microsoft / windows
990 known vulnerabilities in microsoft windows.
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2026-78978 | Medium | 0.4% | 8.8 | Out of bounds read in ANGLE in Google Chrome on on Windows prior to 152.0.7977.6… | |
| CVE-2026-19158 | Medium | 0.4% | 7.5 | Use after free in Views in Google Chrome on Windows prior to 151.0.7922.109 allo… | |
| CVE-2026-34711 | Medium | 0.4% | 7.5 | CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are af… | |
| CVE-2026-10910 | Medium | 0.4% | 8.8 | Type Confusion in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote at… | |
| CVE-2026-7337 | Medium | 0.4% | 8.8 | Type Confusion in V8 in Google Chrome prior to 147.0.7727.138 allowed a remote a… | |
| CVE-2026-7336 | Medium | 0.4% | 8.8 | Use after free in WebRTC in Google Chrome prior to 147.0.7727.138 allowed a remo… | |
| CVE-2026-10941 | Medium | 0.4% | 8.8 | Out of bounds memory access in Skia in Google Chrome prior to 149.0.7827.53 allo… | |
| CVE-2026-34622 | Medium | 0.4% | 8.6 | Acrobat Reader versions 26.001.21411, 24.001.30360, 24.001.30362 and earlier are… | |
| CVE-2026-19297 | Medium | 0.4% | 9.1 | IBM Langflow OSS 1.0.0 through 1.9.6 could allow a remote attacker to obtain una… | |
| CVE-2026-34617 | Medium | 0.4% | 8.7 | Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Cross-Site Sc… | |
| CVE-2026-9939 | Medium | 0.4% | 8.8 | Heap buffer overflow in WebCodecs in Google Chrome prior to 148.0.7778.216 allow… | |
| CVE-2026-10904 | Medium | 0.4% | 8.8 | Inappropriate implementation in V8 in Google Chrome prior to 149.0.7827.53 allow… | |
| CVE-2026-10928 | Medium | 0.4% | 8.8 | Script injection in Headless in Google Chrome prior to 149.0.7827.53 allowed a r… | |
| CVE-2026-58641 | Medium | 0.4% | 7.8 | Integer overflow or wraparound in .NET allows an unauthorized attacker to elevat… | |
| CVE-2026-62886 | Medium | 0.4% | 7.8 | Integer overflow or wraparound in .NET allows an unauthorized attacker to elevat… | |
| CVE-2026-19306 | Medium | 0.4% | 7.7 | IBM Langflow OSS 1.0.0 through 1.11.2 allows an authenticated attacker to read a… | |
| CVE-2026-48334 | Medium | 0.4% | 9.3 | Illustrator is affected by an Improper Input Validation vulnerability that could… | |
| CVE-2026-62871 | Medium | 0.4% | 7.8 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code loca… | |
| CVE-2026-9118 | Medium | 0.4% | 8.8 | Use after free in XR in Google Chrome on Windows prior to 148.0.7778.179 allowed… | |
| CVE-2026-9126 | Medium | 0.4% | 8.8 | Use after free in DOM in Google Chrome on prior to 148.0.7778.179 allowed a remo… | |
| CVE-2026-12878 | Medium | 0.4% | 8.8 | In affected versions of the Codefresh platform an authenticated user can utilize… | |
| CVE-2026-10935 | Medium | 0.4% | 8.8 | Type Confusion in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote at… | |
| CVE-2026-10936 | Medium | 0.4% | 8.8 | Type Confusion in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote at… | |
| CVE-2026-10962 | Medium | 0.4% | 8.8 | Type Confusion in Media in Google Chrome prior to 149.0.7827.53 allowed a remote… | |
| CVE-2026-10881 | Medium | 0.4% | 9.6 | Out of bounds read and write in ANGLE in Google Chrome prior to 149.0.7827.53 al… | |
| CVE-2026-10883 | Medium | 0.4% | 8.8 | Type Confusion in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote… | |
| CVE-2026-10895 | Medium | 0.4% | 8.8 | Use after free in Ozone in Google Chrome prior to 149.0.7827.53 allowed a remote… | |
| CVE-2026-10902 | Medium | 0.4% | 8.8 | Use after free in Ozone in Google Chrome prior to 149.0.7827.53 allowed a remote… | |
| CVE-2026-10913 | Medium | 0.4% | 8.8 | Use after free in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allow… | |
| CVE-2026-10914 | Medium | 0.4% | 8.8 | Use after free in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allow… | |
| CVE-2026-10954 | Medium | 0.4% | 8.8 | Use after free in Actor in Google Chrome prior to 149.0.7827.53 allowed a remote… | |
| CVE-2026-10956 | Medium | 0.4% | 8.8 | Use after free in MimeHandlerView in Google Chrome prior to 149.0.7827.53 allowe… | |
| CVE-2026-7341 | Medium | 0.4% | 8.8 | Use after free in WebRTC in Google Chrome prior to 147.0.7727.138 allowed a remo… | |
| CVE-2026-7342 | Medium | 0.4% | 8.8 | Use after free in WebView in Google Chrome on Android prior to 147.0.7727.138 al… | |
| CVE-2026-7348 | Medium | 0.4% | 8.8 | Use after free in Codecs in Google Chrome prior to 147.0.7727.138 allowed a remo… | |
| CVE-2026-7355 | Medium | 0.4% | 8.8 | Use after free in Media in Google Chrome prior to 147.0.7727.138 allowed a remot… | |
| CVE-2026-7358 | Medium | 0.4% | 8.8 | Use after free in Animation in Google Chrome prior to 147.0.7727.138 allowed a r… | |
| CVE-2026-87616 | Medium | 0.4% | 8.3 | Improper initialization in Views in Google Chrome on on Windows prior to 153.0.8… | |
| CVE-2026-11118 | Medium | 0.4% | 8.8 | Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remot… | |
| CVE-2026-19303 | Medium | 0.4% | 8.1 | IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacke… | |
| CVE-2026-45490 | Medium | 0.4% | 7.8 | Improper authorization in .NET allows an authorized attacker to elevate privileg… | |
| CVE-2026-9952 | Medium | 0.4% | 8.8 | Use after free in WebAudio in Google Chrome prior to 148.0.7778.216 allowed a re… | |
| CVE-2026-10955 | Medium | 0.4% | 8.8 | Type Confusion in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allow… | |
| CVE-2026-13446 | Medium | 0.4% | 9.8 | IBM Langflow OSS 1.0.0 through 1.10.1 contains hard-coded credentials, such as a… | |
| CVE-2026-7335 | Medium | 0.4% | 8.8 | Use after free in media in Google Chrome prior to 147.0.7727.138 allowed a remot… | |
| CVE-2026-7356 | Medium | 0.4% | 8.8 | Use after free in Navigation in Google Chrome prior to 147.0.7727.138 allowed a … | |
| CVE-2026-7363 | Medium | 0.4% | 8.8 | Use after free in Canvas in Google Chrome on Linux, ChromeOS prior to 147.0.7727… | |
| CVE-2026-78952 | Medium | 0.4% | 8.3 | Out of bounds write in Crashpad in Google Chrome on on Windows prior to 152.0.79… | |
| CVE-2026-8850 | Medium | 0.4% | 7.5 | IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional… | |
| CVE-2026-35562 | Medium | 0.4% | 7.5 | Allocation of resources without limits in the parsing components in Amazon Athen… |