WI
Operating System
Windows
On CISA KEVExploited in the wildRansomware-linked
3,283
CVEs
190
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 62High 419Medium 19Low 0
Watch
Add Windows to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-1350 In wildKEV | 10.0 | Jul 14 | Microsoft Windows DNS Server Remote Code Execution Vulnerability Affected: 2019; 2019 (Core installation); 2016; 2016 (Core installation); 2008 for 32-bit Systems Service Pack 2; 2008 for 32-bit Systems Service Pack 2 (Core installation); +8 more |
| CVE-2025-59287 In wildKEV | 9.8 | Oct 14 | Windows Server Update Service (WSUS) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2019-0708 RansomwareIn wildKEV | 9.8 | May 16 | Microsoft Remote Desktop Services Remote Code Execution Vulnerability Affected: 2008 R2 for x64-based Systems Service Pack 1 (Core installation); 2008 R2 for Itanium-Based Systems Service Pack 1; 2008 R2 for x64-based Systems Service Pack 1; 2008 for 32-bit Systems Service Pack 2 (Core installation); 2008 for Itanium-Based Systems Service Pack 2; 2008 for 32-bit Systems Service Pack 2; +2 more |
| CVE-2017-8543 In wildKEV | 9.8 | Jun 15 | Microsoft Windows Search Remote Code Execution Vulnerability Affected: Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016. |
| CVE-2008-4250 In wildKEV | 9.8 | Oct 23 | Microsoft Windows Buffer Overflow Vulnerability Affected: All versions, or not specified |
| CVE-2020-1040 In wildKEV | 9.0 | Jul 14 | Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability Affected: 2016; 2016 (Core installation); 2008 R2 for x64-based Systems Service Pack 1; 2008 R2 for x64-based Systems Service Pack 1 (Core installation); 2012; 2012 (Core installation); +2 more |
| CVE-2026-96951 In wildKEV | 8.8 | Oct 13 | Windows Shell Security Feature Bypass Vulnerability Affected: All versions, or not specified |
| CVE-2026-21510 In wildKEV | 8.8 | Feb 10 | Windows Shell Security Feature Bypass Vulnerability Affected: All versions, or not specified |
| CVE-2026-21513 In wildKEV | 8.8 | Feb 10 | MSHTML Framework Security Feature Bypass Vulnerability Affected: All versions, or not specified |
| CVE-2025-33073 In wildKEV | 8.8 | Jun 10 | Windows SMB Client Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2025-33053 In wildKEV | 8.8 | Jun 10 | Internet Shortcut Files Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2024-49039 RansomwareIn wildKEV | 8.8 | Nov 12 | Windows Task Scheduler Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2024-43461 In wildKEV | 8.8 | Sep 10 | Windows MSHTML Platform Spoofing Vulnerability Affected: All versions, or not specified |
| CVE-2024-30040 In wildKEV | 8.8 | May 14 | Windows MSHTML Platform Security Feature Bypass Vulnerability Affected: All versions, or not specified |
| CVE-2023-36025 In wildKEV | 8.8 | Nov 14 | Windows SmartScreen Security Feature Bypass Vulnerability Affected: All versions, or not specified |
| CVE-2023-32049 In wildKEV | 8.8 | Jul 11 | Windows SmartScreen Security Feature Bypass Vulnerability Affected: All versions, or not specified |
| CVE-2023-21674 In wildKEV | 8.8 | Jan 10 | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2022-41128 In wildKEV | 8.8 | Nov 9 | Windows Scripting Languages Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2021-34527 RansomwareIn wildKEV | 8.8 | Jul 2 | Windows Print Spooler Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2020-1020 In wildKEV | 8.8 | Apr 15 | Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability Affected: 10 Version 1803 for 32-bit Systems; 10 Version 1803 for x64-based Systems; 10 Version 1803 for ARM64-based Systems; 10 Version 1809 for 32-bit Systems; 10 Version 1809 for x64-based Systems; 10 Version 1809 for ARM64-based Systems; +12 more |
