Windows vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
1,157 matching records
- Medium5.0FreeRDP 3.30.0 before 3.32.0 Heap Over-Read via Windows cliprdr FILECONTENTS_SIZECheck if you run itEPSS 0.14%Oct 16, 2026
- Medium6.0Improper certificate validation in Cato Client tunnel handshakeCheck if you run itEPSS 0.08%Oct 15, 2026
- High7.5In Omada Controller MSP mode, the user-confirmation endpoint fails to enforce the required permission check.Check if you run itEPSS 0.44%Oct 14, 2026
- Medium4.3A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service (DoS) condition.Check if you run itEPSS 0.10%Oct 14, 2026
- Critical9.2Beganovich snappdf from 1.1.0 before 6.1.0 contains an OS command injection vulnerability on Windows that allows attackers to run commands by influencing the rendered URL.Check if you run itEPSS 2.12%Oct 14, 2026
- Medium5.3Microsoft Security Advisory CVE-2026-96234 - .NET and Visual Studio Information Disclosure VulnerabilityCheck if you run itEPSS 0.28%Oct 13, 2026
- Medium6.5Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.Check if you run itEPSS 0.55%Oct 13, 2026
- High7.8Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.24%Oct 13, 2026
- High7.8Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.29%Oct 13, 2026
- High7.8Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.34%Oct 13, 2026
- High7.8Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.31%Oct 13, 2026
- High7.0Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.24%Oct 13, 2026
- High7.8Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.30%Oct 13, 2026
- Medium5.5Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform t…Check if you run itEPSS 0.36%Oct 13, 2026
- High7.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an aut…Check if you run itEPSS 0.20%Oct 13, 2026
- High7.8Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally.Check if you run itEPSS 0.24%Oct 13, 2026
- High8.8Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.78%Oct 13, 2026
- High7.8Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.31%Oct 13, 2026
- High7.0Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.19%Oct 13, 2026
- Medium5.5Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.Check if you run itEPSS 0.46%Oct 13, 2026
- High7.8Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.31%Oct 13, 2026
- High7.8Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.31%Oct 13, 2026
- High7.5Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.Check if you run itEPSS 0.82%Oct 13, 2026
- Medium5.5Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.Check if you run itEPSS 0.46%Oct 13, 2026
- Medium6.7Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.33%Oct 13, 2026
Page 1 of 47Next