Class familyMicrosoft · Windows
Microsoft Windows link following flaws, 2019–2026
76 Windows CVEs with CWE-59 weaknesses, 9 Apr 2019 to 13 Oct 2026. 16 are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
7 2019’19
2 2020’20
1 2021’21
2 2022’22
13 2023’23
5 2024’24
12 2025’25
34 2026’26
In CISA KEVNot in KEV
20197 CVEs, 7 in KEV
20202 CVEs, 2 in KEV
20211 CVE, 1 in KEV
20222 CVEs, 2 in KEV
202313 CVEs, 1 in KEV
20245 CVEs
202512 CVEs, 2 in KEV
202634 CVEs, 1 in KEV
- CVE-2026-20941
- CVE-2026-21517
- CVE-2026-25187
- CVE-2026-42989
- CVE-2026-45586
- CVE-2026-49791
- CVE-2026-50364
- CVE-2026-50469
- CVE-2026-62761
- CVE-2026-62776
- CVE-2026-62803
- CVE-2026-62807
- CVE-2026-62812
- CVE-2026-62832
- CVE-2026-70348
- CVE-2026-69289
- CVE-2026-69379
- CVE-2026-69771
- CVE-2026-81963
- CVE-2026-102204
- CVE-2026-108135
- CVE-2026-62687
- CVE-2026-69673
- CVE-2026-83507
- CVE-2026-83659
- CVE-2026-83704
- CVE-2026-83793
- CVE-2026-83927
- CVE-2026-83933
- CVE-2026-85343
- CVE-2026-85849
- CVE-2026-88191
- CVE-2026-96243
- CVE-2026-96911
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2019-0841KEV | 9 Apr 2019 | Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability | Grouped by weakness | 78.2 |
| CVE-2019-1064KEV | 12 Jun 2019 | Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability | Grouped by weakness | 77.3 |
| CVE-2019-1129KEV | 15 Jul 2019 | Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability | Grouped by weakness | 69.1 |
| CVE-2019-1130KEV | 15 Jul 2019 | Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability | Grouped by weakness | 68.9 |
| CVE-2019-1253KEV | 11 Sep 2019 | Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability | Grouped by weakness | 77.7 |
| CVE-2019-1315KEV | 10 Oct 2019 | Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability | Grouped by weakness | 76.3 |
| CVE-2019-1385KEV | 12 Nov 2019 | Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability | Grouped by weakness | 71.4 |
| CVE-2020-0683KEV | 11 Feb 2020 | Microsoft Windows Installer Privilege Escalation Vulnerability | Grouped by weakness | 67.4 |
| CVE-2020-0787KEV | 12 Mar 2020 | Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability | Grouped by weakness | 82.1 |
| CVE-2021-41379KEV | 10 Nov 2021 | Microsoft Windows Installer Privilege Escalation Vulnerability | Grouped by weakness | 71.3 |
| CVE-2022-21919KEV | 11 Jan 2022 | Microsoft Windows User Profile Service Privilege Escalation Vulnerability | Grouped by weakness | 59.8 |
| CVE-2022-21999KEV | 9 Feb 2022 | Microsoft Windows Print Spooler Privilege Escalation Vulnerability | Grouped by weakness | 78.2 |
| CVE-2023-21542 | 10 Jan 2023 | Windows Installer Elevation of Privilege Vulnerability | Grouped by weakness | 9.1 |
| CVE-2023-21678 | 10 Jan 2023 | Windows Print Spooler Elevation of Privilege Vulnerability | Grouped by weakness | 15.2 |
| CVE-2023-21760 | 10 Jan 2023 | Windows Print Spooler Elevation of Privilege Vulnerability | Grouped by weakness | 14.2 |
| CVE-2023-28222 | 11 Apr 2023 | Windows Kernel Elevation of Privilege Vulnerability | Grouped by weakness | 15.4 |
| CVE-2023-24904 | 9 May 2023 | Windows Installer Elevation of Privilege Vulnerability | Grouped by weakness | – |
| CVE-2023-32050 | 11 Jul 2023 | Windows Installer Elevation of Privilege Vulnerability | Grouped by weakness | – |
| CVE-2023-32053 | 11 Jul 2023 | Windows Installer Elevation of Privilege Vulnerability | Grouped by weakness | 13.8 |
