WI
Operating System
Windows
On CISA KEVExploited in the wildRansomware-linked
3,287
CVEs
190
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 62High 419Medium 19Low 0
Watch
Add Windows to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-11899 | 9.8 | Dec 12 | Device Guard in Windows 10 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows a security feature bypass vulnerability due to the way untrusted… Affected: 1511; 1607; 1703; 1709 |
| CVE-2017-11771 | 9.8 | Oct 13 | The Microsoft Windows Search component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10… Affected: 1511; 1607; 1703 |
| CVE-2017-8589 | 9.8 | Jul 11 | Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016… Affected: 1511; 1607; 1703 |
| CVE-2016-7182 | 9.8 | Oct 14 | The Graphics component in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10… Affected: 1511; 1607 |
| CVE-2016-3236 | 9.8 | Jun 16 | The Web Proxy Auto Discovery (WPAD) protocol implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012… Affected: 1511 |
| CVE-2021-31962 | 9.4 | Jun 8 | Kerberos AppContainer Security Feature Bypass Vulnerability Affected: 20h2; 21h1; 1607; 1809; 1909; 2004 |
| CVE-2016-0088 | 9.3 | Apr 12 | Hyper-V in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows guest OS users to execute arbitrary code on the host OS via a crafted application, aka… Affected: All versions, or not specified |
| CVE-2019-0721 | 9.1 | Nov 12 | A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating… Affected: 1709; 1803; 1809; 1903 |
| CVE-2019-0719 | 9.1 | Nov 12 | A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating… Affected: 1607; 1709; 1803; 1809; 1903 |
| CVE-2016-3312 | 9.1 | Aug 9 | ActiveSyncProvider in Microsoft Windows 10 Gold and 1511 allows attackers to discover credentials by leveraging failure of Universal Outlook to obtain a secure connection, aka… Affected: 1511; 1511 |
| CVE-2021-26443 | 9.0 | Nov 10 | Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability Affected: 20h2; 21h1; 1809; 1909 |
| CVE-2017-0021 | 9.0 | Mar 17 | Hyper-V in Microsoft Windows 10 1607 and Windows Server 2016 does not properly validate vSMB packet data, which allows attackers to execute arbitrary code on a target OS, aka… Affected: 1607 |
The 500 most important CVEs for this product (exploited first, then by severity)