Microsoft product

Windows

← All Microsoft products

No CISA KEV deadline is open. CISA last added a Windows CVE on 13 Oct.

Tracked since 10 Feb · latest article Thu 22 Oct · RSS

Open KEV deadlines: 0; None open
Added to KEV · 90 days: 4; of 176 all time
High exploit odds · current: 4; high · not in KEV
Articles · 7 days: 2; usual rate

Exploited, by due date

CSV download

CVEProductAddedDue · federal deadline

Deadlines passed

CVE-2026-96951Windows13 OctDeadline passed 16 OctRansomware: Unknown · 13 articles

CVE-2026-81963Windows8 SepDeadline passed 22 SepRansomware: Unknown · 14 articles

CVE-2026-85880Windows8 SepDeadline passed 22 SepRansomware: Unknown · 22 articles

CVE-2026-68820Windows Ancillary Function Driver for WinSock11 AugDeadline passed 25 AugRansomware: Unknown · 17 articles

CVE-2008-4250Windows20 MayDeadline passed 3 JunRansomware: Unknown · 4 articles

CVE-2026-32202Windows28 AprDeadline passed 12 MayRansomware: Unknown · 6 articles

CVE-2023-36424Windows13 AprDeadline passed 27 AprRansomware: Unknown · 5 articles

CVE-2025-60710Windows13 AprDeadline passed 27 AprRansomware: Known · 5 articles

CVE-2008-0015Windows17 FebDeadline passed 10 MarRansomware: Unknown · 2 articles

CVE-2026-21510Windows10 FebDeadline passed 3 MarRansomware: Unknown · 11 articles

50 earlier entries

CVE-2026-21513Windows10 FebDeadline passed 3 MarRansomware: Unknown · 15 articles

CVE-2026-21519Windows10 FebDeadline passed 3 MarRansomware: Unknown · 7 articles

CVE-2026-21525Windows10 FebDeadline passed 3 MarRansomware: Unknown · 7 articles

CVE-2026-21533Windows10 FebDeadline passed 3 MarRansomware: Unknown · 7 articles

CVE-2026-20805not in CyberSIXT coverageWindows13 JanDeadline passed 3 FebRansomware: Unknown · 0 articles

CVE-2025-62221Windows9 Dec 2025Deadline passed 30 Dec 2025Ransomware: Unknown · 1 article

CVE-2025-62215not in CyberSIXT coverageWindows12 Nov 2025Deadline passed 3 Dec 2025Ransomware: Unknown · 0 articles

CVE-2025-59287not in CyberSIXT coverageWindows24 Oct 2025Deadline passed 14 Nov 2025Ransomware: Unknown · 0 articles

CVE-2025-33073Windows20 Oct 2025Deadline passed 10 Nov 2025Ransomware: Unknown · 1 article

CVE-2025-24990not in CyberSIXT coverageWindows14 Oct 2025Deadline passed 4 Nov 2025Ransomware: Unknown · 0 articles

CVE-2025-59230not in CyberSIXT coverageWindows14 Oct 2025Deadline passed 4 Nov 2025Ransomware: Unknown · 0 articles

CVE-2011-3402not in CyberSIXT coverageWindows6 Oct 2025Deadline passed 27 Oct 2025Ransomware: Unknown · 0 articles

CVE-2013-3918not in CyberSIXT coverageWindows6 Oct 2025Deadline passed 27 Oct 2025Ransomware: Unknown · 0 articles

CVE-2021-43226not in CyberSIXT coverageWindows6 Oct 2025Deadline passed 27 Oct 2025Ransomware: Known · 0 articles

CVE-2025-33053not in CyberSIXT coverageWindows10 Jun 2025Deadline passed 1 Jul 2025Ransomware: Unknown · 0 articles

CVE-2025-30397not in CyberSIXT coverageWindows13 May 2025Deadline passed 3 Jun 2025Ransomware: Unknown · 0 articles

