VendorsMicrosoftwindowsall versions

Vulnerabilities

Microsoft Windows

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

10356CVEs

ZDI-CAN-22172: Adobe After Effects AEP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Published 2023-12-13 · Modified

7.8EPSS 0.003

Acrobat Reader | Stack-based Buffer Overflow (CWE-121)

Published 2026-06-09 · Analyzed

7.8EPSS 0.003

Acrobat Reader | Heap-based Buffer Overflow (CWE-122)

Published 2026-07-17 · Analyzed

7.8EPSS 0.003

Bridge | Heap-based Buffer Overflow (CWE-122)

Published 2026-04-14 · Analyzed

7.8EPSS 0.003

Acrobat Reader | Heap-based Buffer Overflow (CWE-122)

Published 2026-06-09 · Analyzed

7.8EPSS 0.003

InCopy | Heap-based Buffer Overflow (CWE-122)

Published 2026-06-09 · Analyzed

7.8EPSS 0.003

After Effects | Stack-based Buffer Overflow (CWE-121)

Published 2026-05-12 · Modified

7.8EPSS 0.003

Illustrator | Heap-based Buffer Overflow (CWE-122)

Published 2026-05-12 · Analyzed

7.8EPSS 0.003

InCopy | Stack-based Buffer Overflow (CWE-121)

Published 2026-06-09 · Analyzed

7.8EPSS 0.003

Illustrator | Heap-based Buffer Overflow (CWE-122)

Published 2026-03-10 · Analyzed

7.8EPSS 0.003

InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

Published 2026-06-09 · Analyzed

7.8EPSS 0.003

InDesign Desktop | Stack-based Buffer Overflow (CWE-121)

Published 2026-06-09 · Analyzed

7.8EPSS 0.003

Bridge | Heap-based Buffer Overflow (CWE-122)

Published 2026-04-14 · Analyzed

7.8EPSS 0.003

InDesign Desktop | Stack-based Buffer Overflow (CWE-121)

Published 2026-06-09 · Analyzed

7.8EPSS 0.003

Bridge | Heap-based Buffer Overflow (CWE-122)

Published 2026-04-14 · Analyzed

7.8EPSS 0.003

InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

Published 2026-06-09 · Analyzed

7.8EPSS 0.003

Adobe Framemaker | Heap-based Buffer Overflow (CWE-122)

Published 2026-04-14 · Analyzed

7.8EPSS 0.003

Bridge | Heap-based Buffer Overflow (CWE-122)

Published 2026-04-14 · Analyzed

7.8EPSS 0.003

InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

Published 2026-04-14 · Modified

7.8EPSS 0.003

Bridge | Heap-based Buffer Overflow (CWE-122)

Published 2026-04-14 · Analyzed

7.8EPSS 0.003

Acrobat Reader | Heap-based Buffer Overflow (CWE-122)

Published 2026-09-08 · Analyzed

7.8EPSS 0.003

Photoshop Desktop | Heap-based Buffer Overflow (CWE-122)

Published 2026-09-08 · Analyzed

7.8EPSS 0.003

Adobe XD | Buffer Overflow (CWE-120)

Published 2026-08-25 · Analyzed

7.8EPSS 0.003

Illustrator | Stack-based Buffer Overflow (CWE-121)

Published 2026-03-10 · Analyzed

7.8EPSS 0.003

InDesign Desktop | Stack-based Buffer Overflow (CWE-121)

Published 2026-06-09 · Analyzed

7.8EPSS 0.003

Bridge | Heap-based Buffer Overflow (CWE-122)

Published 2026-07-14 · Analyzed

7.8EPSS 0.003

InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

Published 2026-06-09 · Analyzed

7.8EPSS 0.003

InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

Published 2025-06-10 · Analyzed

7.8EPSS 0.003

Adobe InDesign (Beta) has an integer overflow vulnerability when parsing SVG file

Published 2024-08-14 · Analyzed

7.8EPSS 0.003

InDesign Desktop | Use After Free (CWE-416)

Published 2025-06-10 · Analyzed

7.8EPSS 0.003

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two privilege escalation vulnerabilities. A malicious actor with local access can escalate privileges to 'root'.

Published 2022-08-05 · Modified

7.8EPSS 0.003

Photoshop Desktop | Out-of-bounds Write (CWE-787)

Published 2024-09-13 · Analyzed

7.8EPSS 0.003

Illustrator | Use After Free (CWE-416)

Published 2024-09-13 · Analyzed

7.8EPSS 0.003

Adobe Framemaker | Integer Overflow or Wraparound (CWE-190)

Published 2024-10-09 · Analyzed

7.8EPSS 0.003

Adobe Framemaker | Integer Underflow (Wrap or Wraparound) (CWE-191)

Published 2024-10-09 · Analyzed

7.8EPSS 0.003

ZDI-CAN-21257: Adobe Photoshop PSD File Parsing Uninitialized Variable Remote Code Execution Vulnerability

Published 2023-10-11 · Modified

7.8EPSS 0.003

All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a pointer passed from a user to the driver is not correctly validated before it is dereferenced for a write operation, may lead to denial of service or potential escalation of privileges.

Published 2017-05-09 · Modified

7.8EPSS 0.003

Photoshop Desktop | Heap-based Buffer Overflow (CWE-122)

Published 2025-11-11 · Analyzed

7.8EPSS 0.003

When running, the updater service wrote status and log files to an unrestricted location; potentially allowing an unprivileged process to locate and exploit a vulnerability in file handling in the updater service. *Note: This attack requires local system access and only affects Windows. Other operating systems are not affected.*. This vulnerability affects Thunderbird < 68.3, Firefox ESR < 68.3, and Firefox < 71.

Published 2020-01-08 · Modified

7.8EPSS 0.003

Adobe Substance 3D Stager SVG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Published 2023-03-27 · Modified

7.8EPSS 0.003