Known vulnerabilities in Microsoft Windows

Vendor: Microsoft
Software CPE: cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
Total vulnerabilities: 6306
Public exploits: 489
Known exploited (KEV): 267
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Windows Microsoft Windows is affected by 6306 known vulnerabilities: 98 critical, 1206 high, 1123 medium, 3877 low Critical High Medium Low

Vulnerabilities (6306)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU144402 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-62727
CWE-362 Low
No
No
10 21H2 10.0.19044.7663, 10 22H2 10.0.19045.7663, 10 1607 10.0.14393.9418, 10 1809 10.0.17763.9121, 11 22H2 10.0.22621.7566, 11 24H2 10.0.26100.9168, 11 25H2 10.0.26200.9106, 11 25H2 10.0.26200.9168, 11 26H1 10.0.28000.2704 19.08.2026 SB20260819147
#VU141756 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-62690
CWE-362 Low
No
No
10 21H2 10.0.19044.7663, 10 22H2 10.0.19045.7663, 10 1809 10.0.17763.9115, 11 23H2 10.0.22631.7517, 11 24H2 10.0.26100.9106, 11 24H2 10.0.26100.9168, 11 25H2 10.0.26200.9168, 11 26H1 10.0.28000.2704 12.08.2026 SB20260812226
#VU141755 - Heap-based Buffer Overflow
CVE-2026-62688
CWE-122 Low
No
No
11 24H2 10.0.26100.9106, 11 24H2 10.0.26100.9168, 11 25H2 10.0.26200.9168, 11 26H1 10.0.28000.2704 12.08.2026 SB20260812226
#VU141754 - Heap-based Buffer Overflow
CVE-2026-62695
CWE-122 Low
No
No
11 23H2 10.0.22631.7517, 11 24H2 10.0.26100.9106, 11 24H2 10.0.26100.9168, 11 25H2 10.0.26200.9168, 11 26H1 10.0.28000.2704 12.08.2026 SB20260812226
#VU141753 - Use After Free
CVE-2026-61939
CWE-416 Low
No
No
10 21H2 10.0.19044.7663, 10 22H2 10.0.19045.7663, 10 1607 10.0.14393.9418, 10 1809 10.0.17763.9115, 11 23H2 10.0.22631.7517, 11 24H2 10.0.26100.9106, 11 24H2 10.0.26100.9168, 11 25H2 10.0.26200.9168, 11 26H1 10.0.28000.2704 12.08.2026 SB20260812226
#VU141752 - Missing Authorization
CVE-2026-61936
CWE-862 Low
No
No
10 21H2 10.0.19044.7663, 10 22H2 10.0.19045.7663, 10 1809 10.0.17763.9115, 11 23H2 10.0.22631.7517, 11 24H2 10.0.26100.9106, 11 24H2 10.0.26100.9168, 11 25H2 10.0.26200.9168, 11 26H1 10.0.28000.2704 12.08.2026 SB20260812226
#VU141751 - Heap-based Buffer Overflow
CVE-2026-62692
CWE-122 Low
No
No
10 21H2 10.0.19044.7663, 10 22H2 10.0.19045.7663, 10 1607 10.0.14393.9418, 10 1809 10.0.17763.9115, 11 23H2 10.0.22631.7517, 11 24H2 10.0.26100.9106, 11 24H2 10.0.26100.9168, 11 25H2 10.0.26200.9168, 11 26H1 10.0.28000.2704 12.08.2026 SB20260812226
#VU141750 - Cleartext Storage of Sensitive Information
CVE-2026-61928
CWE-312 Low
No
No
10 21H2 10.0.19044.7663, 10 22H2 10.0.19045.7663, 10 1607 10.0.14393.9418, 10 1809 10.0.17763.9115, 11 23H2 10.0.22631.7517, 11 24H2 10.0.26100.9106, 11 24H2 10.0.26100.9168, 11 25H2 10.0.26200.9168, 11 26H1 10.0.28000.2704 12.08.2026 SB20260812226
#VU141749 - Incorrect Authorization
CVE-2026-61925
CWE-863 Low
No
No
10 21H2 10.0.19044.7663, 10 22H2 10.0.19045.7663, 10 1607 10.0.14393.9418, 10 1809 10.0.17763.9115, 11 23H2 10.0.22631.7517, 11 24H2 10.0.26100.9106, 11 24H2 10.0.26100.9168, 11 25H2 10.0.26200.9168, 11 26H1 10.0.28000.2704 12.08.2026 SB20260812226
#VU141747 - Missing Authentication for Critical Function
CVE-2026-61367
CWE-306 Low
No
No
10 21H2 10.0.19044.7663, 10 22H2 10.0.19045.7663, 10 1607 10.0.14393.9418, 10 1809 10.0.17763.9115, 11 23H2 10.0.22631.7517, 11 24H2 10.0.26100.9106, 11 24H2 10.0.26100.9168, 11 25H2 10.0.26200.9168, 11 26H1 10.0.28000.2704 12.08.2026 SB20260812226
