{"schema_version":1,"title":"Microsoft Windows vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 977 vulnerabilities in Microsoft Windows: 28 in the last 7 days and 524 in the last 90 days, 238 of them critical and 180 exploited in the wild. The most recent, CVE-2026-83964, was published on 22 September 2026.","url":"https://junglewise.ai/threats/technologies/windows-","json_url":"https://junglewise.ai/threats/technologies/windows-.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/windows-","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":555,"all_time":977,"critical":238,"exploited":180,"last_7_days":28,"last_30_days":465,"last_90_days":524,"last_365_days":813},"latest":[{"cve":"CVE-2026-83964","cvss":6.2,"epss":0.0011,"slug":"cve-2026-83964-adobe-connect-is-affected-by-an-improper-certificate-validation","title":"Adobe Connect improper certificate validation","severity":"medium","exploited":false,"published_at":"2026-09-22T19:16:54.13+00:00","url":"https://junglewise.ai/threats/cve-2026-83964-adobe-connect-is-affected-by-an-improper-certificate-validation"},{"cve":"CVE-2026-75698","cvss":9.3,"epss":0.0032,"slug":"cve-2026-75698-adobe-connect-is-affected-by-a-reflected-cross-site-scripting-xss","title":"Adobe Connect reflected Cross-Site Scripting in web page","severity":"critical","exploited":false,"published_at":"2026-09-22T19:16:46.91+00:00","url":"https://junglewise.ai/threats/cve-2026-75698-adobe-connect-is-affected-by-a-reflected-cross-site-scripting-xss"},{"cve":"CVE-2026-75697","cvss":9.3,"epss":0.003,"slug":"cve-2026-75697-adobe-connect-is-affected-by-a-stored-cross-site-scripting-xss","title":"Adobe Connect stored cross-site scripting in form fields","severity":"critical","exploited":false,"published_at":"2026-09-22T19:16:46.77+00:00","url":"https://junglewise.ai/threats/cve-2026-75697-adobe-connect-is-affected-by-a-stored-cross-site-scripting-xss"},{"cve":"CVE-2026-75689","cvss":9.3,"epss":0.003,"slug":"cve-2026-75689-adobe-connect-is-affected-by-a-stored-cross-site-scripting-xss","title":"Adobe Connect stored cross-site scripting","severity":"critical","exploited":false,"published_at":"2026-09-22T19:16:46.643+00:00","url":"https://junglewise.ai/threats/cve-2026-75689-adobe-connect-is-affected-by-a-stored-cross-site-scripting-xss"},{"cve":"CVE-2026-75686","cvss":9.3,"epss":0.0105,"slug":"cve-2026-75686-adobe-connect-is-affected-by-an-improper-input-validation","title":"Adobe Connect improper input validation vulnerability","severity":"critical","exploited":false,"published_at":"2026-09-22T19:16:46.52+00:00","url":"https://junglewise.ai/threats/cve-2026-75686-adobe-connect-is-affected-by-an-improper-input-validation"},{"cve":"CVE-2026-75684","cvss":9.3,"epss":0.003,"slug":"cve-2026-75684-adobe-connect-is-affected-by-a-stored-cross-site-scripting-xss","title":"Adobe Connect stored Cross-Site Scripting vulnerability","severity":"critical","exploited":false,"published_at":"2026-09-22T19:16:46.393+00:00","url":"https://junglewise.ai/threats/cve-2026-75684-adobe-connect-is-affected-by-a-stored-cross-site-scripting-xss"},{"cve":"CVE-2026-75682","cvss":9.9,"epss":0.0054,"slug":"cve-2026-75682-adobe-connect-is-affected-by-an-improper-neutralization-of","title":"Adobe Connect SQL injection leading to arbitrary code execution","severity":"critical","exploited":false,"published_at":"2026-09-22T19:16:46.26+00:00","url":"https://junglewise.ai/threats/cve-2026-75682-adobe-connect-is-affected-by-an-improper-neutralization-of"},{"cve":"CVE-2026-48361","cvss":6.1,"epss":0.0018,"slug":"cve-2026-48361-adobe-connect-is-affected-by-a-stored-cross-site-scripting-xss","title":"Adobe Connect stored cross-site scripting","severity":"medium","exploited":false,"published_at":"2026-09-22T19:16:43.763+00:00","url":"https://junglewise.ai/threats/cve-2026-48361-adobe-connect-is-affected-by-a-stored-cross-site-scripting-xss"},{"cve":"CVE-2026-34689","cvss":8.6,"epss":0.0066,"slug":"cve-2026-34689-adobe-connect-is-affected-by-an-improper-limitation-of-a-pathname","title":"Adobe Connect