Attack list
Windows PC
203 attacked bugs
Yes. Attackers are using Windows PC bugs right now.
What to do
Open Start, then Settings, then Windows Update, then Check for updates. Install everything and restart.
Attackers keep using these against anything that hasn't updated. Updating closes them.
BugConfirmed in attacks
- A Windows flaw lets attackers get around a safety checkCVE-2026-96951Oct 13, 2026
- Microsoft Windows bug: link followingCVE-2026-81963Sep 8, 2026
- Microsoft Windows bug: heap-based buffer overflowCVE-2026-85880Sep 8, 2026
- Microsoft Windows Ancillary Function Driver for WinSock bug: ancillary function driver for winsock use-after-freeCVE-2026-68820Aug 11, 2026
- Microsoft Windows bug: buffer overflowCVE-2008-4250May 20, 2026
- Microsoft Windows bug: protection mechanism failureCVE-2026-32202Apr 28, 2026
- Microsoft Windows bug: link followingCVE-2025-60710Apr 13, 2026
- Microsoft Windows bug: out-of-bounds readCVE-2023-36424Apr 13, 2026
- Microsoft Windows bug: video activex control remote code executionCVE-2008-0015Feb 17, 2026
- Microsoft Windows bug: mshtml framework protection mechanism failureCVE-2026-21513Feb 10, 2026
- Microsoft Windows bug: null pointer dereferenceCVE-2026-21525Feb 10, 2026
- Microsoft Windows bug: shell protection mechanism failureCVE-2026-21510Feb 10, 2026
- Microsoft Windows bug: improper privilege managementCVE-2026-21533Feb 10, 2026
- Microsoft Windows bug: type confusionCVE-2026-21519Feb 10, 2026
- Microsoft Windows bug: information disclosureCVE-2026-20805Jan 13, 2026
- Microsoft Windows bug: use after freeCVE-2025-62221Dec 9, 2025
- Microsoft Windows bug: race conditionCVE-2025-62215Nov 12, 2025
- Microsoft Windows bug: server update service (wsus) deserialization of untrusted dataCVE-2025-59287Oct 24, 2025
- Microsoft Windows bug: SMB client improper access controlCVE-2025-33073Oct 20, 2025
- Microsoft Windows bug: untrusted pointer dereferenceCVE-2025-24990Oct 14, 2025
- Microsoft Windows bug: improper access controlCVE-2025-59230Oct 14, 2025
- Microsoft Windows bug: privilege escalationCVE-2021-43226Oct 6, 2025
- Microsoft Windows bug: out-of-bounds writeCVE-2013-3918Oct 6, 2025
- Microsoft Windows bug: remote code executionCVE-2011-3402Oct 6, 2025
- Microsoft Windows bug: external control of file name or pathCVE-2025-33053Jun 10, 2025
- Microsoft Windows bug: ancillary function driver for winsock use-after-freeCVE-2025-32709May 13, 2025
- Microsoft Windows bug: scripting engine type confusionCVE-2025-30397May 13, 2025
- Microsoft Windows bug: common log file system (clfs) driver heap-based buffer overflowCVE-2025-32706May 13, 2025
- Microsoft Windows bug: common log file system (clfs) driver use-after-freeCVE-2025-32701May 13, 2025
- Microsoft Windows bug: dwm core library use-after-freeCVE-2025-30400May 13, 2025
- Microsoft Windows bug: NTLM hash disclosure spoofingCVE-2025-24054Apr 17, 2025
- Microsoft Windows bug: common log file system (clfs) driver use-after-freeCVE-2025-29824Apr 8, 2025
- Microsoft Windows bug: ntfs heap-based buffer overflowCVE-2025-24993Mar 11, 2025
- Microsoft Windows bug: ntfs out-of-bounds readCVE-2025-24991Mar 11, 2025
- Microsoft Windows bug: fast fat file system driver integer overflowCVE-2025-24985Mar 11, 2025
- Microsoft Windows bug: ntfs information disclosureCVE-2025-24984Mar 11, 2025
- Microsoft Windows bug: win32k use-after-freeCVE-2025-24983Mar 11, 2025
- Microsoft Windows bug: management console (mmc) improper neutralizationCVE-2025-26633Mar 11, 2025
- Microsoft Windows bug: win32k improper resource shutdown or releaseCVE-2018-8639Mar 3, 2025
