Product of Microsoft
Windows, page 3
As of , 174 Microsoft Windows vulnerabilities are on CISA's list of exploited vulnerabilities, 49 of them used in ransomware campaigns; 13 were added in 2026. Patch first: CVE-2025-60710.
| # | Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|---|
| 126 | CVE-2021-34486Event Tracing Privilege Escalation | Microsoft Windows | Patch soon | 0.09 | ||
| 127 | CVE-2021-33771Kernel Privilege Escalation | Microsoft Windows | Patch soon | 0.10 | ||
| 128 | CVE-2026-20805Information Disclosure | Microsoft Windows | Patch soon | 0.07 | ||
| 129 | CVE-2024-38080Hyper-V Privilege Escalation | Microsoft Windows | Patch soon | 0.07 | ||
| 130 | CVE-2020-0683Installer Privilege Escalation | Microsoft Windows | Patch soon | 0.08 | ||
| 131 | CVE-2025-62215Race Condition | Microsoft Windows | Patch soon | 0.06 | ||
| 132 | CVE-2025-24990Untrusted Pointer Dereference | Microsoft Windows | Patch soon | 0.06 | ||
| 133 | CVE-2024-38014Installer Improper Privilege Management | Microsoft Windows | Patch soon | 0.06 | ||
| 134 | CVE-2024-38106Kernel Privilege Escalation | Microsoft Windows | Patch soon | 0.06 | ||
| 135 | CVE-2021-33739Desktop Window Manager (DWM) Core Library Privilege Escalation | Microsoft Windows | Patch soon | 0.07 | ||
| 136 | CVE-2023-21823Graphic Component Privilege Escalation | Microsoft Windows | Patch soon | 0.06 | ||
| 137 | CVE-2015-6175Kernel Privilege Escalation | Microsoft Windows | Patch soon | 0.05 | ||
| 138 | CVE-2019-0863Error Reporting (WER) Privilege Escalation | Microsoft Windows | Patch soon | 0.05 | ||
| 139 | CVE-2020-17087Kernel Privilege Escalation | Microsoft Windows | Patch soon | 0.05 | ||
| 140 | CVE-2026-32202Protection Mechanism Failure | Microsoft Windows | Patch soon | 0.05 | ||
| 141 | CVE-2026-21525NULL Pointer Dereference | Microsoft Windows | Patch soon | 0.05 | ||
| 142 | CVE-2020-1027Kernel Privilege Escalation | Microsoft Windows | Patch soon | 0.05 | ||
| 143 | CVE-2009-1123Improper Input Validation | Microsoft Windows | Patch soon | 0.05 | ||
| 144 | CVE-2021-31979Kernel Privilege Escalation | Microsoft Windows | Patch soon | 0.05 | ||
| 145 | CVE-2026-21533Improper Privilege Management | Microsoft Windows | Patch soon | 0.04 | ||
| 146 | CVE-2025-24985Fast FAT File System Driver Integer Overflow | Microsoft Windows | Patch soon | 0.04 | ||
| 147 | CVE-2024-30040MSHTML Platform Security Feature Bypass | Microsoft Windows | Patch soon | 0.04 | ||
| 148 | CVE-2023-32049Defender SmartScreen Security Feature Bypass | Microsoft Windows | Patch soon | 0.04 | ||
| 149 | CVE-2015-1769Mount Manager Privilege Escalation | Microsoft Windows | Patch soon | 0.04 | ||
| 150 | CVE-2018-8611Kernel Privilege Escalation | Microsoft Windows | Patch soon | 0.04 | ||
| 151 | CVE-2026-85880Heap-Based Buffer Overflow | Microsoft Windows | Patch soon | 0.04 | ||
| 152 | CVE-2023-36584Mark of the Web (MOTW) Security Feature Bypass | Microsoft Windows | Patch soon | 0.03 | ||
| 153 | CVE-2022-41125CNG Key Isolation Service Privilege Escalation | Microsoft Windows | Patch soon | 0.03 | ||
| 154 | CVE-2025-59230Improper Access Control | Microsoft Windows | Patch soon | 0.03 | ||
| 155 | CVE-2025-62221Use After Free | Microsoft Windows | Patch soon | 0.03 | ||
| 156 | CVE-2022-41049Mark of the Web (MOTW) Security Feature Bypass | Microsoft Windows | Patch soon | 0.02 | ||
| 157 | CVE-2026-21519Type Confusion | Microsoft Windows | Patch soon | 0.02 | ||
| 158 | CVE-2022-21919User Profile Service Privilege Escalation | Microsoft Windows | Patch soon | 0.02 | ||
| 159 | CVE-2025-32706Common Log File System (CLFS) Driver Heap-Based Buffer Overflow | Microsoft Windows | Patch soon | 0.02 | ||
| 160 | CVE-2025-24993NTFS Heap-Based Buffer Overflow | Microsoft Windows | Patch soon | 0.02 | ||
| 161 | CVE-2025-21391Storage Link Following | Microsoft Windows | Patch soon | 0.02 | ||
| 162 | CVE-2019-0880Privilege Escalation | Microsoft Windows | Patch soon | 0.02 | ||
| 163 | CVE-2025-32709Ancillary Function Driver for WinSock Use-After-Free | Microsoft Windows | Patch soon | 0.02 | ||
| 164 | CVE-2025-24984NTFS Information Disclosure | Microsoft Windows | Patch soon | 0.02 | ||
| 165 | CVE-2025-24991NTFS Out-Of-Bounds Read | Microsoft Windows | Patch soon | 0.02 | ||
| 166 | CVE-2025-30400DWM Core Library Use-After-Free | Microsoft Windows | Patch soon | 0.02 | ||
| 167 | CVE-2024-38107Power Dependency Coordinator Privilege Escalation | Microsoft Windows | Patch soon | 0.02 | ||
| 168 | CVE-2025-21418Ancillary Function Driver for WinSock Heap-Based Buffer Overflow | Microsoft Windows | Patch soon | 0.02 | ||
| 169 | CVE-2025-21334Hyper-V NT Kernel Integration VSP Use-After-Free | Microsoft Windows | Patch soon | 0.02 | ||
| 170 | CVE-2025-32701Common Log File System (CLFS) Driver Use-After-Free | Microsoft Windows | Patch soon | 0.01 | ||
| 171 | CVE-2025-24983Win32k Use-After-Free | Microsoft Windows | Patch soon | 0.01 | ||
| 172 | CVE-2025-21335Hyper-V NT Kernel Integration VSP Use-After-Free | Microsoft Windows | Patch soon | 0.01 | ||
| 173 | CVE-2019-1214Privilege Common Log File System (CLFS) Escalation | Microsoft Windows | Patch soon | 0.01 | ||
| 174 | CVE-2026-81963Link Following | Microsoft Windows | Patch soon | 0.00 |