Known vulnerabilities in Microsoft Windows - page 21

Vendor: Microsoft
Software CPE: cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
Total vulnerabilities: 6306
Public exploits: 489
Known exploited (KEV): 267
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Windows Microsoft Windows is affected by 6306 known vulnerabilities: 98 critical, 1206 high, 1123 medium, 3877 low Critical High Medium Low

Vulnerabilities (6306)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU138133 - Use After Free
CVE-2026-57089
CWE-416 High
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1607 10.0.14393.9339, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071705
#VU138132 - Stack-based buffer overflow
CVE-2026-57091
CWE-121 Low
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1607 10.0.14393.9339, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071705
#VU138131 - Heap-based Buffer Overflow
CVE-2026-57094
CWE-122 High
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1607 10.0.14393.9339, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071705
#VU138130 - Heap-based Buffer Overflow
CVE-2026-57090
CWE-122 High
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1607 10.0.14393.9339, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071705
#VU138129 - Exposure of sensitive information to an unauthorized actor
CVE-2026-57095
CWE-200 Low
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1607 10.0.14393.9339, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071705
#VU138128 - Heap-based Buffer Overflow
CVE-2026-56650
CWE-122 Low
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1607 10.0.14393.9339, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071705
#VU138127 - Use of Uninitialized Resource
CVE-2026-57083
CWE-908 Low
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1607 10.0.14393.9339, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071705
#VU138126 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-56649
CWE-362 High
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1607 10.0.14393.9339, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071705
#VU138125 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-56648
CWE-367 Low
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1607 10.0.14393.9339, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071705
#VU138124 - Integer overflow
CVE-2026-56647
CWE-190 Low
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1607 10.0.14393.9339, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071705
#VU138123 - Heap-based Buffer Overflow
CVE-2026-56194
CWE-122 Medium
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1607 10.0.14393.9339, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071705
#VU138122 - Integer overflow
CVE-2026-54124
CWE-190 Low
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 11 24H2 10.0.26100.8875, 11 25H2 10.0.26200.8875, 11 26H1 10.0.28000.2269, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071705
#VU138121 - Out-of-bounds read
CVE-2026-56186
CWE-125 Low
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1607 10.0.14393.9339, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 25H2 10.0.26200.8875, 11 26H1 10.0.28000.2269, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071705
#VU138120 - Exposure of sensitive information to an unauthorized actor
CVE-2026-56184
CWE-200 Low
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 11 24H2 10.0.26100.8875, 11 25H2 10.0.26200.8875, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071705
#VU138119 - Use of Uninitialized Resource
CVE-2026-56190
CWE-908 High
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1607 10.0.14393.9339, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 25H2 10.0.26200.8875, 11 26H1 10.0.28000.2269, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071705
#VU138118 - Integer overflow
CVE-2026-56182
CWE-190 Low
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1607 10.0.14393.9339, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 25H2 10.0.26200.8875, 11 26H1 10.0.28000.2269, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071705
#VU138117 - Heap-based Buffer Overflow
CVE-2026-56175
CWE-122 Low
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1607 10.0.14393.9339, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 25H2 10.0.26200.8875, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071705
#VU138116 - Out-of-bounds read
CVE-2026-56176
CWE-125 Low
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1607 10.0.14393.9339, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 25H2 10.0.26200.8875, 11 26H1 10.0.28000.2269, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071705
#VU138115 - NULL Pointer Dereference
CVE-2026-56168
CWE-476 Low
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 11 24H2 10.0.26100.8875, 11 25H2 10.0.26200.8875, 11 26H1 10.0.28000.2269, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071705
#VU138114 - Use After Free
CVE-2026-54128
CWE-416 Low
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1607 10.0.14393.9339, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 25H2 10.0.26200.8875, 11 26H1 10.0.28000.2269, 11 26H1 10.0.28000.2525 17.07.2026 SB2026071705


Showing elements 401 - 420 out of 6306