Class familyMicrosoft · Windows
Microsoft Windows input validation flaws, 2009–2026
73 Windows CVEs with CWE-20 weaknesses, 10 Jun 2009 to 13 Oct 2026. 13 are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2009’09
1 2010’10
2011’11
1 2012’12
1 2013’13
1 2014’14
2015’15
1 2016’16
2 2017’17
1 2018’18
2019’19
1 2020’20
2021’21
1 2022’22
9 2023’23
12 2024’24
21 2025’25
20 2026’26
In CISA KEVNot in KEV
20091 CVE, 1 in KEV
20101 CVE, 1 in KEV
20121 CVE, 1 in KEV
20131 CVE, 1 in KEV
20141 CVE, 1 in KEV
20161 CVE, 1 in KEV
20172 CVEs, 2 in KEV
20181 CVE, 1 in KEV
20201 CVE, 1 in KEV
20221 CVE, 1 in KEV
20239 CVEs
202412 CVEs, 1 in KEV
202521 CVEs, 1 in KEV
202620 CVEs
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2009-1123KEV | 10 Jun 2009 | Microsoft Windows Improper Input Validation Vulnerability | Grouped by weakness | 61.9 |
| CVE-2010-2568KEV | 22 Jul 2010 | Microsoft Windows Remote Code Execution Vulnerability | Grouped by weakness | 77.4 |
| CVE-2012-0151KEV | 10 Apr 2012 | Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability | Grouped by weakness | 63.4 |
| CVE-2013-5065KEV | 28 Nov 2013 | Microsoft Windows Kernel Privilege Escalation Vulnerability | Grouped by weakness | 68.1 |
| CVE-2014-4114KEV | 15 Oct 2014 | Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability | Grouped by weakness | 77.4 |
| CVE-2016-0185KEV | 11 May 2016 | Microsoft Windows Media Center Remote Code Execution Vulnerability | Grouped by weakness | 68.3 |
| CVE-2017-0143KEV | 17 Mar 2017 | Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability | Grouped by weakness | 83.0 |
| CVE-2017-0146KEV | 17 Mar 2017 | Microsoft Windows SMB Remote Code Execution Vulnerability | Grouped by weakness | 79.1 |
| CVE-2018-8414KEV | 15 Aug 2018 | Microsoft Windows Shell Remote Code Execution Vulnerability | Grouped by weakness | 69.0 |
| CVE-2020-1350KEV | 14 Jul 2020 | Microsoft Windows DNS Server Remote Code Execution Vulnerability | Grouped by weakness | 73.8 |
| CVE-2022-37969KEV | 13 Sep 2022 | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | Grouped by weakness | 78.1 |
| CVE-2023-21558 | 10 Jan 2023 | Windows Error Reporting Service Elevation of Privilege Vulnerability | Grouped by weakness | 13.6 |
| CVE-2023-21749 | 10 Jan 2023 | Windows Kernel Elevation of Privilege Vulnerability | Grouped by weakness | 17.0 |
| CVE-2023-21767 | 10 Jan 2023 | Windows Overlay Filter Elevation of Privilege Vulnerability | Grouped by weakness | 13.6 |
| CVE-2023-23419 | 14 Mar 2023 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | Grouped by weakness | 12.2 |
| CVE-2023-28274 | 11 Apr 2023 | Windows Win32k Elevation of Privilege Vulnerability | Grouped by weakness | 24.3 |
| CVE-2023-29371 | 13 Jun 2023 | Windows GDI Elevation of Privilege Vulnerability | Grouped by weakness | 24.0 |
| CVE-2023-35336 | 11 Jul 2023 | Windows MSHTML Platform Security Feature Bypass Vulnerability | Grouped by weakness | 16.6 |
| CVE-2023-36731 | 10 Oct 2023 | Win32k Elevation of Privilege Vulnerability | Grouped by weakness | 24.2 |
| CVE-2023-36407 | 14 Nov 2023 | Windows Hyper-V Elevation of Privilege Vulnerability | Grouped by weakness | 26.0 |
