Class familyMicrosoft · Windows
Microsoft Windows incorrect authorization flaws, 2021–2026
14 Windows CVEs with CWE-863 weaknesses, 13 Oct 2021 to 13 Oct 2026. 2 are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2021’21
3 2022’22
4 2023’23
2024’24
2025’25
6 2026’26
In CISA KEVNot in KEV
20211 CVE
20223 CVEs, 1 in KEV
20234 CVEs, 1 in KEV
20266 CVEs
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2021-40456 | 13 Oct 2021 | Windows AD FS Security Feature Bypass Vulnerability | Grouped by weakness | 20.4 |
| CVE-2022-21894 | 11 Jan 2022 | Secure Boot Security Feature Bypass Vulnerability | Grouped by weakness | 65.1 |
| CVE-2022-30203 | 12 Jul 2022 | Windows Boot Manager Security Feature Bypass Vulnerability | Grouped by weakness | 25.0 |
| CVE-2022-41091KEV | 9 Nov 2022 | Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | Grouped by weakness | 67.7 |
| CVE-2023-24880KEV | 14 Mar 2023 | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | Grouped by weakness | 71.0 |
| CVE-2023-28249 | 11 Apr 2023 | Windows Boot Manager Security Feature Bypass Vulnerability | Grouped by weakness | 13.8 |
| CVE-2023-28270 | 11 Apr 2023 | Windows Lock Screen Security Feature Bypass Vulnerability | Grouped by weakness | 13.2 |
| CVE-2023-24932 | 9 May 2023 | Secure Boot Security Feature Bypass Vulnerability | Grouped by weakness | 65.0 |
| CVE-2026-69640 | 13 Oct 2026 | Windows Key Distribution Center Security Feature Bypass Vulnerability | Grouped by weakness | 14.3 |
| CVE-2026-70057 | 13 Oct 2026 | Windows Routing and Remote Access Service (RRAS) Security Feature Bypass Vulnerability | Grouped by weakness | 8.8 |
| CVE-2026-70087 | 13 Oct 2026 | Role: DNS Server Security Feature Bypass Vulnerability | Grouped by weakness | 8.8 |
| CVE-2026-70280 | 13 Oct 2026 | Windows Hello Security Feature Bypass Vulnerability | Grouped by weakness | 9.6 |
| CVE-2026-83766 | 13 Oct 2026 | Windows Hyper-V Security Feature Bypass Vulnerability | Grouped by weakness | 9.8 |
| CVE-2026-84011 | 13 Oct 2026 | Windows SMB Client Security Feature Bypass Vulnerability | Grouped by weakness | 8.0 |