Known vulnerabilities in Microsoft Windows - page 12

Vendor: Microsoft
Software CPE: cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
Total vulnerabilities: 6306
Public exploits: 489
Known exploited (KEV): 267
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Windows Microsoft Windows is affected by 6306 known vulnerabilities: 98 critical, 1206 high, 1123 medium, 3877 low Critical High Medium Low

Vulnerabilities (6306)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU141513 - Use After Free
CVE-2026-62723
CWE-416 Low
No
No
10 21H2 10.0.19044.7663, 10 22H2 10.0.19045.7663, 10 1607 10.0.14393.9418, 10 1809 10.0.17763.9115, 11 23H2 10.0.22631.7517, 11 24H2 10.0.26100.9106, 11 24H2 10.0.26100.9168, 11 25H2 10.0.26200.9168, 11 26H1 10.0.28000.2704 12.08.2026 SB2026081206
#VU141509 - NULL Pointer Dereference
CVE-2026-61345
CWE-476 Medium
No
No
10 21H2 10.0.19044.7663, 10 22H2 10.0.19045.7663, 10 1607 10.0.14393.9418, 10 1809 10.0.17763.9115, 11 23H2 10.0.22631.7517, 11 24H2 10.0.26100.9106, 11 24H2 10.0.26100.9168, 11 25H2 10.0.26200.9168, 11 26H1 10.0.28000.2704 11.08.2026 SB2026081158
#VU141501 - NULL Pointer Dereference
CVE-2026-59138
CWE-476 Medium
No
No
10 21H2 10.0.19044.7663, 10 22H2 10.0.19045.7663, 10 1607 10.0.14393.9418, 10 1809 10.0.17763.9115, 11 23H2 10.0.22631.7517, 11 24H2 10.0.26100.9106, 11 24H2 10.0.26100.9168, 11 25H2 10.0.26200.9168, 11 26H1 10.0.28000.2704 11.08.2026 SB2026081158
#VU141500 - Integer overflow
CVE-2026-71331
CWE-190 High
No
No
10 1809 10.0.17763.9115 11.08.2026 SB2026081156
#VU141499 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-66802
CWE-362 High
No
No
10 1809 10.0.17763.9115, 11 26H1 10.0.28000.2704 11.08.2026 SB2026081156
#VU141497 - Heap-based Buffer Overflow
CVE-2026-61368
CWE-122 Low
No
No
10 21H2 10.0.19044.7663, 10 22H2 10.0.19045.7663, 10 1607 10.0.14393.9418, 10 1809 10.0.17763.9115, 11 23H2 10.0.22631.7517, 11 24H2 10.0.26100.9106, 11 24H2 10.0.26100.9168, 11 25H2 10.0.26200.9168, 11 26H1 10.0.28000.2704 11.08.2026 SB2026081154
#VU141493 - Double Free
CVE-2026-61366
CWE-415 Low
No
No
10 21H2 10.0.19044.7663, 10 22H2 10.0.19045.7663, 10 1607 10.0.14393.9418, 10 1809 10.0.17763.9115, 11 23H2 10.0.22631.7517, 11 24H2 10.0.26100.9106, 11 24H2 10.0.26100.9168, 11 25H2 10.0.26200.9168, 11 26H1 10.0.28000.2704 11.08.2026 SB2026081151
#VU141491 - Heap-based Buffer Overflow
CVE-2026-61923
CWE-122 Low
No
No
10 21H2 10.0.19044.7663, 10 22H2 10.0.19045.7663, 10 1809 10.0.17763.9115, 11 23H2 10.0.22631.7517, 11 24H2 10.0.26100.9106, 11 24H2 10.0.26100.9168, 11 25H2 10.0.26200.9168, 11 26H1 10.0.28000.2704 11.08.2026 SB2026081149
#VU141465 - Use After Free
CVE-2026-68820
CWE-416 High
No
Exploited
10 21H2 10.0.19044.7663, 10 22H2 10.0.19045.7663, 10 1607 10.0.14393.9418, 10 1809 10.0.17763.9115, 11 23H2 10.0.22631.7517, 11 24H2 10.0.26100.9106, 11 24H2 10.0.26100.9168, 11 25H2 10.0.26200.9168, 11 26H1 10.0.28000.2704 11.08.2026 SB2026081145
#VU141458 - Use After Free
CVE-2026-62774
CWE-416 Low
No
No
10 21H2 10.0.19044.7663, 10 22H2 10.0.19045.7663, 10 1607 10.0.14393.9418, 10 1809 10.0.17763.9115, 11 23H2 10.0.22631.7517, 11 24H2 10.0.26100.9106, 11 24H2 10.0.26100.9168, 11 25H2 10.0.26200.9168, 11 26H1 10.0.28000.2704 11.08.2026 SB2026081141
#VU141457 - NULL Pointer Dereference
CVE-2026-62702
CWE-476 Medium
No
No
10 21H2 10.0.19044.7663, 10 22H2 10.0.19045.7663, 11 23H2 10.0.22631.7517, 11 24H2 10.0.26100.9106, 11 24H2 10.0.26100.9168, 11 25H2 10.0.26200.9168, 11 26H1 10.0.28000.2704 11.08.2026 SB2026081141
#VU141456 - Use After Free
CVE-2026-61346
CWE-416 Low
No
No
10 21H2 10.0.19044.7663, 10 22H2 10.0.19045.7663, 10 1809 10.0.17763.9115, 11 23H2 10.0.22631.7517, 11 24H2 10.0.26100.9106, 11 24H2 10.0.26100.9168, 11 25H2 10.0.26200.9168, 11 26H1 10.0.28000.2704 11.08.2026 SB2026081141
#VU138290 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-58598
CWE-362 Low
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 11 24H2 10.0.26100.8875, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071738
#VU137934 - Heap-based Buffer Overflow
CVE-2026-54990
CWE-122 High
No
No
11 24H2 10.0.26100.8875, 11 25H2 10.0.26200.8875, 11 26H1 10.0.28000.2269, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071705
#VU137933 - Use After Free
CVE-2026-54989
CWE-416 Low
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1607 10.0.14393.9339, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 25H2 10.0.26200.8875, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071705
#VU137932 - Use After Free
CVE-2026-54129
CWE-416 Low
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 25H2 10.0.26200.8875, 11 26H1 10.0.28000.2269, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071705
#VU137931 - Missing Authentication for Critical Function
CVE-2026-49174
CWE-306 Low
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 25H2 10.0.26200.8875, 11 26H1 10.0.28000.2269, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071705
#VU137930 - Improper Access Control
CVE-2026-49170
CWE-284 Low
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 25H2 10.0.26200.8875, 11 26H1 10.0.28000.2269, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071705
#VU137928 - Heap-based Buffer Overflow
CVE-2026-49164
CWE-122 High
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1607 10.0.14393.9339, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 25H2 10.0.26200.8875, 11 26H1 10.0.28000.2269, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071705
#VU134009 - Improper Access Control
CVE-2025-10263
CWE-284 Low
No
No
10 21H2 10.0.19044.7417, 10 22H2 10.0.19045.7417, 10 1607 10.0.14393.9234, 11 23H2 10.0.22631.7219, 11 24H2 10.0.26100.8655, 11 25H2 10.0.26200.8655, 11 26H1 10.0.28000.2269 09.06.2026 SB2026060946
SB2026061108
SB2026061109
and 36 more


Showing elements 221 - 240 out of 6306