microsoft Vulnerability Advisory Catalog

Total 14,846 security vulnerabilities recorded for microsoft software and firmware.

← Back to All Vendors
Component: windows_10_1809

Improper access control in Extensible Storage Engine (ESENT) allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_10_1607

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network....

📅 2026-07-14
CVSS 8.8 Dossier →
Component: windows_10_1607

Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally....

📅 2026-07-14
CVSS 5.5 Dossier →
Component: windows_10_1607

Use of uninitialized resource in Windows File Explorer allows an unauthorized attacker to disclose information locally....

📅 2026-07-14
CVSS 5.5 Dossier →
Component: windows_10_1607

Use of uninitialized resource in Microsoft Windows Codecs Library allows an unauthorized attacker to disclose information locally....

📅 2026-07-14
CVSS 5.5 Dossier →
Component: windows_10_1607

Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_10_1607

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Network File System allows an unauthorized atta...

📅 2026-07-14
CVSS 5.9 Dossier →
Component: windows_10_1607

Time-of-check time-of-use (toctou) race condition in Windows Network File System allows an authorized attacker to elevate privileges over a network....

📅 2026-07-14
CVSS 7.5 Dossier →
Component: windows_10_1607

Integer overflow or wraparound in Windows Remote Access Service Infrastructure allows an authorized attacker to elevate privileges over a network....

📅 2026-07-14
CVSS 8.8 Dossier →
Component: windows_10_1607

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_10_1607

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: fabric_data_warehouse

Stack-based buffer overflow in Microsoft Fabric Data Warehouse allows an authorized attacker to execute code over a network....

📅 2026-07-14
CVSS 8.8 Dossier →
Component: windows_admin_center

Improper neutralization of special elements used in a command ('command injection') in Windows Admin Center allows an authorized attacker to execute c...

📅 2026-07-14
CVSS 8.8 Dossier →
Component: windows_admin_center

Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a network....

📅 2026-07-14
CVSS 8.8 Dossier →
Component: 365_apps

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally....

📅 2026-07-14
CVSS 5.5 Dossier →
Component: windows_10_1607

Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges over a network....

📅 2026-07-14
CVSS 8.8 Dossier →
Component: 365_apps

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally....

📅 2026-07-14
CVSS 5.5 Dossier →
CVE-2026-56190 CRITICAL
Component: windows_10_1607

Use of uninitialized resource in Windows RDP allows an unauthorized attacker to execute code over a network....

📅 2026-07-14
CVSS 9.8 Dossier →
Component: windows_10_1607

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code locally....

📅 2026-07-14
CVSS 7.8 Dossier →
CVE-2026-56188 CRITICAL
Component: windows_10_1607

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Network driver allows an unauthorized at...

📅 2026-07-14
CVSS 9.8 Dossier →
Component: windows_11_24h2

Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.0 Dossier →
Component: windows_10_1607

Out-of-bounds read in Windows Schannel allows an authorized attacker to disclose information over a network....

📅 2026-07-14
CVSS 8.1 Dossier →
Component: windows_10_21h2

Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an authorized attacker to disclose information locally....

📅 2026-07-14
CVSS 5.5 Dossier →
Component: windows_11_24h2

Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.0 Dossier →
Page 4 of 619 (14,846 Total Records)