WI
Operating System
Windows
by Microsoft · last CVE Oct 13, 2026
On CISA KEVExploited in the wildRansomware-linked
3,283
CVEs
190
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 62High 419Medium 19Low 0
Watch

Add Windows to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-0869
8.8
5%
Mar 12
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'
Affected: 1607; 1709; 1803; 1809; 1903; 1909
CVE-2020-0809
8.8
6%
Mar 12
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'
Affected: 1607; 1709; 1803; 1809; 1903; 1909
CVE-2020-0807
8.8
6%
Mar 12
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'
Affected: 1803; 1809; 1903; 1909
CVE-2020-0801
8.8
5%
Mar 12
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'
Affected: 1607; 1709; 1803; 1809; 1903; 1909
CVE-2020-0684
8.8
9%
Mar 12
A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this…
Affected: 1607; 1709; 1803; 1809; 1903; 1909
CVE-2020-0792
8.8
1%
Feb 11
An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege…
Affected: 1903; 1909
CVE-2020-0738
8.8
6%
Feb 11
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'
Affected: 1607; 1709; 1803; 1809; 1903; 1909
CVE-2020-0734
8.8
17%
Feb 11
A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution…
Affected: 1607; 1709; 1803; 1809; 1903; 1909
CVE-2020-0729
8.8
31%
Feb 11
A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this…
Affected: 1607; 1709; 1803; 1809; 1903; 1909
CVE-2020-0662
8.8
13%
Feb 11
A remote code execution vulnerability exists in the way that Windows handles objects in memory, aka 'Windows Remote Code Execution Vulnerability'
Affected: 1607; 1709; 1803; 1809; 1903; 1909
CVE-2019-1468
8.8
18%
Dec 10
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Win32k Graphics Remote Code Execution…
Affected: 1607; 1709; 1803; 1809; 1903; 1909
CVE-2019-1456
8.8
10%
Nov 12
A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially crafted OpenType fonts, aka 'OpenType…
Affected: 1607; 1709; 1803; 1809; 1903
CVE-2019-1419
8.8
12%
Nov 12
A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially crafted OpenType fonts, aka 'OpenType…
Affected: 1607; 1709; 1803; 1809; 1903
CVE-2019-1333
8.8
16%
Oct 10
A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution…
Affected: 1607; 1703; 1709; 1803; 1809; 1903
CVE-2019-1060
8.8
14%
Oct 10
A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'
Affected: 1607; 1703; 1709; 1803; 1809; 1903
CVE-2019-1291
8.8
12%
Sep 11
A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution…
Affected: 1607; 1703; 1709; 1803; 1809; 1903
CVE-2019-1290
8.8
12%
Sep 11
A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution…
Affected: 1607; 1703; 1709; 1803; 1809; 1903
CVE-2019-0788
8.8
12%
Sep 11
A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution…
Affected: 1607; 1703; 1709; 1803; 1809; 1903
CVE-2019-0787
8.8
12%
Sep 11
A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution…
Affected: 1607; 1703; 1709; 1803; 1809; 1903
CVE-2019-1183
8.8
5%
Aug 14
This information is being revised to indicate that this CVE (CVE-2019-1183) is fully mitigated by the security updates for the vulnerability discussed in CVE-2019-1194
Affected: 1607; 1703; 1709; 1803; 1809; 1903
CVE-2019-1152
8.8
13%
Aug 14
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts
Affected: 1607; 1703; 1709; 1803; 1809; 1903
CVE-2019-1151
8.8
15%
Aug 14
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts
Affected: 1607; 1703; 1709; 1803; 1809; 1903
CVE-2019-1150
8.8
26%
Aug 14
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts
Affected: 1607; 1703; 1709; 1803; 1809; 1903
CVE-2019-1149
8.8
14%
Aug 14
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts
Affected: 1607; 1703; 1709; 1803; 1809; 1903
CVE-2019-1145
8.8
13%
Aug 14
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts
Affected: 1607; 1703; 1709; 1803; 1809; 1903
CVE-2019-1144
8.8
13%
Aug 14
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts
Affected: 1607; 1703; 1709; 1803; 1809; 1903
CVE-2019-1128
8.8
17%
Jul 15
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'
Affected: 1709; 1803; 1809; 1903
CVE-2019-1127
8.8
21%
Jul 15
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'
Affected: 1709; 1803; 1809; 1903
CVE-2019-1124
8.8
18%
Jul 15
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'
Affected: 1709; 1803; 1809; 1903
CVE-2019-1123
8.8
17%
Jul 15
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'
Affected: 1709; 1803; 1809; 1903
CVE-2019-1122
8.8
17%
Jul 15
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'
Affected: 1709; 1803; 1809; 1903
CVE-2019-1121
8.8
17%
Jul 15
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'
Affected: 1709; 1803; 1809; 1903
CVE-2019-1120
8.8
17%
Jul 15
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'
Affected: 1709; 1803; 1809; 1903
CVE-2019-1119
8.8
19%
Jul 15
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'
Affected: 1709; 1803; 1809; 1903
CVE-2019-1118
8.8
24%
Jul 15
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'
Affected: 1709; 1803; 1809; 1903
CVE-2019-1117
8.8
24%
Jul 15
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'
Affected: 1709; 1803; 1809; 1903
CVE-2019-1102
8.8
11%
Jul 15
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution…
Affected: 1607; 1703; 1709; 1803; 1809; 1903
CVE-2019-0888
8.8
11%
Jun 12
A remote code execution vulnerability exists in the way that ActiveX Data Objects (ADO) handle objects in memory
Affected: 1607; 1703; 1709; 1803; 1809; 1903
CVE-2019-0722
8.8
5%
Jun 12
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system
Affected: 1607; 1703; 1709; 1803; 1809; 1903
CVE-2019-0902
8.8
19%
May 16
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution…
Affected: 1607; 1703; 1709; 1803; 1809; 1903
CVE-2019-0853
8.8
30%
Apr 9
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution…
Affected: 1607; 1703; 1709; 1803; 1809
CVE-2019-0845
8.8
15%
Apr 9
A remote code execution vulnerability exists when the IOleCvt interface renders ASP webpage content, aka 'Windows IOleCvt Interface Remote Code Execution Vulnerability'
Affected: 1607; 1703; 1709; 1803; 1809
CVE-2019-0842
8.8
18%
Apr 9
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution Vulnerability'
Affected: 1607; 1703; 1709; 1803; 1809
CVE-2019-0795
8.8
21%
Apr 9
A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'
Affected: 1607; 1703; 1709; 1803; 1809
CVE-2019-0794
8.8
15%
Apr 9
A remote code execution vulnerability exists when OLE automation improperly handles objects in memory, aka 'OLE Automation Remote Code Execution Vulnerability'
Affected: 1607; 1703; 1709; 1803; 1809
CVE-2019-0793
8.8
18%
Apr 9
A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'
Affected: 1607; 1703; 1709; 1803; 1809
CVE-2019-0792
8.8
18%
Apr 9
A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'
Affected: 1607; 1703; 1709; 1803; 1809
CVE-2019-0791
8.8
18%
Apr 9
A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'
Affected: 1607; 1703; 1709; 1803; 1809
CVE-2019-0790
8.8
16%
Apr 9
A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'
Affected: 1607; 1703; 1709; 1803; 1809
CVE-2019-0772
8.8
13%
Apr 9
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution Vulnerability'
Affected: 1607; 1703; 1709; 1803; 1809
Page 9 of 10 · 500 total
The 500 most important CVEs for this product (exploited first, then by severity)