WI
Operating System
Windows
On CISA KEVExploited in the wildRansomware-linked
3,283
CVEs
190
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 62High 419Medium 19Low 0
Watch
Add Windows to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-1350 In wildKEV | 10.0 | Jul 14 | Microsoft Windows DNS Server Remote Code Execution Vulnerability Affected: 2019; 2019 (Core installation); 2016; 2016 (Core installation); 2008 for 32-bit Systems Service Pack 2; 2008 for 32-bit Systems Service Pack 2 (Core installation); +8 more |
| CVE-2025-59287 In wildKEV | 9.8 | Oct 14 | Windows Server Update Service (WSUS) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2019-0708 RansomwareIn wildKEV | 9.8 | May 16 | Microsoft Remote Desktop Services Remote Code Execution Vulnerability Affected: 2008 R2 for x64-based Systems Service Pack 1 (Core installation); 2008 R2 for Itanium-Based Systems Service Pack 1; 2008 R2 for x64-based Systems Service Pack 1; 2008 for 32-bit Systems Service Pack 2 (Core installation); 2008 for Itanium-Based Systems Service Pack 2; 2008 for 32-bit Systems Service Pack 2; +2 more |
| CVE-2017-8543 In wildKEV | 9.8 | Jun 15 | Microsoft Windows Search Remote Code Execution Vulnerability Affected: Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016. |
| CVE-2008-4250 In wildKEV | 9.8 | Oct 23 | Microsoft Windows Buffer Overflow Vulnerability Affected: All versions, or not specified |
| CVE-2020-1040 In wildKEV | 9.0 | Jul 14 | Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability Affected: 2016; 2016 (Core installation); 2008 R2 for x64-based Systems Service Pack 1; 2008 R2 for x64-based Systems Service Pack 1 (Core installation); 2012; 2012 (Core installation); +2 more |
| CVE-2020-1467 | 10.0 | Aug 17 | An elevation of privilege vulnerability exists when Windows improperly handles hard links Affected: 1607; 1809; 1903; 1909; 2004 |
| CVE-2021-26424 | 9.9 | Aug 12 | Windows TCP/IP Remote Code Execution Vulnerability Affected: 20h2; 21h1; 1607; 1809; 1909; 2004 |
| CVE-2021-28476 | 9.9 | May 11 | Windows Hyper-V Remote Code Execution Vulnerability Affected: 20h2; 1607; 1803; 1809; 1909; 2004 |
| CVE-2021-26867 | 9.9 | Mar 11 | Windows Hyper-V Remote Code Execution Vulnerability Affected: 20h2; 1909; 2004 |
| CVE-2019-1384 | 9.9 | Nov 12 | A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages.To exploit this vulnerability, an attacker could send a… Affected: 1607; 1709; 1803; 1809; 1903 |
| CVE-2019-1365 | 9.9 | Oct 10 | An elevation of privilege vulnerability exists when Microsoft IIS Server fails to check the length of a buffer prior to copying memory to it.An attacker who successfully exploited… Affected: 1607; 1803; 1809; 1903 |
| CVE-2023-36911 | 9.8 | Aug 8 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Affected: before 10.0.10240.20107 |
| CVE-2023-36910 | 9.8 | Aug 8 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Affected: before 10.0.10240.20107 |
| CVE-2023-36903 | 9.8 | Aug 8 | Windows System Assessment Tool Elevation of Privilege Vulnerability Affected: before 10.0.10240.20107 |
| CVE-2023-21803 | 9.8 | Feb 14 | Windows iSCSI Discovery Service Remote Code Execution Vulnerability Affected: before 10.0.10240.19747 |
| CVE-2022-34722 | 9.8 | Sep 13 | Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability Affected: 20h2; 21h1; 21h2; 1607; 1809 |
| CVE-2022-34721 | 9.8 | Sep 13 | Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability Affected: 20h2; 21h1; 21h2; 1607; 1809 |
| CVE-2022-34718 | 9.8 | Sep 13 | Windows TCP/IP Remote Code Execution Vulnerability Affected: 20h2; 21h1; 21h2; 1607; 1809 |
| CVE-2022-30133 | 9.8 | Aug 9 | Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability Affected: 20h2; 21h1; 1607; 1809 |
| CVE-2022-29130 | 9.8 | May 10 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Affected: 20h2 |
| CVE-2022-26937 | 9.8 | May 10 | Windows Network File System Remote Code Execution Vulnerability Affected: 20h2 |
| CVE-2022-22012 | 9.8 | May 10 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Affected: 2022 |
