Windows
Client and server Windows issues with vendor and KEV context when published.
793 public records currently classified under this stack.
Known exploited
All KEV for Windows- Critical9.8Microsoft Remote Desktop Services Remote Code Execution VulnerabilityKEVEPSS 100.0%May 16, 2019
- Critical9.8Microsoft HTTP.sys Remote Code Execution VulnerabilityKEVEPSS 100.0%Apr 14, 2015
- Critical9.8Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data VulnerabilityKEVEPSS 100.0%Oct 14, 2025
- Critical9.8Microsoft HTTP Protocol Stack Remote Code Execution VulnerabilityKEVEPSS 99.9%May 11, 2021
- Critical9.8Microsoft Windows Server Buffer Overflow VulnerabilityKEVEPSS 99.8%Mar 26, 2017
- Critical10.0Microsoft SMBv3 Remote Code Execution VulnerabilityKEVEPSS 99.8%Mar 12, 2020
- High8.8Microsoft Windows Print Spooler Remote Code Execution VulnerabilityKEVEPSS 99.8%Jul 2, 2021
- High7.5Microsoft Windows SMBv1 Information Disclosure VulnerabilityKEVEPSS 99.7%Mar 16, 2017
Recent Windows findings
Full list- Low2.3FreeRDP 3.30.0 before 3.32.0 Heap Over-Read via Windows cliprdr FILECONTENTS_SIZEEPSS 0.1%Oct 16, 2026
- Medium6.0Improper certificate validation in Cato Client tunnel handshakeEPSS 0.1%Oct 15, 2026
- High7.5In Omada Controller MSP mode, the user-confirmation endpoint fails to enforce the required permission check.EPSS 0.4%Oct 14, 2026
- Medium4.3A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service (DoS) condition.EPSS 0.1%Oct 14, 2026
- Critical9.2Beganovich snappdf from 1.1.0 before 6.1.0 contains an OS command injection vulnerability on Windows that allows attackers to run commands by influencing the rendered URL.EPSS 2.1%Oct 14, 2026
- Medium6.5Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.EPSS 0.6%Oct 13, 2026
- High7.8Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.Oct 13, 2026
- High7.8Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally.Oct 13, 2026
- High7.8Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally.Oct 13, 2026
- High7.8Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.Oct 13, 2026