Windows at a glance
17 of the exploited vulnerabilities are known to be used by ransomware (CISA).
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 0 | 0 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 2 | 0 |
| Aug 2025 | 1 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 2 | 0 |
Latest advisories
-
High max 9.8
Kwetsbaarheden verholpen in Microsoft Windows
Microsoft heeft meerdere kwetsbaarheden verholpen in Windows.
first Sep 8, 2026 -
High max 9.8NCSC-2026-0472 13 CVEs
Kwetsbaarheden verholpen in Microsoft Windows
Microsoft heeft kwetsbaarheden verholpen in Windows.
-
Critical max 9.8
Microsoft Windows und Windows Server: Mehrere Schwachstellen
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Versionen von Microsoft Windows Server und Microsoft Windows ausnutzen, um seine Privilegien auf administrative Rechte zu erhöhen, um beliebigen Code auszuführen, um Informationen…
first Oct 13, 2026 -
High max 7.0NCSC-2026-0470 1 CVE
Kwetsbaarheid verholpen in Windows Paint van Microsoft
Microsoft heeft een kwetsbaarheid verholpen in Windows Paint.
-
High max 8.8
Microsoft Developer Tools: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in Microsoft Visual Studio Code, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft .NET Framework, Microsoft Windows Server 2019, Microsoft Windows Server 2022, …
first Aug 11, 2026
780 results · Feed
-
High 7.4
The on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the online Microsoft recommended d…
-
High 7.4
The Microsoft vulnerable driver block list is implemented as Windows Defender Application Control (WDAC) policy. Entrie…
-
High 7.0
Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability
Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerabilit…
-
Medium 5.0
An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.2200…
-
Medium 5.0
An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.2200…
-
Unscored —
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its …
-
Unscored —
An elevation of privilege vulnerability exists in the way that the SharedStream Library handles objects in memory, aka …
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects …
-
Unscored —CVE-2020-1436 EPSS 21%
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted fonts.F…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Network Location Awareness Service handles o…
-
Unscored —CVE-2020-1435 EPSS 14%
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles object…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Sync Host Service handles objects in memory,…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privileg…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit t…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects …
-
Unscored —
An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash,…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects …
-
Unscored —
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windo…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Wind…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory…
-
Unscored —
An information disclosure vulnerability exists when Windows Error Reporting improperly handles file operations.To explo…
-
Unscored —CVE-2020-1421 EPSS 75%
A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file…
-
Unscored —
An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, a…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Diagnostics Execution Service fails to properly sanitiz…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Wind…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Wind…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Wind…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka …
-
Unscored —CVE-2020-1412 EPSS 14%
A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, ak…
-
Unscored —CVE-2020-1410 EPSS 12%
A remote code execution vulnerability exists when Windows Address Book (WAB) improperly processes vcard files.To exploi…
-
Unscored —CVE-2020-1409 EPSS 12%
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Re…
-
Unscored —
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedde…
-
Unscored —CVE-2020-1407 EPSS 11%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Network List Service handles objects in memo…
-
Unscored —
An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handl…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Wind…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To …
-
Unscored —CVE-2020-1400 EPSS 24%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —CVE-2020-1401 EPSS 13%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Wind…