Microsoft Windows

Name: Microsoft Windows
Brand: Microsoft

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

50critical693high243medium4low

updated 2026-10-28

vulnerabilities (1,479)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-0708US	critical9.8OT critical	100.0% (100th)	KEV	no fix	2019-05-16	2 versions
CVE-2020-0601US	high8.1OT critical	89.1% (100th)	KEV	no fix	2020-01-14	13 versions
CVE-2026-33824US	—OT critical	77.1% (100th)	KEV	no fix	2026-04-14	≤ vers:unknown/*
CVE-2019-1458US	high7.8OT critical	74.4% (99th)	KEV	no fix	2019-12-10	9 versions
CVE-2026-32202US	—OT critical	70.9% (99th)	KEV	no fix	2026-04-14	≤ vers:unknown/*
CVE-2020-1020US	high8.8OT critical	65.0% (99th)	KEV	no fix	2020-04-15	18 versions
CVE-2025-24054US	medium5.4OT critical	62.3% (99th)	KEV	no fix	2025-03-11	≤ vers:unknown/unknown
CVE-2020-1054US	high7.0OT critical	53.9% (99th)	KEV	no fix	2020-05-21	18 versions
CVE-2019-0808US	high7.8OT critical	53.0% (99th)	KEV	no fix	2019-04-09	2 versions
CVE-2019-0803US	high7.8OT critical	45.2% (99th)	KEV	no fix	2019-04-09	20 versions
CVE-2020-0787US	high7.8OT critical	42.5% (99th)	KEV	no fix	2020-03-12	18 versions
CVE-2019-0841US	high7.8OT critical	41.4% (99th)	KEV	no fix	2019-04-09	11 versions
CVE-2025-26633US	—OT critical	30.4% (98th)	KEV	no fix	2025-03-11	≤ vers:unknown/unknown
CVE-2019-1405US	high7.8OT critical	30.2% (98th)	KEV	no fix	2019-11-12	18 versions
CVE-2019-1215US	high7.8OT critical	19.3% (97th)	KEV	no fix	2019-09-11	20 versions
CVE-2019-1322US	high7.8OT critical	18.8% (97th)	KEV	no fix	2019-10-10	6 versions
CVE-2019-1253US	high7.8OT critical	11.6% (96th)	KEV	no fix	2019-09-11	11 versions
CVE-2019-1132US	high7.8OT critical	9.87% (96th)	KEV	no fix	2019-07-15	2 versions
CVE-2019-1388US	high7.8OT critical	8.59% (95th)	KEV	no fix	2019-11-12	18 versions
CVE-2020-0683US	high7.8OT critical	7.61% (95th)	KEV	no fix	2020-02-11	18 versions
CVE-2019-0863US	high7.8OT critical	5.21% (92nd)	KEV	no fix	2019-05-16	20 versions
CVE-2019-0859US	high7.8OT critical	4.15% (91st)	KEV	no fix	2019-04-09	20 versions
CVE-2025-24985US	—OT critical	3.89% (90th)	KEV	no fix	2025-03-11	≤ vers:unknown/unknown
CVE-2019-1315US	high7.8OT critical	3.48% (89th)	KEV	no fix	2019-10-10	20 versions
CVE-2026-81963US	high7.8OT critical	0.39% (33rd)	KEV	no fix	2026-09-08	≤ vers:unknown/*
CVE-2020-0938US	high7.8OT critical	69.0% (99th)	KEV	no fix	2020-04-15	18 versions
CVE-2019-0903US	high8.8OT critical	21.7% (98th)	KEV	no fix	2019-05-16	20 versions
CVE-2020-0986US	high7.8OT critical	16.4% (97th)	KEV	no fix	2020-06-09	16 versions
CVE-2019-0703US	medium6.5OT critical	9.38% (95th)	KEV	no fix	2019-04-09	18 versions
CVE-2020-1027US	high7.8OT critical	4.72% (92nd)	KEV	no fix	2020-04-15	18 versions
CVE-2019-1385US	high7.8OT critical	3.60% (89th)	KEV	no fix	2019-11-12	9 versions
CVE-2020-0638US	high7.8OT critical	2.37% (84th)	KEV	no fix	2020-01-14	9 versions
CVE-2019-0880US	high7.8OT critical	2.31% (83rd)	KEV	no fix	2019-07-15	18 versions
CVE-2025-24993US	—OT critical	2.22% (83rd)	KEV	no fix	2025-03-11	≤ vers:unknown/unknown
CVE-2025-24991US	—OT critical	2.02% (81st)	KEV	no fix	2025-03-11	≤ vers:unknown/unknown
CVE-2025-24984US	—OT critical	1.99% (81st)	KEV	no fix	2025-03-11	≤ vers:unknown/unknown
CVE-2019-0797US	high7.8OT critical	1.87% (79th)	KEV	no fix	2019-04-09	18 versions
CVE-2025-24983US	—OT critical	1.87% (79th)	KEV	no fix	2025-03-11	≤ vers:unknown/unknown
CVE-2019-1129US	high7.8OT critical	1.78% (78th)	KEV	no fix	2019-07-15	11 versions
CVE-2019-1130US	high7.8OT critical	1.72% (77th)	KEV	no fix	2019-07-15	17 versions
CVE-2019-1214US	high7.8OT critical	1.42% (73rd)	KEV	no fix	2019-09-11	20 versions
CVE-2026-85880US	high7.8OT critical	0.39% (33rd)	KEV	no fix	2026-09-08	≤ vers:unknown/*
CVE-2026-56155US	—OT critical	0.35% (28th)	KEV	no fix	2026-07-14	≤ vers:unknown/*
CVE-2025-9491US	high7.8	76.0% (100th)	Exploit	no fix	2025-08-26	≤ 11 Enterprise 23H2 22631.4169 x64
CVE-2025-55315US	—	66.5% (99th)	Exploit	no fix	2025-10-14	2 versions
CVE-2020-1301US	high8.8	43.8% (99th)	Exploit	no fix	2020-06-09	18 versions
CVE-2020-0668US	high7.8	25.9% (98th)	Exploit	no fix	2020-02-11	18 versions
CVE-2019-1118US	high8.8	23.6% (98th)	Exploit	no fix	2019-07-15	9 versions
CVE-2019-1117US	high8.8	23.6% (98th)	Exploit	no fix	2019-07-15	9 versions
CVE-2025-24071US	—	23.3% (98th)	Exploit	no fix	2025-03-11	≤ vers:unknown/unknown

showing 50 of 1,479

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-269Improper Privilege Management307 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer214 CVEs
CWE-416Use After Free188 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor174 CVEs
CWE-122Heap-based Buffer Overflow118 CVEs
CWE-20Improper Input Validation97 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')93 CVEs
CWE-125Out-of-bounds Read75 CVEs

sources (4)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)823 CVEs
NLNCSC-NL (CSAF)617 CVEs
DECERT-Bund (BSI CSAF)39 CVEs
USCISA CSAF IT advisories1 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan