Microsoft
Page 35 of 100 — Microsoft CVEs from a corpus of 26181, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-20842 | High | 7.0 | 2026-01-13 | Use after free in Windows DWM allows an authorized attacker to elevate privileges locally. |
CVE-2026-20840 | High | 7.8 | 2026-01-13 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. |
CVE-2026-20839 | Medium | 5.5 | 2026-01-13 | Improper access control in Windows Client-Side Caching (CSC) Service allows an authorized attacker to disclose information locally. |
CVE-2026-20838 | Medium | 5.5 | 2026-01-13 | Generation of error message containing sensitive information in Windows Kernel allows an authorized attacker to disclose information locally. |
CVE-2026-20837 | High | 7.8 | 2026-01-13 | Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally. |
CVE-2026-20836 | High | 7.0 | 2026-01-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an authorized attacker to elevate privile… |
CVE-2026-20835 | Medium | 5.5 | 2026-01-13 | Out-of-bounds read in Capability Access Management Service (camsvc) allows an authorized attacker to disclose information locally. |
CVE-2026-20834 | Medium | 4.6 | 2026-01-13 | Absolute path traversal in Windows Shell allows an unauthorized attacker to perform spoofing with a physical attack. |
CVE-2026-20833 | Medium | 5.5 | 2026-01-13 | Use of a broken or risky cryptographic algorithm in Windows Kerberos allows an authorized attacker to disclose information locally. |
CVE-2026-20832 | High | 7.8 | 2026-01-13 | Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege Vulnerability |
CVE-2026-20831 | High | 7.8 | 2026-01-13 | Time-of-check time-of-use (toctou) race condition in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
CVE-2026-20830 | High | 7.0 | 2026-01-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an authoriz… |
CVE-2026-20829 | Medium | 5.5 | 2026-01-13 | Out-of-bounds read in Windows TPM allows an authorized attacker to disclose information locally. |
CVE-2026-20828 | Medium | 4.6 | 2026-01-13 | Out-of-bounds read in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to disclose information with a physical attack. |
CVE-2026-20827 | Medium | 5.5 | 2026-01-13 | Exposure of sensitive information to an unauthorized actor in Tablet Windows User Interface (TWINUI) Subsystem allows an authorized attacker to disclose inform… |
CVE-2026-20826 | High | 7.8 | 2026-01-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Tablet Windows User Interface (TWINUI) Subsystem allows an autho… |
CVE-2026-20825 | Medium | 4.4 | 2026-01-13 | Improper access control in Windows Hyper-V allows an authorized attacker to disclose information locally. |
CVE-2026-20824 | Medium | 5.5 | 2026-01-13 | Protection mechanism failure in Windows Remote Assistance allows an unauthorized attacker to bypass a security feature locally. |
CVE-2026-20823 | Medium | 5.5 | 2026-01-13 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. |
CVE-2026-20822 | High | 7.8 | 2026-01-13 | Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. |
CVE-2026-20821 | Medium | 6.2 | 2026-01-13 | Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Call allows an unauthorized attacker to disclose information locally. |
CVE-2026-20820 | High | 7.8 | 2026-01-13 | Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-20819 | Medium | 5.5 | 2026-01-13 | Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally. |
CVE-2026-20818 | Medium | 6.2 | 2026-01-13 | Insertion of sensitive information into log file in Windows Kernel allows an unauthorized attacker to disclose information locally. |
CVE-2026-20817 | High | 7.8 | 2026-01-13 | Improper handling of insufficient permissions or privileges in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
CVE-2026-20816 | High | 7.8 | 2026-01-13 | Time-of-check time-of-use (toctou) race condition in Windows Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-20815 | High | 7.0 | 2026-01-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an authoriz… |
CVE-2026-20814 | High | 7.0 | 2026-01-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an authorized attacker to elevate privile… |
