Known vulnerabilities in Microsoft Windows

Vendor: Microsoft
Software CPE: cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
Total vulnerabilities: 8099
Public exploits: 491
Known exploited (KEV): 271

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Windows Microsoft Windows is affected by 8099 known vulnerabilities: 99 critical, 1416 high, 1367 medium, 5217 low Critical High Medium Low

Vulnerabilities (8099)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU150712 - Double Free
CVE-2026-85921
CWE-415 Low
No
No
11 26H1 10.0.28000.2956 17.09.2026 SB20260917240
#VU148303 - Heap-based Buffer Overflow
CVE-2026-81955
CWE-122 High
No
No
10 21H2 10.0.19044.7725, 10 22H2 10.0.19045.7725, 10 1607 10.0.14393.9504, 10 1809 10.0.17763.9245, 11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 09.09.2026 SB2026090931
#VU147494 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-68830
CWE-59 Low
No
No
10 21H2 10.0.19044.7725, 10 22H2 10.0.19045.7725, 10 1607 10.0.14393.9512, 10 1809 10.0.17763.9245, 11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 08.09.2026 SB2026090906
#VU147493 - Heap-based Buffer Overflow
CVE-2026-68828
CWE-122 High
No
No
10 21H2 10.0.19044.7725, 10 22H2 10.0.19045.7725, 10 1607 10.0.14393.9512, 10 1809 10.0.17763.9245, 11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 08.09.2026 SB2026090906
#VU147492 - Integer underflow
CVE-2026-68827
CWE-191 Medium
No
No
10 21H2 10.0.19044.7725, 10 22H2 10.0.19045.7725, 10 1607 10.0.14393.9512, 10 1809 10.0.17763.9245, 11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 08.09.2026 SB2026090906
#VU147491 - Use After Free
CVE-2026-68825
CWE-416 Low
No
No
11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 08.09.2026 SB2026090906
#VU147490 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-68824
CWE-362 Low
No
No
10 21H2 10.0.19044.7725, 10 22H2 10.0.19045.7725, 11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 08.09.2026 SB2026090906
#VU147488 - Use After Free
CVE-2026-62813
CWE-416 Low
No
No
10 21H2 10.0.19044.7725, 10 22H2 10.0.19045.7725, 10 1607 10.0.14393.9512, 10 1809 10.0.17763.9245, 11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 08.09.2026 SB2026090906
#VU147487 - Heap-based Buffer Overflow
CVE-2026-62810
CWE-122 Low
No
No
10 21H2 10.0.19044.7725, 10 22H2 10.0.19045.7725, 10 1607 10.0.14393.9512, 10 1809 10.0.17763.9245, 11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 08.09.2026 SB2026090906
#VU147485 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-62801
CWE-22 Medium
No
No
10 21H2 10.0.19044.7725, 10 22H2 10.0.19045.7725, 10 1607 10.0.14393.9512, 10 1809 10.0.17763.9245, 11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 08.09.2026 SB2026090906
#VU147484 - NULL Pointer Dereference
CVE-2026-62762
CWE-476 Low
No
No
10 21H2 10.0.19044.7725, 10 22H2 10.0.19045.7725, 10 1607 10.0.14393.9512, 10 1809 10.0.17763.9245, 11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 08.09.2026 SB2026090906
#VU147483 - Authentication Bypass by Spoofing
CVE-2026-62759
CWE-290 Medium
No
No
10 21H2 10.0.19044.7725, 10 22H2 10.0.19045.7725, 10 1607 10.0.14393.9512, 10 1809 10.0.17763.9245, 11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 08.09.2026 SB2026090906
#VU147482 - Heap-based Buffer Overflow
CVE-2026-62744
CWE-122 High
No
No
11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 08.09.2026 SB2026090906
#VU147481 - Out-of-bounds read
CVE-2026-62706
CWE-125 High
No
No
10 21H2 10.0.19044.7725, 10 22H2 10.0.19045.7725, 10 1607 10.0.14393.9512, 10 1809 10.0.17763.9245, 11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 08.09.2026 SB2026090906
#VU147480 - Use After Free
CVE-2026-62697
CWE-416 Low
No
No
10 21H2 10.0.19044.7725, 10 22H2 10.0.19045.7725, 11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 08.09.2026 SB2026090906
#VU147479 - Use After Free
CVE-2026-62694
CWE-416 Low
No
No
10 21H2 10.0.19044.7725, 10 22H2 10.0.19045.7725, 10 1607 10.0.14393.9512, 10 1809 10.0.17763.9245, 11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 08.09.2026 SB2026090906
#VU147476 - Out-of-bounds read
CVE-2026-56198
CWE-125 Low
No
No
11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 08.09.2026 SB2026090906
#VU147475 - Use After Free
CVE-2026-56177
CWE-416 Low
No
No
10 21H2 10.0.19044.7725, 10 22H2 10.0.19045.7725, 10 1607 10.0.14393.9512, 10 1809 10.0.17763.9245, 11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 08.09.2026 SB2026090906
#VU147474 - Use After Free
CVE-2026-56172
CWE-416 Low
No
No
10 21H2 10.0.19044.7725, 10 22H2 10.0.19045.7725, 10 1809 10.0.17763.9245, 11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 08.09.2026 SB2026090906
#VU147472 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-50349
CWE-362 Low
No
No
10 21H2 10.0.19044.7725, 10 22H2 10.0.19045.7725, 10 1607 10.0.14393.9512, 10 1809 10.0.17763.9245, 11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 08.09.2026 SB2026090906


Showing elements 1 - 20 out of 8099