| CVE-2023-36874KEV | 11 Jul 2023 | Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability | Grouped by weakness | 68.2 |
| CVE-2023-36047 | 14 Nov 2023 | Windows Authentication Elevation of Privilege Vulnerability | Grouped by weakness | 18.6 |
| CVE-2023-36394 | 14 Nov 2023 | Windows Search Service Elevation of Privilege Vulnerability | Grouped by weakness | 23.7 |
| CVE-2023-36399 | 14 Nov 2023 | Windows Storage Elevation of Privilege Vulnerability | Grouped by weakness | 24.0 |
| CVE-2023-36705 | 14 Nov 2023 | Windows Installer Elevation of Privilege Vulnerability | Grouped by weakness | 15.9 |
| CVE-2023-35633 | 12 Dec 2023 | Windows Kernel Elevation of Privilege Vulnerability | Grouped by weakness | 29.5 |
| CVE-2024-21447 | 9 Apr 2024 | Windows Authentication Elevation of Privilege Vulnerability | Grouped by weakness | 56.0 |
| CVE-2024-30018 | 14 May 2024 | Windows Kernel Elevation of Privilege Vulnerability | Grouped by weakness | 17.3 |
| CVE-2024-30033 | 14 May 2024 | Windows Search Service Elevation of Privilege Vulnerability | Grouped by weakness | 17.2 |
| CVE-2024-30093 | 11 Jun 2024 | Windows Storage Elevation of Privilege Vulnerability | Grouped by weakness | 18.5 |
| CVE-2024-43551 | 8 Oct 2024 | Windows Storage Elevation of Privilege Vulnerability | Grouped by weakness | 15.5 |
| CVE-2025-21331 | 14 Jan 2025 | Windows Installer Elevation of Privilege Vulnerability | Grouped by weakness | 18.0 |
| CVE-2025-21373 | 11 Feb 2025 | Windows Installer Elevation of Privilege Vulnerability | Grouped by weakness | 16.8 |
| CVE-2025-21391KEV | 11 Feb 2025 | Microsoft Windows Storage Link Following Vulnerability | Grouped by weakness | 59.6 |
| CVE-2025-25008 | 11 Mar 2025 | Windows Server Elevation of Privilege Vulnerability | Grouped by weakness | 14.8 |
| CVE-2025-21204 | 8 Apr 2025 | Windows Process Activation Elevation of Privilege Vulnerability | Grouped by weakness | 29.3 |
| CVE-2025-27727 | 8 Apr 2025 | Windows Installer Elevation of Privilege Vulnerability | Grouped by weakness | 18.2 |
| CVE-2025-29837 | 13 May 2025 | Windows Installer Information Disclosure Vulnerability | Grouped by weakness | 14.6 |
| CVE-2025-32721 | 10 Jun 2025 | Windows Recovery Driver Elevation of Privilege Vulnerability | Grouped by weakness | 15.4 |
| CVE-2025-33075 | 10 Jun 2025 | Windows Installer Elevation of Privilege Vulnerability | Grouped by weakness | 15.3 |
| CVE-2025-48799 | 8 Jul 2025 | Windows Update Service Elevation of Privilege Vulnerability | Grouped by weakness | 24.4 |
| CVE-2025-48820 | 8 Jul 2025 | Windows AppX Deployment Service Elevation of Privilege Vulnerability | Grouped by weakness | 13.5 |
| CVE-2025-60710KEV | 11 Nov 2025 | Microsoft Windows Link Following Vulnerability | Grouped by weakness | 81.8 |
| CVE-2026-20941 | 13 Jan 2026 | Host Process for Windows Tasks Elevation of Privilege Vulnerability | Grouped by weakness | 13.7 |
| CVE-2026-21517 | 10 Feb 2026 | Windows App for Mac Installer Elevation of Privilege Vulnerability | Grouped by weakness | 9.7 |
| CVE-2026-25187 | 10 Mar 2026 | Winlogon Elevation of Privilege Vulnerability | Grouped by weakness | 66.0 |
| CVE-2026-42989 | 9 Jun 2026 | Winlogon Elevation of Privilege Vulnerability | Grouped by weakness | 22.1 |
| CVE-2026-45586 | 9 Jun 2026 | Windows Collaborative Translation Framework (CTFMON) Elevation of Privilege Vulnerability | Grouped by weakness | 65.7 |
| CVE-2026-49791 | 14 Jul 2026 | Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability | Grouped by weakness | 11.4 |