CVE-2026-20812 | Medium | 6.5 | 2026-01-13 | Improper input validation in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to perform tampering over a network. |
CVE-2026-20811 | High | 7.8 | 2026-01-13 | Access of resource using incompatible type ('type confusion') in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. |
CVE-2026-20810 | High | 7.8 | 2026-01-13 | Free of memory not on the heap in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
CVE-2026-20809 | High | 7.8 | 2026-01-13 | Time-of-check time-of-use (toctou) race condition in Windows Kernel Memory allows an authorized attacker to elevate privileges locally. |
CVE-2026-20808 | High | 7.0 | 2026-01-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Printer Association Object allows an authorized attacker to elev… |
CVE-2026-20805 | Medium | 5.5 | 2026-01-13 | Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally. |
CVE-2026-20804 | High | 7.7 | 2026-01-13 | Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally. |
CVE-2026-20803 | High | 7.2 | 2026-01-13 | Missing authentication for critical function in SQL Server allows an authorized attacker to elevate privileges over a network. |
CVE-2026-0386 | High | 7.5 | 2026-01-13 | Improper access control in Windows Deployment Services allows an unauthorized attacker to execute code over an adjacent network. |
CVE-2025-69276 | High | 8.8 | 2026-01-12 | Deserialization of Untrusted Data vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Object Injection.This issue affects DX NetOps Spectrum… |
CVE-2025-69275 | Medium | 6.1 | 2026-01-12 | Dependency on Vulnerable Third-Party Component vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows DOM-Based XSS.This issue affects DX NetOps… |
CVE-2025-69274 | High | 8.8 | 2026-01-12 | Authorization Bypass Through User-Controlled Key vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Privilege Escalation.This issue affects… |
CVE-2025-69273 | High | 7.5 | 2026-01-12 | Improper Authentication vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Authentication Bypass.This issue affects DX NetOps Spectrum: 24.3… |
CVE-2025-69272 | High | 7.5 | 2026-01-12 | Cleartext Transmission of Sensitive Information vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Sniffing Attacks.This issue affects DX Ne… |
CVE-2025-69271 | High | 7.5 | 2026-01-12 | Insufficiently Protected Credentials vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Sniffing Attacks.This issue affects DX NetOps Spectr… |
CVE-2025-69270 | Critical | 9.8 | 2026-01-12 | Information Exposure Through Query Strings in GET Request vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Session Hijacking.This issue af… |
CVE-2025-69269 | Critical | 9.8 | 2026-01-12 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allow… |
CVE-2025-69268 | Medium | 6.1 | 2026-01-12 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allo… |
CVE-2025-69267 | Medium | 6.5 | 2026-01-12 | Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Path Travers… |
CVE-2026-21860 | Medium | 5.3 | 2026-01-08 | Werkzeug is a comprehensive WSGI web application library. Prior to version 3.1.5, Werkzeug's safe_join function allows path segments with Windows device names… |
CVE-2025-67825 | Medium | 5.5 | 2026-01-08 | An issue was discovered in Nitro PDF Pro for Windows before 14.42.0.34. In certain cases, it displays signer information from a non-verified PDF field rather t… |
CVE-2025-69260 | High | 7.5 | 2026-01-08 | A message out-of-bounds read vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected instal… |
CVE-2025-69259 | High | 7.5 | 2026-01-08 | A message unchecked NULL return value vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affect… |
CVE-2025-69258 | Critical | 9.8 | 2026-01-08 | A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an attacker-controlled DLL into a key executab… |
CVE-2025-62224 | Medium | 5.5 | 2026-01-07 | User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an authorized attacker to perform spoofing over a network. |
CVE-2025-12776 | Medium | 5.4 | 2026-01-07 | The Report Builder component of the application stores user input directly in a web page and displays it to other users, which raised concerns about a possible… |
