Microsoft Windows

productDE

cpe:/o:microsoft:windows:-

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

1critical4high15medium2low

updated 2026-10-28

vulnerabilities (28)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-33825US	—OT critical	6.75% (94th)	KEV	no fix	2026-04-14	—
CVE-2025-9491US	high7.8	76.0% (100th)	Exploit	no fix	2025-08-26	—
CVE-2024-3661US	high7.6OT elevated	4.06% (91st)	Exploit	no fix	2024-05-06	—
CVE-2020-10713US	high8.2	1.71% (77th)	Exploit	no fix	2020-07-30	—
CVE-2020-11264US	critical9.8	13.2% (96th)	—	no fix	2021-09-08	—
CVE-2020-11301US	high7.5	11.1% (96th)	—	no fix	2021-09-08	—
CVE-2020-26147US	medium5.4	7.60% (95th)	—	no fix	2021-05-11	—
CVE-2020-26139US	medium5.3	6.49% (94th)	—	no fix	2021-05-11	—
CVE-2020-24586US	low3.5	5.76% (93rd)	—	no fix	2021-05-11	—
CVE-2020-26146US	medium5.3	5.62% (93rd)	—	no fix	2021-05-11	—
CVE-2020-26144US	medium6.5	4.91% (92nd)	—	no fix	2021-05-11	—
CVE-2020-26143US	medium6.5	4.17% (91st)	—	no fix	2021-05-11	—
CVE-2020-26141US	medium6.5OT elevated	3.07% (88th)	—	no fix	2021-05-11	—
CVE-2020-26140US	medium6.5OT elevated	2.92% (87th)	—	no fix	2021-05-11	—
CVE-2020-24587US	low2.6OT elevated	2.59% (85th)	—	no fix	2021-05-11	—
CVE-2020-26142US	medium5.3	2.08% (81st)	—	no fix	2021-05-11	—
CVE-2024-38202US	—	1.68% (77th)	—	no fix	2024-08-08	—
CVE-2020-15707US	medium6.4	1.59% (75th)	—	no fix	2020-07-29	—
CVE-2024-21302US	—	1.57% (75th)	—	no fix	2024-08-08	—
CVE-2020-15705US	medium6.4	1.39% (72nd)	—	no fix	2020-07-29	—
CVE-2020-15706US	medium6.4	0.98% (62nd)	—	no fix	2020-07-29	—
CVE-2025-55229US	—	0.51% (43rd)	—	no fix	2025-08-21	—
CVE-2025-55231US	—	0.50% (42nd)	—	no fix	2025-08-21	—
CVE-2020-14309US	medium6.7	0.48% (41st)	—	no fix	2020-07-30	—
CVE-2020-14311US	medium6.0	0.46% (40th)	—	no fix	2020-07-31	—
CVE-2020-14310US	medium6.0	0.46% (40th)	—	no fix	2020-07-31	—
CVE-2020-14308US	medium6.4	0.43% (37th)	—	no fix	2020-07-29	—
CVE-2025-55230US	—	0.36% (29th)	—	no fix	2025-08-21	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation6 CVEs
CWE-190Integer Overflow or Wraparound5 CVEs
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')4 CVEs
CWE-787Out-of-bounds Write4 CVEs
CWE-287Improper Authentication3 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')3 CVEs
CWE-122Heap-based Buffer Overflow2 CVEs
CWE-284Improper Access Control2 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)28 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan