# CVEs published 2026-11-10

2,000 CVEs were published on November 10, 2026: 84 critical, 1,105 high. 2 are now in CISA KEV. 12 early warnings were posted. This page lists the newest 2000. Days are UTC.
## Early warnings

- [SZB-da10af64ce](https://cve.now/SZB-da10af64ce): Railway says hackers stole customer auth secrets and ran $740,000 in fraudulent AI usage
- [SZB-65bc1bddc8](https://cve.now/SZB-65bc1bddc8): NEAR AI reports SGLang RCE let attacker run code on an inference server
- [SZB-a9c61ebfa0](https://cve.now/SZB-a9c61ebfa0): Microsoft patches record 1,235 flaws, including exploited Outlook zero-day
- [SZB-8a90d04873](https://cve.now/SZB-8a90d04873): Adobe patches 110 vulnerabilities across 9 products
- [SZB-f71a910c08](https://cve.now/SZB-f71a910c08): BleepingComputer reports critical Xen Orchestra auth bypass exploited in attacks
- [SZB-db01d072ad](https://cve.now/SZB-db01d072ad): Attackers exploit AhsayCBS flaws to deploy sandbox-evading Python backdoor
- [SZB-fdab5e09d5](https://cve.now/SZB-fdab5e09d5): Apple patches iMessage flaws that expose group chat messages
- [SZB-40f3a46406](https://cve.now/SZB-40f3a46406): Barracuda warns attackers are exploiting two patched ESG root-access flaws
- [SZB-ea98c8be72](https://cve.now/SZB-ea98c8be72): SAP patches four CVSS 10.0 flaws in NetWeaver and Web Dispatcher
- [SZB-c3df970f8e](https://cve.now/SZB-c3df970f8e): Fireworks AI discloses breach of development machines after cloud provider hack
- [SZB-4703b2a7b4](https://cve.now/SZB-4703b2a7b4): CISA adds four flaws in GPUStack, FreeSWITCH, OpenSSH and IBM Aspera Faspex to KEV
- [SZB-476799c76c](https://cve.now/SZB-476799c76c): Google patches Chrome XML zero-day reported as exploited in attacks

## CVEs

- [CVE-2026-126188](https://cve.now/CVE-2026-126188.md): Active Storage: Possible local file disclosure in Active Storage video previews and analysis (CVSS 3.7, rails)
- [CVE-2026-20183](https://cve.now/CVE-2026-20183.md): ISE Authorization Bypass vulnerability (CVSS 4.3, Cisco Identity Services Engine Software)
- [CVE-2026-126187](https://cve.now/CVE-2026-126187.md): React: Unauthenticated Remote Code Execution in React Server Components (CVSS 9.5, react · react-server-dom-parcel +2)
- [CVE-2024-36309](https://cve.now/CVE-2024-36309.md): Missing Lock Bit Protection in the Northbridge IO (NBIO) could allow a privileged attacker to use an intentionally disabled device as part… (CVSS 4.6, AMD EPYC™ 9004 Series Processors · AMD EPYC™ 7003 Serie… +48)
- [CVE-2026-126261](https://cve.now/CVE-2026-126261.md): A improper authorization vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.5… (CVSS 9.0, Fortinet FortiManager)
- [CVE-2025-0008](https://cve.now/CVE-2025-0008.md): Insufficient verification of data authenticity may allow a local attacker to bypass Secure Debug Unlock (SDU), potentially resulting in… (CVSS 8.4, AMD EPYC™ 7003 Series Processors · AMD EPYC™ 7002 Series… +7)
- [CVE-2025-48504](https://cve.now/CVE-2025-48504.md): Operation on a resource after expiration or release in the Secure Encrypted Virtualization (SEV) firmware could allow a malicious… (CVSS 6.8, AMD EPYC™ 9004 Series Processors · AMD EPYC™ 7003 Series… +7)
- [CVE-2025-29941](https://cve.now/CVE-2025-29941.md): Incorrect usage of seeds in pseudo-random number generator in the Secure Encrypted Virtualization (SEV) firmware could allow a malicious… (CVSS 6.0, AMD EPYC™ 9004 Series Processors · AMD EPYC™ 7003 Series… +7)
- [CVE-2026-0003](https://cve.now/CVE-2026-0003.md): Use of a per-part static key in the ASP Bootloader could allow an attacker to downgrade the Secure Encrypted Virtualization (SEV) firmware… (CVSS 5.9, AMD EPYC™ 9004 Series Processors · AMD EPYC™ 7003 Series… +4)
- [CVE-2026-0435](https://cve.now/CVE-2026-0435.md): Operation on a resource after expiration or release in the AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with… (CVSS 6.0, AMD EPYC™ 9005 Series Processors · AMD EPYC™ 8005 Series… +1)
- [CVE-2026-123084](https://cve.now/CVE-2026-123084.md): Python-pulpcore: pulpcore: header content guard jq filter exposes the content-app environment (CVSS 6.5, Red Hat Ansible Automation Platform · Red Hat Satellite +2)
- [CVE-2026-0454](https://cve.now/CVE-2026-0454.md): An out-of-bounds write in the AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to corrupt global… (CVSS 4.6, AMD EPYC™ 9005 Series Processors · AMD EPYC™ 8005 Series… +1)
- [CVE-2026-0480](https://cve.now/CVE-2026-0480.md): Missing Authentication for Critical Function in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to… (CVSS 6.0, AMD EPYC™ 9005 Series Processors · AMD EPYC™ 8005 Series… +1)
- [CVE-2026-28248](https://cve.now/CVE-2026-28248.md): Improper enforcement of behavioral workflow in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to… (CVSS 5.9, AMD EPYC™ 9004 Series Processors · AMD EPYC™ 7003 Series… +8)
- [CVE-2026-28247](https://cve.now/CVE-2026-28247.md): Improper Access Control Applied to Mirrored or Aliased Memory Regions in AMD Secure Encrypted Virtualization (SEV) firmware could allow a… (CVSS 5.9, AMD EPYC™ 9004 Series Processors · AMD EPYC™ 7003 Series… +8)
- [CVE-2026-28249](https://cve.now/CVE-2026-28249.md): Improper preservation of consistency between independent representations of shared state in AMD Secure Encrypted Virtualization (SEV)… (CVSS 4.6, AMD EPYC™ 9004 Series Processors · AMD EPYC™ 7003 Series… +5)
- [CVE-2026-40668](https://cve.now/CVE-2026-40668.md): Authentication bypass by spoofing in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to request… (CVSS 4.6, AMD EPYC™ 9004 Series Processors · AMD EPYC™ 7003 Series… +8)
- [CVE-2026-40669](https://cve.now/CVE-2026-40669.md): An off-by-one error in AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with hypervisor access to corrupt the… (CVSS 4.0, AMD EPYC™ 9004 Series Processors · AMD EPYC™ 7003 Series… +5)
- [CVE-2026-40670](https://cve.now/CVE-2026-40670.md): Improper check for unusual or exceptional conditions in AMD Secure Encrypted Virtualization - Secure Nested Paging (SEV-SNP) could allow a… (CVSS 5.9, AMD EPYC™ 9004 Series Processors · AMD EPYC™ 7003 Series… +8)
- [CVE-2026-90834](https://cve.now/CVE-2026-90834.md): UART wide-data syscall verifiers check the 8-bit driver op, allowing a user-mode thread to trigger a NULL function-pointer call in kernel… (CVSS 5.5, zephyrproject zephyr)
- [CVE-2026-90833](https://cve.now/CVE-2026-90833.md): Signed offset bypasses bounds check in simulated EEPROM driver, allowing out-of-bounds kernel memory read and write from user mode (CVSS 7.8, zephyrproject zephyr)
- [CVE-2026-77685](https://cve.now/CVE-2026-77685.md): Bluetooth Classic RFCOMM: integer underflow in the MCC TEST command handler leads to out-of-bounds read disclosed to the peer and… (CVSS 8.3, zephyrproject zephyr)
- [CVE-2026-87042](https://cve.now/CVE-2026-87042.md): Zephyr PTP: unvalidated Delay\_Resp message interval lets an on-link peer wedge the PTP thread and flood the network (CVSS 6.5, zephyrproject zephyr)
- [CVE-2026-82391](https://cve.now/CVE-2026-82391.md): Out-of-bounds write in Zephyr HTTP/2 server static-filesystem handler via corrupted receive-buffer length (CVSS 9.1, zephyrproject zephyr)
- [CVE-2026-90832](https://cve.now/CVE-2026-90832.md): Out-of-bounds read in Bluetooth Host periodic advertising report reassembly due to unvalidated report length (CVSS 4.3, zephyrproject zephyr)
- [CVE-2026-67177](https://cve.now/CVE-2026-67177.md): Chargemap stored XSS (CVSS 5.1, Chargemap)
- [CVE-2026-67176](https://cve.now/CVE-2026-67176.md): Chargemap open redirect (CVSS 5.4, Chargemap)
- [CVE-2026-67175](https://cve.now/CVE-2026-67175.md): Chargemap stored XSS (CVSS 4.6, Chargemap)
- [CVE-2026-123259](https://cve.now/CVE-2026-123259.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Experie…)
- [CVE-2026-123258](https://cve.now/CVE-2026-123258.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Experie…)
- [CVE-2026-119017](https://cve.now/CVE-2026-119017.md): Adobe Experience Manager | Incorrect Authorization (CWE-863) (CVSS 9.9, Adobe Experience Manager)
- [CVE-2026-118482](https://cve.now/CVE-2026-118482.md): Adobe Experience Manager | Improper Input Validation (CWE-20) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2026-118481](https://cve.now/CVE-2026-118481.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2026-118480](https://cve.now/CVE-2026-118480.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2026-118479](https://cve.now/CVE-2026-118479.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2026-118478](https://cve.now/CVE-2026-118478.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Experie…)
- [CVE-2026-118197](https://cve.now/CVE-2026-118197.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Experie…)
- [CVE-2026-114372](https://cve.now/CVE-2026-114372.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Experie…)
- [CVE-2026-114371](https://cve.now/CVE-2026-114371.md): Adobe Experience Manager | Incorrect Authorization (CWE-863) (CVSS 9.9, Adobe Experience Manager as a Cloud Service · Adobe Experie…)
- [CVE-2026-113580](https://cve.now/CVE-2026-113580.md): Adobe Experience Manager | Improper Control of Generation of Code ('Code Injection') (CWE-94) (CVSS 9.9, Adobe Experience Manager as a Cloud Service · Adobe Experie…)
- [CVE-2026-113579](https://cve.now/CVE-2026-113579.md): Adobe Experience Manager | Improper Control of Generation of Code ('Code Injection') (CWE-94) (CVSS 9.9, Adobe Experience Manager as a Cloud Service · Adobe Experie…)
- [CVE-2026-123341](https://cve.now/CVE-2026-123341.md): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service)
- [CVE-2026-125298](https://cve.now/CVE-2026-125298.md): AsiaInfo Business Support System (BSS) Missing JWT Signature Verification (CVSS 9.3, AsiaInfo International Business Support System · AsiaInfo I…)
- [CVE-2026-125297](https://cve.now/CVE-2026-125297.md): AsiaInfo Business Support System (BSS) Missing Authentication (CVSS 9.3, AsiaInfo International Business Support System · AsiaInfo I…)
- [CVE-2026-107356](https://cve.now/CVE-2026-107356.md): U.S. Geological Survey Area Species Management Research Program unrestricted file upload (CVSS 8.7, U.S. Geological Survey Area Species Management Research Pro…)
- [CVE-2026-126123](https://cve.now/CVE-2026-126123.md): BeeS ERP administrative console IDOR (CVSS 6.5, BeeS Software Solutions ERP)
- [CVE-2026-92558](https://cve.now/CVE-2026-92558.md): The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway do not escape separator characters when… (CVSS 6.3, Kong Gateway Enterprise · Kong AI Gateway)
- [CVE-2025-0027](https://cve.now/CVE-2025-0027.md): Improper access control in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypass Reverse Map… (CVSS 5.9, AMD EPYC™ 9004 Series Processors · AMD EPYC™ 7003 Series… +6)
- [CVE-2025-29940](https://cve.now/CVE-2025-29940.md): Unverified ownership in Secure Encrypted Virtualization (SEV) firmware could allow a privileged attacker with access to a malicious… (CVSS 5.9, AMD EPYC™ 9005 Series Processors · AMD EPYC™ Embedded 9005…)
- [CVE-2025-52537](https://cve.now/CVE-2025-52537.md): Improper access control within the AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with administrative… (CVSS 4.0, AMD EPYC™ 9005 Series Processors · AMD EPYC™ Embedded 9005…)
- [CVE-2025-52535](https://cve.now/CVE-2025-52535.md): Improper resource reuse in the AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with hypervisor access to write… (CVSS 5.9, AMD EPYC™ 9004 Series Processors · AMD EPYC™ 7003 Series… +6)
- [CVE-2025-54506](https://cve.now/CVE-2025-54506.md): A time-of-check to time-of-use (TOCTOU) race condition in the AMD SEV Secure Encrypted Virtualization (SEV) firmware could allow an… (CVSS 4.0, AMD EPYC™ 9005 Series Processors · AMD EPYC™ Embedded 9005…)
- [CVE-2025-54503](https://cve.now/CVE-2025-54503.md): Improper handling of overlap between protected memory ranges in the Secure Encrypted Virtualization (SEV) firmware could allow a… (CVSS 5.9, AMD EPYC™ 9005 Series Processors · AMD EPYC™ Embedded 9005…)
- [CVE-2025-54508](https://cve.now/CVE-2025-54508.md): Improper validation of Reverse Map Table (RMP) entries in the Secure Encrypted Virtualization (SEV) firmware could allow a privileged… (CVSS 4.0, AMD EPYC™ 9005 Series Processors · AMD EPYC™ Embedded 9005…)
- [CVE-2025-54504](https://cve.now/CVE-2025-54504.md): Insufficient Granularity of Access Control in AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with… (CVSS 5.9, AMD EPYC™ 9005 Series Processors · AMD EPYC™ Embedded 9005…)
- [CVE-2025-62620](https://cve.now/CVE-2025-62620.md): Improper validation of unsafe equivalence in input could allow an attacker with high privileges to reclaim the ring buffer queue status… (CVSS 5.9, AMD EPYC™ 9004 Series Processors · AMD EPYC™ 7003 Series… +7)
- [CVE-2026-123041](https://cve.now/CVE-2026-123041.md): The request-callout plugin in Kong Gateway Enterprise and Kong AI Gateway omits callout headers not sent by the client from its cache key… (CVSS 8.2, Kong Gateway Enterprise · Kong AI Gateway)
- [CVE-2025-62621](https://cve.now/CVE-2025-62621.md): Expected behavior violation in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypass Reverse Map… (CVSS 5.9, AMD EPYC™ 9005 Series Processors · AMD EPYC™ Embedded 9005…)
- [CVE-2026-92441](https://cve.now/CVE-2026-92441.md): Kong Gateway Enterprise and Kong AI Gateway include decoded CR/LF characters from the request path in the X-Forwarded-Prefix header on… (CVSS 7.8, Kong Gateway Enterprise · Kong AI Gateway)
- [CVE-2026-92439](https://cve.now/CVE-2026-92439.md): The SAML plugin in Kong Gateway Enterprise does not enforce AudienceRestriction, allowing a valid assertion issued for another Service… (CVSS 7.8, Kong Gateway Enterprise · Kong AI Gateway)
- [CVE-2026-96437](https://cve.now/CVE-2026-96437.md): The ai-azure-content-safety plugin in Kong Gateway Enterprise skips inspection of request bodies larger than the in-memory body buffer… (CVSS 8.2, Kong Gateway Enterprise)
- [CVE-2026-92443](https://cve.now/CVE-2026-92443.md): The caching plugins in Kong Gateway Enterprise and Kong AI Gateway may serve a response cached for a request carrying an Authorization or… (CVSS 8.2, Kong Gateway Enterprise · Kong AI Gateway)
- [CVE-2026-121898](https://cve.now/CVE-2026-121898.md): Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) (CVSS 9.9, Adobe Connect)
- [CVE-2026-121896](https://cve.now/CVE-2026-121896.md): Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) (CVSS 9.9, Adobe Connect)
- [CVE-2026-121913](https://cve.now/CVE-2026-121913.md): Adobe Connect | Incorrect Authorization (CWE-863) (CVSS 8.8, Adobe Connect)
- [CVE-2026-121908](https://cve.now/CVE-2026-121908.md): Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) (CVSS 9.9, Adobe Connect)
- [CVE-2026-121352](https://cve.now/CVE-2026-121352.md): Adobe Connect | Incorrect Authorization (CWE-863) (CVSS 10.0, Adobe Connect)
- [CVE-2026-121912](https://cve.now/CVE-2026-121912.md): Adobe Connect | Cross-site Scripting (XSS) (CWE-79) (CVSS 5.4, Adobe Connect)
- [CVE-2026-121887](https://cve.now/CVE-2026-121887.md): Adobe Connect | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611) (CVSS 9.9, Adobe Connect)
- [CVE-2026-121350](https://cve.now/CVE-2026-121350.md): Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) (CVSS 7.7, Adobe Connect)
- [CVE-2026-121349](https://cve.now/CVE-2026-121349.md): Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) (CVSS 9.6, Adobe Connect)
- [CVE-2026-121910](https://cve.now/CVE-2026-121910.md): Adobe Connect | Cross-site Scripting (XSS) (CWE-79) (CVSS 5.4, Adobe Connect)
- [CVE-2026-121900](https://cve.now/CVE-2026-121900.md): Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) (CVSS 8.3, Adobe Connect)
- [CVE-2026-121355](https://cve.now/CVE-2026-121355.md): Adobe Connect | Incorrect Authorization (CWE-863) (CVSS 9.1, Adobe Connect)
- [CVE-2026-121351](https://cve.now/CVE-2026-121351.md): Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) (CVSS 10.0, Adobe Connect)
- [CVE-2026-121889](https://cve.now/CVE-2026-121889.md): Adobe Connect | Server-Side Request Forgery (SSRF) (CWE-918) (CVSS 10.0, Adobe Connect)
- [CVE-2026-121894](https://cve.now/CVE-2026-121894.md): Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) (CVSS 9.9, Adobe Connect)
- [CVE-2026-121356](https://cve.now/CVE-2026-121356.md): Adobe Connect | Server-Side Request Forgery (SSRF) (CWE-918) (CVSS 10.0, Adobe Connect)
- [CVE-2026-121906](https://cve.now/CVE-2026-121906.md): Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) (CVSS 9.9, Adobe Connect)
- [CVE-2026-121353](https://cve.now/CVE-2026-121353.md): Adobe Connect | Improper Neutralization of CRLF Sequences ('CRLF Injection') (CWE-93) (CVSS 10.0, Adobe Connect)
- [CVE-2026-121904](https://cve.now/CVE-2026-121904.md): Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 9.6, Adobe Connect)
- [CVE-2026-121890](https://cve.now/CVE-2026-121890.md): Adobe Connect | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611) (CVSS 7.7, Adobe Connect)
- [CVE-2026-121902](https://cve.now/CVE-2026-121902.md): Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) (CVSS 9.4, Adobe Connect)
- [CVE-2026-121354](https://cve.now/CVE-2026-121354.md): Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) (CVSS 9.9, Adobe Connect)
- [CVE-2026-121892](https://cve.now/CVE-2026-121892.md): Adobe Connect | Improper Control of Generation of Code ('Code Injection') (CWE-94) (CVSS 9.9, Adobe Connect)
- [CVE-2026-122102](https://cve.now/CVE-2026-122102.md): Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 8.7, Adobe Connect)
- [CVE-2026-105150](https://cve.now/CVE-2026-105150.md): Product Filter for WooCommerce by WBW \<= 3.4.5 - Reflected Cross-Site Scripting via 'text\_no\_products' Parameter (CVSS 6.1, woobewoo Product Filter for WooCommerce by WBW)
- [CVE-2026-89324](https://cve.now/CVE-2026-89324.md): Basel Post Types \<= 1.18 - Unauthenticated Authentication Bypass via Forged Opauth Callback Signature with Hardcoded Fallback Salt (CVSS 9.8, XTemos Basel Post Types)
- [CVE-2026-92442](https://cve.now/CVE-2026-92442.md): The graphql-proxy-cache-advanced plugin in Kong Gateway Enterprise omits the caller's identity from the cache key, allowing a response… (CVSS 8.3, Kong Gateway Enterprise · Kong AI Gateway)
- [CVE-2026-125880](https://cve.now/CVE-2026-125880.md): Stored XSS via MMS3 patch metadata (admin context) (CVSS 8.3, N-able N-central)
- [CVE-2026-125882](https://cve.now/CVE-2026-125882.md): RCE via file repository upload path traversal (CVSS 8.6, N-able N-central)
- [CVE-2026-118483](https://cve.now/CVE-2026-118483.md): Dimension | Improper Input Validation (CWE-20) (CVSS 8.2, Adobe Dimension)
- [CVE-2026-125881](https://cve.now/CVE-2026-125881.md): Schema-hint SSRF via service import schema validation (CVSS 9.3, N-able N-central)
- [CVE-2026-92545](https://cve.now/CVE-2026-92545.md): The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway omit the request hostname from the cache… (CVSS 8.7, Kong Gateway Enterprise · Kong AI Gateway)
- [CVE-2026-125879](https://cve.now/CVE-2026-125879.md): Local privilege escalation to root via nable-writable syslog-ng config (CVSS 8.6, N-able N-central)
- [CVE-2026-125878](https://cve.now/CVE-2026-125878.md): Multiple OGNL Injection vulnerabilities (CVSS 8.7, N-able N-central)
- [CVE-2026-125958](https://cve.now/CVE-2026-125958.md): Root RCE via unsigned NSP upgrade package upload (CVSS 7.5, N-able N-central)
- [CVE-2026-91000](https://cve.now/CVE-2026-91000.md): Insecure IPC Channels lead to local privilege escalation (CVSS 8.4, N-able N-central)
- [CVE-2026-122100](https://cve.now/CVE-2026-122100.md): CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347) (CVSS 5.5, Adobe Content Credentials Rust SDK · Adobe C2PA Tool)
- [CVE-2026-118484](https://cve.now/CVE-2026-118484.md): CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 6.5, Adobe Content Credentials Rust SDK · Adobe C2PA Tool)
- [CVE-2026-113573](https://cve.now/CVE-2026-113573.md): CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 5.9, Adobe Content Credentials Rust SDK · Adobe C2PA Tool)
- [CVE-2026-122097](https://cve.now/CVE-2026-122097.md): CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) (CVSS 6.5, Adobe Content Credentials Rust SDK · Adobe C2PA Tool)
- [CVE-2026-113572](https://cve.now/CVE-2026-113572.md): CAI Content Credentials | Use of a Broken or Risky Cryptographic Algorithm (CWE-327) (CVSS 5.9, Adobe Content Credentials Rust SDK · Adobe C2PA Tool)
- [CVE-2026-122098](https://cve.now/CVE-2026-122098.md): CAI Content Credentials | Improper Certificate Validation (CWE-295) (CVSS 5.1, Adobe Content Credentials Rust SDK · Adobe C2PA Tool)
- [CVE-2026-123262](https://cve.now/CVE-2026-123262.md): CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347) (CVSS 5.9, Adobe Content Credentials Rust SDK · Adobe C2PA Tool)
- [CVE-2026-123261](https://cve.now/CVE-2026-123261.md): CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347) (CVSS 5.9, Adobe Content Credentials Rust SDK · Adobe C2PA Tool)
- [CVE-2026-123267](https://cve.now/CVE-2026-123267.md): CAI Content Credentials | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) (CVSS 5.5, Adobe Content Credentials Rust SDK · Adobe C2PA Tool)
- [CVE-2026-113574](https://cve.now/CVE-2026-113574.md): CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) (CVSS 4.0, Adobe Content Credentials Rust SDK · Adobe C2PA Tool)
- [CVE-2026-123260](https://cve.now/CVE-2026-123260.md): CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 4.0, Adobe Content Credentials Rust SDK · Adobe C2PA Tool)
- [CVE-2026-122101](https://cve.now/CVE-2026-122101.md): CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 3.7, Adobe Content Credentials Rust SDK · Adobe C2PA Tool)
- [CVE-2026-122099](https://cve.now/CVE-2026-122099.md): CAI Content Credentials | Incorrect Authorization (CWE-863) (CVSS 2.9, Adobe Content Credentials Rust SDK · Adobe C2PA Tool)
- [CVE-2026-125883](https://cve.now/CVE-2026-125883.md): Multiple XXE Vulnerabilities (CVSS 9.3, N-able N-central)
- [CVE-2026-126186](https://cve.now/CVE-2026-126186.md): Active Storage: Possible arbitrary file read and remote code execution in Active Storage video previews, analysis and image processing (CVSS 8.8, rails · activestorage)
- [CVE-2026-126129](https://cve.now/CVE-2026-126129.md): The Auth0 ASP.NET Core Authentication SDK incorrectly determines a session's OIDC Back-Channel Logout status, which may result in a… (no CVSS, Auth0 ASP.NET Core Authentication)
- [CVE-2026-126085](https://cve.now/CVE-2026-126085.md): Active Storage: Possible circumvention of file size limits in Active Storage direct uploads to Google Cloud Storage (CVSS 5.3, rails · activestorage)
- [CVE-2026-92544](https://cve.now/CVE-2026-92544.md): SQL injection in the LLM usage counters of Kong Gateway Enterprise and Kong AI Gateway may allow a client to execute arbitrary SQL against… (CVSS 8.7, Kong Gateway Enterprise · Kong AI Gateway)
- [CVE-2026-126084](https://cve.now/CVE-2026-126084.md): Active Storage: Unsigned Content-Type in Active Storage GCS direct uploads with cache\_control (CVSS 4.7, rails)
- [CVE-2026-126083](https://cve.now/CVE-2026-126083.md): Action Pack: Possible IP spoofing in Action Dispatch RemoteIp (CVSS 7.4, rails · actionpack)
- [CVE-2026-126128](https://cve.now/CVE-2026-126128.md): The Management API client in the Auth0 Node.js SDK improperly neutralizes path parameters, allowing a request and its attached management… (no CVSS, Auth0 Node JS)
