Known vulnerabilities in Microsoft Windows - page 84

Vendor: Microsoft
Software CPE: cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
Total vulnerabilities: 8099
Public exploits: 491
Known exploited (KEV): 271

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Windows Microsoft Windows is affected by 8099 known vulnerabilities: 99 critical, 1416 high, 1367 medium, 5217 low Critical High Medium Low

Vulnerabilities (8099)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123745 - Use After Free
CVE-2026-24289
CWE-416 Low
No
No
10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB20260310104
#VU123744 - External Control of File Name or Path
CVE-2026-24287
CWE-73 Low
No
No
10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB20260310104
#VU123743 - Use After Free
CVE-2026-26132
CWE-416 Low
No
No
10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB20260310104
#VU123742 - Improper Restriction of Names for Files and Other Resources
CVE-2026-25177
CWE-641 Medium
Available
No
10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB20260310103
#VU123740 - Out-of-bounds read
CVE-2026-24282
CWE-125 Low
No
No
10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB20260310101
#VU123739 - Heap-based Buffer Overflow
CVE-2026-24283
CWE-122 Low
No
No
10 1607 10.0.14393.8957, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB20260310100
#VU123736 - Use After Free
CVE-2026-24285
CWE-416 Low
No
No
10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB2026031098
#VU123735 - Heap-based Buffer Overflow
CVE-2026-24288
CWE-122 Low
No
No
10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957 10.03.2026 SB2026031097
#VU123734 - Improper Access Control
CVE-2026-24290
CWE-284 Low
No
No
10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB2026031096
#VU123733 - Use After Free
CVE-2026-24292
CWE-416 Low
No
No
10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB2026031095
#VU123732 - Out-of-bounds read
CVE-2026-23673
CWE-125 Low
No
No
10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB2026031094
#VU123731 - Improper Resolution of Path Equivalence
CVE-2026-23674
CWE-41 Medium
No
No
10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB2026031093
#VU123711 - Out-of-bounds read
CVE-2026-25180
CWE-125 Medium
No
No
10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB2026031073
#VU123710 - NULL Pointer Dereference
CVE-2026-25168
CWE-476 Low
No
No
10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB2026031073
#VU123709 - Divide By Zero
CVE-2026-25169
CWE-369 Low
No
No
10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB2026031073
#VU123708 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-23668
CWE-362 Low
No
No
10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979 10.03.2026 SB2026031073
#VU123707 - Out-of-bounds read
CVE-2026-25181
CWE-125 Medium
No
No
10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB2026031072
#VU123703 - Incorrect Permission Assignment for Critical Resource
CVE-2026-24291
CWE-732 Low
Available
No
10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB2026031068
#VU123702 - Exposure of sensitive information to an unauthorized actor
CVE-2026-25186
CWE-200 Low
No
No
10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB2026031068
#VU123700 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-25187
CWE-59 Low
No
No
10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB2026031066


Showing elements 1661 - 1680 out of 8099