Class familyMicrosoft · Windows
Microsoft Windows integer Underflow flaws, 2021–2026
10 Windows CVEs with CWE-191 weaknesses, 8 Jun 2021 to 13 Oct 2026. 1 is in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2021’21
2022’22
3 2023’23
3 2024’24
2025’25
3 2026’26
In CISA KEVNot in KEV
20211 CVE, 1 in KEV
20233 CVEs
20243 CVEs
20263 CVEs
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2021-31956KEV | 8 Jun 2021 | Microsoft Windows NTFS Privilege Escalation Vulnerability | Grouped by weakness | 68.0 |
| CVE-2023-28272 | 11 Apr 2023 | Windows Kernel Elevation of Privilege Vulnerability | Grouped by weakness | 13.8 |
| CVE-2023-28293 | 11 Apr 2023 | Windows Kernel Elevation of Privilege Vulnerability | Grouped by weakness | 27.8 |
| CVE-2023-35387 | 8 Aug 2023 | Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability | Grouped by weakness | 19.1 |
| CVE-2024-21309 | 9 Jan 2024 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | Grouped by weakness | 16.5 |
| CVE-2024-38050 | 9 Jul 2024 | Windows Workstation Service Elevation of Privilege Vulnerability | Grouped by weakness | 16.2 |
| CVE-2024-49077 | 10 Dec 2024 | Windows Mobile Broadband Driver Elevation of Privilege Vulnerability | Grouped by weakness | 16.6 |
| CVE-2026-50308 | 14 Jul 2026 | Windows NTFS Remote Code Execution Vulnerability | Grouped by weakness | 13.5 |
| CVE-2026-50388 | 14 Jul 2026 | Windows NTFS Remote Code Execution Vulnerability | Grouped by weakness | 13.5 |
| CVE-2026-96925 | 13 Oct 2026 | Windows NTFS Information Disclosure Vulnerability | Grouped by weakness | 11.5 |