KEV 2026.09.231,721 entries+8 in 7d8 open federal deadlinesas of / search ? keys
Telemetry

Product / Microsoft

Microsoft Windows in CISA KEV

Catalog
2026.09.23
Vendor
Microsoft
Updated
2026-09-08

Answer CISA's KEV catalog lists 172 vulnerabilities in Microsoft Windows as of catalog 2026.09.23, 44.3% of Microsoft's 388 entries. First added 2021-11-03, latest 2026-09-08; 48 ransomware-linked.

KEV entries
172
Ransomware: known
4827.9%
First added
2021-11-03
Latest added
2026-09-08
Median days to due
21
Open deadlines
0federal

TAdditions by year

Microsoft Windows KEV additions per yearColumn chart of KEV additions per calendar year. 2021: 28; 2022: 66; 2023: 14; 2024: 22; 2025: 29; 2026: 13.0204060802021: 28 added2820212022: 66 added6620222023: 14 added1420232024: 22 added2220242025: 29 added2920252026: 13 added (year to date)132026
Microsoft Windows KEV additions by year
YearAdded
202128
202266
202314
202422
202529
202613

WWeaknesses

CWEs in Microsoft Windows KEV entries
CWEEntriesShare
CWE-416 Use after free137.6%
CWE-787 Out-of-bounds write137.6%
CWE-59 Link following127%
CWE-20 Improper input validation116.4%
CWE-122 Heap-based buffer overflow105.8%
CWE-269 Improper privilege management74.1%
CWE-119 Memory buffer bounds error74.1%
CWE-693 Protection mechanism failure63.5%

