# Microsoft Windows vulnerabilities Source: https://junglewise.ai/threats/technologies/windows Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/windows.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 2,362 vulnerabilities in Microsoft Windows: 422 in the last 7 days and 1,607 in the last 90 days, 280 of them critical and 181 exploited in the wild. The most recent, CVE-2026-97015, was published on 10 November 2026. 688 vulnerabilities in the last four weeks, up 1866% on the four before (35). 21 critical against 23, 1 exploited in the wild against 0. ## Counts - Last 7 days: 422 - Last 30 days: 422 - Last 90 days: 1607 - All time: 2362 (280 critical, 181 exploited in the wild) ## About Microsoft Windows Operating system for personal computers and servers developed and maintained by Microsoft. ## Latest Microsoft Windows vulnerabilities - [CVE-2026-97015: Windows BitLocker heap buffer overflow with physical attack](https://junglewise.ai/threats/cve-2026-97015-heap-based-buffer-overflow-in-windows-bitlocker-allows-an) (medium, CVSS 6.8, published 10 Nov 2026) - [CVE-2026-97013: Microsoft Windows Shell type confusion privilege elevation](https://junglewise.ai/threats/cve-2026-97013-access-of-resource-using-incompatible-type-type-confusion-in) (high, CVSS 7.8, published 10 Nov 2026) - [CVE-2026-97002: Microsoft Windows VMSwitch out-of-bounds read privilege escalation](https://junglewise.ai/threats/cve-2026-97002-out-of-bounds-read-in-windows-vmswitch-allows-an-authorized) (high, CVSS 7.5, published 10 Nov 2026) - [CVE-2026-97000: Microsoft Windows USM Communication Manager null pointer dereference](https://junglewise.ai/threats/cve-2026-97000-null-pointer-dereference-in-windows-usm-communication-manager) (high, CVSS 7, published 10 Nov 2026) - [CVE-2026-96994: Microsoft Windows Winsock use after free privilege escalation](https://junglewise.ai/threats/cve-2026-96994-use-after-free-in-winsock-allows-an-authorized-attacker-to) (high, CVSS 7, published 10 Nov 2026) - [CVE-2026-96993: Windows Performance Monitor invalid pointer release remote code execution](https://junglewise.ai/threats/cve-2026-96993-release-of-invalid-pointer-or-reference-in-windows-performance) (high, CVSS 7.5, published 10 Nov 2026) - [CVE-2026-96992: Windows PCI Bus Driver use-after-free privilege escalation](https://junglewise.ai/threats/cve-2026-96992-use-after-free-in-windows-pci-bus-driver-allows-an-unauthorized) (medium, CVSS 6.4, published 10 Nov 2026) - [CVE-2026-96989: Microsoft Windows Secondary Logon out-of-bounds read](https://junglewise.ai/threats/cve-2026-96989-out-of-bounds-read-in-secondary-logon-allows-an-authorized) (medium, CVSS 5.5, published 10 Nov 2026) - [CVE-2026-96984: Windows DNS out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-96984-out-of-bounds-read-in-windows-dns-allows-an-authorized-attacker) (medium, CVSS 4.9, published 10 Nov 2026) - [CVE-2026-96983: Windows DNS use-after-free denial of service](https://junglewise.ai/threats/cve-2026-96983-use-after-free-in-windows-dns-allows-an-unauthorized-attacker-to) (medium, CVSS 5.3, published 10 Nov 2026) - [CVE-2026-96981: Windows PCI Bus Driver out-of-bounds write privilege escalation](https://junglewise.ai/threats/cve-2026-96981-out-of-bounds-write-in-windows-pci-bus-driver-allows-an) (medium, CVSS 6.4, published 10 Nov 2026) - [CVE-2026-96978: Windows Credential User Interface use-after-free privilege escalation](https://junglewise.ai/threats/cve-2026-96978-use-after-free-in-windows-credential-user-interface-allows-an) (high, CVSS 7, published 10 Nov 2026) - [CVE-2026-96973: Windows Encrypting File System privilege