- Microsoft Windows bug: ancillary function driver for winsock heap-based buffer overflowCVE-2025-21418Feb 11, 2025
- Microsoft Windows bug: storage link followingCVE-2025-21391Feb 11, 2025
- Microsoft Windows bug: hyper-v nt kernel integration vsp use-after-freeCVE-2025-21335Jan 14, 2025
- Microsoft Windows bug: hyper-v nt kernel integration vsp use-after-freeCVE-2025-21334Jan 14, 2025
- Microsoft Windows bug: hyper-v nt kernel integration vsp heap-based buffer overflowCVE-2025-21333Jan 14, 2025
- Microsoft Windows bug: kernel-mode driver untrusted pointer dereference vulnerabilityCVE-2024-35250Dec 16, 2024
- Microsoft Windows bug: common log file system (clfs) driver heap-based buffer overflowCVE-2024-49138Dec 10, 2024
- Microsoft Windows bug: ntlmv2 hash disclosure spoofingCVE-2024-43451Nov 12, 2024
- Microsoft Windows bug: task scheduler privilege escalationCVE-2024-49039Nov 12, 2024
- Microsoft Windows bug: kernel TOCTOU race conditionCVE-2024-30088Oct 15, 2024
- Microsoft Windows bug: mshtml platform spoofingCVE-2024-43573Oct 8, 2024
- Microsoft Windows bug: management console remote code executionCVE-2024-43572Oct 8, 2024
- Microsoft Windows bug: mshtml platform spoofingCVE-2024-43461Sep 16, 2024
- Microsoft Windows bug: mark of the web (motw) protection mechanism failureCVE-2024-38217Sep 10, 2024
- Microsoft Windows bug: installer improper privilege managementCVE-2024-38014Sep 10, 2024
- Microsoft Windows bug: power dependency coordinator privilege escalationCVE-2024-38107Aug 13, 2024
- Microsoft Windows bug: kernel privilege escalationCVE-2024-38106Aug 13, 2024
- Microsoft Windows bug: ancillary function driver for winsock privilege escalationCVE-2024-38193Aug 13, 2024
- Microsoft Windows bug: smartscreen security feature bypassCVE-2024-38213Aug 13, 2024
- Microsoft Windows bug: scripting engine memory corruptionCVE-2024-38178Aug 13, 2024
- Microsoft Windows bug: com for windows deserialization of untrusted dataCVE-2018-0824Aug 5, 2024
- Microsoft Windows bug: hyper-v privilege escalationCVE-2024-38080Jul 9, 2024
- Microsoft Windows bug: mshtml platform spoofingCVE-2024-38112Jul 9, 2024
- Microsoft Windows bug: error reporting service improper privilege managementCVE-2024-26169Jun 13, 2024
- Microsoft Windows bug: mshtml platform security feature bypassCVE-2024-30040May 14, 2024
- Microsoft Windows bug: print spooler privilege escalation vulnerabilityCVE-2022-38028Apr 23, 2024
- Microsoft Windows bug: kernel exposed ioctl with insufficient access controlCVE-2024-21338Mar 4, 2024
- Microsoft Windows bug: internet shortcut files security feature bypassCVE-2024-21412Feb 13, 2024
- Microsoft Windows bug: smartscreen security feature bypassCVE-2024-21351Feb 13, 2024
- Microsoft Windows bug: mark of the web (motw) security feature bypassCVE-2023-36584Nov 16, 2023
- Microsoft Windows bug: desktop window manager (dwm) core library privilege escalationCVE-2023-36033Nov 14, 2023
- Microsoft Windows bug: smartscreen security feature bypassCVE-2023-36025Nov 14, 2023
- Microsoft Windows bug: cloud files mini filter driver privilege escalationCVE-2023-36036Nov 14, 2023
- Microsoft Windows CNG Key Isolation Service bug: key isolation service privilege escalationCVE-2023-28229Oct 4, 2023
- Microsoft Windows bug: search remote code executionCVE-2023-36884Jul 17, 2023
- Microsoft Windows bug: mshtml platform privilege escalationCVE-2023-32046Jul 11, 2023
- Microsoft Windows bug: defender smartscreen security feature bypassCVE-2023-32049Jul 11, 2023
- Microsoft Windows bug: error reporting service privilege escalationCVE-2023-36874Jul 11, 2023