- [CVE-2026-126082](https://cve.now/CVE-2026-126082.md): Active Storage: Possible arbitrary file write and read in Active Storage image analysis (CVSS 9.8, rails)
- [CVE-2026-108167](https://cve.now/CVE-2026-108167.md): The auth0-ai-python FGA retriever does not distinguish between authorization checks under different users, relations, or conditions when… (no CVSS, auth0-ai-langchain · auth0-ai-llamaindex)
- [CVE-2026-126081](https://cve.now/CVE-2026-126081.md): Action Pack: Possible Strong Parameters bypass in Parameters#each\_key (CVSS 7.5, rails)
- [CVE-2026-107372](https://cve.now/CVE-2026-107372.md): The auth0-ai-js FGA retriever does not distinguish between authorization checks under different conditions when filtering documents during… (no CVSS, Auth0 AI JS)
- [CVE-2026-126080](https://cve.now/CVE-2026-126080.md): Active Support: Possible DoS vulnerability in Active Support safe\_constantize (CVSS 7.5, rails · activesupport)
- [CVE-2026-105986](https://cve.now/CVE-2026-105986.md): Incorrect authorization in the Admin API RBAC of Kong Gateway Enterprise allows a delegated administrator to elevate privileges via a… (CVSS 8.7, Kong Gateway Enterprise · Kong AI Gateway)
- [CVE-2026-126079](https://cve.now/CVE-2026-126079.md): Action View: Possible XSS vulnerability in Action View text helpers (CVSS 6.1, rails)
- [CVE-2026-126078](https://cve.now/CVE-2026-126078.md): Action View: Possible XSS vulnerability in Action View highlight helper (CVSS 6.1, rails)
- [CVE-2026-126077](https://cve.now/CVE-2026-126077.md): Action Pack: Possible sensitive session information leak in Active Storage proxy mode (CVSS 6.8, rails)
- [CVE-2026-126076](https://cve.now/CVE-2026-126076.md): Action Pack: Possible restoration of destroyed sessions in Action Dispatch CacheStore (CVSS 4.2, rails · actionpack)
- [CVE-2026-116003](https://cve.now/CVE-2026-116003.md): Photoshop Desktop | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Photoshop)
- [CVE-2026-113575](https://cve.now/CVE-2026-113575.md): Photoshop Desktop | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe Photoshop)
- [CVE-2026-118198](https://cve.now/CVE-2026-118198.md): Photoshop Desktop | NULL Pointer Dereference (CWE-476) (CVSS 5.5, Adobe Photoshop)
- [CVE-2026-118199](https://cve.now/CVE-2026-118199.md): Photoshop Desktop | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Photoshop)
- [CVE-2026-117547](https://cve.now/CVE-2026-117547.md): Photoshop Desktop | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Photoshop)
- [CVE-2026-116480](https://cve.now/CVE-2026-116480.md): Photoshop Desktop | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe Photoshop)
- [CVE-2026-113578](https://cve.now/CVE-2026-113578.md): Photoshop Desktop | Uncontrolled Recursion (CWE-674) (CVSS 5.5, Adobe Photoshop)
- [CVE-2026-117546](https://cve.now/CVE-2026-117546.md): Photoshop Desktop | Use After Free (CWE-416) (CVSS 7.8, Adobe Photoshop)
- [CVE-2026-114373](https://cve.now/CVE-2026-114373.md): Photoshop Desktop | Divide By Zero (CWE-369) (CVSS 5.5, Adobe Photoshop)
- [CVE-2026-113571](https://cve.now/CVE-2026-113571.md): Photoshop Desktop | NULL Pointer Dereference (CWE-476) (CVSS 5.5, Adobe Photoshop)
- [CVE-2026-118200](https://cve.now/CVE-2026-118200.md): Photoshop Desktop | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Photoshop)
- [CVE-2026-113569](https://cve.now/CVE-2026-113569.md): Photoshop Desktop | NULL Pointer Dereference (CWE-476) (CVSS 5.5, Adobe Photoshop)
- [CVE-2026-115345](https://cve.now/CVE-2026-115345.md): Photoshop Desktop | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Photoshop)
- [CVE-2026-126075](https://cve.now/CVE-2026-126075.md): Active Support: Possible XSS vulnerability in Active Support MessagePack serializer (CVSS 4.7, rails · activesupport)
- [CVE-2026-126074](https://cve.now/CVE-2026-126074.md): Active Storage: Possible DoS vulnerability in Active Storage filename handling (CVSS 4.3, rails · activestorage)
- [CVE-2026-113562](https://cve.now/CVE-2026-113562.md): Audition | Improper Input Validation (CWE-20) (CVSS 7.7, Adobe Audition)
- [CVE-2026-113558](https://cve.now/CVE-2026-113558.md): Audition | Improper Input Validation (CWE-20) (CVSS 8.6, Adobe Audition)
- [CVE-2026-113557](https://cve.now/CVE-2026-113557.md): Audition | Improper Input Validation (CWE-20) (CVSS 8.6, Adobe Audition)
- [CVE-2026-113565](https://cve.now/CVE-2026-113565.md): Audition | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Audition)
- [CVE-2026-113553](https://cve.now/CVE-2026-113553.md): Audition | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Audition)
- [CVE-2026-113560](https://cve.now/CVE-2026-113560.md): Audition | Incorrect Authorization (CWE-863) (CVSS 7.7, Adobe Audition)
- [CVE-2026-113551](https://cve.now/CVE-2026-113551.md): Audition | Violation of Secure Design Principles (CWE-657) (CVSS 8.7, Adobe Audition)
- [CVE-2026-113567](https://cve.now/CVE-2026-113567.md): Audition | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Audition)
- [CVE-2026-113549](https://cve.now/CVE-2026-113549.md): Audition | NULL Pointer Dereference (CWE-476) (CVSS 5.5, Adobe Audition)
- [CVE-2026-113555](https://cve.now/CVE-2026-113555.md): Audition | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Audition)
- [CVE-2026-113563](https://cve.now/CVE-2026-113563.md): Audition | Violation of Secure Design Principles (CWE-657) (CVSS 8.6, Adobe Audition)
- [CVE-2026-126073](https://cve.now/CVE-2026-126073.md): Action Pack: Possible cache poisoning in Action Pack content negotiation (CVSS 4.8, rails · actionpack)
- [CVE-2026-126072](https://cve.now/CVE-2026-126072.md): Action Pack: Possible DoS vulnerability in Action Controller Live streaming (CVSS 5.9, rails)
- [CVE-2026-82002](https://cve.now/CVE-2026-82002.md): Media Encoder | Incorrect Authorization (CWE-863) (CVSS 7.7, Adobe Media Encoder)
- [CVE-2026-113547](https://cve.now/CVE-2026-113547.md): Media Encoder | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Media Encoder)
- [CVE-2026-113541](https://cve.now/CVE-2026-113541.md): Media Encoder | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Media Encoder)
- [CVE-2026-113545](https://cve.now/CVE-2026-113545.md): Media Encoder | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Media Encoder)
- [CVE-2026-113543](https://cve.now/CVE-2026-113543.md): Media Encoder | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Media Encoder)
- [CVE-2026-113539](https://cve.now/CVE-2026-113539.md): Media Encoder | NULL Pointer Dereference (CWE-476) (CVSS 5.5, Adobe Media Encoder)
- [CVE-2026-126071](https://cve.now/CVE-2026-126071.md): Active Storage: Possible DoS vulnerability in Active Storage proxy mode via storage errors during streaming (CVSS 5.3, rails · activestorage)
- [CVE-2026-126070](https://cve.now/CVE-2026-126070.md): Action View: Possible XSS vulnerability in Action View strip\_tags (CVSS 6.1, rails)
- [CVE-2026-126069](https://cve.now/CVE-2026-126069.md): Action View: Possible XSS vulnerability in Action View tag helpers (CVSS 4.7, rails)
- [CVE-2026-113523](https://cve.now/CVE-2026-113523.md): After Effects | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe After Effects)
- [CVE-2026-113534](https://cve.now/CVE-2026-113534.md): After Effects | Improper Input Validation (CWE-20) (CVSS 8.6, Adobe After Effects)
- [CVE-2026-110093](https://cve.now/CVE-2026-110093.md): After Effects | Out-of-bounds Read (CWE-125) (CVSS 3.3, Adobe After Effects)
- [CVE-2026-113512](https://cve.now/CVE-2026-113512.md): After Effects | Stack-based Buffer Overflow (CWE-121) (CVSS 7.8, Adobe After Effects)
- [CVE-2026-113528](https://cve.now/CVE-2026-113528.md): After Effects | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe After Effects)
- [CVE-2026-113521](https://cve.now/CVE-2026-113521.md): After Effects | NULL Pointer Dereference (CWE-476) (CVSS 5.5, Adobe After Effects)
- [CVE-2026-113538](https://cve.now/CVE-2026-113538.md): After Effects | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe After Effects)
- [CVE-2026-113525](https://cve.now/CVE-2026-113525.md): After Effects | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe After Effects)
- [CVE-2026-113519](https://cve.now/CVE-2026-113519.md): After Effects | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe After Effects)
- [CVE-2026-113526](https://cve.now/CVE-2026-113526.md): After Effects | Violation of Secure Design Principles (CWE-657) (CVSS 8.6, Adobe After Effects)
- [CVE-2026-113517](https://cve.now/CVE-2026-113517.md): After Effects | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe After Effects)
- [CVE-2026-113536](https://cve.now/CVE-2026-113536.md): After Effects | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe After Effects)
- [CVE-2026-113532](https://cve.now/CVE-2026-113532.md): After Effects | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) (CVSS 8.6, Adobe After Effects)
- [CVE-2026-113530](https://cve.now/CVE-2026-113530.md): After Effects | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe After Effects)
- [CVE-2026-123263](https://cve.now/CVE-2026-123263.md): After Effects | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe After Effects)
- [CVE-2026-113516](https://cve.now/CVE-2026-113516.md): After Effects | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe After Effects)
- [CVE-2026-113514](https://cve.now/CVE-2026-113514.md): After Effects | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe After Effects)
- [CVE-2026-126068](https://cve.now/CVE-2026-126068.md): Action Mailbox: Possible signature replay in Action Mailbox Mailgun ingress (CVSS 3.7, rails · actionmailbox)
- [CVE-2026-126067](https://cve.now/CVE-2026-126067.md): Action Pack: Missing SameSite attribute on session cookies from Action Pack session stores (CVSS 3.1, rails · actionpack)
- [CVE-2026-110091](https://cve.now/CVE-2026-110091.md): Premiere Pro | Missing Authentication for Critical Function (CWE-306) (CVSS 7.1, Adobe Premiere)
- [CVE-2026-113577](https://cve.now/CVE-2026-113577.md): Premiere Pro | NULL Pointer Dereference (CWE-476) (CVSS 5.5, Adobe Premiere)
- [CVE-2026-110089](https://cve.now/CVE-2026-110089.md): Premiere Pro | Buffer Underwrite ('Buffer Underflow') (CWE-124) (CVSS 7.8, Adobe Premiere)
- [CVE-2026-110085](https://cve.now/CVE-2026-110085.md): Premiere Pro | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Premiere)
- [CVE-2026-110087](https://cve.now/CVE-2026-110087.md): Premiere Pro | Buffer Overflow (CWE-120) (CVSS 6.7, Adobe Premiere)
- [CVE-2026-110088](https://cve.now/CVE-2026-110088.md): Premiere Pro | Buffer Overflow (CWE-120) (CVSS 7.8, Adobe Premiere)
- [CVE-2026-82012](https://cve.now/CVE-2026-82012.md): Premiere Pro | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Premiere)
- [CVE-2026-110086](https://cve.now/CVE-2026-110086.md): Premiere Pro | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Premiere)
- [CVE-2026-104352](https://cve.now/CVE-2026-104352.md): Premiere Pro | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Premiere)
- [CVE-2026-110090](https://cve.now/CVE-2026-110090.md): Premiere Pro | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) (CVSS 7.1, Adobe Premiere)
- [CVE-2026-48402](https://cve.now/CVE-2026-48402.md): Premiere Pro | Untrusted Search Path (CWE-426) (CVSS 7.8, Adobe Premiere)
- [CVE-2026-120819](https://cve.now/CVE-2026-120819.md): Use-after-free in Wasm JS-BSON bridge lets read-only users read 24 KiB via $accumulator (CVSS 5.3, MongoDB Server)
- [CVE-2026-118383](https://cve.now/CVE-2026-118383.md): Pre-authentication use-after-free in MongoDB Server replica set primary catch-up (CVSS 9.5, MongoDB Server)
- [CVE-2026-126066](https://cve.now/CVE-2026-126066.md): fast-xml-parser: Quadratic CPU consumption scanning unterminated stop-node tags (CVSS 3.7, NaturalIntelligence fast-xml-parser · fast-xml-parser)
- [CVE-2026-120828](https://cve.now/CVE-2026-120828.md): Memory exhaustion via abandoned far-future read-concern waiters in disaggregated storage (CVSS 8.7, MongoDB Server)
- [CVE-2026-120826](https://cve.now/CVE-2026-120826.md): Improper Authorization in MongoDB Server Sharded View Definition Handling Leads to Cross-Database Unauthorized Access (CVSS 7.1, MongoDB Server)
- [CVE-2026-120825](https://cve.now/CVE-2026-120825.md): Improper Authorization in MongoDB Server Aggregation Framework View Definition Validation Leads to Unauthorized Collection Access (CVSS 7.1, MongoDB Server)
- [CVE-2026-126065](https://cve.now/CVE-2026-126065.md): OpenObserve: Empty external password allows authentication bypass (CVSS 9.8, openobserve)
- [CVE-2026-120824](https://cve.now/CVE-2026-120824.md): Post-authentication use-after-free in MongoDB Server time-series bucket validation (CVSS 8.7, MongoDB Server)
- [CVE-2026-120823](https://cve.now/CVE-2026-120823.md): Missing Authorization Check in MongoDB Server Aggregation Framework Leads to Unauthorized Access to Deployment-Wide Configuration Data (CVSS 2.3, MongoDB Server)
- [CVE-2026-120822](https://cve.now/CVE-2026-120822.md): Missing Authorization Check in MongoDB Server Replication-Related Administrative Command Leads to Unauthorized Data Access (CVSS 8.6, MongoDB Server)
- [CVE-2026-120821](https://cve.now/CVE-2026-120821.md): Post-authentication use-after-free in MongoDB Server aggregation sub-pipelines (CVSS 7.1, MongoDB Server)
- [CVE-2026-126064](https://cve.now/CVE-2026-126064.md): Nokogiri: Possible Use-After-Free when setting an attribute value via \`Nokogiri::XML::Node#\[\]=\` or \`#lang=\` (CVSS 2.0, sparklemotion nokogiri · nokogiri)
- [CVE-2026-120820](https://cve.now/CVE-2026-120820.md): Uncontrolled Resource Consumption in MongoDB Server Per-Namespace Encrypted-Field Statistics Table Leads to Denial of Service (CVSS 5.3, MongoDB Server)
- [CVE-2026-120818](https://cve.now/CVE-2026-120818.md): Use-After-Free in MongoDB Server JavaScript Support for Aggregation Leads to Information Disclosure (CVSS 7.1, MongoDB Server)
- [CVE-2026-120817](https://cve.now/CVE-2026-120817.md): Post-authentication race condition in MongoDB Server geospatial schema validation (CVSS 7.1, MongoDB Server)
- [CVE-2026-126063](https://cve.now/CVE-2026-126063.md): Nokogiri: Mutation XSS through \`noscript\` content in Nokogiri's HTML5 serializer (CVSS 2.3, sparklemotion nokogiri · nokogiri)
- [CVE-2026-120816](https://cve.now/CVE-2026-120816.md): System collection contents readable through a database change stream with showSystemEvents (CVSS 2.3, MongoDB Server)
- [CVE-2026-120815](https://cve.now/CVE-2026-120815.md): Incorrect Authorization Check in MongoDB Server Localhost Exception Leads to Unauthorized Administrative Access (CVSS 8.6, MongoDB Server)
- [CVE-2026-120814](https://cve.now/CVE-2026-120814.md): MultiUpdateCoordinator state replay lets a shard administrator create a persistent cluster root user (CVSS 7.5, MongoDB Server)
- [CVE-2026-126062](https://cve.now/CVE-2026-126062.md): Nokogiri : Possible SSRF on JRuby when resolving external DTDs or entities with \`NONET\` set (CVSS 3.7, sparklemotion nokogiri · nokogiri)
- [CVE-2026-120813](https://cve.now/CVE-2026-120813.md): Plaintext storage of encrypted fields via duplicate keys in client-side encryption schema parsing (CVSS 8.2, MongoDB Server)
- [CVE-2025-61625](https://cve.now/CVE-2025-61625.md): An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 7.6.0 through… (CVSS 7.3, Fortinet FortiManager · Fortinet FortiAnalyzer)
- [CVE-2026-120812](https://cve.now/CVE-2026-120812.md): Full server crash via unbounded per-operand recursion in time-series query vectorization (CVSS 6.0, MongoDB Server)
- [CVE-2026-26248](https://cve.now/CVE-2026-26248.md): A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 5.0.0… (CVSS 7.9, Fortinet FortiSandbox)
- [CVE-2026-121530](https://cve.now/CVE-2026-121530.md): A improper authentication vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6 may allow a remote authenticated attacker to gain improper… (CVSS 5.9, Fortinet FortiOS)
- [CVE-2026-121529](https://cve.now/CVE-2026-121529.md): A origin validation error vulnerability in Fortinet FortiClientMac 7.4.0 through 7.4.7, FortiClientWindows 7.4.0 through 7.4.7… (CVSS 9.1, Fortinet FortiClientMac · Fortinet FortiClientWindows +1)
- [CVE-2026-120811](https://cve.now/CVE-2026-120811.md): Use-After-Free in MongoDB Server Classic Query Engine Plan Cache Leads to Information Disclosure and Denial of Service (CVSS 6.0, MongoDB Server)
- [CVE-2026-121371](https://cve.now/CVE-2026-121371.md): Security Advisory 0218 (CVSS 7.5, Arista Networks EOS)
- [CVE-2026-121370](https://cve.now/CVE-2026-121370.md): Security Advisory 0224 (CVSS 8.6, Arista Networks EOS)
- [CVE-2026-121369](https://cve.now/CVE-2026-121369.md): Security Advisory 0225 (CVSS 5.3, Arista Networks EOS)
- [CVE-2026-121368](https://cve.now/CVE-2026-121368.md): Security Advisory 0206 (CVSS 8.6, Arista Networks EOS)
- [CVE-2026-121367](https://cve.now/CVE-2026-121367.md): Security Advisory 0220 (CVSS 9.6, Arista Networks EOS)
- [CVE-2026-121295](https://cve.now/CVE-2026-121295.md): Security Advisory 0223 (CVSS 8.6, Arista Networks EOS)
- [CVE-2026-121294](https://cve.now/CVE-2026-121294.md): Security Advisory 0223 (CVSS 5.3, Arista Networks EOS)
- [CVE-2026-121293](https://cve.now/CVE-2026-121293.md): Security Advisory 0210 (CVSS 4.4, Arista Networks EOS)
- [CVE-2026-121292](https://cve.now/CVE-2026-121292.md): Security Advisory 0222 (CVSS 8.2, Arista Networks EOS)
- [CVE-2026-121291](https://cve.now/CVE-2026-121291.md): Security Advisory 0222 (CVSS 8.2, Arista Networks EOS)
- [CVE-2026-121290](https://cve.now/CVE-2026-121290.md): Security Advisory 0209 (CVSS 8.2, Arista Networks EOS)
- [CVE-2026-121289](https://cve.now/CVE-2026-121289.md): Security Advisory 0208 (CVSS 9.8, Arista Networks EOS)
- [CVE-2026-121288](https://cve.now/CVE-2026-121288.md): Security Advisory 0221 (CVSS 8.1, Arista Networks EOS)
- [CVE-2026-121287](https://cve.now/CVE-2026-121287.md): Security Advisory 0221 (CVSS 8.8, Arista Networks EOS)
- [CVE-2026-121286](https://cve.now/CVE-2026-121286.md): Security Advisory 0213 (CVSS 6.5, Arista Networks EOS)
- [CVE-2026-120983](https://cve.now/CVE-2026-120983.md): Security Advisory 0215 (CVSS 7.6, Arista Networks EOS)
- [CVE-2026-120982](https://cve.now/CVE-2026-120982.md): Security Advisory 0207 (CVSS 7.5, Arista Networks EOS)
- [CVE-2026-120981](https://cve.now/CVE-2026-120981.md): Security Advisory 0214 (CVSS 5.3, Arista Networks EOS)
- [CVE-2026-120980](https://cve.now/CVE-2026-120980.md): Security Advisory 0214 (CVSS 5.3, Arista Networks EOS)
- [CVE-2026-120979](https://cve.now/CVE-2026-120979.md): Security Advisory 0212 (CVSS 8.1, Arista Networks EOS)
- [CVE-2026-120978](https://cve.now/CVE-2026-120978.md): Security Advisory 0211 (CVSS 6.5, Arista Networks EOS)
- [CVE-2026-120977](https://cve.now/CVE-2026-120977.md): Security Advisory 0217 (CVSS 8.2, Arista Networks EOS)
- [CVE-2026-120976](https://cve.now/CVE-2026-120976.md): Security Advisory 0216 (CVSS 6.0, Arista Networks EOS)
- [CVE-2026-120975](https://cve.now/CVE-2026-120975.md): Security Advisory 0205 (CVSS 3.1, Arista Networks EOS)
- [CVE-2026-120974](https://cve.now/CVE-2026-120974.md): Security Advisory 0219 (CVSS 5.3, Arista Networks EOS)
- [CVE-2026-102166](https://cve.now/CVE-2026-102166.md): Security Advisory 0227 (CVSS 8.8, Arista Networks Wi-Fi Access Point)
- [CVE-2026-126061](https://cve.now/CVE-2026-126061.md): Winter CMS: My Account preview exposes another backend user's profile by record ID (CVSS 4.3, wintercms winter · winter/wn-backend-module)
- [CVE-2026-120810](https://cve.now/CVE-2026-120810.md): Uncontrolled Resource Consumption in MongoDB Server Aggregation Framework via Internal Expression Leads to Denial of Service (CVSS 7.1, MongoDB Server)
- [CVE-2026-125341](https://cve.now/CVE-2026-125341.md): Winter CMS: Stored XSS through Backend List widget image columns (CVSS 2.0, wintercms winter · winter/wn-backend-module)
- [CVE-2026-120809](https://cve.now/CVE-2026-120809.md): Heap use-after-free read via yield-time state save in time-series block unpacking (CVSS 6.1, MongoDB Server)
- [CVE-2026-120808](https://cve.now/CVE-2026-120808.md): Certificate Validation Bypass via IPv6 trust-result skip in macOS TLS client (CVSS 9.1, MongoDB Server)
- [CVE-2026-125340](https://cve.now/CVE-2026-125340.md): Winter CMS: Reflected XSS through the search query parameter in the backend Table widget (CVSS 4.5, wintercms winter · winter/wn-backend-module)
- [CVE-2026-95786](https://cve.now/CVE-2026-95786.md): Access Control Vulnerability Could Permit Unauthorized Interaction with Protected Services (CVSS 6.5, Hewlett Packard Enterprise (HPE) Private 5G Core)
- [CVE-2026-95785](https://cve.now/CVE-2026-95785.md): Authenticated Component Vulnerability Could Affect System Confidentiality, Integrity, Availability, and Trusted Operations (CVSS 7.2, Hewlett Packard Enterprise (HPE) Private 5G Core)
- [CVE-2026-95784](https://cve.now/CVE-2026-95784.md): System Component Vulnerability Could Cause Service Unavailability (CVSS 7.5, Hewlett Packard Enterprise (HPE) Private 5G Core)
- [CVE-2026-95783](https://cve.now/CVE-2026-95783.md): Network Processing Vulnerability Could Cause Service Disruption (CVSS 7.5, Hewlett Packard Enterprise (HPE) Private 5G Core)
- [CVE-2026-95782](https://cve.now/CVE-2026-95782.md): Monitoring Interface Vulnerability Could Permit Unauthorized Access to Protected Information (CVSS 7.5, Hewlett Packard Enterprise (HPE) Private 5G Core)
- [CVE-2026-95781](https://cve.now/CVE-2026-95781.md): AthonetOS Vulnerability Could Enable Unauthorized Access or Compromise Service Integrity (CVSS 7.5, Hewlett Packard Enterprise (HPE) Private 5G Core)
- [CVE-2026-95780](https://cve.now/CVE-2026-95780.md): Authentication and Session Management Vulnerability Could Permit Continued Unauthorized Access (CVSS 8.1, Hewlett Packard Enterprise (HPE) Private 5G Core)
- [CVE-2026-120807](https://cve.now/CVE-2026-120807.md): Privilege escalation via fail-open user lookup in X.509 cluster-membership guard (CVSS 7.5, MongoDB Server)
- [CVE-2026-125339](https://cve.now/CVE-2026-125339.md): Winter CMS: CSRF through AJAX handler names reachable as backend page actions (CVSS 6.1, wintercms winter · winter/wn-backend-module)
- [CVE-2026-120806](https://cve.now/CVE-2026-120806.md): Authorization role-graph corruption via no-op cleanup filters in dropAllRolesFromDatabase (CVSS 7.0, MongoDB Server)
- [CVE-2026-120805](https://cve.now/CVE-2026-120805.md): Authorization bypass via redirected FLE2 state-collection writes in encrypted CRUD path (CVSS 2.3, MongoDB Server)
- [CVE-2026-120804](https://cve.now/CVE-2026-120804.md): Credential-handle retention via missing flag set in Windows Kerberos auth handler (CVSS 8.2, MongoDB Server)
- [CVE-2026-124848](https://cve.now/CVE-2026-124848.md): Incorrect default permissions on session transcripts and prompt history in Kiro CLI (CVSS 5.5, Amazon Kiro CLI)
- [CVE-2026-125338](https://cve.now/CVE-2026-125338.md): Winter CMS: Stored XSS through cached Brand Settings and Editor Settings custom styles (CVSS 4.5, wintercms winter · winter/wn-backend-module)
- [CVE-2026-120803](https://cve.now/CVE-2026-120803.md): MongoDB SBE $locf Window Accumulator Use-After-Free Enables Heap OOB Read and Server Crash (CVSS 7.1, MongoDB Server)
- [CVE-2026-125337](https://cve.now/CVE-2026-125337.md): Winter CMS: ImportExportController AJAX handlers bypass granular import/export permission gate (CVSS 8.3, wintercms winter · winter/wn-backend-module)