path traversal in file access","severity":"high","exploited":false,"published_at":"2026-09-22T19:16:43.21+00:00","url":"https://junglewise.ai/threats/cve-2026-34689-adobe-connect-is-affected-by-an-improper-limitation-of-a-pathname"},{"cve":"CVE-2026-89276","cvss":9.9,"epss":0.0053,"slug":"cve-2026-89276-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of","title":"Adobe Campaign Classic code injection vulnerability","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:29.55+00:00","url":"https://junglewise.ai/threats/cve-2026-89276-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of"},{"cve":"CVE-2026-89275","cvss":10,"epss":0.0125,"slug":"cve-2026-89275-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of","title":"Adobe Campaign Classic code injection vulnerability","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:29.407+00:00","url":"https://junglewise.ai/threats/cve-2026-89275-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of"},{"cve":"CVE-2026-84412","cvss":10,"epss":0.0125,"slug":"cve-2026-84412-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of","title":"Adobe Campaign Classic code injection","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:22.923+00:00","url":"https://junglewise.ai/threats/cve-2026-84412-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of"},{"cve":"CVE-2026-83660","cvss":9.9,"epss":0.0034,"slug":"cve-2026-83660-adobe-campaign-classic-acc-is-affected-by-a-server-side-request","title":"Adobe Campaign Classic server-side request forgery","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:22.673+00:00","url":"https://junglewise.ai/threats/cve-2026-83660-adobe-campaign-classic-acc-is-affected-by-a-server-side-request"},{"cve":"CVE-2026-82443","cvss":9.6,"epss":0.0035,"slug":"cve-2026-82443-adobe-campaign-classic-acc-is-affected-by-a-server-side-request","title":"Adobe Campaign Classic server-side request forgery privilege escalation","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:21.79+00:00","url":"https://junglewise.ai/threats/cve-2026-82443-adobe-campaign-classic-acc-is-affected-by-a-server-side-request"},{"cve":"CVE-2026-82013","cvss":9.9,"epss":0.0082,"slug":"cve-2026-82013-adobe-campaign-classic-acc-is-affected-by-a-server-side-request","title":"Adobe Campaign Classic Server-Side Request Forgery privilege escalation","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:21.657+00:00","url":"https://junglewise.ai/threats/cve-2026-82013-adobe-campaign-classic-acc-is-affected-by-a-server-side-request"},{"cve":"CVE-2026-82011","cvss":9.1,"epss":0.0055,"slug":"cve-2026-82011-adobe-campaign-classic-acc-is-affected-by-an-improper","title":"Adobe Campaign Classic SQL injection","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:21.523+00:00","url":"https://junglewise.ai/threats/cve-2026-82011-adobe-campaign-classic-acc-is-affected-by-an-improper"},{"cve":"CVE-2026-82010","cvss":9.9,"epss":0.0097,"slug":"cve-2026-82010-adobe-campaign-classic-acc-is-affected-by-an-improper","title":"Adobe Campaign Classic SQL injection","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:21.377+00:00","url":"https://junglewise.ai/threats/cve-2026-82010-adobe-campaign-classic-acc-is-affected-by-an-improper"},{"cve":"CVE-2026-82009","cvss":9.1,"epss":0.0099,"slug":"cve-2026-82009-adobe-campaign-classic-acc-is-affected-by-an-improper","title":"Adobe Campaign Classic SQL injection","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:21.22+00:00","url":"https://junglewise.ai/threats/cve-2026-82009-adobe-campaign-classic-acc-is-affected-by-an-improper"},{"cve":"CVE-2026-82008","cvss":9.9,"epss":0.0053,"slug":"cve-2026-82008-adobe-campaign-classic-acc-is-affected-by-an-improper-input","title":"Adobe Campaign Classic improper input validation","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:21.077+00:00","url":"https://junglewise.ai/threats/cve-2026-82008-adobe-campaign-classic-acc-is-affected-by-an-improper-input"},{"cve":"CVE-2026-82003","cvss":8.5,"epss":0.0095,"slug":"cve-2026-82003-adobe-campaign-classic-acc-is-affected-by-an-improper-input","title":"Adobe