microsoft Vulnerability Advisory Catalog

Total 14,846 security vulnerabilities recorded for microsoft software and firmware.

← Back to All Vendors
Component: windows_10_1607

Double free in Windows DHCP Server allows an authorized attacker to execute code over a network....

📅 2026-07-14
CVSS 7.5 Dossier →
Component: windows_10_1607

Improper neutralization of input during web page generation ('cross-site scripting') in Active Directory Federation Services (AD FS) allows an authori...

📅 2026-07-14
CVSS 4.8 Dossier →
Component: windows_10_1607

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges over an adjacent network....

📅 2026-07-14
CVSS 8.0 Dossier →
Component: windows_10_21h2

Out-of-bounds read in Windows Active Directory allows an authorized attacker to deny service over a network....

📅 2026-07-14
CVSS 7.1 Dossier →
Component: windows_10_1607

Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information loc...

📅 2026-07-14
CVSS 5.5 Dossier →
Component: windows_10_1809

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 8.2 Dossier →
Component: windows_11_24h2

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_11_24h2

Use after free in Windows Media allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_11_24h2

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate ...

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_11_24h2

Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.0 Dossier →
Component: windows_10_1607

Null pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_10_1809

Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.0 Dossier →
Component: windows_10_1809

Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 8.8 Dossier →
Component: windows_10_1607

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker...

📅 2026-07-14
CVSS 7.0 Dossier →
Component: windows_10_1607

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to elevate privileges with a physical attack....

📅 2026-07-14
CVSS 6.8 Dossier →
Component: windows_10_1607

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate p...

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_10_1607

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges over a network....

📅 2026-07-14
CVSS 8.8 Dossier →
Component: 365_apps

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_10_1607

Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack....

📅 2026-07-14
CVSS 6.1 Dossier →
Component: defender_for_endpoint

Time-of-check time-of-use (toctou) race condition in Microsoft Defender allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.0 Dossier →
Component: defender_for_endpoint

Exposure of private personal information to an unauthorized actor in Microsoft Defender allows an authorized attacker to disclose information locally....

📅 2026-07-14
CVSS 4.7 Dossier →
Component: windows_10_1607

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_10_1607

Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service...

📅 2026-07-14
CVSS 7.5 Dossier →
CVE-2026-50518 CRITICAL
Component: windows_10_1607

Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network....

📅 2026-07-14
CVSS 9.8 Dossier →
Page 9 of 619 (14,846 Total Records)