[ Vendor · 1,865 CVEs ]
Microsoft
CVEs affecting Microsoft published in the last 30 days, plus any Microsoft CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-83741 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1809Use after free in Internet Explorer allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83727 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83728 | 13 Oct 2026 | CVSS 8.8 | Microsoft Windows 10 Version 1607Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally. | |
| CVE-2026-83732 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83733 | 13 Oct 2026 | CVSS 5.5 | Microsoft Windows 10 Version 1607Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally. | |
| CVE-2026-83735 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 11 version 23H2Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83736 | 13 Oct 2026 | CVSS 5.5 | Microsoft Windows 10 Version 21H2Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83721 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 11 Version 24H2Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83722 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83723 | 13 Oct 2026 | CVSS 5.5 | Microsoft Windows 10 Version 1607Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally. | |
| CVE-2026-83724 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83725 | 13 Oct 2026 | CVSS 8.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-83726 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83715 | 13 Oct 2026 | CVSS 7.1 | Microsoft Windows 10 Version 1607Missing authentication for critical function in Windows Error Reporting allows an authorized attacker to perform tampering locally. | |
| CVE-2026-83716 | 13 Oct 2026 | CVSS 8.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally. | |
| CVE-2026-83717 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83718 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83719 | 13 Oct 2026 | CVSS 5.5 | Microsoft Windows 10 Version 1809Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally. | |
| CVE-2026-83720 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 11 version 26H1Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83708 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83709 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows NTLM allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83710 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83712 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1809Out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally. | |
| CVE-2026-83713 | 13 Oct 2026 | CVSS 5.5 | Microsoft Windows 10 Version 1607Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally. | |
| CVE-2026-83714 | 13 Oct 2026 | CVSS 5.5 | Microsoft Windows 10 Version 1607Use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to disclose information locally. | |
| CVE-2026-83703 | 13 Oct 2026 | CVSS 6.5 | Microsoft Windows 10 Version 1607Out-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service over an adjacent network. | |
| CVE-2026-83704 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate… | |
| CVE-2026-83705 | 13 Oct 2026 | CVSS 5.5 | Microsoft Windows 10 Version 1607Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an authorized attacker to disclose information… | |
| CVE-2026-83706 | 13 Oct 2026 | CVSS 6.7 | Microsoft Windows 11 Version 24H2Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83707 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83697 | 13 Oct 2026 | CVSS 4.7 | Microsoft Windows 10 Version 1809Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering… | |
| CVE-2026-83698 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83699 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Stack-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83700 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1809Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83701 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83702 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83691 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83692 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 21H2Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83693 | 13 Oct 2026 | CVSS 9.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-83694 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83695 | 13 Oct 2026 | CVSS 5.5 | Microsoft Windows 10 Version 1607Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally. | |
| CVE-2026-83696 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1809Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83686 | 13 Oct 2026 | CVSS 5.5 | Microsoft Windows 10 Version 1607Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. | |
| CVE-2026-83687 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 11 version 23H2Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83688 | 13 Oct 2026 | CVSS 8.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-83689 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83690 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1809Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83679 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 11 version 23H2Use after free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83680 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83681 | 13 Oct 2026 | CVSS 5.5 | Microsoft PowerToysWeak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally. | |
| CVE-2026-83682 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83683 | 13 Oct 2026 | CVSS 6.5 | Microsoft Windows 10 Version 1607Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information over a network. | |
| CVE-2026-83685 | 13 Oct 2026 | CVSS 6.5 | Microsoft Windows 10 Version 1607Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network. | |
