Windows vulnerabilities and fixes

CVEs that mention Windows, ranked by priority. 127 tracked.

Windows has 127 tracked vulnerabilities, 12 critical and 3 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 107. Most recent: 2026-10-22. Highest priority: CVE-2026-85880 (score 80/100).

• CVE-2026-85880 HIGH 7.8 EXPLOITED UPGRADE UPGRADE Microsoft Windows Heap-Based Buffer Overflow Vulnerability
• CVE-2026-96951 HIGH 8.8 EXPLOITED MITIGATE UPGRADE Microsoft Windows Command Injection Vulnerability
• CVE-2026-59124 CRITICAL 9.8 UPGRADE Deserialization of untrusted data in Microsoft High Performance Computing (HPC) Pack allows an unauthorized at
• CVE-2026-81963 HIGH 7.8 EXPLOITED UPGRADE UPGRADE Microsoft Windows Link Following Vulnerability
• CVE-2019-15598 CRITICAL 9.8 UPGRADE A Code Injection exists in treekill on Windows which allows a remote code execution when an attacker is able t
• CVE-2026-62873 CRITICAL 9.8 MITIGATE Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker
• CVE-2023-29542 CRITICAL 9.8 UPGRADE UPGRADE A newline in a filename could have been used to bypass the file extension security mechanisms that replace mal
• CVE-2026-49481 CRITICAL 9.6 UpSnap is a wake on lan web app
• CVE-2026-73414 CRITICAL 9.2 Shescape is a simple shell escape library for JavaScript
• CVE-2026-59133 HIGH 8.8 UPGRADE Execution with unnecessary privileges in Microsoft High Performance Computing (HPC) Pack allows an authorized
• CVE-2026-62785 HIGH 8.8 UPGRADE UPGRADE Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized atta
• CVE-2026-62795 HIGH 8.8 UPGRADE UPGRADE Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to exec
• CVE-2026-69326 HIGH 8.8 UPGRADE UPGRADE Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
• CVE-2026-69521 HIGH 8.8 UPGRADE UPGRADE Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network
• CVE-2026-96222 HIGH 7.4 UPGRADE UPGRADE Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacke
• CVE-2023-25734 HIGH 8.1 UPGRADE UPGRADE After downloading a Windows <code>.url</code> shortcut from the local filesystem, an attacker could supply a r
• CVE-2023-32214 HIGH 7.5 UPGRADE UPGRADE Protocol handlers `ms-cxh` and `ms-cxh-full` could have been leveraged to trigger a denial of service. *Note:
• CVE-2026-69363 HIGH 8.0 UPGRADE UPGRADE Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over
• CVE-2026-83862 HIGH 8.8 UPGRADE UPGRADE Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over an adjac
• CVE-2026-113252 CRITICAL 9.6 UPGRADE Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote atta
• CVE-2026-113283 CRITICAL 9.6 UPGRADE Memory corruption in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote
• CVE-2026-17545 HIGH 7.5 UPGRADE On Windows, PHP's filesystem and stream APIs do not reject reserved device names such as CON, PRN, AUX, NUL, C
• CVE-2026-17691 CRITICAL 9.6 UPGRADE Out of bounds write in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to p
• CVE-2026-69733 HIGH 7.8 UPGRADE UPGRADE Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.
• CVE-2026-85790 MEDIUM 5.9 UPGRADE UPGRADE Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.
• CVE-2026-69452 HIGH 7.1 UPGRADE UPGRADE Use after free in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a
• CVE-2026-69673 HIGH 7.8 UPGRADE UPGRADE Improper link resolution before file access ('link following') in Windows Update allows an authorized attacker
• CVE-2026-96913 HIGH 8.8 UPGRADE UPGRADE Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
• CVE-2018-25439 HIGH 7.5 MetInfo CMS 6.0.0 before 6.1.1 contains a path traversal vulnerability in /include/thumb.php that allows unaut
• CVE-2025-66769 HIGH 7.5 DOWNGRADE A NULL pointer dereference in Nitro PDF Pro for Windows v14.41.1.4 allows attackers to cause a Denial of Servi
• CVE-2026-21655 HIGH 8.7 Deserialization of untrusted data vulnerability in Johnson Control victor on Windows, Johnson Controls CCure 9
