Microsoft Vulnerabilities and Affected Products

Products

Windows Server 20194,131 vulnerabilities
Windows Server 2019 (Server Core installation)4,034 vulnerabilities
Windows 10 Version 18093,762 vulnerabilities
Windows Server 20163,677 vulnerabilities
Windows Server 20223,485 vulnerabilities
Windows Server 2016 (Server Core installation)3,473 vulnerabilities
Windows 10 Version 16073,184 vulnerabilities
Windows 10 Version 21H23,063 vulnerabilities
Windows Server 2012 R22,998 vulnerabilities
Windows Server 2012 R2 (Server Core installation)2,853 vulnerabilities
Windows Server 20122,824 vulnerabilities
Windows Server 2012 (Server Core installation)2,691 vulnerabilities
Windows 10 Version 22H22,565 vulnerabilities
Windows 10 Version 15072,277 vulnerabilities
Windows 11 Version 24H21,924 vulnerabilities
Windows Server 20251,917 vulnerabilities
Windows Server 2025 (Server Core installation)1,917 vulnerabilities
Windows Server 2008 R2 Service Pack 11,874 vulnerabilities
Windows Server 2008 R2 Service Pack 1 (Server Core installation)1,860 vulnerabilities
Windows 11 Version 23H21,845 vulnerabilities
Windows 11 version 22H21,776 vulnerabilities
Windows Server 2022, 23H2 Edition (Server Core installation)1,725 vulnerabilities
Windows Server 2008 Service Pack 2 (Server Core installation)1,667 vulnerabilities
Windows Server 2008 Service Pack 21,664 vulnerabilities
Windows 11 version 21H21,560 vulnerabilities

Microsoft vulnerability results
Vulnerability	Title and context	CVSS	EPSS	PoCs	Signals	STIX action
CVE-2026-32214MEDIUM	Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability Improper access control in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally. CWE-284Apr 14, 2026	CVSS5.5v3.1	EPSS0.221%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-33829MEDIUM	Windows Snipping Tool Spoofing Vulnerability Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauthorized attacker to perform spoofing over a network. CWE-200Apr 14, 2026	CVSS4.3v3.1	EPSS3.45%	PoCs3	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-33824CRITICAL	Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network. CWE-415Apr 14, 2026	CVSS9.8v3.1	EPSS55.9%	PoCs3	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-33827HIGH	Windows TCP/IP Remote Code Execution Vulnerability Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an unauthorized attacker to execute code over a network. CWE-362Apr 14, 2026	CVSS8.1v3.1	EPSS0.837%	PoCs1	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-33104HIGH	Win32k Elevation of Privilege Vulnerability Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. CWE-362 CWE-416Apr 14, 2026	CVSS7.0v3.1	EPSS0.207%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-33100HIGH	Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. CWE-416Apr 14, 2026	CVSS7.0v3.1	EPSS0.178%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-33099HIGH	Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. CWE-416Apr 14, 2026	CVSS7.0v3.1	EPSS0.178%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-32225HIGH	Windows Shell Security Feature Bypass Vulnerability Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network. CWE-693Apr 14, 2026	CVSS8.8v3.1	EPSS0.908%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-32164HIGH	Windows User Interface Core Elevation of Privilege Vulnerability Concurrent execution using shared resource with improper synchronization ('race condition') in Windows User Interface Core allows an authorized attacker to elevate privileges locally. CWE-362Apr 14, 2026	CVSS7.8v3.1	EPSS0.164%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-32163HIGH	Windows User Interface Core Elevation of Privilege Vulnerability Concurrent execution using shared resource with improper synchronization ('race condition') in Windows User Interface Core allows an authorized attacker to elevate privileges locally. CWE-362 CWE-416Apr 14, 2026	CVSS7.8v3.1	EPSS0.164%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-32162HIGH	Windows COM Elevation of Privilege Vulnerability Acceptance of extraneous untrusted data with trusted data in Windows COM allows an unauthorized attacker to elevate privileges locally. CWE-349Apr 14, 2026	CVSS8.4v3.1	EPSS2.03%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-32155HIGH	Desktop Window Manager Elevation of Privilege Vulnerability Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. CWE-416Apr 14, 2026	CVSS7.8v3.1	EPSS0.258%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-32153HIGH	Windows Speech Runtime Elevation of Privilege Vulnerability Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally. CWE-362 CWE-416Apr 14, 2026	CVSS7.8v3.1	EPSS0.197%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-32151MEDIUM	Windows Shell Information Disclosure Vulnerability Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information over a network. CWE-200Apr 14, 2026	CVSS6.5v3.1	EPSS0.747%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-32150HIGH	Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privileges locally. CWE-362Apr 14, 2026	CVSS7.0v3.1	EPSS0.158%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-32149HIGH	Windows Hyper-V Remote Code Execution Vulnerability Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally. CWE-122 CWE-191 CWE-20Apr 14, 2026	CVSS7.3v3.1	EPSS0.317%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-32091HIGH	Microsoft Brokering File System Elevation of Privilege Vulnerability Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally. CWE-362 CWE-416Apr 14, 2026	CVSS8.4v3.1	EPSS0.157%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-32088MEDIUM	Windows Biometric Service Security Feature Bypass Vulnerability Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Biometric Service allows an unauthorized attacker to bypass a security feature with a physical attack. CWE-362Apr 14, 2026	CVSS6.1v3.1	EPSS0.193%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-32086HIGH	Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privileges locally. CWE-362Apr 14, 2026	CVSS7.0v3.1	EPSS0.158%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-32084MEDIUM	Windows Print Spooler Information Disclosure Vulnerability Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. CWE-200Apr 14, 2026	CVSS5.5v3.1	EPSS0.353%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-32079MEDIUM	Web Account Manager Information Disclosure Vulnerability Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. CWE-200Apr 14, 2026	CVSS5.5v3.1	EPSS0.339%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-32078HIGH	Windows Projected File System Elevation of Privilege Vulnerability Use after free in Windows Projected File System allows an authorized attacker to elevate privileges locally. CWE-416Apr 14, 2026	CVSS7.8v3.1	EPSS0.258%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-32077HIGH	Windows UPnP Device Host Elevation of Privilege Vulnerability Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. CWE-822Apr 14, 2026	CVSS7.8v3.1	EPSS0.321%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-32076HIGH	Windows Storage Spaces Controller Elevation of Privilege Vulnerability Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. CWE-125Apr 14, 2026	CVSS7.8v3.1	EPSS0.258%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-32074HIGH	Windows Projected File System Elevation of Privilege Vulnerability Double free in Windows Projected File System allows an authorized attacker to elevate privileges locally. CWE-415Apr 14, 2026	CVSS7.8v3.1	EPSS0.257%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX