Windows Kernel vulnerabilities
107 known CVE vulnerabilities in Windows Kernel, translated and rated.
- CVE-2026-97803High
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-35420High
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2017-11847High
The Windows kernel vulnerability allows an attacker to run arbitrary code in kernel mode, which can lead to installing programs, changing or deleting data, and creating new accounts with full user rights.
- CVE-2017-8561High
The Windows kernel has a privilege escalation vulnerability due to the way it handles objects in memory. This affects multiple versions of Windows, including Windows 8.1, Windows 10, and Windows Server 2016.
- CVE-2026-49798Critical
Use-after-free vulnerability in the Windows kernel allows an unauthorized attacker to elevate privileges locally.
- CVE-2026-45657Critical
A use-after-free vulnerability in the Windows Kernel allows an unauthorized attacker to execute code remotely over a network.
- CVE-2026-40369High
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-24289High
A use after free vulnerability in the Windows Kernel allows an authorized attacker to locally elevate privileges.
- CVE-2025-62215HighActively exploited
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2024-38106HighActively exploited
A vulnerability in the Windows Kernel allows for elevation of privilege. The NVD description does not provide technical details or required user interaction.
- CVE-2024-30088HighActively exploited
A vulnerability in the Windows kernel allows elevation of privilege. This flaw can be exploited by a local attacker to gain higher privileges on the system.
- CVE-2024-21371High
Elevation of privilege vulnerability in the Windows kernel. Allows a local attacker to gain elevated privileges.
- CVE-2024-21338HighActively exploited
Elevation of privilege vulnerability in the Windows kernel, allowing an attacker to gain higher privileges on the system.
- CVE-2023-35386High
A vulnerability in the Windows kernel allows for privilege escalation, potentially leading to unauthorized access to the system.
- CVE-2023-35382High
A vulnerability in the Windows kernel allows for privilege escalation, potentially leading to unauthorized access to the system.
- CVE-2023-35359High
A vulnerability in the Windows kernel allows for privilege escalation, potentially leading to unauthorized access to the system.
- CVE-2021-34458Critical
Remote code execution vulnerability in the Windows kernel. It could allow an attacker to execute code in the kernel context.
- CVE-2021-33771HighActively exploited
Elevation of privilege vulnerability in Windows Kernel. Could be exploited to gain administrative privileges.
- CVE-2021-31979HighActively exploited
Elevation of privilege vulnerability in Windows Kernel. Could be exploited to gain administrative privileges.
- CVE-2021-31955MediumActively exploited
Windows Kernel Information Disclosure Vulnerability.
- CVE-2020-17087HighActively exploited
A local elevation of privilege vulnerability in the Windows kernel. Technical details are not provided in the description.
- CVE-2020-0986HighActively exploited
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266, CVE-2020-1269, CVE-2020-1273, CVE-2020-1274, CVE-2020-1275, CVE-2020-1276, CVE-2020-1307, CVE-2020-1316.
- CVE-2020-1027HighActively exploited
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'.
- CVE-2026-85360High
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-83942High
Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-69723Medium
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information over a network.
- CVE-2026-69669High
Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to execute code over a network.
- CVE-2026-69578High
Numeric truncation error in the Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-69473High
Use after free in Windows Kernel. Allows an authorized attacker to elevate privileges locally.
- CVE-2026-69466High
Time-of-check time-of-use (TOCTOU) race condition in Windows Kernel. Allows an authorized attacker to elevate privileges locally.
- CVE-2026-69406Medium
Exposure of sensitive system information in the Windows Kernel allows an authorized attacker to disclose information locally.
- CVE-2026-69366High
Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network.
- CVE-2026-68884High
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-68846High
Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network.
- CVE-2026-65773High
Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-62788High
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-62780High
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-62749High
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-62737High
Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-62708Medium
Use after free in the Windows Kernel allows an unauthorized attacker to elevate privileges via a physical attack.
- CVE-2026-61930High
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-61929High
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-54113High
Allocation of resources without limits or throttling in Windows Kernel allows an unauthorized attacker to deny service over a network.
- CVE-2026-58545Medium
Improper access control vulnerability in Windows Kernel. An authorized attacker can bypass a security feature locally.
- CVE-2026-58532High
Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-56644High
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-56643High
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-50688High
A Use-After-Free vulnerability in the Windows kernel allows an authorized attacker to elevate privileges locally. The issue stems from improper memory management in the kernel, potentially leading to arbitrary code execution in kernel context.
- CVE-2026-50687High
Use-after-free vulnerability in Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-50673High
A null pointer dereference vulnerability in the Windows kernel allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

