Class familyMicrosoft · Windows
Microsoft Windows out-of-bounds write flaws, 2010–2026
25 Windows CVEs with CWE-787 weaknesses, 6 Dec 2010 to 13 Oct 2026. 22 are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2010’10
2011’11
2012’12
1 2013’13
2014’14
2015’15
2016’16
2017’17
1 2018’18
2019’19
5 2020’20
5 2021’21
8 2022’22
3 2023’23
2024’24
2025’25
1 2026’26
In CISA KEVNot in KEV
20101 CVE, 1 in KEV
20131 CVE, 1 in KEV
20181 CVE, 1 in KEV
20205 CVEs, 5 in KEV
20215 CVEs, 5 in KEV
20228 CVEs, 6 in KEV
20233 CVEs, 3 in KEV
20261 CVE
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2010-4398KEV | 6 Dec 2010 | Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability | Grouped by weakness | 71.4 |
| CVE-2013-3918KEV | 12 Nov 2013 | Microsoft Windows Out-of-Bounds Write Vulnerability | Grouped by weakness | 72.9 |
| CVE-2018-8174KEV | 9 May 2018 | Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability | Grouped by weakness | 84.3 |
| CVE-2020-0938KEV | 15 Apr 2020 | Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability | Grouped by weakness | 68.3 |
| CVE-2020-1020KEV | 15 Apr 2020 | Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability | Grouped by weakness | 69.0 |
| CVE-2020-1027KEV | 15 Apr 2020 | Microsoft Windows Kernel Privilege Escalation Vulnerability | Grouped by weakness | 66.8 |
| CVE-2020-1054KEV | 21 May 2020 | Microsoft Win32k Privilege Escalation Vulnerability | Grouped by weakness | 67.7 |
| CVE-2020-0986KEV | 9 Jun 2020 | Microsoft Windows Kernel Privilege Escalation Vulnerability | Grouped by weakness | 81.7 |
| CVE-2021-1732KEV | 25 Feb 2021 | Microsoft Win32k Privilege Escalation Vulnerability | Grouped by weakness | 82.2 |
| CVE-2021-28310KEV | 13 Apr 2021 | Microsoft Win32k Privilege Escalation Vulnerability | Grouped by weakness | 71.3 |
| CVE-2021-31956KEV | 8 Jun 2021 | Microsoft Windows NTFS Privilege Escalation Vulnerability | Grouped by weakness | 68.0 |
| CVE-2021-33742KEV | 8 Jun 2021 | Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability | Grouped by weakness | 63.1 |
| CVE-2021-34448KEV | 16 Jul 2021 | Microsoft Windows Scripting Engine Memory Corruption Vulnerability | Grouped by weakness | 62.5 |
| CVE-2022-21882KEV | 11 Jan 2022 | Microsoft Win32k Privilege Escalation Vulnerability | Grouped by weakness | 78.3 |
| CVE-2022-24521KEV | 15 Apr 2022 | Microsoft Windows CLFS Driver Privilege Escalation Vulnerability | Grouped by weakness | 77.3 |
| CVE-2022-22026 | 12 Jul 2022 | Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability | Grouped by weakness | 18.9 |
| CVE-2022-22049 | 12 Jul 2022 | Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability | Grouped by weakness | 18.3 |
| CVE-2022-37969KEV | 13 Sep 2022 | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | Grouped by weakness | 78.1 |
| CVE-2022-41073KEV | 9 Nov 2022 | Microsoft Windows Print Spooler Privilege Escalation Vulnerability | Grouped by weakness | 75.2 |
| CVE-2022-41125KEV | 9 Nov 2022 | Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability | Grouped by weakness | 61.0 |
| CVE-2022-41128KEV | 9 Nov 2022 | Microsoft Windows Scripting Languages Remote Code Execution Vulnerability | Grouped by weakness | 63.7 |
| CVE-2023-23376KEV | 14 Feb 2023 | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | Grouped by weakness | 72.6 |
| CVE-2023-28252KEV | 11 Apr 2023 | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | Grouped by weakness | 78.2 |
| CVE-2023-36036KEV | 14 Nov 2023 | Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability | Grouped by weakness | 72.9 |
| CVE-2026-83712 | 13 Oct 2026 | Windows NTFS Remote Code Execution Vulnerability | Grouped by weakness | 11.3 |