Technology · Microsoft
Microsoft Windows vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 2,362 vulnerabilities in Microsoft Windows: 422 in the last 7 days and 1,607 in the last 90 days, 280 of them critical and 181 exploited in the wild. The most recent, CVE-2026-97015, was published on 10 November 2026. 688 vulnerabilities in the last four weeks, up 1866% on the four before (35). 21 critical against 23, 1 exploited in the wild against 0.
- Last 7 days
- 422
- Last 90 days
- 1,607
- Critical, all time
- 280
- Exploited in the wild
- 181
About Microsoft Windows
Operating system for personal computers and servers developed and maintained by Microsoft.
Latest Microsoft Windows vulnerabilities
- CVE-2026-97015: Windows BitLocker heap buffer overflow with physical attackmediumCVSS 6.8
- CVE-2026-97013: Microsoft Windows Shell type confusion privilege elevationhighCVSS 7.8
- CVE-2026-97002: Microsoft Windows VMSwitch out-of-bounds read privilege escalationhighCVSS 7.5
- CVE-2026-97000: Microsoft Windows USM Communication Manager null pointer dereferencehighCVSS 7
- CVE-2026-96994: Microsoft Windows Winsock use after free privilege escalationhighCVSS 7
- CVE-2026-96993: Windows Performance Monitor invalid pointer release remote code executionhighCVSS 7.5
- CVE-2026-96992: Windows PCI Bus Driver use-after-free privilege escalationmediumCVSS 6.4
- CVE-2026-96989: Microsoft Windows Secondary Logon out-of-bounds readmediumCVSS 5.5
- CVE-2026-96984: Windows DNS out-of-bounds read information disclosuremediumCVSS 4.9
- CVE-2026-96983: Windows DNS use-after-free denial of servicemediumCVSS 5.3
- CVE-2026-96981: Windows PCI Bus Driver out-of-bounds write privilege escalationmediumCVSS 6.4
- CVE-2026-96978: Windows Credential User Interface use-after-free privilege escalationhighCVSS 7
- CVE-2026-96973: Windows Encrypting File System privilege escalationhighCVSS 7
- CVE-2026-96972: Microsoft Windows DNS out-of-bounds read information disclosurehighCVSS 7.5
- CVE-2026-96971: Windows NetBIOS use-after-free privilege elevationhighCVSS 7
- CVE-2026-96969: Microsoft Windows TCP/IP double free privilege escalationhighCVSS 7
- CVE-2026-96845: Windows Task Scheduler privilege escalation via improper authorizationhighCVSS 7.8
- CVE-2026-96175: Microsoft Windows Desktop Window Manager privilege elevationhighCVSS 7.8
- CVE-2026-96174: Microsoft Windows Desktop Window Manager privilege escalationhighCVSS 7.8
- CVE-2026-96171: Windows Graphics Kernel use-after-free privilege escalationhighCVSS 7
- CVE-2026-96168: Microsoft Windows Graphics Kernel privilege escalationhighCVSS 7
- CVE-2026-96162: Microsoft Windows Clipboard Virtual Channel Extension privilege escalationhighCVSS 7.8
- CVE-2026-96160: Windows Graphics Kernel out-of-bounds read elevation of privilegehighCVSS 7.8
- CVE-2026-96156: Windows Broker Infrastructure Service information disclosuremediumCVSS 5.5
- CVE-2026-96155: Microsoft Windows Audio Service use-after-free privilege escalationhighCVSS 7
Most severe Microsoft Windows vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2008-4250: Microsoft Windows buffer overflow in Server servicecriticalexploited in the wildCVSS 10EPSS 93.5%
- CVE-2020-1472: Microsoft Netlogon Privilege Escalation Vulnerabilitycriticalexploited in the wildCVSS 10
- CVE-2020-1350: Microsoft Windows DNS Server Remote Code Execution Vulnerabilitycriticalexploited in the wildCVSS 10
- CVE-2025-59287: Microsoft Windows Server Update Service deserialization RCEcriticalexploited in the wildCVSS 9.8EPSS 71.4%
- CVE-2025-10585: Google Chrome type confusion in V8 enginecriticalexploited in the wildCVSS 9.8EPSS 5.4%
- CVE-2017-8543: Microsoft Windows Search Remote Code Execution Vulnerabilitycriticalexploited in the wildCVSS 9.8
- CVE-2008-0015: Microsoft Windows Video ActiveX Control stack buffer overflow in DirectShowcriticalexploited in the wildCVSS 9.3EPSS 81.6%
- CVE-2010-2568: Microsoft Windows Remote Code Execution Vulnerabilitycriticalexploited in the wildCVSS 9.3
- CVE-2015-1671: Microsoft Windows Remote Code Execution Vulnerabilitycriticalexploited in the wildCVSS 9.3
- CVE-2014-6332: Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerabilitycriticalexploited in the wildCVSS 9.3
Vulnerabilities per week
688 vulnerabilities in the last four weeks, up 1866% on the four before (35). 21 critical against 23, 1 exploited in the wild against 0. The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 3 | 0 | |
| 24 Aug 2026 | 26 | 6 | |
| 31 Aug 2026 | 20 | 0 | |
| 7 Sep 2026 | 413 | 17 | |
| 14 Sep 2026 | 4 | 0 | |
| 21 Sep 2026 | 28 | 22 | |
| 28 Sep 2026 | 2 | 1 | |
| 5 Oct 2026 | 1 | 0 | |
| 12 Oct 2026 | 688 | 21 | |
| 19 Oct 2026 | 0 | 0 | |
| 26 Oct 2026 | 0 | 0 | |
| 2 Nov 2026 | 0 | 0 | |
| 9 Nov 2026 | 422 | 8 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many Microsoft Windows vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/technologies/windows)<a href="https://junglewise.ai/threats/technologies/windows"><img src="https://junglewise.ai/threats/technologies/windows/badge.svg" alt="Microsoft Windows vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/technologies/windows.json, and this page as text at https://junglewise.ai/threats/technologies/windows.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Microsoft Windows vulnerabilities", https://junglewise.ai/threats/technologies/windows, 13 November 2026.