Campaign Classic improper input validation code execution","severity":"high","exploited":false,"published_at":"2026-09-22T18:17:20.887+00:00","url":"https://junglewise.ai/threats/cve-2026-82003-adobe-campaign-classic-acc-is-affected-by-an-improper-input"},{"cve":"CVE-2026-75728","cvss":9.1,"epss":0.0104,"slug":"cve-2026-75728-adobe-campaign-classic-acc-is-affected-by-an-incorrect","title":"Adobe Campaign Classic authorization bypass leading to code execution","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:16.293+00:00","url":"https://junglewise.ai/threats/cve-2026-75728-adobe-campaign-classic-acc-is-affected-by-an-incorrect"},{"cve":"CVE-2026-75723","cvss":10,"epss":0.0117,"slug":"cve-2026-75723-adobe-campaign-classic-acc-is-affected-by-an-incorrect","title":"Adobe Campaign Classic authorization bypass leading to code execution","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:16.163+00:00","url":"https://junglewise.ai/threats/cve-2026-75723-adobe-campaign-classic-acc-is-affected-by-an-incorrect"},{"cve":"CVE-2026-75721","cvss":10,"epss":0.0125,"slug":"cve-2026-75721-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of","title":"Adobe Campaign Classic code injection in JSSP","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:16.033+00:00","url":"https://junglewise.ai/threats/cve-2026-75721-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of"},{"cve":"CVE-2026-75703","cvss":10,"epss":0.0125,"slug":"cve-2026-75703-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of","title":"Adobe Campaign Classic code injection vulnerability","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:15.9+00:00","url":"https://junglewise.ai/threats/cve-2026-75703-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of"},{"cve":"CVE-2026-75699","cvss":10,"epss":0.0125,"slug":"cve-2026-75699-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of","title":"Adobe Campaign Classic code injection vulnerability","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:15.76+00:00","url":"https://junglewise.ai/threats/cve-2026-75699-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-08-10","critical":1,"exploited":0,"vulnerabilities":29},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-08-24","critical":6,"exploited":0,"vulnerabilities":26},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":20},{"week":"2026-09-07","critical":17,"exploited":2,"vulnerabilities":413},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":4},{"week":"2026-09-21","critical":22,"exploited":0,"vulnerabilities":28}],"related":[{"name":"Microsoft Windows 10","slug":"windows-10","vulnerabilities":588,"url":"https://junglewise.ai/threats/technologies/windows-10"},{"name":"Microsoft Windows 11","slug":"windows-11","vulnerabilities":493,"url":"https://junglewise.ai/threats/technologies/windows-11"},{"name":"Microsoft Windows Server 2012","slug":"windows-server-2012","vulnerabilities":293,"url":"https://junglewise.ai/threats/technologies/windows-server-2012"},{"name":"Microsoft Windows Server 2016","slug":"windows-server-2016","vulnerabilities":213,"url":"https://junglewise.ai/threats/technologies/windows-server-2016"},{"name":"Microsoft Windows Server 2019","slug":"windows-server-2019","vulnerabilities":211,"url":"https://junglewise.ai/threats/technologies/windows-server-2019"},{"name":"Microsoft Windows 11 24h2","slug":"windows-11-24h2","vulnerabilities":192,"url":"https://junglewise.ai/threats/technologies/windows-11-24h2"},{"name":"Microsoft Windows Server 2022","slug":"windows-server-2022","vulnerabilities":178,"url":"https://junglewise.ai/threats/technologies/windows-server-2022"},{"name":"Microsoft Edge","slug":"edge-chromium-based","vulnerabilities":167,"url":"https://junglewise.ai/threats/technologies/edge-chromium-based"},{"name":"Microsoft Windows 11 25h2","slug":"windows-11-25h2","vulnerabilities":161,"url":"https://junglewise.ai/threats/technologies/windows-11-25h2"},{"name":"Microsoft Windows 11 Version 