| CVE-2026-83671 | 13 Oct 2026 | CVSS 6.5 | Microsoft Windows 10 Version 1809Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally. | |
| CVE-2026-83672 | 13 Oct 2026 | CVSS 4.7 | Microsoft Windows 10 Version 1607Exposure of sensitive system information to an unauthorized control sphere in Windows Installer allows an authorized attacker to disclose information… | |
| CVE-2026-83674 | 13 Oct 2026 | CVSS 8.1 | Microsoft Windows 10 Version 1607Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. | |
| CVE-2026-83675 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 11 Version 24H2Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83676 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 21H2Integer underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83677 | 13 Oct 2026 | CVSS 7.5 | Microsoft Windows 11 Version 24H2Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over a network. | |
| CVE-2026-83678 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83665 | 13 Oct 2026 | CVSS 7.5 | Microsoft Windows 10 Version 1607Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network. | |
| CVE-2026-83666 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Concurrent execution using shared resource with improper synchronization ('race condition') in Active Directory Certificate Services (AD CS) allows… | |
| CVE-2026-83667 | 13 Oct 2026 | CVSS 6.5 | Microsoft Windows 10 Version 1607Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network. | |
| CVE-2026-83668 | 13 Oct 2026 | CVSS 5.5 | Microsoft Windows 10 Version 1607Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally. | |
| CVE-2026-83669 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Use of uninitialized resource in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83670 | 13 Oct 2026 | CVSS 7.5 | Microsoft Windows 10 Version 1607Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose information over a network. | |
| CVE-2026-83656 | 13 Oct 2026 | CVSS 4.7 | Microsoft Windows 10 Version 21H2Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally. | |
| CVE-2026-83657 | 13 Oct 2026 | CVSS 5.5 | Microsoft Windows 10 Version 1809Weak authentication in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally. | |
| CVE-2026-83658 | 13 Oct 2026 | CVSS 5.5 | Microsoft Windows 10 Version 1809Improper access control in Windows Error Reporting allows an authorized attacker to disclose information locally. | |
| CVE-2026-83659 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges… | |
| CVE-2026-83664 | 13 Oct 2026 | CVSS 5.5 | Microsoft Windows 10 Version 1607Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an authorized attacker to disclose… | |
| CVE-2026-83649 | 13 Oct 2026 | CVSS 6.5 | Microsoft Windows 10 Version 1607Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network. | |
| CVE-2026-83650 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83651 | 13 Oct 2026 | CVSS 6.5 | Microsoft Windows 10 Version 1607Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network. | |
| CVE-2026-83652 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83654 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 21H2Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83655 | 13 Oct 2026 | CVSS 7.5 | Microsoft Windows 10 Version 1607Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a network. | |
| CVE-2026-83643 | 13 Oct 2026 | CVSS 8.8 | Microsoft Windows 10 Version 1607Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-83644 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83645 | 13 Oct 2026 | CVSS 7.5 | Microsoft Windows 10 Version 1607Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service… | |
| CVE-2026-83646 | 13 Oct 2026 | CVSS 4.8 | Microsoft Windows 10 Version 1607Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an authorized attacker to perform spoofing… | |
| CVE-2026-83647 | 13 Oct 2026 | CVSS 7.5 | Microsoft Windows 10 Version 1607Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network. | |
| CVE-2026-83648 | 13 Oct 2026 | CVSS 6.5 | Microsoft Windows 10 Version 21H2Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network. | |
| CVE-2026-83638 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83639 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83640 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. | |
| CVE-2026-83641 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83642 | 13 Oct 2026 | CVSS 8.8 | Microsoft Windows 10 Version 1607Access of resource using incompatible type ('type confusion') in DNS Server allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-83587 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83588 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83634 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 11 version 23H2Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83635 | 13 Oct 2026 | CVSS 7.5 | Microsoft Windows Server 2012Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network. | |
| CVE-2026-83636 | 13 Oct 2026 | CVSS 6.5 | Microsoft Windows 10 Version 21H2Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally. | |
| CVE-2026-83637 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83582 | 13 Oct 2026 | CVSS 4.7 | Microsoft Windows 10 Version 1607Use after free in Windows Graphics Kernel allows an authorized attacker to disclose information locally. | |
| CVE-2026-83583 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83584 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83585 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83586 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 11 version 23H2Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83574 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
Page 9 of 19