- Microsoft Win32k bug: privilege escalationCVE-2016-0165Jun 22, 2023
- Microsoft Win32k bug: privilege escalationCVE-2023-29336May 9, 2023
- Microsoft Windows bug: common log file system (clfs) driver privilege escalationCVE-2023-28252Apr 11, 2023
- Microsoft Windows bug: certificate dialog privilege escalationCVE-2019-1388Apr 7, 2023
- Microsoft Windows bug: smartscreen security feature bypassCVE-2023-24880Mar 14, 2023
- Microsoft Windows bug: common log file system (clfs) driver privilege escalationCVE-2023-23376Feb 14, 2023
- Microsoft Windows bug: graphic component privilege escalationCVE-2023-21823Feb 14, 2023
- Microsoft Windows bug: advanced local procedure call (alpc) privilege escalationCVE-2023-21674Jan 10, 2023
- Microsoft Windows bug: mark of the web (motw) security feature bypassCVE-2022-41049Nov 14, 2022
- Microsoft Windows bug: mark of the web (motw) security feature bypassCVE-2022-41091Nov 8, 2022
- Microsoft Windows bug: print spooler privilege escalationCVE-2022-41073Nov 8, 2022
- Microsoft Windows bug: cng key isolation service privilege escalationCVE-2022-41125Nov 8, 2022
- Microsoft Windows bug: scripting languages remote code executionCVE-2022-41128Nov 8, 2022
- Microsoft Windows COM+ Event System Service bug: com+ event system service privilege escalationCVE-2022-41033Oct 11, 2022
- Microsoft Windows bug: remote code executionCVE-2010-2568Sep 15, 2022
- Microsoft Windows bug: common log file system (clfs) driver privilege escalationCVE-2022-37969Sep 14, 2022
- Microsoft Windows bug: runtime remote code executionCVE-2022-21971Aug 18, 2022
- Microsoft Windows bug: support diagnostic tool (msdt) remote code executionCVE-2022-34713Aug 9, 2022
- Microsoft Windows bug: client server runtime subsystem (csrss) privilege escalationCVE-2022-22047Jul 12, 2022
- Microsoft Windows bug: lsa spoofingCVE-2022-26925Jul 1, 2022
- Microsoft Windows bug: support diagnostic tool (msdt) remote code executionCVE-2022-30190Jun 14, 2022
- Microsoft Windows bug: authenticode signature verification remote code executionCVE-2012-0151Jun 8, 2022
- Microsoft Windows bug: graphics device interface (gdi) remote code executionCVE-2016-3393May 25, 2022
- Microsoft Windows bug: open type font remote code executionCVE-2016-7256May 25, 2022
- Microsoft Windows bug: ts webproxy directory traversalCVE-2015-0016May 25, 2022
- Microsoft Win32k bug: privilege escalationCVE-2015-2360May 25, 2022
- Microsoft Windows bug: mount manager privilege escalationCVE-2015-1769May 25, 2022
- Microsoft Windows bug: kernel privilege escalationCVE-2015-6175May 25, 2022
- Microsoft Windows bug: remote code executionCVE-2015-1671May 25, 2022
- Microsoft Windows bug: remote code executionCVE-2014-4148May 25, 2022
- Microsoft Windows bug: kernel privilege escalationCVE-2018-8611May 24, 2022
- Microsoft Windows bug: graphics device interface (gdi) privilege escalationCVE-2017-0005May 24, 2022
- Microsoft Windows bug: search remote code executionCVE-2017-8543May 24, 2022
- Microsoft Windows bug: kernel privilege escalationCVE-2020-1027May 23, 2022
- Microsoft Windows bug: SMB information disclosureCVE-2019-0703May 23, 2022
- Microsoft Windows bug: privilege escalationCVE-2019-0880May 23, 2022
- Microsoft Windows bug: appx deployment extensions privilege escalationCVE-2019-1385May 23, 2022
- Microsoft Windows bug: appx deployment service privilege escalationCVE-2019-1130May 23, 2022
- Microsoft Win32k bug: privilege escalationCVE-2018-8589May 23, 2022
- Microsoft Win32k bug: privilege escalationCVE-2014-4113May 4, 2022