CVE-2025-30400not in CyberSIXT coverageWindows13 May 2025Deadline passed 3 Jun 2025Ransomware: Unknown · 0 articles

CVE-2025-32701not in CyberSIXT coverageWindows13 May 2025Deadline passed 3 Jun 2025Ransomware: Unknown · 0 articles

CVE-2025-32706not in CyberSIXT coverageWindows13 May 2025Deadline passed 3 Jun 2025Ransomware: Unknown · 0 articles

CVE-2025-32709not in CyberSIXT coverageWindows13 May 2025Deadline passed 3 Jun 2025Ransomware: Unknown · 0 articles

CVE-2025-24054not in CyberSIXT coverageWindows17 Apr 2025Deadline passed 8 May 2025Ransomware: Unknown · 0 articles

CVE-2025-29824not in CyberSIXT coverageWindows8 Apr 2025Deadline passed 29 Apr 2025Ransomware: Known · 0 articles

CVE-2025-24983not in CyberSIXT coverageWindows11 Mar 2025Deadline passed 1 Apr 2025Ransomware: Unknown · 0 articles

CVE-2025-24984not in CyberSIXT coverageWindows11 Mar 2025Deadline passed 1 Apr 2025Ransomware: Unknown · 0 articles

CVE-2025-24985not in CyberSIXT coverageWindows11 Mar 2025Deadline passed 1 Apr 2025Ransomware: Unknown · 0 articles

CVE-2025-24991not in CyberSIXT coverageWindows11 Mar 2025Deadline passed 1 Apr 2025Ransomware: Unknown · 0 articles

CVE-2025-24993not in CyberSIXT coverageWindows11 Mar 2025Deadline passed 1 Apr 2025Ransomware: Unknown · 0 articles

CVE-2025-26633not in CyberSIXT coverageWindows11 Mar 2025Deadline passed 1 Apr 2025Ransomware: Known · 0 articles

CVE-2018-8639not in CyberSIXT coverageWindows3 Mar 2025Deadline passed 24 Mar 2025Ransomware: Known · 0 articles

CVE-2025-21391not in CyberSIXT coverageWindows11 Feb 2025Deadline passed 4 Mar 2025Ransomware: Unknown · 0 articles

CVE-2025-21418not in CyberSIXT coverageWindows11 Feb 2025Deadline passed 4 Mar 2025Ransomware: Unknown · 0 articles

CVE-2025-21333not in CyberSIXT coverageWindows14 Jan 2025Deadline passed 4 Feb 2025Ransomware: Unknown · 0 articles

CVE-2025-21334not in CyberSIXT coverageWindows14 Jan 2025Deadline passed 4 Feb 2025Ransomware: Unknown · 0 articles

CVE-2025-21335not in CyberSIXT coverageWindows14 Jan 2025Deadline passed 4 Feb 2025Ransomware: Unknown · 0 articles

CVE-2024-35250not in CyberSIXT coverageWindows16 Dec 2024Deadline passed 6 Jan 2025Ransomware: Unknown · 0 articles

CVE-2024-49138not in CyberSIXT coverageWindows10 Dec 2024Deadline passed 31 Dec 2024Ransomware: Unknown · 0 articles

CVE-2024-43451not in CyberSIXT coverageWindows12 Nov 2024Deadline passed 3 Dec 2024Ransomware: Unknown · 0 articles

CVE-2024-49039not in CyberSIXT coverageWindows12 Nov 2024Deadline passed 3 Dec 2024Ransomware: Known · 0 articles

CVE-2024-30088not in CyberSIXT coverageWindows15 Oct 2024Deadline passed 5 Nov 2024Ransomware: Known · 0 articles

CVE-2024-43572not in CyberSIXT coverageWindows8 Oct 2024Deadline passed 29 Oct 2024Ransomware: Unknown · 0 articles

