Microsoft Windows App for Mac

productDE

cpe:/o:microsoft:windows:app_for_mac

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

critical

by severity

0critical3high1medium0low

updated 2026-10-27

vulnerabilities (33)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-21510US	—OT critical	61.2% (99th)	KEV	no fix	2026-02-10	—
CVE-2026-21533US	—OT critical	4.18% (91st)	KEV	no fix	2026-02-10	—
CVE-2026-21513US	—OT critical	15.9% (97th)	KEV	no fix	2026-02-10	—
CVE-2026-21525US	—OT critical	4.87% (92nd)	KEV	no fix	2026-02-10	—
CVE-2026-21519US	—OT critical	2.48% (84th)	KEV	no fix	2026-02-10	—
CVE-2026-21248US	—	1.33% (71st)	Exploit	no fix	2026-02-10	—
CVE-2026-21244US	—	1.33% (71st)	Exploit	no fix	2026-02-10	—
CVE-2026-21250US	—	1.11% (66th)	Exploit	no fix	2026-02-10	—
CVE-2026-21508US	high7.0	0.45% (39th)	Exploit	no fix	2026-02-10	—
CVE-2026-21249US	—	11.4% (96th)	—	no fix	2026-02-10	—
CVE-2026-21527US	—OT elevated	8.26% (95th)	—	no fix	2026-02-10	—
CVE-2026-21238US	—	3.38% (89th)	—	no fix	2026-02-10	—
CVE-2026-21241US	—	2.60% (85th)	—	no fix	2026-02-10	—
CVE-2026-21231US	—	2.56% (85th)	—	no fix	2026-02-10	—
CVE-2026-21243US	—	1.43% (73rd)	—	no fix	2026-02-10	—
CVE-2026-20846US	—	1.43% (73rd)	—	no fix	2026-02-10	—
CVE-2023-2804US	medium6.5	1.20% (68th)	—	no fix	2023-05-25	—
CVE-2026-21253US	—	0.80% (56th)	—	no fix	2026-02-10	—
CVE-2026-21235US	—	0.74% (54th)	—	no fix	2026-02-10	—
CVE-2026-21222US	—	0.61% (49th)	—	no fix	2026-02-10	—
CVE-2026-21247US	—	0.58% (48th)	—	no fix	2026-02-10	—
CVE-2026-21246US	—	0.45% (39th)	—	no fix	2026-02-10	—
CVE-2026-21251US	—	0.45% (39th)	—	no fix	2026-02-10	—
CVE-2026-21245US	—	0.45% (39th)	—	no fix	2026-02-10	—
CVE-2026-21239US	—	0.45% (39th)	—	no fix	2026-02-10	—
CVE-2026-21236US	—	0.45% (39th)	—	no fix	2026-02-10	—
CVE-2026-21232US	—	0.45% (39th)	—	no fix	2026-02-10	—
CVE-2026-21255US	—	0.38% (32nd)	—	no fix	2026-02-10	—
CVE-2026-21517US	high7.0	0.38% (32nd)	—	no fix	2026-02-10	—
CVE-2026-21242US	—	0.36% (30th)	—	no fix	2026-02-10	—
CVE-2026-21240US	high7.0	0.28% (20th)	—	no fix	2026-02-10	—
CVE-2026-21237US	—	0.27% (20th)	—	no fix	2026-02-10	—
CVE-2026-21234US	—	0.27% (20th)	—	no fix	2026-02-10	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-122Heap-based Buffer Overflow8 CVEs
CWE-787Out-of-bounds Write7 CVEs
CWE-416Use After Free6 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')3 CVEs
CWE-284Improper Access Control2 CVEs
CWE-476NULL Pointer Dereference2 CVEs
CWE-693Protection Mechanism Failure2 CVEs
CWE-822Untrusted Pointer Dereference2 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)33 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan