Product · KEV exposure
Microsoft Windows known exploited vulnerabilities
We track 172 CVEs in Microsoft Windows. All of them are on CISA's Known Exploited Vulnerabilities catalog, meaning CISA has evidence of exploitation in the wild (listed 2021–2026). CISA flags 47 of them as used in ransomware campaigns. The most recent is CVE-2026-96951, added to KEV on .
Also listed as: Windows (Internet Shortcut Files). CISA, NVD and vendor advisories name the same product differently; each CVE page keeps the wording from its source.
- CVEs tracked
- 172
- On CISA KEV
- 172
- Ransomware use
- 47
- Rated critical
- 4
Every Microsoft Windows CVE we track
| CVE / Vulnerability | Severity | CVSS | EPSS | Added to KEV | Patch by |
|---|---|---|---|---|---|
| CVE-2026-96951 Microsoft Windows Command Injection Vulnerability | [ HIGH ] | 8.8 | 1.5% | ||
| CVE-2026-85880 Microsoft Windows ALPC Heap Buffer Overflow Privilege Escalationwrite-up | [ HIGH ] | 7.8 | 3.6% | ||
| CVE-2026-81963 Microsoft Windows Update Stack Link-Following Privilege Escalationwrite-up | [ HIGH ] | 7.8 | 0.4% | ||
| CVE-2026-68820 Windows AFD WinSock Use-After-Free Privilege Escalationwrite-up | [ HIGH ] | 7.0 | 0.3% | ||
| CVE-2008-4250 Microsoft Windows Buffer Overflow Vulnerability | [ CRITICAL ] | 9.8 | 98.8% | ||
| CVE-2026-32202 Microsoft Windows Protection Mechanism Failure Vulnerability | [ MEDIUM ] | 4.3 | 4.9% | ||
| CVE-2025-60710 Microsoft Windows Link Following Vulnerabilityransomware use | [ HIGH ] | 7.8 | 4.6% | ||
| CVE-2023-36424 Microsoft Windows Out-of-Bounds Read Vulnerability | [ HIGH ] | 7.8 | 12.1% | ||
| CVE-2008-0015 Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability | [ HIGH ] | 8.8 | 76.6% | ||
| CVE-2026-21533 Microsoft Windows Improper Privilege Management Vulnerability | [ HIGH ] | 7.8 | 4.1% | ||
| CVE-2026-21525 Microsoft Windows NULL Pointer Dereference Vulnerability | [ MEDIUM ] | 6.2 | 4.8% | ||
| CVE-2026-21519 Microsoft Windows Type Confusion Vulnerability | [ HIGH ] | 7.8 | 2.5% | ||
| CVE-2026-21510 Microsoft Windows Shell Protection Mechanism Failure Vulnerability | [ HIGH ] | 8.8 | 24.5% | ||
| CVE-2026-20805 Microsoft Windows Information Disclosure Vulnerability | [ MEDIUM ] | 5.5 | 7.5% | ||
| CVE-2025-62221 Microsoft Windows Use After Free Vulnerability | [ HIGH ] | 7.8 | 2.5% | ||
| CVE-2025-62215 Microsoft Windows Race Condition Vulnerability | [ HIGH ] | 7.0 | 4.5% | ||
| CVE-2025-59287 Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability | [ CRITICAL ] | 9.8 | 100.0% | ||
| CVE-2025-33073 Microsoft Windows SMB Client Improper Access Control Vulnerability | [ HIGH ] | 8.8 | 82.7% | ||
| CVE-2025-59230 Microsoft Windows Improper Access Control Vulnerability | [ HIGH ] | 7.8 | 2.7% | ||
| CVE-2025-24990 Microsoft Windows Untrusted Pointer Dereference Vulnerability | [ HIGH ] | 7.8 | 6.4% | ||
| CVE-2021-43226 Microsoft Windows Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 3.3% | ||
| CVE-2013-3918 Microsoft Windows Out-of-Bounds Write Vulnerability | [ HIGH ] | 8.8 | 73.7% | ||
| CVE-2011-3402 Microsoft Windows Remote Code Execution Vulnerability | [ HIGH ] | 8.8 | 78.1% | ||
| CVE-2025-33053 Windows Internet Shortcut Files path control allows remote code executionwrite-up | [ HIGH ] | 8.8 | 87.0% | ||
| CVE-2025-32709 Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability | [ HIGH ] | 7.8 | 1.8% | ||
| CVE-2025-32706 Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability | [ HIGH ] | 7.8 | 2.3% | ||
| CVE-2025-32701 Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability | [ HIGH ] | 7.8 | 1.4% | ||
| CVE-2025-30400 Microsoft Windows DWM Core Library Use-After-Free Vulnerability | [ HIGH ] | 7.8 | 1.9% | ||
| CVE-2025-30397 Microsoft Windows Scripting Engine Type Confusion Vulnerability | [ HIGH ] | 7.5 | 27.0% | ||