- [CVE-2026-115538](https://cve.now/CVE-2026-115538.md): Docker Engine overlay-network encryption rules are not restored after a firewalld reload (CVSS 7.0, Docker Engine · Moby)
- [CVE-2026-115539](https://cve.now/CVE-2026-115539.md): Cluster-API proxy overwrites forwarded client identity with its own (CVSS 7.7, moby SwarmKit · Docker Engine +1)
- [CVE-2026-104060](https://cve.now/CVE-2026-104060.md): Worklenz \< 3.3.0 SQL Injection via Reporting Members Endpoint (CVSS 7.1, worklenz)
- [CVE-2026-115483](https://cve.now/CVE-2026-115483.md): Everest Forms \<= 3.6.3 - Unauthenticated Arbitrary File Read via 'Signature' Field Meta Key Branch of attach\_entry\_files (CVSS 7.5, wpeverest Everest Forms – Contact Form, Payment Form, Quiz,…)
- [CVE-2026-50077](https://cve.now/CVE-2026-50077.md): Vulnerabilities in the QNX Virtual Machine (QVM) affect QNX Hypervisor and QNX Hypervisor for Safety (CVSS 7.7, BlackBerry QNX Hypervisor)
- [CVE-2026-50078](https://cve.now/CVE-2026-50078.md): Vulnerabilities in the QNX Virtual Machine (QVM) affect QNX Hypervisor and QNX Hypervisor for Safety (CVSS 4.4, BlackBerry QNX Hypervisor)
- [CVE-2026-95405](https://cve.now/CVE-2026-95405.md): In acquireMemory of bt\_bqr\_offload.cc, there is a possible way to trigger an out of bounds write via a buffer size underflow due to an… (no CVSS, Google Android)
- [CVE-2026-95404](https://cve.now/CVE-2026-95404.md): In multiple locations, there is a possible way to modify coprocessor instruction and data memory from non-secure software due to an… (CVSS 6.7, Google Android)
- [CVE-2026-95403](https://cve.now/CVE-2026-95403.md): In multiple locations, there is a possible way to trigger an out of bounds write in the shared memory tracking bitmap due to a missing… (no CVSS, Google Android)
- [CVE-2026-95402](https://cve.now/CVE-2026-95402.md): In slice\_header of hevc\_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. (no CVSS, Google Android)
- [CVE-2026-95401](https://cve.now/CVE-2026-95401.md): In knee\_function\_info of hevc\_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. (no CVSS, Google Android)
- [CVE-2026-95400](https://cve.now/CVE-2026-95400.md): In StNfc\_hal\_write of hal\_st21nfc.cc, there is a possible way to trigger an out of bounds write into global memory due to an incorrect… (no CVSS, Google Android)
- [CVE-2026-95399](https://cve.now/CVE-2026-95399.md): In multiple functions of face\_status.h, there is a possible way to modify verified biometric enrollment data in shared memory due to a… (no CVSS, Google Android)
- [CVE-2026-95397](https://cve.now/CVE-2026-95397.md): In sub\_layer\_hrd\_parameters of hevc\_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. (no CVSS, Google Android)
- [CVE-2026-59637](https://cve.now/CVE-2026-59637.md): In userdata\_report of hwcodec\_firmware, there is a possible Logic error due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-59636](https://cve.now/CVE-2026-59636.md): In has\_booted\_successfully of sys\_state\_setup\_otp\_ta.c, there is a possible way to trigger a permanent denial of service via premature… (no CVSS, Google Android)
- [CVE-2026-59635](https://cve.now/CVE-2026-59635.md): In cpb\_cnt of avc\_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. (no CVSS, Google Android)
- [CVE-2026-59632](https://cve.now/CVE-2026-59632.md): In RespondReceivedMessage of MtsMessageController.cpp, there is a possible way to trigger memory exhaustion via an undrained message queue… (CVSS 7.5, Google Android)
- [CVE-2026-59631](https://cve.now/CVE-2026-59631.md): In s\_inter\_rps\_pred of hevc\_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. (no CVSS, Google Android)
- [CVE-2026-59630](https://cve.now/CVE-2026-59630.md): In check\_constraint\_monotonicity of lib.rs, there is a possible way to downgrade stored security policies and bypass rollback protection… (no CVSS, Google Android)
- [CVE-2026-59628](https://cve.now/CVE-2026-59628.md): In s\_copy\_host\_apb\_param of multiple files, there is a possible way to trigger an out of bounds read in the video decoder command queue… (no CVSS, Google Android)
- [CVE-2026-59626](https://cve.now/CVE-2026-59626.md): In SendInfo of UssiController.cpp, there is a possible way to corrupt memory via a dangling connection listener pointer due to a use after… (no CVSS, Google Android)
- [CVE-2026-59625](https://cve.now/CVE-2026-59625.md): In GetTwiddledMiptreeSparsePageMap of texmgmt.c, there is a possible way to trigger an out of bounds write due to a logic error. (no CVSS, Google Android)
- [CVE-2026-124016](https://cve.now/CVE-2026-124016.md): postal-mime \< 4.2.1 Algorithmic Complexity DoS via processLine (CVSS 6.9, postalsys postal-mime)
- [CVE-2026-59624](https://cve.now/CVE-2026-59624.md): In multiple locations, there is a possible way to trigger an out of bounds read via direct memory access in video decoder firmware due to… (no CVSS, Google Android)
- [CVE-2026-59623](https://cve.now/CVE-2026-59623.md): In CompareTelUris of SipAddress.cpp, there is a possible way to trigger an unhandled out of range exception and process crash due to an… (CVSS 7.5, Google Android)
- [CVE-2026-59619](https://cve.now/CVE-2026-59619.md): In getCodecQp of GC2AV1Enc.cpp, there is a possible way to trigger an out of bounds read during quantization table lookup due to a missing… (no CVSS, Google Android)
- [CVE-2026-59618](https://cve.now/CVE-2026-59618.md): In smfc\_v4l2\_s\_selection of smfc-v4l2-ioctls.c, there is a possible way to trigger an out of bounds read from adjacent shared memory… (no CVSS, Google Android)
- [CVE-2026-59616](https://cve.now/CVE-2026-59616.md): In prev\_run\_vcore of hwcodec\_firmware, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. (no CVSS, Google Android)
- [CVE-2026-59614](https://cve.now/CVE-2026-59614.md): In multiple functions of oem\_svc\_setup.c, there is a possible way to dump secure cache lines into non-secure memory on warm reset due to a… (no CVSS, Google Android)
- [CVE-2026-59613](https://cve.now/CVE-2026-59613.md): In multiple locations, there is a possible way to trigger an out of bounds read and temporary denial of service due to improper input… (CVSS 7.5, Google Android)
- [CVE-2026-59612](https://cve.now/CVE-2026-59612.md): In buffering\_period of avc\_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. (no CVSS, Google Android)
- [CVE-2026-59611](https://cve.now/CVE-2026-59611.md): In multiple locations, there is a possible way to trigger a temporary denial of service via an integer overflow trap due to improper input… (CVSS 7.5, Google Android)
- [CVE-2026-50079](https://cve.now/CVE-2026-50079.md): Vulnerabilities in the QNX Virtual Machine (QVM) affect QNX Hypervisor and QNX Hypervisor for Safety (CVSS 3.3, BlackBerry QNX Hypervisor)
- [CVE-2026-59609](https://cve.now/CVE-2026-59609.md): In fence\_manager\_extract\_iif of fence\_manager.c, there is a possible way to corrupt kernel memory via fence identifier reuse due to a use… (no CVSS, Google Android)
- [CVE-2026-59608](https://cve.now/CVE-2026-59608.md): In tone\_mapping\_info of hevc\_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. (no CVSS, Google Android)
- [CVE-2026-59607](https://cve.now/CVE-2026-59607.md): In TzPipelineInputExtractor of TzPipelineInputExtractor.cpp, there is a possible Logic check bypass due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-59606](https://cve.now/CVE-2026-59606.md): In multiple functions of sswrp\_cpm.dtsi, there is a possible way to modify global reset registers from non-secure software due to a… (no CVSS, Google Android)
- [CVE-2026-59604](https://cve.now/CVE-2026-59604.md): In multiple locations, there is a possible way to trigger an unbounded loop in video decoder firmware due to a logic error. (no CVSS, Google Android)
- [CVE-2026-59603](https://cve.now/CVE-2026-59603.md): In RespondReceivedMessage of MtsMessageController.cpp, there is a possible way to trigger a double free and process abort during message… (CVSS 7.5, Google Android)
- [CVE-2026-59601](https://cve.now/CVE-2026-59601.md): In CalculateSampleRate of cldma\_alcedo.cc, there is a possible Heap Buffer Overflow due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-59599](https://cve.now/CVE-2026-59599.md): Android on supported Pixel devices before security patch level 2026-11-05 allows elevation of privilege in the hypervisor subcomponent in… (no CVSS, Google Android)
- [CVE-2026-59598](https://cve.now/CVE-2026-59598.md): In platform\_rio\_ncp\_wdt\_handler of edgetpu\_rio.c, there is a possible Use After Free due to a use after free. (no CVSS, Google Android)
- [CVE-2026-59597](https://cve.now/CVE-2026-59597.md): In bindDataService of DataServiceManager.java, there is a possible way to retain privileged tunnel management permissions across… (no CVSS, Google Android)
- [CVE-2026-59596](https://cve.now/CVE-2026-59596.md): In multiple functions of mpu.c, there is a possible way to execute code from non-secure memory in the security coprocessor due to an… (no CVSS, Google Android)
- [CVE-2026-59595](https://cve.now/CVE-2026-59595.md): In DecodeHeaderComponent of SipStack.cpp, there is a possible way to trigger stack exhaustion via unbounded mutual recursion due to a… (CVSS 7.5, Google Android)
- [CVE-2026-59594](https://cve.now/CVE-2026-59594.md): In spm\_alloc of encoder, there is a possible Heap Buffer Overflow due to a heap buffer overflow. (no CVSS, Google Android)
- [CVE-2026-59593](https://cve.now/CVE-2026-59593.md): In tile\_info of av1\_decoder, there is a possible Heap Buffer Overflow due to a heap buffer overflow. (no CVSS, Google Android)
- [CVE-2026-59589](https://cve.now/CVE-2026-59589.md): In s\_av1\_dec\_metadata\_scalability of av1\_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. (no CVSS, Google Android)
- [CVE-2026-59587](https://cve.now/CVE-2026-59587.md): In stpropnci\_prop\_st\_build\_set\_custom\_polling\_cmd of stpropnci\_prop\_st.cc, there is a possible way to trigger an out of bounds write into… (no CVSS, Google Android)
- [CVE-2026-59586](https://cve.now/CVE-2026-59586.md): In multiple locations, there is a possible way to recover cryptographic keys and forge authentication tags due to improperly used crypto. (no CVSS, Google Android)
- [CVE-2026-59585](https://cve.now/CVE-2026-59585.md): In SetDisplayName of RegInfoContact.cpp, there is a possible denial of service due to a missing null check. (CVSS 7.5, Google Android)
- [CVE-2026-59583](https://cve.now/CVE-2026-59583.md): In FormCredentials of SipAuHelper.cpp, there is a possible way to disclose authentication credentials in cleartext via a scheme downgrade… (no CVSS, Google Android)
- [CVE-2026-59582](https://cve.now/CVE-2026-59582.md): In StartTimer of UcePublishManager.cpp, there is a possible way to trigger a process abort during timer calculation due to an integer… (CVSS 7.5, Google Android)
- [CVE-2026-59580](https://cve.now/CVE-2026-59580.md): In trusty\_context\_switch of services/spd/trusty/trusty.c, there is a possible Secure world register state leak due to a logic error in the… (no CVSS, Google Android)
- [CVE-2026-59579](https://cve.now/CVE-2026-59579.md): In getUserDataPayload of GC2UserData.cpp, there is a possible Logic error due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-59578](https://cve.now/CVE-2026-59578.md): In s\_check\_valid\_tile\_param\_custom\_tile of av1\_encoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. (no CVSS, Google Android)
- [CVE-2026-59575](https://cve.now/CVE-2026-59575.md): In stpropnci\_cb\_observe\_mode\_suspend of stpropnci\_prop\_android.cc, there is a possible way to trigger an out of bounds write into global… (no CVSS, Google Android)
- [CVE-2026-59574](https://cve.now/CVE-2026-59574.md): In notifyPollingLoopFrames of hal\_fwlog.cc, there is a possible way to trigger an out of bounds read and write when formatting firmware… (no CVSS, Google Android)
- [CVE-2026-59573](https://cve.now/CVE-2026-59573.md): In max\_num\_ref\_frames of avc\_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. (no CVSS, Google Android)
- [CVE-2026-58813](https://cve.now/CVE-2026-58813.md): In mmap of mman.c, there is a possible way to trigger an out of bounds read and write via mapping size truncation due to an incorrect… (no CVSS, Google Android)
- [CVE-2026-58812](https://cve.now/CVE-2026-58812.md): In decode of fw\_vp9\_dec\_pic.c, there is a possible Logic error due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-58811](https://cve.now/CVE-2026-58811.md): In smmu\_get\_mair\_idx of smmu.c, there is a possible way to apply incorrect memory attributes to direct memory access mappings due to a… (no CVSS, Google Android)
- [CVE-2026-58810](https://cve.now/CVE-2026-58810.md): In multiple functions of simd\_ctx.c, there is a possible way to disclose secure vector predicate and fault registers to non-secure callers… (no CVSS, Google Android)
- [CVE-2026-58809](https://cve.now/CVE-2026-58809.md): In smmu\_domain\_config\_s1 of arm-smmu-v3.c, there is a possible OOB Write due to a missing bounds check. (CVSS 6.7, Google Android)
- [CVE-2026-58808](https://cve.now/CVE-2026-58808.md): In multiple locations, there is a possible way to dump secure cache lines into non-secure memory on warm reset due to a missing permission… (no CVSS, Google Android)
- [CVE-2026-58807](https://cve.now/CVE-2026-58807.md): In Retry\_MtsMessageInPending of MtsMessageController.cpp, there is a possible way to trigger memory exhaustion via leaked message objects… (CVSS 7.5, Google Android)
- [CVE-2026-58806](https://cve.now/CVE-2026-58806.md): In get\_sswrp\_state of cpm\_mbox\_srv/main.c, there is a possible Logic error due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-58805](https://cve.now/CVE-2026-58805.md): In multiple locations, there is a possible way to zero arbitrary secure memory via unvalidated image body addresses due to a missing… (no CVSS, Google Android)
- [CVE-2026-58804](https://cve.now/CVE-2026-58804.md): In ExecuteGraphCommand of multiple files, there is a possible way to trigger an out of bounds write via an oversized scratch memory… (no CVSS, Google Android)
- [CVE-2026-58803](https://cve.now/CVE-2026-58803.md): In bytes\_are\_equal of lib.rs, there is a possible way to recover authentication keys due to side channel information disclosure. (no CVSS, Google Android)
- [CVE-2026-58801](https://cve.now/CVE-2026-58801.md): In smmu\_domain\_config\_s1 of arm-smmu-v3.c, there is a possible way to access stale stream table entries across reassigned stream… (no CVSS, Google Android)
- [CVE-2026-58800](https://cve.now/CVE-2026-58800.md): In IMG\_vkCreateImageView of image\_view.c, there is a possible way to trigger a use after free due to memory corruption. (no CVSS, Google Android)
- [CVE-2026-58799](https://cve.now/CVE-2026-58799.md): In multiple functions of rmmi\_utility.c, there is a possible way to trigger an out of bounds write due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2026-58798](https://cve.now/CVE-2026-58798.md): In multiple functions of cn\_Tai.cpp, there is a possible way to trigger an out of bounds write due to memory corruption. (no CVSS, Google Android)
- [CVE-2026-58797](https://cve.now/CVE-2026-58797.md): In register\_dump\_dpa of sswrp\_pcie.c, there is a possible Logic error due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-58796](https://cve.now/CVE-2026-58796.md): In multiple functions of AndroidManifest.xml, there is a possible way to trigger unauthorized firmware updates via exported broadcast… (no CVSS, Google Android)
- [CVE-2026-58791](https://cve.now/CVE-2026-58791.md): In pic\_timing of hevc\_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. (no CVSS, Google Android)
- [CVE-2026-58790](https://cve.now/CVE-2026-58790.md): In CMD\_ENC\_SET\_PARAM of encoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. (no CVSS, Google Android)
- [CVE-2026-58789](https://cve.now/CVE-2026-58789.md): In s\_gen\_tile\_param of multiple files, there is a possible way to trigger an out of bounds write in tile parameter arrays due to an… (CVSS 7.5, Google Android)
- [CVE-2026-58788](https://cve.now/CVE-2026-58788.md): In stpropnci\_process\_std of stpropnci\_std.cc, there is a possible way to trigger an out of bounds write into global state due to a missing… (no CVSS, Google Android)
- [CVE-2026-58787](https://cve.now/CVE-2026-58787.md): In chppWifiRangingEventNotification of clients/wifi.c, there is a possible Heap Buffer Overflow due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-58786](https://cve.now/CVE-2026-58786.md): In cnm\_memset of hevc\_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. (no CVSS, Google Android)
- [CVE-2026-58785](https://cve.now/CVE-2026-58785.md): In update\_user\_consent of main.rs, there is a possible elevation of privilege due to uninitialized data. (CVSS 6.7, Google Android)
- [CVE-2026-58783](https://cve.now/CVE-2026-58783.md): In multiple locations, there is a possible denial of service due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-58782](https://cve.now/CVE-2026-58782.md): In multiple locations, there is a possible denial of service due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-58781](https://cve.now/CVE-2026-58781.md): In HostLinkBase::chreIpiHandler of host\_link.cc, there is a possible out-of-bounds write due to a missing bounds check. (CVSS 6.7, Google Android)
- [CVE-2026-58780](https://cve.now/CVE-2026-58780.md): In multiple locations, there is a possible out-of-bounds write due to an incorrect bounds check. (no CVSS, Google Android)
- [CVE-2026-58779](https://cve.now/CVE-2026-58779.md): In multiple locations, there is a possible permission bypass due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-58778](https://cve.now/CVE-2026-58778.md): In multiple locations, there is a possible use-after-free due to a race condition. (CVSS 6.4, Google Android)
- [CVE-2026-58769](https://cve.now/CVE-2026-58769.md): In multiple locations, there is a possible out-of-bounds read due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2026-58762](https://cve.now/CVE-2026-58762.md): In ac\_get\_prot\_config of plat\_trusty.c, there is a possible memory corruption due to improper input validation. (no CVSS, Google Android)
- [CVE-2026-58757](https://cve.now/CVE-2026-58757.md): In mfc\_alloc\_enc\_roi\_buffer of mfc\_buf.c, there is a possible out-of-bounds write due to a heap buffer overflow. (no CVSS, Google Android)
- [CVE-2026-58752](https://cve.now/CVE-2026-58752.md): In aoc\_unlocked\_ioctl\_handle\_ion\_fd of aoc.c, there is a possible type confusion due to improper input validation. (no CVSS, Google Android)
- [CVE-2026-58740](https://cve.now/CVE-2026-58740.md): In BitmapImageBuffer of bitmap\_image\_buffer.h, there is a possible out-of-bounds write due to an integer overflow. (no CVSS, Google Android)
- [CVE-2026-58736](https://cve.now/CVE-2026-58736.md): In NotifySipResponse of SessionEx.cpp, there is a possible way to corrupt memory via a dangling connection pointer in the pending response… (no CVSS, Google Android)
- [CVE-2026-58729](https://cve.now/CVE-2026-58729.md): In multiple files, there is a possible out-of-bounds write due to a missing bounds check. (CVSS 6.7, Google Android)
- [CVE-2026-58722](https://cve.now/CVE-2026-58722.md): In chppProcessDiscoverAllResponse of system/chre/chpp/clients/discovery.c, there is a possible Heap Buffer Overflow due to a logic error… (no CVSS, Google Android)
- [CVE-2026-58705](https://cve.now/CVE-2026-58705.md): In handleEvent of gscan.cpp, there is a possible way to trigger an out of bounds write on the heap due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2026-58702](https://cve.now/CVE-2026-58702.md): In createIntent of TimerAgent.java, there is a possible permission bypass due to a confused deputy. (no CVSS, Google Android)
- [CVE-2026-58697](https://cve.now/CVE-2026-58697.md): In codec3p\_secure of codec3p\_secure, there is a possible Heap Buffer Overflow due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2026-58696](https://cve.now/CVE-2026-58696.md): In multiple locations, there is a possible out-of-bounds write due to a heap buffer overflow. (CVSS 6.7, Google Android)
- [CVE-2026-58690](https://cve.now/CVE-2026-58690.md): In multiple functions of bitmap\_image\_buffer.h, there is a possible way to trigger an out of bounds write on the trusted execution… (no CVSS, Google Android)
- [CVE-2026-58684](https://cve.now/CVE-2026-58684.md): In smmu\_config\_l3tt of smmu.c, there is a possible permission bypass due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-58681](https://cve.now/CVE-2026-58681.md): In multiple locations, there is a possible out-of-bounds write due to an integer overflow. (no CVSS, Google Android)
- [CVE-2026-58680](https://cve.now/CVE-2026-58680.md): In cpm\_mbox\_power\_ctrl\_sswrp of cpm\_mbox.c, there is a possible permission bypass due to a precondition check failure. (no CVSS, Google Android)
- [CVE-2026-58677](https://cve.now/CVE-2026-58677.md): In get\_secure\_boot\_mode of auth.rs, there is a possible way to bypass root signature verification via fault injection due to a logic error. (no CVSS, Google Android)
- [CVE-2026-57048](https://cve.now/CVE-2026-57048.md): In authenticate of verify\_image, there is a possible Signature verification logic bypass due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-57047](https://cve.now/CVE-2026-57047.md): In \_\_mfc\_core\_nal\_q\_get\_dec\_metadata\_sei\_nal of mfc\_core\_nal\_q.c, there is a possible out-of-bounds write due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2026-57043](https://cve.now/CVE-2026-57043.md): In tipc\_dev\_probe of tipc\_virtio\_dev.c, there is a possible way to corrupt memory via an off-by-one cleanup loop on probe failure due to a… (no CVSS, Google Android)
- [CVE-2026-57037](https://cve.now/CVE-2026-57037.md): In getChppAppState of chpp\_init.cc, there is a possible way to trigger an out of bounds read and corrupt task control structures due to a… (no CVSS, Google Android)
- [CVE-2026-57036](https://cve.now/CVE-2026-57036.md): In send\_vdu\_directive of gdmc/gsp/dev/bmsm/plat/lga/vdu.c, there is a possible Logic error due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-57013](https://cve.now/CVE-2026-57013.md): In access\_control\_enable of multiple files, there is a possible way to release secure coprocessors from reset via unclaimed firewall… (CVSS 6.7, Google Android)
- [CVE-2026-57010](https://cve.now/CVE-2026-57010.md): In EncodeLastScanBufferElement of data\_manager.cc, there is a possible out-of-bounds write due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-57009](https://cve.now/CVE-2026-57009.md): In GC2AvcDec of GC2AvcDec.cpp, there is a possible Logic error due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-57005](https://cve.now/CVE-2026-57005.md): In EuiccPort.buildUiccAccessRule of EuiccPort.java, there is a possible Confused Deputy due to a confused deputy. (no CVSS, Google Android)
- [CVE-2026-57004](https://cve.now/CVE-2026-57004.md): In PresenceDecoderV1::DecodeDataElements of presence\_decoder\_v1.cc, there is a possible out-of-bounds write due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2026-56995](https://cve.now/CVE-2026-56995.md): In multiple locations, there is a possible way to corrupt host allocator metadata in shared memory due to memory corruption. (no CVSS, Google Android)
- [CVE-2026-56980](https://cve.now/CVE-2026-56980.md): In createDataFlowAsync of data\_flow\_manager.cc, there is a possible way to trigger an out of bounds write in shared memory due to an… (no CVSS, Google Android)
