Known vulnerabilities in Microsoft Windows - page 9

Vendor: Microsoft
Software CPE: cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
Total vulnerabilities: 8099
Public exploits: 491
Known exploited (KEV): 271

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Windows Microsoft Windows is affected by 8099 known vulnerabilities: 99 critical, 1416 high, 1367 medium, 5217 low Critical High Medium Low

Vulnerabilities (8099)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU147667 - Exposure of Sensitive System Information to an Unauthorized Control Sphere
CVE-2026-69406
CWE-497 Low
No
No
10 21H2 10.0.19044.7725, 10 22H2 10.0.19045.7725, 10 1607 10.0.14393.9512, 10 1809 10.0.17763.9245, 11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 08.09.2026 SB2026090906
#VU147666 - Missing release of memory after effective lifetime
CVE-2026-69405
CWE-401 Low
No
No
10 1607 10.0.14393.9512, 10 1809 10.0.17763.9245 08.09.2026 SB2026090906
#VU147665 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-69404
CWE-362 Low
No
No
10 21H2 10.0.19044.7725, 10 22H2 10.0.19045.7725, 10 1607 10.0.14393.9512, 10 1809 10.0.17763.9245, 11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 08.09.2026 SB2026090906
#VU147664 - Missing Authorization
CVE-2026-69403
CWE-862 Low
No
No
10 21H2 10.0.19044.7725, 10 22H2 10.0.19045.7725, 10 1607 10.0.14393.9512, 10 1809 10.0.17763.9245, 11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 08.09.2026 SB2026090906
#VU147662 - Use After Free
CVE-2026-69401
CWE-416 Low
No
No
11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 08.09.2026 SB2026090906
#VU147661 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-69398
CWE-362 Low
No
No
10 21H2 10.0.19044.7725, 10 22H2 10.0.19045.7725, 10 1809 10.0.17763.9245, 11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 08.09.2026 SB2026090906
#VU147660 - Use After Free
CVE-2026-69397
CWE-416 Medium
No
No
10 21H2 10.0.19044.7725, 10 22H2 10.0.19045.7725, 10 1809 10.0.17763.9245, 11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 08.09.2026 SB2026090906
#VU147659 - Use After Free
CVE-2026-69396
CWE-416 Low
No
No
10 21H2 10.0.19044.7725, 10 22H2 10.0.19045.7725, 10 1607 10.0.14393.9512, 10 1809 10.0.17763.9245, 11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 08.09.2026 SB2026090906
#VU147658 - Use of Externally-Controlled Format String
CVE-2026-69395
CWE-134 Low
No
No
10 1607 10.0.14393.9512, 10 1809 10.0.17763.9245 08.09.2026 SB2026090906
#VU147657 - Heap-based Buffer Overflow
CVE-2026-69394
CWE-122 Low
No
No
10 21H2 10.0.19044.7725, 10 22H2 10.0.19045.7725, 10 1607 10.0.14393.9512, 10 1809 10.0.17763.9245, 11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 08.09.2026 SB2026090906
#VU147656 - Out-of-bounds read
CVE-2026-69393
CWE-125 Low
No
No
10 21H2 10.0.19044.7725, 10 22H2 10.0.19045.7725, 10 1607 10.0.14393.9512, 10 1809 10.0.17763.9245, 11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 08.09.2026 SB2026090906
#VU147655 - Use After Free
CVE-2026-69392
CWE-416 Low
No
No
11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 08.09.2026 SB2026090906
#VU147654 - Stack-based buffer overflow
CVE-2026-69391
CWE-121 Low
No
No
10 21H2 10.0.19044.7725, 10 22H2 10.0.19045.7725, 10 1607 10.0.14393.9512, 10 1809 10.0.17763.9245, 11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 08.09.2026 SB2026090906
#VU147653 - Out-of-bounds read
CVE-2026-69390
CWE-125 Low
No
No
10 21H2 10.0.19044.7725, 10 22H2 10.0.19045.7725, 10 1607 10.0.14393.9512, 10 1809 10.0.17763.9245, 11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 08.09.2026 SB2026090906
#VU147652 - Heap-based Buffer Overflow
CVE-2026-69389
CWE-122 Low
No
No
10 21H2 10.0.19044.7725, 10 22H2 10.0.19045.7725, 10 1607 10.0.14393.9512, 10 1809 10.0.17763.9245, 11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 08.09.2026 SB2026090906
#VU147651 - Use After Free
CVE-2026-69388
CWE-416 Low
No
No
10 21H2 10.0.19044.7725, 10 22H2 10.0.19045.7725, 10 1809 10.0.17763.9245, 11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 08.09.2026 SB2026090906
#VU147650 - Heap-based Buffer Overflow
CVE-2026-69386
CWE-122 High
No
No
10 21H2 10.0.19044.7725, 10 22H2 10.0.19045.7725, 10 1809 10.0.17763.9245, 11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 08.09.2026 SB2026090906
#VU147649 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-69385
CWE-362 Low
No
No
10 21H2 10.0.19044.7725, 10 22H2 10.0.19045.7725, 10 1607 10.0.14393.9512, 10 1809 10.0.17763.9245, 11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 08.09.2026 SB2026090906
#VU147648 - NULL Pointer Dereference
CVE-2026-69384
CWE-476 Low
No
No
10 21H2 10.0.19044.7725, 10 22H2 10.0.19045.7725, 10 1607 10.0.14393.9512, 10 1809 10.0.17763.9245, 11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 08.09.2026 SB2026090906
#VU147647 - External Control of File Name or Path
CVE-2026-69383
CWE-73 Low
No
No
11 23H2 10.0.22631.7582, 11 24H2 10.0.26100.9445, 11 25H2 10.0.26200.9445, 11 26H1 10.0.28000.2954 08.09.2026 SB2026090906


Showing elements 161 - 180 out of 8099