[ Vendor · 1,865 CVEs ]
Microsoft
CVEs affecting Microsoft published in the last 30 days, plus any Microsoft CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-83865 | 13 Oct 2026 | CVSS 4.7 | Microsoft Windows 10 Version 1607Relative path traversal in Windows Internet (wininet.dll) allows an authorized attacker to perform tampering locally. | Fix |
| CVE-2026-83866 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-83867 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-83868 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1809Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Bluetooth Driver allows an authorized… | |
| CVE-2026-83869 | 13 Oct 2026 | CVSS 9.8 | Microsoft Windows 10 Version 1607Integer underflow (wrap or wraparound) in DNS Server allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-83870 | 13 Oct 2026 | CVSS 5.5 | Microsoft Windows 11 Version 24H2Out-of-bounds read in Windows Aggregated Data Platform Service allows an authorized attacker to disclose information locally. | Fix |
| CVE-2026-83871 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1809Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-83860 | 13 Oct 2026 | CVSS 7.5 | Microsoft Windows 10 Version 1607Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a network. | Fix |
| CVE-2026-83861 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-83862 | 13 Oct 2026 | CVSS 9.8 | Microsoft Windows 10 Version 1607Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-83863 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83864 | 13 Oct 2026 | CVSS 5.5 | Microsoft Windows 10 Version 1607Improper access control in Windows NTFS allows an authorized attacker to disclose information locally. | Fix |
| CVE-2026-83852 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 11 Version 24H2Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83853 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 21H2Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-83854 | 13 Oct 2026 | CVSS 5.5 | Microsoft Windows 10 Version 1809Improper access control in Windows Notification allows an authorized attacker to disclose information locally. | Fix |
| CVE-2026-83855 | 13 Oct 2026 | CVSS 7.5 | Microsoft Windows 11 version 23H2Integer underflow (wrap or wraparound) in Windows WLAN Service allows an unauthorized attacker to deny service over a network. | Fix |
| CVE-2026-83856 | 13 Oct 2026 | CVSS 8.1 | Microsoft Windows 11 version 23H2Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-83857 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-83859 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-83845 | 13 Oct 2026 | CVSS 8.4 | Microsoft Windows 10 Version 21H2Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoofing locally. | |
| CVE-2026-83846 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1809Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83847 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83848 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83849 | 13 Oct 2026 | CVSS 5.5 | Microsoft Windows 10 Version 21H2Out-of-bounds read in Windows Hello allows an authorized attacker to disclose information locally. | |
| CVE-2026-83850 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83851 | 13 Oct 2026 | CVSS 8.8 | Microsoft Windows 10 Version 1809Heap-based buffer overflow in Windows Partition Management Driver allows an unauthorized attacker to elevate privileges over a network. | |
| CVE-2026-83839 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1809Time-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83840 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Weak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83841 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1809Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to… | |
| CVE-2026-83842 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83843 | 13 Oct 2026 | CVSS 7.5 | Microsoft Windows 10 Version 1607Out-of-bounds read in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network. | |
| CVE-2026-83844 | 13 Oct 2026 | CVSS 8.1 | Microsoft PaintOut-of-bounds read in Windows Paint allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-83833 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83834 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83835 | 13 Oct 2026 | CVSS 5.5 | Microsoft Windows 10 Version 1607Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally. | |
| CVE-2026-83836 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code locally. | |
| CVE-2026-83837 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83838 | 13 Oct 2026 | CVSS 8.0 | Microsoft Windows 10 Version 1607Integer underflow (wrap or wraparound) in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network. | |
| CVE-2026-83826 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 11 version 23H2Untrusted pointer dereference in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83827 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83828 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 11 Version 24H2Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83829 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83830 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83832 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1809Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83792 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 21H2Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83793 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 21H2Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to elevate… | |
| CVE-2026-83794 | 13 Oct 2026 | CVSS 5.5 | Microsoft Windows 10 Version 1607Out-of-bounds read in Windows Portable Device MTP Driver allows an authorized attacker to disclose information locally. | |
| CVE-2026-83795 | 13 Oct 2026 | CVSS 7.5 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network. | |
| CVE-2026-83796 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 11 version 23H2Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83797 | 13 Oct 2026 | CVSS 8.8 | Microsoft Windows 10 Version 1809Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-83798 | 13 Oct 2026 | CVSS 5.5 | Microsoft Windows 10 Version 1607Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally. | |
