Known vulnerabilities in Microsoft Windows - page 41

Vendor: Microsoft
Software CPE: cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
Total vulnerabilities: 6306
Public exploits: 489
Known exploited (KEV): 267
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Windows Microsoft Windows is affected by 6306 known vulnerabilities: 98 critical, 1206 high, 1123 medium, 3877 low Critical High Medium Low

Vulnerabilities (6306)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU131223 - External Control of File Name or Path
CVE-2026-41088
CWE-73 Low
No
No
10 21H2 10.0.19044.7291, 10 22H2 10.0.19045.7291, 11 23H2 10.0.22631.7079, 11 24H2 10.0.26100.8390, 11 24H2 10.0.26100.8457, 11 25H2 10.0.26200.8390, 11 25H2 10.0.26200.8457, 11 26H1 10.0.28000.2113 12.05.2026 SB20260512106
#VU131222 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-34345
CWE-362 Low
No
No
10 21H2 10.0.19044.7291, 10 22H2 10.0.19045.7291, 10 1607 10.0.14393.9140, 10 1809 10.0.17763.8755, 11 23H2 10.0.22631.7079, 11 24H2 10.0.26100.8390, 11 24H2 10.0.26100.8457, 11 25H2 10.0.26200.8390, 11 25H2 10.0.26200.8457, 11 26H1 10.0.28000.2113 12.05.2026 SB20260512106
#VU131221 - Use After Free
CVE-2026-35416
CWE-416 Low
No
No
10 21H2 10.0.19044.7291, 10 22H2 10.0.19045.7291, 10 1607 10.0.14393.9140, 10 1809 10.0.17763.8755, 11 23H2 10.0.22631.7079, 11 24H2 10.0.26100.8390, 11 24H2 10.0.26100.8457, 11 25H2 10.0.26200.8390, 11 25H2 10.0.26200.8457, 11 26H1 10.0.28000.2113 12.05.2026 SB20260512106
#VU131219 - Heap-based Buffer Overflow
CVE-2026-34343
CWE-122 Low
No
No
10 21H2 10.0.19044.7291, 10 22H2 10.0.19045.7291, 10 1607 10.0.14393.9140, 10 1809 10.0.17763.8755, 11 23H2 10.0.22631.7079, 11 24H2 10.0.26100.8390, 11 24H2 10.0.26100.8457, 11 25H2 10.0.26200.8390, 11 25H2 10.0.26200.8457, 11 26H1 10.0.28000.2113 12.05.2026 SB20260512105
#VU131217 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-34342
CWE-362 Low
No
No
10 21H2 10.0.19044.7291, 10 22H2 10.0.19045.7291, 10 1607 10.0.14393.9140, 10 1809 10.0.17763.8755, 11 23H2 10.0.22631.7079, 11 24H2 10.0.26100.8390, 11 24H2 10.0.26100.8457, 11 25H2 10.0.26200.8390, 11 25H2 10.0.26200.8457, 11 26H1 10.0.28000.2113 12.05.2026 SB20260512103
#VU131216 - Type confusion
CVE-2026-35417
CWE-843 Low
No
No
10 21H2 10.0.19044.7291, 10 22H2 10.0.19045.7291, 10 1809 10.0.17763.8755, 11 23H2 10.0.22631.7079, 11 24H2 10.0.26100.8390, 11 24H2 10.0.26100.8457, 11 25H2 10.0.26200.8390, 11 25H2 10.0.26200.8457, 11 26H1 10.0.28000.2113 12.05.2026 SB20260512102
#VU131215 - Use After Free
CVE-2026-34347
CWE-416 Low
No
No
10 21H2 10.0.19044.7291, 10 22H2 10.0.19045.7291, 10 1607 10.0.14393.9140, 10 1809 10.0.17763.8755, 11 23H2 10.0.22631.7079, 11 24H2 10.0.26100.8390, 11 24H2 10.0.26100.8457, 11 25H2 10.0.26200.8390, 11 25H2 10.0.26200.8457, 11 26H1 10.0.28000.2113 12.05.2026 SB20260512102
#VU131214 - Use After Free
CVE-2026-34333
CWE-416 Low
No
No
10 21H2 10.0.19044.7291, 10 22H2 10.0.19045.7291, 10 1607 10.0.14393.9140, 10 1809 10.0.17763.8755, 11 23H2 10.0.22631.7079, 11 24H2 10.0.26100.8390, 11 24H2 10.0.26100.8457, 11 25H2 10.0.26200.8390, 11 25H2 10.0.26200.8457, 11 26H1 10.0.28000.2113 12.05.2026 SB20260512102
#VU131213 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-34331
CWE-362 Low
No
No