| CVE-2026-50364 | 14 Jul 2026 | Windows Backup Service Elevation of Privilege Vulnerability | Grouped by weakness | 13.2 |
| CVE-2026-50469 | 14 Jul 2026 | Windows Projected File System Elevation of Privilege Vulnerability | Grouped by weakness | 11.6 |
| CVE-2026-62761 | 11 Aug 2026 | Windows DHCP Server Elevation of Privilege Vulnerability | Grouped by weakness | 11.6 |
| CVE-2026-62776 | 11 Aug 2026 | Windows DHCP Server Elevation of Privilege Vulnerability | Grouped by weakness | 11.6 |
| CVE-2026-62803 | 11 Aug 2026 | Windows DHCP Server Elevation of Privilege Vulnerability | Grouped by weakness | 11.6 |
| CVE-2026-62807 | 11 Aug 2026 | Windows DHCP Server Elevation of Privilege Vulnerability | Grouped by weakness | 11.6 |
| CVE-2026-62812 | 11 Aug 2026 | Windows DHCP Server Elevation of Privilege Vulnerability | Grouped by weakness | 11.6 |
| CVE-2026-62832 | 11 Aug 2026 | Windows User Profile Service Elevation of Privilege Vulnerability | Grouped by weakness | 11.7 |
| CVE-2026-70348 | 11 Aug 2026 | Windows Management Services Denial of Service Vulnerability | Grouped by weakness | 11.6 |
| CVE-2026-69289 | 8 Sep 2026 | Windows Setup Files Cleanup Elevation of Privilege Vulnerability | Grouped by weakness | 11.6 |
| CVE-2026-69379 | 8 Sep 2026 | Windows NTFS Elevation of Privilege Vulnerability | Grouped by weakness | 9.1 |
| CVE-2026-69771 | 8 Sep 2026 | Windows Container Manager Service Security Feature Bypass Vulnerability | Grouped by weakness | 8.4 |
| CVE-2026-81963KEV | 8 Sep 2026 | Microsoft Windows Link Following Vulnerability | Grouped by weakness | 65.2 |
| CVE-2026-102204 | 13 Oct 2026 | Windows Subsystem for Linux Elevation of Privilege Vulnerability | Grouped by weakness | 12.3 |
| CVE-2026-108135 | 13 Oct 2026 | Windows Backup Engine Elevation of Privilege Vulnerability | Grouped by weakness | 9.4 |
| CVE-2026-62687 | 13 Oct 2026 | Windows Backup Engine Information Disclosure Vulnerability | Grouped by weakness | 12.3 |
| CVE-2026-69673 | 13 Oct 2026 | Windows Update Elevation of Privilege Vulnerability | Grouped by weakness | 14.1 |
| CVE-2026-83507 | 13 Oct 2026 | Windows Update Orchestrator Service Information Disclosure Vulnerability | Grouped by weakness | 12.3 |
| CVE-2026-83659 | 13 Oct 2026 | Windows User Profile Service Elevation of Privilege Vulnerability | Grouped by weakness | 10.8 |
| CVE-2026-83704 | 13 Oct 2026 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Grouped by weakness | 13.6 |
| CVE-2026-83793 | 13 Oct 2026 | Windows Update Orchestrator Service Elevation of Privilege Vulnerability | Grouped by weakness | 9.9 |
| CVE-2026-83927 | 13 Oct 2026 | Windows Registry Elevation of Privilege Vulnerability | Grouped by weakness | 12.0 |
| CVE-2026-83933 | 13 Oct 2026 | Windows Update Orchestrator Service Information Disclosure Vulnerability | Grouped by weakness | 12.0 |
| CVE-2026-85343 | 13 Oct 2026 | Windows Hyper-V Elevation of Privilege Vulnerability | Grouped by weakness | 11.1 |
| CVE-2026-85849 | 13 Oct 2026 | Windows AppX Deployment Service Elevation of Privilege Vulnerability | Grouped by weakness | 13.7 |
| CVE-2026-88191 | 13 Oct 2026 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Grouped by weakness | 11.7 |
| CVE-2026-96243 | 13 Oct 2026 | Windows WalletService Elevation of Privilege Vulnerability | Grouped by weakness | 10.8 |
| CVE-2026-96911 | 13 Oct 2026 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Grouped by weakness | 14.6 |