EAll entries

Microsoft Windows entries in CISA KEV
CVEVulnerabilityAddedDueRansomwareCWE
CVE-2026-85880Microsoft Windows Heap-Based Buffer Overflow VulnerabilityUnknownCWE-122, CWE-908
CVE-2026-81963Microsoft Windows Link Following VulnerabilityUnknownCWE-59, CWE-284
CVE-2008-4250Microsoft Windows Buffer Overflow VulnerabilityUnknownCWE-94
CVE-2026-32202Microsoft Windows Protection Mechanism Failure VulnerabilityUnknownCWE-693
CVE-2025-60710Microsoft Windows Link Following VulnerabilityKnownCWE-59
CVE-2023-36424Microsoft Windows Out-of-Bounds Read VulnerabilityUnknownCWE-125
CVE-2008-0015 Microsoft Windows Video ActiveX Control Remote Code Execution VulnerabilityUnknownnone listed
CVE-2026-21533Microsoft Windows Improper Privilege Management VulnerabilityUnknownCWE-269
CVE-2026-21525Microsoft Windows NULL Pointer Dereference VulnerabilityUnknownCWE-476
CVE-2026-21519Microsoft Windows Type Confusion VulnerabilityUnknownCWE-843
CVE-2026-21513Microsoft MSHTML Framework Protection Mechanism Failure VulnerabilityUnknownCWE-693
CVE-2026-21510Microsoft Windows Shell Protection Mechanism Failure VulnerabilityUnknownCWE-693
CVE-2026-20805Microsoft Windows Information Disclosure VulnerabilityUnknownCWE-200
CVE-2025-62221Microsoft Windows Use After Free VulnerabilityUnknownCWE-416
CVE-2025-62215Microsoft Windows Race Condition VulnerabilityUnknownCWE-362
CVE-2025-59287Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data VulnerabilityUnknownCWE-502
CVE-2025-33073Microsoft Windows SMB Client Improper Access Control VulnerabilityUnknownCWE-284
CVE-2025-59230Microsoft Windows Improper Access Control VulnerabilityUnknownCWE-284
CVE-2025-24990Microsoft Windows Untrusted Pointer Dereference VulnerabilityUnknownCWE-822
CVE-2021-43226Microsoft Windows Privilege Escalation VulnerabilityKnownnone listed
CVE-2013-3918Microsoft Windows Out-of-Bounds Write VulnerabilityUnknownnone listed
CVE-2011-3402Microsoft Windows Remote Code Execution VulnerabilityUnknownnone listed
CVE-2025-33053 Microsoft Windows External Control of File Name or Path VulnerabilityUnknownCWE-73
CVE-2025-32709Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free VulnerabilityUnknownCWE-416
CVE-2025-32706Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow VulnerabilityUnknownCWE-122
CVE-2025-32701Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free VulnerabilityUnknownCWE-416
CVE-2025-30400Microsoft Windows DWM Core Library Use-After-Free VulnerabilityUnknownCWE-416
CVE-2025-30397Microsoft Windows Scripting Engine Type Confusion VulnerabilityUnknownCWE-843
CVE-2025-24054Microsoft Windows NTLM Hash Disclosure Spoofing VulnerabilityUnknownCWE-73
CVE-2025-29824Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free VulnerabilityKnownCWE-416
CVE-2025-26633Microsoft Windows Management Console (MMC) Improper Neutralization VulnerabilityKnownCWE-707
CVE-2025-24993Microsoft Windows NTFS Heap-Based Buffer Overflow VulnerabilityUnknownCWE-122
CVE-2025-24991Microsoft Windows NTFS Out-Of-Bounds Read VulnerabilityUnknownCWE-125
CVE-2025-24985Microsoft Windows Fast FAT File System Driver Integer Overflow VulnerabilityUnknownCWE-190, CWE-122
CVE-2025-24984Microsoft Windows NTFS Information Disclosure VulnerabilityUnknownCWE-532
CVE-2025-24983Microsoft Windows Win32k Use-After-Free VulnerabilityUnknownCWE-416
CVE-2018-8639Microsoft Windows Win32k Improper Resource Shutdown or Release VulnerabilityKnownCWE-404
CVE-2025-21418Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow VulnerabilityUnknownCWE-122
CVE-2025-21391Microsoft Windows Storage Link Following VulnerabilityUnknownCWE-59
CVE-2025-21335Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free VulnerabilityUnknownCWE-416
CVE-2025-21334Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free VulnerabilityUnknownCWE-416
CVE-2025-21333Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow VulnerabilityUnknownCWE-122
CVE-2024-35250Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability UnknownCWE-822
CVE-2024-49138Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow VulnerabilityUnknownCWE-122
CVE-2024-49039Microsoft Windows Task Scheduler Privilege Escalation VulnerabilityKnownCWE-287
