Known vulnerabilities in Microsoft Windows - page 355

Vendor: Microsoft
Software CPE: cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
Total vulnerabilities: 8099
Public exploits: 491
Known exploited (KEV): 271

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Windows Microsoft Windows is affected by 8099 known vulnerabilities: 99 critical, 1416 high, 1367 medium, 5217 low Critical High Medium Low

Vulnerabilities (8099)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU154371 - Improper Resolution of Path Equivalence
CVE-2026-108463
CWE-41 High
No
No
11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 13.10.2026 SB2026101402
#VU154370 - Exposure of Sensitive System Information to an Unauthorized Control Sphere
CVE-2026-108462
CWE-497 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 13.10.2026 SB2026101402
#VU154369 - Use After Free
CVE-2026-108461
CWE-416 Low
No
No
10 21H2 10.0.19044.7807, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 13.10.2026 SB2026101402
#VU154367 - Use After Free
CVE-2026-108460
CWE-416 High
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 13.10.2026 SB2026101402
#VU154366 - Use After Free
CVE-2026-108458
CWE-416 High
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 13.10.2026 SB2026101402
#VU154365 - Out-of-bounds write
CVE-2026-108457
CWE-787 High
No
No
10 21H2 10.0.19044.7807, 11 23H2 10.0.22631.7652 13.10.2026 SB2026101402
#VU154364 - Heap-based Buffer Overflow
CVE-2026-108399
CWE-122 Medium
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 13.10.2026 SB2026101402
#VU154362 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-108396
CWE-367 Low
No
No
10 21H2 10.0.19044.7807, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 13.10.2026 SB2026101402
#VU154361 - Use After Free
CVE-2026-108136
CWE-416 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 13.10.2026 SB2026101402
#VU154360 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-108135
CWE-59 Low
No
No
10 21H2 10.0.19044.7807, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 13.10.2026 SB2026101402
#VU154359 - Use After Free
CVE-2026-108134
CWE-416 Low
No
No
11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711 13.10.2026 SB2026101402
#VU154357 - Double Free
CVE-2026-108132
CWE-415 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652 13.10.2026 SB2026101402
#VU154356 - Improper input validation
CVE-2026-108131
CWE-20 Medium
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 13.10.2026 SB2026101402
#VU154355 - Heap-based Buffer Overflow
CVE-2026-108130
CWE-122 Low
No
No
11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 13.10.2026 SB2026101402
#VU154354 - Out-of-bounds read
CVE-2026-108129
CWE-125 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 13.10.2026 SB2026101402
#VU154353 - Out-of-bounds read
CVE-2026-108128
CWE-125 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 13.10.2026 SB2026101402
#VU154352 - Out-of-bounds read
CVE-2026-108127
CWE-125 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 13.10.2026 SB2026101402
#VU154351 - Improper Access Control
CVE-2026-105733
CWE-284 Low
No
No
10 21H2 10.0.19044.7807, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 13.10.2026 SB2026101402
#VU154348 - Untrusted Pointer Dereference
CVE-2026-105723
CWE-822 Medium
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 13.10.2026 SB2026101402
#VU154347 - Use After Free
CVE-2026-105722
CWE-416 Low
No
No
10 21H2 10.0.19044.7807, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 13.10.2026 SB2026101402


Showing elements 7081 - 7100 out of 8099