Class familyMicrosoft · Windows
Microsoft Windows out-of-bounds read flaws, 2023–2026
62 Windows CVEs with CWE-125 weaknesses, 11 Jul 2023 to 13 Oct 2026. 2 are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
2 2023’23
4 2024’24
8 2025’25
48 2026’26
In CISA KEVNot in KEV
20232 CVEs, 1 in KEV
20244 CVEs
20258 CVEs, 1 in KEV
202648 CVEs
- CVE-2026-25175
- CVE-2026-45634
- CVE-2026-49177
- CVE-2026-50388
- CVE-2026-50422
- CVE-2026-62743
- CVE-2026-62786
- CVE-2026-62796
- CVE-2026-62880
- CVE-2026-62887
- CVE-2026-65784
- CVE-2026-69265
- CVE-2026-69312
- CVE-2026-69332
- CVE-2026-69369
- CVE-2026-69457
- CVE-2026-69504
- CVE-2026-69505
- CVE-2026-69532
- CVE-2026-69591
- CVE-2026-69616
- CVE-2026-69808
- CVE-2026-70145
- CVE-2026-72935
- CVE-2026-77503
- CVE-2026-69675
- CVE-2026-69919
- CVE-2026-69999
- CVE-2026-70011
- CVE-2026-70063
- CVE-2026-70074
- CVE-2026-70141
- CVE-2026-70173
- CVE-2026-70208
- CVE-2026-83508
- CVE-2026-83567
- CVE-2026-83668
- CVE-2026-83671
- CVE-2026-83686
- CVE-2026-83737
- CVE-2026-83747
- CVE-2026-85374
- CVE-2026-85830
- CVE-2026-87698
- CVE-2026-96314
- CVE-2026-96867
- CVE-2026-96927
- CVE-2026-96928
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2023-35299 | 11 Jul 2023 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Grouped by weakness | 12.5 |
| CVE-2023-36424KEV | 14 Nov 2023 | Microsoft Windows Out-of-Bounds Read Vulnerability | Grouped by weakness | 72.7 |
| CVE-2024-20653 | 9 Jan 2024 | Microsoft Common Log File System Elevation of Privilege Vulnerability | Grouped by weakness | 23.8 |
| CVE-2024-29996 | 14 May 2024 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Grouped by weakness | 23.2 |
| CVE-2024-30025 | 14 May 2024 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Grouped by weakness | 23.7 |
| CVE-2024-30037 | 14 May 2024 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Grouped by weakness | 22.4 |
| CVE-2025-24991KEV | 11 Mar 2025 | Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability | Grouped by weakness | 58.0 |
| CVE-2025-27483 | 8 Apr 2025 | NTFS Elevation of Privilege Vulnerability | Grouped by weakness | 16.5 |
| CVE-2025-27733 | 8 Apr 2025 | NTFS Elevation of Privilege Vulnerability | Grouped by weakness | 16.3 |
| CVE-2025-27741 | 8 Apr 2025 | NTFS Elevation of Privilege Vulnerability | Grouped by weakness | 16.8 |
| CVE-2025-27742 | 8 Apr 2025 | NTFS Information Disclosure Vulnerability | Grouped by weakness | 15.6 |
| CVE-2025-29839 | 13 May 2025 | Windows Multiple UNC Provider Driver Information Disclosure Vulnerability | Grouped by weakness | 11.7 |
| CVE-2025-32707 | 13 May 2025 | NTFS Elevation of Privilege Vulnerability | Grouped by weakness | 14.7 |
| CVE-2025-60706 | 11 Nov 2025 | Windows Hyper-V Information Disclosure Vulnerability | Grouped by weakness | 12.4 |
| CVE-2026-25175 | 10 Mar 2026 | Windows NTFS Elevation of Privilege Vulnerability | Grouped by weakness | 11.4 |
| CVE-2026-45634 | 9 Jun 2026 | Windows DHCP Client Information Disclosure Vulnerability | Grouped by weakness | 9.9 |
| CVE-2026-49177 | 14 Jul 2026 | Windows TCP/IP Information Disclosure Vulnerability | Grouped by weakness | 11.6 |
| CVE-2026-50388 | 14 Jul 2026 | Windows NTFS Remote Code Execution Vulnerability | Grouped by weakness | 13.5 |
| CVE-2026-50422 | 14 Jul 2026 | Windows NTFS Elevation of Privilege Vulnerability | Grouped by weakness | 10.8 |
| CVE-2026-62743 | 11 Aug 2026 | Win32k Information Disclosure Vulnerability | Grouped by weakness | 10.8 |
| CVE-2026-62786 | 11 Aug 2026 | Win32k Information Disclosure Vulnerability | Grouped by weakness | 10.8 |
| CVE-2026-62796 | 11 Aug 2026 | Windows NTFS Information Disclosure Vulnerability | Grouped by weakness | 10.8 |
| CVE-2026-62880 | 11 Aug 2026 | Windows NTFS Elevation of Privilege Vulnerability | Grouped by weakness | 10.8 |
| CVE-2026-62887 | 11 Aug 2026 | Windows NTFS Information Disclosure Vulnerability | Grouped by weakness | 10.8 |
| CVE-2026-65784 | 11 Aug 2026 | Windows NTFS Information Disclosure Vulnerability | Grouped by weakness | 10.8 |
| CVE-2026-69265 | 8 Sep 2026 | Windows NTFS Elevation of Privilege Vulnerability | Grouped by weakness | 10.8 |
| CVE-2026-69312 | 8 Sep 2026 | Windows NTFS Elevation of Privilege Vulnerability | Grouped by weakness | 10.8 |
