{"schema_version":1,"title":"Microsoft Windows vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 2,362 vulnerabilities in Microsoft Windows: 422 in the last 7 days and 1,607 in the last 90 days, 280 of them critical and 181 exploited in the wild. The most recent, CVE-2026-97015, was published on 10 November 2026. 688 vulnerabilities in the last four weeks, up 1866% on the four before (35). 21 critical against 23, 1 exploited in the wild against 0.","url":"https://junglewise.ai/threats/technologies/windows","json_url":"https://junglewise.ai/threats/technologies/windows.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/windows","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":1512,"all_time":2362,"critical":280,"exploited":181,"last_7_days":422,"last_30_days":422,"last_90_days":1607,"last_365_days":2123},"latest":[{"cve":"CVE-2026-97015","cvss":6.8,"slug":"cve-2026-97015-heap-based-buffer-overflow-in-windows-bitlocker-allows-an","title":"Windows BitLocker heap buffer overflow with physical attack","severity":"medium","exploited":false,"published_at":"2026-11-10T19:22:23.687+00:00","url":"https://junglewise.ai/threats/cve-2026-97015-heap-based-buffer-overflow-in-windows-bitlocker-allows-an"},{"cve":"CVE-2026-97013","cvss":7.8,"slug":"cve-2026-97013-access-of-resource-using-incompatible-type-type-confusion-in","title":"Microsoft Windows Shell type confusion privilege elevation","severity":"high","exploited":false,"published_at":"2026-11-10T19:22:23.497+00:00","url":"https://junglewise.ai/threats/cve-2026-97013-access-of-resource-using-incompatible-type-type-confusion-in"},{"cve":"CVE-2026-97002","cvss":7.5,"slug":"cve-2026-97002-out-of-bounds-read-in-windows-vmswitch-allows-an-authorized","title":"Microsoft Windows VMSwitch out-of-bounds read privilege escalation","severity":"high","exploited":false,"published_at":"2026-11-10T19:22:23.17+00:00","url":"https://junglewise.ai/threats/cve-2026-97002-out-of-bounds-read-in-windows-vmswitch-allows-an-authorized"},{"cve":"CVE-2026-97000","cvss":7,"slug":"cve-2026-97000-null-pointer-dereference-in-windows-usm-communication-manager","title":"Microsoft Windows USM Communication Manager null pointer dereference","severity":"high","exploited":false,"published_at":"2026-11-10T19:22:22.993+00:00","url":"https://junglewise.ai/threats/cve-2026-97000-null-pointer-dereference-in-windows-usm-communication-manager"},{"cve":"CVE-2026-96994","cvss":7,"slug":"cve-2026-96994-use-after-free-in-winsock-allows-an-authorized-attacker-to","title":"Microsoft Windows Winsock use after free privilege escalation","severity":"high","exploited":false,"published_at":"2026-11-10T19:22:22.81+00:00","url":"https://junglewise.ai/threats/cve-2026-96994-use-after-free-in-winsock-allows-an-authorized-attacker-to"},{"cve":"CVE-2026-96993","cvss":7.5,"slug":"cve-2026-96993-release-of-invalid-pointer-or-reference-in-windows-performance","title":"Windows Performance Monitor invalid pointer release remote code execution","severity":"high","exploited":false,"published_at":"2026-11-10T19:22:22.623+00:00","url":"https://junglewise.ai/threats/cve-2026-96993-release-of-invalid-pointer-or-reference-in-windows-performance"},{"cve":"CVE-2026-96992","cvss":6.4,"slug":"cve-2026-96992-use-after-free-in-windows-pci-bus-driver-allows-an-unauthorized","title":"Windows PCI Bus Driver use-after-free privilege escalation","severity":"medium","exploited":false,"published_at":"2026-11-10T19:22:22.45+00:00","url":"https://junglewise.ai/threats/cve-2026-96992-use-after-free-in-windows-pci-bus-driver-allows-an-unauthorized"},{"cve":"CVE-2026-96989","cvss":5.5,"slug":"cve-2026-96989-out-of-bounds-read-in-secondary-logon-allows-an-authorized","title":"Microsoft Windows Secondary Logon out-of-bounds read","severity":"medium","exploited":false,"published_at":"2026-11-10T19:22:22.25+00:00","url":"https://junglewise.ai/threats/cve-2026-96989-out-of-bounds-read-in-secondary-logon-allows-an-authorized"},{"cve":"CVE-2026-96984","cvss":4.9,"slug":"cve-2026-96984-out-of-bounds-read-in-windows-dns-allows-an-authorized-attacker","title":"Windows DNS out-of-bounds read information disclosure","severity":"medium","exploited":false,"published_at":"2026-11-10T19:22:21.447+00:00","url":"https://junglewise.ai/threats/cve-2026-96984-out-of-bounds-read-in-windows-dns-allows-an-authorized-attacker"},{"cve":"CVE-2026-96983","cvss":5.3,"slug":"cve-2026-96983-use-after-free-in-windows-dns-allows-an-unauthorized-attacker-to","title":"Windows DNS use-after-free denial of service","severity":"medium","exploited":false,"published_at":"2026-11-10T19:22:21.257+00:00","url":"https://junglewise.ai/threats/cve-2026-96983-use-after-free-in-windows-dns-allows-an-unauthorized-attacker-to"},{"cve":"CVE-2026-96981","cvss":6.4,"slug":"cve-2026-96981-out-of-bounds-write-in-windows-pci-bus-driver-allows-an","title":"Windows PCI Bus Driver out-of-bounds write privilege escalation","severity":"medium","exploited":false,"published_at":"2026-11-10T19:22:20.887+00:00","url":"https://junglewise.ai/threats/cve-2026-96981-out-of-bounds-write-in-windows-pci-bus-driver-allows-an"},{"cve":"CVE-2026-96978","cvss":7,"slug":"cve-2026-96978-use-after-free-in-windows-credential-user-interface-allows-an","title":"Windows Credential User Interface use-after-free privilege escalation","severity":"high","exploited":false,"published_at":"2026-11-10T19:22:20.37+00:00","url":"https://junglewise.ai/threats/cve-2026-96978-use-after-free-in-windows-credential-user-interface-allows-an"},{"cve":"CVE-2026-96973","cvss":7,"slug":"cve-2026-96973-use-after-free-in-windows-encrypting-file-system-efs-allows-an","title":"Windows Encrypting File System privilege escalation","severity":"high","exploited":false,"published_at":"2026-11-10T19:22:19.62+00:00","url":"https://junglewise.ai/threats/cve-2026-96973-use-after-free-in-windows-encrypting-file-system-efs-allows-an"},{"cve":"CVE-2026-96972","cvss":7.5,"slug":"cve-2026-96972-out-of-bounds-read-in-windows-dns-allows-an-unauthorized-attacker","title":"Microsoft Windows DNS out-of-bounds read information disclosure","severity":"high","exploited":false,"published_at":"2026-11-10T19:22:19.457+00:00","url":"https://junglewise.ai/threats/cve-2026-96972-out-of-bounds-read-in-windows-dns-allows-an-unauthorized-attacker"},{"cve":"CVE-2026-96971","cvss":7,"slug":"cve-2026-96971-use-after-free-in-windows-netbios-allows-an-authorized-attacker","title":"Windows NetBIOS use-after-free privilege elevation","severity":"high","exploited":false,"published_at":"2026-11-10T19:22:19.267+00:00","url":"https://junglewise.ai/threats/cve-2026-96971-use-after-free-in-windows-netbios-allows-an-authorized-attacker"},{"cve":"CVE-2026-96969","cvss":7,"slug":"cve-2026-96969-double-free-in-windows-tcp-ip-allows-an-authorized-attacker-to","title":"Microsoft Windows TCP/IP double free privilege escalation","severity":"high","exploited":false,"published_at":"2026-11-10T19:22:18.973+00:00","url":"https://junglewise.ai/threats/cve-2026-96969-double-free-in-windows-tcp-ip-allows-an-authorized-attacker-to"},{"cve":"CVE-2026-96845","cvss":7.8,"slug":"cve-2026-96845-improper-authorization-in-windows-task-scheduler-allows-an","title":"Windows Task Scheduler privilege escalation via improper authorization","severity":"high","exploited":false,"published_at":"2026-11-10T19:22:18.59+00:00","url":"https://junglewise.ai/threats/cve-2026-96845-improper-authorization-in-windows-task-scheduler-allows-an"},{"cve":"CVE-2026-96175","cvss":7.8,"slug":"cve-2026-96175-release-of-invalid-pointer-or-reference-in-desktop-window-manager","title":"Microsoft Windows Desktop Window Manager privilege elevation","severity":"high","exploited":false,"published_at":"2026-11-10T19:22:17.627+00:00","url":"https://junglewise.ai/threats/cve-2026-96175-release-of-invalid-pointer-or-reference-in-desktop-window-manager"},{"cve":"CVE-2026-96174","cvss":7.8,"slug":"cve-2026-96174-release-of-invalid-pointer-or-reference-in-desktop-window-manager","title":"Microsoft Windows Desktop Window Manager privilege escalation","severity":"high","exploited":false,"published_at":"2026-11-10T19:22:17.467+00:00","url":"https://junglewise.ai/threats/cve-2026-96174-release-of-invalid-pointer-or-reference-in-desktop-window-manager"},{"cve":"CVE-2026-96171","cvss":7,"slug":"cve-2026-96171-use-after-free-in-windows-graphics-kernel-allows-an-authorized","title":"Windows