CVE-2025-9611 | | 2026-01-07 | Microsoft Playwright MCP Server versions prior to 0.0.40 fails to validate the Origin header on incoming connections. This allows an attacker to perform a DNS… | |
CVE-2025-14625 | Medium | 6.7 | 2026-01-07 | Uncontrolled Search Path Element vulnerability in Altera Quartus Prime Standard on Windows (Nios II Command Shell modules), Altera Quartus Prime Lite on Window… |
CVE-2025-14614 | Medium | 6.7 | 2026-01-07 | Insecure Temporary File vulnerability in Altera Quartus Prime Standard Installer (SFX) on Windows, Altera Quartus Prime Lite Installer (SFX) on Windows… |
CVE-2025-14612 | Medium | 6.7 | 2026-01-07 | Insecure Temporary File vulnerability in Altera Quartus Prime Pro Installer (SFX) on Windows allows : Use of Predictable File Names.This issue affects Quar… |
CVE-2025-14605 | Medium | 6.7 | 2026-01-07 | Uncontrolled Search Path Element vulnerability in Altera Quartus Prime Pro on Windows (System Console modules) allows Search Order Hijacking.This issue affects… |
CVE-2025-14599 | Medium | 6.7 | 2026-01-07 | Uncontrolled Search Path Element vulnerability in Altera Quartus Prime Standard Installer (SFX) on Windows, Altera Quartus Prime Lite Installer (SFX) on… |
CVE-2025-14596 | Medium | 6.7 | 2026-01-07 | Uncontrolled Search Path Element vulnerability in Altera Quartus Prime Pro Installer (SFX) on Windows allows Search Order Hijacking.This issue affects Quar… |
CVE-2025-57836 | High | 7.8 | 2026-01-05 | An issue was discovered in Samsung Magician 6.3.0 through 8.3.2 on Windows. The installer creates a temporary folder with weak permissions during installation… |
CVE-2025-67711 | Medium | 6.1 | 2025-12-31 | There is a stored cross site scripting issue in Esri ArcGIS Server 11.4 and earlier on Windows and Linux that in some configurations allows a remote unauthenti… |
CVE-2025-67710 | Medium | 6.1 | 2025-12-31 | There is a stored cross site scripting issue in Esri ArcGIS Server 11.4 and earlier on Windows and Linux that in some configurations allows a remote unauthenti… |
CVE-2025-67709 | Medium | 6.1 | 2025-12-31 | There is a stored cross site scripting issue in Esri ArcGIS Server 11.4 and earlier on Windows and Linux that in some configurations allows a remote unauthenti… |
CVE-2025-67708 | Medium | 6.1 | 2025-12-31 | There is a stored cross site scripting issue in Esri ArcGIS Server 11.4 and earlier on Windows and Linux that in some configurations allows a remote unauthenti… |
CVE-2025-67707 | Medium | 5.6 | 2025-12-31 | ArcGIS Server versions 11.5 and earlier on Windows and Linux do not sufficiently validate uploaded files, enabling a remote unauthenticated attacker to upload… |
CVE-2025-67706 | Medium | 5.6 | 2025-12-31 | ArcGIS Server versions 11.5 and earlier on Windows and Linux do not sufficiently validate uploaded files, enabling a remote unauthenticated attacker to upload… |
CVE-2025-67705 | Medium | 6.1 | 2025-12-31 | There is a stored cross site scripting issue in Esri ArcGIS Server 11.4 and earlier on Windows and Linux that in some configurations allows a remote unauthenti… |
CVE-2025-67704 | Medium | 6.1 | 2025-12-31 | There is a stored cross site scripting issue in Esri ArcGIS Server 11.4 and earlier on Windows and Linux that in some configurations allows a remote unauthenti… |
CVE-2025-67703 | Medium | 6.1 | 2025-12-31 | There is a stored cross site scripting issue in Esri ArcGIS Server 11.4 and earlier on Windows and Linux that in some configurations allows a remote unauthenti… |
CVE-2024-58315 | High | 7.8 | 2025-12-30 | Tosibox Key Service 3.3.0 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated syst… |
CVE-2025-66723 | High | 7.5 | 2025-12-30 | inMusic Brands Engine DJ before 4.3.4 suffers from Insecure Permissions due to exposed HTTP service in the Remote Library, which allows attackers to access all… |
CVE-2025-66499 | High | 7.8 | 2025-12-19 | A heap-based buffer overflow vulnerability exists in the PDF parsing of Foxit PDF Reader when processing specially crafted JBIG2 data. An integer overflow in t… |
CVE-2025-66498 | Medium | 5.3 | 2025-12-19 | A memory corruption vulnerability exists in the 3D annotation handling of Foxit PDF Reader due to insufficient bounds checking when parsing U3D data. When open… |
