microsoft Vulnerability Advisory Catalog

Total 14,846 security vulnerabilities recorded for microsoft software and firmware.

← Back to All Vendors
Component: windows_10_21h2

Use after free in Windows Backup Engine allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.0 Dossier →
Component: windows_10_1607

Insufficient granularity of access control in Windows Filtering Platform (WFP) allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_11_24h2

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate ...

📅 2026-07-14
CVSS 7.0 Dossier →
Component: windows_11_24h2

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevat...

📅 2026-07-14
CVSS 7.0 Dossier →
Component: windows_10_1607

Incorrect conversion between numeric types in Windows NTFS allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_10_1809

Out-of-bounds read in Windows Cloud Files Mini Filter Driver allows an authorized attacker to disclose information locally....

📅 2026-07-14
CVSS 5.5 Dossier →
Component: windows_10_1607

Stack-based buffer overflow in Windows App Installer allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_10_21h2

Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_11_24h2

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate ...

📅 2026-07-14
CVSS 8.8 Dossier →
Component: windows_10_1607

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.0 Dossier →
Component: windows_11_24h2

Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.0 Dossier →
Component: windows_10_1607

Exposure of sensitive information to an unauthorized actor in Windows Media allows an authorized attacker to disclose information locally....

📅 2026-07-14
CVSS 5.5 Dossier →
Component: windows_11_24h2

Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.0 Dossier →
Component: windows_11_24h2

Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.0 Dossier →
Component: windows_10_1607

Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_10_1607

Access of resource using incompatible type ('type confusion') in Windows Kernel allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.0 Dossier →
Component: windows_10_1607

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally....

📅 2026-07-14
CVSS 5.5 Dossier →
Component: windows_10_1607

Out-of-bounds read in Windows NTFS allows an unauthorized attacker to execute code locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: 365_copilot

Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_10_1607

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_11_24h2

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevat...

📅 2026-07-14
CVSS 8.8 Dossier →
Component: windows_10_1809

Buffer over-read in Windows Print Spooler Components allows an authorized attacker to disclose information locally....

📅 2026-07-14
CVSS 6.1 Dossier →
Component: windows_10_1809

Untrusted pointer dereference in Windows DirectX allows an authorized attacker to execute code locally....

📅 2026-07-14
CVSS 8.8 Dossier →
CVE-2026-50380 CRITICAL
Component: windows_10_1607

Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network....

📅 2026-07-14
CVSS 9.6 Dossier →
Page 14 of 619 (14,846 Total Records)