Graphics Kernel use-after-free privilege escalation","severity":"high","exploited":false,"published_at":"2026-11-10T19:22:16.997+00:00","url":"https://junglewise.ai/threats/cve-2026-96171-use-after-free-in-windows-graphics-kernel-allows-an-authorized"},{"cve":"CVE-2026-96168","cvss":7,"slug":"cve-2026-96168-untrusted-pointer-dereference-in-windows-graphics-kernel-allows","title":"Microsoft Windows Graphics Kernel privilege escalation","severity":"high","exploited":false,"published_at":"2026-11-10T19:22:13.98+00:00","url":"https://junglewise.ai/threats/cve-2026-96168-untrusted-pointer-dereference-in-windows-graphics-kernel-allows"},{"cve":"CVE-2026-96162","cvss":7.8,"slug":"cve-2026-96162-incorrect-authorization-in-windows-clipboard-virtual-channel","title":"Microsoft Windows Clipboard Virtual Channel Extension privilege escalation","severity":"high","exploited":false,"published_at":"2026-11-10T19:22:13.59+00:00","url":"https://junglewise.ai/threats/cve-2026-96162-incorrect-authorization-in-windows-clipboard-virtual-channel"},{"cve":"CVE-2026-96160","cvss":7.8,"slug":"cve-2026-96160-out-of-bounds-read-in-windows-graphics-kernel-allows-an","title":"Windows Graphics Kernel out-of-bounds read elevation of privilege","severity":"high","exploited":false,"published_at":"2026-11-10T19:22:13.407+00:00","url":"https://junglewise.ai/threats/cve-2026-96160-out-of-bounds-read-in-windows-graphics-kernel-allows-an"},{"cve":"CVE-2026-96156","cvss":5.5,"slug":"cve-2026-96156-use-of-uninitialized-resource-in-windows-broker-infrastructure","title":"Windows Broker Infrastructure Service information disclosure","severity":"medium","exploited":false,"published_at":"2026-11-10T19:22:12.82+00:00","url":"https://junglewise.ai/threats/cve-2026-96156-use-of-uninitialized-resource-in-windows-broker-infrastructure"},{"cve":"CVE-2026-96155","cvss":7,"slug":"cve-2026-96155-use-after-free-in-windows-audio-service-allows-an-authorized","title":"Microsoft Windows Audio Service use-after-free privilege escalation","severity":"high","exploited":false,"published_at":"2026-11-10T19:22:12.637+00:00","url":"https://junglewise.ai/threats/cve-2026-96155-use-after-free-in-windows-audio-service-allows-an-authorized"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-08-24","critical":6,"exploited":0,"vulnerabilities":26},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":20},{"week":"2026-09-07","critical":17,"exploited":2,"vulnerabilities":413},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":4},{"week":"2026-09-21","critical":22,"exploited":0,"vulnerabilities":28},{"week":"2026-09-28","critical":1,"exploited":0,"vulnerabilities":2},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-10-12","critical":21,"exploited":1,"vulnerabilities":688},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":8,"exploited":0,"vulnerabilities":422}],"related":[{"name":"Microsoft Windows 10","slug":"windows-10","vulnerabilities":589,"url":"https://junglewise.ai/threats/technologies/windows-10"},{"name":"Microsoft Windows 11 24h2","slug":"windows-11-24h2","vulnerabilities":565,"url":"https://junglewise.ai/threats/technologies/windows-11-24h2"},{"name":"Microsoft Windows 11 25h2","slug":"windows-11-25h2","vulnerabilities":534,"url":"https://junglewise.ai/threats/technologies/windows-11-25h2"},{"name":"Microsoft Windows Server 2025","slug":"windows-server-2025","vulnerabilities":534,"url":"https://junglewise.ai/threats/technologies/windows-server-2025"},{"name":"Microsoft Windows Server 2022","slug":"windows-server-2022","vulnerabilities":528,"url":"https://junglewise.ai/threats/technologies/windows-server-2022"},{"name":"Microsoft Windows Server 2019","slug":"windows-server-2019","vulnerabilities":521,"url":"https://junglewise.ai/threats/technologies/windows-server-2019"},{"name":"Microsoft Windows Server 2012","slug":"windows-server-2012","vulnerabilities":517,"url":"https://junglewise.ai/threats/technologies/windows-server-2012"},{"name":"Microsoft Windows 11","slug":"windows-11","vulnerabilities":494,"url":"https://junglewise.ai/threats/technologies/windows-11"},{"name":"Microsoft Windows Server 