Vendor CVEs
Microsoft
All CVEs
18,148 total · sorted by risk| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-83708 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83707 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83702 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83701 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83696 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83694 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83689 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83682 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83680 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83676 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Integer underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83644 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83584 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83580 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83575 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83574 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83564 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83510 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83509 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83505 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-81971 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-72968 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70276 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70273 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70272 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70271 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70253 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70252 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70249 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70243 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70241 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70237 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70236 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70230 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70223 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Console Driver allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70212 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Improper restriction of communication channel to intended endpoints in Windows Security Center allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70209 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70205 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70198 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70197 | Hig | 0.46 | 8.1 | 0.01 | Oct 13, 2026 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-70176 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70175 | Hig | 0.46 | 8.1 | 0.01 | Oct 13, 2026 | Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network. | ||
| CVE-2026-70169 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70168 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70164 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70160 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70156 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70150 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70144 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70140 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70136 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
- risk 0.46cvss 7.0epss 0.00
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Integer underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Console Driver allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Improper restriction of communication channel to intended endpoints in Windows Security Center allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 8.1epss 0.01
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 8.1epss 0.01
Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.
- risk 0.46cvss 7.0epss 0.00
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
Page 172 of 363