Is Windows safe right now?
1 flaw was added to CISA's list of actively exploited vulnerabilities in the last 30 days, including zero-days. If you run Windows, update now.
Exploited in the last 90 days
- WindowsZero-dayA Windows flaw lets booby-trapped files skip the “Are you sure?” warning
What to do: Open Settings, go to Windows Update, select Check for updates, then install and restart. October was also the last update for Windows 11 24H2 Home and Pro, so upgrade if you're on that version.
Fixed in: October 2026 security update
- WindowsZero-dayMicrosoft Windows Heap-Based Buffer Overflow Vulnerability
What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.
- WindowsZero-dayMicrosoft Windows Link Following Vulnerability
What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.
- Internet Key Exchange (IKE) Service ExtensionsMicrosoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability
What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.
- Windows Ancillary Function Driver for WinSock Zero-dayMicrosoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.
Earlier exploited flaws
- Microsoft Defender Denial of Service Vulnerability Zero-day
- Microsoft Defender Link Following Vulnerability Zero-day
- Microsoft Internet Explorer Use-After-Free Vulnerability
- Microsoft Internet Explorer Use-After-Free Vulnerability
- Microsoft DirectX NULL Byte Overwrite Vulnerability
- Microsoft Windows Buffer Overflow Vulnerability
- Microsoft Exchange Server Cross-Site Scripting Vulnerability Zero-day
- Microsoft Windows Protection Mechanism Failure Vulnerability
- Microsoft Defender Insufficient Granularity of Access Control Vulnerability
- Microsoft Windows Link Following Vulnerability
- Microsoft Windows Out-of-Bounds Read Vulnerability
- Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability
- Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability
- Microsoft Configuration Manager SQL Injection Vulnerability
- Microsoft Windows Improper Privilege Management Vulnerability Zero-day
By year
| Year | Exploited flaws added | Zero-days |
|---|---|---|
| 2026 (so far) | 25 | 13 |
| 2025 | 34 | 23 |
| 2024 | 30 | 21 |
| 2023 | 22 | 16 |
| 2022 | 135 | 11 |
Questions
Is Windows safe right now?
1 flaw was added to CISA's list of actively exploited vulnerabilities in the last 30 days, including zero-days. If you run Windows, update now. Confirm with the vendor's own advisories and install updates as soon as they're available.
How many Windows vulnerabilities have been exploited?
304 flaws are on CISA's list of vulnerabilities known to be exploited in real attacks, 86 of them used by ransomware.
Covers products matching windows, win32k, microsoft. Sources: CISA's Known Exploited Vulnerabilities catalog and the vendors' own advisories. Updated every hour. General information only; confirm details with the vendor.