CVE-2025-66497 | Medium | 5.3 | 2025-12-19 | A memory corruption vulnerability exists in the 3D annotation handling of Foxit PDF Reader due to insufficient bounds checking when parsing PRC data. When open… |
CVE-2025-66496 | Medium | 5.3 | 2025-12-19 | A memory corruption vulnerability exists in the 3D annotation handling of Foxit PDF Reader due to insufficient bounds checking when parsing PRC data. When open… |
CVE-2025-66495 | High | 7.8 | 2025-12-19 | A use-after-free vulnerability exists in the annotation handling of Foxit PDF Reader before 2025.2.1, 14.0.1, and 13.2.1 on Windows and MacOS. When opening a P… |
CVE-2025-66494 | High | 7.8 | 2025-12-19 | A use-after-free vulnerability exists in the PDF file parsing of Foxit PDF Reader before 2025.2.1, 14.0.1, and 13.2.1 on Windows. A PDF object managed by multi… |
CVE-2025-66493 | High | 7.8 | 2025-12-19 | A use-after-free vulnerability exists in the AcroForm handling of Foxit PDF Reader and Foxit PDF Editor before 2025.2.1,14.0.1 and 13.2.1 on Windows . When… |
CVE-2025-13941 | High | 8.8 | 2025-12-19 | A local privilege escalation vulnerability exists in the Foxit PDF Reader/Editor Update Service. During plugin installation, incorrect file system permissions… |
CVE-2025-64675 | High | 8.3 | 2025-12-19 | Improper neutralization of input during web page generation ('cross-site scripting') in Azure Cosmos DB allows an unauthorized attacker to perform spoofing ove… |
CVE-2025-65046 | Low | 3.1 | 2025-12-18 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
CVE-2025-65041 | Critical | 10.0 | 2025-12-18 | Improper authorization in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network. |
CVE-2025-65037 | Critical | 10.0 | 2025-12-18 | Improper control of generation of code ('code injection') in Azure Container Apps allows an unauthorized attacker to execute code over a network. |
CVE-2025-64677 | High | 8.2 | 2025-12-18 | Improper neutralization of input during web page generation ('cross-site scripting') in Office Out-of-Box Experience allows an unauthorized attacker to perform… |
CVE-2025-64676 | High | 7.2 | 2025-12-18 | '.../...//' in Microsoft Purview allows an authorized attacker to execute code over a network. |
CVE-2025-64663 | Critical | 9.9 | 2025-12-18 | Custom Question Answering Elevation of Privilege Vulnerability |
CVE-2025-53000 | High | 7.8 | 2025-12-17 | The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. Versions of nbconvert up to and including 7.16… |
CVE-2025-14766 | High | 8.8 | 2025-12-16 | Out of bounds read and write in V8 in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2025-14765 | High | 8.8 | 2025-12-16 | Use after free in WebGPU in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch… |
CVE-2025-68154 | High | 8.1 | 2025-12-16 | systeminformation is a System and OS information library for node.js. In versions prior to 5.27.14, the `fsSize()` function in systeminformation is vulnerable… |
CVE-2025-14373 | Medium | 4.3 | 2025-12-12 | Inappropriate implementation in Toolbar in Google Chrome on Android prior to 143.0.7499.110 allowed a remote attacker to perform domain spoofing via a crafted… |
CVE-2025-14372 | Medium | 6.1 | 2025-12-12 | Use after free in Password Manager in Google Chrome prior to 143.0.7499.110 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTM… |
CVE-2025-14174 | High | 8.8 | 2025-12-12 | Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a cra… |
CVE-2025-13670 | Medium | 6.7 | 2025-12-12 | The High Level Synthesis Compiler i++ command for Windows is vulnerable to a DLL planting vulnerability |
CVE-2025-13669 | Medium | 6.7 | 2025-12-12 | Uncontrolled Search Path Element vulnerability in Altera High Level Synthesis Compiler on Windows allows Search Order Hijacking.This issue affects High Level S… |
CVE-2025-13665 | Medium | 6.7 | 2025-12-12 | The System Console Utility for Windows is vulnerable to a DLL planting vulnerability |
CVE-2025-13668 | Medium | 6.7 | 2025-12-11 | A potential security vulnerability in Quartus® Prime Pro Edition Design Software may allow escalation of privilege. |
CVE-2025-13664 | Medium | 6.7 | 2025-12-11 | A potential security vulnerability in Quartus® Prime Standard Edition Design Software may allow escalation of privilege. |