Known vulnerabilities in Microsoft Windows - page 91

Vendor: Microsoft
Software CPE: cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
Total vulnerabilities: 8099
Public exploits: 491
Known exploited (KEV): 271

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Windows Microsoft Windows is affected by 8099 known vulnerabilities: 99 critical, 1416 high, 1367 medium, 5217 low Critical High Medium Low

Vulnerabilities (8099)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121228 - Use of Uninitialized Resource
CVE-2026-20962
CWE-908 Low
No
No
10 21H2 10.0.19044.6809, 10 22H2 10.0.19045.6809, 10 1809 10.0.17763.8276, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.7456, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011368
#VU119496 - Command injection
CVE-2025-54100
CWE-77 High
Available
No
10 21H2 10.0.19043.6456, 10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1607 10.0.14393.8688, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7456, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120994
#VU119483 - Heap-based Buffer Overflow
CVE-2025-62456
CWE-122 Medium
No
No
11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120985
#VU119481 - Heap-based Buffer Overflow
CVE-2025-62454
CWE-122 Low
No
No
10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462, 11 25H2 10.0.26200.7092 09.12.2025 SB2025120984
#VU119480 - Out-of-bounds read
CVE-2025-62457
CWE-125 Low
No
No
10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120984
#VU119479 - Improper input validation
CVE-2025-62571
CWE-20 Low
No
No
10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1607 10.0.14393.8688, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120982
#VU119478 - Improper input validation
CVE-2025-62455
CWE-20 Low
No
No
10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1607 10.0.14393.8688, 10 1809 10.0.17763.8146 09.12.2025 SB2025120981
#VU119477 - Out-of-bounds read
CVE-2025-62462
CWE-125 Low
No
No
10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1607 10.0.14393.8688, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120980
#VU119476 - Out-of-bounds read
CVE-2025-62461
CWE-125 Low
No
No
10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1607 10.0.14393.8688, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120980
#VU119474 - Integer underflow
CVE-2025-62567
CWE-191 Medium
No
No
10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1607 10.0.14393.8688, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120978
#VU119473 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-64661
CWE-362 Low
No
No
10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1607 10.0.14393.8688, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120977
#VU119471 - Heap-based Buffer Overflow
CVE-2025-64679
CWE-122 Low
No
No
10 21H2 10.0.19043.6456, 10 21H2 10.0.19043.6575, 10 22H2 10.0.19045.6456, 10 1507 10.0.10240.21161, 10 1607 10.0.14393.8519, 10 1809 10.0.17763.7919, 11 22H2 10.0.22621.6060, 11 23H2 10.0.22631.6060, 11 24H2 10.0.26100.6899 09.12.2025 SB2025120975
#VU119470 - Heap-based Buffer Overflow
CVE-2025-64680
CWE-122 Low
No
No
10 21H2 10.0.19043.6456, 10 22H2 10.0.19045.6456, 10 1507 10.0.10240.21161, 10 1607 10.0.14393.8519, 10 1809 10.0.17763.7919, 11 22H2 10.0.22621.6060, 11 23H2 10.0.22631.6060, 11 24H2 10.0.26100.6899 09.12.2025 SB2025120975
#VU119469 - Missing Authentication for Critical Function
CVE-2025-59516
CWE-306 Low
No
No
10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1607 10.0.14393.8688, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120974
#VU119468 - Improper Access Control
CVE-2025-59517
CWE-284 Low
No
No
10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1607 10.0.14393.8688, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120974
#VU119467 - Improper Access Control
CVE-2025-64673
CWE-284 Low
No
No
10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1607 10.0.14393.8688, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120974
#VU119466 - Exposure of sensitive information to an unauthorized actor
CVE-2025-64670
CWE-200 Medium
No
No
10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1607 10.0.14393.8688, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120973
#VU119465 - Out-of-bounds read
CVE-2025-62572
CWE-125 Low
No
No
10 1607 10.0.14393.8688, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120972
#VU119464 - Untrusted Pointer Dereference
CVE-2025-62549
CWE-822 High
No
No
10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1607 10.0.14393.8688, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120971
#VU119462 - Heap-based Buffer Overflow
CVE-2025-64678
CWE-122 High
No
No
10 21H2 10.0.19043.6575, 10 22H2 10.0.19045.6575, 10 1607 10.0.14393.8594, 10 1607 10.0.14393.8688, 10 1809 10.0.17763.8027, 11 23H2 10.0.22631.6199, 11 24H2 10.0.26100.7092, 11 24H2 10.0.26100.7171 09.12.2025 SB2025120971


Showing elements 1801 - 1820 out of 8099