Known vulnerabilities in Microsoft Windows - page 55

Vendor: Microsoft
Software CPE: cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
Total vulnerabilities: 6306
Public exploits: 489
Known exploited (KEV): 267
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Windows Microsoft Windows is affected by 6306 known vulnerabilities: 98 critical, 1206 high, 1123 medium, 3877 low Critical High Medium Low

Vulnerabilities (6306)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121254 - Use After Free
CVE-2026-20822
CWE-416 Low
No
No
10 21H2 10.0.19044.6809, 10 22H2 10.0.19045.6809, 10 1607 10.0.14393.8783, 10 1809 10.0.17763.8276, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011384
#VU121253 - Double Free
CVE-2026-20832
CWE-415 Low
No
No
10 21H2 10.0.19044.6809, 10 22H2 10.0.19045.6809, 10 1607 10.0.14393.8783, 10 1809 10.0.17763.8276, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011383
#VU121252 - Exposure of sensitive information to an unauthorized actor
CVE-2026-20821
CWE-200 Low
No
No
10 21H2 10.0.19044.6809, 10 22H2 10.0.19045.6809, 10 1607 10.0.14393.8783, 10 1809 10.0.17763.8276, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011382
#VU121251 - Heap-based Buffer Overflow
CVE-2026-20820
CWE-122 Low
No
No
10 21H2 10.0.19044.6809, 10 22H2 10.0.19045.6809, 10 1607 10.0.14393.8783, 10 1809 10.0.17763.8276, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011381
#VU121250 - Untrusted Pointer Dereference
CVE-2026-20935
CWE-822 Low
No
No
11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.3223, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011380
#VU121249 - Untrusted Pointer Dereference
CVE-2026-20938
CWE-822 Low
No
No
10 1607 10.0.14393.8783, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011380
#VU121248 - Heap-based Buffer Overflow
CVE-2026-20876
CWE-122 Low
No
No
10 1607 10.0.14393.8783, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011380
#VU121247 - Untrusted Pointer Dereference
CVE-2026-20819
CWE-822 Low
No
No
10 1607 10.0.14393.8783, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011380
#VU121246 - Permissions, Privileges, and Access Controls
CVE-2026-20817
CWE-264 Low
Available
No
10 21H2 10.0.19044.6809, 10 22H2 10.0.19045.6809, 10 1607 10.0.14393.8783, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011377
#VU121245 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-20816
CWE-367 Low
No
No
10 21H2 10.0.19044.6809, 10 22H2 10.0.19045.6809, 10 1607 10.0.14393.8783, 10 1809 10.0.17763.8276, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011376
#VU121244 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-21221
CWE-362 Low
No
No
10 1607 10.0.14393.8783, 11 24H2 10.0.26100.3223, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011375
#VU121242 - Out-of-bounds read
CVE-2026-20851
CWE-125 Low
No
No
10 1607 10.0.14393.8783, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011375
#VU121241 - Out-of-bounds read
CVE-2026-20835
CWE-125 Low
No
No
10 1607 10.0.14393.8783, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011375
#VU121240 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-20815
CWE-362 Low
No
No
10 1607 10.0.14393.8783, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011375
#VU121239 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-20836
CWE-362 Low
No
No
10 21H2 10.0.19044.6809, 10 22H2 10.0.19045.6809, 10 1607 10.0.14393.8783, 10 1809 10.0.17763.8276, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011374
#VU121238 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-20814
CWE-362 Low
No
No
10 21H2 10.0.19044.6809, 10 22H2 10.0.19045.6809, 10 1607 10.0.14393.8783, 10 1809 10.0.17763.8276, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011374
#VU121237 - Double Free
CVE-2026-20863
CWE-415 Low
No
No
11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.3223, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011373
#VU121236 - Use After Free
CVE-2026-20920
CWE-416 Low
No
No
10 1607 10.0.14393.8783, 11 23H2 10.0.22631.6491 13.01.2026 SB2026011373
#VU121235 - Type confusion
CVE-2026-20811
CWE-843 Low
No
No
10 1607 10.0.14393.8783, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011373
#VU121232 - Free of Memory not on the Heap
CVE-2026-20810
CWE-590 Low
No
No
10 21H2 10.0.19044.6809, 10 22H2 10.0.19045.6809, 10 1607 10.0.14393.8783, 10 1809 10.0.17763.8276 13.01.2026 SB2026011372


Showing elements 1081 - 1100 out of 6306