Known vulnerabilities in Microsoft Windows - page 366

Vendor: Microsoft
Software CPE: cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
Total vulnerabilities: 8099
Public exploits: 491
Known exploited (KEV): 271

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Windows Microsoft Windows is affected by 8099 known vulnerabilities: 99 critical, 1416 high, 1367 medium, 5217 low Critical High Medium Low

Vulnerabilities (8099)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU154636 - Exposure of Sensitive System Information to an Unauthorized Control Sphere
CVE-2026-70199
CWE-497 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154635 - Use After Free
CVE-2026-70198
CWE-416 Low
No
No
10 21H2 10.0.19044.7807, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154632 - Use After Free
CVE-2026-70195
CWE-416 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154626 - Authorization Bypass Through User-Controlled Key
CVE-2026-70185
CWE-639 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154625 - Improper Resolution of Path Equivalence
CVE-2026-70184
CWE-41 Low
No
No
10 21H2 10.0.19044.7807, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154621 - Numeric Truncation Error
CVE-2026-70177
CWE-197 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154620 - Use After Free
CVE-2026-70176
CWE-416 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154617 - Out-of-bounds read
CVE-2026-70173
CWE-125 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154616 - Untrusted Pointer Dereference
CVE-2026-70172
CWE-822 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154615 - Untrusted Pointer Dereference
CVE-2026-70170
CWE-822 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154614 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-70169
CWE-362 Low
No
No
10 21H2 10.0.19044.7807, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154613 - Use After Free
CVE-2026-70168
CWE-416 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154611 - Out-of-bounds read
CVE-2026-70166
CWE-125 Low
No
No
10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376 14.10.2026 SB2026101402
#VU154609 - Use After Free
CVE-2026-70164
CWE-416 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154608 - Allocation of Resources Without Limits or Throttling
CVE-2026-70163
CWE-770 Medium
No
No
10 21H2 10.0.19044.7807, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154605 - Use After Free
CVE-2026-70160
CWE-416 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154603 - Double Free
CVE-2026-70158
CWE-415 Medium
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154602 - Heap-based Buffer Overflow
CVE-2026-70157
CWE-122 High
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154601 - Use After Free
CVE-2026-70156
CWE-416 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154600 - Missing release of memory after effective lifetime
CVE-2026-70155
CWE-401 Medium
No
No
10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376 14.10.2026 SB2026101402


Showing elements 7301 - 7320 out of 8099