| CVE-2025-29824 Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerabilityransomware use | [ HIGH ] | 7.8 | 13.9% | ||
| CVE-2025-26633 Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerabilityransomware use | [ HIGH ] | 7.0 | 30.4% | ||
| CVE-2025-24993 Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability | [ HIGH ] | 7.8 | 2.2% | ||
| CVE-2025-24991 Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability | [ MEDIUM ] | 5.5 | 2.0% | ||
| CVE-2025-24985 Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability | [ HIGH ] | 7.8 | 3.9% | ||
| CVE-2025-24984 Microsoft Windows NTFS Information Disclosure Vulnerability | [ MEDIUM ] | 4.6 | 2.0% | ||
| CVE-2025-24983 Microsoft Windows Win32k Use-After-Free Vulnerability | [ HIGH ] | 7.0 | 1.4% | ||
| CVE-2018-8639 Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerabilityransomware use | [ HIGH ] | 7.8 | 22.2% | ||
| CVE-2025-21418 Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability | [ HIGH ] | 7.8 | 1.6% | ||
| CVE-2025-21391 Microsoft Windows Storage Link Following Vulnerability | [ HIGH ] | 7.1 | 2.3% | ||
| CVE-2025-21335 Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability | [ HIGH ] | 7.8 | 1.4% | ||
| CVE-2025-21334 Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability | [ HIGH ] | 7.8 | 1.6% | ||
| CVE-2025-21333 Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability | [ HIGH ] | 7.8 | 10.0% | ||
| CVE-2024-35250 Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability | [ HIGH ] | 7.8 | 25.2% | ||
| CVE-2024-49138 Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability | [ HIGH ] | 7.8 | 26.2% | ||
| CVE-2024-49039 Microsoft Windows Task Scheduler Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 8.8 | 14.2% | ||
| CVE-2024-43451 Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability | [ MEDIUM ] | 6.5 | 85.4% | ||
| CVE-2024-30088 Microsoft Windows Kernel TOCTOU Race Condition Vulnerabilityransomware use | [ HIGH ] | 7.0 | 68.2% | ||
| CVE-2024-43573 Microsoft Windows MSHTML Platform Spoofing Vulnerability | [ MEDIUM ] | 6.5 | 46.1% | ||
| CVE-2024-43572 Microsoft Windows Management Console Remote Code Execution Vulnerability | [ HIGH ] | 7.8 | 66.7% | ||
| CVE-2024-43461 Microsoft Windows MSHTML Platform Spoofing Vulnerability | [ HIGH ] | 8.8 | 54.5% | ||
| CVE-2024-38217 Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability | [ MEDIUM ] | 5.4 | 10.0% | ||
| CVE-2024-38014 Microsoft Windows Installer Improper Privilege Management Vulnerability | [ HIGH ] | 7.8 | 6.3% | ||
| CVE-2024-38213 Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | [ MEDIUM ] | 6.5 | 13.6% | ||
| CVE-2024-38193 Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 28.7% | ||
| CVE-2024-38178 Microsoft Windows Scripting Engine Memory Corruption Vulnerability | [ HIGH ] | 7.5 | 41.4% | ||
| CVE-2024-38107 Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 1.6% | ||
| CVE-2024-38106 Microsoft Windows Kernel Privilege Escalation Vulnerability | [ HIGH ] | 7.0 | 6.3% | ||
| CVE-2018-0824 Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability | [ HIGH ] | 8.8 | 73.0% | ||
| CVE-2024-38112 Microsoft Windows MSHTML Platform Spoofing Vulnerability | [ HIGH ] | 7.5 | 84.2% | ||
| CVE-2024-38080 Microsoft Windows Hyper-V Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 7.1% | ||
| CVE-2024-26169 Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerabilityransomware use | [ HIGH ] | 7.8 | 4.0% | ||
| CVE-2024-30040 Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability | [ HIGH ] | 8.8 | 3.9% | ||
| CVE-2022-38028 Microsoft Windows Print Spooler Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 14.9% | ||
| CVE-2024-21338 Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerabilityransomware use | [ HIGH ] | 7.8 | 59.8% | ||
| CVE-2024-21412 Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerabilityransomware use | [ HIGH ] | 8.1 | 99.4% | ||
