HighCVSS 7.0
EPSS 0.20%
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
Technology
Windows vulnerabilities
Microsoft Windows client and server operating systems. 11,371 published CVES affecting Windows, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 11,371
- Critical
- 310
- High
- 7,791
- Medium
- 3,108
- Low
- 160
- Unscored
- 2
- CISA KEV
- 252
Latest Windows CVEs
Newest publication first · page 25 of 40 · showing the latest 1,000
-
-
HighCVSS 8.8 EPSS 0.62%
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
-
HighCVSS 7.0 EPSS 0.21%
Use of uninitialized resource in Microsoft ActiveX Installer Service allows an authorized attacker to elevate privileges locally.
-
HighCVSS 7.8 EPSS 0.31%
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
-
MediumCVSS 5.6 EPSS 0.31%
Use of uninitialized resource in Microsoft Windows Codecs Library allows an authorized attacker to disclose information locally.
-
MediumCVSS 4.7 EPSS 0.32%
Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally.
-
MediumCVSS 5.5 EPSS 0.46%
Exposure of sensitive system information to an unauthorized control sphere in Windows Graphics Kernel allows an authorized attacker to disclose information locally.
-
HighCVSS 7.5 EPSS 1.1%
Uncontrolled resource consumption in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
-
MediumCVSS 5.5 EPSS 0.33%
Improper access control in Windows Graphics Kernel allows an authorized attacker to disclose information locally.
-
HighCVSS 7.8 EPSS 0.31%
Inclusion of functionality from untrusted control sphere in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
HighCVSS 7.8 EPSS 0.34%
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96117 Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability
PublishedHighCVSS 7.8 EPSS 0.31%Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally.
-
HighCVSS 8.0 EPSS 0.44%
Double free in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network.
-
MediumCVSS 5.5 EPSS 0.39%
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information locally.
-
HighCVSS 7.8 EPSS 0.31%
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96101 Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability
PublishedMediumCVSS 5.5 EPSS 0.38%Files or directories accessible to external parties in Windows Connected User Experiences and Telemetry allows an authorized attacker to disclose information locally.
-
HighCVSS 7.8 EPSS 0.31%
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
-
HighCVSS 7.8 EPSS 0.31%
Heap-based buffer overflow in Graphic Fonts allows an authorized attacker to elevate privileges locally.
-
MediumCVSS 6.5 EPSS 1.0%
Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network.
-
HighCVSS 7.5 EPSS 0.57%
Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.
-
CriticalCVSS 9.8 EPSS 1.00%
Heap-based buffer overflow in Microsoft Color Management allows an unauthorized attacker to execute code over a network.
-
HighCVSS 7.5 EPSS 1.2%
Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network.
-
CVE-2026-96072 Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
PublishedHighCVSS 7.0 EPSS 0.26%Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.
-
HighCVSS 7.8 EPSS 0.31%
Stack-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.
-
HighCVSS 8.8 EPSS 0.69%
Heap-based buffer overflow in DNS Server allows an authorized attacker to execute code over a network.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.