Vendor CVEs
Microsoft
All CVEs
18,148 total · sorted by risk| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-70134 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70126 | Hig | 0.46 | 7.1 | 0.01 | Oct 13, 2026 | Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network. | ||
| CVE-2026-70086 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70056 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70045 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Work Folders allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70026 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70021 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69977 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69970 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69964 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69935 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69931 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69915 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69856 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69840 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Certificates allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69795 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69766 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69763 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69736 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Manager allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69596 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69452 | Hig | 0.46 | 7.1 | 0.01 | Oct 13, 2026 | Use after free in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network. | ||
| CVE-2026-69387 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-109453 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-108468 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-108465 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Update Delivery Optimization allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-108464 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-108461 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-108396 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-108135 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-108132 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-105729 | Hig | 0.46 | 7.1 | 0.00 | Oct 13, 2026 | Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-105722 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-103565 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-103555 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-103554 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-102211 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-102209 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-102208 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-102207 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-102197 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-102195 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-102194 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-102193 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-102191 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-102189 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-100225 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-100216 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-100205 | Hig | 0.46 | 7.1 | 0.00 | Oct 13, 2026 | Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-100203 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-100201 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevate privileges locally. |
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.1epss 0.01
Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network.
- risk 0.46cvss 7.0epss 0.00
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Work Folders allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Certificates allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Manager allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.1epss 0.01
Use after free in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Update Delivery Optimization allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.1epss 0.00
Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.1epss 0.00
Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevate privileges locally.
Page 173 of 363