| CVE-2024-21351 Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | [ HIGH ] | 7.6 | 27.8% | ||
| CVE-2023-36584 Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | [ MEDIUM ] | 5.4 | 3.3% | ||
| CVE-2023-36036 Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 16.7% | ||
| CVE-2023-36033 Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 10.9% | ||
| CVE-2023-36025 Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | [ HIGH ] | 8.8 | 88.1% | ||
| CVE-2023-36884 Microsoft Windows Search Remote Code Execution Vulnerabilityransomware use | [ HIGH ] | 7.5 | 98.9% | ||
| CVE-2023-36874 Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 42.6% | ||
| CVE-2023-32049 Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability | [ HIGH ] | 8.8 | 4.2% | ||
| CVE-2023-32046 Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 10.0% | ||
| CVE-2023-28252 Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 49.0% | ||
| CVE-2019-1388 Microsoft Windows Certificate Dialog Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 8.6% | ||
| CVE-2023-24880 Microsoft Windows SmartScreen Security Feature Bypass Vulnerabilityransomware use | [ MEDIUM ] | 4.4 | 78.0% | ||
| CVE-2023-23376 Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 10.9% | ||
| CVE-2023-21823 Microsoft Windows Graphic Component Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 5.6% | ||
| CVE-2023-21674 Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability | [ HIGH ] | 8.8 | 41.0% | ||
| CVE-2022-41049 Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | [ MEDIUM ] | 5.4 | 2.6% | ||
| CVE-2022-41128 Microsoft Windows Scripting Languages Remote Code Execution Vulnerability | [ HIGH ] | 8.8 | 24.6% | ||
| CVE-2022-41125 Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 3.0% | ||
| CVE-2022-41091 Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerabilityransomware use | [ MEDIUM ] | 5.4 | 1.9% | ||
| CVE-2022-41073 Microsoft Windows Print Spooler Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 2.4% | ||
| CVE-2010-2568 Microsoft Windows Remote Code Execution Vulnerability | [ HIGH ] | 7.8 | 91.3% | ||
| CVE-2022-37969 Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 28.3% | ||
| CVE-2022-21971 Microsoft Windows Runtime Remote Code Execution Vulnerability | [ HIGH ] | 7.8 | 53.9% | ||
| CVE-2022-34713 Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability | [ HIGH ] | 7.8 | 67.8% | ||
| CVE-2022-22047 Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 18.8% | ||
| CVE-2022-26925 Microsoft Windows LSA Spoofing Vulnerability | [ HIGH ] | 8.1 | 10.5% | ||
| CVE-2012-0151 Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability | [ HIGH ] | 7.8 | 87.7% | ||
| CVE-2016-7256 Microsoft Windows Open Type Font Remote Code Execution Vulnerability | [ HIGH ] | 8.8 | 64.6% | ||
| CVE-2016-3393 Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability | [ HIGH ] | 7.8 | 68.5% | ||
| CVE-2015-6175 Microsoft Windows Kernel Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 5.1% | ||
| CVE-2015-1769 Microsoft Windows Mount Manager Privilege Escalation Vulnerability | [ MEDIUM ] | 6.6 | 4.1% | ||
| CVE-2015-1671 Microsoft Windows Remote Code Execution Vulnerability | [ HIGH ] | 7.8 | 49.0% | ||
| CVE-2015-0016 Microsoft Windows TS WebProxy Directory Traversal Vulnerability | [ HIGH ] | 7.8 | 75.8% | ||
| CVE-2014-4148 Microsoft Windows Remote Code Execution Vulnerability | [ HIGH ] | 8.8 | 59.9% | ||
| CVE-2018-8611 Microsoft Windows Kernel Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 4.2% | ||
| CVE-2017-8543 Microsoft Windows Search Remote Code Execution Vulnerability | [ CRITICAL ] | 9.8 | 74.2% | ||
| CVE-2017-0005 Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 11.0% | ||
| CVE-2020-1027 Microsoft Windows Kernel Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 4.5% | ||