| CVE-2026-83786 | 13 Oct 2026 | CVSS 4.7 | Microsoft Windows 10 Version 1607Generation of error message containing sensitive information in Windows NTFS allows an authorized attacker to disclose information locally. | |
| CVE-2026-83787 | 13 Oct 2026 | CVSS 5.5 | Microsoft Windows 10 Version 1607Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security feature locally. | |
| CVE-2026-83788 | 13 Oct 2026 | CVSS 4.6 | Microsoft Windows 10 Version 1607Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack. | |
| CVE-2026-83789 | 13 Oct 2026 | CVSS 8.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network. | |
| CVE-2026-83790 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 21H2Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83791 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1809Improper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83781 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 11 version 23H2Improper null termination in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83782 | 13 Oct 2026 | CVSS 9.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-83783 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83784 | 13 Oct 2026 | CVSS 8.8 | Microsoft Windows 10 Version 1607Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network. | |
| CVE-2026-83785 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83775 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to… | |
| CVE-2026-83776 | 13 Oct 2026 | CVSS 6.8 | Microsoft Windows 10 Version 1607Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges with a physical attack. | |
| CVE-2026-83777 | 13 Oct 2026 | CVSS 8.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows Bluetooth Service allows an unauthorized attacker to elevate privileges over an adjacent network. | |
| CVE-2026-83778 | 13 Oct 2026 | CVSS 8.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Microsoft Internet Messaging API allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-83779 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83780 | 13 Oct 2026 | CVSS 9.8 | Microsoft Windows 10 Version 1607Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-83768 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1809Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-83769 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1809Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83770 | 13 Oct 2026 | CVSS 9.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-83771 | 13 Oct 2026 | CVSS 8.8 | Microsoft Windows 11 version 23H2Use after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate privileges over an adjacent network. | |
| CVE-2026-83773 | 13 Oct 2026 | CVSS 5.5 | Microsoft Windows 11 Version 24H2Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose… | |
| CVE-2026-83774 | 13 Oct 2026 | CVSS 4.7 | Microsoft Windows 10 Version 1607Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to… | Fix |
| CVE-2026-83767 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83763 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1809Access of resource using incompatible type ('type confusion') in Windows Input System allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83764 | 13 Oct 2026 | CVSS 5.5 | Microsoft Windows 10 Version 1809Incorrect authorization in Windows Clipboard User Service allows an authorized attacker to disclose information locally. | |
| CVE-2026-83765 | 13 Oct 2026 | CVSS 5.5 | Microsoft Windows 10 Version 1607Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally. | |
| CVE-2026-83766 | 13 Oct 2026 | CVSS 4.2 | Microsoft Windows 10 Version 1607Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security feature over an adjacent network. | |
| CVE-2026-83757 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 11 version 23H2Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83758 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code locally. | |
| CVE-2026-83759 | 13 Oct 2026 | CVSS 8.8 | Microsoft Windows 10 Version 1607Improper control of generation of code ('code injection') in Windows Encrypting File System (EFS) allows an authorized attacker to execute code over… | |
| CVE-2026-83760 | 13 Oct 2026 | CVSS 5.5 | Microsoft Windows 10 Version 1607Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally. | |
| CVE-2026-83761 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1809Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-83762 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1809Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83751 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 11 Version 24H2Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83752 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83753 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 21H2Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83754 | 13 Oct 2026 | CVSS 7.5 | Microsoft Windows 10 Version 1809Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-83755 | 13 Oct 2026 | CVSS 5.5 | Microsoft Windows 10 Version 1607Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally. | |
| CVE-2026-83756 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 21H2Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-83746 | 13 Oct 2026 | CVSS 8.1 | Microsoft Skype for Business Server 2015 CU13Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network. | |
| CVE-2026-83747 | 13 Oct 2026 | CVSS 5.5 | Microsoft Windows 10 Version 1607Out-of-bounds read in Windows Error Reporting allows an authorized attacker to disclose information locally. | |
| CVE-2026-83748 | 13 Oct 2026 | CVSS 9.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-83749 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Use after free in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83750 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Time-of-check time-of-use (toctou) race condition in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83737 | 13 Oct 2026 | CVSS 5.5 | Microsoft Windows 10 Version 1607Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. | |
| CVE-2026-83738 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83739 | 13 Oct 2026 | CVSS 7.5 | Microsoft Windows 10 Version 1809Use after free in Windows Bluetooth Service allows an unauthorized attacker to execute code over an adjacent network. | |
| CVE-2026-83740 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1809Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. |
Page 8 of 19