- [CVE-2026-56971](https://cve.now/CVE-2026-56971.md): In AudioSession::SendInternalEvent of AudioSession.cpp, there is a possible Double Free due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-56969](https://cve.now/CVE-2026-56969.md): In edgetpu\_group\_clear\_responses of edgetpu\_group.c, there is a possible Use After Free due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-56966](https://cve.now/CVE-2026-56966.md): In CommitToBuffer of hal\_override\_options.bundle.cc, there is a possible way to retain stale direct memory access mappings to secure… (no CVSS, Google Android)
- [CVE-2026-56956](https://cve.now/CVE-2026-56956.md): In EncodeT140 of TextRtpPayloadEncoderNode.cpp, there is a possible Heap Buffer Overflow due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-56951](https://cve.now/CVE-2026-56951.md): In on\_vkUpdateDescriptorSetWithTemplateSized2GOOGLE of vk\_decoder\_global\_state.cpp, there is a possible way to leak host code pointers to… (no CVSS, Google Android)
- [CVE-2026-56949](https://cve.now/CVE-2026-56949.md): In multiple locations, there is a possible way to modify authenticated coprocessor firmware in shared memory before loading due to a race… (CVSS 6.4, Google Android)
- [CVE-2026-56947](https://cve.now/CVE-2026-56947.md): In getCarrierRestrictionStatus of PhoneInterfaceManager.java, there is a possible permission bypass due to a confused deputy. (no CVSS, Google Android)
- [CVE-2026-56946](https://cve.now/CVE-2026-56946.md): In smmu\_unmap\_visit\_leaf of arm-smmu-v3.c, there is a possible way to release active direct memory access page references during unmapping… (no CVSS, Google Android)
- [CVE-2026-56944](https://cve.now/CVE-2026-56944.md): In smmu\_detach\_dev of private/google-modules/iommu/arm-smmu-v3/drivers/iommu/arm/arm-smmu-v3/pkvm/arm-smmu-v3.c, there is a possible Use… (no CVSS, Google Android)
- [CVE-2026-56943](https://cve.now/CVE-2026-56943.md): In multiple locations, there is a possible way to trigger an out of bounds read via an attestation comparison oracle due to an incorrect… (no CVSS, Google Android)
- [CVE-2026-56938](https://cve.now/CVE-2026-56938.md): In port\_shutdown of ipc.c, there is a possible Use After Free due to a race condition. (no CVSS, Google Android)
- [CVE-2026-56935](https://cve.now/CVE-2026-56935.md): In km\_os\_regen\_salt of storage.c, there is a possible way to recover deleted keys due to a logic error. (no CVSS, Google Android)
- [CVE-2026-56934](https://cve.now/CVE-2026-56934.md): In arm\_lpae\_split\_blk\_unmap of drivers/iommu/io-pgtable-arm-common.c, there is a possible Logic error due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-56933](https://cve.now/CVE-2026-56933.md): In RecordApTx of efw\_ap\_transport.c, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. (no CVSS, Google Android)
- [CVE-2026-56930](https://cve.now/CVE-2026-56930.md): In smmu\_find\_ste of smmu.c, there is a possible way to retain stale translation lookaside buffer entries across stream identifiers due to… (no CVSS, Google Android)
- [CVE-2026-56929](https://cve.now/CVE-2026-56929.md): In TrustyKeyMintManager::VerifyHat of trusty\_keymint\_manager.cc, there is a possible Security check bypass due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-56926](https://cve.now/CVE-2026-56926.md): In multiple functions of PssSubscriptionManager.java, there is a possible way to spoof subscription switch results and trigger a device… (no CVSS, Google Android)
- [CVE-2026-56919](https://cve.now/CVE-2026-56919.md): In PackageSignatureChecker of SystemUIGoogleModule.java, there is a possible background activity launch due to a confused deputy. (no CVSS, Google Android)
- [CVE-2026-56916](https://cve.now/CVE-2026-56916.md): In \_vqueue\_get\_avail\_buf\_locked of trusty/kernel/lib/trusty/vqueue.c, there is a possible Double-read / TOCTOU due to a race condition. (no CVSS, Google Android)
- [CVE-2026-56912](https://cve.now/CVE-2026-56912.md): In ac\_remove\_smmu\_prot\_internal of acfw\_smmu.c, there is a possible Logic error due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-56911](https://cve.now/CVE-2026-56911.md): In handle\_fips\_hmac\_req of hwcrypto\_proxy.c, there is a possible heap buffer overflow due to missing bounds check. (CVSS 6.7, Google Android)
- [CVE-2026-56910](https://cve.now/CVE-2026-56910.md): In multiple locations, there is a possible way to trigger an out of bounds read and write in shared memory due to an incorrect bounds check. (no CVSS, Google Android)
- [CVE-2026-56909](https://cve.now/CVE-2026-56909.md): In multiple functions of sswrp\_cpm.dtsi, there is a possible way to modify voltage control registers from non-secure software due to a… (no CVSS, Google Android)
- [CVE-2026-56902](https://cve.now/CVE-2026-56902.md): In multiple locations, there is a possible information disclosure due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-56898](https://cve.now/CVE-2026-56898.md): In aes256\_cmac\_sw of aes.rs, there is a possible way to forge message authentication codes over multi-block messages due to improperly… (no CVSS, Google Android)
- [CVE-2026-56897](https://cve.now/CVE-2026-56897.md): In multiple functions of attestation\_object.c, there is a possible way to disclose uninitialized secure element stack memory in key… (no CVSS, Google Android)
- [CVE-2026-56884](https://cve.now/CVE-2026-56884.md): In ac\_set\_ns\_ipa\_tbl of plat\_trusty.c, there is a possible way to corrupt stream table entry configurations via unvalidated parameters due… (CVSS 6.7, Google Android)
- [CVE-2026-55362](https://cve.now/CVE-2026-55362.md): In multiple files, there is a possible out-of-bounds write due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2026-55360](https://cve.now/CVE-2026-55360.md): In secure\_transport\_usecase\_handshake of secure\_transport.c, there is a possible way to bypass secure transport channel encryption due to… (no CVSS, Google Android)
- [CVE-2026-55348](https://cve.now/CVE-2026-55348.md): In GetSharedMemory of trusty\_shared\_memory\_manager.cc, there is a possible way to trigger an out of bounds read via sign extension of a… (no CVSS, Google Android)
- [CVE-2026-55346](https://cve.now/CVE-2026-55346.md): In km\_read\_data\_response of keymaster.c, there is a possible way to trigger an out of bounds write on the heap due to a missing bounds… (CVSS 6.7, Google Android)
- [CVE-2026-55344](https://cve.now/CVE-2026-55344.md): In TzSharedMemory of TzSharedMemory.c, there is a possible Heap buffer overflow due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-55335](https://cve.now/CVE-2026-55335.md): In multiple locations, there is a possible use-after-free due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-55321](https://cve.now/CVE-2026-55321.md): In parse\_prime256v1 of keymint\_asn1.c, there is a possible Heap Buffer Overflow due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-55319](https://cve.now/CVE-2026-55319.md): In thread\_free of thread.c, there is a possible way to corrupt kernel heap metadata on thread creation failure due to memory corruption. (no CVSS, Google Android)
- [CVE-2026-55316](https://cve.now/CVE-2026-55316.md): In handle\_dpm\_image of seclib.rs, there is a possible Logic error due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-55312](https://cve.now/CVE-2026-55312.md): In insert\_node of remap.c, there is a possible way to trigger an out of bounds write in the address remapping table due to a non-heap… (no CVSS, Google Android)
- [CVE-2026-55311](https://cve.now/CVE-2026-55311.md): In N/A of gdmc/gsp/project/gdmc.mk, there is a possible Logic error due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-55309](https://cve.now/CVE-2026-55309.md): In multiple functions of verifier.rs, there is a possible way to bypass secure boot signature verification via fault injection due to a… (no CVSS, Google Android)
- [CVE-2026-55297](https://cve.now/CVE-2026-55297.md): In handle\_chan\_msg of tipc\_virtio\_dev.c, there is a possible way to bypass memory tag access controls via concurrent shared memory… (CVSS 6.4, Google Android)
- [CVE-2026-14447](https://cve.now/CVE-2026-14447.md): In ext\_mem\_obj\_get\_page of memss-mfw.c, there is a possible way to return an out of bounds physical address via an off-by-one check due to… (no CVSS, Google Android)
- [CVE-2026-0195](https://cve.now/CVE-2026-0195.md): In fill of dma.rs, there is a possible way to trigger an out of bounds stack read during direct memory access fills due to a logic error. (no CVSS, Google Android)
- [CVE-2026-0193](https://cve.now/CVE-2026-0193.md): In handle\_rx\_msg of tipc\_virtio\_dev, there is a possible Double Fetch TOCTOU due to Double Fetch. (no CVSS, Google Android)
- [CVE-2026-0191](https://cve.now/CVE-2026-0191.md): In event\_set\_sub of acropora\_event.c, there is a possible Logic error due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-0178](https://cve.now/CVE-2026-0178.md): In multiple functions of arm-smmu-v3.c, there is a possible way to bypass direct memory access isolation via stale stream table entries… (no CVSS, Google Android)
- [CVE-2026-0175](https://cve.now/CVE-2026-0175.md): In multiple locations, there is a possible way to bypass key authorization policies during wrapped key import due to a logic error. (no CVSS, Google Android)
- [CVE-2026-0169](https://cve.now/CVE-2026-0169.md): In multiple functions of Android.bp, there is a possible way to bind to a privileged debug overlay service due to test or debugging code. (no CVSS, Google Android)
- [CVE-2026-50080](https://cve.now/CVE-2026-50080.md): Vulnerabilities in the QNX Virtual Machine (QVM) affect QNX Hypervisor and QNX Hypervisor for Safety (CVSS 3.3, BlackBerry QNX Hypervisor)
- [CVE-2026-40273](https://cve.now/CVE-2026-40273.md): Vulnerabilities in the QNX Neutrino kernel affect QNX Software Development Platform and QNX OS for Safety (CVSS 4.0, BlackBerry QNX Software Development Platform · BlackBerr… +1)
- [CVE-2026-40274](https://cve.now/CVE-2026-40274.md): Vulnerabilities in the QNX Neutrino kernel affect QNX Software Development Platform and QNX OS for Safety (CVSS 4.0, BlackBerry QNX Software Development Platform · BlackBerr… +1)
- [CVE-2026-126136](https://cve.now/CVE-2026-126136.md): OAuth2 access token could be sent over an unencrypted connection with Exchange accounts (no CVSS, Mozilla Thunderbird)
- [CVE-2026-126135](https://cve.now/CVE-2026-126135.md): SMTP and POP3 response injection when using STARTTLS (no CVSS, Mozilla Thunderbird)
- [CVE-2026-126134](https://cve.now/CVE-2026-126134.md): Feed subscriptions could leak NTLM credentials on Windows (no CVSS, Mozilla Thunderbird)
- [CVE-2026-126133](https://cve.now/CVE-2026-126133.md): Calendar server credentials could be sent to an HTTP proxy (no CVSS, Mozilla Thunderbird)
- [CVE-2026-126132](https://cve.now/CVE-2026-126132.md): Attachments could be replaced with local file content when forwarding (no CVSS, Mozilla Thunderbird)
- [CVE-2026-40275](https://cve.now/CVE-2026-40275.md): Vulnerabilities in the QNX Neutrino kernel affect QNX Software Development Platform and QNX OS for Safety (CVSS 8.4, BlackBerry QNX Software Development Platform · BlackBerr… +1)
- [CVE-2026-125336](https://cve.now/CVE-2026-125336.md): Forge: X.509 nameConstraints not enforced by verifyCertificateChain() (CVSS 7.4, digitalbazaar forge)
- [CVE-2026-125335](https://cve.now/CVE-2026-125335.md): Forge: Ed25519 signature verification accepts small-order public keys (CVSS 3.7, digitalbazaar forge · node-forge)
- [CVE-2026-14968](https://cve.now/CVE-2026-14968.md): AMD MmSaveStateLib SysCall path performs out-of-bounds writes for partial save-state reads (CVSS 7.0, TianoCore EDK2)
- [CVE-2026-126087](https://cve.now/CVE-2026-126087.md): Untrusted search path in the cross-user process launcher in OpenJD Sessions for Python, as used in the AWS Deadline Cloud worker agent (CVSS 8.8, AWS openjd-sessions · AWS deadline-cloud-worker-agent)
- [CVE-2026-125334](https://cve.now/CVE-2026-125334.md): Forge: TLS client crash on a handshake record received without a session (CVSS 5.9, digitalbazaar forge · node-forge)
- [CVE-2026-125333](https://cve.now/CVE-2026-125333.md): Forge: ReDoS in forge.http response header and cookie trimming (CVSS 5.9, digitalbazaar forge · node-forge)
- [CVE-2026-125332](https://cve.now/CVE-2026-125332.md): Forge: TLS client crash on an unsupported ServerHello compression method (CVSS 5.9, digitalbazaar forge · node-forge)
- [CVE-2026-54436](https://cve.now/CVE-2026-54436.md): Vulnerabilities in the QNX io-char library Impacts QNX Software Development Platform (CVSS 7.4, BlackBerry QNX Software Development Platform)
- [CVE-2026-115559](https://cve.now/CVE-2026-115559.md): imaplib STARTTLS serves plaintext bytes buffered before the handshake as if they came over TLS (CVSS 6.3, Python Software Foundation CPython)
- [CVE-2026-18448](https://cve.now/CVE-2026-18448.md): Leak SMM RAM from the kernel (Simply TSA after an SMI) (CVSS 5.6, TianoCore EDK2)
- [CVE-2026-54437](https://cve.now/CVE-2026-54437.md): Vulnerabilities in the QNX io-char library Impacts QNX Software Development Platform (CVSS 6.2, BlackBerry QNX Software Development Platform)
- [CVE-2026-125331](https://cve.now/CVE-2026-125331.md): HarnessRouter: Service-only routes that write an organization's provider connections could be reached through a multi-tenant console with… (CVSS 9.1, harnessrouter)
- [CVE-2026-125330](https://cve.now/CVE-2026-125330.md): HarnessRouter: A workspace's API key could read and change sessions, files and responses of other workspaces in the same organization (CVSS 7.5, harnessrouter)
- [CVE-2026-105437](https://cve.now/CVE-2026-105437.md): Heap-based Buffer Overflow in Git (CVSS 7.5, Git)
- [CVE-2026-125329](https://cve.now/CVE-2026-125329.md): Kaneo: Gitea integration access token and webhook secret exposed to any workspace member (CVSS 8.4, usekaneo kaneo)
- [CVE-2026-120003](https://cve.now/CVE-2026-120003.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-120002](https://cve.now/CVE-2026-120002.md): Microsoft SharePoint Server Elevation of Privilege Vulnerability (CVSS 9.9, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-120001](https://cve.now/CVE-2026-120001.md): Microsoft Office PowerPoint Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-120000](https://cve.now/CVE-2026-120000.md): Microsoft Office SharePoint Remote Code Execution Vulnerability (CVSS 7.5, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-119999](https://cve.now/CVE-2026-119999.md): Microsoft Office Excel Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-119998](https://cve.now/CVE-2026-119998.md): Microsoft Office Security Feature Bypass Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-119997](https://cve.now/CVE-2026-119997.md): Microsoft Office Outlook Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-119996](https://cve.now/CVE-2026-119996.md): Microsoft Office Outlook Remote Code Execution Vulnerability (CVSS 7.5, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-119995](https://cve.now/CVE-2026-119995.md): Microsoft Office Outlook Remote Code Execution Vulnerability (CVSS 7.5, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-119993](https://cve.now/CVE-2026-119993.md): Microsoft Office Outlook Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-118732](https://cve.now/CVE-2026-118732.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-118731](https://cve.now/CVE-2026-118731.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-118730](https://cve.now/CVE-2026-118730.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-118729](https://cve.now/CVE-2026-118729.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-118728](https://cve.now/CVE-2026-118728.md): Microsoft Office Excel Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-118727](https://cve.now/CVE-2026-118727.md): Microsoft Office Excel Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-118726](https://cve.now/CVE-2026-118726.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-118725](https://cve.now/CVE-2026-118725.md): Microsoft Office Excel Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-118724](https://cve.now/CVE-2026-118724.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-118723](https://cve.now/CVE-2026-118723.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-118722](https://cve.now/CVE-2026-118722.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-118721](https://cve.now/CVE-2026-118721.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-118720](https://cve.now/CVE-2026-118720.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-118719](https://cve.now/CVE-2026-118719.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-118718](https://cve.now/CVE-2026-118718.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-118717](https://cve.now/CVE-2026-118717.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-118716](https://cve.now/CVE-2026-118716.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-118715](https://cve.now/CVE-2026-118715.md): Microsoft Office Excel Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-118714](https://cve.now/CVE-2026-118714.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-118713](https://cve.now/CVE-2026-118713.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-118712](https://cve.now/CVE-2026-118712.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-118711](https://cve.now/CVE-2026-118711.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-118710](https://cve.now/CVE-2026-118710.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-118709](https://cve.now/CVE-2026-118709.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-118708](https://cve.now/CVE-2026-118708.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-118707](https://cve.now/CVE-2026-118707.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-118706](https://cve.now/CVE-2026-118706.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-118705](https://cve.now/CVE-2026-118705.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-118704](https://cve.now/CVE-2026-118704.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-118703](https://cve.now/CVE-2026-118703.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-118702](https://cve.now/CVE-2026-118702.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-118701](https://cve.now/CVE-2026-118701.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-118700](https://cve.now/CVE-2026-118700.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-118302](https://cve.now/CVE-2026-118302.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-118301](https://cve.now/CVE-2026-118301.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 7.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-118300](https://cve.now/CVE-2026-118300.md): Microsoft Office Excel Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-118299](https://cve.now/CVE-2026-118299.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-118298](https://cve.now/CVE-2026-118298.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-118297](https://cve.now/CVE-2026-118297.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-118296](https://cve.now/CVE-2026-118296.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-118295](https://cve.now/CVE-2026-118295.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-118294](https://cve.now/CVE-2026-118294.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-118293](https://cve.now/CVE-2026-118293.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-118292](https://cve.now/CVE-2026-118292.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-118148](https://cve.now/CVE-2026-118148.md): Active Directory Domain Services Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-118120](https://cve.now/CVE-2026-118120.md): Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft SQL Server)
- [CVE-2026-118119](https://cve.now/CVE-2026-118119.md): Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft SQL Server)
- [CVE-2026-118118](https://cve.now/CVE-2026-118118.md): Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft SQL Server)
- [CVE-2026-118117](https://cve.now/CVE-2026-118117.md): Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft SQL Server)
- [CVE-2026-118116](https://cve.now/CVE-2026-118116.md): Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft SQL Server)
- [CVE-2026-118115](https://cve.now/CVE-2026-118115.md): Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft SQL Server)
- [CVE-2026-118114](https://cve.now/CVE-2026-118114.md): Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft SQL Server)
- [CVE-2026-118113](https://cve.now/CVE-2026-118113.md): Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft SQL Server)
- [CVE-2026-118112](https://cve.now/CVE-2026-118112.md): Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft SQL Server)
- [CVE-2026-118111](https://cve.now/CVE-2026-118111.md): Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft SQL Server)
- [CVE-2026-118110](https://cve.now/CVE-2026-118110.md): Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft SQL Server)
- [CVE-2026-118109](https://cve.now/CVE-2026-118109.md): Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft SQL Server)
- [CVE-2026-118108](https://cve.now/CVE-2026-118108.md): Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft SQL Server)
- [CVE-2026-118106](https://cve.now/CVE-2026-118106.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 8.1, Microsoft SQL Server)
- [CVE-2026-118105](https://cve.now/CVE-2026-118105.md): Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft SQL Server)
- [CVE-2026-118104](https://cve.now/CVE-2026-118104.md): Microsoft SQL Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft SQL Server)
- [CVE-2026-118103](https://cve.now/CVE-2026-118103.md): Microsoft SQL Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft SQL Server)
- [CVE-2026-118102](https://cve.now/CVE-2026-118102.md): Microsoft SQL Server Information Disclosure Vulnerability (CVSS 5.9, Microsoft SQL Server)
- [CVE-2026-116947](https://cve.now/CVE-2026-116947.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 7.5, Microsoft SQL Server)
- [CVE-2026-116946](https://cve.now/CVE-2026-116946.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SQL Server)
- [CVE-2026-116945](https://cve.now/CVE-2026-116945.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 9.8, Microsoft SQL Server)
- [CVE-2026-116944](https://cve.now/CVE-2026-116944.md): Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 7.2, Microsoft SQL Server)
- [CVE-2026-116943](https://cve.now/CVE-2026-116943.md): Microsoft SQL Server Information Disclosure Vulnerability (CVSS 7.5, Microsoft SQL Server)
- [CVE-2026-116942](https://cve.now/CVE-2026-116942.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SQL Server 2017 for x64-based Systems · Microsoft…)
- [CVE-2026-116941](https://cve.now/CVE-2026-116941.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SQL Server)
- [CVE-2026-116940](https://cve.now/CVE-2026-116940.md): Microsoft SQL Server Information Disclosure Vulnerability (CVSS 4.9, Microsoft SQL Server)
- [CVE-2026-116939](https://cve.now/CVE-2026-116939.md): Microsoft SQL Server Information Disclosure Vulnerability (CVSS 5.7, Microsoft SQL Server)
- [CVE-2026-116938](https://cve.now/CVE-2026-116938.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 7.5, Microsoft SQL Server 2017 for x64-based Systems · Microsoft…)
- [CVE-2026-116937](https://cve.now/CVE-2026-116937.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 7.5, Microsoft SQL Server 2017 for x64-based Systems · Microsoft…)
- [CVE-2026-116936](https://cve.now/CVE-2026-116936.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 7.2, Microsoft SQL Server)
- [CVE-2026-116935](https://cve.now/CVE-2026-116935.md): Microsoft SQL Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft SQL Server 2017 for x64-based Systems · Microsoft…)
- [CVE-2026-116934](https://cve.now/CVE-2026-116934.md): Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft SQL Server 2017 for x64-based Systems · Microsoft…)
- [CVE-2026-116933](https://cve.now/CVE-2026-116933.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 7.2, Microsoft SQL Server)
- [CVE-2026-116932](https://cve.now/CVE-2026-116932.md): Microsoft SQL Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft SQL Server)
- [CVE-2026-116931](https://cve.now/CVE-2026-116931.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 7.5, Microsoft SQL Server)
- [CVE-2026-116930](https://cve.now/CVE-2026-116930.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SQL Server)
- [CVE-2026-116929](https://cve.now/CVE-2026-116929.md): Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft SQL Server)
- [CVE-2026-116927](https://cve.now/CVE-2026-116927.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-116926](https://cve.now/CVE-2026-116926.md): Microsoft Teams Spoofing Vulnerability (CVSS 7.5, Microsoft Teams for Android)
- [CVE-2026-116923](https://cve.now/CVE-2026-116923.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-116922](https://cve.now/CVE-2026-116922.md): Microsoft Office PowerPoint Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-116722](https://cve.now/CVE-2026-116722.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-116721](https://cve.now/CVE-2026-116721.md): Microsoft Office Word Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-116720](https://cve.now/CVE-2026-116720.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-116719](https://cve.now/CVE-2026-116719.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-116718](https://cve.now/CVE-2026-116718.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 7.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-116717](https://cve.now/CVE-2026-116717.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-119382](https://cve.now/CVE-2026-119382.md): Windows TPM Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-118741](https://cve.now/CVE-2026-118741.md): ASP.NET Core Elevation of Privilege Vulnerability (CVSS 8.1, Microsoft.dotnet-scaffold · Microsoft.dotnet-scaffold-as… +5)
- [CVE-2026-118740](https://cve.now/CVE-2026-118740.md): Aspire Security Feature Bypass Vulnerability (CVSS 9.1, Microsoft Aspire Dashboard · Microsoft Aspire.Dashboard.Sdk…)
- [CVE-2026-118288](https://cve.now/CVE-2026-118288.md): Microsoft Azure File Sync Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Azure File Sync)
- [CVE-2026-122475](https://cve.now/CVE-2026-122475.md): Windows Storage Spaces Controller Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-122474](https://cve.now/CVE-2026-122474.md): Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability (CVSS 5.9, Microsoft Windows)
- [CVE-2026-122297](https://cve.now/CVE-2026-122297.md): Windows Kernel Transaction Manager Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-122183](https://cve.now/CVE-2026-122183.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-122182](https://cve.now/CVE-2026-122182.md): Windows Maps Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-122179](https://cve.now/CVE-2026-122179.md): Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-122177](https://cve.now/CVE-2026-122177.md): Windows iSCSI Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-122176](https://cve.now/CVE-2026-122176.md): Windows SMB Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-122175](https://cve.now/CVE-2026-122175.md): Windows Autopilot Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-122174](https://cve.now/CVE-2026-122174.md): Windows Task Scheduler Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-122173](https://cve.now/CVE-2026-122173.md): HID Parser Library Elevation of Privilege Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2026-122172](https://cve.now/CVE-2026-122172.md): Microsoft Trace Data Helper Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-122171](https://cve.now/CVE-2026-122171.md): Microsoft XPS Document Converter Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-122170](https://cve.now/CVE-2026-122170.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-122169](https://cve.now/CVE-2026-122169.md): Windows IKE Extension Spoofing Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-122168](https://cve.now/CVE-2026-122168.md): Microsoft Windows Media Foundation Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-122167](https://cve.now/CVE-2026-122167.md): Windows USB Driver Elevation of Privilege Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2026-122166](https://cve.now/CVE-2026-122166.md): Windows Remote Desktop Services Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-122165](https://cve.now/CVE-2026-122165.md): Windows Client for NFS Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-122164](https://cve.now/CVE-2026-122164.md): Windows Kerberos Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows)
- [CVE-2026-122163](https://cve.now/CVE-2026-122163.md): Windows Image Acquisition Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-122162](https://cve.now/CVE-2026-122162.md): Windows Update Stack Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-121681](https://cve.now/CVE-2026-121681.md): Microsoft Trace Data Helper Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-121680](https://cve.now/CVE-2026-121680.md): Windows NTLM Spoofing Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-121678](https://cve.now/CVE-2026-121678.md): Windows Remote Desktop Client Information Disclosure Vulnerability (CVSS 5.3, Microsoft Windows App Client for Windows Desktop)
- [CVE-2026-121677](https://cve.now/CVE-2026-121677.md): Windows Remote Desktop Client Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows App Client for Windows Desktop)
- [CVE-2026-121675](https://cve.now/CVE-2026-121675.md): PowerShell Information Disclosure Vulnerability (CVSS 6.1, Microsoft PowerShell)
- [CVE-2026-121674](https://cve.now/CVE-2026-121674.md): PowerShell Information Disclosure Vulnerability (CVSS 6.1, Microsoft PowerShell)
- [CVE-2026-121673](https://cve.now/CVE-2026-121673.md): Windows Filter Manager Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-121671](https://cve.now/CVE-2026-121671.md): Windows Audio Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-121670](https://cve.now/CVE-2026-121670.md): Windows Overlay Filter Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-121669](https://cve.now/CVE-2026-121669.md): PowerShell Information Disclosure Vulnerability (CVSS 6.1, Microsoft PowerShell)
- [CVE-2026-121664](https://cve.now/CVE-2026-121664.md): Visual Studio Code Remote Code Execution Vulnerability (CVSS 8.3, Microsoft Visual Studio Code)
- [CVE-2026-121663](https://cve.now/CVE-2026-121663.md): Visual Studio Code Security Feature Bypass Vulnerability (CVSS 8.8, Microsoft Visual Studio Code)
- [CVE-2026-121662](https://cve.now/CVE-2026-121662.md): Visual Studio Code Remote Code Execution Vulnerability (CVSS 8.6, Microsoft Visual Studio Code)
- [CVE-2026-121661](https://cve.now/CVE-2026-121661.md): Visual Studio Code Security Feature Bypass Vulnerability (CVSS 7.8, Microsoft Visual Studio Code)
- [CVE-2026-121660](https://cve.now/CVE-2026-121660.md): Visual Studio Code Security Feature Bypass Vulnerability (CVSS 7.5, Microsoft Visual Studio Code)
- [CVE-2026-120796](https://cve.now/CVE-2026-120796.md): .NET Denial of Service Vulnerability (CVSS 5.3, Microsoft .NET 11.0 installed on Linux · Microsoft .NET… +14)
- [CVE-2026-119983](https://cve.now/CVE-2026-119983.md): Visual Studio Code Security Feature Bypass Vulnerability (CVSS 8.8, Microsoft Visual Studio Code)
- [CVE-2026-120778](https://cve.now/CVE-2026-120778.md): Aspire Elevation of Privilege Vulnerability (CVSS 7.3, Microsoft Aspire.Cli · Aspire.Cli +11)
- [CVE-2026-119989](https://cve.now/CVE-2026-119989.md): Azure Pipelines Remote Code Execution Vulnerability (CVSS 8.2, Microsoft Azure Web Apps)
- [CVE-2026-119988](https://cve.now/CVE-2026-119988.md): Windows SMB Remote Code Execution Vulnerability (CVSS 7.1, Microsoft Windows)
- [CVE-2026-119974](https://cve.now/CVE-2026-119974.md): Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-119972](https://cve.now/CVE-2026-119972.md): Remote Procedure Call Denial of Service Vulnerability (CVSS 5.9, Microsoft Windows)
- [CVE-2026-119971](https://cve.now/CVE-2026-119971.md): Windows DNS Server Information Disclosure Vulnerability (CVSS 4.9, Microsoft Windows Server)
- [CVE-2026-119970](https://cve.now/CVE-2026-119970.md): Windows DNS Information Disclosure Vulnerability (CVSS 4.9, Microsoft Windows Server)
- [CVE-2026-119969](https://cve.now/CVE-2026-119969.md): Graphic Fonts Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-119967](https://cve.now/CVE-2026-119967.md): Windows Message Queuing Queue Manager Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2026-119966](https://cve.now/CVE-2026-119966.md): Windows Graphics Kernel Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-119965](https://cve.now/CVE-2026-119965.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 6.4, Microsoft Windows)
- [CVE-2026-119964](https://cve.now/CVE-2026-119964.md): Windows Message Queuing Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2026-119963](https://cve.now/CVE-2026-119963.md): Windows Message Queuing Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2026-119962](https://cve.now/CVE-2026-119962.md): Windows CredSSP Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2026-119961](https://cve.now/CVE-2026-119961.md): Windows Internet Information Services Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2026-119960](https://cve.now/CVE-2026-119960.md): Windows Hyper-V Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-119958](https://cve.now/CVE-2026-119958.md): Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-119957](https://cve.now/CVE-2026-119957.md): Windows Remote Desktop Services Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows Server)
- [CVE-2026-119955](https://cve.now/CVE-2026-119955.md): Windows Hyper-V Denial of Service Vulnerability (CVSS 6.0, Microsoft Windows)
- [CVE-2026-119954](https://cve.now/CVE-2026-119954.md): Microsoft Windows Search Component Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-119953](https://cve.now/CVE-2026-119953.md): Windows DNS Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-119952](https://cve.now/CVE-2026-119952.md): Windows Schannel Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2026-119951](https://cve.now/CVE-2026-119951.md): Windows Deployment Services Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows Server)
- [CVE-2026-119950](https://cve.now/CVE-2026-119950.md): Windows Print Spooler Components Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-119948](https://cve.now/CVE-2026-119948.md): Windows Active Directory Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-119947](https://cve.now/CVE-2026-119947.md): Windows Hyper-V Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-119946](https://cve.now/CVE-2026-119946.md): HTTP.sys Information Disclosure Vulnerability (CVSS 5.9, Microsoft Windows)
- [CVE-2026-119945](https://cve.now/CVE-2026-119945.md): Windows Modern Device Management (MDM) Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2026-119944](https://cve.now/CVE-2026-119944.md): Windows Mobile Device Management Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-119943](https://cve.now/CVE-2026-119943.md): Microsoft Windows Search Component Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-119942](https://cve.now/CVE-2026-119942.md): HTTP.sys Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2026-119941](https://cve.now/CVE-2026-119941.md): Volume Shadow Copy Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-119940](https://cve.now/CVE-2026-119940.md): Windows Kerberos Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-119939](https://cve.now/CVE-2026-119939.md): Windows Print Spooler Components Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-119938](https://cve.now/CVE-2026-119938.md): Windows Shell Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-119937](https://cve.now/CVE-2026-119937.md): Kernel Streaming Service Driver Elevation of Privilege Vulnerability (CVSS 6.6, Microsoft Windows)
- [CVE-2026-119936](https://cve.now/CVE-2026-119936.md): Windows Internet Information Services Denial of Service Vulnerability (CVSS 5.9, Microsoft Windows)
- [CVE-2026-119935](https://cve.now/CVE-2026-119935.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2026-119934](https://cve.now/CVE-2026-119934.md): Remote Desktop Client Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-119933](https://cve.now/CVE-2026-119933.md): Windows NTFS Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-119932](https://cve.now/CVE-2026-119932.md): Windows Remote Desktop Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-119931](https://cve.now/CVE-2026-119931.md): Windows Text Services Framework Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-119929](https://cve.now/CVE-2026-119929.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-119928](https://cve.now/CVE-2026-119928.md): Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-119925](https://cve.now/CVE-2026-119925.md): Windows Text Services Framework Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-119921](https://cve.now/CVE-2026-119921.md): Windows Microsoft Account Sign-in Assistant Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-119919](https://cve.now/CVE-2026-119919.md): Windows Distributed Transaction Coordinator Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-119918](https://cve.now/CVE-2026-119918.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2026-119917](https://cve.now/CVE-2026-119917.md): Windows Distributed Transaction Coordinator Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-119916](https://cve.now/CVE-2026-119916.md): Windows Input System Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-119914](https://cve.now/CVE-2026-119914.md): Windows Setup and Deployment Elevation of Privilege Vulnerability (CVSS 6.7, Microsoft Windows)
- [CVE-2026-119913](https://cve.now/CVE-2026-119913.md): Windows Print Spooler Components Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-119912](https://cve.now/CVE-2026-119912.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 6.7, Microsoft Windows)
- [CVE-2026-119910](https://cve.now/CVE-2026-119910.md): Win32k Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2026-119909](https://cve.now/CVE-2026-119909.md): Windows Internet Information Services Denial of Service Vulnerability (CVSS 5.9, Microsoft Windows)
- [CVE-2026-119908](https://cve.now/CVE-2026-119908.md): Windows Storage Spaces Controller Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-119906](https://cve.now/CVE-2026-119906.md): Windows Sandbox Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows Sandbox)
- [CVE-2026-119907](https://cve.now/CVE-2026-119907.md): Windows Function Discovery Resource Publication Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-119904](https://cve.now/CVE-2026-119904.md): Microsoft Windows Speech Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-119899](https://cve.now/CVE-2026-119899.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-119901](https://cve.now/CVE-2026-119901.md): Windows MIDI Service Module Elevation of Privileges Vulnerability (CVSS 6.4, Microsoft Windows)
- [CVE-2026-119900](https://cve.now/CVE-2026-119900.md): Windows NTFS Elevation of Privilege Vulnerability (CVSS 7.3, Microsoft Windows)
- [CVE-2026-119898](https://cve.now/CVE-2026-119898.md): Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-119905](https://cve.now/CVE-2026-119905.md): Windows DNS Spoofing Vulnerability (CVSS 4.9, Microsoft Windows Server)
- [CVE-2026-119903](https://cve.now/CVE-2026-119903.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-119895](https://cve.now/CVE-2026-119895.md): Windows Audio Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-119894](https://cve.now/CVE-2026-119894.md): Windows Audio Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-119893](https://cve.now/CVE-2026-119893.md): Windows Audio Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-119892](https://cve.now/CVE-2026-119892.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-119890](https://cve.now/CVE-2026-119890.md): Windows DHCP Server Denial of Service Vulnerability (CVSS 5.3, Microsoft Windows Server)
- [CVE-2026-119889](https://cve.now/CVE-2026-119889.md): ActiveSyncProvider Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-119888](https://cve.now/CVE-2026-119888.md): Windows Audio Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-119887](https://cve.now/CVE-2026-119887.md): Windows Installer Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-119886](https://cve.now/CVE-2026-119886.md): Windows Telephony Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-119885](https://cve.now/CVE-2026-119885.md): Windows Storport Miniport Driver Elevation of Privilege Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2026-119884](https://cve.now/CVE-2026-119884.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2026-119883](https://cve.now/CVE-2026-119883.md): Data Deduplication Security Feature Bypass Vulnerability (CVSS 3.3, Microsoft Windows Server)
- [CVE-2026-119882](https://cve.now/CVE-2026-119882.md): Windows Remote Desktop Services Information Disclosure Vulnerability (CVSS 5.3, Microsoft Windows)
- [CVE-2026-119881](https://cve.now/CVE-2026-119881.md): Microsoft XPS Document Converter Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-119880](https://cve.now/CVE-2026-119880.md): Microsoft XPS Document Converter Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-119876](https://cve.now/CVE-2026-119876.md): Windows USB Scanner Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-119875](https://cve.now/CVE-2026-119875.md): Windows Storport Miniport Driver Information Disclosure Vulnerability (CVSS 4.0, Microsoft Windows)
- [CVE-2026-119874](https://cve.now/CVE-2026-119874.md): Windows Device Association Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-119873](https://cve.now/CVE-2026-119873.md): Windows NetBIOS Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-119872](https://cve.now/CVE-2026-119872.md): Windows USB Driver Elevation of Privilege Vulnerability (CVSS 6.4, Microsoft Windows)
- [CVE-2026-119871](https://cve.now/CVE-2026-119871.md): Windows IP Translation Configuration Service Elevation of Privilege Vulnerability (CVSS 6.4, Microsoft Windows)
- [CVE-2026-119870](https://cve.now/CVE-2026-119870.md): Windows SMB Client Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-119869](https://cve.now/CVE-2026-119869.md): Windows Failover Cluster Elevation of Privilege Vulnerability (CVSS 6.4, Microsoft Windows Server)
- [CVE-2026-119868](https://cve.now/CVE-2026-119868.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows Server)
- [CVE-2026-119867](https://cve.now/CVE-2026-119867.md): Windows Installer Security Feature Bypass Vulnerability (CVSS 5.3, Microsoft Windows)
- [CVE-2026-119866](https://cve.now/CVE-2026-119866.md): Windows Device Association Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-119865](https://cve.now/CVE-2026-119865.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-119862](https://cve.now/CVE-2026-119862.md): Windows Input System Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-119861](https://cve.now/CVE-2026-119861.md): Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-119860](https://cve.now/CVE-2026-119860.md): Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-119859](https://cve.now/CVE-2026-119859.md): Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-119857](https://cve.now/CVE-2026-119857.md): Windows Kernel Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-119858](https://cve.now/CVE-2026-119858.md): Remote Desktop Client Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-119856](https://cve.now/CVE-2026-119856.md): Win32k Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-119855](https://cve.now/CVE-2026-119855.md): Windows COM+ Event System Service Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-119853](https://cve.now/CVE-2026-119853.md): Remote Access API Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-119852](https://cve.now/CVE-2026-119852.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 6.7, Microsoft Windows)
- [CVE-2026-119851](https://cve.now/CVE-2026-119851.md): Windows Storage Spaces Controller Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-119849](https://cve.now/CVE-2026-119849.md): Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-119848](https://cve.now/CVE-2026-119848.md): Windows Message Queuing Denial of Service Vulnerability (CVSS 5.3, Microsoft Windows)
- [CVE-2026-119847](https://cve.now/CVE-2026-119847.md): Windows Kerberos Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-119846](https://cve.now/CVE-2026-119846.md): Windows Subsystem for Linux Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-119844](https://cve.now/CVE-2026-119844.md): Windows Device Association Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-119841](https://cve.now/CVE-2026-119841.md): Windows Graphics Kernel Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2026-119840](https://cve.now/CVE-2026-119840.md): Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability (CVSS 6.3, Microsoft Windows)
- [CVE-2026-119839](https://cve.now/CVE-2026-119839.md): Windows Remote Desktop Client Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-119838](https://cve.now/CVE-2026-119838.md): Windows Installer Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2026-119837](https://cve.now/CVE-2026-119837.md): Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-119836](https://cve.now/CVE-2026-119836.md): Windows Management Services Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2026-119835](https://cve.now/CVE-2026-119835.md): Windows Smart Card Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-119834](https://cve.now/CVE-2026-119834.md): Windows Subsystem for Linux Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-119833](https://cve.now/CVE-2026-119833.md): Windows Message Queuing Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-119832](https://cve.now/CVE-2026-119832.md): Windows BitLocker Security Feature Bypass Vulnerability (CVSS 5.9, Microsoft Windows)