| CVE-2019-0903 In wildKEV | 8.8 | May 16 | Microsoft GDI Remote Code Execution Vulnerability Affected: 7 for 32-bit Systems Service Pack 1; 7 for x64-based Systems Service Pack 1; 8.1 for 32-bit systems; 8.1 for x64-based systems; RT 8.1; 10 for 32-bit Systems; +14 more |
| CVE-2018-8414 In wildKEV | 8.8 | Aug 15 | Microsoft Windows Shell Remote Code Execution Vulnerability Affected: Version 1703 for 32-bit Systems; Version 1703 for x64-based Systems; Version 1709 for 32-bit Systems; Version 1709 for x64-based Systems; Version 1803 for 32-bit Systems; Version 1803 for x64-based Systems |
| CVE-2018-0824 In wildKEV | 8.8 | May 9 | Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability Affected: 1607; 1703; 1709; 1803; 0 |
| CVE-2017-8464 In wildKEV | 8.8 | Jun 15 | Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2017-0143 RansomwareIn wildKEV | 8.8 | Mar 17 | Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2017-0146 RansomwareIn wildKEV | 8.8 | Mar 17 | Microsoft Windows SMB Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2016-7256 In wildKEV | 8.8 | Nov 10 | Microsoft Windows Open Type Font Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2015-2426 In wildKEV | 8.8 | Jul 20 | Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2014-6332 In wildKEV | 8.8 | Nov 11 | Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2014-4148 In wildKEV | 8.8 | Oct 15 | Microsoft Windows Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2014-1812 RansomwareIn wildKEV | 8.8 | May 14 | Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2013-3918 In wildKEV | 8.8 | Nov 12 | Microsoft Windows Out-of-Bounds Write Vulnerability Affected: All versions, or not specified |
| CVE-2011-3402 In wildKEV | 8.8 | Nov 4 | Microsoft Windows Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2008-0015 In wildKEV | 8.8 | Jul 7 | Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2021-33739 In wildKEV | 8.4 | Jun 8 | Microsoft DWM Core Library Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2024-43573 In wildKEV | 8.1 | Oct 8 | Windows MSHTML Platform Spoofing Vulnerability Affected: All versions, or not specified |
| CVE-2024-21412 RansomwareIn wildKEV | 8.1 | Feb 13 | Internet Shortcut Files Security Feature Bypass Vulnerability Affected: All versions, or not specified |
| CVE-2020-0601 In wildKEV | 8.1 | Jan 14 | Microsoft Windows CryptoAPI Spoofing Vulnerability Affected: 10 Version 1803 for 32-bit Systems; 10 Version 1803 for x64-based Systems; 10 Version 1803 for ARM64-based Systems; 10 Version 1809 for 32-bit Systems; 10 Version 1809 for x64-based Systems; 10 Version 1809 for ARM64-based Systems; +7 more |
| CVE-2026-81963 In wildKEV | 7.8 | Sep 8 | Windows Update Stack Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2026-85880 In wildKEV | 7.8 | Sep 8 | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2026-21533 In wildKEV | 7.8 | Feb 10 | Windows Remote Desktop Services Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2026-21519 In wildKEV | 7.8 | Feb 10 | Desktop Window Manager Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2025-62221 In wildKEV | 7.8 | Dec 9 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2025-60710 RansomwareIn wildKEV | 7.8 | Nov 11 | Host Process for Windows Tasks Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2025-59230 In wildKEV | 7.8 | Oct 14 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2025-24990 In wildKEV | 7.8 | Oct 14 | Windows Agere Modem Driver Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2025-32709 In wildKEV | 7.8 | May 13 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2025-32706 In wildKEV | 7.8 | May 13 | Windows Common Log File System Driver Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2025-32701 In wildKEV | 7.8 | May 13 | Windows Common Log File System Driver Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2025-30400 In wildKEV | 7.8 | May 13 | Microsoft DWM Core Library Elevation of Privilege Vulnerability Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)