26H1","slug":"windows-11-version-26h1","vulnerabilities":135,"url":"https://junglewise.ai/threats/technologies/windows-11-version-26h1"},{"name":"Microsoft Windows Server 2025","slug":"windows-server-2025","vulnerabilities":124,"url":"https://junglewise.ai/threats/technologies/windows-server-2025"},{"name":"Microsoft Windows Server 2008","slug":"windows-server-2008","vulnerabilities":116,"url":"https://junglewise.ai/threats/technologies/windows-server-2008"}],"technology":{"hub":true,"name":"Microsoft Windows","slug":"windows-","vendor":{"name":"Microsoft","slug":"microsoft","url":"https://junglewise.ai/threats/vendors/microsoft"},"aliases":["windows"],"homepage":"https://www.microsoft.com/windows","description":"A family of operating systems developed by Microsoft for personal computers, servers, and embedded devices.","url":"https://junglewise.ai/threats/technologies/windows-"},"most_severe":[{"cve":"CVE-2008-4250","cvss":10,"epss":0.9348,"slug":"cve-2008-4250-microsoft-windows-buffer-overflow-in-server-service","title":"Microsoft Windows buffer overflow in Server service","severity":"critical","exploited":true,"published_at":"2026-05-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2008-4250-microsoft-windows-buffer-overflow-in-server-service"},{"cve":"CVE-2020-1472","cvss":10,"slug":"cve-2020-1472-microsoft-netlogon-privilege-escalation-vulnerability","title":"Microsoft Netlogon Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-1472-microsoft-netlogon-privilege-escalation-vulnerability"},{"cve":"CVE-2020-1350","cvss":10,"slug":"cve-2020-1350-microsoft-windows-dns-server-remote-code-execution-vulnerability","title":"Microsoft Windows DNS Server Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-1350-microsoft-windows-dns-server-remote-code-execution-vulnerability"},{"cve":"CVE-2025-59287","cvss":9.8,"epss":0.714,"slug":"cve-2025-59287-microsoft-windows-server-update-service-deserialization-rce","title":"Microsoft Windows Server Update Service deserialization RCE","severity":"critical","exploited":true,"published_at":"2025-10-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-59287-microsoft-windows-server-update-service-deserialization-rce"},{"cve":"CVE-2025-10585","cvss":9.8,"epss":0.0542,"slug":"cve-2025-10585-google-chrome-type-confusion-in-v8-engine","title":"Google Chrome type confusion in V8 engine","severity":"critical","exploited":true,"published_at":"2025-09-24T17:15:39.473+00:00","url":"https://junglewise.ai/threats/cve-2025-10585-google-chrome-type-confusion-in-v8-engine"},{"cve":"CVE-2017-8543","cvss":9.8,"slug":"cve-2017-8543-microsoft-windows-search-remote-code-execution-vulnerability","title":"Microsoft Windows Search Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-8543-microsoft-windows-search-remote-code-execution-vulnerability"},{"cve":"CVE-2008-0015","cvss":9.3,"epss":0.8159,"slug":"cve-2008-0015-microsoft-windows-video-activex-control-stack-buffer-overflow-in","title":"Microsoft Windows Video ActiveX Control stack buffer overflow in DirectShow","severity":"critical","exploited":true,"published_at":"2026-02-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2008-0015-microsoft-windows-video-activex-control-stack-buffer-overflow-in"},{"cve":"CVE-2010-2568","cvss":9.3,"slug":"cve-2010-2568-microsoft-windows-remote-code-execution-vulnerability","title":"Microsoft Windows Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-09-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2010-2568-microsoft-windows-remote-code-execution-vulnerability"},{"cve":"CVE-2015-1671","cvss":9.3,"slug":"cve-2015-1671-microsoft-windows-remote-code-execution-vulnerability","title":"Microsoft Windows Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-1671-microsoft-windows-remote-code-execution-vulnerability"},{"cve":"CVE-2014-6332","cvss":9.3,"slug":"cve-2014-6332-microsoft-windows-object-linking-embedding-ole-automation-array","title":"Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2014-6332-microsoft-windows-object-linking-embedding-ole-automation-array"}],"generated_at":"2026-09-26T12:07:00.15149+00:00"}