WI
Operating System
Windows
On CISA KEVExploited in the wildRansomware-linked
3,283
CVEs
190
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 62High 419Medium 19Low 0
Watch
Add Windows to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-96951 In wildKEV | 8.8 | Oct 13 | Windows Shell Security Feature Bypass Vulnerability Affected: All versions, or not specified |
| CVE-2026-21510 In wildKEV | 8.8 | Feb 10 | Windows Shell Security Feature Bypass Vulnerability Affected: All versions, or not specified |
| CVE-2026-21513 In wildKEV | 8.8 | Feb 10 | MSHTML Framework Security Feature Bypass Vulnerability Affected: All versions, or not specified |
| CVE-2025-33073 In wildKEV | 8.8 | Jun 10 | Windows SMB Client Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2025-33053 In wildKEV | 8.8 | Jun 10 | Internet Shortcut Files Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2024-49039 RansomwareIn wildKEV | 8.8 | Nov 12 | Windows Task Scheduler Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2024-43461 In wildKEV | 8.8 | Sep 10 | Windows MSHTML Platform Spoofing Vulnerability Affected: All versions, or not specified |
| CVE-2024-30040 In wildKEV | 8.8 | May 14 | Windows MSHTML Platform Security Feature Bypass Vulnerability Affected: All versions, or not specified |
| CVE-2023-36025 In wildKEV | 8.8 | Nov 14 | Windows SmartScreen Security Feature Bypass Vulnerability Affected: All versions, or not specified |
| CVE-2023-32049 In wildKEV | 8.8 | Jul 11 | Windows SmartScreen Security Feature Bypass Vulnerability Affected: All versions, or not specified |
| CVE-2023-21674 In wildKEV | 8.8 | Jan 10 | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2022-41128 In wildKEV | 8.8 | Nov 9 | Windows Scripting Languages Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2021-34527 RansomwareIn wildKEV | 8.8 | Jul 2 | Windows Print Spooler Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2020-1020 In wildKEV | 8.8 | Apr 15 | Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability Affected: 10 Version 1803 for 32-bit Systems; 10 Version 1803 for x64-based Systems; 10 Version 1803 for ARM64-based Systems; 10 Version 1809 for 32-bit Systems; 10 Version 1809 for x64-based Systems; 10 Version 1809 for ARM64-based Systems; +12 more |
| CVE-2019-0903 In wildKEV | 8.8 | May 16 | Microsoft GDI Remote Code Execution Vulnerability Affected: 2008 R2 for x64-based Systems Service Pack 1 (Core installation); 2008 R2 for Itanium-Based Systems Service Pack 1; 2008 R2 for x64-based Systems Service Pack 1; 2008 for 32-bit Systems Service Pack 2 (Core installation); 2012; 2012 (Core installation); +11 more |
| CVE-2018-8414 In wildKEV | 8.8 | Aug 15 | Microsoft Windows Shell Remote Code Execution Vulnerability Affected: Version 1703 for 32-bit Systems; Version 1703 for x64-based Systems; Version 1709 for 32-bit Systems; Version 1709 for x64-based Systems; Version 1803 for 32-bit Systems; Version 1803 for x64-based Systems |
| CVE-2018-0824 In wildKEV | 8.8 | May 9 | Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability Affected: 1607; 1703; 1709; 1803; 0 |
| CVE-2017-8464 In wildKEV | 8.8 | Jun 15 | Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2017-0143 RansomwareIn wildKEV | 8.8 | Mar 17 | Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2017-0146 RansomwareIn wildKEV | 8.8 | Mar 17 | Microsoft Windows SMB Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2016-7256 In wildKEV | 8.8 | Nov 10 | Microsoft Windows Open Type Font Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2015-2426 In wildKEV | 8.8 | Jul 20 | Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2014-6332 In wildKEV | 8.8 | Nov 11 | Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2014-4148 In wildKEV | 8.8 | Oct 15 | Microsoft Windows Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2014-1812 RansomwareIn wildKEV | 8.8 | May 14 | Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2013-3918 In wildKEV | 8.8 | Nov 12 | Microsoft Windows Out-of-Bounds Write Vulnerability Affected: All versions, or not specified |
| CVE-2011-3402 In wildKEV | 8.8 | Nov 4 | Microsoft Windows Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2008-0015 In wildKEV | 8.8 | Jul 7 | Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2021-33739 In wildKEV | 8.4 | Jun 8 | Microsoft DWM Core Library Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2024-43573 In wildKEV | 8.1 | Oct 8 | Windows MSHTML Platform Spoofing Vulnerability Affected: All versions, or not specified |
| CVE-2024-21412 RansomwareIn wildKEV | 8.1 | Feb 13 | Internet Shortcut Files Security Feature Bypass Vulnerability Affected: All versions, or not specified |
| CVE-2020-0601 In wildKEV | 8.1 | Jan 14 | Microsoft Windows CryptoAPI Spoofing Vulnerability Affected: version 1803 (Core Installation); 2019; 2019 (Core installation); 2016; 2016 (Core installation) |
| CVE-2026-81963 In wildKEV | 7.8 | Sep 8 | Windows Update Stack Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2026-85880 In wildKEV | 7.8 | Sep 8 | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2026-21533 In wildKEV | 7.8 | Feb 10 | Windows Remote Desktop Services Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2026-21519 In wildKEV | 7.8 | Feb 10 | Desktop Window Manager Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2025-62221 In wildKEV | 7.8 | Dec 9 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2025-60710 RansomwareIn wildKEV | 7.8 | Nov 11 | Host Process for Windows Tasks Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2025-59230 In wildKEV | 7.8 | Oct 14 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2025-24990 In wildKEV | 7.8 | Oct 14 | Windows Agere Modem Driver Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2025-32709 In wildKEV | 7.8 | May 13 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2025-32706 In wildKEV | 7.8 | May 13 | Windows Common Log File System Driver Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2025-32701 In wildKEV | 7.8 | May 13 | Windows Common Log File System Driver Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2025-30400 In wildKEV | 7.8 | May 13 | Microsoft DWM Core Library Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2025-29824 RansomwareIn wildKEV | 7.8 | Apr 8 | Windows Common Log File System Driver Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2025-24993 In wildKEV | 7.8 | Mar 11 | Windows NTFS Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2025-24985 In wildKEV | 7.8 | Mar 11 | Windows Fast FAT File System Driver Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2025-21418 In wildKEV | 7.8 | Feb 11 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2025-21334 In wildKEV | 7.8 | Jan 14 | Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2025-21333 In wildKEV | 7.8 | Jan 14 | Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)