CVE-2024-43573not in CyberSIXT coverageWindows8 Oct 2024Deadline passed 29 Oct 2024Ransomware: Unknown · 0 articles

CVE-2024-43461not in CyberSIXT coverageWindows16 Sep 2024Deadline passed 7 Oct 2024Ransomware: Unknown · 0 articles

CVE-2024-38014not in CyberSIXT coverageWindows10 Sep 2024Deadline passed 1 Oct 2024Ransomware: Unknown · 0 articles

CVE-2024-38217not in CyberSIXT coverageWindows10 Sep 2024Deadline passed 1 Oct 2024Ransomware: Unknown · 0 articles

CVE-2024-38106not in CyberSIXT coverageWindows13 Aug 2024Deadline passed 3 Sep 2024Ransomware: Unknown · 0 articles

CVE-2024-38107not in CyberSIXT coverageWindows13 Aug 2024Deadline passed 3 Sep 2024Ransomware: Unknown · 0 articles

CVE-2024-38178not in CyberSIXT coverageWindows13 Aug 2024Deadline passed 3 Sep 2024Ransomware: Unknown · 0 articles

CVE-2024-38193not in CyberSIXT coverageWindows13 Aug 2024Deadline passed 3 Sep 2024Ransomware: Unknown · 0 articles

CVE-2024-38213not in CyberSIXT coverageWindows13 Aug 2024Deadline passed 3 Sep 2024Ransomware: Unknown · 0 articles

CVE-2018-0824not in CyberSIXT coverageWindows5 Aug 2024Deadline passed 26 Aug 2024Ransomware: Unknown · 0 articles

The first 60 entries are listed. The CSV includes the full vendor catalogue.

Coverage

139 articles · all timeFull timeline →

139 articles from 16 outlets; 2 in the last 7 days.

