microsoft
3,712 known vulnerabilities affecting microsoft products.
Products
windows_server_2019 1452
windows_server_2016 1310
windows_server_2022 1272
windows_server_2025 1131
windows_10_1809 1131
windows_11_24h2 1111
windows_11_25h2 1081
windows_10_22h2 1066
windows_10_21h2 1061
windows_11_26h1 1009
windows 990
windows_10_1607 980
windows_server_2012 977
windows_11_23h2 761
windows_10 343
windows_server_2008 326
365_apps 277
office_2021 225
office_2024 225
office_2019 217
windows_8.1 192
microsoft_365 185
windows_rt_8.1 170
windows_7 169
Vulnerabilities by priority
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2026-9978 | Medium | 0.2% | 8.8 | Use after free in Glic in Google Chrome prior to 148.0.7778.216 allowed a remote… | |
| CVE-2026-9984 | Medium | 0.2% | 8.8 | Use after free in UI in Google Chrome on Windows prior to 148.0.7778.216 allowed… | |
| CVE-2026-9992 | Medium | 0.2% | 8.8 | Use after free in Network in Google Chrome prior to 148.0.7778.216 allowed a rem… | |
| CVE-2026-11640 | Medium | 0.2% | 8.3 | Integer overflow in libyuv in Google Chrome prior to 149.0.7827.103 allowed a re… | |
| CVE-2026-11642 | Medium | 0.2% | 8.3 | Use after free in Web Apps in Google Chrome prior to 149.0.7827.103 allowed a re… | |
| CVE-2026-10006 | Medium | 0.2% | 7.5 | Race in WebAudio in Google Chrome prior to 148.0.7778.216 allowed a remote attac… | |
| CVE-2026-21272 | Medium | 0.2% | 8.6 | Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input … | |
| CVE-2026-7343 | Medium | 0.2% | 7.5 | Use after free in Views in Google Chrome on Windows prior to 147.0.7727.138 allo… | |
| CVE-2026-85360 | Medium | 0.2% | 7.0 | Use after free in Windows Kernel allows an authorized attacker to elevate privil… | |
| CVE-2026-10940 | Medium | 0.2% | 8.3 | Race in Codecs in Google Chrome on Windows prior to 149.0.7827.53 allowed a remo… | |
| CVE-2026-11111 | Medium | 0.2% | 8.1 | Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a re… | |
| CVE-2026-11305 | Medium | 0.2% | 8.8 | Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remot… | |
| CVE-2026-11307 | Medium | 0.2% | 8.8 | Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remot… | |
| CVE-2026-21320 | Medium | 0.2% | 7.8 | After Effects versions 25.6 and earlier are affected by a Use After Free vulnera… | |
| CVE-2026-21323 | Medium | 0.2% | 7.8 | After Effects versions 25.6 and earlier are affected by a Use After Free vulnera… | |
| CVE-2026-21326 | Medium | 0.2% | 7.8 | After Effects versions 25.6 and earlier are affected by a Use After Free vulnera… | |
| CVE-2026-21329 | Medium | 0.2% | 7.8 | After Effects versions 25.6 and earlier are affected by a Use After Free vulnera… | |
| CVE-2026-21351 | Medium | 0.2% | 7.8 | After Effects versions 25.6 and earlier are affected by a Use After Free vulnera… | |
| CVE-2026-50526 | Medium | 0.2% | 7.0 | Improper link resolution before file access ('link following') in .NET allows an… | |
| CVE-2026-9880 | Medium | 0.2% | 8.3 | Insufficient validation of untrusted input in WebGL in Google Chrome prior to 14… | |
| CVE-2026-11179 | Medium | 0.2% | 8.8 | Inappropriate implementation in ORB in Google Chrome prior to 149.0.7827.53 allo… | |
| CVE-2026-17811 | Medium | 0.2% | 7.1 | Use after free in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allow… | |
| CVE-2026-48272 | Medium | 0.2% | 7.8 | Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulner… | |
| CVE-2026-55013 | Medium | 0.2% | 7.1 | Uncontrolled search path element in Windows Remote Help Defense allows an author… | |
| CVE-2026-80083 | Medium | 0.2% | 8.8 | Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker t… | |
| CVE-2026-75771 | Medium | 0.2% | 7.8 | Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability… | |
| CVE-2026-75862 | Medium | 0.2% | 7.8 | Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability… | |
| CVE-2026-75863 | Medium | 0.2% | 7.8 | Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability… | |
| CVE-2026-82007 | Medium | 0.2% | 7.8 | Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability… | |
| CVE-2026-48287 | Medium | 0.2% | 7.4 | CAI Content Credentials is affected by an Untrusted Search Path vulnerability th… | |
| CVE-2026-55144 | Medium | 0.2% | 7.1 | Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to… | |
| CVE-2026-65776 | Medium | 0.2% | 7.0 | Use after free in Windows Win32K allows an authorized attacker to elevate privil… | |
| CVE-2024-58315 | Medium | 0.2% | 7.8 | Tosibox Key Service 3.3.0 contains an unquoted service path vulnerability that a… | |
| CVE-2026-11306 | Medium | 0.2% | 8.8 | Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remot… | |
| CVE-2026-11670 | Medium | 0.2% | 8.8 | Use after free in PDF in Google Chrome prior to 149.0.7827.103 allowed a remote … | |
| CVE-2026-66310 | Medium | 0.2% | 7.7 | External control of file name or path in Microsoft Edge for Android allows an un… | |
| CVE-2026-9958 | Medium | 0.2% | 8.8 | Use after free in PDFium in Google Chrome prior to 148.0.7778.216 allowed a remo… | |
| CVE-2026-21281 | Medium | 0.2% | 7.8 | InCopy versions 21.0, 19.5.5 and earlier are affected by a Heap-based Buffer Ove… | |
| CVE-2026-33101 | Medium | 0.2% | 7.8 | Use after free in Windows Print Spooler Components allows an authorized attacker… | |
| CVE-2026-83996 | Medium | 0.2% | 8.8 | Heap-based buffer overflow in Windows Error Reporting allows an authorized attac… | |
| CVE-2026-9877 | Medium | 0.2% | 8.3 | Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remot… | |
| CVE-2026-11631 | Medium | 0.2% | 8.3 | Use after free in Aura in Google Chrome on Windows prior to 149.0.7827.103 allow… | |
| CVE-2026-11636 | Medium | 0.2% | 7.5 | Use after free in Autofill in Google Chrome on Windows prior to 149.0.7827.103 a… | |
| CVE-2026-11663 | Medium | 0.2% | 8.3 | Use after free in Skia in Google Chrome prior to 149.0.7827.103 allowed a remote… | |
| CVE-2026-27278 | Medium | 0.2% | 7.8 | Acrobat Reader versions 24.001.30307, 24.001.30308, 25.001.21265 and earlier are… | |
| CVE-2026-9925 | Medium | 0.2% | 8.3 | Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remot… | |
| CVE-2026-9931 | Medium | 0.2% | 8.3 | Use after free in GPU in Google Chrome prior to 148.0.7778.216 allowed a remote … | |
| CVE-2026-9932 | Medium | 0.2% | 8.3 | Use after free in ANGLE in Google Chrome on Windows prior to 148.0.7778.216 allo… | |
| CVE-2026-9933 | Medium | 0.2% | 7.5 | Use after free in Input in Google Chrome prior to 148.0.7778.216 allowed a remot… | |
| CVE-2026-9937 | Medium | 0.2% | 8.3 | Use after free in UI in Google Chrome on Windows prior to 148.0.7778.216 allowed… |