Known vulnerabilities in Microsoft Windows - page 54

Vendor: Microsoft
Software CPE: cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
Total vulnerabilities: 6306
Public exploits: 489
Known exploited (KEV): 267
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Windows Microsoft Windows is affected by 6306 known vulnerabilities: 98 critical, 1206 high, 1123 medium, 3877 low Critical High Medium Low

Vulnerabilities (6306)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121319 - Use After Free
CVE-2026-20877
CWE-416 Low
No
No
10 21H2 10.0.19044.6809, 10 22H2 10.0.19045.6809, 10 1607 10.0.14393.8783, 10 1809 10.0.17763.8276, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.7623 13.01.2026 SB20260113122
#VU121318 - Use After Free
CVE-2026-20865
CWE-416 Low
No
No
10 21H2 10.0.19044.6809, 10 22H2 10.0.19045.6809, 10 1607 10.0.14393.8783, 10 1809 10.0.17763.8276, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.7623 13.01.2026 SB20260113122
#VU121278 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-20941
CWE-59 Low
No
No
11 24H2 10.0.26100.3223, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011398
#VU121277 - Out-of-bounds read
CVE-2026-20936
CWE-125 Low
No
No
10 21H2 10.0.19044.6809, 10 22H2 10.0.19045.6809, 10 1607 10.0.14393.8783, 10 1809 10.0.17763.8276, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.3223, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011397
#VU121276 - Untrusted Pointer Dereference
CVE-2026-20857
CWE-822 Low
No
No
10 21H2 10.0.19044.6809, 10 22H2 10.0.19045.6809, 10 1607 10.0.14393.8783, 10 1809 10.0.17763.8276, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011396
#VU121275 - Untrusted Pointer Dereference
CVE-2026-20940
CWE-822 Low
No
No
10 21H2 10.0.19044.6809, 10 22H2 10.0.19045.6809, 10 1607 10.0.14393.8783, 10 1809 10.0.17763.8276, 11 23H2 10.0.22631.6491 13.01.2026 SB2026011396
#VU121271 - Heap-based Buffer Overflow
CVE-2026-20868
CWE-122 High
No
No
10 21H2 10.0.19044.6809, 10 22H2 10.0.19045.6809, 10 1607 10.0.14393.8783, 10 1809 10.0.17763.8276, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.3223, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011392
#VU121270 - Improper Access Control
CVE-2026-20843
CWE-284 Low
No
No
10 21H2 10.0.19044.6809, 10 22H2 10.0.19045.6809, 10 1607 10.0.14393.8783, 10 1809 10.0.17763.8276, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.3223, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011392
#VU121267 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-20926
CWE-362 Medium
No
No
10 21H2 10.0.19044.6809, 10 22H2 10.0.19045.6809, 10 1607 10.0.14393.8783, 10 1809 10.0.17763.8276, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011390
#VU121266 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-20919
CWE-362 Medium
No
No
10 21H2 10.0.19044.6809, 10 22H2 10.0.19045.6809, 10 1607 10.0.14393.8783, 10 1809 10.0.17763.8276, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011390
#VU121265 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-20921
CWE-362 Medium
No
No
10 21H2 10.0.19044.6809, 10 22H2 10.0.19045.6809, 10 1607 10.0.14393.8783, 10 1809 10.0.17763.8276, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011390
#VU121264 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-20927
CWE-362 Medium
No
No
10 21H2 10.0.19044.6809, 10 22H2 10.0.19045.6809, 10 1607 10.0.14393.8783, 10 1809 10.0.17763.8276, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011390
#VU121263 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-20934
CWE-362 Medium
No
No
10 21H2 10.0.19044.6809, 10 22H2 10.0.19045.6809, 10 1607 10.0.14393.8783, 10 1809 10.0.17763.8276, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011390
#VU121262 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-20848
CWE-362 Medium
No
No
10 21H2 10.0.19044.6809, 10 22H2 10.0.19045.6809, 10 1607 10.0.14393.8783, 10 1809 10.0.17763.8276, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.3223, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011390
#VU121261 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-20853
CWE-362 Low
No
No
10 21H2 10.0.19044.6809, 10 22H2 10.0.19045.6809, 10 1607 10.0.14393.8783, 10 1809 10.0.17763.8276, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.3223, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011389
#VU121260 - NULL Pointer Dereference
CVE-2026-20875
CWE-476 Medium
No
No
10 21H2 10.0.19044.6809, 10 22H2 10.0.19045.6809, 10 1607 10.0.14393.8783, 10 1809 10.0.17763.8276, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011388
#VU121259 - Use After Free
CVE-2026-20854
CWE-416 Medium
No
No
11 24H2 10.0.26100.3223, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011388
#VU121257 - Exposure of sensitive information to an unauthorized actor
CVE-2026-20827
CWE-200 Low
No
No
10 21H2 10.0.19044.6809, 10 22H2 10.0.19045.6809, 10 1607 10.0.14393.8783, 10 1809 10.0.17763.8276, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011386
#VU121256 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-20826
CWE-362 Low
No
No
10 21H2 10.0.19044.6809, 10 22H2 10.0.19045.6809, 10 1607 10.0.14393.8783, 10 1809 10.0.17763.8276, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011386
#VU121255 - Improper Access Control
CVE-2026-20825
CWE-284 Low
No
No
10 21H2 10.0.19044.6809, 10 22H2 10.0.19045.6809, 10 1607 10.0.14393.8783, 10 1809 10.0.17763.8276, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011385


Showing elements 1061 - 1080 out of 6306