microsoft vulnerabilities and threats

6,659 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	5.5	EPSS 1.0%	CVE-2026-70055Microsoft Windows 10 Version 1607 · Exposure of Sensitive System Information to an Unauthorized Control Sphere Medium5.5EPSS 1.0%2026-10-13CVE Database V5CVE-2026-70055 Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information locally. EPSS 1.0%Vulnerability CWE-497	CVE Database V5	2026-10-13
High	7.8	EPSS 0.4%	CVE-2026-70051Microsoft Windows 10 Version 1809 · Type Confusion High7.8EPSS 0.4%2026-10-13CVE Database V5CVE-2026-70051 Access of resource using incompatible type ('type confusion') in Windows SmartScreen allows an authorized attacker to elevate privileges locally. EPSS 0.4%Vulnerability CWE-843	CVE Database V5	2026-10-13
High	7.5	EPSS 0.6%	CVE-2026-70006Microsoft Windows 10 Version 1607 · Use After Free High7.5EPSS 0.6%2026-10-13CVE Database V5CVE-2026-70006 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. EPSS 0.6%Vulnerability CWE-416	CVE Database V5	2026-10-13
High	7.5	EPSS 0.6%	CVE-2026-70004Microsoft Windows 10 Version 1607 · Use After Free High7.5EPSS 0.6%2026-10-13CVE Database V5CVE-2026-70004 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. EPSS 0.6%Vulnerability CWE-416	CVE Database V5	2026-10-13
High	7.5	EPSS 0.6%	CVE-2026-70012Microsoft Windows 10 Version 1607 · Use After Free High7.5EPSS 0.6%2026-10-13CVE Database V5CVE-2026-70012 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. EPSS 0.6%Vulnerability CWE-416	CVE Database V5	2026-10-13
Medium	5.5	EPSS 0.5%	CVE-2026-69999Microsoft Windows 11 version 23H2 · Out-of-bounds Read Medium5.5EPSS 0.5%2026-10-13CVE Database V5CVE-2026-69999 Out-of-bounds read in Windows Update allows an authorized attacker to disclose information locally. EPSS 0.5%Vulnerability CWE-125	CVE Database V5	2026-10-13
High	7.5	EPSS 0.6%	CVE-2026-69998Microsoft Windows 10 Version 1607 · Use After Free High7.5EPSS 0.6%2026-10-13CVE Database V5CVE-2026-69998 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. EPSS 0.6%Vulnerability CWE-416	CVE Database V5	2026-10-13
High	7.5	EPSS 0.6%	CVE-2026-69992Microsoft Windows 10 Version 1607 · Use After Free High7.5EPSS 0.6%2026-10-13CVE Database V5CVE-2026-69992 Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network. EPSS 0.6%Vulnerability CWE-416	CVE Database V5	2026-10-13
High	7.5	EPSS 0.6%	CVE-2026-69994Microsoft Windows 10 Version 1607 · Use After Free High7.5EPSS 0.6%2026-10-13CVE Database V5CVE-2026-69994 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. EPSS 0.6%Vulnerability CWE-416	CVE Database V5	2026-10-13
High	7.5	EPSS 0.6%	CVE-2026-69991Microsoft Windows 10 Version 1607 · Use After Free High7.5EPSS 0.6%2026-10-13CVE Database V5CVE-2026-69991 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. EPSS 0.6%Vulnerability CWE-416	CVE Database V5	2026-10-13
High	7.5	EPSS 0.6%	CVE-2026-69996Microsoft Windows 10 Version 1607 · Use After Free High7.5EPSS 0.6%2026-10-13CVE Database V5CVE-2026-69996 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. EPSS 0.6%Vulnerability CWE-416	CVE Database V5	2026-10-13
High	7.5	EPSS 0.6%	CVE-2026-69997Microsoft Windows 10 Version 1607 · Use After Free High7.5EPSS 0.6%2026-10-13CVE Database V5CVE-2026-69997 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. EPSS 0.6%Vulnerability CWE-416	CVE Database V5	2026-10-13
High	7.5	EPSS 0.6%	CVE-2026-69995Microsoft Windows 10 Version 1607 · Use After Free High7.5EPSS 0.6%2026-10-13CVE Database V5CVE-2026-69995 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. EPSS 0.6%Vulnerability CWE-416	CVE Database V5	2026-10-13
High	7.5	EPSS 0.6%	CVE-2026-69987Microsoft Windows 10 Version 1607 · Use After Free High7.5EPSS 0.6%2026-10-13CVE Database V5CVE-2026-69987 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. EPSS 0.6%Vulnerability CWE-416	CVE Database V5	2026-10-13
High	7.5	EPSS 0.6%	CVE-2026-69988Microsoft Windows 10 Version 1607 · Use After Free High7.5EPSS 0.6%2026-10-13CVE Database V5CVE-2026-69988 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. EPSS 0.6%Vulnerability CWE-416	CVE Database V5	2026-10-13
High	7.5	EPSS 0.6%	CVE-2026-69986Microsoft Windows 10 Version 1607 · Use After Free High7.5EPSS 0.6%2026-10-13CVE Database V5CVE-2026-69986 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. EPSS 0.6%Vulnerability CWE-416	CVE Database V5	2026-10-13
High	8.8	EPSS 0.8%	CVE-2026-69985Microsoft Windows 10 Version 1809 · Heap-based Buffer Overflow High8.8EPSS 0.8%2026-10-13CVE Database V5CVE-2026-69985 Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network. EPSS 0.8%Vulnerability CWE-122	CVE Database V5	2026-10-13
High	7.5	EPSS 0.6%	CVE-2026-69984Microsoft Windows 10 Version 1607 · Use After Free High7.5EPSS 0.6%2026-10-13CVE Database V5CVE-2026-69984 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. EPSS 0.6%Vulnerability CWE-416	CVE Database V5	2026-10-13
High	7.8	EPSS 0.4%	CVE-2026-69880Microsoft Windows 10 Version 1809 · Type Confusion High7.8EPSS 0.4%2026-10-13CVE Database V5CVE-2026-69880 Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally. EPSS 0.4%Vulnerability CWE-843	CVE Database V5	2026-10-13
High	7.0	EPSS 0.2%	CVE-2026-69856Microsoft Windows 10 Version 1809 · Use After Free High7.0EPSS 0.2%2026-10-13CVE Database V5CVE-2026-69856 Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. EPSS 0.2%Vulnerability CWE-416	CVE Database V5	2026-10-13

Page 35 of 336