- [CVE-2026-119831](https://cve.now/CVE-2026-119831.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-119830](https://cve.now/CVE-2026-119830.md): Windows Storport Miniport Driver Elevation of Privilege Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2026-119829](https://cve.now/CVE-2026-119829.md): Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2026-119827](https://cve.now/CVE-2026-119827.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-119826](https://cve.now/CVE-2026-119826.md): Windows Hyper-V Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-119825](https://cve.now/CVE-2026-119825.md): Win32k Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-119824](https://cve.now/CVE-2026-119824.md): Remote Desktop Client Tampering Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-119823](https://cve.now/CVE-2026-119823.md): Windows Storport Miniport Driver Remote Code Execution Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2026-119822](https://cve.now/CVE-2026-119822.md): Windows Overlay Filter Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-119821](https://cve.now/CVE-2026-119821.md): Windows Network Connection Broker Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-119818](https://cve.now/CVE-2026-119818.md): Windows Text Services Framework Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-119817](https://cve.now/CVE-2026-119817.md): Windows Shell Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-119816](https://cve.now/CVE-2026-119816.md): Windows Microsoft Account Sign-in Assistant Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-119405](https://cve.now/CVE-2026-119405.md): Windows Backup Engine Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-119404](https://cve.now/CVE-2026-119404.md): Windows Client for NFS Security Feature Bypass Vulnerability (CVSS 5.9, Microsoft Windows)
- [CVE-2026-119403](https://cve.now/CVE-2026-119403.md): Windows Broadcast DVR User Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-119402](https://cve.now/CVE-2026-119402.md): Windows Broadcast DVR User Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-119401](https://cve.now/CVE-2026-119401.md): Windows Broadcast DVR User Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-119399](https://cve.now/CVE-2026-119399.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-119398](https://cve.now/CVE-2026-119398.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-119397](https://cve.now/CVE-2026-119397.md): Windows Kernel Transaction Manager Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-119396](https://cve.now/CVE-2026-119396.md): Windows Remote Access API Tampering Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-119395](https://cve.now/CVE-2026-119395.md): Storport.sys Driver Information Disclosure Vulnerability (CVSS 4.0, Microsoft Windows)
- [CVE-2026-119394](https://cve.now/CVE-2026-119394.md): Windows Enhanced Storage Remote Code Execution Vulnerability (CVSS 6.6, Microsoft Windows)
- [CVE-2026-119393](https://cve.now/CVE-2026-119393.md): Windows Credential Manager Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-119392](https://cve.now/CVE-2026-119392.md): Windows Storage Spaces Controller Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-119391](https://cve.now/CVE-2026-119391.md): Windows Hyper-V Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-119390](https://cve.now/CVE-2026-119390.md): Remote Desktop Client Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-119389](https://cve.now/CVE-2026-119389.md): Windows Storage Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-119388](https://cve.now/CVE-2026-119388.md): Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-119387](https://cve.now/CVE-2026-119387.md): Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-119386](https://cve.now/CVE-2026-119386.md): Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-119385](https://cve.now/CVE-2026-119385.md): Windows Hyper-V Denial of Service Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2026-119383](https://cve.now/CVE-2026-119383.md): Windows Smart Card Elevation of Privilege Vulnerability (CVSS 6.6, Microsoft Windows)
- [CVE-2026-114171](https://cve.now/CVE-2026-114171.md): Visual Studio Code Security Feature Bypass Vulnerability (CVSS 8.8, Microsoft Visual Studio Code)
- [CVE-2026-124210](https://cve.now/CVE-2026-124210.md): Microsoft Office SharePoint Information Disclosure Vulnerability (CVSS 6.5, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-123391](https://cve.now/CVE-2026-123391.md): Microsoft Office SharePoint Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-123390](https://cve.now/CVE-2026-123390.md): Microsoft Office SharePoint Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-122988](https://cve.now/CVE-2026-122988.md): Windows Admin Center Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows Admin Center)
- [CVE-2026-124194](https://cve.now/CVE-2026-124194.md): Microsoft Outlook Spoofing Vulnerability (CVSS 6.5, KEV, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-124187](https://cve.now/CVE-2026-124187.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-124185](https://cve.now/CVE-2026-124185.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 7.5, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-124183](https://cve.now/CVE-2026-124183.md): Microsoft Office Excel Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-124179](https://cve.now/CVE-2026-124179.md): Microsoft Office Excel Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-124178](https://cve.now/CVE-2026-124178.md): Microsoft Office Excel Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-124176](https://cve.now/CVE-2026-124176.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-124174](https://cve.now/CVE-2026-124174.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-124170](https://cve.now/CVE-2026-124170.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 7.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-123395](https://cve.now/CVE-2026-123395.md): Microsoft Office Excel Information Disclosure Vulnerability (CVSS 5.9, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-123394](https://cve.now/CVE-2026-123394.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-123385](https://cve.now/CVE-2026-123385.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-123384](https://cve.now/CVE-2026-123384.md): Microsoft Office Outlook Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-123383](https://cve.now/CVE-2026-123383.md): Microsoft Office Outlook Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-123382](https://cve.now/CVE-2026-123382.md): Microsoft Office Outlook Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-123381](https://cve.now/CVE-2026-123381.md): Microsoft Office Outlook Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-123380](https://cve.now/CVE-2026-123380.md): Microsoft Office Outlook Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-123379](https://cve.now/CVE-2026-123379.md): Microsoft Office Outlook Remote Code Execution Vulnerability (CVSS 7.5, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-123378](https://cve.now/CVE-2026-123378.md): Microsoft Office Outlook Remote Code Execution Vulnerability (CVSS 7.5, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-123377](https://cve.now/CVE-2026-123377.md): Microsoft Office Outlook Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-123376](https://cve.now/CVE-2026-123376.md): Microsoft Office Outlook Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-123375](https://cve.now/CVE-2026-123375.md): Microsoft Office Outlook Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-120791](https://cve.now/CVE-2026-120791.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-120790](https://cve.now/CVE-2026-120790.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-120789](https://cve.now/CVE-2026-120789.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-120788](https://cve.now/CVE-2026-120788.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-120786](https://cve.now/CVE-2026-120786.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-120785](https://cve.now/CVE-2026-120785.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-120783](https://cve.now/CVE-2026-120783.md): Azure DevOps Server Elevation of Privilege Vulnerability (CVSS 6.4, Microsoft Azure DevOps Server)
- [CVE-2026-120005](https://cve.now/CVE-2026-120005.md): Microsoft PowerPoint Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-119986](https://cve.now/CVE-2026-119986.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-119982](https://cve.now/CVE-2026-119982.md): Visual Studio Code Security Feature Bypass Vulnerability (CVSS 6.5, Microsoft Visual Studio Code)
- [CVE-2026-119981](https://cve.now/CVE-2026-119981.md): Visual Studio Code Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Visual Studio Code)
- [CVE-2026-119976](https://cve.now/CVE-2026-119976.md): Visual Studio Code GitHub Pull Requests and Issues Extension Information Disclosure Vulnerability (CVSS 6.5, Microsoft Visual Studio Code)
- [CVE-2026-119975](https://cve.now/CVE-2026-119975.md): Visual Studio Code Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Visual Studio Code)
- [CVE-2026-116925](https://cve.now/CVE-2026-116925.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-116714](https://cve.now/CVE-2026-116714.md): Windows AppX Deployment Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-124233](https://cve.now/CVE-2026-124233.md): Microsoft Office Word Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-124229](https://cve.now/CVE-2026-124229.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 6.6, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-124228](https://cve.now/CVE-2026-124228.md): Microsoft Office Outlook Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-124227](https://cve.now/CVE-2026-124227.md): Microsoft Office Outlook Remote Code Execution Vulnerability (CVSS 7.5, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-122987](https://cve.now/CVE-2026-122987.md): Microsoft High Performance Computing (HPC) Pack Elevation of Privilege Vulnerability (CVSS 5.9, Microsoft HPC Pack)
- [CVE-2026-122986](https://cve.now/CVE-2026-122986.md): Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft kernel-mshv-6.6.137.mshv2-2.azl3.x86\_64)
- [CVE-2026-122518](https://cve.now/CVE-2026-122518.md): Microsoft Edge (Chromium-based) Information Disclosure Vulnerability (CVSS 6.5, Microsoft Edge)
- [CVE-2026-122194](https://cve.now/CVE-2026-122194.md): Microsoft Defender Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Malware Protection Engine)
- [CVE-2026-121668](https://cve.now/CVE-2026-121668.md): Azure Confidential Clean Rooms Tampering Vulnerability (CVSS 7.7, Microsoft Azure Confidential Clean Room)
- [CVE-2026-121665](https://cve.now/CVE-2026-121665.md): Visual Studio Code Security Feature Bypass Vulnerability (CVSS 8.8, Microsoft Visual Studio Code)
- [CVE-2026-120792](https://cve.now/CVE-2026-120792.md): Aspire Information Disclosure Vulnerability (CVSS 7.3, Microsoft Aspire.Cli · Aspire.Cli +11)
- [CVE-2026-119985](https://cve.now/CVE-2026-119985.md): Visual Studio Code Remote Code Execution Vulnerability (CVSS 8.3, Microsoft Visual Studio Code)
- [CVE-2026-120780](https://cve.now/CVE-2026-120780.md): Visual Studio Code Remote Code Execution Vulnerability (CVSS 8.3, Microsoft Visual Studio Code)
- [CVE-2026-120779](https://cve.now/CVE-2026-120779.md): Visual Studio Code Remote Code Execution Vulnerability (CVSS 9.6, Microsoft Visual Studio Code)
- [CVE-2026-119992](https://cve.now/CVE-2026-119992.md): Windows HTTP.sys Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-116928](https://cve.now/CVE-2026-116928.md): Windows Search Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-119987](https://cve.now/CVE-2026-119987.md): Microsoft Windows App Store Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-118750](https://cve.now/CVE-2026-118750.md): ASP.NET Core Denial of Service Vulnerability (CVSS 7.5, Microsoft.AspNetCore.WebUtilities)
- [CVE-2026-118749](https://cve.now/CVE-2026-118749.md): ASP.NET Core Denial of Service Vulnerability (CVSS 7.5, Microsoft .NET 11.0 installed on Linux · Microsoft .NET… +14)
- [CVE-2026-118748](https://cve.now/CVE-2026-118748.md): ASP.NET Core Denial of Service Vulnerability (CVSS 7.5, Microsoft .NET 11.0 installed on Linux · Microsoft .NET… +13)
- [CVE-2026-118747](https://cve.now/CVE-2026-118747.md): .NET Denial of Service Vulnerability (CVSS 7.5, Microsoft System.Formats.Cbor · System.Formats.Cbor)
- [CVE-2026-118746](https://cve.now/CVE-2026-118746.md): .NET Security Feature Bypass Vulnerability (CVSS 6.8, Microsoft .NET 11.0 installed on Linux · Microsoft .NET 11.…)
- [CVE-2026-118745](https://cve.now/CVE-2026-118745.md): Visual Studio Remote Code Execution Vulnerability (CVSS 8.8, Microsoft .NET 10.0 installed on Windows · Microsoft .NE… +6)
- [CVE-2026-84010](https://cve.now/CVE-2026-84010.md): Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft SQL Server)
- [CVE-2026-118739](https://cve.now/CVE-2026-118739.md): Windows DHCP Client Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-118208](https://cve.now/CVE-2026-118208.md): Microsoft Exchange Server Spoofing Vulnerability (CVSS 7.1, Microsoft Exchange Server Subscription Edition RTM)
- [CVE-2026-118207](https://cve.now/CVE-2026-118207.md): Microsoft Exchange Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Exchange Server Subscription Edition RTM)
- [CVE-2026-118157](https://cve.now/CVE-2026-118157.md): Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 7.2, Microsoft Exchange Server Subscription Edition RTM)
- [CVE-2026-118154](https://cve.now/CVE-2026-118154.md): Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Exchange Server Subscription Edition RTM)
- [CVE-2026-118153](https://cve.now/CVE-2026-118153.md): Microsoft Exchange Server Denial of Service Vulnerability (CVSS 7.5, Microsoft Exchange Server Subscription Edition RTM)
- [CVE-2026-118152](https://cve.now/CVE-2026-118152.md): Microsoft Exchange Server Spoofing Vulnerability (CVSS 6.5, Microsoft Exchange Server Subscription Edition RTM)
- [CVE-2026-118151](https://cve.now/CVE-2026-118151.md): Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 7.2, Microsoft Exchange Server Subscription Edition RTM)
- [CVE-2026-118150](https://cve.now/CVE-2026-118150.md): Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Exchange Server Subscription Edition RTM)
- [CVE-2026-118149](https://cve.now/CVE-2026-118149.md): Microsoft Exchange Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Exchange Server Subscription Edition RTM)
- [CVE-2026-125137](https://cve.now/CVE-2026-125137.md): Windows Graphics Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-125136](https://cve.now/CVE-2026-125136.md): Windows Network Connected Devices Auto-Setup Service Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-125135](https://cve.now/CVE-2026-125135.md): HID Parser Library Elevation of Privilege Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2026-124226](https://cve.now/CVE-2026-124226.md): Microsoft PowerShell Security Feature Bypass Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-124225](https://cve.now/CVE-2026-124225.md): Windows PowerShell Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-124224](https://cve.now/CVE-2026-124224.md): PowerShell Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-122984](https://cve.now/CVE-2026-122984.md): Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-80094](https://cve.now/CVE-2026-80094.md): Remote Desktop Gateway Service Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft Windows Server)
- [CVE-2026-120782](https://cve.now/CVE-2026-120782.md): Visual Studio Code Security Feature Bypass Vulnerability (CVSS 7.8, Microsoft Visual Studio Code)
- [CVE-2026-120006](https://cve.now/CVE-2026-120006.md): Aspire Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft Aspire.Hosting · Microsoft Aspire.Hosting.AppH… +2)
- [CVE-2026-119990](https://cve.now/CVE-2026-119990.md): Azure OpenAI Elevation of Privilege Vulnerability (CVSS 9.8, Microsoft Azure Open AI)
- [CVE-2026-114162](https://cve.now/CVE-2026-114162.md): Microsoft Graph Elevation of Privilege Vulnerability (CVSS 9.1, Microsoft Azure Privileged Identity Management)
- [CVE-2026-105494](https://cve.now/CVE-2026-105494.md): Azure NFS mount helper (aznfs) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft aznfs)
- [CVE-2026-112745](https://cve.now/CVE-2026-112745.md): Azure DevOps Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft Azure DevOps)
- [CVE-2026-112741](https://cve.now/CVE-2026-112741.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-112739](https://cve.now/CVE-2026-112739.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-112738](https://cve.now/CVE-2026-112738.md): Microsoft Office PowerPoint Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-112737](https://cve.now/CVE-2026-112737.md): Microsoft Office PowerPoint Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-112736](https://cve.now/CVE-2026-112736.md): Microsoft Office SharePoint Spoofing Vulnerability (CVSS 5.3, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-112735](https://cve.now/CVE-2026-112735.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-112734](https://cve.now/CVE-2026-112734.md): Microsoft Office PowerPoint Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-112733](https://cve.now/CVE-2026-112733.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-112731](https://cve.now/CVE-2026-112731.md): Microsoft Office Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-112730](https://cve.now/CVE-2026-112730.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-112729](https://cve.now/CVE-2026-112729.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-112728](https://cve.now/CVE-2026-112728.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-112726](https://cve.now/CVE-2026-112726.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-112724](https://cve.now/CVE-2026-112724.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-112723](https://cve.now/CVE-2026-112723.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-112722](https://cve.now/CVE-2026-112722.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-112721](https://cve.now/CVE-2026-112721.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-112720](https://cve.now/CVE-2026-112720.md): Microsoft Office Word Information Disclosure Vulnerability (CVSS 5.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-112719](https://cve.now/CVE-2026-112719.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-112718](https://cve.now/CVE-2026-112718.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-112717](https://cve.now/CVE-2026-112717.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-112716](https://cve.now/CVE-2026-112716.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-112715](https://cve.now/CVE-2026-112715.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-112714](https://cve.now/CVE-2026-112714.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-111310](https://cve.now/CVE-2026-111310.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-111309](https://cve.now/CVE-2026-111309.md): Microsoft Office Outlook Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-111308](https://cve.now/CVE-2026-111308.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-111307](https://cve.now/CVE-2026-111307.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-111306](https://cve.now/CVE-2026-111306.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-111305](https://cve.now/CVE-2026-111305.md): Microsoft Office Access Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-111304](https://cve.now/CVE-2026-111304.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-111303](https://cve.now/CVE-2026-111303.md): Microsoft Office SharePoint Spoofing Vulnerability (CVSS 7.3, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-111302](https://cve.now/CVE-2026-111302.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-111301](https://cve.now/CVE-2026-111301.md): Microsoft Office Access Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-111300](https://cve.now/CVE-2026-111300.md): Microsoft Office SharePoint Spoofing Vulnerability (CVSS 7.3, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-111299](https://cve.now/CVE-2026-111299.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-111298](https://cve.now/CVE-2026-111298.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-111297](https://cve.now/CVE-2026-111297.md): Microsoft Office SharePoint Spoofing Vulnerability (CVSS 8.0, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-111296](https://cve.now/CVE-2026-111296.md): Microsoft Office SharePoint Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-111295](https://cve.now/CVE-2026-111295.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-111294](https://cve.now/CVE-2026-111294.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-111293](https://cve.now/CVE-2026-111293.md): Microsoft Office Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-111292](https://cve.now/CVE-2026-111292.md): Microsoft Office Excel Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-111291](https://cve.now/CVE-2026-111291.md): Microsoft Office Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-111290](https://cve.now/CVE-2026-111290.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-111289](https://cve.now/CVE-2026-111289.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-111288](https://cve.now/CVE-2026-111288.md): Microsoft Office Word Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-111287](https://cve.now/CVE-2026-111287.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 7.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-111286](https://cve.now/CVE-2026-111286.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 7.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-111285](https://cve.now/CVE-2026-111285.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-110068](https://cve.now/CVE-2026-110068.md): Microsoft Office Outlook Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-110067](https://cve.now/CVE-2026-110067.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-110066](https://cve.now/CVE-2026-110066.md): Microsoft Office Word Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-110065](https://cve.now/CVE-2026-110065.md): Microsoft Office SharePoint Spoofing Vulnerability (CVSS 7.3, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-110064](https://cve.now/CVE-2026-110064.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-110062](https://cve.now/CVE-2026-110062.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-110061](https://cve.now/CVE-2026-110061.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-110060](https://cve.now/CVE-2026-110060.md): Microsoft Office Access Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-110059](https://cve.now/CVE-2026-110059.md): Microsoft Office Access Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-110058](https://cve.now/CVE-2026-110058.md): Microsoft Office Access Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-110057](https://cve.now/CVE-2026-110057.md): Microsoft Office SharePoint Information Disclosure Vulnerability (CVSS 6.5, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-110056](https://cve.now/CVE-2026-110056.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-110055](https://cve.now/CVE-2026-110055.md): Microsoft Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-110054](https://cve.now/CVE-2026-110054.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-110053](https://cve.now/CVE-2026-110053.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 7.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-110052](https://cve.now/CVE-2026-110052.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 7.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-110051](https://cve.now/CVE-2026-110051.md): Microsoft Office Word Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-110050](https://cve.now/CVE-2026-110050.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-110049](https://cve.now/CVE-2026-110049.md): Microsoft Word Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-110048](https://cve.now/CVE-2026-110048.md): Microsoft Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-110047](https://cve.now/CVE-2026-110047.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-110046](https://cve.now/CVE-2026-110046.md): Microsoft Office Word Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-110045](https://cve.now/CVE-2026-110045.md): Microsoft Office SharePoint Spoofing Vulnerability (CVSS 7.3, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-110044](https://cve.now/CVE-2026-110044.md): Microsoft Office SharePoint Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-110043](https://cve.now/CVE-2026-110043.md): Microsoft Office Outlook Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-109505](https://cve.now/CVE-2026-109505.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-109504](https://cve.now/CVE-2026-109504.md): Microsoft Office SharePoint Spoofing Vulnerability (CVSS 7.3, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-109503](https://cve.now/CVE-2026-109503.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-109502](https://cve.now/CVE-2026-109502.md): Microsoft Office SharePoint Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-109501](https://cve.now/CVE-2026-109501.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-109500](https://cve.now/CVE-2026-109500.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 7.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-109499](https://cve.now/CVE-2026-109499.md): Microsoft Office SharePoint Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-109498](https://cve.now/CVE-2026-109498.md): Microsoft Office Access Remote Code Execution Vulnerability (CVSS 7.5, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-109497](https://cve.now/CVE-2026-109497.md): Microsoft Office SharePoint Spoofing Vulnerability (CVSS 7.3, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-109496](https://cve.now/CVE-2026-109496.md): Microsoft Office Visio Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-109495](https://cve.now/CVE-2026-109495.md): Microsoft Office SharePoint Elevation of Privilege Vulnerability (CVSS 6.6, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-109494](https://cve.now/CVE-2026-109494.md): Microsoft Office Visio Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-109493](https://cve.now/CVE-2026-109493.md): Microsoft Office Access Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-114160](https://cve.now/CVE-2026-114160.md): Azure Managed Grafana Elevation of Privilege Vulnerability (CVSS 9.8, Microsoft Azure Managed Grafana)
