Known vulnerabilities in Microsoft Windows - page 28

Vendor: Microsoft
Software CPE: cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
Total vulnerabilities: 8099
Public exploits: 491
Known exploited (KEV): 271

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Windows Microsoft Windows is affected by 8099 known vulnerabilities: 99 critical, 1416 high, 1367 medium, 5217 low Critical High Medium Low

Vulnerabilities (8099)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU148106 - Double Free
CVE-2026-72958
CWE-415 Low
No
No
11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 09.09.2026 SB2026090906
#VU148105 - Heap-based Buffer Overflow
CVE-2026-72957
CWE-122 Low
No
No
10 1607 10.0.14393.9512, 10 1809 10.0.17763.9245 09.09.2026 SB2026090906
#VU148103 - Use After Free
CVE-2026-72954
CWE-416 Low
No
No
10 1607 10.0.14393.9512, 10 1809 10.0.17763.9245 09.09.2026 SB2026090906
#VU148102 - Heap-based Buffer Overflow
CVE-2026-72953
CWE-122 Low
No
No
10 21H2 10.0.19044.7725, 10 22H2 10.0.19045.7725, 11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 09.09.2026 SB2026090906
#VU148101 - Out-of-bounds read
CVE-2026-72952
CWE-125 Low
No
No
10 21H2 10.0.19044.7725, 10 22H2 10.0.19045.7725, 10 1809 10.0.17763.9245, 11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 09.09.2026 SB2026090906
#VU148100 - Heap-based Buffer Overflow
CVE-2026-72950
CWE-122 Medium
No
No
10 21H2 10.0.19044.7725, 10 22H2 10.0.19045.7725, 10 1607 10.0.14393.9512, 10 1809 10.0.17763.9245, 11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 09.09.2026 SB2026090906
#VU148099 - NULL Pointer Dereference
CVE-2026-72949
CWE-476 Medium
No
No
11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 09.09.2026 SB2026090906
#VU148098 - Relative Path Traversal
CVE-2026-72948
CWE-23 Low
No
No
10 1607 10.0.14393.9512, 10 1809 10.0.17763.9245 09.09.2026 SB2026090906
#VU148097 - Integer underflow
CVE-2026-72947
CWE-191 Low
No
No
10 21H2 10.0.19044.7725, 10 22H2 10.0.19045.7725, 10 1607 10.0.14393.9512, 10 1809 10.0.17763.9245, 11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 09.09.2026 SB2026090906
#VU148096 - Heap-based Buffer Overflow
CVE-2026-72946
CWE-122 Low
No
No
11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 09.09.2026 SB2026090906
#VU148095 - Use of Uninitialized Resource
CVE-2026-72945
CWE-908 Low
No
No
10 21H2 10.0.19044.7725, 10 22H2 10.0.19045.7725, 10 1607 10.0.14393.9512, 10 1809 10.0.17763.9245, 11 23H2 10.0.22631.7582 09.09.2026 SB2026090906
#VU148094 - Heap-based Buffer Overflow
CVE-2026-72944
CWE-122 Low
No
No
10 21H2 10.0.19044.7725, 10 22H2 10.0.19045.7725, 10 1607 10.0.14393.9512, 10 1809 10.0.17763.9245, 11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 09.09.2026 SB2026090906
#VU148093 - Use After Free
CVE-2026-72943
CWE-416 Low
No
No
10 1607 10.0.14393.9512, 10 1809 10.0.17763.9245 09.09.2026 SB2026090906
#VU148092 - Out-of-bounds read
CVE-2026-72942
CWE-125 Medium
No
No
10 21H2 10.0.19044.7725, 10 22H2 10.0.19045.7725, 10 1607 10.0.14393.9512, 10 1809 10.0.17763.9245, 11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 09.09.2026 SB2026090906
#VU148091 - Heap-based Buffer Overflow
CVE-2026-72941
CWE-122 Low
No
No
10 21H2 10.0.19044.7725, 10 22H2 10.0.19045.7725, 10 1607 10.0.14393.9512, 10 1809 10.0.17763.9245, 11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 09.09.2026 SB2026090906
#VU148090 - Heap-based Buffer Overflow
CVE-2026-72940
CWE-122 High
No
No
11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 09.09.2026 SB2026090906
#VU148089 - NULL Pointer Dereference
CVE-2026-72939
CWE-476 Low
No
No
10 21H2 10.0.19044.7725, 10 22H2 10.0.19045.7725, 10 1607 10.0.14393.9512, 10 1809 10.0.17763.9245, 11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 09.09.2026 SB2026090906
#VU148087 - Out-of-bounds read
CVE-2026-72937
CWE-125 Low
No
No
10 21H2 10.0.19044.7725, 10 22H2 10.0.19045.7725, 10 1607 10.0.14393.9512, 10 1809 10.0.17763.9245, 11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 09.09.2026 SB2026090906
#VU148086 - Use After Free
CVE-2026-72936
CWE-416 High
No
No
11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 09.09.2026 SB2026090906
#VU148085 - Out-of-bounds read
CVE-2026-72935
CWE-125 Low
No
No
10 21H2 10.0.19044.7725, 10 22H2 10.0.19045.7725, 10 1607 10.0.14393.9512, 10 1809 10.0.17763.9245, 11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 09.09.2026 SB2026090906


Showing elements 541 - 560 out of 8099