microsoft / windows
990 known vulnerabilities in microsoft windows.
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2026-11049 | Medium | 0.3% | 8.8 | Use after free in Password Manager in Google Chrome prior to 149.0.7827.53 allow… | |
| CVE-2026-11050 | Medium | 0.3% | 8.8 | Use after free in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote at… | |
| CVE-2026-11055 | Medium | 0.3% | 8.8 | Use after free in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allow… | |
| CVE-2026-11059 | Medium | 0.3% | 8.8 | Use after free in Blink in Google Chrome prior to 149.0.7827.53 allowed a remote… | |
| CVE-2026-11060 | Medium | 0.3% | 8.8 | Use after free in Media in Google Chrome on Windows prior to 149.0.7827.53 allow… | |
| CVE-2026-11077 | Medium | 0.3% | 8.8 | Bad cast in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attack… | |
| CVE-2026-11086 | Medium | 0.3% | 8.8 | Inappropriate implementation in Dawn in Google Chrome prior to 149.0.7827.53 all… | |
| CVE-2026-11125 | Medium | 0.3% | 8.8 | Use after free in Compositing in Google Chrome prior to 149.0.7827.53 allowed a … | |
| CVE-2026-11130 | Medium | 0.3% | 8.8 | Use after free in Media in Google Chrome prior to 149.0.7827.53 allowed a remote… | |
| CVE-2026-11136 | Medium | 0.3% | 8.8 | Use after free in Canvas in Google Chrome prior to 149.0.7827.53 allowed a remot… | |
| CVE-2026-11164 | Medium | 0.3% | 8.8 | Use after free in Blink in Google Chrome prior to 149.0.7827.53 allowed a remote… | |
| CVE-2026-11171 | Medium | 0.3% | 8.8 | Integer overflow in Blink in Google Chrome prior to 149.0.7827.53 allowed a remo… | |
| CVE-2026-11173 | Medium | 0.3% | 8.8 | Out of bounds write in V8 in Google Chrome prior to 149.0.7827.53 allowed a remo… | |
| CVE-2026-11211 | Medium | 0.3% | 8.8 | Integer overflow in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote … | |
| CVE-2026-11262 | Medium | 0.3% | 8.8 | Use after free in TabStrip in Google Chrome prior to 149.0.7827.53 allowed a rem… | |
| CVE-2026-9957 | Medium | 0.3% | 8.8 | Use after free in PDF in Google Chrome prior to 148.0.7778.216 allowed a remote … | |
| CVE-2026-9968 | Medium | 0.3% | 8.8 | Integer overflow in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote… | |
| CVE-2026-87585 | Medium | 0.3% | 8.8 | Double free in PDFium in Google Chrome on on Windows prior to 153.0.8010.36 allo… | |
| CVE-2026-11030 | Medium | 0.3% | 8.8 | Use after free in Network in Google Chrome prior to 149.0.7827.53 allowed a remo… | |
| CVE-2026-11037 | Medium | 0.3% | 9.6 | Out of bounds write in Codecs in Google Chrome prior to 149.0.7827.53 allowed a … | |
| CVE-2026-47911 | Medium | 0.3% | 7.8 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a… | |
| CVE-2026-84351 | Medium | 0.3% | 8.3 | Buffer overflow in GPU in Google Chrome on on Windows prior to 152.0.7977.75 all… | |
| CVE-2026-87648 | Medium | 0.3% | 8.3 | Use after free in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 al… | |
| CVE-2026-11641 | Medium | 0.3% | 7.5 | Use after free in Bluetooth in Google Chrome on Windows prior to 149.0.7827.103 … | |
| CVE-2026-35558 | Medium | 0.3% | 7.8 | Improper neutralization of special elements in the authentication components in … | |
| CVE-2026-11191 | Medium | 0.3% | 8.8 | Out of bounds memory access in ANGLE in Google Chrome prior to 149.0.7827.53 all… | |
| CVE-2026-21277 | Medium | 0.3% | 7.8 | InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by a Heap-based … | |
| CVE-2026-21304 | Medium | 0.3% | 7.8 | InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by a Heap-based … | |
| CVE-2026-27311 | Medium | 0.3% | 7.8 | Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Heap-based Buffer O… | |
| CVE-2026-27312 | Medium | 0.3% | 7.8 | Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Heap-based Buffer O… | |
| CVE-2026-11643 | Medium | 0.3% | 8.1 | Use after free in Proxy in Google Chrome prior to 149.0.7827.103 allowed a remot… | |
| CVE-2026-11629 | Medium | 0.3% | 8.8 | Use after free in Ozone in Google Chrome prior to 149.0.7827.103 allowed a remot… | |
| CVE-2026-10933 | Medium | 0.3% | 8.3 | Use after free in Audio in Google Chrome on Windows prior to 149.0.7827.53 allow… | |
| CVE-2026-27310 | Medium | 0.3% | 7.8 | Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Heap-based Buffer O… | |
| CVE-2026-77101 | Medium | 0.3% | 7.5 | CommServe contained a stack-based buffer overflow issue affecting service availa… | |
| CVE-2026-77102 | Medium | 0.3% | 7.5 | CommServe contained a heap-based buffer overflow issue affecting service availab… | |
| CVE-2026-87644 | Medium | 0.3% | 8.3 | Incorrect authorization in Views in Google Chrome on on Windows prior to 153.0.8… | |
| CVE-2026-11153 | Medium | 0.3% | 9.1 | Side-channel information leakage in Forms in Google Chrome prior to 149.0.7827.5… | |
| CVE-2026-11242 | Medium | 0.3% | 7.5 | Insufficient validation of untrusted input in Plugins in Google Chrome prior to … | |
| CVE-2026-11255 | Medium | 0.3% | 7.5 | Insufficient validation of untrusted input in Storage Access API in Google Chrom… | |
| CVE-2026-11632 | Medium | 0.3% | 7.5 | Use after free in TabStrip in Google Chrome prior to 149.0.7827.103 allowed a re… | |
| CVE-2026-10888 | Medium | 0.3% | 8.8 | Use after free in Cast Streaming in Google Chrome prior to 149.0.7827.53 allowed… | |
| CVE-2026-11648 | Medium | 0.3% | 8.8 | Use after free in FullScreen in Google Chrome on Windows prior to 149.0.7827.103… | |
| CVE-2026-11646 | Medium | 0.3% | 8.8 | Use after free in ViewTransitions in Google Chrome prior to 149.0.7827.103 allow… | |
| CVE-2026-48346 | Medium | 0.3% | 7.9 | Animate is affected by an Untrusted Search Path vulnerability that could result … | |
| CVE-2026-35560 | Medium | 0.3% | 7.4 | Improper certificate validation in the identity provider connection components i… | |
| CVE-2026-8834 | Medium | 0.3% | 8.0 | IBM HTTP Server 8.5, and 9.0 contains a buffer overflow vulnerability. A privile… | |
| CVE-2026-11144 | Medium | 0.3% | 8.8 | Use after free in Media in Google Chrome prior to 149.0.7827.53 allowed a remote… | |
| CVE-2026-9940 | Medium | 0.3% | 8.8 | Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a… | |
| CVE-2026-11660 | Medium | 0.3% | 8.3 | Insufficient validation of untrusted input in New Tab Page in Google Chrome prio… |