10 21H2 10.0.19044.7291, 10 22H2 10.0.19045.7291, 10 1607 10.0.14393.9140, 10 1809 10.0.17763.8755, 11 23H2 10.0.22631.7079, 11 24H2 10.0.26100.8390, 11 24H2 10.0.26100.8457, 11 25H2 10.0.26200.8390, 11 25H2 10.0.26200.8457, 11 26H1 10.0.28000.2113 12.05.2026 SB20260512101
#VU131212 - Integer overflow
CVE-2026-34330
CWE-190 Low
No
No
10 21H2 10.0.19044.7291, 10 22H2 10.0.19045.7291, 10 1607 10.0.14393.9140, 10 1809 10.0.17763.8755, 11 23H2 10.0.22631.7079, 11 24H2 10.0.26100.8390, 11 24H2 10.0.26100.8457, 11 25H2 10.0.26200.8390, 11 25H2 10.0.26200.8457, 11 26H1 10.0.28000.2113 12.05.2026 SB20260512101
#VU131211 - Use After Free
CVE-2026-33840
CWE-416 Low
No
No
11 24H2 10.0.26100.8390, 11 24H2 10.0.26100.8457, 11 25H2 10.0.26200.8390, 11 25H2 10.0.26200.8457, 11 26H1 10.0.28000.2113 12.05.2026 SB20260512101
#VU131210 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-33839
CWE-362 Low
No
No
10 21H2 10.0.19044.7291, 10 22H2 10.0.19045.7291, 10 1809 10.0.17763.8755, 11 23H2 10.0.22631.7079, 11 24H2 10.0.26100.8390, 11 24H2 10.0.26100.8457, 11 25H2 10.0.26200.8390, 11 25H2 10.0.26200.8457, 11 26H1 10.0.28000.2113 12.05.2026 SB20260512101
#VU131209 - Improper Access Control
CVE-2026-33834
CWE-284 Low
No
No
10 21H2 10.0.19044.7291, 10 22H2 10.0.19045.7291, 10 1607 10.0.14393.9140, 10 1809 10.0.17763.8755, 11 23H2 10.0.22631.7079, 11 24H2 10.0.26100.8390, 11 24H2 10.0.26100.8457, 11 25H2 10.0.26200.8390, 11 25H2 10.0.26200.8457, 11 26H1 10.0.28000.2113 12.05.2026 SB20260512100
#VU131208 - Double Free
CVE-2026-32170
CWE-415 Medium
No
No
10 21H2 10.0.19044.7291, 10 22H2 10.0.19045.7291, 10 1607 10.0.14393.9140, 10 1809 10.0.17763.8755, 11 23H2 10.0.22631.7079, 11 24H2 10.0.26100.8390, 11 24H2 10.0.26100.8457, 11 25H2 10.0.26200.8390, 11 25H2 10.0.26200.8457, 11 26H1 10.0.28000.2113 12.05.2026 SB2026051299
#VU131207 - Double Free
CVE-2026-21530
CWE-415 Medium
No
No
10 21H2 10.0.19044.7291, 10 22H2 10.0.19045.7291, 10 1607 10.0.14393.9140, 10 1809 10.0.17763.8755, 11 23H2 10.0.22631.7079, 11 24H2 10.0.26100.8390, 11 24H2 10.0.26100.8457, 11 25H2 10.0.26200.8457, 11 26H1 10.0.28000.2113 12.05.2026 SB2026051299
#VU126306 - Missing Required Cryptographic Step
CVE-2026-25250
CWE-325 Low
Available
No
10 21H2 10.0.19044.7184, 10 22H2 10.0.19045.7184, 10 1607 10.0.14393.9060, 10 1809 10.0.17763.8644, 11 23H2 10.0.22631.6936, 11 24H2 10.0.26100.32690, 11 25H2 10.0.26200.8246, 11 26H1 10.0.28000.1836 16.04.2026 SB2026041622
#VU126261 - Memory corruption
CVE-2023-20585
CWE-119 Low
No
No
11 24H2 10.0.26100.32690, 11 25H2 10.0.26200.8246, 11 26H1 10.0.28000.1836 16.04.2026 SB2026041617
SB2026052679
SB2026053002
and 7 more
#VU126233 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-33116
CWE-835 Medium
No
No
11 26H1 10.0.28000.1836 15.04.2026 SB20260415152
SB2026041655
SB2026041656
and 19 more
#VU126224 - Use After Free
CVE-2026-32070
CWE-416 Low
No
No
10 21H2 10.0.19044.7184, 10 22H2 10.0.19045.7184, 10 1607 10.0.14393.9060, 10 1809 10.0.17763.8644, 11 23H2 10.0.22631.6936, 11 24H2 10.0.26100.32690, 11 25H2 10.0.26200.8246, 11 26H1 10.0.28000.1836 15.04.2026 SB20260415145
#VU126222 - Improper Handling of Insufficient Permissions or Privileges
CVE-2026-27910
CWE-280 Low
No
No
10 21H2 10.0.19044.7184, 10 22H2 10.0.19045.7184, 10 1607 10.0.14393.9060, 10 1809 10.0.17763.8644, 11 23H2 10.0.22631.6936, 11 24H2 10.0.26100.32690, 11 25H2 10.0.26200.8246, 11 26H1 10.0.28000.1836 15.04.2026 SB20260415143


Showing elements 801 - 820 out of 6306