| CVE-2022-26809 | 9.8 | Apr 15 | Remote Procedure Call Runtime Remote Code Execution Vulnerability Affected: 20h2; 21h1; 21h2; 1607; 1809; 1909 |
| CVE-2022-24497 | 9.8 | Apr 15 | Windows Network File System Remote Code Execution Vulnerability Affected: 20h2; 21h1; 21h2; 1607; 1809; 1909 |
| CVE-2022-24491 | 9.8 | Apr 15 | Windows Network File System Remote Code Execution Vulnerability Affected: 20h2; 21h1; 21h2; 1607; 1809; 1909 |
| CVE-2022-21907 | 9.8 | Jan 11 | HTTP Protocol Stack Remote Code Execution Vulnerability Affected: 20h2; 20h2; 20h2; 21h1; 21h1; 21h1; +6 more |
| CVE-2022-21898 | 9.8 | Jan 11 | DirectX Graphics Kernel Remote Code Execution Vulnerability Affected: 20h2; 2022 |
| CVE-2022-21874 | 9.8 | Jan 11 | Windows Security Center API Remote Code Execution Vulnerability Affected: 20h2; 2022 |
| CVE-2022-21849 | 9.8 | Jan 11 | Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability Affected: 20h2; 2022 |
| CVE-2021-43217 | 9.8 | Dec 15 | Windows Encrypting File System (EFS) Remote Code Execution Vulnerability Affected: 20h2; 2022 |
| CVE-2021-43215 | 9.8 | Dec 15 | iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution Affected: 20h2; 20h2; 20h2; 21h1; 21h1; 21h1; +11 more |
| CVE-2021-26432 | 9.8 | Aug 12 | Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability Affected: 20h2; 21h1; 1607; 1809; 1909; 2004 |
| CVE-2021-24094 | 9.8 | Feb 25 | Windows TCP/IP Remote Code Execution Vulnerability Affected: 20h2; 1607; 1803; 1809; 1909; 2004 |
| CVE-2021-24077 | 9.8 | Feb 25 | Windows Fax Service Remote Code Execution Vulnerability Affected: 20h2; 1607; 1803; 1809; 1909; 2004 |
| CVE-2021-24074 | 9.8 | Feb 25 | Windows TCP/IP Remote Code Execution Vulnerability Affected: 20h2; 1607; 1803; 1809; 1909; 2004 |
| CVE-2020-0690 | 9.8 | Mar 12 | An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability' Affected: 1607; 1709; 1803; 1809; 1903; 1909 |
| CVE-2019-1226 | 9.8 | Aug 14 | A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system… Affected: 1803; 1809; 1903 |
| CVE-2019-1222 | 9.8 | Aug 14 | A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system… Affected: 1803; 1809; 1903 |
| CVE-2019-1212 | 9.8 | Aug 14 | A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets Affected: 1607; 1709; 1803; 1809; 1903 |
| CVE-2019-1182 | 9.8 | Aug 14 | A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system… Affected: 1607; 1703; 1709; 1803; 1809; 1903 |
| CVE-2019-1181 | 9.8 | Aug 14 | A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system… Affected: 1607; 1703; 1709; 1803; 1809; 1903 |
| CVE-2019-0736 | 9.8 | Aug 14 | A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client Affected: 1607; 1703; 1709; 1803 |
| CVE-2019-0786 | 9.8 | Apr 9 | An elevation of privilege vulnerability exists in the Microsoft Server Message Block (SMB) Server when an attacker with valid credentials attempts to open a specially crafted file… Affected: 1709; 1803; 1809 |
| CVE-2019-0726 | 9.8 | Apr 9 | A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code… Affected: 1803; 1809 |
| CVE-2019-0698 | 9.8 | Apr 9 | A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code… Affected: 1803; 1809 |
| CVE-2019-0697 | 9.8 | Apr 9 | A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code… Affected: 1803; 1809 |
| CVE-2019-0626 | 9.8 | Mar 5 | A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP server, aka 'Windows DHCP Server Remote Code… Affected: 2008 R2 for x64-based Systems Service Pack 1 (Core installation); 2008 R2 for Itanium-Based Systems Service Pack 1; 2008 R2 for x64-based Systems Service Pack 1; 2008 for 32-bit Systems Service Pack 2 (Core installation); 2012; 2012 (Core installation); +12 more |
| CVE-2019-0547 | 9.8 | Jan 8 | A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka "Windows DHCP Client Remote Code… Affected: 1803 |
| CVE-2018-8626 | 9.8 | Dec 12 | A remote code execution vulnerability exists in Windows Domain Name System (DNS) servers when they fail to properly handle requests, aka "Windows DNS Server Heap Overflow… Affected: 1607; 1709; 1803; 1809 |
The 500 most important CVEs for this product (exploited first, then by severity)