Windows vulnerabilities | LiveThreat CVE Feed

Operating System

Windows

by Microsoft · last CVE Oct 13, 2026

On CISA KEVExploited in the wildRansomware-linked

3,287

CVEs

190

On KEV

10.0

Max CVSS

New 30D

Vulnerabilities3,287 In the news12 Timeline

Severity mix

Critical 62High 419Medium 19Low 0

Severity

All severities500 Critical62 High419 Medium19 Low0

Exploitation

On CISA KEV190 Exploited in the wild190

Watch

Add Windows to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2022-38040	8.8	2%	Oct 11	Microsoft ODBC Driver Remote Code Execution Vulnerability Affected: 20h2; 21h1; 21h2; 1607; 1809
CVE-2022-38045	8.8	3%	Oct 11	Windows Server Service Elevation of Privilege Vulnerability Affected: 20h2; 21h1; 21h2; 1607; 1809
CVE-2022-38031	8.8	2%	Oct 11	Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Affected: 20h2; 21h1; 21h2; 1607; 1809
CVE-2022-37982	8.8	2%	Oct 11	Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Affected: 20h2; 20h2; 20h2; 21h1; 21h1; 21h1; +8 more
CVE-2022-38034	8.8	4%	Oct 11	Windows Workstation Service Elevation of Privilege Vulnerability Affected: 22h2; 22h2
CVE-2022-38016	8.8	1%	Oct 11	Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability Affected: 20h2; 21h1; 21h2; 1607; 1809
CVE-2022-35841	8.8	4%	Sep 13	Windows Enterprise App Management Service Remote Code Execution Vulnerability Affected: 20h2; 20h2; 20h2; 21h1; 21h1; 21h1; +8 more
CVE-2022-35840	8.8	2%	Sep 13	Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Affected: 20h2; 20h2; 20h2; 21h1; 21h1; 21h1; +8 more
CVE-2022-35836	8.8	2%	Sep 13	Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Affected: 20h2; 20h2; 20h2; 21h1; 21h1; 21h1; +8 more
CVE-2022-35835	8.8	2%	Sep 13	Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Affected: 20h2; 20h2; 20h2; 21h1; 21h1; 21h1; +8 more
CVE-2022-35834	8.8	2%	Sep 13	Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Affected: 20h2; 20h2; 20h2; 21h1; 21h1; 21h1; +8 more
CVE-2022-34734	8.8	3%	Sep 13	Microsoft ODBC Driver Remote Code Execution Vulnerability Affected: 20h2; 21h1; 21h2; 1607; 1809
CVE-2022-34733	8.8	2%	Sep 13	Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Affected: 20h2; 21h1; 21h2; 1607; 1809
CVE-2022-34732	8.8	3%	Sep 13	Microsoft ODBC Driver Remote Code Execution Vulnerability Affected: 20h2; 21h1; 21h2; 1607; 1809
CVE-2022-34731	8.8	2%	Sep 13	Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Affected: 20h2; 21h1; 21h2; 1607; 1809
CVE-2022-34730	8.8	3%	Sep 13	Microsoft ODBC Driver Remote Code Execution Vulnerability Affected: 20h2; 21h1; 21h2; 1607; 1809
CVE-2022-34727	8.8	3%	Sep 13	Microsoft ODBC Driver Remote Code Execution Vulnerability Affected: 20h2; 21h1; 21h2; 1607; 1809
CVE-2022-34726	8.8	3%	Sep 13	Microsoft ODBC Driver Remote Code Execution Vulnerability Affected: 20h2; 21h1; 21h2; 1607; 1809
CVE-2022-35804	8.8	3%	Aug 9	SMB Client and Server Remote Code Execution Vulnerability Affected: All versions, or not specified
CVE-2022-34691	8.8	2%	Aug 9	Active Directory Domain Services Elevation of Privilege Vulnerability Affected: 20h2; 21h1; 1607; 1809
CVE-2022-30221	8.8	2%	Jul 12	Windows Graphics Component Remote Code Execution Vulnerability Affected: 20h2; 20h2; 20h2; 21h1; 21h1; 21h1; +8 more
CVE-2022-30216	8.8	89%	Jul 12	Windows Server Service Tampering Vulnerability Affected: 20h2; 20h2; 20h2; 21h1; 21h1; 21h1; +3 more
CVE-2022-22026	8.8	1%	Jul 12	Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability Affected: 20h2; 20h2; 20h2; 21h1; 21h1; 21h1; +8 more
CVE-2022-30165	8.8	5%	Jun 15	Windows Kerberos Elevation of Privilege Vulnerability Affected: 20h2; 21h1; 21h2; 1607; 1809
CVE-2022-30161	8.8	3%	Jun 15	Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Affected: 20h2; 21h1; 21h2; 1607; 1809
CVE-2022-30153	8.8	3%	Jun 15	Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Affected: 20h2; 20h2; 20h2; 21h1; 21h1; 21h1; +8 more
CVE-2022-29141	8.8	3%	May 10	Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Affected: 20h2
CVE-2022-29139	8.8	2%	May 10	Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Affected: 20h2; 21h1; 21h2; 1607; 1809; 1909
CVE-2022-29137	8.8	2%	May 10	Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Affected: 20h2; 21h1; 21h2; 1607; 1809; 1909
CVE-2022-29133	8.8	1%	May 10	Windows Kernel Elevation of Privilege Vulnerability Affected: All versions, or not specified
CVE-2022-29131	8.8	3%	May 10	Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Affected: 20h2
CVE-2022-29129	8.8	3%	May 10	Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Affected: 20h2; 21h1; 21h2; 1607; 1809; 1909
CVE-2022-29128	8.8	3%	May 10	Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Affected: 20h2; 21h1; 21h2; 1607; 1809; 1909
CVE-2022-26927	8.8	5%	May 10	Windows Graphics Component Remote Code Execution Vulnerability Affected: 2022
CVE-2022-22019	8.8	3%	May 10	Remote Procedure Call Runtime Remote Code Execution Vulnerability Affected: 20h2; 20h2; 20h2; 21h1; 21h1; 21h1; +11 more
CVE-2022-22017	8.8	37%	May 10	Remote Desktop Client Remote Code Execution Vulnerability Affected: All versions, or not specified
CVE-2022-22014	8.8	2%	May 10	Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Affected: 2022
CVE-2022-22013	8.8	2%	May 10	Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Affected: 2022
CVE-2022-24541	8.8	3%	Apr 15	Windows Server Service Remote Code Execution Vulnerability Affected: 20h2; 21h1; 21h2; 1607; 1809; 1909
CVE-2022-24528	8.8	3%	Apr 15	Remote Procedure Call Runtime Remote Code Execution Vulnerability Affected: 20h2; 21h1; 21h2; 1607; 1809; 1909
CVE-2022-24500	8.8	38%	Apr 15	Windows SMB Remote Code Execution Vulnerability Affected: 20h2; 21h1; 21h2; 1607; 1809; 1909
CVE-2022-24492	8.8	3%	Apr 15	Remote Procedure Call Runtime Remote Code Execution Vulnerability Affected: 20h2; 21h1; 21h2; 1607; 1809; 1909
CVE-2022-24487	8.8	2%	Apr 15	Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability Affected: 20h2; 21h1; 21h2; 1607; 1809; 1909
CVE-2022-23257	8.8	1%	Apr 15	Windows Hyper-V Remote Code Execution Vulnerability Affected: 20h2; 21h1; 21h2
CVE-2022-24508	8.8	3%	Mar 9	Win32 File Enumeration Remote Code Execution Vulnerability Affected: 20h2
CVE-2022-23294	8.8	2%	Mar 9	Windows Event Tracing Remote Code Execution Vulnerability Affected: 20h2; 2022
CVE-2022-23285	8.8	26%	Mar 9	Remote Desktop Client Remote Code Execution Vulnerability Affected: 20h2; 21h1; 21h2; 1607; 1809; 1909
CVE-2022-21990	8.8	19%	Mar 9	Remote Desktop Client Remote Code Execution Vulnerability Affected: 20h2; 2022
CVE-2022-21984	8.8	5%	Feb 9	Windows DNS Server Remote Code Execution Vulnerability Affected: 20h2; 20h2; 20h2; 21h1; 21h1; 21h1; +6 more
CVE-2022-21922	8.8	3%	Jan 11	Remote Procedure Call Runtime Remote Code Execution Vulnerability Affected: 20h2; 20h2; 20h2; 21h1; 21h1; 21h1; +11 more