Known vulnerabilities in Microsoft Windows - page 51

Vendor: Microsoft
Software CPE: cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
Total vulnerabilities: 6306
Public exploits: 489
Known exploited (KEV): 267
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Windows Microsoft Windows is affected by 6306 known vulnerabilities: 98 critical, 1206 high, 1123 medium, 3877 low Critical High Medium Low

Vulnerabilities (6306)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU122559 - Improper Access Control
CVE-2026-21238
CWE-284 Low
No
No
10 21H2 10.0.19044.6937, 10 22H2 10.0.19045.6937, 10 1607 10.0.14393.8868, 10 1809 10.0.17763.8389, 11 23H2 10.0.22631.6649, 11 24H2 10.0.26100.7781, 11 24H2 10.0.26100.7840, 11 26H1 10.0.28000.1575 10.02.2026 SB2026021069
#VU122556 - External Control of File Name or Path
CVE-2026-21249
CWE-73 Medium
No
No
10 21H2 10.0.19044.6937, 10 22H2 10.0.19045.6937, 10 1607 10.0.14393.8868, 10 1809 10.0.17763.8389, 11 23H2 10.0.22631.6649, 11 24H2 10.0.26100.7781, 11 24H2 10.0.26100.7840, 11 26H1 10.0.28000.1575 10.02.2026 SB2026021067
#VU122554 - Untrusted Pointer Dereference
CVE-2026-21232
CWE-822 Low
No
No
11 23H2 10.0.22631.6649, 11 24H2 10.0.26100.7781, 11 24H2 10.0.26100.7840, 11 26H1 10.0.28000.1575 10.02.2026 SB2026021065
#VU122553 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-21240
CWE-367 Low
No
No
10 21H2 10.0.19044.6937, 10 22H2 10.0.19045.6937, 10 1809 10.0.17763.8389, 11 23H2 10.0.22631.6649, 11 24H2 10.0.26100.7781, 11 24H2 10.0.26100.7840, 11 26H1 10.0.28000.1575 10.02.2026 SB2026021065
#VU122552 - Type confusion
CVE-2026-21519
CWE-843 High
No
Exploited
10 21H2 10.0.19044.6937, 10 22H2 10.0.19045.6937, 10 1607 10.0.14393.8868, 10 1809 10.0.17763.8389, 11 23H2 10.0.22631.6649, 11 24H2 10.0.26100.7781, 11 24H2 10.0.26100.7840, 11 26H1 10.0.28000.1575 10.02.2026 SB2026021064
#VU122551 - Untrusted Pointer Dereference
CVE-2026-21250
CWE-822 Low
No
No
11 24H2 10.0.26100.7781, 11 24H2 10.0.26100.7840, 11 26H1 10.0.28000.1575 10.02.2026 SB2026021065
#VU122550 - NULL Pointer Dereference
CVE-2026-21525
CWE-476 Medium
No
Exploited
10 21H2 10.0.19044.6937, 10 22H2 10.0.19045.6937, 10 1607 10.0.14393.8868, 10 1809 10.0.17763.8389, 11 23H2 10.0.22631.6649, 11 24H2 10.0.26100.7781, 11 24H2 10.0.26100.7840, 11 26H1 10.0.28000.1575 10.02.2026 SB2026021063
#VU122548 - Improper Privilege Management
CVE-2026-21533
CWE-269 High
No
Exploited
10 21H2 10.0.19044.6937, 10 22H2 10.0.19045.6937, 10 1607 10.0.14393.8868, 10 1809 10.0.17763.8389, 11 23H2 10.0.22631.6649, 11 24H2 10.0.26100.7781, 11 24H2 10.0.26100.7840, 11 26H1 10.0.28000.1575 10.02.2026 SB2026021060
#VU122547 - Protection Mechanism Failure
CVE-2026-21513
CWE-693 Critical
No
Exploited
10 21H2 10.0.19044.6937, 10 22H2 10.0.19045.6937, 10 1607 10.0.14393.8868, 10 1809 10.0.17763.8389, 11 23H2 10.0.22631.6649, 11 24H2 10.0.26100.7781, 11 24H2 10.0.26100.7840, 11 26H1 10.0.28000.1575 10.02.2026 SB2026021058