CVE-2024-43451Microsoft Windows NTLMv2 Hash Disclosure Spoofing VulnerabilityUnknownCWE-73
CVE-2024-43573Microsoft Windows MSHTML Platform Spoofing VulnerabilityUnknownCWE-79
CVE-2024-43572Microsoft Windows Management Console Remote Code Execution VulnerabilityUnknownCWE-707
CVE-2024-43461Microsoft Windows MSHTML Platform Spoofing VulnerabilityUnknownCWE-451
CVE-2024-38217Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure VulnerabilityUnknownCWE-693
CVE-2024-38014Microsoft Windows Installer Improper Privilege Management VulnerabilityUnknownCWE-269
CVE-2024-38213Microsoft Windows SmartScreen Security Feature Bypass VulnerabilityUnknownCWE-693
CVE-2024-38193Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation VulnerabilityUnknownCWE-416
CVE-2024-38178Microsoft Windows Scripting Engine Memory Corruption VulnerabilityUnknownCWE-843
CVE-2024-38107Microsoft Windows Power Dependency Coordinator Privilege Escalation VulnerabilityUnknownCWE-416
CVE-2024-38106Microsoft Windows Kernel Privilege Escalation VulnerabilityUnknownCWE-591
CVE-2018-0824Microsoft COM for Windows Deserialization of Untrusted Data VulnerabilityUnknownCWE-502
CVE-2024-38112Microsoft Windows MSHTML Platform Spoofing VulnerabilityUnknownCWE-451
CVE-2024-26169Microsoft Windows Error Reporting Service Improper Privilege Management VulnerabilityKnownCWE-269
CVE-2024-30040Microsoft Windows MSHTML Platform Security Feature Bypass VulnerabilityUnknownCWE-20
CVE-2022-38028Microsoft Windows Print Spooler Privilege Escalation Vulnerability Unknownnone listed
CVE-2024-21338Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control VulnerabilityKnownCWE-822
CVE-2024-21412Microsoft Windows Internet Shortcut Files Security Feature Bypass VulnerabilityKnownCWE-693
CVE-2024-21351Microsoft Windows SmartScreen Security Feature Bypass VulnerabilityUnknownCWE-94
CVE-2023-36584Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass VulnerabilityUnknownnone listed
CVE-2023-36036Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation VulnerabilityUnknownCWE-122
CVE-2023-36033Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation VulnerabilityUnknownCWE-822
CVE-2023-36025Microsoft Windows SmartScreen Security Feature Bypass VulnerabilityUnknownnone listed
CVE-2023-36884Microsoft Windows Search Remote Code Execution VulnerabilityKnownCWE-362
CVE-2023-36874Microsoft Windows Error Reporting Service Privilege Escalation VulnerabilityUnknownCWE-59
CVE-2023-32049Microsoft Windows Defender SmartScreen Security Feature Bypass VulnerabilityUnknownnone listed
CVE-2023-32046Microsoft Windows MSHTML Platform Privilege Escalation VulnerabilityUnknownnone listed
CVE-2023-28252Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation VulnerabilityKnownCWE-122
CVE-2019-1388Microsoft Windows Certificate Dialog Privilege Escalation VulnerabilityKnownCWE-269
CVE-2023-24880Microsoft Windows SmartScreen Security Feature Bypass VulnerabilityKnownCWE-863
CVE-2023-23376Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation VulnerabilityKnownCWE-122
CVE-2023-21823Microsoft Windows Graphic Component Privilege Escalation VulnerabilityUnknownCWE-190
CVE-2023-21674Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation VulnerabilityUnknownCWE-416
CVE-2022-41049Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass VulnerabilityUnknownCWE-274
CVE-2022-41128Microsoft Windows Scripting Languages Remote Code Execution VulnerabilityUnknownCWE-787
CVE-2022-41125Microsoft Windows CNG Key Isolation Service Privilege Escalation VulnerabilityUnknownCWE-787
CVE-2022-41091Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass VulnerabilityKnownCWE-863
CVE-2022-41073Microsoft Windows Print Spooler Privilege Escalation VulnerabilityKnownCWE-787
CVE-2010-2568Microsoft Windows Remote Code Execution VulnerabilityUnknownCWE-20
CVE-2022-37969Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation VulnerabilityKnownCWE-20, CWE-787
CVE-2022-21971Microsoft Windows Runtime Remote Code Execution VulnerabilityUnknownCWE-824
CVE-2022-34713Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution VulnerabilityUnknownnone listed
CVE-2022-22047Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation VulnerabilityUnknownCWE-426
