Known vulnerabilities in Microsoft Windows - page 370

Vendor: Microsoft
Software CPE: cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
Total vulnerabilities: 8099
Public exploits: 491
Known exploited (KEV): 271

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Windows Microsoft Windows is affected by 8099 known vulnerabilities: 99 critical, 1416 high, 1367 medium, 5217 low Critical High Medium Low

Vulnerabilities (8099)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU154749 - Use of Uninitialized Resource
CVE-2026-83515
CWE-908 Medium
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154748 - Heap-based Buffer Overflow
CVE-2026-83514
CWE-122 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154747 - Use After Free
CVE-2026-83513
CWE-416 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154746 - Weak Authentication
CVE-2026-83511
CWE-1390 Medium
No
No
10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376 14.10.2026 SB2026101402
#VU154745 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-83510
CWE-367 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154744 - Untrusted Search Path
CVE-2026-83509
CWE-426 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154743 - Out-of-bounds read
CVE-2026-83508
CWE-125 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154742 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-83507
CWE-59 Low
No
No
10 21H2 10.0.19044.7807, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154741 - Untrusted Search Path
CVE-2026-83506
CWE-426 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154740 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-83505
CWE-367 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154738 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-83500
CWE-601 Medium
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154737 - Insufficient Granularity of Access Control
CVE-2026-83499
CWE-1220 Low
No
No
10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376 14.10.2026 SB2026101402
#VU154736 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-81971
CWE-362 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154735 - Insufficient Granularity of Access Control
CVE-2026-81969
CWE-1220 Low
No
No
10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376 14.10.2026 SB2026101402
#VU154734 - Use of Hard-coded Credentials
CVE-2026-81964
CWE-798 Low
No
No
10 21H2 10.0.19044.7807, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154733 - Heap-based Buffer Overflow
CVE-2026-78459
CWE-122 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154731 - Heap-based Buffer Overflow
CVE-2026-77496
CWE-122 High
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154730 - External Control of System or Configuration Setting
CVE-2026-73027
CWE-15 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154729 - Use After Free
CVE-2026-72969
CWE-416 Low
No
No
11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402
#VU154728 - Use After Free
CVE-2026-72968
CWE-416 Low
No
No
10 21H2 10.0.19044.7807, 10 1607 10.0.14393.9612, 10 1809 10.0.17763.9376, 11 23H2 10.0.22631.7652, 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231 14.10.2026 SB2026101402


Showing elements 7381 - 7400 out of 8099