Class familyMicrosoft · Windows COM+ Event System Service
Microsoft Windows type confusion flaws, 2022–2026
62 Windows COM+ Event System Service CVEs with CWE-843 weaknesses, 11 Oct 2022 to 13 Oct 2026. 4 are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2022’22
4 2023’23
1 2024’24
17 2025’25
39 2026’26
In CISA KEVNot in KEV
20221 CVE, 1 in KEV
20234 CVEs
20241 CVE, 1 in KEV
202517 CVEs, 1 in KEV
202639 CVEs, 1 in KEV
- CVE-2026-20811
- CVE-2026-20860
- CVE-2026-21519
- CVE-2026-20806
- CVE-2026-26162
- CVE-2026-34344
- CVE-2026-45600
- CVE-2026-45635
- CVE-2026-45641
- CVE-2026-50381
- CVE-2026-50390
- CVE-2026-50421
- CVE-2026-50491
- CVE-2026-50686
- CVE-2026-58541
- CVE-2026-61932
- CVE-2026-69324
- CVE-2026-70584
- CVE-2026-77494
- CVE-2026-77499
- CVE-2026-77888
- CVE-2026-77889
- CVE-2026-77890
- CVE-2026-102203
- CVE-2026-102216
- CVE-2026-69880
- CVE-2026-69926
- CVE-2026-70017
- CVE-2026-70051
- CVE-2026-70167
- CVE-2026-70205
- CVE-2026-70225
- CVE-2026-70245
- CVE-2026-83642
- CVE-2026-83664
- CVE-2026-83763
- CVE-2026-85377
- CVE-2026-96854
- CVE-2026-96921
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2022-41033KEV | 11 Oct 2022 | Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability | Grouped by weakness | 59.4 |
| CVE-2023-21675 | 10 Jan 2023 | Windows Kernel Elevation of Privilege Vulnerability | Grouped by weakness | 17.1 |
| CVE-2023-35356 | 11 Jul 2023 | Windows Kernel Elevation of Privilege Vulnerability | Grouped by weakness | 23.9 |
| CVE-2023-36594 | 10 Oct 2023 | Windows Graphics Component Elevation of Privilege Vulnerability | Grouped by weakness | 24.5 |
| CVE-2023-36017 | 14 Nov 2023 | Windows Scripting Engine Memory Corruption Vulnerability | Grouped by weakness | 25.7 |
| CVE-2024-38178KEV | 13 Aug 2024 | Microsoft Windows Scripting Engine Memory Corruption Vulnerability | Grouped by weakness | 63.0 |
| CVE-2025-30397KEV | 13 May 2025 | Microsoft Windows Scripting Engine Type Confusion Vulnerability | Grouped by weakness | 67.9 |
| CVE-2025-48815 | 8 Jul 2025 | Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability | Grouped by weakness | 13.4 |
| CVE-2025-50155 | 12 Aug 2025 | Windows Push Notifications Apps Elevation of Privilege Vulnerability | Grouped by weakness | 13.1 |
| CVE-2025-50168 | 12 Aug 2025 | Win32k Elevation of Privilege Vulnerability | Grouped by weakness | 21.6 |
| CVE-2025-50176 | 12 Aug 2025 | DirectX Graphics Kernel Remote Code Execution Vulnerability | Grouped by weakness | 14.5 |
| CVE-2025-53143 | 12 Aug 2025 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability | Grouped by weakness | 25.2 |
| CVE-2025-53144 | 12 Aug 2025 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability | Grouped by weakness | 25.1 |
| CVE-2025-53145 | 12 Aug 2025 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability | Grouped by weakness | 25.1 |
| CVE-2025-53724 | 12 Aug 2025 | Windows Push Notifications Apps Elevation of Privilege Vulnerability | Grouped by weakness | 13.2 |
| CVE-2025-53725 | 12 Aug 2025 | Windows Push Notifications Apps Elevation of Privilege Vulnerability | Grouped by weakness | 13.1 |
| CVE-2025-53726 | 12 Aug 2025 | Windows Push Notifications Apps Elevation of Privilege Vulnerability | Grouped by weakness | 13.2 |
| CVE-2025-53808 | 9 Sep 2025 | Windows Defender Firewall Service Elevation of Privilege Vulnerability | Grouped by weakness | 12.9 |
| CVE-2025-53810 | 9 Sep 2025 | Windows Defender Firewall Service Elevation of Privilege Vulnerability | Grouped by weakness | 12.7 |
| CVE-2025-54094 | 9 Sep 2025 | Windows Defender Firewall Service Elevation of Privilege Vulnerability | Grouped by weakness | 12.7 |
| CVE-2025-54104 | 9 Sep 2025 | Windows Defender Firewall Service Elevation of Privilege Vulnerability | Grouped by weakness | 13.4 |
| CVE-2025-54109 | 9 Sep 2025 | Windows Defender Firewall Service Elevation of Privilege Vulnerability | Grouped by weakness | 12.9 |
| CVE-2025-54915 | 9 Sep 2025 | Windows Defender Firewall Service Elevation of Privilege Vulnerability | Grouped by weakness | 13.0 |
| CVE-2026-20811 | 13 Jan 2026 | Win32k Elevation of Privilege Vulnerability | Grouped by weakness | 13.8 |
| CVE-2026-20860 | 13 Jan 2026 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Grouped by weakness | 24.4 |
| CVE-2026-21519KEV | 10 Feb 2026 | Microsoft Windows Type Confusion Vulnerability | Grouped by weakness | 65.4 |
