Microsoft Windows vulnerabilities

CVEs per yearBy the year they were published

1. 2019332
2. 2020410
3. 20242
4. 20253

Known exploitedNewest addition to KEV first

• CVE-2019-1388

  An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka 'Windows Certificate…

  Microsoft · Windows

  ExploitedHigh7.8
• CVE-2020-1027

  An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege…

  Microsoft · Windows

  ExploitedHigh7.8
• CVE-2020-0638

  An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an attacker would first…

  Microsoft · Windows

  ExploitedHigh7.8
• CVE-2019-1385

  An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to…

  Microsoft · Windows

  ExploitedHigh7.8
• CVE-2019-1130

  An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of…

  Microsoft · Windows Server

  ExploitedHigh7.8
• CVE-2019-0880

  A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'.

  Microsoft · Windows Server

  ExploitedHigh7.8
• CVE-2019-0703

  An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure…

  Microsoft · Windows

  ExploitedMedium6.5
• CVE-2019-0903

  A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code…

  Microsoft · Windows

  ExploitedHigh8.8
• CVE-2019-1405

  An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows UPnP…

  Microsoft · Windows

  ExploitedHigh7.8
• CVE-2019-1322

  An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation of Privilege…

  Microsoft · Windows

  ExploitedHigh7.8

Newest CVEs

• CVE-2025-59033

  The Microsoft vulnerable driver block list is implemented as Windows Defender Application Control (WDAC) policy. Entries that specify only the to-be-signed…

  Microsoft · Windows

  High7.4
• CVE-2022-50238

  The on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the online Microsoft recommended driver block rules. Some entries present…

  Microsoft · Windows

  High7.4
• CVE-2025-9491

  Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability

  Microsoft · Windows

  High7.0
• CVE-2022-40733

  An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version…

  Microsoft · Windows

  Medium5.0
• CVE-2022-40732

  An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version…

  Microsoft · Windows

  Medium5.0
• CVE-2020-1468

  An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information…

  Microsoft · Windows 10 Version 2004 for 32-bit Systems

  Medium6.5
• CVE-2020-1463

  An elevation of privilege vulnerability exists in the way that the SharedStream Library handles objects in memory, aka 'Windows SharedStream Library Elevation…

  Microsoft · Windows

  High7.8
• CVE-2020-1438

  An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network…

  Microsoft · Windows 10 Version 2004 for 32-bit Systems

  High7.8
• CVE-2020-1437

  An elevation of privilege vulnerability exists in the way that the Windows Network Location Awareness Service handles objects in memory, aka 'Windows Network…

  Microsoft · Windows 10 Version 2004 for 32-bit Systems

  High7.8
• CVE-2020-1436

  A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted fonts.For all systems except Windows 10, an…

  Microsoft · Windows 10 Version 2004 for 32-bit Systems

  High8.8