• CVE-2023-28163 MEDIUM 6.5 UPGRADE UPGRADE When downloading files through the Save As dialog on Windows with suggested filenames containing environment v
• CVE-2026-0298 HIGH 8.1 UPGRADE An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of
• CVE-2026-113210 HIGH 8.8 UPGRADE Use after free in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to exe
• CVE-2026-114063 HIGH 7.5 SvelteKit (@sveltejs/kit) from 2.10.0 before 3.0.0 contains a path traversal vulnerability in the vite preview
• CVE-2026-17692 CRITICAL 9.6 UPGRADE Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker wh
• CVE-2026-19171 CRITICAL 9.6 UPGRADE Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker to poten
• CVE-2026-64636 HIGH 7.7 An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and Windows allows an authenticated u
• CVE-2026-69718 HIGH 7.8 UPGRADE UPGRADE Improper neutralization of special elements used in a command ('command injection') in Windows Update allows a
• CVE-2026-96911 HIGH 7.8 UPGRADE UPGRADE Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an
• CVE-2026-96914 HIGH 8.8 UPGRADE UPGRADE Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized att
• CVE-2026-0297 HIGH 8.1 UPGRADE UPGRADE A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man-in-the-
• CVE-2026-113119 HIGH 8.8 UPGRADE Use after free in Network in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to e
• CVE-2026-113134 HIGH 8.8 UPGRADE Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to
• CVE-2026-54202 HIGH 8.5 Tobit Laboratories AG TeamDavid's Webbox is vulnerable to a path traversal vulnerability in the archive crea
• CVE-2026-62772 HIGH 7.8 UPGRADE Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized
• CVE-2026-62799 HIGH 7.8 UPGRADE Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally.
• CVE-2026-68836 HIGH 7.8 UPGRADE UPGRADE Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally
• CVE-2026-69354 HIGH 7.8 UPGRADE UPGRADE Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges loca
• CVE-2026-69471 HIGH 7.8 UPGRADE UPGRADE Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
• CVE-2023-25738 MEDIUM 6.5 UPGRADE UPGRADE Members of the <code>DEVMODEW</code> struct set by the printer device driver weren't being validated and could
• CVE-2025-13032 CRITICAL 9.9 UPGRADE Double fetch in sandbox kernel driver in Avast/AVG Antivirus <25.3  on windows allows local attacker to escala
• CVE-2026-108136 HIGH 7.8 UPGRADE UPGRADE Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges local
• CVE-2026-96912 HIGH 7.8 UPGRADE UPGRADE Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally.
• CVE-2026-68821 HIGH 7.3 UPGRADE Improper privilege management in Windows Package Manager allows an authorized attacker to elevate privileges l
• CVE-2023-4052 MEDIUM 6.5 UPGRADE UPGRADE The Firefox updater created a directory writable by non-privileged users
• CVE-2026-18657 HIGH 7.8 UPGRADE An uncontrolled search path element in Kiro CLI before version 2.10.0 on Windows might allow a remote unauthen
• CVE-2023-29545 MEDIUM 6.5 UPGRADE UPGRADE Similar to CVE-2023-28163, this time when choosing 'Save Link As', suggested filenames containing environment
• CVE-2026-17723 HIGH 8.3 UPGRADE Use after free in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had c
• CVE-2026-18656 HIGH 7.8 UPGRADE An uncontrolled search path element in Kiro IDE before version 1.0.228 on Windows might allow a remote unauthe
• CVE-2026-19163 HIGH 8.3 UPGRADE Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who had
• CVE-2026-108135 HIGH 7.0 UPGRADE UPGRADE Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized a
• CVE-2026-69387 HIGH 7.0 UPGRADE UPGRADE Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
• CVE-2026-77156 MEDIUM 6.4 Incomplete validation of extracted archive entry paths in ast-cli's tar extraction logic on Linux and macOS (u
• CVE-2024-47091 HIGH 7.8 DOWNGRADE Privilege escalation in the mk_mysql agent plugin on Windows in Checkmk <2.4.0p29, <2.3.0p47, and 2.2.0 (EOL)
