. CVE-2025-33053No CVSSEPSS 87.0%KEV

    Windows. Microsoft Windows External Control of File Name or Path Vulnerability

  30. CVE-2025-32709No CVSSEPSS 1.82%KEV

    Windows. Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

  31. CVE-2025-32706No CVSSEPSS 2.33%KEV

    Windows. Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability

  32. CVE-2025-32701No CVSSEPSS 1.42%KEV

    Windows. Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability

  33. CVE-2025-30400No CVSSEPSS 1.92%KEV

    Windows. Microsoft Windows DWM Core Library Use-After-Free Vulnerability

  34. CVE-2025-30397No CVSSEPSS 27.0%KEV

    Windows. Microsoft Windows Scripting Engine Type Confusion Vulnerability

  35. CVE-2025-29824No CVSSEPSS 13.9%KEV

    Windows. Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability

  36. CVE-2025-26633No CVSSEPSS 30.4%KEV

    Windows. Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability

  37. CVE-2025-24993No CVSSEPSS 2.22%KEV

    Windows. Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability

  38. CVE-2025-24991No CVSSEPSS 2.02%KEV

    Windows. Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability

  39. CVE-2025-24990No CVSSEPSS 6.37%KEV

    Windows. Microsoft Windows Untrusted Pointer Dereference Vulnerability

  40. CVE-2025-24985No CVSSEPSS 3.89%KEV

    Windows. Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability

  41. CVE-2025-24984No CVSSEPSS 1.99%KEV

    Windows. Microsoft Windows NTFS Information Disclosure Vulnerability

  42. CVE-2025-24983No CVSSEPSS 1.38%KEV

    Windows. Microsoft Windows Win32k Use-After-Free Vulnerability

  43. CVE-2025-24054No CVSSEPSS 62.3%KEV

    Windows. Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability

  44. CVE-2025-21418No CVSSEPSS 1.57%KEV

    Windows. Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability

  45. CVE-2025-21391No CVSSEPSS 2.30%KEV

    Windows. Microsoft Windows Storage Link Following Vulnerability

  46. CVE-2025-21335No CVSSEPSS 1.39%KEV

    Windows. Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

  47. CVE-2025-21334No CVSSEPSS 1.56%KEV

    Windows. Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

  48. CVE-2025-21333No CVSSEPSS 9.99%KEV

    Windows. Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability

  49. CVE-2024-49138No CVSSEPSS 26.2%KEV

    Windows. Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability

  50. CVE-2024-49039No CVSSEPSS 14.2%KEV

    Windows. Microsoft Windows Task Scheduler Privilege Escalation Vulnerability