microsoft Vulnerability Advisory Catalog

Total 14,846 security vulnerabilities recorded for microsoft software and firmware.

← Back to All Vendors
Component: windows_10_1607

Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information loc...

📅 2026-07-14
CVSS 5.5 Dossier →
Component: windows_10_1809

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elev...

📅 2026-07-14
CVSS 7.0 Dossier →
Component: windows_10_1607

Heap-based buffer overflow in Windows Data dll allows an unauthorized attacker to execute code locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_10_1607

Improper authorization in RPC Runtime allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_11_24h2

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevat...

📅 2026-07-14
CVSS 7.0 Dossier →
Component: windows_10_1607

Improper authorization in Windows OLE allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_10_1809

Improper privilege management in Microsoft Install Service allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_10_1607

Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally....

📅 2026-07-14
CVSS 5.5 Dossier →
Component: windows_11_24h2

Use after free in Windows Runtime allows an authorized attacker to elevate privileges over a network....

📅 2026-07-14
CVSS 8.5 Dossier →
Component: windows_10_1809

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally...

📅 2026-07-14
CVSS 5.5 Dossier →
Component: windows_10_1607

Incorrect type conversion or cast in Windows Notification allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_11_24h2

Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_10_1809

Improper access control in Windows Operating Systems allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_10_1607

Exposure of sensitive information to an unauthorized actor in Windows Notification allows an authorized attacker to disclose information locally....

📅 2026-07-14
CVSS 5.5 Dossier →
Component: windows_10_1607

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_10_1607

Use after free in Windows Application Model allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_10_1607

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to elevate privileges over a network....

📅 2026-07-14
CVSS 7.5 Dossier →
Component: windows_10_1809

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_10_1607

Uncaught exception in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network....

📅 2026-07-14
CVSS 7.5 Dossier →
Component: windows_11_24h2

Heap-based buffer overflow in Windows Media allows an authorized attacker to execute code locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_10_21h2

Use after free in Windows Unified Consent System allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_10_1607

Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service...

📅 2026-07-14
CVSS 5.9 Dossier →
Component: windows_11_24h2

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevat...

📅 2026-07-14
CVSS 7.0 Dossier →
Component: windows_10_1607

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Driver allows an authorized attacker to ele...

📅 2026-07-14
CVSS 7.8 Dossier →
Page 16 of 619 (14,846 Total Records)