Platform

Windows

10,642 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

30 results · Clear filters · Feed

Critical 9.1

CVE-2026-89282 Public exploit

CVE-2026-89282

The Apache Lounge Windows distribution of Apache HTTP Server build contains an insecure installation directory permissions vulnerability through its default install directory on C:\, which inherits write access for Authenticated Users.

Apache HTTP Server Project Apache Lounge Windows Windows

Sep 22, 2026
Critical 9.8

CVE-2026-62878 Public exploit

Windows DNS Server Remote Code Execution Vulnerability

Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Aug 11, 2026
Critical 9.8

CVE-2026-56190 Public exploit

Remote Desktop Protocol Remote Code Execution Vulnerability

Use of uninitialized resource in Windows RDP allows an unauthorized attacker to execute code over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 14, 2026
Critical 9.8

CVE-2026-41096 Public exploit

Windows DNS Client Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Windows DNS allows an unauthorized attacker to execute code over a network.

Microsoft Windows Server 2025 Windows Server 2025 (Server Core installation) Windows 11 Version 24H2 Windows

May 12, 2026
Critical 9.8

CVE-2026-41089 Public exploit EPSS 78%

Windows Netlogon Remote Code Execution Vulnerability

Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

May 12, 2026
Critical 9.8

CVE-2026-33824 Exploited Public exploit EPSS 77%

Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability

Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 14, 2026
KEV Aug 18, 2026
Critical 9.8

CVE-2025-59287 Exploited Public exploit EPSS 100%

Windows Server Update Service (WSUS) Remote Code Execution Vulnerability

Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Oct 14, 2025
KEV Oct 24, 2025
Critical 9.8

CVE-2025-50165 Public exploit EPSS 11%

Windows Graphics Component Remote Code Execution Vulnerability

Untrusted pointer dereference in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

Microsoft Windows Server 2025 Windows Server 2025 (Server Core installation) Windows 11 Version 24H2 Windows

Aug 12, 2025
Critical 9.8

CVE-2025-47981 Public exploit EPSS 41%

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows SPNEGO Extended Negotiation allows an unauthorized attacker to execute code over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 8, 2025
Critical 9.8

CVE-2025-21298 Public exploit EPSS 74%

Windows OLE Remote Code Execution Vulnerability

Windows OLE Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 14, 2025
Critical 9.8

CVE-2024-49112 Public exploit EPSS 72%

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 10, 2024
Critical 9.0

CVE-2024-38124 Public exploit

Windows Netlogon Elevation of Privilege Vulnerability

Windows Netlogon Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Oct 8, 2024
Critical 9.8

CVE-2024-38063 Public exploit EPSS 71%

Windows TCP/IP Remote Code Execution Vulnerability

Windows TCP/IP Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 13, 2024
Critical 9.8

CVE-2024-38077 Public exploit EPSS 84%

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Jul 9, 2024
Critical 9.8

CVE-2023-21554 Public exploit EPSS 95%

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 11, 2023
Critical 9.8

CVE-2022-34718 Public exploit EPSS 57%

Windows TCP/IP Remote Code Execution Vulnerability

Windows TCP/IP Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Sep 13, 2022
Critical 9.8

CVE-2022-34715 Public exploit EPSS 80%

Windows Network File System Remote Code Execution Vulnerability

Windows Network File System Remote Code Execution Vulnerability

Microsoft Windows Server 2022 Windows

Aug 9, 2022
Critical 9.8

CVE-2022-30136 Public exploit EPSS 73%

Windows Network File System Remote Code Execution Vulnerability

Windows Network File System Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2016 Windows

Jun 15, 2022
Critical 9.8

CVE-2022-26937 Public exploit EPSS 76%

Windows Network File System Remote Code Execution Vulnerability

Windows Network File System Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

May 10, 2022
Critical 9.8

CVE-2022-26809 Public exploit EPSS 91%

Remote Procedure Call Runtime Remote Code Execution Vulnerability

Remote Procedure Call Runtime Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 15, 2022
Critical 9.8

CVE-2022-24497 Public exploit EPSS 35%

Windows Network File System Remote Code Execution Vulnerability

Windows Network File System Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 15, 2022
Critical 9.8

CVE-2022-24491 Public exploit EPSS 33%

Windows Network File System Remote Code Execution Vulnerability

Windows Network File System Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 15, 2022
Critical 9.8

CVE-2022-21907 Public exploit EPSS 93%

HTTP Protocol Stack Remote Code Execution Vulnerability

HTTP Protocol Stack Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 11, 2022
Critical 9.8

CVE-2021-31166 Exploited Public exploit EPSS 100%

HTTP Protocol Stack Remote Code Execution Vulnerability

HTTP Protocol Stack Remote Code Execution Vulnerability

Microsoft Windows 10 Version 20H2 Windows Server version 20H2 Windows 10 Version 2004 Windows

May 11, 2021
KEV Apr 6, 2022
Critical 9.9

CVE-2021-28476 Public exploit EPSS 39%

Windows Hyper-V Remote Code Execution Vulnerability

Windows Hyper-V Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

May 11, 2021
Critical 10.0

CVE-2020-1350 Exploited Public exploit EPSS 97%

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle re…

Microsoft Windows Server, version 1903 (Server Core installation) Windows Server, version 1909 (Server Core installation) Windows Server Windows

Jul 14, 2020
KEV Nov 3, 2021
Critical 10.0

CVE-2020-0796 Exploited · Ransomware Public exploit EPSS 100%

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol …

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Mar 12, 2020
KEV Feb 10, 2022
Critical 9.8

CVE-2020-0646 Exploited Public exploit EPSS 99%

A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.…

Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 Microsoft .NET Framework 3.5.1 Windows

Jan 14, 2020
KEV Nov 3, 2021
Critical 9.8

CVE-2019-0708 Exploited · Ransomware Public exploit EPSS 100%

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an una…

Microsoft Windows Windows Server Windows

May 16, 2019
KEV Nov 3, 2021
Critical 9.8

CVE-2017-8543 Exploited Public exploit EPSS 74%

Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 200…

Microsoft Microsoft Windows Windows

Jun 15, 2017
KEV May 24, 2022