Windows
by Microsoft
CVEs (2,760)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2011-0096 | Med | 0.46 | 6.1 | 0.47 | Jan 31, 2011 | The MHTML protocol handler in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle a MIME format in a request for content blocks in a document,… | ||
| CVE-2009-2516 | Hig | 0.46 | 7.1 | 0.01 | Oct 14, 2009 | The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold and SP1, and Server 2008 Gold does not properly validate data sent from user mode, which allows local users to gain privileges via a crafted PE .exe file that triggers a NULL pointer… | ||
| CVE-2026-88103 | Hig | 0.45 | 7.0 | — | Oct 13, 2026 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-88098 | Hig | 0.45 | 7.0 | — | Oct 13, 2026 | Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-88096 | Hig | 0.45 | 7.0 | — | Oct 13, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DCOM Server allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85802 | Hig | 0.45 | 7.0 | — | Oct 13, 2026 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83917 | Hig | 0.45 | 7.0 | — | Oct 13, 2026 | Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83901 | Hig | 0.45 | 7.0 | — | Oct 13, 2026 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-72955 | Hig | 0.45 | 7.0 | — | Oct 13, 2026 | Use after free in Windows Application Compatibility Cache allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70273 | Hig | 0.45 | 7.0 | — | Oct 13, 2026 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70271 | Hig | 0.45 | 7.0 | — | Oct 13, 2026 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70253 | Hig | 0.45 | 7.0 | — | Oct 13, 2026 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70236 | Hig | 0.45 | 7.0 | — | Oct 13, 2026 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70209 | Hig | 0.45 | 7.0 | — | Oct 13, 2026 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70176 | Hig | 0.45 | 7.0 | — | Oct 13, 2026 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70144 | Hig | 0.45 | 7.0 | — | Oct 13, 2026 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70076 | Hig | 0.45 | 7.0 | — | Oct 13, 2026 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70067 | Hig | 0.45 | 7.0 | — | Oct 13, 2026 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70026 | Hig | 0.45 | 7.0 | — | Oct 13, 2026 | Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70021 | Hig | 0.45 | 7.0 | — | Oct 13, 2026 | Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. |
- risk 0.46cvss 6.1epss 0.47
The MHTML protocol handler in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle a MIME format in a request for content blocks in a document,…
- risk 0.46cvss 7.1epss 0.01
The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold and SP1, and Server 2008 Gold does not properly validate data sent from user mode, which allows local users to gain privileges via a crafted PE .exe file that triggers a NULL pointer…
- risk 0.45cvss 7.0epss —
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
- risk 0.45cvss 7.0epss —
Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to elevate privileges locally.
- risk 0.45cvss 7.0epss —
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DCOM Server allows an authorized attacker to elevate privileges locally.
- risk 0.45cvss 7.0epss —
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- risk 0.45cvss 7.0epss —
Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally.
- risk 0.45cvss 7.0epss —
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- risk 0.45cvss 7.0epss —
Use after free in Windows Application Compatibility Cache allows an authorized attacker to elevate privileges locally.
- risk 0.45cvss 7.0epss —
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- risk 0.45cvss 7.0epss —
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- risk 0.45cvss 7.0epss —
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- risk 0.45cvss 7.0epss —
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- risk 0.45cvss 7.0epss —
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- risk 0.45cvss 7.0epss —
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- risk 0.45cvss 7.0epss —
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- risk 0.45cvss 7.0epss —
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- risk 0.45cvss 7.0epss —
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- risk 0.45cvss 7.0epss —
Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
- risk 0.45cvss 7.0epss —
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
Page 69 of 138