Known vulnerabilities in Microsoft Windows - page 47

Vendor: Microsoft
Software CPE: cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
Total vulnerabilities: 6306
Public exploits: 489
Known exploited (KEV): 267
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Windows Microsoft Windows is affected by 6306 known vulnerabilities: 98 critical, 1206 high, 1123 medium, 3877 low Critical High Medium Low

Vulnerabilities (6306)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126031 - Use After Free
CVE-2026-27925
CWE-416 Medium
No
No
10 21H2 10.0.19044.7184, 10 22H2 10.0.19045.7184, 10 1607 10.0.14393.9060, 10 1809 10.0.17763.8644, 11 23H2 10.0.22631.6936, 11 24H2 10.0.26100.32690, 11 25H2 10.0.26200.8246, 11 26H1 10.0.28000.1836 14.04.2026 SB20260414145
#VU126030 - Untrusted Pointer Dereference
CVE-2026-27920
CWE-822 Low
No
No
10 21H2 10.0.19044.7184, 10 22H2 10.0.19045.7184, 10 1607 10.0.14393.9060, 10 1809 10.0.17763.8644, 11 23H2 10.0.22631.6936, 11 24H2 10.0.26100.32690, 11 25H2 10.0.26200.8246, 11 26H1 10.0.28000.1836 14.04.2026 SB20260414145
#VU126029 - Use After Free
CVE-2026-27916
CWE-416 Low
No
No
10 21H2 10.0.19044.7184, 10 22H2 10.0.19045.7184, 10 1607 10.0.14393.9060, 10 1809 10.0.17763.8644, 11 23H2 10.0.22631.6936, 11 24H2 10.0.26100.32690, 11 25H2 10.0.26200.8246, 11 26H1 10.0.28000.1836 14.04.2026 SB20260414145
#VU126028 - Use After Free
CVE-2026-32156
CWE-416 High
No
No
10 21H2 10.0.19044.7184, 10 22H2 10.0.19045.7184, 10 1607 10.0.14393.9060, 10 1809 10.0.17763.8644, 11 23H2 10.0.22631.6936, 11 24H2 10.0.26100.32690, 11 25H2 10.0.26200.8246, 11 26H1 10.0.28000.1836 14.04.2026 SB20260414145
#VU126027 - Use After Free
CVE-2026-32075
CWE-416 Low
No
No
10 21H2 10.0.19044.7184, 10 22H2 10.0.19045.7184, 10 1607 10.0.14393.9060, 10 1809 10.0.17763.8644, 11 23H2 10.0.22631.6936, 11 24H2 10.0.26100.32690, 11 25H2 10.0.26200.8246, 11 26H1 10.0.28000.1836 14.04.2026 SB20260414145
#VU126026 - Use After Free
CVE-2026-32224
CWE-416 Low
No
No
11 26H1 10.0.28000.1836 14.04.2026 SB20260414144
#VU126025 - Untrusted Pointer Dereference
CVE-2026-27919
CWE-822 Low
No
No
10 21H2 10.0.19044.7184, 10 22H2 10.0.19045.7184, 10 1607 10.0.14393.9060, 10 1809 10.0.17763.8644, 11 23H2 10.0.22631.6936, 11 24H2 10.0.26100.32690, 11 25H2 10.0.26200.8246, 11 26H1 10.0.28000.1836 14.04.2026 SB20260414145
#VU126023 - Out-of-bounds read
CVE-2026-32076
CWE-125 Low
No
No
10 1607 10.0.14393.9060, 11 23H2 10.0.22631.6936, 11 24H2 10.0.26100.32690 14.04.2026 SB20260414143
#VU126022 - Integer underflow
CVE-2026-27907
CWE-191 Low
No
No
11 23H2 10.0.22631.6936, 11 24H2 10.0.26100.32690, 11 25H2 10.0.26200.8246, 11 26H1 10.0.28000.1836 14.04.2026 SB20260414143
#VU126020 - Improper input validation
CVE-2026-27906
CWE-20 Low
No
No
10 21H2 10.0.19044.7184, 10 22H2 10.0.19045.7184, 11 23H2 10.0.22631.6936, 11 24H2 10.0.26100.32690, 11 25H2 10.0.26200.8246 14.04.2026 SB20260414142
#VU126018 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-32091
CWE-362 Low
No
No
10 21H2 10.0.19044.7184, 10 22H2 10.0.19045.7184, 10 1607 10.0.14393.9060, 10 1809 10.0.17763.8644, 11 23H2 10.0.22631.6936, 11 24H2 10.0.26100.32690 14.04.2026 SB20260414140
#VU126017 - Double Free
CVE-2026-32219
CWE-415 Low
No
No
10 1607 10.0.14393.9060, 11 24H2 10.0.26100.32690 14.04.2026 SB20260414140
#VU126016 - Use After Free
CVE-2026-26181
CWE-416 Low
No
No
11 23H2 10.0.22631.6936, 11 24H2 10.0.26100.32690, 11 25H2 10.0.26200.8246 14.04.2026 SB20260414140
#VU126015 - Use of Uninitialized Resource
CVE-2026-26175
CWE-908 Low
No
No
10 21H2 10.0.19044.7184, 10 22H2 10.0.19045.7184, 10 1607 10.0.14393.9060, 10 1809 10.0.17763.8644, 11 23H2 10.0.22631.6936, 11 24H2 10.0.26100.32690 14.04.2026 SB20260414139
#VU126014 - Type confusion
CVE-2026-26162
CWE-843 Low
No
No
10 21H2 10.0.19044.7184, 10 22H2 10.0.19045.7184, 10 1607 10.0.14393.9060, 10 1809 10.0.17763.8644, 11 23H2 10.0.22631.6936, 11 24H2 10.0.26100.32690 14.04.2026 SB20260414138
#VU126013 - Untrusted Pointer Dereference
CVE-2026-26161
CWE-822 Low
No
No
10 21H2 10.0.19044.7184, 10 22H2 10.0.19045.7184, 10 1607 10.0.14393.9060, 10 1809 10.0.17763.8644, 11 23H2 10.0.22631.6936, 11 24H2 10.0.26100.32690 14.04.2026 SB20260414134
#VU126012 - Missing Authentication for Critical Function
CVE-2026-26160
CWE-306 Low
No
No
10 21H2 10.0.19044.7184, 10 22H2 10.0.19045.7184, 10 1607 10.0.14393.9060, 10 1809 10.0.17763.8644, 11 23H2 10.0.22631.6936, 11 24H2 10.0.26100.32690 14.04.2026 SB20260414133
#VU126011 - Missing Authentication for Critical Function
CVE-2026-26159
CWE-306 Low
No
No
10 21H2 10.0.19044.7184, 10 22H2 10.0.19045.7184, 10 1607 10.0.14393.9060, 10 1809 10.0.17763.8644, 11 23H2 10.0.22631.6936, 11 24H2 10.0.26100.32690 14.04.2026 SB20260414133
#VU126010 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-26174
CWE-362 Low
No
No
10 21H2 10.0.19044.7184, 10 22H2 10.0.19045.7184, 10 1607 10.0.14393.9060, 10 1809 10.0.17763.8644, 11 23H2 10.0.22631.6936, 11 24H2 10.0.26100.32690 14.04.2026 SB20260414144
#VU126006 - Out-of-bounds read
CVE-2026-33096
CWE-125 Medium
No
No
10 1607 10.0.14393.9060, 11 23H2 10.0.22631.6936, 11 24H2 10.0.26100.32690 14.04.2026 SB20260414130


Showing elements 921 - 940 out of 6306