microsoft Vulnerability Advisory Catalog

Total 14,846 security vulnerabilities recorded for microsoft software and firmware.

← Back to All Vendors
Component: windows_10_1607

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally....

📅 2026-07-14
CVSS 5.5 Dossier →
Component: windows_10_1607

Use of uninitialized resource in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally....

📅 2026-07-14
CVSS 5.5 Dossier →
Component: windows_11_24h2

Relative path traversal in Windows User Interface Core allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_10_1607

Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack....

📅 2026-07-14
CVSS 6.1 Dossier →
Component: windows_10_1809

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elev...

📅 2026-07-14
CVSS 7.0 Dossier →
Component: windows_10_1607

Missing authentication for critical function in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges l...

📅 2026-07-14
CVSS 7.1 Dossier →
Component: windows_10_1809

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Wireless Wide Area Network Service allows an au...

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_10_1809

Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.0 Dossier →
Component: windows_10_1607

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally....

📅 2026-07-14
CVSS 7.8 Dossier →
CVE-2026-50447 CRITICAL
Component: windows_10_1607

Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network....

📅 2026-07-14
CVSS 9.8 Dossier →
Component: windows_10_1607

Buffer over-read in Windows RDP allows an unauthorized attacker to disclose information over a network....

📅 2026-07-14
CVSS 6.5 Dossier →
Component: windows_10_1607

Missing authentication for critical function in Windows Server Update Service allows an authorized attacker to elevate privileges over a network....

📅 2026-07-14
CVSS 8.8 Dossier →
Component: windows_10_1607

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally....

📅 2026-07-14
CVSS 5.5 Dossier →
Component: windows_10_1607

Untrusted pointer dereference in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_11_24h2

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Audio Service allows an authorized attacker to ...

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_10_1607

Use after free in Microsoft Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network....

📅 2026-07-14
CVSS 8.1 Dossier →
Component: pc_manager

Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 8.8 Dossier →
Component: windows_10_1607

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally....

📅 2026-07-14
CVSS 5.5 Dossier →
Component: windows_11_24h2

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_10_1607

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_10_21h2

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally...

📅 2026-07-14
CVSS 5.5 Dossier →
Component: windows_10_1607

Use after free in Windows Media allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_10_1607

Use after free in Windows Virtual Filtering Platform (VFP) allows an authorized attacker to deny service over a network....

📅 2026-07-14
CVSS 5.3 Dossier →
Component: windows_10_1607

Windows Quality of Service (QoS) Packet Scheduler Information Disclosure Vulnerability...

📅 2026-07-14
CVSS 5.5 Dossier →
Page 12 of 619 (14,846 Total Records)