| CVE-2024-21316 | 9 Jan 2024 | Windows Server Key Distribution Service Security Feature Bypass | Grouped by weakness | 19.0 |
| CVE-2024-26173 | 12 Mar 2024 | Windows Kernel Elevation of Privilege Vulnerability | Grouped by weakness | 17.3 |
| CVE-2024-30040KEV | 14 May 2024 | Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability | Grouped by weakness | 62.2 |
| CVE-2024-30078 | 11 Jun 2024 | Windows Wi-Fi Driver Remote Code Execution Vulnerability | Grouped by weakness | 24.7 |
| CVE-2024-30087 | 11 Jun 2024 | Win32k Elevation of Privilege Vulnerability | Grouped by weakness | 24.5 |
| CVE-2024-38196 | 13 Aug 2024 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Grouped by weakness | 61.0 |
| CVE-2024-38241 | 10 Sep 2024 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability | Grouped by weakness | 24.1 |
| CVE-2024-38243 | 10 Sep 2024 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability | Grouped by weakness | 16.5 |
| CVE-2024-38244 | 10 Sep 2024 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability | Grouped by weakness | 24.2 |
| CVE-2024-38245 | 10 Sep 2024 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability | Grouped by weakness | 17.2 |
| CVE-2024-20659 | 8 Oct 2024 | Windows Hyper-V Security Feature Bypass Vulnerability | Grouped by weakness | 17.2 |
| CVE-2024-49073 | 10 Dec 2024 | Windows Mobile Broadband Driver Elevation of Privilege Vulnerability | Grouped by weakness | 16.6 |
| CVE-2025-21234 | 14 Jan 2025 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability | Grouped by weakness | 15.2 |
| CVE-2025-21235 | 14 Jan 2025 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability | Grouped by weakness | 15.2 |
| CVE-2025-24058 | 8 Apr 2025 | Windows DWM Core Library Elevation of Privilege Vulnerability | Grouped by weakness | 15.1 |
| CVE-2025-24060 | 8 Apr 2025 | Microsoft DWM Core Library Elevation of Privilege Vulnerability | Grouped by weakness | 15.1 |
| CVE-2025-24062 | 8 Apr 2025 | Microsoft DWM Core Library Elevation of Privilege Vulnerability | Grouped by weakness | 15.1 |
| CVE-2025-24073 | 8 Apr 2025 | Microsoft DWM Core Library Elevation of Privilege Vulnerability | Grouped by weakness | 15.1 |
| CVE-2025-24074 | 8 Apr 2025 | Microsoft DWM Core Library Elevation of Privilege Vulnerability | Grouped by weakness | 15.1 |
| CVE-2025-26647 | 8 Apr 2025 | Windows Kerberos Elevation of Privilege Vulnerability | Grouped by weakness | 22.7 |
| CVE-2025-27731 | 8 Apr 2025 | Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability | Grouped by weakness | 15.5 |
| CVE-2025-29811 | 8 Apr 2025 | Windows Mobile Broadband Driver Elevation of Privilege Vulnerability | Grouped by weakness | 15.1 |
| CVE-2025-32706KEV | 13 May 2025 | Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability | Grouped by weakness | 65.2 |
| CVE-2025-47982 | 8 Jul 2025 | Windows Storage VSP Driver Elevation of Privilege Vulnerability | Grouped by weakness | 12.9 |
| CVE-2025-55679 | 14 Oct 2025 | Windows Kernel Information Disclosure Vulnerability | Grouped by weakness | 11.6 |
| CVE-2025-55692 | 14 Oct 2025 | Windows Error Reporting Service Elevation of Privilege Vulnerability | Grouped by weakness | 23.2 |
