Vulnerabilities (CVE)

Filtered by vendor Microsoft Subscribe
Filtered by product Windows 10
Total 4057 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-26435 1 Microsoft 9 Windows 10, Windows 7, Windows 8.1 and 6 more 2026-08-10 6.8 MEDIUM 8.1 HIGH
Windows Scripting Engine Memory Corruption Vulnerability
CVE-2021-26433 1 Microsoft 6 Windows 10, Windows 8.1, Windows Rt 8.1 and 3 more 2026-08-10 5.0 MEDIUM 7.5 HIGH
Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
CVE-2021-26432 1 Microsoft 6 Windows 10, Windows 8.1, Windows Rt 8.1 and 3 more 2026-08-10 7.5 HIGH 9.8 CRITICAL
Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability
CVE-2021-26431 1 Microsoft 2 Windows 10, Windows Server 2016 2026-08-10 4.6 MEDIUM 7.8 HIGH
Windows Recovery Environment Agent Elevation of Privilege Vulnerability
CVE-2021-26426 1 Microsoft 7 Windows 10, Windows 7, Windows 8.1 and 4 more 2026-08-10 4.6 MEDIUM 7.0 HIGH
Windows User Account Profile Picture Elevation of Privilege Vulnerability
CVE-2021-26425 1 Microsoft 8 Windows 10, Windows 7, Windows 8.1 and 5 more 2026-08-10 4.6 MEDIUM 7.8 HIGH
Windows Event Tracing Elevation of Privilege Vulnerability
CVE-2021-26424 1 Microsoft 8 Windows 10, Windows 7, Windows 8.1 and 5 more 2026-08-10 6.8 MEDIUM 9.9 CRITICAL
Windows TCP/IP Remote Code Execution Vulnerability
CVE-2023-44216 7 Amd, Apple, Canonical and 4 more 16 Ryzen 5 7600x, Ryzen 7 4800u, M1 Mac Mini and 13 more 2026-06-17 N/A 5.3 MEDIUM
PVRIC (PowerVR Image Compression) on Imagination 2018 and later GPU devices offers software-transparent compression that enables cross-origin pixel-stealing attacks against feTurbulence and feBlend in the SVG Filter specification, aka a GPU.zip issue. For example, attackers can sometimes accurately determine text contained on a web page from one origin if they control a resource from a different origin.
CVE-2023-36697 1 Microsoft 12 Windows 10, Windows 10 1607, Windows 10 1809 and 9 more 2026-06-17 N/A 6.8 MEDIUM
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-36606 1 Microsoft 12 Windows 10, Windows 10 1607, Windows 10 1809 and 9 more 2026-06-17 N/A 7.5 HIGH
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVE-2023-36593 1 Microsoft 12 Windows 10, Windows 10 1607, Windows 10 1809 and 9 more 2026-06-17 N/A 7.8 HIGH
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-36592 1 Microsoft 12 Windows 10, Windows 10 1607, Windows 10 1809 and 9 more 2026-06-17 N/A 7.3 HIGH
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-36591 1 Microsoft 12 Windows 10, Windows 10 1607, Windows 10 1809 and 9 more 2026-06-17 N/A 7.3 HIGH
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-36590 1 Microsoft 12 Windows 10, Windows 10 1607, Windows 10 1809 and 9 more 2026-06-17 N/A 7.3 HIGH
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-36589 1 Microsoft 12 Windows 10, Windows 10 1607, Windows 10 1809 and 9 more 2026-06-17 N/A 7.3 HIGH
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-36583 1 Microsoft 12 Windows 10, Windows 10 1607, Windows 10 1809 and 9 more 2026-06-17 N/A 7.3 HIGH
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-36582 1 Microsoft 12 Windows 10, Windows 10 1607, Windows 10 1809 and 9 more 2026-06-17 N/A 7.3 HIGH
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-36581 1 Microsoft 12 Windows 10, Windows 10 1607, Windows 10 1809 and 9 more 2026-06-17 N/A 7.5 HIGH
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVE-2023-29413 2 Microsoft, Schneider-electric 7 Windows 10, Windows 11, Windows Server 2016 and 4 more 2026-06-17 N/A 7.5 HIGH
A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause Denial-of-Service when accessed by an unauthenticated user on the Schneider UPS Monitor service.
CVE-2023-29412 2 Microsoft, Schneider-electric 7 Windows 10, Windows 11, Windows Server 2016 and 4 more 2026-06-17 N/A 9.8 CRITICAL
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote code execution when manipulating internal methods through Java RMI interface.