Article
Official notice

Show as table

Windows: articles
Published (UTC)	Outlet	Headline
Thu 22 Oct · 11:41 UTC	SecurityOnline	APT41 Uses a BlackX UEFI Bootkit to Bypass Secure Boot in Central Asia
Thu 22 Oct · 06:07 UTC	Securelist	BlackX UEFI bootkit targets Central Asian diplomats via Secure Boot flaw
Wed 14 Oct · 21:41 UTC	Security Affairs	CISA Flags Actively Exploited Windows Flaw That Bypasses Security Protections
Wed 14 Oct · 14:37 UTC	Security Affairs	Microsoft fixes 1,415 flaws as exploited Windows bug puts users at risk
Wed 14 Oct · 12:11 UTC	Malwarebytes	Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Zero Day
Wed 14 Oct · 09:14 UTC	Infosecurity	Microsoft Fixes Record 1,411 Flaws as Patch Tuesday Strain Grows
Wed 14 Oct · 08:01 UTC	SecurityOnline	Broadcom Moves VMware to Monthly Security Updates as AI Speeds Flaw Discovery
Wed 14 Oct · 07:31 UTC	SecurityWeek	Microsoft’s record 1,413 fixes include a Windows flaw exploited to bypass security warnings
Wed 14 Oct · 07:01 UTC	The Hacker News	Windows Defender flaw let attackers bypass a protected enclave
Wed 14 Oct · 05:14 UTC	The Hacker News	Microsoft patches 1,413 flaws as hackers exploit Windows bug
Wed 14 Oct · 04:37 UTC	SecurityOnline	Microsoft Fixes Actively Exploited Windows Flaw in Record Patch Release
Wed 14 Oct · 00:03 UTC	CISA	CISA flags actively exploited Windows flaw with 16 October patch deadline
Wed 14 Oct · 00:01 UTC	Krebs on Security	Microsoft fixes over 1,400 flaws, including a Windows zero day
Tue 13 Oct · 23:31 UTC	Rapid7	Microsoft Patches Windows Shell Zero Day Exploited in the Wild
Tue 13 Oct · 23:01 UTC	Dark Reading	Microsoft patches actively exploited Windows flaw that bypasses security checks
Tue 13 Oct · 21:13 UTC	thezdi.com	Adobe and Microsoft Patch Thousands of Flaws in Record Update
Thu 24 Sep · 09:59 UTC	SecurityOnline	Chinese Hackers Exploited Chrome and Windows Zero Days in Espionage Attacks
Fri 18 Sep · 11:23 UTC	SecurityWeek	Microsoft Fixes 18 Azure and Copilot Flaws, Urges Windows Update
Tue 15 Sep · 11:30 UTC	Security Affairs	China-Linked Groups Exploited Chrome Patch Gap to Target NGOs
Tue 15 Sep · 04:41 UTC	SecurityOnline	Microsoft Fixes Windows 11 RDS Failures and CVE-2026-62721
Sat 12 Sep · 11:30 UTC	SecurityWeek	Chrome Zero Days Fuel BlueMoon Exploit Kit’s Espionage Surge
Thu 10 Sep · 17:25 UTC	SecurityOnline	Chrome Zero Day Chain Targeted NGOs Before Google’s Patch Arrived
Thu 10 Sep · 08:37 UTC	Security Affairs	CISA Warns of Exploited Magento Flaw Enabling Remote Code Execution
Thu 10 Sep · 07:00 UTC	Security Affairs	Chrome and Windows Zero Days Fuel BlueMoon Espionage Campaigns
Wed 9 Sep · 21:06 UTC	Ars Technica	BlueMoon Exploit Kit Races to Exploit Fresh Chrome and Windows Flaws
Wed 9 Sep · 20:00 UTC	The Hacker News	Chrome Zero-Day Chain BlueMoon Drops Espionage Backdoors on Windows
Wed 9 Sep · 12:26 UTC	SecurityOnline	Chinese-Linked Spies Exploit Chrome and Windows Zero-Days
Wed 9 Sep · 10:38 UTC	Malwarebytes	Microsoft Patches 964 CVEs as Two Windows Zero-Days Face Attacks
Wed 9 Sep · 10:00 UTC	Infosecurity	Microsoft Patches Record 974 CVEs Amid Exploited Windows Zero-Days
Wed 9 Sep · 07:37 UTC	Security Affairs	Microsoft Fixes Nearly 1,000 Flaws in Record Patch Tuesday Update
Wed 9 Sep · 06:29 UTC	The Hacker News	Microsoft Patches 974 Flaws as Two Windows Zero Days Exploited
Wed 9 Sep · 05:50 UTC	SecurityOnline	CVE-2026-41870: Unauthenticated RCE in Apache Nutch
Wed 9 Sep · 00:24 UTC	Rapid7	Microsoft’s Record Patch Tuesday Fixes Two Exploited Windows Zero-Days
Tue 8 Sep · 22:00 UTC	Krebs on Security	Microsoft Fixes 974 Flaws Including Two Exploited Windows Zero Days
Tue 8 Sep · 22:00 UTC	Dark Reading	Microsoft Fixes 974 Flaws as Two Windows Zero Days Face Exploitation
Tue 8 Sep · 21:30 UTC	Ars Technica	Microsoft’s Record 972-Flaw Patch Haul Includes Two Zero-Days
Tue 8 Sep · 21:01 UTC	CISA	CISA Flags Actively Exploited Windows Flaw Enabling Privilege Escalation
Tue 8 Sep · 21:00 UTC	CISA	CISA Warns Attackers Are Exploiting Windows Update Privilege Flaw
Tue 8 Sep · 20:23 UTC	thezdi.com	Adobe and Microsoft Patch 997 Flaws as Exploited Threats Mount
Tue 8 Sep · 20:23 UTC	SecurityOnline	Microsoft Patches Two Windows Zero Days Exploited in Attacks
Tue 8 Sep · 19:47 UTC	SecurityWeek	Microsoft Fixes 974 Flaws in Record Patch Tuesday Update
Tue 8 Sep · 03:08 UTC	SecurityOnline	Windows HTTP.sys Flaw Enables SYSTEM Access with Public PoC
Tue 18 Aug · 04:10 UTC	SecurityOnline	Cross Device Service flaw lets users escalate to SYSTEM via DLL
Mon 17 Aug · 02:40 UTC	SecurityOnline	Critical Metabase SQLi flaw lets attackers seize full admin control
Thu 13 Aug · 08:52 UTC	Security Affairs	Lazarus Group exploits CVE‑2026‑68820 via fake job offers
Wed 12 Aug · 14:11 UTC	Infosecurity	Lazarus Used Post-Quantum Key Exchange to Deliver Zero-Day
Wed 12 Aug · 14:11 UTC	Malwarebytes	MS Patch Tuesday patches 421 flaws, Lazarus zero day exploited
Wed 12 Aug · 13:32 UTC	SecurityOnline	CVE-2026-61515: Unauthenticated Command Injection in Puwell IP Cameras, PoC Exploit Code Publicly Disclosed
Wed 12 Aug · 09:11 UTC	Infosecurity	Microsoft Fixes 400 Flaws on August Patch Tuesday
Wed 12 Aug · 09:11 UTC	SecurityWeek	Lazarus uses fake job offers to exploit Windows CVE-2026-68820

