microsoft Vulnerability Advisory Catalog

Total 14,846 security vulnerabilities recorded for microsoft software and firmware.

← Back to All Vendors
Component: windows_10_1607

Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network....

📅 2026-07-14
CVSS 6.5 Dossier →
Component: windows_10_1607

Heap-based buffer overflow in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 8.8 Dossier →
Component: windows_10_1607

Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network....

📅 2026-07-14
CVSS 6.5 Dossier →
Component: windows_10_1607

Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_10_1607

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB allows an authorized attacker to elevate pr...

📅 2026-07-14
CVSS 7.5 Dossier →
Component: windows_10_1607

Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_11_26h1

Out-of-bounds read in Active Directory Federation Services (AD FS) allows an authorized attacker to disclose information over a network....

📅 2026-07-14
CVSS 7.1 Dossier →
Component: windows_10_1809

Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack....

📅 2026-07-14
CVSS 6.8 Dossier →
Component: windows_11_24h2

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevat...

📅 2026-07-14
CVSS 7.8 Dossier →
Component: sharepoint_server

Improper authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network....

📅 2026-07-14
CVSS 8.8 Dossier →
Component: windows_10_1607

Use of uninitialized resource in Windows RDP allows an authorized attacker to disclose information over a network....

📅 2026-07-14
CVSS 6.5 Dossier →
Component: windows_subsystem_for_linux

Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to perform tampering locally....

📅 2026-07-14
CVSS 6.3 Dossier →
Component: windows_subsystem_for_linux

Buffer over-read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: .net

Access of resource using incompatible type ('type confusion') in .NET Core allows an unauthorized attacker to deny service over a network....

📅 2026-07-14
CVSS 7.5 Dossier →
Component: visual_studio_code

Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a net...

📅 2026-07-14
CVSS 8.8 Dossier →
Component: visual_studio_code

Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to bypass a...

📅 2026-07-14
CVSS 7.1 Dossier →
Component: windows_10_1607

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_10_1607

Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an unauthorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 6.2 Dossier →
Component: windows_10_1607

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network....

📅 2026-07-14
CVSS 8.8 Dossier →
Component: windows_10_1607

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.0 Dossier →
CVE-2026-57092 CRITICAL
Component: windows_10_1607

Use after free in Windows VMSwitch allows an authorized attacker to elevate privileges over a network....

📅 2026-07-14
CVSS 9.9 Dossier →
Component: windows_10_1607

Stack-based buffer overflow in Windows File History Service allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_10_1607

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network....

📅 2026-07-14
CVSS 8.8 Dossier →
Component: windows_10_1607

Use after free in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to execute code over a network....

📅 2026-07-14
CVSS 7.5 Dossier →
Page 3 of 619 (14,846 Total Records)