#VU122546 - Use After Free
CVE-2026-21253
CWE-416 Low
No
No
10 21H2 10.0.19044.6937, 10 22H2 10.0.19045.6937, 10 1607 10.0.14393.8868, 10 1809 10.0.17763.8389, 11 23H2 10.0.22631.6649, 11 24H2 10.0.26100.7781, 11 24H2 10.0.26100.7840, 11 26H1 10.0.28000.1575 10.02.2026 SB2026021057
#VU122545 - Improper Authentication
CVE-2026-21508
CWE-287 Low
No
No
10 21H2 10.0.19044.6937, 10 22H2 10.0.19045.6937, 10 1607 10.0.14393.8868, 10 1809 10.0.17763.8389, 11 23H2 10.0.22631.6649, 11 24H2 10.0.26100.7781, 11 24H2 10.0.26100.7840, 11 26H1 10.0.28000.1575 10.02.2026 SB2026021056
#VU122544 - Protection Mechanism Failure
CVE-2026-21510
CWE-693 Critical
No
Exploited
10 21H2 10.0.19044.6937, 10 22H2 10.0.19045.6937, 10 1607 10.0.14393.8868, 10 1809 10.0.17763.8389, 11 23H2 10.0.22631.6649, 11 24H2 10.0.26100.7781, 11 24H2 10.0.26100.7840, 11 26H1 10.0.28000.1575 10.02.2026 SB2026021055
#VU122543 - Information Exposure Through Log Files
CVE-2026-21222
CWE-532 Medium
No
No
10 21H2 10.0.19044.6937, 10 22H2 10.0.19045.6937, 10 1607 10.0.14393.8868, 10 1809 10.0.17763.8389, 11 23H2 10.0.22631.6649, 11 24H2 10.0.26100.7781, 11 24H2 10.0.26100.7840, 11 26H1 10.0.28000.1575 10.02.2026 SB2026021054
#VU122542 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-21231
CWE-362 Low
No
No
10 21H2 10.0.19044.6937, 10 22H2 10.0.19045.6937, 10 1607 10.0.14393.8868, 10 1809 10.0.17763.8389, 11 23H2 10.0.22631.6649, 11 24H2 10.0.26100.7781, 11 24H2 10.0.26100.7840, 11 26H1 10.0.28000.1575 10.02.2026 SB2026021054
#VU122541 - Heap-based Buffer Overflow
CVE-2026-21239
CWE-122 Low
No
No
10 21H2 10.0.19044.6937, 10 22H2 10.0.19045.6937, 10 1607 10.0.14393.8868, 10 1809 10.0.17763.8389, 11 23H2 10.0.22631.6649, 11 24H2 10.0.26100.7781, 11 24H2 10.0.26100.7840, 11 26H1 10.0.28000.1575 10.02.2026 SB2026021054
#VU122539 - Heap-based Buffer Overflow
CVE-2026-21245
CWE-122 Low
No
No
11 24H2 10.0.26100.7781, 11 24H2 10.0.26100.7840, 11 26H1 10.0.28000.1575 10.02.2026 SB2026021054
#VU121460 - Stack-based buffer overflow
CVE-2023-31096
CWE-121 Low
No
No
10 21H2 10.0.19044.6809, 10 22H2 10.0.19045.6809, 10 1607 10.0.14393.8783, 10 1809 10.0.17763.8276, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.7623 14.01.2026 SB20260114106
#VU121454 - Use After Free
CVE-2026-20859
CWE-416 Low
No
No
10 1607 10.0.14393.8783, 11 24H2 10.0.26100.7623 14.01.2026 SB20260114103
#VU121453 - External Control of File Name or Path
CVE-2026-20872
CWE-73 Medium
No
No
10 21H2 10.0.19044.6809, 10 22H2 10.0.19045.6809, 10 1607 10.0.14393.8783, 10 1809 10.0.17763.8276, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.3223, 11 24H2 10.0.26100.7623 14.01.2026 SB20260114102
#VU121452 - External Control of File Name or Path
CVE-2026-20925
CWE-73 Medium
No
No
10 21H2 10.0.19044.6809, 10 22H2 10.0.19045.6809, 10 1607 10.0.14393.8783, 10 1809 10.0.17763.8276, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.7623 14.01.2026 SB20260114102


Showing elements 1001 - 1020 out of 6306