Who reported 16 outlets, last 12 months

SecurityOnline26
Security Affairs21
The Hacker News15
SecurityWeek14
CISA14
Malwarebytes7
Others42

See the full timeline

22 OctAPT41 Uses a BlackX UEFI Bootkit to Bypass Secure Boot in Central AsiaSecurityOnline
22 OctBlackX UEFI bootkit targets Central Asian diplomats via Secure Boot flawSecurelist
14 OctCISA Flags Actively Exploited Windows Flaw That Bypasses Security ProtectionsSecurity Affairs
14 OctMicrosoft fixes 1,415 flaws as exploited Windows bug puts users at riskSecurity Affairs
14 OctMicrosoft Patches Record 1,413 Flaws, Including Exploited Windows Zero DayMalwarebytes
14 OctMicrosoft Fixes Record 1,411 Flaws as Patch Tuesday Strain GrowsInfosecurity
14 OctBroadcom Moves VMware to Monthly Security Updates as AI Speeds Flaw DiscoverySecurityOnline
14 OctMicrosoft’s record 1,413 fixes include a Windows flaw exploited to bypass security warningsSecurityWeek
14 OctWindows Defender flaw let attackers bypass a protected enclaveThe Hacker News
14 OctMicrosoft patches 1,413 flaws as hackers exploit Windows bugThe Hacker News

All CVEs in coverage

CVE-2008-4250Microsoft Windows Buffer Overflow VulnerabilityCVSS9.8CriticalExploited99%EPSS4articles

CVE-2025-33073Microsoft Windows SMB Client Improper Access Control VulnerabilityCVSS8.8HighExploited83%EPSS1article

CVE-2008-0015Microsoft Windows Video ActiveX Control Remote Code Execution VulnerabilityCVSSUnratedExploited77%EPSS2articles

CVE-2026-21510Microsoft Windows Shell Protection Mechanism Failure VulnerabilityCVSS8.8HighExploited61%EPSS11articles

CVE-2023-21674Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation VulnerabilityCVSS8.8HighExploited34%EPSS1article

CVE-2026-21513Microsoft MSHTML Framework Protection Mechanism Failure VulnerabilityCVSS8.8HighExploited16%EPSS15articles

CVE-2023-36424Microsoft Windows Out-of-Bounds Read VulnerabilityCVSS7.8HighExploited12%EPSS5articles

CVE-2026-96951Microsoft Windows Command Injection VulnerabilityCVSS8.8HighExploited9.8%EPSS13articles

