Improper access control in Windows Hyper-V allows an authorized attacker to perform spoofing locally.
Technology
Windows vulnerabilities
Microsoft Windows client and server operating systems. 11,371 published CVES affecting Windows, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 11,371
- Critical
- 310
- High
- 7,791
- Medium
- 3,108
- Low
- 160
- Unscored
- 2
- CISA KEV
- 252
Latest Windows CVEs
Newest publication first · page 9 of 40 · showing the latest 1,000
-
MediumCVSS 5.3 EPSS 0.31%
-
HighCVSS 8.1 EPSS 0.71%
Improper verification of cryptographic signature in Windows Remote Procedure Call Runtime allows an unauthorized attacker to execute code over a network.
-
MediumCVSS 5.5 EPSS 0.41%
Improper access control in Windows Network File System allows an authorized attacker to disclose information locally.
-
HighCVSS 7.5 EPSS 0.58%
Weak authentication in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network.
-
CVE-2026-118283 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
PublishedHighCVSS 8.8 EPSS 0.34%Stack-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
CVE-2026-118280 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
PublishedHighCVSS 7.8 EPSS 0.27%Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
CVE-2026-118279 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
PublishedHighCVSS 8.8 EPSS 0.39%Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
CVE-2026-118278 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
PublishedHighCVSS 8.8 EPSS 0.34%Out-of-bounds read in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
CVE-2026-118277 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
PublishedHighCVSS 8.8 EPSS 0.39%Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
CVE-2026-118232 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
PublishedHighCVSS 8.8 EPSS 0.39%Out-of-bounds read in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
CVE-2026-118229 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
PublishedHighCVSS 8.8 EPSS 0.39%Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
CVE-2026-118228 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
PublishedHighCVSS 8.8 EPSS 0.39%Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
CVE-2026-118227 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
PublishedHighCVSS 8.8 EPSS 0.39%Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
CVE-2026-118226 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
PublishedHighCVSS 8.8 EPSS 0.34%Stack-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
CVE-2026-118225 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
PublishedHighCVSS 8.8 EPSS 0.39%Inclusion of functionality from untrusted control sphere in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
CVE-2026-118224 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
PublishedHighCVSS 7.8 EPSS 0.27%Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
CVE-2026-118223 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
PublishedHighCVSS 7.8 EPSS 0.31%Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
CVE-2026-118222 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
PublishedHighCVSS 7.8 EPSS 0.34%Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
CVE-2026-118221 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
PublishedHighCVSS 8.8 EPSS 0.39%Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
HighCVSS 7.8 EPSS 0.34%
Double free in Windows Multiple Provider Router allows an authorized attacker to elevate privileges locally.
-
CVE-2026-118219 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
PublishedHighCVSS 8.8 EPSS 0.34%Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
CVE-2026-118218 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
PublishedHighCVSS 8.8 EPSS 0.34%Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
CVE-2026-118217 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
PublishedHighCVSS 8.8 EPSS 0.34%Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
CVE-2026-118216 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
PublishedHighCVSS 8.8 EPSS 0.34%Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
CVE-2026-118215 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
PublishedHighCVSS 7.8 EPSS 0.31%Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.