Known vulnerabilities in Microsoft Windows - page 28

Vendor: Microsoft
Software CPE: cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
Total vulnerabilities: 6306
Public exploits: 489
Known exploited (KEV): 267
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Windows Microsoft Windows is affected by 6306 known vulnerabilities: 98 critical, 1206 high, 1123 medium, 3877 low Critical High Medium Low

Vulnerabilities (6306)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137789 - Use After Free
CVE-2026-50493
CWE-416 Low
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 25H2 10.0.26200.8875, 11 26H1 10.0.28000.2269, 11 26H1 10.0.28000.2525 15.07.2026 SB2026071591
#VU137787 - Use After Free
CVE-2026-50296
CWE-416 Low
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1607 10.0.14393.9339, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 26H1 10.0.28000.2525 15.07.2026 SB2026071591
#VU137786 - Exposure of sensitive information to an unauthorized actor
CVE-2026-50352
CWE-200 Low
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1607 10.0.14393.9339, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 25H2 10.0.26200.8875, 11 26H1 10.0.28000.2269, 11 26H1 10.0.28000.2525 15.07.2026 SB2026071582
#VU137785 - Improper Certificate Validation
CVE-2026-50302
CWE-295 Low
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 11 24H2 10.0.26100.8875, 11 25H2 10.0.26200.8875, 11 26H1 10.0.28000.2269, 11 26H1 10.0.28000.2525 15.07.2026 SB2026071582
#VU137784 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-50364
CWE-59 Low
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 11 24H2 10.0.26100.8875, 11 25H2 10.0.26200.8875, 11 26H1 10.0.28000.2269, 11 26H1 10.0.28000.2525 15.07.2026 SB2026071581
#VU137783 - Stack-based buffer overflow
CVE-2026-50400
CWE-121 Low
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1607 10.0.14393.9339, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 25H2 10.0.26200.8875, 11 26H1 10.0.28000.2269, 11 26H1 10.0.28000.2525 15.07.2026 SB2026071580
#VU137782 - Use After Free
CVE-2026-48571
CWE-416 Low
No
No
11 23H2 10.0.22631.7376, 11 24H2 10.0.26100.8875, 11 25H2 10.0.26200.8875, 11 26H1 10.0.28000.2269, 11 26H1 10.0.28000.2525 15.07.2026 SB2026071580
#VU137781 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-48572
CWE-362 Low
No
No
11 23H2 10.0.22631.7376, 11 24H2 10.0.26100.8875, 11 25H2 10.0.26200.8875, 11 26H1 10.0.28000.2269, 11 26H1 10.0.28000.2525 15.07.2026 SB2026071580
#VU137780 - Heap-based Buffer Overflow
CVE-2026-42990
CWE-122 High
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1607 10.0.14393.9339, 10 1809 10.0.17763.9020, 11 23H2 10.0.22631.7376, 11 24H2 10.0.26100.8875, 11 25H2 10.0.26200.8875, 11 26H1 10.0.28000.2269, 11 26H1 10.0.28000.2525 15.07.2026 SB2026071579
#VU137779 - Heap-based Buffer Overflow
CVE-2026-42975
CWE-122 Medium
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1607 10.0.14393.9339, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 25H2 10.0.26200.8875, 11 26H1 10.0.28000.2269, 11 26H1 10.0.28000.2525 15.07.2026 SB2026071578
#VU137774 - Incorrect Implementation of Authentication Algorithm
CVE-2026-50360
CWE-303 Medium
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 11 24H2 10.0.26100.8875, 11 25H2 10.0.26200.8875, 11 26H1 10.0.28000.2269, 11 26H1 10.0.28000.2525 15.07.2026 SB2026071575
#VU137773 - Use of Uninitialized Resource
CVE-2026-50690
CWE-908 Low
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1607 10.0.14393.9339, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 25H2 10.0.26200.8875, 11 26H1 10.0.28000.2269, 11 26H1 10.0.28000.2525 15.07.2026 SB2026071575
#VU137772 - Use of Uninitialized Resource
CVE-2026-49801
CWE-908 Low
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1607 10.0.14393.9339, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 25H2 10.0.26200.8875, 11 26H1 10.0.28000.2269, 11 26H1 10.0.28000.2525 15.07.2026 SB2026071575
#VU137771 - Use of Uninitialized Resource
CVE-2026-54997
CWE-908 Low
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1607 10.0.14393.9339, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 25H2 10.0.26200.8875, 11 26H1 10.0.28000.2525 15.07.2026 SB2026071575
#VU137767 - Heap-based Buffer Overflow
CVE-2026-56189
CWE-122 High
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1607 10.0.14393.9339, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 25H2 10.0.26200.8875, 11 26H1 10.0.28000.2525 15.07.2026 SB2026071571
#VU137766 - Heap-based Buffer Overflow
CVE-2026-50655
CWE-122 High
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1607 10.0.14393.9339, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 25H2 10.0.26200.8875, 11 26H1 10.0.28000.2525 15.07.2026 SB2026071571
#VU137765 - Heap-based Buffer Overflow
CVE-2026-58610
CWE-122 High
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1607 10.0.14393.9339, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 26H1 10.0.28000.2525 15.07.2026 SB2026071571
#VU137764 - Heap-based Buffer Overflow
CVE-2026-54993
CWE-122 High
No
No
10 21H2 10.0.19044.7548, 10 22H2 10.0.19045.7548, 10 1809 10.0.17763.9020, 11 24H2 10.0.26100.8875, 11 25H2 10.0.26200.8875, 11 26H1 10.0.28000.2525 15.07.2026 SB2026071571
#VU137763 - Use After Free
CVE-2026-56187
CWE-416 Low
No
No
11 24H2 10.0.26100.8875, 11 25H2 10.0.26200.8875, 11 26H1 10.0.28000.2525 15.07.2026 SB2026071564
#VU137761 - Improper Access Control
CVE-2026-50342
CWE-284 Low
No
No
11 24H2 10.0.26100.8875, 11 26H1 10.0.28000.2269, 11 26H1 10.0.28000.2525 15.07.2026 SB2026071564


Showing elements 541 - 560 out of 6306