972 exploited vulnerabilities in Windows

Showing 1–50 of 972, highest-scoring first

Vendors: Microsoft, Motorola, Alt Linux, Apple, Red Os, Suse
With known exploits: 972
Affected Microsoft Windows 11 23h2 versions: All versions
Affected Microsoft Windows 11 24h2 versions: < 10.0.26100.8390, 10.0.26100.6508, 10.0.26100.2894, 10.0.26100.2605, 10.0.26100.1457
Affected Microsoft Windows 11 25h2 versions: < 10.0.26200.8390
Affected Microsoft Windows 11 26h1 versions: < 10.0.28000.2113
Affected Microsoft Windows Server 2022 23h2 versions: < 10.0.25398.2330, 10.0.25398.1916, 10.0.25398.1849, 10.0.25398.1369, 10.0.25398.1308, 10.0.25398.1085, 10.0.25398.1009, 10.0.25398.830
Affected Microsoft Windows Server 2025 versions: < 10.0.26100.32772, 10.0.26100.6905, 10.0.26100.6508, 10.0.26100.2894, 10.0.26100.2605
Affected Microsoft Windows Server 2012 versions: All versions
Affected Microsoft Windows Server 2016 versions: All versions

CVE-2026-41096 4 exploits

CVSS 10.0 CRITICAL 2026-05-12FIX AVAILABLE

Exploit for Heap-based Buffer Overflow in Microsoft Exploit for Heap-based Buffer Overflow in Microsoft

CVE-2026-41089 34 exploits

CVSS 10.0 CRITICAL 2026-05-12FIX AVAILABLE

Exploit for Stack-based Buffer Overflow in Microsoft Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2025-59287 23 exploits

CVSS 10.0 CRITICAL 2025-10-14FIX AVAILABLE

Exploit for Deserialization of Untrusted Data in Microsoft Exploit for Deserialization of Untrusted Data in Microsoft

CVE-2025-55234 1 exploit

CVSS 10.0 CRITICAL 2025-09-09FIX AVAILABLE

Exploit for Improper Authentication in Microsoft

CVE-2025-54106 1 exploit

CVSS 10.0 HIGH 2025-09-09

Exploit for Integer Overflow or Wraparound in Microsoft

CVSS 10.0 CRITICAL 2025-07-08

CVSS 10.0 CRITICAL 2025-01-06

CVE-2025-21298 6 exploits

CVSS 10.0 CRITICAL 2025-01-14FIX AVAILABLE

Exploit for Use After Free in Microsoft Exploit for Use After Free in Microsoft

CVE-2024-49112 3 exploits

CVSS 10.0 CRITICAL 2024-12-10FIX AVAILABLE

Exploit for Integer Overflow or Wraparound in Microsoft Exploit for Integer Overflow or Wraparound in Microsoft

CVE-2024-38063 24 exploits

CVSS 10.0 CRITICAL 2024-08-13

Exploit for Integer Underflow (Wrap or Wraparound) in Microsoft Exploit for Integer Underflow (Wrap or Wraparound) in Microsoft

CVE-2024-38077 5 exploits

CVSS 10.0 CRITICAL 2024-07-09FIX AVAILABLE

Exploit for Heap-based Buffer Overflow in Microsoft Exploit for Heap-based Buffer Overflow in Microsoft

CVE-2024-29988 1 exploit

CVSS 10.0 HIGH 2024-04-09FIX AVAILABLE

Exploit for Protection Mechanism Failure in Microsoft

CVE-2023-36025 2 exploits

CVSS 10.0 HIGH 2023-11-14

Exploit for CVE-2023-36025 Exploit for CVE-2023-36025

CVSS 10.0 HIGH 2023-07-17FIX AVAILABLE

CVE-2023-38146 5 exploits

CVSS 10.0 HIGH 2023-09-12FIX AVAILABLE

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Microsoft Themebleed Windows 11 Themes Arbitrary Code Execution Exploit

CVE-2023-21554 7 exploits

CVSS 10.0 CRITICAL 2023-04-11

Exploit for Improper Input Validation in Microsoft Exploit for Improper Input Validation in Microsoft

CVSS 10.0 CRITICAL 2023-03-14FIX AVAILABLE

CVSS 10.0 CRITICAL 2022-03-11FIX AVAILABLE

CVE-2022-35737 1 exploit

CVSS 10.0 HIGH 2022-07-22FIX AVAILABLE

Exploit for Improper Validation of Array Index in Sqlite

CVE-2022-34718 2 exploits

CVSS 10.0 CRITICAL 2022-09-13

Exploit for Improper Handling of Exceptional Conditions in Google Chrome Exploit for CVE-2022-34718