| CVE-2019-1385 Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 3.6% | ||
| CVE-2019-1130 Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 1.7% | ||
| CVE-2019-0880 Microsoft Windows Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 2.3% | ||
| CVE-2019-0703 Microsoft Windows SMB Information Disclosure Vulnerability | [ MEDIUM ] | 6.5 | 9.6% | ||
| CVE-2022-26904 Microsoft Windows User Profile Service Privilege Escalation Vulnerability | [ HIGH ] | 7.0 | 16.9% | ||
| CVE-2022-21919 Microsoft Windows User Profile Service Privilege Escalation Vulnerability | [ HIGH ] | 7.0 | 2.4% | ||
| CVE-2022-22718 Microsoft Windows Print Spooler Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 18.5% | ||
| CVE-2022-24521 Microsoft Windows CLFS Driver Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 7.1% | ||
| CVE-2021-34484 Microsoft Windows User Profile Service Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 21.8% | ||
| CVE-2021-34486 Microsoft Windows Event Tracing Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 9.3% | ||
| CVE-2018-8440 Microsoft Windows Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 18.4% | ||
| CVE-2017-0213 Microsoft Windows Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.3 | 84.3% | ||
| CVE-2016-0040 Microsoft Windows Kernel Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 24.3% | ||
| CVE-2015-2426 Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability | [ HIGH ] | 8.8 | 86.6% | ||
| CVE-2010-4398 Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability | [ HIGH ] | 7.8 | 8.7% | ||
| CVE-2022-21999 Microsoft Windows Print Spooler Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 41.0% | ||
| CVE-2018-8414 Microsoft Windows Shell Remote Code Execution Vulnerability | [ HIGH ] | 8.8 | 72.9% | ||
| CVE-2017-0146 Microsoft Windows SMB Remote Code Execution Vulnerabilityransomware use | [ HIGH ] | 8.8 | 89.9% | ||
| CVE-2014-6332 Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability | [ HIGH ] | 8.8 | 94.9% | ||
| CVE-2019-1405 Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 30.2% | ||
| CVE-2019-1322 Microsoft Windows Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 19.2% | ||
| CVE-2019-1315 Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 3.5% | ||
| CVE-2019-1253 Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 11.6% | ||
| CVE-2019-1129 Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 1.8% | ||
| CVE-2019-1064 Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 6.9% | ||
| CVE-2019-0841 Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 41.4% | ||
| CVE-2019-0543 Microsoft Windows Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 4.7% | ||
| CVE-2017-0101 Microsoft Windows Transaction Manager Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 57.5% | ||
| CVE-2016-3309 Microsoft Windows Kernel Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 20.5% | ||
| CVE-2021-41379 Microsoft Windows Installer Privilege Escalation Vulnerabilityransomware use | [ MEDIUM ] | 5.5 | 19.5% | ||
| CVE-2016-0099 Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 37.0% | ||
| CVE-2014-4114 Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability | [ HIGH ] | 7.8 | 81.6% | ||
| CVE-2013-5065 Microsoft Windows Kernel Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 34.7% | ||
| CVE-2010-0232 Microsoft Windows Kernel Exception Handler Vulnerability | [ HIGH ] | 7.8 | 28.7% | ||
| CVE-2009-1123 Microsoft Windows Improper Input Validation Vulnerability | [ HIGH ] | 7.8 | 4.9% | ||
| CVE-2004-0210 Microsoft Windows Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 7.2% | ||
| CVE-2002-0367 Microsoft Windows Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 4.9% | ||
| CVE-2014-6352 Microsoft Windows Code Injection Vulnerability | [ HIGH ] | 7.8 | 77.5% | ||