CVE-2026-32202Microsoft Windows Protection Mechanism Failure VulnerabilityCVSS4.3MediumExploited4.9%EPSS6articles

CVE-2026-21525Microsoft Windows NULL Pointer Dereference VulnerabilityCVSS6.2MediumExploited4.8%EPSS7articles

CVE-2025-60710Microsoft Windows Link Following VulnerabilityCVSS7.8HighExploited4.6%EPSS5articles

CVE-2026-21533Microsoft Windows Improper Privilege Management VulnerabilityCVSS7.8HighExploited4.2%EPSS7articles

46 more CVEs

CVE-2026-85880Microsoft Windows Heap-Based Buffer Overflow VulnerabilityCVSS7.8HighExploited3.6%EPSS22articles

CVE-2025-62221Microsoft Windows Use After Free VulnerabilityCVSS7.8HighExploited2.5%EPSS1article

CVE-2026-21519Microsoft Windows Type Confusion VulnerabilityCVSS7.8HighExploited2.5%EPSS7articles

CVE-2026-81963Microsoft Windows Link Following VulnerabilityCVSS7.8HighExploited0.4%EPSS14articles

CVE-2026-68820Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free VulnerabilityCVSS7.0HighExploited0.3%EPSS17articles

CVE-2026-49160Microsoft Windows 10 Version 1607 vulnerabilityCVSS7.5High–Not in KEV57%EPSS7articles

CVE-2026-47291Microsoft Windows 10 Version 1607 vulnerabilityCVSS9.8Critical–Not in KEV25%EPSS4articles

CVE-2020-17103Microsoft Windows 10 Version 1809 vulnerabilityCVSS7.0High–Not in KEV22%EPSS4articles

CVE-2026-45657Microsoft Windows 11 version 23H2 vulnerabilityCVSS9.8Critical–Not in KEV15%EPSS1article

CVE-2026-42980Microsoft Windows 10 Version 1607 vulnerabilityCVSS7.8High–Not in KEV7.0%EPSS1article

CVE-2022-21894Microsoft Windows 10 Version 1809 vulnerabilityCVSS4.4Medium–Not in KEV6.8%EPSS2articles

CVE-2026-50507Microsoft Windows 10 Version 1607 vulnerabilityCVSS6.8Medium–Not in KEV5.0%EPSS4articles

CVE-2026-24294Microsoft Windows 10 Version 1607 vulnerabilityCVSS7.8High–Not in KEV4.8%EPSS1article

CVE-2026-40369Microsoft Windows 11 Version 24H2 vulnerabilityCVSS7.8High–Not in KEV4.7%EPSS1article

CVE-2026-45586Microsoft Windows 10 Version 1607 vulnerabilityCVSS7.8High–Not in KEV3.6%EPSS5articles

CVE-2026-41096Microsoft Windows 11 version 23H2 vulnerabilityCVSS9.8Critical–Not in KEV2.7%EPSS5articles

CVE-2025-54100PowerShell Remote Code Execution VulnerabilityCVSSUnrated–Not in KEV2.2%EPSS1article

CVE-2026-45585Microsoft Windows 11 Version 24H2 vulnerabilityCVSS6.8Medium–Not in KEV1.9%EPSS3articles

CVE-2026-44815Microsoft Windows 10 Version 1607 vulnerabilityCVSS9.8Critical–Not in KEV1.1%EPSS1article

CVE-2026-69525Microsoft Windows 10 Version 1607 vulnerabilityCVSS9.8Critical–Not in KEV1.0%EPSS1article

CVE-2026-62815Microsoft Windows 11 version 23H2 vulnerabilityCVSS9.8Critical–Not in KEV1.0%EPSS2articles

CVE-2026-69829Microsoft Windows 10 Version 1607 vulnerabilityCVSS9.8Critical–Not in KEV1.0%EPSS1article

