WI
Operating System
Windows
by Microsoft · last CVE Oct 13, 2026
On CISA KEVExploited in the wildRansomware-linked
3,283
CVEs
190
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 62High 419Medium 19Low 0
Watch

Add Windows to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-26865
8.8
1%
Mar 11
Windows Container Execution Agent Elevation of Privilege Vulnerability
Affected: 20h2; 1607; 1803; 1809; 1909; 2004
CVE-2021-24093
8.8
46%
Feb 25
Windows Graphics Component Remote Code Execution Vulnerability
Affected: 20h2; 1607; 1803; 1809; 1909; 2004
CVE-2021-24088
8.8
2%
Feb 25
Windows Local Spooler Remote Code Execution Vulnerability
Affected: 20h2; 1607; 1803; 1809; 1909; 2004
CVE-2020-17162
8.8
2%
Feb 25
Microsoft Windows Security Feature Bypass Vulnerability
Affected: 1607; 1803; 1809; 1903; 1909; 2004
CVE-2021-1701
8.8
4%
Jan 12
Remote Procedure Call Runtime Remote Code Execution Vulnerability
Affected: 20h2; 1607; 1803; 1809; 1909; 2004
CVE-2021-1700
8.8
4%
Jan 12
Remote Procedure Call Runtime Remote Code Execution Vulnerability
Affected: 20h2; 1607; 1803; 1809; 1909; 2004
CVE-2021-1678
8.8
10%
Jan 12
Windows Print Spooler Spoofing Vulnerability
Affected: 20h2; 1607; 1803; 1809; 1909; 2004
CVE-2021-1674
8.8
3%
Jan 12
Windows Remote Desktop Protocol Core Security Feature Bypass Vulnerability
Affected: 20h2; 1607; 1803; 1809; 1909; 2004
CVE-2021-1673
8.8
3%
Jan 12
Remote Procedure Call Runtime Remote Code Execution Vulnerability
Affected: 20h2; 1607; 1803; 1809; 1909; 2004
CVE-2021-1671
8.8
3%
Jan 12
Remote Procedure Call Runtime Remote Code Execution Vulnerability
Affected: 20h2; 1607; 1803; 1809; 1909; 2004
CVE-2021-1669
8.8
3%
Jan 12
Windows Remote Desktop Security Feature Bypass Vulnerability
Affected: 20h2; 1607; 1803; 1809; 1909; 2004
CVE-2021-1667
8.8
4%
Jan 12
Remote Procedure Call Runtime Remote Code Execution Vulnerability
Affected: 20h2; 1607; 1803; 1809; 1909; 2004
CVE-2021-1666
8.8
3%
Jan 12
Remote Procedure Call Runtime Remote Code Execution Vulnerability
Affected: 20h2; 1607; 1803; 1809; 1909; 2004
CVE-2021-1664
8.8
3%
Jan 12
Remote Procedure Call Runtime Remote Code Execution Vulnerability
Affected: 20h2; 1607; 1803; 1809; 1909; 2004
CVE-2021-1660
8.8
3%
Jan 12
Remote Procedure Call Runtime Remote Code Execution Vulnerability
Affected: 20h2; 1607; 1803; 1809; 1909; 2004
CVE-2021-1658
8.8
3%
Jan 12
Remote Procedure Call Runtime Remote Code Execution Vulnerability
Affected: 20h2; 1607; 1803; 1809; 1909; 2004
CVE-2020-17042
8.8
5%
Nov 11
Windows Print Spooler Remote Code Execution Vulnerability
Affected: 20h2; 1607; 1803; 1809; 1903; 1909; +1 more
CVE-2020-1080
8.8
1%
Oct 16
<p>An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory
Affected: 1803; 1809; 1903; 1909; 2004
CVE-2020-16911
8.8
4%
Oct 16
<p>A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory
Affected: 1607; 1709; 1803; 1809; 1903; 1909; +1 more
CVE-2020-16898
8.8
11%
Oct 16
<p>A remote code execution vulnerability exists when the Windows TCP/IP stack improperly handles ICMPv6 Router Advertisement packets
Affected: 1709; 1803; 1809; 1903; 1909; 2004
CVE-2020-16891
8.8
1%
Oct 16
<p>A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system
Affected: 1607; 1709; 1803; 1809; 1903; 1909; +1 more
CVE-2020-1129
8.8
4%
Sep 11
<p>A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory
Affected: 1607; 1709; 1803; 1809; 1903; 1909; +1 more
CVE-2020-0922
8.8
5%
Sep 11
<p>A remote code execution vulnerability exists in the way that Microsoft COM for Windows handles objects in memory
Affected: 1607; 1607; 1709; 1803; 1809; 1903; +2 more
CVE-2020-1585
8.8
5%
Aug 17
A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory
Affected: 1709; 1803; 1809; 1903; 1909; 2004
CVE-2020-1561
8.8
4%
Aug 17
A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory
Affected: 1607; 1607; 1709; 1803; 1809; 1903; +2 more
CVE-2020-1436
8.8
21%
Jul 14
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted fonts.For all systems except Windows 10, an attacker who…
Affected: 1607; 1709; 1803; 1809; 1903; 1909; +1 more
CVE-2020-1435
