Class familyMicrosoft · Windows
Microsoft Windows heap buffer overflow flaws, 2021–2026
70 Windows CVEs with CWE-122 weaknesses, 8 Jun 2021 to 13 Oct 2026. 10 are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2021’21
2022’22
6 2023’23
2 2024’24
9 2025’25
52 2026’26
In CISA KEVNot in KEV
20211 CVE
20236 CVEs, 3 in KEV
20242 CVEs, 1 in KEV
20259 CVEs, 5 in KEV
202652 CVEs, 1 in KEV
- CVE-2026-20820
- CVE-2026-20840
- CVE-2026-20922
- CVE-2026-21236
- CVE-2026-26180
- CVE-2026-33841
- CVE-2026-40407
- CVE-2026-45636
- CVE-2026-45638
- CVE-2026-45653
- CVE-2026-49184
- CVE-2026-49797
- CVE-2026-50309
- CVE-2026-50313
- CVE-2026-50332
- CVE-2026-50386
- CVE-2026-50417
- CVE-2026-50448
- CVE-2026-50461
- CVE-2026-50471
- CVE-2026-50477
- CVE-2026-50482
- CVE-2026-50494
- CVE-2026-56175
- CVE-2026-58640
- CVE-2026-62700
- CVE-2026-62797
- CVE-2026-68833
- CVE-2026-68841
- CVE-2026-68884
- CVE-2026-69347
- CVE-2026-69463
- CVE-2026-69479
- CVE-2026-69566
- CVE-2026-69638
- CVE-2026-69709
- CVE-2026-71329
- CVE-2026-83995
- CVE-2026-85880
- CVE-2026-69898
- CVE-2026-70010
- CVE-2026-70233
- CVE-2026-83640
- CVE-2026-83652
- CVE-2026-85870
- CVE-2026-96217
- CVE-2026-96312
- CVE-2026-96868
- CVE-2026-96913
- CVE-2026-96916
- CVE-2026-96929
- CVE-2026-97803
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2021-31954 | 8 Jun 2021 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Grouped by weakness | 18.4 |
| CVE-2023-21812 | 14 Feb 2023 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Grouped by weakness | 23.2 |
| CVE-2023-23376KEV | 14 Feb 2023 | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | Grouped by weakness | 72.6 |
| CVE-2023-28218 | 11 Apr 2023 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Grouped by weakness | 65.2 |
| CVE-2023-28252KEV | 11 Apr 2023 | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | Grouped by weakness | 78.2 |
| CVE-2023-38143 | 12 Sep 2023 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Grouped by weakness | 23.4 |
| CVE-2023-36036KEV | 14 Nov 2023 | Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability | Grouped by weakness | 72.9 |
| CVE-2024-30085 | 11 Jun 2024 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | Grouped by weakness | 29.8 |
| CVE-2024-49138KEV | 12 Dec 2024 | Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability | Grouped by weakness | 68.1 |
| CVE-2025-21333KEV | 14 Jan 2025 | Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability | Grouped by weakness | 67.6 |
| CVE-2025-21418KEV | 11 Feb 2025 | Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability | Grouped by weakness | 59.9 |
| CVE-2025-24985KEV | 11 Mar 2025 | Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability | Grouped by weakness | 66.5 |
| CVE-2025-24993KEV | 11 Mar 2025 | Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability | Grouped by weakness | 60.0 |
| CVE-2025-32706KEV | 13 May 2025 | Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability | Grouped by weakness | 65.2 |
| CVE-2025-32713 | 10 Jun 2025 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Grouped by weakness | 16.5 |
