Known vulnerabilities in Microsoft Windows - page 367

Vendor: Microsoft
Software CPE: cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
Total vulnerabilities: 8099
Public exploits: 491
Known exploited (KEV): 271

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Windows Microsoft Windows is affected by 8099 known vulnerabilities: 99 critical, 1416 high, 1367 medium, 5217 low Critical High Medium Low

Vulnerabilities (8099)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU154664 - Improper Authentication
CVE-2026-70235
CWE-287 Low
No
No
11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154663 - Buffer over-read
CVE-2026-70234
CWE-126 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154662 - Heap-based Buffer Overflow
CVE-2026-70233
CWE-122 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154661 - Exposure of Sensitive System Information to an Unauthorized Control Sphere
CVE-2026-70232
CWE-497 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154660 - Use After Free
CVE-2026-70230
CWE-416 Low
No
No
10 21H2 10.0.19044.7807, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154659 - Incorrect Authorization
CVE-2026-70229
CWE-863 High
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154658 - Out-of-bounds read
CVE-2026-70228
CWE-125 Low
No
No
10 21H2 10.0.19044.7807, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154657 - Out-of-bounds read
CVE-2026-70227
CWE-125 Low
No
No
11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154656 - Type confusion
CVE-2026-70225
CWE-843 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154655 - Use After Free
CVE-2026-70223
CWE-416 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154654 - Relative Path Traversal
CVE-2026-70222
CWE-23 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154651 - Insufficient Granularity of Access Control
CVE-2026-70218
CWE-1220 Low
No
No
11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154649 - Insufficient Granularity of Access Control
CVE-2026-70216
CWE-1220 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154646 - Improper Restriction of Communication Channel to Intended Endpoints
CVE-2026-70212
CWE-923 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154645 - Out-of-bounds read
CVE-2026-70211
CWE-125 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154644 - Heap-based Buffer Overflow
CVE-2026-70210
CWE-122 High
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154643 - Use After Free
CVE-2026-70209
CWE-416 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154642 - Out-of-bounds read
CVE-2026-70208
CWE-125 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154641 - Heap-based Buffer Overflow
CVE-2026-70207
CWE-122 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154639 - Type confusion
CVE-2026-70205
CWE-843 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402


Showing elements 7321 - 7340 out of 8099