Microsoft vulnerabilities, page 4
17,342 vulnerabilities
Known vulnerabilities in Microsoft products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2,371 products.
CVE-2026-97821microsoftwindows_10_1607+28
EPSS score0.74%
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.CVE-2026-97820microsoftwindows_10_1607+28EPSS score0.74%
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.CVE-2026-97819microsoftwindows_10_1607+28EPSS score0.95%
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.CVE-2026-97817microsoftwindows_10_1607+28EPSS score0.95%
Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network.CVE-2026-97816microsoftwindows_10_1809+20EPSS score0.89%
Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.CVE-2026-97815microsoftwindows_10_1607+28EPSS score0.67%
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.CVE-2026-97814microsoftwindows_10_1607+28EPSS score0.97%
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.CVE-2026-97813microsoftwindows_10_1809+20EPSS score0.95%
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network.CVE-2026-97812microsoftwindows_10_21h2+15EPSS score0.26%
Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.CVE-2026-97811microsoftwindows_10_1809+20EPSS score0.23%
Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.CVE-2026-97810microsoftwindows_11_24h2+10EPSS score0.26%
Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.CVE-2026-97809microsoftwindows_10_1809+17EPSS score0.26%
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.CVE-2026-97808microsoftwindows_10_1809+17EPSS score0.26%
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.CVE-2026-97807microsoftwindows_10_1809+17EPSS score0.26%
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.CVE-2026-97806microsoftwindows_10_1809+17EPSS score0.33%
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.CVE-2026-97805microsoftwindows_10_1607+28EPSS score0.94%
Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.CVE-2026-97804microsoftwindows_10_1607+24EPSS score0.32%
Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.CVE-2026-97803microsoftwindows_11_26h1+1EPSS score0.31%
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.CVE-2026-97801microsoftmicrosoft .net framework 3.5+7EPSS score0.61%
Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network.CVE-2026-97800microsoftwindows_11_24h2+7EPSS score0.24%
Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.