Windows 10 at a glance
6 of the exploited vulnerabilities are known to be used by ransomware (CISA).
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 0 | 0 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 0 | 0 |
Latest advisories
-
High max 9.8WID-SEC-2026-4478 745 CVEs
Microsoft Windows: Mehrere Schwachstellen
Ein Angreifer kann diese Schwachstellen in Microsoft Windows Server in den Versionen 2012, 2012 R2, 2016, 2019 und 2022, sowie in Microsoft Windows in den Versionen 10 und 11, im Microsoft Windows Admin Center und im Microsoft Configuration Manager ausnutzen,…
-
Critical max 9.8
Microsoft Windows und Windows Server: Mehrere Schwachstellen
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Versionen von Microsoft Windows Server und Microsoft Windows ausnutzen, um seine Privilegien auf administrative Rechte zu erhöhen, um beliebigen Code auszuführen, um Informationen…
first Oct 13, 2026 -
Critical max 9.8
Microsoft Windows: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in verschiedenen Versionen von Microsoft Windows Server, Microsoft Windows 10 und Microsoft Windows 11 ausnutzen, um seine Privilegien zu erhöhen, um einen Denial of Service herbeizuführen, um Informationen offenzuleg…
first Sep 8, 2026 -
Medium
Microsoft Windows: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit Benutzerrechten
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen im Adobe Flash Player ausnutzen, um beliebigen Programmcode mit Benutzerrechten auszuführen.
first Oct 11, 2016 -
Critical max 9.8
Microsoft Windows Produkte: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows 10, Microsoft Windows Server 2019, Microsoft Windows Server 2022, Microsoft Exchange, Microsoft Wind…
first Aug 11, 2026
214 results · Feed
-
Medium 6.7CVE-2024-6769 Public exploit
Medium to High Integrity Privilege Escalation in Microsoft Windows
A DLL Hijacking caused by drive remapping combined with a poisoning of the activation cache in Microsoft Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, and Windows Server 2022 allows a malicious authenticated attacker to elevate from a medi…
-
Medium 6.8CVE-2024-6768 Public exploit
Denial of Service in CLFS.sys
A Denial of Service in CLFS.sys in Microsoft Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, and Windows Server 2022 allows a malicious authenticated low-privilege user to cause a Blue Screen of Death via a forced call to the KeBugCheckEx fu…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations…
-
Unscored —CVE-2019-0581 EPSS 14%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —CVE-2019-0577 EPSS 17%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —CVE-2019-0576 EPSS 17%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations…
-
Unscored —
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windo…
-
Unscored —CVE-2019-0583 EPSS 16%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —CVE-2019-0575 EPSS 14%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —CVE-2019-0582 EPSS 12%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windo…
-
Unscored —
An information disclosure vulnerability exists when Windows Subsystem for Linux improperly handles objects in memory, a…
-
Unscored —CVE-2019-0580 EPSS 17%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —CVE-2019-0579 EPSS 17%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —CVE-2019-0552 Public exploit
An elevation of privilege exists in Windows COM Desktop Broker, aka "Windows COM Elevation of Privilege Vulnerability."…
-
Unscored —CVE-2019-0547 EPSS 71%
A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP respo…
-
Unscored —CVE-2019-0584 EPSS 14%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input fro…
-
Unscored —
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windo…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations…
-
Unscored —
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input fro…
-
Unscored —
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windo…
-
Unscored —CVE-2019-0570 Public exploit
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka "Wind…
-
Unscored —
An information disclosure vulnerability exists in Windows kernel that could allow an attacker to retrieve information t…
-
Unscored —
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle …
-
Unscored —CVE-2018-8634 EPSS 15%
A remote code execution vulnerability exists in Windows where Microsoft text-to-speech fails to properly handle objects…
-
Unscored —
A Denial Of Service vulnerability exists when Connected User Experiences and Telemetry Service fails to validate certai…
-
High 8.4
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…
KEV Mar 3, 2025 -
Unscored —
An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersona…
-
Unscored —
An information disclosure vulnerability exists when Remote Procedure Call runtime improperly initializes objects in mem…
-
Unscored —
A denial of service vulnerability exists when Windows improperly handles objects in memory, aka "Windows Denial of Serv…
-
High 7.8
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka …
KEV May 24, 2022 -
Unscored —
An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Informat…
-
Unscored —
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its …
-
Unscored —CVE-2018-8626 EPSS 21%
A remote code execution vulnerability exists in Windows Domain Name System (DNS) servers when they fail to properly han…
-
Unscored —
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its …
-
Unscored —
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windo…
-
Unscored —CVE-2018-8256 EPSS 23%
A remote code execution vulnerability exists when PowerShell improperly handles specially crafted files, aka "Microsoft…