- Microsoft Windows bug: user profile service privilege escalationCVE-2022-26904Apr 25, 2022
- Microsoft Windows bug: user profile service privilege escalationCVE-2022-21919Apr 25, 2022
- Microsoft Win32k bug: privilege escalationCVE-2021-41357Apr 25, 2022
- Microsoft Win32k bug: privilege escalationCVE-2021-40450Apr 25, 2022
- Microsoft Windows bug: print spooler privilege escalationCVE-2022-22718Apr 19, 2022
- Microsoft Windows bug: clfs driver privilege escalationCVE-2022-24521Apr 13, 2022
- Microsoft Windows bug: user profile service privilege escalationCVE-2021-34484Mar 31, 2022
- Microsoft Windows bug: event tracing privilege escalationCVE-2021-34486Mar 28, 2022
- Microsoft Windows bug: privilege escalationCVE-2018-8440Mar 28, 2022
- Microsoft Windows bug: privilege escalationCVE-2017-0213Mar 28, 2022
- Microsoft Windows bug: kernel privilege escalationCVE-2016-0040Mar 28, 2022
- Microsoft Windows bug: adobe type manager library remote code executionCVE-2015-2426Mar 28, 2022
- Microsoft Win32k bug: privilege escalationCVE-2013-3660Mar 28, 2022
- Microsoft Windows bug: kernel stack-based buffer overflowCVE-2010-4398Mar 28, 2022
- Microsoft Windows bug: print spooler privilege escalationCVE-2022-21999Mar 25, 2022
- Microsoft Windows bug: shell remote code executionCVE-2018-8414Mar 25, 2022
- Microsoft Windows bug: SMB remote code executionCVE-2017-0146Mar 25, 2022
- Microsoft Windows bug: object linking & embedding (ole) automation array remote code executionCVE-2014-6332Mar 25, 2022
- Microsoft Windows bug: universal plug and play (upnp) service privilege escalationCVE-2019-1405Mar 15, 2022
- Microsoft Windows bug: privilege escalationCVE-2019-1322Mar 15, 2022
- Microsoft Windows bug: error reporting manager privilege escalationCVE-2019-1315Mar 15, 2022
- Microsoft Windows bug: appx deployment server privilege escalationCVE-2019-1253Mar 15, 2022
- Microsoft Win32k bug: privilege escalationCVE-2019-1132Mar 15, 2022
- Microsoft Windows bug: appx deployment service (appxsvc) privilege escalationCVE-2019-1129Mar 15, 2022
- Microsoft Windows bug: appx deployment service (appxsvc) privilege escalationCVE-2019-1064Mar 15, 2022
- Microsoft Windows bug: appx deployment service (appxsvc) privilege escalationCVE-2019-0841Mar 15, 2022
- Microsoft Windows bug: privilege escalationCVE-2019-0543Mar 15, 2022
- Microsoft Win32k bug: privilege escalationCVE-2018-8120Mar 15, 2022
- Microsoft Windows bug: transaction manager privilege escalationCVE-2017-0101Mar 15, 2022
- Microsoft Windows bug: kernel privilege escalationCVE-2016-3309Mar 15, 2022
- Microsoft Win32k bug: memory corruptionCVE-2015-2546Mar 15, 2022
- Microsoft Windows bug: installer privilege escalationCVE-2021-41379Mar 3, 2022
- Microsoft Windows bug: secondary logon service privilege escalationCVE-2016-0099Mar 3, 2022
- Microsoft Win32k bug: privilege escalationCVE-2015-1701Mar 3, 2022
- Microsoft Windows bug: object linking & embedding (ole) remote code executionCVE-2014-4114Mar 3, 2022
- Microsoft Windows bug: kernel privilege escalationCVE-2013-5065Mar 3, 2022
- Microsoft Windows bug: kernel exception handlerCVE-2010-0232Mar 3, 2022
- Microsoft Windows bug: improper input validationCVE-2009-1123Mar 3, 2022
- Microsoft Windows bug: privilege escalationCVE-2004-0210Mar 3, 2022
- Microsoft Windows bug: privilege escalationCVE-2002-0367Mar 3, 2022
- Microsoft Windows bug: code injectionCVE-2014-6352Feb 25, 2022
- Microsoft Windows bug: vbscript engine out-of-bounds writeCVE-2018-8174Feb 15, 2022
- Microsoft Windows bug: sam local privilege escalationCVE-2021-36934Feb 10, 2022