- [CVE-2026-112727](https://cve.now/CVE-2026-112727.md): Windows Domain Name Service Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-114161](https://cve.now/CVE-2026-114161.md): Azure CycleCloud Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Azure CycleCloud)
- [CVE-2026-123389](https://cve.now/CVE-2026-123389.md): Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-123388](https://cve.now/CVE-2026-123388.md): Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-123387](https://cve.now/CVE-2026-123387.md): Active Directory Domain Services Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows)
- [CVE-2026-119959](https://cve.now/CVE-2026-119959.md): Windows Hyper-V Spoofing Vulnerability (CVSS 5.3, Microsoft Windows)
- [CVE-2026-122985](https://cve.now/CVE-2026-122985.md): Microsoft PowerShell Information Disclosure Vulnerability (CVSS 6.1, Microsoft PowerShell)
- [CVE-2026-122979](https://cve.now/CVE-2026-122979.md): Microsoft Teams for Android Spoofing Vulnerability (CVSS 8.1, Microsoft Teams for Android)
- [CVE-2026-122198](https://cve.now/CVE-2026-122198.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-122196](https://cve.now/CVE-2026-122196.md): Microsoft Dynamics 365 (on-premises) Information Disclosure Vulnerability (CVSS 6.5, Microsoft Power Apps)
- [CVE-2026-119991](https://cve.now/CVE-2026-119991.md): Microsoft Configuration Manager Information Disclosure Vulnerability (CVSS 5.9, Microsoft Configuration Manager)
- [CVE-2026-118742](https://cve.now/CVE-2026-118742.md): Azure Front Door Elevation of Privilege Vulnerability (CVSS 8.6, Microsoft Azure Front Door)
- [CVE-2026-118737](https://cve.now/CVE-2026-118737.md): Remote Procedure Call Runtime Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2026-118736](https://cve.now/CVE-2026-118736.md): Windows Network File System Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-118735](https://cve.now/CVE-2026-118735.md): Active Directory Domain Services Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-118283](https://cve.now/CVE-2026-118283.md): Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-118280](https://cve.now/CVE-2026-118280.md): Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-118279](https://cve.now/CVE-2026-118279.md): Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-118278](https://cve.now/CVE-2026-118278.md): Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-118277](https://cve.now/CVE-2026-118277.md): Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-118232](https://cve.now/CVE-2026-118232.md): Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-118229](https://cve.now/CVE-2026-118229.md): Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-118228](https://cve.now/CVE-2026-118228.md): Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-118227](https://cve.now/CVE-2026-118227.md): Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-118226](https://cve.now/CVE-2026-118226.md): Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-118225](https://cve.now/CVE-2026-118225.md): Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-118224](https://cve.now/CVE-2026-118224.md): Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-118223](https://cve.now/CVE-2026-118223.md): Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-118222](https://cve.now/CVE-2026-118222.md): Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-118221](https://cve.now/CVE-2026-118221.md): Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-118220](https://cve.now/CVE-2026-118220.md): Windows Multiple Provider Router Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-118219](https://cve.now/CVE-2026-118219.md): Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-118218](https://cve.now/CVE-2026-118218.md): Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-118217](https://cve.now/CVE-2026-118217.md): Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-118216](https://cve.now/CVE-2026-118216.md): Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-118215](https://cve.now/CVE-2026-118215.md): Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-118214](https://cve.now/CVE-2026-118214.md): Windows Advanced Rasterization Platform Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-118213](https://cve.now/CVE-2026-118213.md): Windows Deployment Services Information Disclosure Vulnerability (CVSS 5.9, Microsoft Windows Server)
- [CVE-2026-118146](https://cve.now/CVE-2026-118146.md): Windows Active Directory Domain Services Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-118145](https://cve.now/CVE-2026-118145.md): Windows Function Discovery SSDP Provider Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-118144](https://cve.now/CVE-2026-118144.md): Windows Smart Card Elevation of Privilege Vulnerability (CVSS 6.6, Microsoft Windows)
- [CVE-2026-118143](https://cve.now/CVE-2026-118143.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2026-118142](https://cve.now/CVE-2026-118142.md): Windows Distributed File System (DFS) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-118141](https://cve.now/CVE-2026-118141.md): Windows Client for NFS Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-118140](https://cve.now/CVE-2026-118140.md): Server for NFS Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows Server)
- [CVE-2026-118138](https://cve.now/CVE-2026-118138.md): Windows Client for NFS Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-118137](https://cve.now/CVE-2026-118137.md): Windows FTP Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-118126](https://cve.now/CVE-2026-118126.md): Windows Message Queuing Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-118125](https://cve.now/CVE-2026-118125.md): Windows Message Queuing Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-118124](https://cve.now/CVE-2026-118124.md): Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-118123](https://cve.now/CVE-2026-118123.md): Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-116710](https://cve.now/CVE-2026-116710.md): Windows Message Queuing Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2026-116707](https://cve.now/CVE-2026-116707.md): Windows Link Layer Topology Discovery Protocol Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-116706](https://cve.now/CVE-2026-116706.md): Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-116700](https://cve.now/CVE-2026-116700.md): Windows Telephony Service Elevation of Privilege Vulnerability (CVSS 6.6, Microsoft Windows)
- [CVE-2026-116699](https://cve.now/CVE-2026-116699.md): Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-116698](https://cve.now/CVE-2026-116698.md): Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-116697](https://cve.now/CVE-2026-116697.md): Reliable Multicast Transport Driver (RMCAST) Denial of Service Vulnerability (CVSS 5.9, Microsoft Windows)
- [CVE-2026-88222](https://cve.now/CVE-2026-88222.md): Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-88212](https://cve.now/CVE-2026-88212.md): Windows Network Address Translation (NAT) Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-125134](https://cve.now/CVE-2026-125134.md): Windows Function Discovery Resource Publication Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-70003](https://cve.now/CVE-2026-70003.md): JDBC Driver for SQL Server Security Feature Bypass Vulnerability (CVSS 8.7, Microsoft JDBC Driver for SQL Server)
- [CVE-2026-80095](https://cve.now/CVE-2026-80095.md): Microsoft Office SharePoint Elevation of Privilege Vulnerability (CVSS 9.0, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-88111](https://cve.now/CVE-2026-88111.md): SQL Server Remote Code Execution Vulnerability (CVSS 7.5, Microsoft SQL Server 2022 for x64-based Systems · Microsoft…)
- [CVE-2026-109459](https://cve.now/CVE-2026-109459.md): Windows Message Queuing Queue Manager Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2026-108423](https://cve.now/CVE-2026-108423.md): Windows WinHTTP Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2026-108404](https://cve.now/CVE-2026-108404.md): Windows CD-ROM Driver Remote Code Execution Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2026-102219](https://cve.now/CVE-2026-102219.md): Windows Modern Device Management (MDM) Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2026-96845](https://cve.now/CVE-2026-96845.md): Windows Task Scheduler Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70182](https://cve.now/CVE-2026-70182.md): Windows Bind Filter Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83563](https://cve.now/CVE-2026-83563.md): Winlogon Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85844](https://cve.now/CVE-2026-85844.md): Windows Kerberos Elevation of Privilege Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-108407](https://cve.now/CVE-2026-108407.md): Windows GDI Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-108405](https://cve.now/CVE-2026-108405.md): Windows CD-ROM Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-108470](https://cve.now/CVE-2026-108470.md): Microsoft Authentication Library (MSAL) for Node.js Information Disclosure Vulnerability (CVSS 6.5, Microsoft @azure/msal-node)
- [CVE-2026-108469](https://cve.now/CVE-2026-108469.md): Microsoft Authentication Library for JavaScript Spoofing Vulnerability (CVSS 6.8, Microsoft Authentication Library for JavaScript)
- [CVE-2026-103571](https://cve.now/CVE-2026-103571.md): Windows CNG Key Isolation Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-85942](https://cve.now/CVE-2026-85942.md): Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-109473](https://cve.now/CVE-2026-109473.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-108413](https://cve.now/CVE-2026-108413.md): Windows Telephony Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-108412](https://cve.now/CVE-2026-108412.md): Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-105581](https://cve.now/CVE-2026-105581.md): Desktop Window Manager Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-105580](https://cve.now/CVE-2026-105580.md): Windows Management Instrumentation Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-105579](https://cve.now/CVE-2026-105579.md): Windows DNS Information Disclosure Vulnerability (CVSS 7.5, Microsoft Windows Server)
- [CVE-2026-105578](https://cve.now/CVE-2026-105578.md): Microsoft JScript Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-105575](https://cve.now/CVE-2026-105575.md): Windows DWM Core Library Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-105574](https://cve.now/CVE-2026-105574.md): Windows MIDI Service Module Elevation of Privileges Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-105569](https://cve.now/CVE-2026-105569.md): Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-105566](https://cve.now/CVE-2026-105566.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-105565](https://cve.now/CVE-2026-105565.md): Windows MIDI Service Module Elevation of Privileges Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-105560](https://cve.now/CVE-2026-105560.md): Windows DHCP Server Remote Code Execution Vulnerability (CVSS 7.2, Microsoft Windows Server)
- [CVE-2026-105559](https://cve.now/CVE-2026-105559.md): Windows Active Directory Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-105558](https://cve.now/CVE-2026-105558.md): Windows Deployment Services Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-105557](https://cve.now/CVE-2026-105557.md): Windows DHCP Server Information Disclosure Vulnerability (CVSS 5.9, Microsoft Windows Server)
- [CVE-2026-105553](https://cve.now/CVE-2026-105553.md): Windows Filtering Platform (WFP) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-105552](https://cve.now/CVE-2026-105552.md): Windows Kernel Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-105551](https://cve.now/CVE-2026-105551.md): Windows NetBIOS Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-105549](https://cve.now/CVE-2026-105549.md): Windows Smart Card Information Disclosure Vulnerability (CVSS 4.3, Microsoft Windows)
- [CVE-2026-105547](https://cve.now/CVE-2026-105547.md): Windows Setup and Deployment Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-105546](https://cve.now/CVE-2026-105546.md): Windows Management Instrumentation Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-105545](https://cve.now/CVE-2026-105545.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-105543](https://cve.now/CVE-2026-105543.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-105542](https://cve.now/CVE-2026-105542.md): Windows NTFS Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-105541](https://cve.now/CVE-2026-105541.md): Windows Audio Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-105540](https://cve.now/CVE-2026-105540.md): Windows Error Reporting Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-105537](https://cve.now/CVE-2026-105537.md): Mailslot File System Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-105533](https://cve.now/CVE-2026-105533.md): Windows COM Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-105532](https://cve.now/CVE-2026-105532.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-105531](https://cve.now/CVE-2026-105531.md): Windows Print Spooler Components Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-105530](https://cve.now/CVE-2026-105530.md): Windows System Events Broker Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-105529](https://cve.now/CVE-2026-105529.md): Windows Storage Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-105528](https://cve.now/CVE-2026-105528.md): Desktop Window Manager Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-105527](https://cve.now/CVE-2026-105527.md): Windows Encrypting File System (EFS) Denial of Service Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-105526](https://cve.now/CVE-2026-105526.md): Winsock Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-105525](https://cve.now/CVE-2026-105525.md): Windows Network Connection Broker Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-105524](https://cve.now/CVE-2026-105524.md): Windows Management Instrumentation Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-105522](https://cve.now/CVE-2026-105522.md): Winlogon Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-105520](https://cve.now/CVE-2026-105520.md): Windows DNS Elevation of Privilege Vulnerability (CVSS 7.2, Microsoft Windows Server)
- [CVE-2026-105518](https://cve.now/CVE-2026-105518.md): Windows iSCSI Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-105515](https://cve.now/CVE-2026-105515.md): Windows Message Queuing Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-105513](https://cve.now/CVE-2026-105513.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-105512](https://cve.now/CVE-2026-105512.md): Microsoft QUIC Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-105510](https://cve.now/CVE-2026-105510.md): Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-105507](https://cve.now/CVE-2026-105507.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-105506](https://cve.now/CVE-2026-105506.md): Windows Shell Information Disclosure Vulnerability (CVSS 5.0, Microsoft Windows)
- [CVE-2026-105505](https://cve.now/CVE-2026-105505.md): Microsoft Input Method Editor (IME) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-105504](https://cve.now/CVE-2026-105504.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-105503](https://cve.now/CVE-2026-105503.md): Windows Management Instrumentation Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-105501](https://cve.now/CVE-2026-105501.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-105499](https://cve.now/CVE-2026-105499.md): Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-105498](https://cve.now/CVE-2026-105498.md): Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-105497](https://cve.now/CVE-2026-105497.md): Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-105496](https://cve.now/CVE-2026-105496.md): Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-105495](https://cve.now/CVE-2026-105495.md): Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-105493](https://cve.now/CVE-2026-105493.md): Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-105492](https://cve.now/CVE-2026-105492.md): Microsoft Remote Registry Service Denial of Service Vulnerability (CVSS 5.3, Microsoft Windows)
- [CVE-2026-105491](https://cve.now/CVE-2026-105491.md): Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-105490](https://cve.now/CVE-2026-105490.md): Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-105028](https://cve.now/CVE-2026-105028.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-105026](https://cve.now/CVE-2026-105026.md): Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-105025](https://cve.now/CVE-2026-105025.md): Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-105024](https://cve.now/CVE-2026-105024.md): Windows Storage Spaces Controller Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-105023](https://cve.now/CVE-2026-105023.md): Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-105022](https://cve.now/CVE-2026-105022.md): Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-105021](https://cve.now/CVE-2026-105021.md): Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-105020](https://cve.now/CVE-2026-105020.md): Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-105018](https://cve.now/CVE-2026-105018.md): Windows Partition Management Driver Elevation of Privilege Vulnerability (CVSS 6.6, Microsoft Windows)
- [CVE-2026-105017](https://cve.now/CVE-2026-105017.md): Volume Shadow Copy Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-102230](https://cve.now/CVE-2026-102230.md): Visual Studio Code Information Disclosure Vulnerability (CVSS 7.4, Microsoft Visual Studio Code)
- [CVE-2026-108421](https://cve.now/CVE-2026-108421.md): Windows File Server Resource Management Service Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft Windows Server)
- [CVE-2026-108410](https://cve.now/CVE-2026-108410.md): Windows Management Instrumentation Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-108408](https://cve.now/CVE-2026-108408.md): Windows Telephony Service Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-108406](https://cve.now/CVE-2026-108406.md): Windows Network Connection Broker Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-69901](https://cve.now/CVE-2026-69901.md): Microsoft Teams for Android Spoofing Vulnerability (CVSS 7.5, Microsoft Teams for Android)
- [CVE-2026-114159](https://cve.now/CVE-2026-114159.md): Visual Studio Remote Code Execution Vulnerability (CVSS 8.8, Microsoft .NET 10.0 installed on Windows · Microsoft .NE… +6)
- [CVE-2026-114158](https://cve.now/CVE-2026-114158.md): Visual Studio Remote Code Execution Vulnerability (CVSS 8.8, Microsoft .NET 10.0 installed on Windows · Microsoft .NE… +6)
- [CVE-2026-114157](https://cve.now/CVE-2026-114157.md): ASP.NET Core Security Feature Bypass Vulnerability (CVSS 7.5, Microsoft .NET 10.0 installed on Windows · Microsoft .NE… +6)
- [CVE-2026-114156](https://cve.now/CVE-2026-114156.md): ASP.NET Core Security Feature Bypass Vulnerability (CVSS 6.5, Microsoft .NET 11.0 installed on Linux · Microsoft .NET… +13)
- [CVE-2026-114155](https://cve.now/CVE-2026-114155.md): .NET Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft .NET 10.0 installed on Linux · Microsoft .NET… +3)
- [CVE-2026-114154](https://cve.now/CVE-2026-114154.md): ASP.NET Core Denial of Service Vulnerability (CVSS 7.5, Microsoft .NET 10.0 installed on Windows · Microsoft .NE… +6)
- [CVE-2026-114152](https://cve.now/CVE-2026-114152.md): Visual Studio Remote Code Execution Vulnerability (CVSS 8.8, Microsoft .NET 10.0 installed on Windows · Microsoft .NE… +6)
- [CVE-2026-114151](https://cve.now/CVE-2026-114151.md): Visual Studio Remote Code Execution Vulnerability (CVSS 8.8, Microsoft .NET 10.0 installed on Windows · Microsoft .NE… +6)
- [CVE-2026-114150](https://cve.now/CVE-2026-114150.md): ASP.NET Core Information Disclosure Vulnerability (CVSS 5.9, Microsoft .NET 11.0 installed on Linux · Microsoft .NET… +13)
- [CVE-2026-114149](https://cve.now/CVE-2026-114149.md): ASP.NET Core Denial of Service Vulnerability (CVSS 7.5, Microsoft .NET 10.0 installed on Linux · Microsoft .NET… +23)
- [CVE-2026-114147](https://cve.now/CVE-2026-114147.md): ASP.NET Core Denial of Service Vulnerability (CVSS 7.5, Microsoft .NET 10.0 installed on Linux · Microsoft .NET… +23)
- [CVE-2026-114146](https://cve.now/CVE-2026-114146.md): ASP.NET Core Elevation of Privilege Vulnerability (CVSS 9.0, Microsoft .NET 10.0 installed on Linux · Microsoft .NET… +23)
