Vendor
Microsoft
14,257 known vulnerabilities.
Products
3,075 results · Clear filters · Feed
-
Medium 6.7
Windows Kernel Elevation of Privilege Vulnerability
Double free in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
Medium 5.9
Windows Internet Information Services Denial of Service Vulnerability
Uncontrolled resource consumption in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.
-
Medium 6.4
Windows MIDI Service Module Elevation of Privileges Vulnerability
Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
-
Medium 4.9CVE-2026-119905 Public exploit
Windows DNS Spoofing Vulnerability
Improper input validation in Windows DNS allows an authorized attacker to perform spoofing over a network.
-
Medium 5.3
Windows DHCP Server Denial of Service Vulnerability
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over a network.
-
Medium 6.5
ActiveSyncProvider Information Disclosure Vulnerability
Out-of-bounds read in ActiveSyncProvider allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Windows Installer Information Disclosure Vulnerability
Use of uninitialized resource in Windows Installer allows an unauthorized attacker to disclose information over a network.
-
Medium 6.8
Windows Storport Miniport Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Storport Miniport Driver allows an unauthorized attacker to elevate privileges with a physical attack.
-
Medium 6.8
Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.
-
Medium 5.3
Windows Remote Desktop Services Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Remote Desktop Services allows an authorized attacker to disclose information over a network.
-
Medium 4.0
Windows Storport Miniport Driver Information Disclosure Vulnerability
Numeric truncation error in Windows Storport Miniport Driver allows an authorized attacker to disclose information with a physical attack.
-
Medium 6.4
Windows USB Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows USB Driver allows an unauthorized attacker to elevate privileges with a physical attack.
-
Medium 6.4
Windows IP Translation Configuration Service Elevation of Privilege Vulnerability
Use after free in Windows IP Translation Configuration Service allows an authorized attacker to elevate privileges locally.
-
Medium 6.4
Windows Failover Cluster Elevation of Privilege Vulnerability
Use after free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally.
-
Medium 5.3
Windows Installer Security Feature Bypass Vulnerability
Improper verification of cryptographic signature in Windows Installer allows an unauthorized attacker to bypass a security feature over a network.
-
Medium 5.5
Windows Kernel Information Disclosure Vulnerability
Buffer over-read in Windows Kernel allows an authorized attacker to disclose information locally.
-
Medium 5.5
Win32k Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows COM+ Event System Service Information Disclosure Vulnerability
Buffer over-read in Windows COM+ Event System Service allows an authorized attacker to disclose information locally.
-
Medium 6.7
Windows Installer Elevation of Privilege Vulnerability
Missing authorization in Windows Installer allows an authorized attacker to elevate privileges locally.
-
Medium 5.3
Windows Message Queuing Denial of Service Vulnerability
Improper input validation in Windows Message Queuing allows an authorized attacker to deny service over a network.
-
Medium 6.3
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
-
Medium 4.7
Windows Graphics Kernel Information Disclosure Vulnerability
Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to disclose information locally.
-
Medium 4.7
Windows Installer Information Disclosure Vulnerability
Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.
-
Medium 4.7
Windows Management Services Information Disclosure Vulnerability
Use after free in Windows Management Services allows an authorized attacker to disclose information locally.
-
Medium 5.9
Windows BitLocker Security Feature Bypass Vulnerability
Improper access control in Windows BitLocker allows an authorized attacker to bypass a security feature with a physical attack.
-
Medium 6.8
Windows Storport Miniport Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Storport Miniport Driver allows an unauthorized attacker to elevate privileges with a physical attack.
-
Medium 6.8
Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to elevate privileges with a physical attack.
-
Medium 5.5
Win32k Information Disclosure Vulnerability
Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.
-
Medium 6.8
Windows Storport Miniport Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Storport Miniport Driver allows an unauthorized attacker to execute code with a physical attack.
-
Medium 5.9
Windows Client for NFS Security Feature Bypass Vulnerability
Improper access control in Windows Client for NFS allows an unauthorized attacker to bypass a security feature over a network.
-
Medium 4.0
Storport.sys Driver Information Disclosure Vulnerability
Out-of-bounds read in Storport.sys Driver allows an authorized attacker to disclose information with a physical attack.
-
Medium 6.5
Windows Remote Access API Tampering Vulnerability
Improper access control in Windows Remote Access API allows an authorized attacker to perform tampering locally.
-
Medium 6.6
Windows Enhanced Storage Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Enhanced Storage allows an authorized attacker to execute code with a physical attack.
-
Medium 4.7
Windows Hyper-V Denial of Service Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to deny service locally.
-
Medium 6.6
Windows Smart Card Elevation of Privilege Vulnerability
Use of uninitialized resource in Windows Smart Card allows an authorized attacker to elevate privileges with a physical attack.
-
Medium 6.5
Microsoft Office SharePoint Information Disclosure Vulnerability
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Outlook Spoofing Vulnerability
Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.
KEV Nov 10, 2026 -
Medium 6.5
Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Excel Information Disclosure Vulnerability
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.