8.8
14%
Jul 14
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution…
Affected: 1607; 1709; 1803; 1809; 1903; 1909; +1 more
CVE-2020-1421
8.8
75%
Jul 14
A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this…
Affected: 1607; 1607; 1709; 1709; 1709; 1803; +14 more
CVE-2020-1412
8.8
14%
Jul 14
A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Remote Code Execution…
Affected: 1607; 1607; 1709; 1709; 1709; 1803; +14 more
CVE-2020-1408
8.8
6%
Jul 14
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Microsoft Graphics Remote Code Execution…
Affected: 1607; 1607; 1709; 1709; 1709; 1803; +14 more
CVE-2020-1317
8.8
4%
Jun 9
An elevation of privilege vulnerability exists when Group Policy improperly checks access, aka 'Group Policy Elevation of Privilege Vulnerability'
Affected: 1607; 1709; 1803; 1809; 1903; 1909; +1 more
CVE-2020-1301
8.8
44%
Jun 9
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 (SMBv1) server handles certain requests, aka 'Windows SMB Remote Code Execution…
Affected: 1607; 1709; 1803; 1809; 1903; 1909; +1 more
CVE-2020-1300
8.8
60%
Jun 9
A remote code execution vulnerability exists when Microsoft Windows fails to properly handle cabinet files.To exploit the vulnerability, an attacker would have to convince a user…
Affected: 1607; 1709; 1803; 1809; 1903; 1909; +1 more
CVE-2020-1299
8.8
15%
Jun 9
A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this…
Affected: 1607; 1709; 1803; 1809; 1903; 1909; +1 more
CVE-2020-1286
8.8
12%
Jun 9
A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths.An attacker who successfully exploited this vulnerability could run…
Affected: 1803; 1809; 1903; 1909; 2004
CVE-2020-1281
8.8
15%
Jun 9
A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Windows OLE Remote Code Execution Vulnerability'
Affected: 1607; 1709; 1803; 1809; 1903; 1909; +1 more
CVE-2020-1255
8.8
3%
Jun 9
An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) IIS module improperly handles uploaded content, aka 'Windows…
Affected: 1607; 1709; 1803; 1809; 1903; 1909; +1 more
CVE-2020-1248
8.8
14%
Jun 9
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution…
Affected: 1903; 1909; 2004
CVE-2020-1239
8.8
6%
Jun 9
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'
Affected: 1607; 1709; 1803; 1809; 1903; 1909; +1 more
CVE-2020-1238
8.8
7%
Jun 9
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'
Affected: 1709; 1803; 1809; 1903; 1909; 2004
CVE-2020-1126
8.8
4%
May 21
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory
Affected: 1607; 1607; 1709; 1803; 1809; 1903; +1 more
CVE-2020-1117
8.8
4%
May 21
A remote code execution vulnerability exists in the way that the Color Management Module (ICM32.dll) handles objects in memory
Affected: 1607; 1607; 1709; 1803; 1809; 1903; +1 more
CVE-2020-0981
8.8
1%
Apr 15
A security feature bypass vulnerability exists when Windows fails to properly handle token relationships.An attacker who successfully exploited the vulnerability could allow an…
Affected: 1903; 1909
CVE-2020-0964
8.8
19%
Apr 15
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution…
Affected: 1607; 1709; 1803; 1809; 1903; 1909
CVE-2020-0950
8.8
5%
Apr 15
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'
Affected: 1607; 1709; 1803; 1809; 1903; 1909
CVE-2020-0949
8.8
5%
Apr 15
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'
Affected: 1607; 1709; 1803; 1809; 1903; 1909
CVE-2020-0948
8.8
5%
Apr 15
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'
Affected: 1607; 1709; 1803; 1809; 1903; 1909
CVE-2020-0687
8.8
19%
Apr 15
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Microsoft Graphics Remote Code Execution…
Affected: 1607; 1709; 1803; 1809; 1903; 1909
CVE-2020-0883
8.8
22%
Mar 12
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution…
Affected: 1607; 1709; 1803; 1809; 1903; 1909
CVE-2020-0881
8.8
17%
Mar 12
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution…
Affected: 1607; 1709; 1803; 1809; 1903; 1909
Page 8 of 10 · 500 total
The 500 most important CVEs for this product (exploited first, then by severity)