• CVE-2025-11713 HIGH 8.1 UPGRADE UPGRADE Insufficient escaping in the “Copy as cURL” feature could have been used to trick a user into executing unexpe
• CVE-2026-108132 HIGH 7.0 UPGRADE UPGRADE Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.
• CVE-2026-108396 HIGH 7.0 UPGRADE UPGRADE Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authoriz
• CVE-2026-13192 MEDIUM 6.5 UPGRADE In Progress® Telerik® UI for AJAX prior to v2026.2.708, insufficient validation of content submitted to the Ra
• CVE-2026-19158 HIGH 7.5 UPGRADE Use after free in Views in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who conv
• CVE-2026-64816 MEDIUM 6.5 RapidRAW before 1.6.0 does not validate the lutPath field in preset files before passing it to File::open() in
• CVE-2026-72653 MEDIUM 6.5 UPGRADE Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to denial of service via Exc
• CVE-2026-72971 MEDIUM 5.5 UPGRADE Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver
• CVE-2026-76259 HIGH 8.8 UPGRADE In Splunk Enterprise for Windows versions below 10.4.2, 10.2.6, 10.0.9, 9.4.13, and 9.3.14, a local user with
• CVE-2026-9169 HIGH 8.8 DLL Search Order Hijacking in LUCID Vision Labs Arena SDK 1.0.80.49 on Windows allows a local attacker to exec
• CVE-2026-13133 HIGH 8.4 A vulnerability has been identified in LineInst.exe (LINE for Windows) prior to version 26.4.0, where Msftedit
• CVE-2026-34496 HIGH 7.1 Cwe-269 vulnerability in Johnson Controls victor Web on Windows allows capec-233. This issue affects victor W
• CVE-2026-62775 MEDIUM 5.5 UPGRADE Incorrect authorization in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized att
• CVE-2026-96644 HIGH 7.1 Pillow is a Python imaging library
• CVE-2026-0299 HIGH 7.8 UPGRADE UPGRADE Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to
• CVE-2026-13094 HIGH 7.8 UPGRADE IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows wh
• CVE-2026-15929 HIGH 7.1 Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in LG Elect
• CVE-2026-17707 MEDIUM 6.5 UPGRADE Uninitialized Use in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who ha
• CVE-2026-17992 MEDIUM 6.5 UPGRADE Uninitialized Use in Skia in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to obta
• CVE-2026-76037 HIGH 8.4 UPGRADE Link following in CredentialProvider in Google Chrome on on Windows prior to 151.0.7922.169 allowed a local at
• CVE-2026-113157 MEDIUM 6.5 UPGRADE Information leak in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to l
• CVE-2026-12410 HIGH 7.8 Link following vulnerability in the Uninstaller component in CCleaner prior to 7.10.1464 on Windows allows a l
• CVE-2026-18485 HIGH 7.8 There is a local privilege escalation vulnerability recently discovered in the NI-PAL kernel driver.  This may
• CVE-2026-19189 HIGH 7.8 A security flaw has been discovered in Power Sofware PowerISO 9.3.0.0
• CVE-2026-19696 MEDIUM 6.6 UPGRADE Ixia IxVeriWave and Vector Informatik BLF file parser crashes in 4.6.0 to 4.6.7 allows denial of service on Wi
• CVE-2026-41447 HIGH 7.8 FirmaCheck for Windows before 1.3.16 contains a DLL hijacking vulnerability that allows local attackers to exe
• CVE-2026-46731 HIGH 7.8 UPGRADE Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypa
• CVE-2026-59914 HIGH 7.8 UPGRADE Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypa
• CVE-2026-0294 HIGH 7.8 UPGRADE A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma® Access Agent app on Windows and ma
• CVE-2026-17811 HIGH 7.1 UPGRADE Use after free in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to potent
• CVE-2026-17862 HIGH 7.8 UPGRADE Use after free in Tracing in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perfo
• CVE-2026-17863 HIGH 7.8 UPGRADE Inappropriate implementation in Browser in Google Chrome on Windows prior to 151.0.7922.72 allowed a local att
• CVE-2026-59916 HIGH 7.8 UPGRADE Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Contro
• CVE-2026-59917 HIGH 7.8 UPGRADE Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Contro
• CVE-2026-63423 HIGH 7.8 During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Dis
• CVE-2026-69506 MEDIUM 4.7 UPGRADE UPGRADE Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information local
• CVE-2025-3025 HIGH 7.3 Elevation of Privileges in the cleaning feature of Gen Digital CCleaner version 6.33.11465 on Windows allows a
• CVE-2026-0392 HIGH 7.3 eParakstītājs 3.0 for Windows before version 1.10.0 retrieves and executes its automatic updates over a channe
• CVE-2026-17846 MEDIUM 6.5 UPGRADE Inappropriate implementation in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote atta
• CVE-2026-19139 HIGH 7.4 UPGRADE Race in CredentialProvider in Google Chrome on Windows prior to 151.0.7922.109 allowed a local attacker to per
• CVE-2026-40145 HIGH 7.1 A vulnerability exists in the interaction between a Endpoint Privilege Management (Windows Deployment) support
• CVE-2026-0295 HIGH 7.0 UPGRADE A race condition in the Palo Alto Networks GlobalProtect™ client on macOS enables a locally authenticated low-
• CVE-2026-17993 HIGH 7.0 UPGRADE Race in Updater in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform privile
• CVE-2026-18097 MEDIUM 5.5 UPGRADE UPGRADE IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Ser
• CVE-2026-114723 LOW 3.7 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the ImageMagick resource limits to be bypassed d
• CVE-2026-17790 MEDIUM 4.3 UPGRADE Uninitialized Use in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to obt
• CVE-2026-17908 MEDIUM 5.8 UPGRADE Insufficient validation of untrusted input in Printing in Google Chrome on Windows prior to 151.0.7922.72 allo
• CVE-2026-50544 MEDIUM 6.3 NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight
• CVE-2026-0292 MEDIUM 6.0 UPGRADE An authentication bypass vulnerability in the network driver of Palo Alto Networks Prisma® Access Agent on Win
• CVE-2023-29532 MEDIUM 5.5 UPGRADE UPGRADE A local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file by pointing t
• CVE-2026-0293 MEDIUM 6.0 UPGRADE A vulnerability in Palo Alto Networks Prisma® Access Agent on Windows enables a local attacker with administra
• CVE-2026-114645 MEDIUM 5.2 A 32-bit integer wraparound in the MongoDB C Driver's Windows-only Kerberos/SSPI authentication code can cause
• CVE-2026-17858 MEDIUM 4.3 UPGRADE Uninitialized Use in WebNN in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to lea
• CVE-2026-17932 MEDIUM 5.5 UPGRADE Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to
• CVE-2026-17706 MEDIUM 4.3 UPGRADE Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed
• CVE-2026-33921 MEDIUM 5.2 The Windows installer deployed Npcap leaving its access restriction option at the insecure default value, so t
• CVE-2026-71381 MEDIUM 4.0 Adobe Genuine Software Integrity Service on Windows is affected by an Incorrect Authorization vulnerability th
• CVE-2026-17900 MEDIUM 4.3 UPGRADE Inappropriate implementation in Enterprise in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote
• CVE-2026-18096 LOW 3.3 DOWNGRADE DOWNGRADE IBM Db2 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local attacker to cause
• CVE-2026-18909 MEDIUM 4.7 A stack-based buffer overflow vulnerability exists in ELAN Microelectronics Corp
• CVE-2026-0291 MEDIUM 4.4 UPGRADE An improper link resolution before file access vulnerability exists in the Palo Alto Networks Prisma® Access A
• CVE-2026-18018 MEDIUM 4.0 UPGRADE Inappropriate implementation in Updater in Google Chrome on Windows prior to 151.0.7922.72 allowed a local att

FAQ

How do I fix Windows vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is Windows being exploited right now?

Yes: 3 Windows CVEs are on the CISA Known Exploited Vulnerabilities list, so patch those first.

Which Windows CVE should I patch first?

CVE-2026-85880 currently ranks highest (80/100): Microsoft Windows Heap-Based Buffer Overflow Vulnerability.

← Back to latest CVEs