| CVE-2025-58716 | 14 Oct 2025 | Windows Speech Runtime Elevation of Privilege Vulnerability | Grouped by weakness | 12.8 |
| CVE-2025-59187 | 14 Oct 2025 | Windows Kernel Elevation of Privilege Vulnerability | Grouped by weakness | 10.1 |
| CVE-2025-59190 | 14 Oct 2025 | Windows Search Service Denial of Service Vulnerability | Grouped by weakness | 12.4 |
| CVE-2025-59198 | 14 Oct 2025 | Windows Search Service Denial of Service Vulnerability | Grouped by weakness | 11.7 |
| CVE-2025-59207 | 14 Oct 2025 | Windows Kernel Elevation of Privilege Vulnerability | Grouped by weakness | 12.7 |
| CVE-2025-62455 | 9 Dec 2025 | Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability | Grouped by weakness | 13.6 |
| CVE-2025-62571 | 9 Dec 2025 | Windows Installer Elevation of Privilege Vulnerability | Grouped by weakness | 12.3 |
| CVE-2026-21247 | 10 Feb 2026 | Windows Hyper-V Remote Code Execution Vulnerability | Grouped by weakness | 14.7 |
| CVE-2026-26161 | 14 Apr 2026 | Windows Sensor Data Service Elevation of Privilege Vulnerability | Grouped by weakness | 10.0 |
| CVE-2026-26170 | 14 Apr 2026 | PowerShell Elevation of Privilege Vulnerability | Grouped by weakness | 8.2 |
| CVE-2026-27906 | 14 Apr 2026 | Windows Hello Security Feature Bypass Vulnerability | Grouped by weakness | 9.6 |
| CVE-2026-32149 | 14 Apr 2026 | Windows Hyper-V Remote Code Execution Vulnerability | Grouped by weakness | 10.0 |
| CVE-2026-33826 | 14 Apr 2026 | Windows Active Directory Remote Code Execution Vulnerability | Grouped by weakness | 19.6 |
| CVE-2026-44811 | 9 Jun 2026 | Windows DWM Core Library Elevation of Privilege Vulnerability | Grouped by weakness | 9.2 |
| CVE-2026-50417 | 14 Jul 2026 | Windows NTFS Remote Code Execution Vulnerability | Grouped by weakness | 10.8 |
| CVE-2026-50670 | 14 Jul 2026 | Windows Win32k Elevation of Privilege Vulnerability | Grouped by weakness | 11.5 |
| CVE-2026-69270 | 8 Sep 2026 | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | Grouped by weakness | 10.8 |
| CVE-2026-69293 | 8 Sep 2026 | Windows Biometric Service Elevation of Privilege Vulnerability | Grouped by weakness | 10.8 |
| CVE-2026-69295 | 8 Sep 2026 | Windows USB Driver Elevation of Privilege Vulnerability | Grouped by weakness | 10.8 |
| CVE-2026-69352 | 8 Sep 2026 | Windows Biometric Service Elevation of Privilege Vulnerability | Grouped by weakness | 10.8 |
| CVE-2026-70573 | 8 Sep 2026 | Windows Biometric Service Elevation of Privilege Vulnerability | Grouped by weakness | 9.0 |
| CVE-2026-70581 | 8 Sep 2026 | Windows Biometric Service Elevation of Privilege Vulnerability | Grouped by weakness | 10.8 |
| CVE-2026-72994 | 8 Sep 2026 | Windows Biometric Service Elevation of Privilege Vulnerability | Grouped by weakness | 10.8 |
| CVE-2026-72996 | 8 Sep 2026 | Windows Biometric Service Elevation of Privilege Vulnerability | Grouped by weakness | 10.8 |
| CVE-2026-73021 | 8 Sep 2026 | Windows Biometric Service Elevation of Privilege Vulnerability | Grouped by weakness | 10.8 |
| CVE-2026-69934 | 13 Oct 2026 | Windows Spaceport.sys Elevation of Privilege Vulnerability | Grouped by weakness | 11.8 |
| CVE-2026-70177 | 13 Oct 2026 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Grouped by weakness | 11.3 |