CVE-2026-69730Microsoft Windows 10 Version 1607 vulnerabilityCVSS9.8Critical–Not in KEV1.0%EPSS3articles

CVE-2026-23669RPC Runtime Library Remote Code Execution VulnerabilityCVSSUnrated–Not in KEV0.9%EPSS1article

CVE-2026-57092Microsoft Windows 10 Version 1607 vulnerabilityCVSS9.9Critical–Not in KEV0.9%EPSS1article

CVE-2026-33827Microsoft Windows 10 Version 1607 vulnerabilityCVSS8.1High–Not in KEV0.8%EPSS4articles

CVE-2026-54121Microsoft Windows 10 Version 1607 vulnerabilityCVSS8.8High–Not in KEV0.8%EPSS2articles

CVE-2026-69510Microsoft Windows 10 Version 1607 vulnerabilityCVSS8.1High–Not in KEV0.7%EPSS1article

CVE-2026-72981Microsoft Windows 10 Version 1607 vulnerabilityCVSS8.1High–Not in KEV0.7%EPSS1article

CVE-2026-69524Microsoft Windows 10 Version 1607 vulnerabilityCVSS8.1High–Not in KEV0.7%EPSS1article

CVE-2026-50502Microsoft Windows 10 Version 1607 vulnerabilityCVSS8.0High–Not in KEV0.7%EPSS1article

CVE-2025-48804Microsoft Windows 10 Version 1507 vulnerabilityCVSS6.8Medium–Not in KEV0.7%EPSS1article

CVE-2026-35421Microsoft Windows 10 Version 1607 vulnerabilityCVSS7.8High–Not in KEV0.5%EPSS1article

CVE-2026-24293Microsoft Windows 10 Version 21H2 vulnerabilityCVSS7.8High–Not in KEV0.5%EPSS1article

CVE-2026-50661Microsoft Windows 10 Version 1607 vulnerabilityCVSS6.1Medium–Not in KEV0.5%EPSS2articles

CVE-2026-26128Microsoft Windows 10 Version 1607 vulnerabilityCVSS7.8High–Not in KEV0.4%EPSS1article

CVE-2026-62832Microsoft Windows 10 Version 21H2 vulnerabilityCVSS7.8High–Not in KEV0.4%EPSS6articles

CVE-2026-50454Microsoft Windows 11 Version 24H2 vulnerabilityCVSS7.8High–Not in KEV0.4%EPSS1article

CVE-2026-72971Microsoft Windows 11 version 26H1 vulnerabilityCVSS5.5Medium–Not in KEV0.4%EPSS5articles

CVE-2026-85921Microsoft Windows 11 version 26H1 vulnerabilityCVSS8.2High–Not in KEV0.3%EPSS1article

CVE-2026-83498Microsoft Windows 11 version 23H2 vulnerabilityCVSS7.8High–Not in KEV0.3%EPSS1article

CVE-2026-62735Microsoft Windows 10 Version 1607 vulnerabilityCVSS7.8High–Not in KEV0.3%EPSS1article

CVE-2026-49176Microsoft Windows 10 Version 1607 vulnerabilityCVSS7.8High–Not in KEV0.3%EPSS1article

CVE-2026-66804Microsoft Windows 10 Version 22H2 vulnerabilityCVSS7.8High–Not in KEV0.3%EPSS1article

CVE-2026-50343Microsoft Windows 10 Version 1809 vulnerabilityCVSS7.8High–Not in KEV0.3%EPSS1article

CVE-2026-62721Microsoft Windows 10 Version 1607 vulnerabilityCVSS7.8High–Not in KEV0.3%EPSS1article

How these numbers are made

CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.

CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.

Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.

Product names are grouped by normalised names, with version and edition tails removed.

Fix listed refers to an advisory. Unknown fix status is counted as not listed.

Windows

Exploited, by due date

Coverage

All CVEs in coverage

On this device

Intel

Settings

Keyboard shortcuts