| CVE-2025-49721 | 8 Jul 2025 | Windows Fast FAT File System Driver Elevation of Privilege Vulnerability | Grouped by weakness | 14.7 |
| CVE-2025-59242 | 14 Oct 2025 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Grouped by weakness | 12.4 |
| CVE-2025-62470 | 9 Dec 2025 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Grouped by weakness | 19.1 |
| CVE-2026-20820 | 13 Jan 2026 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Grouped by weakness | 22.5 |
| CVE-2026-20840 | 13 Jan 2026 | Windows NTFS Remote Code Execution Vulnerability | Grouped by weakness | 23.8 |
| CVE-2026-20922 | 13 Jan 2026 | Windows NTFS Remote Code Execution Vulnerability | Grouped by weakness | 18.5 |
| CVE-2026-21236 | 10 Feb 2026 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Grouped by weakness | 13.2 |
| CVE-2026-26180 | 14 Apr 2026 | Windows Kernel Elevation of Privilege Vulnerability | Grouped by weakness | 10.0 |
| CVE-2026-33841 | 12 May 2026 | Windows Kernel Elevation of Privilege Vulnerability | Grouped by weakness | 10.2 |
| CVE-2026-40407 | 12 May 2026 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Grouped by weakness | 10.1 |
| CVE-2026-45636 | 9 Jun 2026 | Windows NTFS Remote Code Execution Vulnerability | Grouped by weakness | 12.5 |
| CVE-2026-45638 | 9 Jun 2026 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Grouped by weakness | 9.7 |
| CVE-2026-45653 | 9 Jun 2026 | Windows Kernel Elevation of Privilege Vulnerability | Grouped by weakness | 8.2 |
| CVE-2026-49184 | 14 Jul 2026 | Windows NTFS Remote Code Execution Vulnerability | Grouped by weakness | 11.3 |
| CVE-2026-49797 | 14 Jul 2026 | Windows NTFS Remote Code Execution Vulnerability | Grouped by weakness | 13.5 |
| CVE-2026-50309 | 14 Jul 2026 | Windows NTFS Remote Code Execution Vulnerability | Grouped by weakness | 10.8 |
| CVE-2026-50313 | 14 Jul 2026 | Windows NTFS Remote Code Execution Vulnerability | Grouped by weakness | 13.5 |
| CVE-2026-50332 | 14 Jul 2026 | Windows Kernel Elevation of Privilege Vulnerability | Grouped by weakness | 10.8 |
| CVE-2026-50386 | 14 Jul 2026 | Windows NTFS Remote Code Execution Vulnerability | Grouped by weakness | 13.5 |
| CVE-2026-50417 | 14 Jul 2026 | Windows NTFS Remote Code Execution Vulnerability | Grouped by weakness | 10.8 |
| CVE-2026-50448 | 14 Jul 2026 | Windows NTFS Remote Code Execution Vulnerability | Grouped by weakness | 13.5 |
| CVE-2026-50461 | 14 Jul 2026 | Windows NTFS Remote Code Execution Vulnerability | Grouped by weakness | 13.5 |
| CVE-2026-50471 | 14 Jul 2026 | Windows NTFS Remote Code Execution Vulnerability | Grouped by weakness | 13.5 |
| CVE-2026-50477 | 14 Jul 2026 | Windows Kernel Elevation of Privilege Vulnerability | Grouped by weakness | 11.5 |
| CVE-2026-50482 | 14 Jul 2026 | Windows NTFS Remote Code Execution Vulnerability | Grouped by weakness | 11.0 |
| CVE-2026-50494 | 14 Jul 2026 | Windows NTFS Remote Code Execution Vulnerability | Grouped by weakness | 10.8 |
| CVE-2026-56175 | 14 Jul 2026 | Windows NTFS Elevation of Privilege Vulnerability | Grouped by weakness | 10.8 |
| CVE-2026-58640 | 14 Jul 2026 | Windows NTFS Remote Code Execution Vulnerability | Grouped by weakness | 11.0 |
