Class familyMicrosoft · Windows
Microsoft Windows deserialization flaws, 2018–2026
7 Windows CVEs with CWE-502 weaknesses, 9 May 2018 to 13 Oct 2026. 2 are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2018’18
2019’19
2020’20
2021’21
2022’22
2023’23
2024’24
1 2025’25
5 2026’26
In CISA KEVNot in KEV
20181 CVE, 1 in KEV
20251 CVE, 1 in KEV
20265 CVEs
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2018-0824KEV | 9 May 2018 | Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability | Grouped by weakness | 69.1 |
| CVE-2025-59287KEV | 14 Oct 2025 | Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability | Grouped by weakness | 79.9 |
| CVE-2026-25166 | 10 Mar 2026 | Windows System Image Manager Assessment and Deployment Kit (ADK) Remote Code Execution Vulnerability | Grouped by weakness | 20.9 |
| CVE-2026-50509 | 14 Jul 2026 | Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability | Grouped by weakness | 23.3 |
| CVE-2026-69694 | 8 Sep 2026 | Windows IP Address Management (IPAM) Service Elevation of Privilege Vulnerability | Grouped by weakness | 22.2 |
| CVE-2026-88091 | 13 Oct 2026 | Windows Management Instrumentation Elevation of Privilege Vulnerability | Grouped by weakness | 22.9 |
| CVE-2026-96186 | 13 Oct 2026 | Microsoft Windows Media Foundation Elevation of Privilege Vulnerability | Grouped by weakness | 22.3 |