CVE-2022-26925Microsoft Windows LSA Spoofing VulnerabilityUnknownCWE-306
CVE-2022-30190Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution VulnerabilityKnownCWE-610
CVE-2012-0151Microsoft Windows Authenticode Signature Verification Remote Code Execution VulnerabilityUnknownCWE-20
CVE-2016-7256Microsoft Windows Open Type Font Remote Code Execution VulnerabilityUnknownCWE-284
CVE-2016-3393Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution VulnerabilityUnknownCWE-284
CVE-2015-6175Microsoft Windows Kernel Privilege Escalation VulnerabilityUnknownCWE-264
CVE-2015-1769Microsoft Windows Mount Manager Privilege Escalation VulnerabilityUnknownCWE-264
CVE-2015-1671Microsoft Windows Remote Code Execution VulnerabilityUnknownCWE-19
CVE-2015-0016Microsoft Windows TS WebProxy Directory Traversal VulnerabilityUnknownCWE-22
CVE-2014-4148Microsoft Windows Remote Code Execution VulnerabilityUnknownCWE-94
CVE-2018-8611Microsoft Windows Kernel Privilege Escalation VulnerabilityUnknownCWE-404
CVE-2017-8543Microsoft Windows Search Remote Code Execution VulnerabilityUnknownCWE-281
CVE-2017-0005Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation VulnerabilityUnknownCWE-119
CVE-2020-1027Microsoft Windows Kernel Privilege Escalation VulnerabilityUnknownCWE-787
CVE-2019-1385Microsoft Windows AppX Deployment Extensions Privilege Escalation VulnerabilityKnownCWE-59
CVE-2019-1130Microsoft Windows AppX Deployment Service Privilege Escalation VulnerabilityKnownCWE-59
CVE-2019-0880Microsoft Windows Privilege Escalation VulnerabilityUnknownnone listed
CVE-2019-0703Microsoft Windows SMB Information Disclosure VulnerabilityUnknownnone listed
CVE-2022-26904Microsoft Windows User Profile Service Privilege Escalation VulnerabilityUnknownCWE-362
CVE-2022-21919Microsoft Windows User Profile Service Privilege Escalation VulnerabilityUnknownCWE-1386
CVE-2022-22718Microsoft Windows Print Spooler Privilege Escalation VulnerabilityUnknownnone listed
CVE-2022-24521Microsoft Windows CLFS Driver Privilege Escalation VulnerabilityKnownCWE-787, CWE-1285
CVE-2021-34484Microsoft Windows User Profile Service Privilege Escalation VulnerabilityUnknownCWE-269
CVE-2021-34486Microsoft Windows Event Tracing Privilege Escalation VulnerabilityUnknownCWE-416
CVE-2018-8440Microsoft Windows Privilege Escalation VulnerabilityKnownnone listed
CVE-2017-0213Microsoft Windows Privilege Escalation VulnerabilityKnownnone listed
CVE-2016-0040Microsoft Windows Kernel Privilege Escalation VulnerabilityUnknownCWE-264
CVE-2015-2426Microsoft Windows Adobe Type Manager Library Remote Code Execution VulnerabilityUnknownCWE-119
CVE-2010-4398Microsoft Windows Kernel Stack-Based Buffer Overflow VulnerabilityUnknownCWE-119
CVE-2022-21999Microsoft Windows Print Spooler Privilege Escalation VulnerabilityKnownCWE-40, CWE-1386
CVE-2018-8414Microsoft Windows Shell Remote Code Execution VulnerabilityUnknownCWE-20
CVE-2017-0146Microsoft Windows SMB Remote Code Execution VulnerabilityKnownCWE-20
CVE-2014-6332Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution VulnerabilityUnknownCWE-119
CVE-2019-1405Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation VulnerabilityKnownnone listed
CVE-2019-1322Microsoft Windows Privilege Escalation VulnerabilityKnownnone listed
CVE-2019-1315Microsoft Windows Error Reporting Manager Privilege Escalation VulnerabilityKnownCWE-59
CVE-2019-1253Microsoft Windows AppX Deployment Server Privilege Escalation VulnerabilityKnownCWE-59
CVE-2019-1129Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation VulnerabilityKnownCWE-59
CVE-2019-1064Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation VulnerabilityKnownCWE-59
CVE-2019-0841Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation VulnerabilityKnownCWE-59
CVE-2019-0543Microsoft Windows Privilege Escalation VulnerabilityKnownCWE-287
CVE-2017-0101Microsoft Windows Transaction Manager Privilege Escalation VulnerabilityKnownCWE-119
CVE-2016-3309Microsoft Windows Kernel Privilege Escalation VulnerabilityKnownCWE-264
CVE-2021-41379Microsoft Windows Installer Privilege Escalation VulnerabilityKnownCWE-1386
CVE-2016-0099Microsoft Windows Secondary Logon Service Privilege Escalation VulnerabilityKnownCWE-264
CVE-2014-4114Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution VulnerabilityUnknownCWE-20
CVE-2013-5065Microsoft Windows Kernel Privilege Escalation VulnerabilityUnknownCWE-20
CVE-2010-0232Microsoft Windows Kernel Exception Handler VulnerabilityUnknownCWE-264
CVE-2009-1123Microsoft Windows Improper Input Validation VulnerabilityUnknownCWE-20
CVE-2004-0210Microsoft Windows Privilege Escalation VulnerabilityUnknownCWE-120
CVE-2002-0367Microsoft Windows Privilege Escalation VulnerabilityUnknownnone listed
CVE-2014-6352Microsoft Windows Code Injection VulnerabilityUnknownCWE-94
CVE-2018-8174Microsoft Windows VBScript Engine Out-of-Bounds Write VulnerabilityKnownCWE-787
CVE-2021-36934Microsoft Windows SAM Local Privilege Escalation VulnerabilityUnknownCWE-1220
CVE-2017-8464Microsoft Windows Shell (.lnk) Remote Code Execution VulnerabilityUnknownnone listed
CVE-2020-0787Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management VulnerabilityKnownCWE-269, CWE-59
CVE-2021-43890Microsoft Windows AppX Installer Spoofing VulnerabilityKnownnone listed
CVE-2021-40449Microsoft Windows Win32k Privilege Escalation VulnerabilityKnownCWE-416
CVE-2021-36955Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation VulnerabilityKnownnone listed
CVE-2021-36948Microsoft Windows Update Medic Service Privilege Escalation VulnerabilityUnknownnone listed
CVE-2021-36942Microsoft Windows Local Security Authority (LSA) Spoofing VulnerabilityKnownCWE-749
CVE-2021-34527Microsoft Windows Print Spooler Remote Code Execution VulnerabilityKnownCWE-269
CVE-2021-34448Microsoft Windows Scripting Engine Memory Corruption VulnerabilityUnknownCWE-787
CVE-2021-33771Microsoft Windows Kernel Privilege Escalation VulnerabilityUnknownCWE-119
CVE-2021-33742Microsoft Windows MSHTML Platform Remote Code Execution VulnerabilityUnknownCWE-787, CWE-823
CVE-2021-33739Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation VulnerabilityUnknownnone listed
CVE-2021-31979Microsoft Windows Kernel Privilege Escalation VulnerabilityUnknownCWE-119
CVE-2021-31956Microsoft Windows NTFS Privilege Escalation VulnerabilityUnknownCWE-191, CWE-787
CVE-2021-31955Microsoft Windows Kernel Information Disclosure VulnerabilityUnknownCWE-497
CVE-2021-1675Microsoft Windows Print Spooler Remote Code Execution VulnerabilityKnownCWE-285
CVE-2020-17087Microsoft Windows Kernel Privilege Escalation VulnerabilityUnknownCWE-131
CVE-2020-1464Microsoft Windows Spoofing VulnerabilityUnknownCWE-347
CVE-2020-1350Microsoft Windows DNS Server Remote Code Execution VulnerabilityUnknownnone listed
CVE-2020-1020Microsoft Windows Adobe Font Manager Library Remote Code Execution VulnerabilityUnknownCWE-787
CVE-2020-0986Microsoft Windows Kernel Privilege Escalation VulnerabilityUnknownCWE-787
CVE-2020-0938Microsoft Windows Adobe Font Manager Library Remote Code Execution VulnerabilityUnknownCWE-787
CVE-2020-0683Microsoft Windows Installer Privilege Escalation VulnerabilityUnknownnone listed
CVE-2020-0601Microsoft Windows CryptoAPI Spoofing VulnerabilityUnknownCWE-295
CVE-2019-1215Microsoft Windows Privilege Escalation VulnerabilityKnownnone listed
CVE-2019-1214Microsoft Windows Privilege Common Log File System (CLFS) Escalation VulnerabilityUnknownnone listed
CVE-2019-0863Microsoft Windows Error Reporting (WER) Privilege Escalation VulnerabilityUnknownnone listed
CVE-2017-0143Microsoft Windows Server Message Block (SMBv1) Remote Code Execution VulnerabilityKnownCWE-20
CVE-2016-0185Microsoft Windows Media Center Remote Code Execution VulnerabilityUnknownCWE-20
CVE-2014-1812Microsoft Windows Group Policy Preferences Password Privilege Escalation VulnerabilityKnownCWE-255

Cite this

CISA's KEV catalog lists 172 vulnerabilities in Microsoft Windows. Source: Telemetry analysis of the CISA Known Exploited Vulnerabilities catalog, version 2026.09.23 (released 2026-09-23). https://glide-telemetry.pages.dev/products/microsoft-windows/

Source: CISA KEV catalog v2026.09.23, released 2026-09-23. Windows end 2026-09-23.

Keyboard shortcuts

Keyboard shortcuts
/Focus search
?Show this panel
EscClose panel or clear search
g dGo to Dashboard
g kGo to KEV
g vGo to Vendors
g pGo to Products
g wGo to Weaknesses
g sGo to Stats
g rGo to Regulations
g bGo to Briefings
g aGo to API