| CVE-2026-62700 | 11 Aug 2026 | Windows NTFS Elevation of Privilege Vulnerability | Grouped by weakness | 10.8 |
| CVE-2026-62797 | 11 Aug 2026 | Windows NTFS Elevation of Privilege Vulnerability | Grouped by weakness | 10.8 |
| CVE-2026-68833 | 8 Sep 2026 | Windows NTFS Remote Code Execution Vulnerability | Grouped by weakness | 12.4 |
| CVE-2026-68841 | 8 Sep 2026 | Windows NTFS Elevation of Privilege Vulnerability | Grouped by weakness | 10.8 |
| CVE-2026-68884 | 8 Sep 2026 | Windows Kernel Elevation of Privilege Vulnerability | Grouped by weakness | 8.6 |
| CVE-2026-69347 | 8 Sep 2026 | Windows Fast FAT Driver Remote Code Execution Vulnerability | Grouped by weakness | 9.5 |
| CVE-2026-69463 | 8 Sep 2026 | Windows NTFS Remote Code Execution Vulnerability | Grouped by weakness | 19.3 |
| CVE-2026-69479 | 8 Sep 2026 | Windows NTFS Remote Code Execution Vulnerability | Grouped by weakness | 11.9 |
| CVE-2026-69566 | 8 Sep 2026 | Windows NTFS Remote Code Execution Vulnerability | Grouped by weakness | 12.4 |
| CVE-2026-69638 | 8 Sep 2026 | Windows NTFS Remote Code Execution Vulnerability | Grouped by weakness | 11.9 |
| CVE-2026-69709 | 8 Sep 2026 | Windows NTFS Remote Code Execution Vulnerability | Grouped by weakness | 10.8 |
| CVE-2026-71329 | 8 Sep 2026 | Windows NTFS Remote Code Execution Vulnerability | Grouped by weakness | 12.4 |
| CVE-2026-83995 | 8 Sep 2026 | Windows NTFS Elevation of Privilege Vulnerability | Grouped by weakness | 10.8 |
| CVE-2026-85880KEV | 8 Sep 2026 | Microsoft Windows Heap-Based Buffer Overflow Vulnerability | Grouped by weakness | 60.0 |
| CVE-2026-69898 | 13 Oct 2026 | Windows Kernel Elevation of Privilege Vulnerability | Grouped by weakness | 11.8 |
| CVE-2026-70010 | 13 Oct 2026 | Windows NTFS Elevation of Privilege Vulnerability | Grouped by weakness | 11.8 |
| CVE-2026-70233 | 13 Oct 2026 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Grouped by weakness | 13.8 |
| CVE-2026-83640 | 13 Oct 2026 | Windows NTFS Remote Code Execution Vulnerability | Grouped by weakness | 11.3 |
| CVE-2026-83652 | 13 Oct 2026 | Windows NTFS Elevation of Privilege Vulnerability | Grouped by weakness | 11.3 |
| CVE-2026-85870 | 13 Oct 2026 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Grouped by weakness | 9.9 |
| CVE-2026-96217 | 13 Oct 2026 | Windows NTFS Elevation of Privilege Vulnerability | Grouped by weakness | 10.3 |
| CVE-2026-96312 | 13 Oct 2026 | Windows Kernel Elevation of Privilege Vulnerability | Grouped by weakness | 10.3 |
| CVE-2026-96868 | 13 Oct 2026 | Windows Kernel Elevation of Privilege Vulnerability | Grouped by weakness | 8.1 |
| CVE-2026-96913 | 13 Oct 2026 | Windows Kernel Elevation of Privilege Vulnerability | Grouped by weakness | 12.3 |
| CVE-2026-96916 | 13 Oct 2026 | Windows NTFS Elevation of Privilege Vulnerability | Grouped by weakness | 11.3 |
| CVE-2026-96929 | 13 Oct 2026 | Windows Kernel Elevation of Privilege Vulnerability | Grouped by weakness | 13.8 |
| CVE-2026-97803 | 13 Oct 2026 | Windows Kernel Elevation of Privilege Vulnerability | Grouped by weakness | 11.3 |