Known vulnerabilities in Microsoft Windows - page 56

Vendor: Microsoft
Software: Microsoft Windows
Software CPE: cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 6306
Public exploits: 489
Known exploited (KEV): 267
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Windows Microsoft Windows is affected by 6306 known vulnerabilities: 98 critical, 1206 high, 1123 medium, 3877 low Critical High Medium Low

Vulnerabilities (6306)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121234 - Type confusion
CVE-2026-20860		 CWE-843 Low
No
No
 10 21H2 10.0.19044.6809, 10 22H2 10.0.19045.6809, 10 1607 10.0.14393.8783, 10 1809 10.0.17763.8276, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011372
#VU121233 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-20831		 CWE-367 Low
No
No
 10 21H2 10.0.19044.6809, 10 22H2 10.0.19045.6809, 10 1607 10.0.14393.8783, 10 1809 10.0.17763.8276, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011372
#VU121231 - Improper Access Control
CVE-2026-20929		 CWE-284 Medium
No
No
 10 21H2 10.0.19044.6809, 10 22H2 10.0.19045.6809, 10 1607 10.0.14393.8783, 10 1809 10.0.17763.8276, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.3223 13.01.2026 SB2026011371
#VU121230 - Exposure of sensitive information to an unauthorized actor
CVE-2026-20805		 CWE-200 High
No
Exploited
 10 21H2 10.0.19044.6809, 10 22H2 10.0.19045.6809, 10 1607 10.0.14393.8783, 10 1809 10.0.17763.8276, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011370
#VU121228 - Use of Uninitialized Resource
CVE-2026-20962		 CWE-908 Low
No
No
 10 21H2 10.0.19044.6809, 10 22H2 10.0.19045.6809, 10 1809 10.0.17763.8276, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.7456, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011368
#VU119496 - Command injection
CVE-2025-54100		 CWE-77 High
Available
No
 10 21H2 10.0.19043.6456, 10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1607 10.0.14393.8688, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7456, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120994
#VU119483 - Heap-based Buffer Overflow
CVE-2025-62456		 CWE-122 Medium
No
No
 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120985
#VU119481 - Heap-based Buffer Overflow
CVE-2025-62454		 CWE-122 Low
No
No
 10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462, 11 25H2 10.0.26200.7092 09.12.2025 SB2025120984
#VU119480 - Out-of-bounds read
CVE-2025-62457		 CWE-125 Low
No
No
 10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120984
#VU119479 - Improper input validation
CVE-2025-62571		 CWE-20 Low
No
No
 10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1607 10.0.14393.8688, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120982
#VU119478 - Improper input validation
CVE-2025-62455		 CWE-20 Low
No
No
 10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1607 10.0.14393.8688, 10 1809 10.0.17763.8146 09.12.2025 SB2025120981
#VU119477 - Out-of-bounds read
CVE-2025-62462		 CWE-125 Low
No
No
 10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1607 10.0.14393.8688, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120980
#VU119476 - Out-of-bounds read
CVE-2025-62461		 CWE-125 Low
No
No
 10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1607 10.0.14393.8688, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120980
#VU119474 - Integer underflow
CVE-2025-62567		 CWE-191 Medium
No
No
 10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1607 10.0.14393.8688, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120978
#VU119473 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-64661		 CWE-362 Low
No
No
 10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1607 10.0.14393.8688, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120977
#VU119471 - Heap-based Buffer Overflow
CVE-2025-64679		 CWE-122 Low
No
No
 10 21H2 10.0.19043.6456, 10 21H2 10.0.19043.6575, 10 22H2 10.0.19045.6456, 10 1507 10.0.10240.21161, 10 1607 10.0.14393.8519, 10 1809 10.0.17763.7919, 11 22H2 10.0.22621.6060, 11 23H2 10.0.22631.6060, 11 24H2 10.0.26100.6899 09.12.2025 SB2025120975
#VU119470 - Heap-based Buffer Overflow
CVE-2025-64680		 CWE-122 Low
No
No
 10 21H2 10.0.19043.6456, 10 22H2 10.0.19045.6456, 10 1507 10.0.10240.21161, 10 1607 10.0.14393.8519, 10 1809 10.0.17763.7919, 11 22H2 10.0.22621.6060, 11 23H2 10.0.22631.6060, 11 24H2 10.0.26100.6899 09.12.2025 SB2025120975
#VU119469 - Missing Authentication for Critical Function
CVE-2025-59516		 CWE-306 Low
No
No
 10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1607 10.0.14393.8688, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120974
#VU119468 - Improper Access Control
CVE-2025-59517		 CWE-284 Low
No
No
 10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1607 10.0.14393.8688, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120974
#VU119467 - Improper Access Control
CVE-2025-64673		 CWE-284 Low
No
No
 10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1607 10.0.14393.8688, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120974


Showing elements 1101 - 1120 out of 6306