#VU141746 - Missing Authentication for Critical Function
CVE-2026-61356
CWE-306 Low
No
No
10 21H2 10.0.19044.7663, 10 22H2 10.0.19045.7663, 10 1809 10.0.17763.9115, 11 23H2 10.0.22631.7517, 11 24H2 10.0.26100.9106, 11 24H2 10.0.26100.9168, 11 25H2 10.0.26200.9168, 11 26H1 10.0.28000.2704 12.08.2026 SB20260812226
#VU141745 - Buffer over-read
CVE-2026-61350
CWE-126 Low
No
No
10 21H2 10.0.19044.7663, 10 22H2 10.0.19045.7663, 10 1607 10.0.14393.9418, 10 1809 10.0.17763.9115, 11 23H2 10.0.22631.7517, 11 24H2 10.0.26100.9106, 11 24H2 10.0.26100.9168, 11 25H2 10.0.26200.9168, 11 26H1 10.0.28000.2704 12.08.2026 SB20260812226
#VU141744 - Use After Free
CVE-2026-61348
CWE-416 Low
No
No
10 21H2 10.0.19044.7663, 10 22H2 10.0.19045.7663, 10 1607 10.0.14393.9418, 10 1809 10.0.17763.9115, 11 23H2 10.0.22631.7517, 11 24H2 10.0.26100.9106, 11 24H2 10.0.26100.9168, 11 25H2 10.0.26200.9168, 11 26H1 10.0.28000.2704 12.08.2026 SB20260812226
#VU141743 - Heap-based Buffer Overflow
CVE-2026-59134
CWE-122 Medium
No
No
10 21H2 10.0.19044.7663, 10 22H2 10.0.19045.7663, 10 1607 10.0.14393.9418, 10 1809 10.0.17763.9115, 11 23H2 10.0.22631.7517, 11 24H2 10.0.26100.9106, 11 24H2 10.0.26100.9168, 11 25H2 10.0.26200.9168, 11 26H1 10.0.28000.2704 12.08.2026 SB20260812226
#VU141742 - Weak Authentication
CVE-2026-59135
CWE-1390 Low
No
No
10 21H2 10.0.19044.7663, 10 22H2 10.0.19045.7663, 10 1607 10.0.14393.9418, 10 1809 10.0.17763.9115, 11 23H2 10.0.22631.7517, 11 24H2 10.0.26100.9106, 11 24H2 10.0.26100.9168, 11 25H2 10.0.26200.9168, 11 26H1 10.0.28000.2704 12.08.2026 SB20260812226
#VU141741 - Observable discrepancy
CVE-2026-59130
CWE-203 Low
No
No
10 21H2 10.0.19044.7663, 10 22H2 10.0.19045.7663, 10 1607 10.0.14393.9418, 10 1809 10.0.17763.9115, 11 23H2 10.0.22631.7517, 11 24H2 10.0.26100.9106, 11 24H2 10.0.26100.9168, 11 25H2 10.0.26200.9168, 11 26H1 10.0.28000.2704 12.08.2026 SB20260812226
#VU141740 - Integer overflow
CVE-2026-59127
CWE-190 Low
No
No
10 21H2 10.0.19044.7663, 10 22H2 10.0.19045.7663, 10 1607 10.0.14393.9418, 10 1809 10.0.17763.9115, 11 23H2 10.0.22631.7517, 11 24H2 10.0.26100.9106, 11 24H2 10.0.26100.9168, 11 25H2 10.0.26200.9168, 11 26H1 10.0.28000.2704 12.08.2026 SB20260812226
#VU141739 - Information Exposure Through Timing Discrepancy
CVE-2026-6727
CWE-208 Low
No
No
10 21H2 10.0.19044.7663, 10 22H2 10.0.19045.7663, 10 1607 10.0.14393.9418, 10 1809 10.0.17763.9115, 11 23H2 10.0.22631.7517, 11 24H2 10.0.26100.9106, 11 24H2 10.0.26100.9168, 11 25H2 10.0.26200.9168, 11 26H1 10.0.28000.2704 12.08.2026 SB20260812226
#VU141735 - Command injection
CVE-2026-49179
CWE-77 High
No
No
10 21H2 10.0.19044.7663, 10 22H2 10.0.19045.7663, 10 1607 10.0.14393.9418, 10 1809 10.0.17763.9115, 11 23H2 10.0.22631.7517, 11 24H2 10.0.26100.9106, 11 24H2 10.0.26100.9168, 11 25H2 10.0.26200.9168, 11 26H1 10.0.28000.2704 12.08.2026 SB20260812226
#VU141732 - Heap-based Buffer Overflow
CVE-2026-50472
CWE-122 Low
No
No
10 21H2 10.0.19044.7663, 10 22H2 10.0.19045.7663, 10 1607 10.0.14393.9418, 10 1809 10.0.17763.9115, 11 23H2 10.0.22631.7517, 11 24H2 10.0.26100.9106, 11 24H2 10.0.26100.9168, 11 25H2 10.0.26200.9168, 11 26H1 10.0.28000.2704 12.08.2026 SB20260812226


Showing elements 1 - 20 out of 6306