Windows vulnerabilities

CVEs with a Microsoft security update (KB) listed.

34 tracked CVEs have Microsoft KB fix information. Highest priority: CVE-2026-85880 (Microsoft Windows Heap-Based Buffer Overflow Vulnerability), score 80/100.

• CVE-2026-85880 HIGH 7.8 EXPLOITED UPGRADE UPGRADE Microsoft Windows Heap-Based Buffer Overflow Vulnerability
• CVE-2026-96951 HIGH 8.8 EXPLOITED MITIGATE UPGRADE Microsoft Windows Command Injection Vulnerability
• CVE-2026-81963 HIGH 7.8 EXPLOITED UPGRADE UPGRADE Microsoft Windows Link Following Vulnerability
• CVE-2026-96960 HIGH 7.5 UPGRADE DOWNGRADE Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a
• CVE-2026-96958 HIGH 7.5 UPGRADE DOWNGRADE Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
• CVE-2026-83862 HIGH 8.8 UPGRADE UPGRADE Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over an adjac
• CVE-2026-62785 HIGH 8.8 UPGRADE UPGRADE Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized atta
• CVE-2026-62795 HIGH 8.8 UPGRADE UPGRADE Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to exec
• CVE-2026-96959 HIGH 7.5 UPGRADE DOWNGRADE Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service o
• CVE-2026-69521 HIGH 8.8 UPGRADE UPGRADE Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network
• CVE-2026-69718 HIGH 7.8 UPGRADE UPGRADE Improper neutralization of special elements used in a command ('command injection') in Windows Update allows a
• CVE-2026-69326 HIGH 8.8 UPGRADE UPGRADE Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
• CVE-2026-96222 HIGH 7.4 UPGRADE UPGRADE Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacke
• CVE-2026-69363 HIGH 8.0 UPGRADE UPGRADE Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over
• CVE-2026-96957 HIGH 8.8 UPGRADE UPGRADE Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security
• CVE-2026-85790 MEDIUM 5.9 UPGRADE UPGRADE Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.
• CVE-2026-69673 HIGH 7.8 UPGRADE UPGRADE Improper link resolution before file access ('link following') in Windows Update allows an authorized attacker
• CVE-2026-69733 HIGH 7.8 UPGRADE UPGRADE Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.
• CVE-2026-69452 HIGH 7.1 UPGRADE UPGRADE Use after free in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a
• CVE-2026-96913 HIGH 8.8 UPGRADE UPGRADE Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
• CVE-2026-96911 HIGH 7.8 UPGRADE UPGRADE Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an
• CVE-2026-96914 HIGH 8.8 UPGRADE UPGRADE Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized att
• CVE-2026-62772 HIGH 7.8 UPGRADE Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized
• CVE-2026-62799 HIGH 7.8 UPGRADE Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally.
• CVE-2026-68836 HIGH 7.8 UPGRADE UPGRADE Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally
• CVE-2026-69354 HIGH 7.8 UPGRADE UPGRADE Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges loca
• CVE-2026-69471 HIGH 7.8 UPGRADE UPGRADE Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
• CVE-2026-108136 HIGH 7.8 UPGRADE UPGRADE Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges local
• CVE-2026-96912 HIGH 7.8 UPGRADE UPGRADE Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally.
• CVE-2026-108135 HIGH 7.0 UPGRADE UPGRADE Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized a
• CVE-2026-69387 HIGH 7.0 UPGRADE UPGRADE Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
• CVE-2026-108132 HIGH 7.0 UPGRADE UPGRADE Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.
• CVE-2026-108396 HIGH 7.0 UPGRADE UPGRADE Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authoriz
• CVE-2026-72971 MEDIUM 5.5 UPGRADE Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver

FAQ

How do I find the KB update for a CVE?

Open the CVE page and look for the Windows entry: it lists the KB number and the fixed build.

How do I check a KB is installed?

Run Get-HotFix -Id KBxxxxxxx in PowerShell, or check Windows Update history.