Known vulnerabilities in Microsoft Windows - page 13

Vendor: Microsoft
Software CPE: cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
Total vulnerabilities: 6306
Public exploits: 489
Known exploited (KEV): 267
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Windows Microsoft Windows is affected by 6306 known vulnerabilities: 98 critical, 1206 high, 1123 medium, 3877 low Critical High Medium Low

Vulnerabilities (6306)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137955 - Exposure of sensitive information to an unauthorized actor
CVE-2026-34328
CWE-200 Low
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1809 10.0.17763.9020, 11 23H2 10.0.22631.7376, 11 24H2 10.0.26100.8875, 11 25H2 10.0.26200.8875, 11 26H1 10.0.28000.2269, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071705
#VU137954 - Heap-based Buffer Overflow
CVE-2026-58640
CWE-122 Low
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1607 10.0.14393.9339, 10 1809 10.0.17763.9020, 11 23H2 10.0.22631.7376, 11 24H2 10.0.26100.8875, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071705
#VU137953 - Command injection
CVE-2026-58635
CWE-77 Low
Available
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071705
#VU137952 - Out-of-bounds read
CVE-2026-58609
CWE-125 Low
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1607 10.0.14393.9339, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071705
#VU137951 - Use After Free
CVE-2026-58608
CWE-416 Low
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1607 10.0.14393.9339, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071705
#VU137950 - NULL Pointer Dereference
CVE-2026-57976
CWE-476 Low
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1607 10.0.14393.9339, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071705
#VU137949 - Untrusted Search Path
CVE-2026-57097
CWE-426 Low
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1607 10.0.14393.9339, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071705
#VU137948 - Use After Free
CVE-2026-54127
CWE-416 Low
No
No
11 24H2 10.0.26100.8875, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071705
#VU137947 - Use After Free
CVE-2026-50694
CWE-416 High
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1607 10.0.14393.9339, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 25H2 10.0.26200.8875, 11 26H1 10.0.28000.2269, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071705
#VU137946 - Missing Required Cryptographic Step
CVE-2026-55144
CWE-325 Low
No
No
11 24H2 10.0.26100.8875, 11 25H2 10.0.26200.8875, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071705
#VU137944 - Heap-based Buffer Overflow
CVE-2026-54122
CWE-122 High
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1607 10.0.14393.9339, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 25H2 10.0.26200.8875, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071705
#VU137943 - Use After Free
CVE-2026-54995
CWE-416 High
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1607 10.0.14393.9339, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 25H2 10.0.26200.8875, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071705
#VU137942 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-54119
CWE-835 Medium
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1607 10.0.14393.9339, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 25H2 10.0.26200.8875, 11 26H1 10.0.28000.2269, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071705
#VU137941 - Use After Free
CVE-2026-54114
CWE-416 Low
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 25H2 10.0.26200.8875, 11 26H1 10.0.28000.2269, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071705
#VU137940 - Integer underflow
CVE-2026-54982
CWE-191 High
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1607 10.0.14393.9339, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 25H2 10.0.26200.8875, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071705
#VU137939 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-54112
CWE-362 Low
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 25H2 10.0.26200.8875, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071705
#VU137938 - Improper Certificate Validation
CVE-2026-55001
CWE-295 Low
No
No
10 1607 10.0.14393.9339, 10 1809 10.0.17763.9020, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071705
#VU137937 - Heap-based Buffer Overflow
CVE-2026-54986
CWE-122 Low
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1607 10.0.14393.9339, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 25H2 10.0.26200.8875, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071705
#VU137936 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-54107
CWE-362 Low
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1607 10.0.14393.9339, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 25H2 10.0.26200.8875, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071705
#VU137935 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-54111
CWE-362 Low
No
No
11 24H2 10.0.26100.8875, 11 25H2 10.0.26200.8875, 11 26H1 10.0.28000.2269, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071705


Showing elements 241 - 260 out of 6306