escalation](https://junglewise.ai/threats/cve-2026-96973-use-after-free-in-windows-encrypting-file-system-efs-allows-an) (high, CVSS 7, published 10 Nov 2026) - [CVE-2026-96972: Microsoft Windows DNS out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-96972-out-of-bounds-read-in-windows-dns-allows-an-unauthorized-attacker) (high, CVSS 7.5, published 10 Nov 2026) - [CVE-2026-96971: Windows NetBIOS use-after-free privilege elevation](https://junglewise.ai/threats/cve-2026-96971-use-after-free-in-windows-netbios-allows-an-authorized-attacker) (high, CVSS 7, published 10 Nov 2026) - [CVE-2026-96969: Microsoft Windows TCP/IP double free privilege escalation](https://junglewise.ai/threats/cve-2026-96969-double-free-in-windows-tcp-ip-allows-an-authorized-attacker-to) (high, CVSS 7, published 10 Nov 2026) - [CVE-2026-96845: Windows Task Scheduler privilege escalation via improper authorization](https://junglewise.ai/threats/cve-2026-96845-improper-authorization-in-windows-task-scheduler-allows-an) (high, CVSS 7.8, published 10 Nov 2026) - [CVE-2026-96175: Microsoft Windows Desktop Window Manager privilege elevation](https://junglewise.ai/threats/cve-2026-96175-release-of-invalid-pointer-or-reference-in-desktop-window-manager) (high, CVSS 7.8, published 10 Nov 2026) - [CVE-2026-96174: Microsoft Windows Desktop Window Manager privilege escalation](https://junglewise.ai/threats/cve-2026-96174-release-of-invalid-pointer-or-reference-in-desktop-window-manager) (high, CVSS 7.8, published 10 Nov 2026) - [CVE-2026-96171: Windows Graphics Kernel use-after-free privilege escalation](https://junglewise.ai/threats/cve-2026-96171-use-after-free-in-windows-graphics-kernel-allows-an-authorized) (high, CVSS 7, published 10 Nov 2026) - [CVE-2026-96168: Microsoft Windows Graphics Kernel privilege escalation](https://junglewise.ai/threats/cve-2026-96168-untrusted-pointer-dereference-in-windows-graphics-kernel-allows) (high, CVSS 7, published 10 Nov 2026) - [CVE-2026-96162: Microsoft Windows Clipboard Virtual Channel Extension privilege escalation](https://junglewise.ai/threats/cve-2026-96162-incorrect-authorization-in-windows-clipboard-virtual-channel) (high, CVSS 7.8, published 10 Nov 2026) - [CVE-2026-96160: Windows Graphics Kernel out-of-bounds read elevation of privilege](https://junglewise.ai/threats/cve-2026-96160-out-of-bounds-read-in-windows-graphics-kernel-allows-an) (high, CVSS 7.8, published 10 Nov 2026) - [CVE-2026-96156: Windows Broker Infrastructure Service information disclosure](https://junglewise.ai/threats/cve-2026-96156-use-of-uninitialized-resource-in-windows-broker-infrastructure) (medium, CVSS 5.5, published 10 Nov 2026) - [CVE-2026-96155: Microsoft Windows Audio Service use-after-free privilege escalation](https://junglewise.ai/threats/cve-2026-96155-use-after-free-in-windows-audio-service-allows-an-authorized) (high, CVSS 7, published 10 Nov 2026) ## Most severe Microsoft Windows vulnerabilities - [CVE-2008-4250: Microsoft Windows buffer overflow in Server service](https://junglewise.ai/threats/cve-2008-4250-microsoft-windows-buffer-overflow-in-server-service) (critical, exploited in the wild, CVSS 10, published 20 May 2026) - [CVE-2020-1472: Microsoft Netlogon Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2020-1472-microsoft-netlogon-privilege-escalation-vulnerability) (critical, exploited in the wild, CVSS 10, published 3 Nov 2021) - [CVE-2020-1350: Microsoft Windows DNS Server Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2020-1350-microsoft-windows-dns-server-remote-code-execution-vulnerability) (critical, exploited in the wild, CVSS 10, published 3 Nov 2021) - [CVE-2025-59287: Microsoft Windows Server Update Service deserialization RCE](https://junglewise.ai/threats/cve-2025-59287-microsoft-windows-server-update-service-deserialization-rce) (critical, exploited in the wild, CVSS 9.8, published 24 Oct 2025) - [CVE-2025-10585: Google Chrome type confusion in V8 engine](https://junglewise.ai/threats/cve-2025-10585-google-chrome-type-confusion-in-v8-engine) (critical, exploited in the wild, CVSS 9.8, published 24 Sep 2025) - [CVE-2017-8543: Microsoft Windows Search Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2017-8543-microsoft-windows-search-remote-code-execution-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 24 May 2022) - [CVE-2008-0015: Microsoft Windows Video ActiveX Control stack buffer overflow in DirectShow](https://junglewise.ai/threats/cve-2008-0015-microsoft-windows-video-activex-control-stack-buffer-overflow-in) (critical, exploited in the wild, CVSS 9.3, published 17 Feb 2026) - [CVE-2010-2568: Microsoft Windows Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2010-2568-microsoft-windows-remote-code-execution-vulnerability) (critical, exploited in the wild, CVSS 9.3, published 15 Sep 2022) - [CVE-2015-1671: Microsoft Windows Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2015-1671-microsoft-windows-remote-code-execution-vulnerability) (critical, exploited in the wild, CVSS 9.3, published 25 May 2022) - [CVE-2014-6332: Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2014-6332-microsoft-windows-object-linking-embedding-ole-automation-array) (critical, exploited in the wild, CVSS 9.3, published 25 Mar 2022) ## Vulnerabilities per week 688 vulnerabilities in the last four weeks, up 1866% on the four before (35). 21 critical against 23, 1 exploited in the wild against 0. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 3 | 0 | 0 | | 24 Aug 2026 | 26 | 6 | 0 | | 31 Aug 2026 | 20 | 0 | 0 | | 7 Sep 2026 | 413 | 17 | 2 | | 14 Sep 2026 | 4 | 0 | 0 | | 21 Sep 2026 | 28 | 22 | 0 | | 28 Sep 2026 | 2 | 1 | 0 | | 5 Oct 2026 | 1 | 0 | 0 | | 12 Oct 2026 | 688 | 21 | 1 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 422 | 8 | 0 | ## Other Microsoft technologies - [Microsoft Windows 10](https://junglewise.ai/threats/technologies/windows-10): 589 vulnerabilities - [Microsoft Windows 11 24h2](https://junglewise.ai/threats/technologies/windows-11-24h2): 565 vulnerabilities - [Microsoft Windows 11 25h2](https://junglewise.ai/threats/technologies/windows-11-25h2): 534 vulnerabilities - [Microsoft Windows Server 2025](https://junglewise.ai/threats/technologies/windows-server-2025): 534 vulnerabilities - [Microsoft Windows Server 2022](https://junglewise.ai/threats/technologies/windows-server-2022): 528 vulnerabilities - [Microsoft Windows Server 2019](https://junglewise.ai/threats/technologies/windows-server-2019): 521 vulnerabilities - [Microsoft Windows Server 2012](https://junglewise.ai/threats/technologies/windows-server-2012): 517 vulnerabilities - [Microsoft Windows 11](https://junglewise.ai/threats/technologies/windows-11): 494 vulnerabilities - [Microsoft Windows Server 2016](https://junglewise.ai/threats/technologies/windows-server-2016): 476 vulnerabilities - [Microsoft Windows 10 1809](https://junglewise.ai/threats/technologies/windows-10-1809): 380 vulnerabilities - [Microsoft Windows 10 21h2](https://junglewise.ai/threats/technologies/windows-10-21h2): 373 vulnerabilities - [Microsoft Windows 10 22h2](https://junglewise.ai/threats/technologies/windows-10-22h2): 372 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Microsoft Windows vulnerabilities", https://junglewise.ai/threats/technologies/windows, 13 November 2026.