CVSS 10.0 CRITICAL 2022-08-09

CVE-2022-30136 2 exploits

CVSS 10.0 CRITICAL 2022-06-14

Exploit for CVE-2022-30136 Exploit for CVE-2022-30136

CVE-2022-30190 62 exploits

CVSS 10.0 HIGH 2022-05-30FIX AVAILABLE

Exploit for CVE-2022-30190 Exploit for CVE-2022-30190

CVE-2022-26937 3 exploits

CVSS 10.0 CRITICAL 2022-05-10

Exploit for CVE-2022-26937 Exploit for CVE-2022-26937

CVE-2022-24491 1 exploit

CVSS 10.0 CRITICAL 2022-02-05

Exploit for CVE-2022-24491

CVE-2022-24497 1 exploit

CVSS 10.0 CRITICAL 2022-04-05

Exploit for CVE-2022-24497

CVE-2022-26809 14 exploits

CVSS 10.0 CRITICAL 2022-04-12FIX AVAILABLE

Exploit for CVE-2022-26809 Exploit for CVE-2022-26809

CVE-2022-24500 2 exploits

CVSS 10.0 HIGH 2022-04-12

Exploit for CVE-2022-24500 Exploit for CVE-2022-24500

CVE-2022-21907 21 exploits

CVSS 10.0 CRITICAL 2022-01-11FIX AVAILABLE

Exploit for CVE-2022-21907 Exploit for CVE-2022-21907

CVE-2021-31166 24 exploits

CVSS 10.0 CRITICAL 2021-05-11

Exploit for Use After Free in Microsoft Windows IIS HTTP Protocol Stack Denial of Service

CVE-2020-11552 3 exploits

CVSS 10.0 CRITICAL 2020-08-11FIX AVAILABLE

ManageEngine ADSelfService Build prior to 6003 - Remote Code Execution (Unauthenticated)ManageEngine ADSelfService Build prior to 6003 - Remote Code Execution (Unauthenticated)

CVSS 10.0 HIGH 2020-01-07FIX AVAILABLE

CVE-2020-16898 12 exploits

CVSS 10.0 HIGH 2020-10-13

Exploit for CVE-2020-16898 Exploit for CVE-2020-16898

CVE-2020-1472 75 exploits

CVSS 10.0 HIGH 2020-08-11FIX AVAILABLE

Luban-2040-v2 Exploit for Race Condition in Canonical Ubuntu_Linux

CVE-2020-1350 21 exploits

CVSS 10.0 CRITICAL 2020-07-14FIX AVAILABLE

Exploit for Improper Input Validation in Microsoft Exploit for Improper Input Validation in Microsoft

CVE-2020-0796 127 exploits

CVSS 10.0 CRITICAL 2020-03-10FIX AVAILABLE

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

CVE-2020-0610 10 exploits

CVSS 10.0 CRITICAL 2020-01-14

Exploit for CVE-2020-0610 Exploit for CVE-2020-0609

CVE-2020-0609 11 exploits

CVSS 10.0 CRITICAL 2020-01-14

Exploit for CVE-2020-0609 Exploit for Insufficiently Protected Credentials in Zyxel Usg20-Vpn_Firmware

CVE-2019-1152 1 exploit

CVSS 10.0 HIGH 2019-08-13

Microsoft Font Subsetting - DLL Heap Corruption in MakeFormat12MergedGlyphList

CVE-2019-1150 2 exploits

CVSS 10.0 HIGH 2019-08-13

Microsoft Font Subsetting - DLL Heap-Based Out-of-Bounds read in WriteTableFromStructure Microsoft Font Subsetting - DLL Heap Corruption in ReadTableIntoStructure

CVE-2019-1145 1 exploit

CVSS 10.0 HIGH 2019-08-13

Microsoft Font Subsetting - DLL Returning a Dangling Pointer via MergeFontPackage

CVE-2019-1144 2 exploits

CVSS 10.0 HIGH 2019-08-13

Exploit for Unrestricted Upload of File with Dangerous Type in Cutephp Cutenews Microsoft Font Subsetting - DLL Double Free in MergeFormat12Cmap / MakeFormat12MergedGlyphList

CVE-2019-1170 2 exploits

CVSS 10.0 HIGH 2019-07-23

Windows 10 - SET_REPARSE_POINT_EX Mount Point Security Feature Bypass Exploit Microsoft Windows 10 - SET_REPARSE_POINT_EX Mount Point Security Feature Bypass

CVE-2019-0881 2 exploits

CVSS 10.0 HIGH 2019-05-14

Microsoft Windows 10 1809 - CmKeyBodyRemapToVirtualForEnum Arbitrary Key Enumeration Microsoft Windows 10 1809 - 'CmKeyBodyRemapToVirtualForEnum' Arbitrary Key Enumeration Privilege Escalation

CVE-2019-0708 128 exploits

CVSS 10.0 CRITICAL 2019-05-14

Windows-pentest-lab Exploit for Use After Free in Microsoft

CVSS 10.0 CRITICAL 2017-06-13FIX AVAILABLE

CVE-2016-7182 1 exploit

CVSS 10.0 CRITICAL 2016-10-11FIX AVAILABLE

Microsoft Windows - 'win32k.sys' TTF Processing win32k!sbit_Embolden / win32k!ttfdCloseFontContext Use-After-Free (MS16-120)

CVE-2016-3236 2 exploits

CVSS 10.0 CRITICAL 2016-06-14

NetBIOS Response BadTunnel Brute Force Spoof (NAT Tunnel)NetBIOS Response "BadTunnel" Brute Force Spoof (NAT Tunnel)

CVE-2015-1635 17 exploits

CVSS 10.0 CRITICAL 2015-04-14FIX AVAILABLE

Exploit for Code Injection in Microsoft MS15-034 HTTP Protocol Stack Request Handling HTTP.SYS Memory Information Disclosure

CVSS 10.0 HIGH 2014-11-11FIX AVAILABLE