2016","slug":"windows-server-2016","vulnerabilities":476,"url":"https://junglewise.ai/threats/technologies/windows-server-2016"},{"name":"Microsoft Windows 10 1809","slug":"windows-10-1809","vulnerabilities":380,"url":"https://junglewise.ai/threats/technologies/windows-10-1809"},{"name":"Microsoft Windows 10 21h2","slug":"windows-10-21h2","vulnerabilities":373,"url":"https://junglewise.ai/threats/technologies/windows-10-21h2"},{"name":"Microsoft Windows 10 22h2","slug":"windows-10-22h2","vulnerabilities":372,"url":"https://junglewise.ai/threats/technologies/windows-10-22h2"}],"technology":{"hub":true,"name":"Microsoft Windows","slug":"windows","vendor":{"hub":true,"name":"Microsoft","slug":"microsoft","url":"https://junglewise.ai/threats/vendors/microsoft"},"aliases":["windows-"],"category":"os","description":"Operating system for personal computers and servers developed and maintained by Microsoft.","url":"https://junglewise.ai/threats/technologies/windows"},"most_severe":[{"cve":"CVE-2008-4250","cvss":10,"epss":0.9348,"slug":"cve-2008-4250-microsoft-windows-buffer-overflow-in-server-service","title":"Microsoft Windows buffer overflow in Server service","severity":"critical","exploited":true,"published_at":"2026-05-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2008-4250-microsoft-windows-buffer-overflow-in-server-service"},{"cve":"CVE-2020-1472","cvss":10,"slug":"cve-2020-1472-microsoft-netlogon-privilege-escalation-vulnerability","title":"Microsoft Netlogon Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-1472-microsoft-netlogon-privilege-escalation-vulnerability"},{"cve":"CVE-2020-1350","cvss":10,"slug":"cve-2020-1350-microsoft-windows-dns-server-remote-code-execution-vulnerability","title":"Microsoft Windows DNS Server Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-1350-microsoft-windows-dns-server-remote-code-execution-vulnerability"},{"cve":"CVE-2025-59287","cvss":9.8,"epss":0.714,"slug":"cve-2025-59287-microsoft-windows-server-update-service-deserialization-rce","title":"Microsoft Windows Server Update Service deserialization RCE","severity":"critical","exploited":true,"published_at":"2025-10-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-59287-microsoft-windows-server-update-service-deserialization-rce"},{"cve":"CVE-2025-10585","cvss":9.8,"epss":0.0542,"slug":"cve-2025-10585-google-chrome-type-confusion-in-v8-engine","title":"Google Chrome type confusion in V8 engine","severity":"critical","exploited":true,"published_at":"2025-09-24T17:15:39.473+00:00","url":"https://junglewise.ai/threats/cve-2025-10585-google-chrome-type-confusion-in-v8-engine"},{"cve":"CVE-2017-8543","cvss":9.8,"slug":"cve-2017-8543-microsoft-windows-search-remote-code-execution-vulnerability","title":"Microsoft Windows Search Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-8543-microsoft-windows-search-remote-code-execution-vulnerability"},{"cve":"CVE-2008-0015","cvss":9.3,"epss":0.8159,"slug":"cve-2008-0015-microsoft-windows-video-activex-control-stack-buffer-overflow-in","title":"Microsoft Windows Video ActiveX Control stack buffer overflow in DirectShow","severity":"critical","exploited":true,"published_at":"2026-02-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2008-0015-microsoft-windows-video-activex-control-stack-buffer-overflow-in"},{"cve":"CVE-2010-2568","cvss":9.3,"slug":"cve-2010-2568-microsoft-windows-remote-code-execution-vulnerability","title":"Microsoft Windows Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-09-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2010-2568-microsoft-windows-remote-code-execution-vulnerability"},{"cve":"CVE-2015-1671","cvss":9.3,"slug":"cve-2015-1671-microsoft-windows-remote-code-execution-vulnerability","title":"Microsoft Windows Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-1671-microsoft-windows-remote-code-execution-vulnerability"},{"cve":"CVE-2014-6332","cvss":9.3,"slug":"cve-2014-6332-microsoft-windows-object-linking-embedding-ole-automation-array","title":"Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2014-6332-microsoft-windows-object-linking-embedding-ole-automation-array"}],"generated_at":"2026-11-13T03:07:00.155039+00:00"}