HighCVSS 7.0
EPSS 0.30%
Use after free in Winlogon allows an authorized attacker to elevate privileges locally.
Technology
Windows vulnerabilities
Microsoft Windows client and server operating systems. 11,371 published CVES affecting Windows, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 11,371
- Critical
- 310
- High
- 7,791
- Medium
- 3,108
- Low
- 160
- Unscored
- 2
- CISA KEV
- 252
Latest Windows CVEs
Newest publication first · page 13 of 40 · showing the latest 1,000
-
-
HighCVSS 7.2 EPSS 0.92%
Improper link resolution before file access ('link following') in Windows DNS allows an authorized attacker to elevate privileges over a network.
-
HighCVSS 8.8 EPSS 0.72%
Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.
-
HighCVSS 7.5 EPSS 1.2%
Buffer over-read in Windows Message Queuing allows an unauthorized attacker to deny service over a network.
-
HighCVSS 7.0 EPSS 0.27%
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could...
-
HighCVSS 7.5 EPSS 1.4%
Integer underflow (wrap or wraparound) in Microsoft QUIC allows an unauthorized attacker to deny service over a network.
-
CVE-2026-105510 Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability
PublishedHighCVSS 7.0 EPSS 0.27%Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.
-
HighCVSS 7.8 EPSS 0.34%
An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior. A locally authenticated attacker could run arbitrary code with elevated system privileges. An attac...
-
MediumCVSS 5.0 EPSS 0.52%
Buffer over-read in Windows Shell allows an authorized attacker to disclose information locally.
-
HighCVSS 7.8 EPSS 0.38%
Relative path traversal in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.
-
HighCVSS 7.0 EPSS 0.27%
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could...
-
HighCVSS 7.8 EPSS 0.32%
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
-
HighCVSS 7.8 EPSS 0.35%
Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally.
-
CVE-2026-105499 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
PublishedHighCVSS 8.8 EPSS 0.34%Out-of-bounds read in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
CVE-2026-105498 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
PublishedHighCVSS 8.8 EPSS 0.34%Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
CVE-2026-105497 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
PublishedHighCVSS 8.8 EPSS 0.32%Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
CVE-2026-105496 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
PublishedHighCVSS 8.8 EPSS 0.34%Double free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
CVE-2026-105495 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
PublishedHighCVSS 8.8 EPSS 0.34%Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
CVE-2026-105493 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
PublishedHighCVSS 8.8 EPSS 0.34%Stack-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
MediumCVSS 5.3 EPSS 0.82%
Out-of-bounds read in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network.
-
CVE-2026-105491 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
PublishedHighCVSS 8.8 EPSS 0.34%Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
CVE-2026-105490 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
PublishedHighCVSS 8.8 EPSS 0.34%Stack-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
HighCVSS 7.8 EPSS 0.34%
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
-
CVE-2026-105026 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
PublishedHighCVSS 8.8 EPSS 0.34%Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
CVE-2026-105025 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
PublishedHighCVSS 7.8 EPSS 0.27%Double free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.