- Microsoft Windows bug: shell (.lnk) remote code executionCVE-2017-8464Feb 10, 2022
- Microsoft Win32k bug: privilege escalationCVE-2017-0263Feb 10, 2022
- Microsoft Win32k bug: privilege escalationCVE-2022-21882Feb 4, 2022
- Microsoft Windows bug: background intelligent transfer service (bits) improper privilege managementCVE-2020-0787Jan 28, 2022
- Microsoft Win32k bug: privilege escalationCVE-2018-8453Jan 21, 2022
- Microsoft Win32k bug: privilege escalationCVE-2019-1458Jan 10, 2022
- Microsoft Windows bug: appx installer spoofingCVE-2021-43890Dec 15, 2021
- Microsoft Windows bug: win32k privilege escalationCVE-2021-40449Nov 17, 2021
- Microsoft Windows bug: group policy preferences password privilege escalationCVE-2014-1812Nov 3, 2021
- Microsoft Win32k bug: privilege escalationCVE-2016-0167Nov 3, 2021
- Microsoft Windows bug: kernel information disclosureCVE-2021-31955Nov 3, 2021
- Microsoft Windows bug: desktop window manager (dwm) core library privilege escalationCVE-2021-33739Nov 3, 2021
- Microsoft Windows bug: media center remote code executionCVE-2016-0185Nov 3, 2021
- Microsoft Windows bug: installer privilege escalationCVE-2020-0683Nov 3, 2021
- Microsoft Windows bug: kernel privilege escalationCVE-2020-17087Nov 3, 2021
- Microsoft Windows bug: mshtml platform remote code executionCVE-2021-33742Nov 3, 2021
- Microsoft Windows bug: kernel privilege escalationCVE-2021-33771Nov 3, 2021
- Microsoft Windows bug: ntfs privilege escalationCVE-2021-31956Nov 3, 2021
- Microsoft Windows bug: kernel privilege escalationCVE-2021-31979Nov 3, 2021
- Microsoft Windows bug: adobe font manager library remote code executionCVE-2020-0938Nov 3, 2021
- Microsoft Windows bug: kernel privilege escalationCVE-2020-0986Nov 3, 2021
- Microsoft Windows bug: adobe font manager library remote code executionCVE-2020-1020Nov 3, 2021
- Microsoft Windows bug: update medic service privilege escalationCVE-2021-36948Nov 3, 2021
- Microsoft Windows bug: server message block (smbv1) remote code executionCVE-2017-0143Nov 3, 2021
- Microsoft Win32k bug: privilege escalationCVE-2016-7255Nov 3, 2021
- Microsoft Windows bug: spoofingCVE-2020-1464Nov 3, 2021
- Microsoft Win32k bug: privilege escalationCVE-2021-1732Nov 3, 2021
- Microsoft Windows bug: print spooler remote code executionCVE-2021-34527Nov 3, 2021
- Microsoft Win32k bug: privilege escalationCVE-2019-0803Nov 3, 2021
- Microsoft Win32k bug: privilege escalationCVE-2021-28310Nov 3, 2021
- Microsoft Windows bug: dns server remote code executionCVE-2020-1350Nov 3, 2021
- Microsoft Win32k bug: privilege escalationCVE-2019-0859Nov 3, 2021
- Microsoft Win32k bug: privilege escalationCVE-2019-0797Nov 3, 2021
- Microsoft Windows bug: local security authority (lsa) spoofingCVE-2021-36942Nov 3, 2021
- Microsoft Windows bug: privilege escalationCVE-2019-1215Nov 3, 2021
- Microsoft Win32k bug: privilege escalationCVE-2020-1054Nov 3, 2021
- Microsoft Windows bug: print spooler remote code executionCVE-2021-1675Nov 3, 2021
- Microsoft Windows bug: scripting engine memory corruptionCVE-2021-34448Nov 3, 2021
- Microsoft Windows bug: cryptoapi spoofingCVE-2020-0601Nov 3, 2021
- Microsoft Win32k bug: privilege escalationCVE-2019-0808Nov 3, 2021
- Microsoft Windows bug: privilege common log file system (clfs) escalationCVE-2019-1214Nov 3, 2021
- Microsoft Windows bug: error reporting (wer) privilege escalationCVE-2019-0863Nov 3, 2021
- Microsoft Windows bug: common log file system (clfs) driver privilege escalationCVE-2021-36955Nov 3, 2021
From the US government's list of bugs confirmed in real attacks (CISA KEV). Check everything you use.