| CVE-2026-69332 | 8 Sep 2026 | Windows NTFS Elevation of Privilege Vulnerability | Grouped by weakness | 16.7 |
| CVE-2026-69369 | 8 Sep 2026 | Windows DNS Information Disclosure Vulnerability | Grouped by weakness | 10.8 |
| CVE-2026-69457 | 8 Sep 2026 | Windows USB Driver Information Disclosure Vulnerability | Grouped by weakness | 10.8 |
| CVE-2026-69504 | 8 Sep 2026 | Windows NTFS Information Disclosure Vulnerability | Grouped by weakness | 10.8 |
| CVE-2026-69505 | 8 Sep 2026 | Windows NTFS Elevation of Privilege Vulnerability | Grouped by weakness | 16.7 |
| CVE-2026-69532 | 8 Sep 2026 | Windows NTFS Elevation of Privilege Vulnerability | Grouped by weakness | 10.8 |
| CVE-2026-69591 | 8 Sep 2026 | Windows NTFS Information Disclosure Vulnerability | Grouped by weakness | 15.9 |
| CVE-2026-69616 | 8 Sep 2026 | Windows Remote Desktop Services Information Disclosure Vulnerability | Grouped by weakness | 10.8 |
| CVE-2026-69808 | 8 Sep 2026 | Win32k Information Disclosure Vulnerability | Grouped by weakness | 10.8 |
| CVE-2026-70145 | 8 Sep 2026 | Microsoft Windows Search Component Information Disclosure Vulnerability | Grouped by weakness | 10.8 |
| CVE-2026-72935 | 8 Sep 2026 | Windows NTFS Elevation of Privilege Vulnerability | Grouped by weakness | 10.4 |
| CVE-2026-77503 | 8 Sep 2026 | Windows NTFS Elevation of Privilege Vulnerability | Grouped by weakness | 11.3 |
| CVE-2026-69675 | 13 Oct 2026 | Windows Network File System Information Disclosure Vulnerability | Grouped by weakness | 12.0 |
| CVE-2026-69919 | 13 Oct 2026 | Windows Cryptographic Services Information Disclosure Vulnerability | Grouped by weakness | 11.8 |
| CVE-2026-69999 | 13 Oct 2026 | Windows Update Information Disclosure Vulnerability | Grouped by weakness | 11.8 |
| CVE-2026-70011 | 13 Oct 2026 | Windows IP Over USB Service Information Disclosure Vulnerability | Grouped by weakness | 11.8 |
| CVE-2026-70063 | 13 Oct 2026 | Windows Kernel Information Disclosure Vulnerability | Grouped by weakness | 9.1 |
| CVE-2026-70074 | 13 Oct 2026 | Windows DNS Information Disclosure Vulnerability | Grouped by weakness | 11.8 |
| CVE-2026-70141 | 13 Oct 2026 | Microsoft Windows Search Component Information Disclosure Vulnerability | Grouped by weakness | 11.5 |
| CVE-2026-70173 | 13 Oct 2026 | Microsoft Windows Search Component Information Disclosure Vulnerability | Grouped by weakness | 11.5 |
| CVE-2026-70208 | 13 Oct 2026 | HTTP.sys Information Disclosure Vulnerability | Grouped by weakness | 11.5 |
| CVE-2026-83508 | 13 Oct 2026 | Windows NTFS Elevation of Privilege Vulnerability | Grouped by weakness | 11.8 |
| CVE-2026-83567 | 13 Oct 2026 | Windows NTFS Elevation of Privilege Vulnerability | Grouped by weakness | 11.8 |
| CVE-2026-83668 | 13 Oct 2026 | Windows WLAN Service Information Disclosure Vulnerability | Grouped by weakness | 10.6 |
| CVE-2026-83671 | 13 Oct 2026 | Windows Hyper-V Information Disclosure Vulnerability | Grouped by weakness | 12.5 |
| CVE-2026-83686 | 13 Oct 2026 | Microsoft Windows Search Component Information Disclosure Vulnerability | Grouped by weakness | 11.8 |
| CVE-2026-83737 | 13 Oct 2026 | Windows NTFS Information Disclosure Vulnerability | Grouped by weakness | 11.8 |
| CVE-2026-83747 | 13 Oct 2026 | Windows Error Reporting Information Disclosure Vulnerability | Grouped by weakness | 11.8 |
| CVE-2026-85374 | 13 Oct 2026 | Windows Installer Information Disclosure Vulnerability | Grouped by weakness | 10.4 |
| CVE-2026-85830 | 13 Oct 2026 | Windows Installer Information Disclosure Vulnerability | Grouped by weakness | 10.4 |
| CVE-2026-87698 | 13 Oct 2026 | Windows Remote Access Service Infrastructure Information Disclosure Vulnerability | Grouped by weakness | 10.2 |
| CVE-2026-96314 | 13 Oct 2026 | Windows Audio Service Information Disclosure Vulnerability | Grouped by weakness | 10.4 |
| CVE-2026-96867 | 13 Oct 2026 | Windows NTFS Remote Code Execution Vulnerability | Grouped by weakness | 10.3 |
| CVE-2026-96927 | 13 Oct 2026 | Windows NTFS Information Disclosure Vulnerability | Grouped by weakness | 10.2 |
| CVE-2026-96928 | 13 Oct 2026 | Windows NTFS Elevation of Privilege Vulnerability | Grouped by weakness | 10.3 |