Known vulnerabilities in Microsoft Windows - page 357

Vendor: Microsoft
Software CPE: cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
Total vulnerabilities: 8099
Public exploits: 491
Known exploited (KEV): 271

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Windows Microsoft Windows is affected by 8099 known vulnerabilities: 99 critical, 1416 high, 1367 medium, 5217 low Critical High Medium Low

Vulnerabilities (8099)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU154428 - Untrusted Pointer Dereference
CVE-2026-69850
CWE-822 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 13.10.2026 SB2026101402
#VU154427 - Use After Free
CVE-2026-69840
CWE-416 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 13.10.2026 SB2026101402
#VU154426 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-69830
CWE-362 High
No
No
10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376 13.10.2026 SB2026101402
#VU154424 - Use After Free
CVE-2026-69798
CWE-416 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 13.10.2026 SB2026101402
#VU154423 - NULL Pointer Dereference
CVE-2026-69795
CWE-476 Low
No
No
10 21H2 10.0.19044.7807, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 13.10.2026 SB2026101402
#VU154421 - External Control of File Name or Path
CVE-2026-69783
CWE-73 Low
No
No
11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 13.10.2026 SB2026101402
#VU154420 - Use After Free
CVE-2026-69766
CWE-416 Low
No
No
10 21H2 10.0.19044.7807, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 13.10.2026 SB2026101402
#VU154418 - Use After Free
CVE-2026-69763
CWE-416 Low
No
No
10 21H2 10.0.19044.7807, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 13.10.2026 SB2026101402
#VU154417 - Use After Free
CVE-2026-69743
CWE-416 Low
No
No
11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 13.10.2026 SB2026101402
#VU154416 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-69736
CWE-362 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 13.10.2026 SB2026101402
#VU154415 - Untrusted Search Path
CVE-2026-69733
CWE-426 Low
No
No
11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 13.10.2026 SB2026101402
#VU154414 - Out-of-bounds read
CVE-2026-69721
CWE-125 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 13.10.2026 SB2026101402
#VU154413 - Command injection
CVE-2026-69718
CWE-77 Low
No
No
11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 13.10.2026 SB2026101402
#VU154412 - Out-of-bounds write
CVE-2026-69705
CWE-787 High
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 13.10.2026 SB2026101402
#VU154410 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-69673
CWE-59 Low
No
No
11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 13.10.2026 SB2026101402
#VU154408 - Improper Verification of Cryptographic Signature
CVE-2026-69650
CWE-347 Low
No
No
10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 13.10.2026 SB2026101402
#VU154407 - Exposure of Sensitive System Information to an Unauthorized Control Sphere
CVE-2026-69644
CWE-497 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 13.10.2026 SB2026101402
#VU154406 - Incorrect Authorization
CVE-2026-69640
CWE-863 Low
No
No
10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 13.10.2026 SB2026101402
#VU154405 - Heap-based Buffer Overflow
CVE-2026-69639
CWE-122 High
No
No
10 21H2 10.0.19044.7807, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 13.10.2026 SB2026101402
#VU154404 - Heap-based Buffer Overflow
CVE-2026-69635
CWE-122 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 13.10.2026 SB2026101402


Showing elements 7121 - 7140 out of 8099