| CVE-2018-8174 Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerabilityransomware use | [ HIGH ] | 7.5 | 88.2% | ||
| CVE-2021-36934 Microsoft Windows SAM Local Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 67.3% | ||
| CVE-2017-8464 Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability | [ HIGH ] | 8.8 | 90.0% | ||
| CVE-2020-0787 Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerabilityransomware use | [ HIGH ] | 7.8 | 42.5% | ||
| CVE-2021-43890 Microsoft Windows AppX Installer Spoofing Vulnerabilityransomware use | [ HIGH ] | 7.1 | 11.3% | ||
| CVE-2021-40449 Microsoft Windows Win32k Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 81.9% | ||
| CVE-2021-36955 Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 4.1% | ||
| CVE-2021-36948 Microsoft Windows Update Medic Service Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 23.3% | ||
| CVE-2021-36942 Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerabilityransomware use | [ HIGH ] | 7.5 | 66.0% | ||
| CVE-2021-34448 Microsoft Windows Scripting Engine Memory Corruption Vulnerability | [ MEDIUM ] | 6.8 | 40.1% | ||
| CVE-2021-33771 Microsoft Windows Kernel Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 10.2% | ||
| CVE-2021-33742 Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability | [ HIGH ] | 7.5 | 59.4% | ||
| CVE-2021-33739 Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability | [ HIGH ] | 8.4 | 6.6% | ||
| CVE-2021-31979 Microsoft Windows Kernel Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 4.5% | ||
| CVE-2021-31956 Microsoft Windows NTFS Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 22.3% | ||
| CVE-2021-31955 Microsoft Windows Kernel Information Disclosure Vulnerability | [ MEDIUM ] | 5.5 | 81.1% | ||
| CVE-2021-1675 Microsoft Windows Print Spooler Remote Code Execution Vulnerabilityransomware use | [ HIGH ] | 7.8 | 85.3% | ||
| CVE-2020-17087 Microsoft Windows Kernel Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 5.4% | ||
| CVE-2020-1464 Microsoft Windows Spoofing Vulnerability | [ HIGH ] | 7.8 | 38.9% | ||
| CVE-2020-1350 Microsoft Windows DNS Server Remote Code Execution Vulnerability | [ CRITICAL ] | 10.0 | 96.7% | ||
| CVE-2020-1020 Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability | [ HIGH ] | 8.8 | 65.0% | ||
| CVE-2020-0986 Microsoft Windows Kernel Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 16.4% | ||
| CVE-2020-0938 Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability | [ HIGH ] | 7.8 | 69.0% | ||
| CVE-2020-0683 Microsoft Windows Installer Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 7.6% | ||
| CVE-2020-0601 Microsoft Windows CryptoAPI Spoofing Vulnerability | [ HIGH ] | 8.1 | 89.4% | ||
| CVE-2019-1215 Microsoft Windows Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 19.3% | ||
| CVE-2019-1214 Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability | [ HIGH ] | 7.8 | 1.4% | ||
| CVE-2019-0863 Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 5.2% | ||
| CVE-2017-0143 Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerabilityransomware use | [ HIGH ] | 8.8 | 93.3% | ||
| CVE-2016-0185 Microsoft Windows Media Center Remote Code Execution Vulnerability | [ HIGH ] | 7.8 | 69.8% | ||
| CVE-2014-1812 Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 8.8 | 65.1% |
Sorted by date added to KEV. Severity and CVSS as stated by NVD or the vendor; EPSS from FIRST.org. "Patch by" is CISA's BOD 22-01 deadline for US federal agencies, a useful priority signal for everyone else. Machine-readable: /api/v1/vendors/microsoft.json.
Our Microsoft Windows coverage
Other Microsoft products
Every row links to its CVE record with the CISA required action, catalog coverage and primary sources. We describe impact and remediation only; no exploit code. See the full KEV tracker or compare KEV catalogs.