| CVE-2026-20806 | 14 Apr 2026 | Windows COM Server Information Disclosure Vulnerability | Grouped by weakness | 9.4 |
| CVE-2026-26162 | 14 Apr 2026 | Windows OLE Elevation of Privilege Vulnerability | Grouped by weakness | 10.0 |
| CVE-2026-34344 | 12 May 2026 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Grouped by weakness | 15.3 |
| CVE-2026-45600 | 9 Jun 2026 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | Grouped by weakness | 9.7 |
| CVE-2026-45635 | 9 Jun 2026 | Windows UPnP Device Host Remote Code Execution Vulnerability | Grouped by weakness | 15.0 |
| CVE-2026-45641 | 9 Jun 2026 | Windows Hyper-V Remote Code Execution Vulnerability | Grouped by weakness | 10.6 |
| CVE-2026-50381 | 14 Jul 2026 | Composite Image File System driver (cimfs.sys) Information Disclosure Vulnerability | Grouped by weakness | 10.8 |
| CVE-2026-50390 | 14 Jul 2026 | Windows Kernel Elevation of Privilege Vulnerability | Grouped by weakness | 9.0 |
| CVE-2026-50421 | 14 Jul 2026 | Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability | Grouped by weakness | 10.8 |
| CVE-2026-50491 | 14 Jul 2026 | Code Integrity DLL (ci.dll) Elevation of Privilege Vulnerability | Grouped by weakness | 9.0 |
| CVE-2026-50686 | 14 Jul 2026 | Windows OLE Remote Code Execution Vulnerability | Grouped by weakness | 16.4 |
| CVE-2026-58541 | 14 Jul 2026 | Microsoft DWM Core Library Elevation of Privilege Vulnerability | Grouped by weakness | 10.8 |
| CVE-2026-61932 | 11 Aug 2026 | Windows DWM Core Library Elevation of Privilege Vulnerability | Grouped by weakness | 10.8 |
| CVE-2026-69324 | 8 Sep 2026 | Windows Performance Monitor Elevation of Privilege Vulnerability | Grouped by weakness | 10.8 |
| CVE-2026-70584 | 8 Sep 2026 | Windows Core Messaging Elevation of Privilege Vulnerability | Grouped by weakness | 10.8 |
| CVE-2026-77494 | 8 Sep 2026 | Windows DHCP Server Denial of Service Vulnerability | Grouped by weakness | 18.8 |
| CVE-2026-77499 | 8 Sep 2026 | Windows DHCP Server Denial of Service Vulnerability | Grouped by weakness | 18.7 |
| CVE-2026-77888 | 8 Sep 2026 | Windows DHCP Server Denial of Service Vulnerability | Grouped by weakness | 18.8 |
| CVE-2026-77889 | 8 Sep 2026 | Windows DHCP Server Denial of Service Vulnerability | Grouped by weakness | 18.7 |
| CVE-2026-77890 | 8 Sep 2026 | Windows DHCP Server Denial of Service Vulnerability | Grouped by weakness | 18.8 |
| CVE-2026-102203 | 13 Oct 2026 | RPC Runtime Remote Code Execution Vulnerability | Grouped by weakness | 17.8 |
| CVE-2026-102216 | 13 Oct 2026 | Windows StateRepository API Elevation of Privilege Vulnerability | Grouped by weakness | 11.5 |
| CVE-2026-69880 | 13 Oct 2026 | Desktop Window Manager Elevation of Privilege Vulnerability | Grouped by weakness | 12.5 |
| CVE-2026-69926 | 13 Oct 2026 | Desktop Window Manager Elevation of Privilege Vulnerability | Grouped by weakness | 12.5 |
| CVE-2026-70017 | 13 Oct 2026 | Windows Secure Kernel Mode Information Disclosure Vulnerability | Grouped by weakness | 11.8 |
| CVE-2026-70051 | 13 Oct 2026 | Windows SmartScreen Elevation of Privilege Vulnerability | Grouped by weakness | 11.3 |
| CVE-2026-70167 | 13 Oct 2026 | Windows Domain Name Service Remote Code Execution Vulnerability | Grouped by weakness | 18.6 |
| CVE-2026-70205 | 13 Oct 2026 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Grouped by weakness | 9.4 |
| CVE-2026-70225 | 13 Oct 2026 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Grouped by weakness | 11.8 |
| CVE-2026-70245 | 13 Oct 2026 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Grouped by weakness | 12.8 |
| CVE-2026-83642 | 13 Oct 2026 | Windows Domain Name Service Remote Code Execution Vulnerability | Grouped by weakness | 18.3 |
| CVE-2026-83664 | 13 Oct 2026 | Windows Portable Device File System Driver Information Disclosure Vulnerability | Grouped by weakness | 10.6 |
| CVE-2026-83763 | 13 Oct 2026 | Windows Input System Elevation of Privilege Vulnerability | Grouped by weakness | 12.2 |
| CVE-2026-85377 | 13 Oct 2026 | Windows CD-ROM Driver Elevation of Privilege Vulnerability | Grouped by weakness | 10.3 |
| CVE-2026-96854 | 13 Oct 2026 | Windows Device Association Service Information Disclosure Vulnerability | Grouped by weakness | 10.2 |
| CVE-2026-96921 | 13 Oct 2026 | Windows Message Queuing Queue Manager Information Disclosure Vulnerability | Grouped by weakness | 10.4 |