- [CVE-2026-113865](https://cve.now/CVE-2026-113865.md): Windows Hyper-V Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-113864](https://cve.now/CVE-2026-113864.md): Windows Hyper-V Elevation of Privilege Vulnerability (CVSS 6.4, Microsoft Windows)
- [CVE-2026-113863](https://cve.now/CVE-2026-113863.md): Windows DHCP Client Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-113862](https://cve.now/CVE-2026-113862.md): Windows Network Address Translation (NAT) Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2026-113861](https://cve.now/CVE-2026-113861.md): Windows Hyper-V Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-113860](https://cve.now/CVE-2026-113860.md): Windows Hyper-V Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-113859](https://cve.now/CVE-2026-113859.md): Windows TCP/IP Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-99288](https://cve.now/CVE-2026-99288.md): inet: reject unhashed sockets during established lookups (no CVSS, Linux)
- [CVE-2026-113856](https://cve.now/CVE-2026-113856.md): Windows Hyper-V Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-113855](https://cve.now/CVE-2026-113855.md): Windows DNS Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows Server)
- [CVE-2026-113848](https://cve.now/CVE-2026-113848.md): Windows NTFS Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-113847](https://cve.now/CVE-2026-113847.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-113844](https://cve.now/CVE-2026-113844.md): Windows NTFS Tampering Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-113843](https://cve.now/CVE-2026-113843.md): Windows Remote Access Connection Manager Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-113842](https://cve.now/CVE-2026-113842.md): Windows Security Center Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-108401](https://cve.now/CVE-2026-108401.md): Remote Desktop Services Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-105568](https://cve.now/CVE-2026-105568.md): Windows Active Directory Domain Services Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-105562](https://cve.now/CVE-2026-105562.md): Windows Container Manager Service Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2026-105561](https://cve.now/CVE-2026-105561.md): Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-105554](https://cve.now/CVE-2026-105554.md): Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-105534](https://cve.now/CVE-2026-105534.md): Windows Storage Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows Server)
- [CVE-2026-105511](https://cve.now/CVE-2026-105511.md): Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-105509](https://cve.now/CVE-2026-105509.md): Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-113825](https://cve.now/CVE-2026-113825.md): Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-113821](https://cve.now/CVE-2026-113821.md): Microsoft Windows SCSI Class System File Information Disclosure Vulnerability (CVSS 4.1, Microsoft Windows)
- [CVE-2026-113820](https://cve.now/CVE-2026-113820.md): Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-113819](https://cve.now/CVE-2026-113819.md): Desktop Window Manager Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-113818](https://cve.now/CVE-2026-113818.md): Windows Deployment Services Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows Server)
- [CVE-2026-113817](https://cve.now/CVE-2026-113817.md): Windows Devices Human Interface Elevation of Privilege Vulnerability (CVSS 6.6, Microsoft Windows)
- [CVE-2026-113816](https://cve.now/CVE-2026-113816.md): Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability (CVSS 4.1, Microsoft Windows)
- [CVE-2026-113815](https://cve.now/CVE-2026-113815.md): Microsoft PowerShell Security Feature Bypass Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2026-113814](https://cve.now/CVE-2026-113814.md): Windows Storage Spaces Controller Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-113773](https://cve.now/CVE-2026-113773.md): Windows DHCP Server Spoofing Vulnerability (CVSS 5.3, Microsoft Windows Server)
- [CVE-2026-113772](https://cve.now/CVE-2026-113772.md): Windows Redirected Drive Buffering Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2026-113771](https://cve.now/CVE-2026-113771.md): Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-113770](https://cve.now/CVE-2026-113770.md): Windows Print Spooler Components Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-113769](https://cve.now/CVE-2026-113769.md): Windows COM+ Event System Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-113768](https://cve.now/CVE-2026-113768.md): Windows Performance Counters Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-113767](https://cve.now/CVE-2026-113767.md): Windows COM+ Event System Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-113766](https://cve.now/CVE-2026-113766.md): Windows Language Experience Service Tampering Vulnerability (CVSS 3.3, Microsoft Windows)
- [CVE-2026-113765](https://cve.now/CVE-2026-113765.md): Windows File Server Resource Management Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows Server)
- [CVE-2026-113764](https://cve.now/CVE-2026-113764.md): Windows Projected File System Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2026-113763](https://cve.now/CVE-2026-113763.md): Windows DPAPI (Data Protection Application Programming Interface) Elevation of Privilege Vulnerability (CVSS 6.3, Microsoft Windows)
- [CVE-2026-113762](https://cve.now/CVE-2026-113762.md): Windows Broadcast DVR User Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-113761](https://cve.now/CVE-2026-113761.md): Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-113760](https://cve.now/CVE-2026-113760.md): Windows XWizard Framework Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-113758](https://cve.now/CVE-2026-113758.md): Windows Desktop Window Manager Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-113757](https://cve.now/CVE-2026-113757.md): Windows FileCrypt Driver Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-113756](https://cve.now/CVE-2026-113756.md): Windows FileCrypt Driver Security Feature Bypass Vulnerability (CVSS 5.3, Microsoft Windows)
- [CVE-2026-113755](https://cve.now/CVE-2026-113755.md): Windows Filter Manager Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-113754](https://cve.now/CVE-2026-113754.md): Windows FileCrypt Driver Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2026-113753](https://cve.now/CVE-2026-113753.md): Windows Hyper-V Elevation of Privilege Vulnerability (CVSS 8.2, Microsoft Windows)
- [CVE-2026-113752](https://cve.now/CVE-2026-113752.md): Windows Print Spooler Components Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-113751](https://cve.now/CVE-2026-113751.md): Windows Fast FAT Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-113750](https://cve.now/CVE-2026-113750.md): Windows Device Inventory Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-113749](https://cve.now/CVE-2026-113749.md): Microsoft Windows Codecs Library Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-113748](https://cve.now/CVE-2026-113748.md): Software Protection Platform (SPP) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-112990](https://cve.now/CVE-2026-112990.md): Windows USB Video Driver Elevation of Privilege Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2026-112989](https://cve.now/CVE-2026-112989.md): Windows Servicing Stack Updates Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-112988](https://cve.now/CVE-2026-112988.md): Windows Desktop Window Manager Elevation of Privilege Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-112987](https://cve.now/CVE-2026-112987.md): Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-112986](https://cve.now/CVE-2026-112986.md): Windows DWM Core Library Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-112985](https://cve.now/CVE-2026-112985.md): Windows JScript Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-112984](https://cve.now/CVE-2026-112984.md): Windows USB Video Driver Elevation of Privilege Vulnerability (CVSS 6.6, Microsoft Windows)
- [CVE-2026-112982](https://cve.now/CVE-2026-112982.md): Microsoft Account Tampering Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-112981](https://cve.now/CVE-2026-112981.md): Windows Print Spooler Components Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-112980](https://cve.now/CVE-2026-112980.md): Windows Print Spooler Components Elevation of Privilege Vulnerability (CVSS 6.7, Microsoft Windows)
- [CVE-2026-112979](https://cve.now/CVE-2026-112979.md): Windows State Repository Service Tampering Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-112978](https://cve.now/CVE-2026-112978.md): Windows Print Spooler Components Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-112977](https://cve.now/CVE-2026-112977.md): Windows Deployment Services Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows Server)
- [CVE-2026-112976](https://cve.now/CVE-2026-112976.md): Windows Print Spooler Components Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-112975](https://cve.now/CVE-2026-112975.md): Windows Link-Layer Discovery Protocol (LLDP) Denial of Service Vulnerability (CVSS 5.3, Microsoft Windows)
- [CVE-2026-112974](https://cve.now/CVE-2026-112974.md): Microsoft Account Tampering Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-112973](https://cve.now/CVE-2026-112973.md): Windows Kernel Security Feature Bypass Vulnerability (CVSS 7.1, Microsoft Windows)
- [CVE-2026-112972](https://cve.now/CVE-2026-112972.md): Windows SMBv3 Server Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-112971](https://cve.now/CVE-2026-112971.md): Windows SMB Client Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-112970](https://cve.now/CVE-2026-112970.md): Windows SMB Client Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-112969](https://cve.now/CVE-2026-112969.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 6.6, Microsoft Windows)
- [CVE-2026-112968](https://cve.now/CVE-2026-112968.md): Windows COM Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-112967](https://cve.now/CVE-2026-112967.md): Windows Xbox Live Networking Service Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-112966](https://cve.now/CVE-2026-112966.md): Windows Security Account Manager Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-112965](https://cve.now/CVE-2026-112965.md): Windows Management Instrumentation Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-112814](https://cve.now/CVE-2026-112814.md): Windows Management Instrumentation Elevation of Privilege Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-112813](https://cve.now/CVE-2026-112813.md): Windows Overlay Filter Elevation of Privilege Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2026-112812](https://cve.now/CVE-2026-112812.md): Windows SMB Client Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-112811](https://cve.now/CVE-2026-112811.md): Windows Print Spooler Components Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-112810](https://cve.now/CVE-2026-112810.md): Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-112809](https://cve.now/CVE-2026-112809.md): Windows Composite Image File System Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-112808](https://cve.now/CVE-2026-112808.md): Windows Print Spooler Components Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-112807](https://cve.now/CVE-2026-112807.md): Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-112806](https://cve.now/CVE-2026-112806.md): Windows Print Spooler Components Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2026-112805](https://cve.now/CVE-2026-112805.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-112804](https://cve.now/CVE-2026-112804.md): Windows exFAT File System Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-112803](https://cve.now/CVE-2026-112803.md): Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-112802](https://cve.now/CVE-2026-112802.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-112801](https://cve.now/CVE-2026-112801.md): Windows eSCL Scanner Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-112800](https://cve.now/CVE-2026-112800.md): Windows Diagnostic Policy Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-112799](https://cve.now/CVE-2026-112799.md): Windows Projected File System Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-112798](https://cve.now/CVE-2026-112798.md): Windows NetBIOS Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-112797](https://cve.now/CVE-2026-112797.md): Windows Print Spooler Components Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-112796](https://cve.now/CVE-2026-112796.md): Windows Event Collector Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-112795](https://cve.now/CVE-2026-112795.md): Windows Security Account Manager Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-112794](https://cve.now/CVE-2026-112794.md): Windows Smart Card Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-112793](https://cve.now/CVE-2026-112793.md): Windows Event Collector Service Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-112792](https://cve.now/CVE-2026-112792.md): Windows Print Spooler Components Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-112791](https://cve.now/CVE-2026-112791.md): Windows Print Spooler Components Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-112790](https://cve.now/CVE-2026-112790.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-112789](https://cve.now/CVE-2026-112789.md): Windows Installer Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2026-112766](https://cve.now/CVE-2026-112766.md): Windows exFAT File System Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-112765](https://cve.now/CVE-2026-112765.md): Windows Print Spooler Components Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-112764](https://cve.now/CVE-2026-112764.md): Windows USB Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-105567](https://cve.now/CVE-2026-105567.md): Windows Print Spooler Components Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-112763](https://cve.now/CVE-2026-112763.md): Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-112762](https://cve.now/CVE-2026-112762.md): Windows Print Spooler Components Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-112761](https://cve.now/CVE-2026-112761.md): Windows Broadcast DVR User Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-112760](https://cve.now/CVE-2026-112760.md): Windows Overlay Filter Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-112759](https://cve.now/CVE-2026-112759.md): Windows Task Scheduler Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-112758](https://cve.now/CVE-2026-112758.md): Windows Defender Firewall Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-112757](https://cve.now/CVE-2026-112757.md): Windows Secure Kernel Mode Information Disclosure Vulnerability (CVSS 6.0, Microsoft Windows)
- [CVE-2026-112756](https://cve.now/CVE-2026-112756.md): Windows Filtering Platform (WFP) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-112755](https://cve.now/CVE-2026-112755.md): Windows RNDIS Elevation of Privilege Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2026-112754](https://cve.now/CVE-2026-112754.md): Microsoft Graphics Component Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-112753](https://cve.now/CVE-2026-112753.md): Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-112752](https://cve.now/CVE-2026-112752.md): Windows Print Spooler Components Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-112751](https://cve.now/CVE-2026-112751.md): Windows Remote Assistance Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-112750](https://cve.now/CVE-2026-112750.md): Windows Overlay Filter Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-112743](https://cve.now/CVE-2026-112743.md): Windows Device Association Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-113823](https://cve.now/CVE-2026-113823.md): Azure CycleCloud Information Disclosure Vulnerability (CVSS 7.5, Microsoft Azure CycleCloud)
- [CVE-2026-113822](https://cve.now/CVE-2026-113822.md): Azure CycleCloud Elevation of Privilege Vulnerability (CVSS 6.5, Microsoft Azure CycleCloud)
- [CVE-2026-113759](https://cve.now/CVE-2026-113759.md): Microsoft Word Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-96985](https://cve.now/CVE-2026-96985.md): Windows DNS Information Disclosure Vulnerability (CVSS 4.9, Microsoft Windows Server)
- [CVE-2026-96984](https://cve.now/CVE-2026-96984.md): Windows DNS Information Disclosure Vulnerability (CVSS 4.9, Microsoft Windows Server)
- [CVE-2026-97006](https://cve.now/CVE-2026-97006.md): Windows DNS Information Disclosure Vulnerability (CVSS 4.9, Microsoft Windows Server)
- [CVE-2026-96980](https://cve.now/CVE-2026-96980.md): Windows DNS Information Disclosure Vulnerability (CVSS 4.9, Microsoft Windows Server)
- [CVE-2026-96975](https://cve.now/CVE-2026-96975.md): Role: DNS Server Denial of Service Vulnerability (CVSS 5.9, Microsoft Windows Server)
- [CVE-2026-96983](https://cve.now/CVE-2026-96983.md): Windows DNS Denial of Service Vulnerability (CVSS 5.3, Microsoft Windows)
- [CVE-2026-96969](https://cve.now/CVE-2026-96969.md): Windows TCP/IP Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96971](https://cve.now/CVE-2026-96971.md): Windows NetBIOS Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-97002](https://cve.now/CVE-2026-97002.md): Microsoft Windows VMSwitch Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-96973](https://cve.now/CVE-2026-96973.md): Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96979](https://cve.now/CVE-2026-96979.md): HID Parser Library Elevation of Privilege Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2026-97000](https://cve.now/CVE-2026-97000.md): Windows USM Communication Manager Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96989](https://cve.now/CVE-2026-96989.md): Secondary Logon Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-96982](https://cve.now/CVE-2026-96982.md): HID Parser Library Elevation of Privilege Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2026-96974](https://cve.now/CVE-2026-96974.md): HID Parser Library Elevation of Privilege Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2026-96994](https://cve.now/CVE-2026-96994.md): Winsock Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-67375](https://cve.now/CVE-2026-67375.md): Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft SQL Server 2025 for x64-based Systems)
- [CVE-2026-68783](https://cve.now/CVE-2026-68783.md): Microsoft SQL Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft SQL Server 2025 CU10 · Microsoft SQL Server 2025…)
- [CVE-2026-67374](https://cve.now/CVE-2026-67374.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SQL Server)
- [CVE-2026-85929](https://cve.now/CVE-2026-85929.md): Microsoft Brokering File System Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96175](https://cve.now/CVE-2026-96175.md): Desktop Window Manager Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96172](https://cve.now/CVE-2026-96172.md): Desktop Window Manager Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96168](https://cve.now/CVE-2026-96168.md): Windows Graphics Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96162](https://cve.now/CVE-2026-96162.md): Windows Clipboard Virtual Channel Extension Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96160](https://cve.now/CVE-2026-96160.md): Windows Graphics Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96157](https://cve.now/CVE-2026-96157.md): Microsoft Windows Media Foundation Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-96156](https://cve.now/CVE-2026-96156.md): Windows Broker Infrastructure Service Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-96155](https://cve.now/CVE-2026-96155.md): Windows Audio Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96153](https://cve.now/CVE-2026-96153.md): Windows Error Reporting Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96139](https://cve.now/CVE-2026-96139.md): Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96127](https://cve.now/CVE-2026-96127.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96124](https://cve.now/CVE-2026-96124.md): Windows Graphics Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96122](https://cve.now/CVE-2026-96122.md): Windows Graphics Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96110](https://cve.now/CVE-2026-96110.md): Windows OLE Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-96107](https://cve.now/CVE-2026-96107.md): Windows Phone Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96103](https://cve.now/CVE-2026-96103.md): Desktop Window Manager Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96097](https://cve.now/CVE-2026-96097.md): Windows Brokering File System Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96093](https://cve.now/CVE-2026-96093.md): Windows Internet (wininet.dll) Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2026-96092](https://cve.now/CVE-2026-96092.md): Windows Domain Name Service Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows Server)
- [CVE-2026-96088](https://cve.now/CVE-2026-96088.md): Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96086](https://cve.now/CVE-2026-96086.md): Windows WLAN Service Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-96076](https://cve.now/CVE-2026-96076.md): Windows DIAL Client Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96075](https://cve.now/CVE-2026-96075.md): Windows Feedback Hub Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96074](https://cve.now/CVE-2026-96074.md): Windows AppX Package Manager Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96073](https://cve.now/CVE-2026-96073.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96067](https://cve.now/CVE-2026-96067.md): Microsoft Color Management Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-96061](https://cve.now/CVE-2026-96061.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96060](https://cve.now/CVE-2026-96060.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96057](https://cve.now/CVE-2026-96057.md): Windows USB Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96055](https://cve.now/CVE-2026-96055.md): Windows USB Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96051](https://cve.now/CVE-2026-96051.md): Windows USB Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96042](https://cve.now/CVE-2026-96042.md): Windows Connection Manager Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96041](https://cve.now/CVE-2026-96041.md): Windows USB Hub Driver Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-96038](https://cve.now/CVE-2026-96038.md): Windows Audio Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96036](https://cve.now/CVE-2026-96036.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96035](https://cve.now/CVE-2026-96035.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96028](https://cve.now/CVE-2026-96028.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96027](https://cve.now/CVE-2026-96027.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96037](https://cve.now/CVE-2026-96037.md): Windows User Manager Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96029](https://cve.now/CVE-2026-96029.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96023](https://cve.now/CVE-2026-96023.md): Windows Push Notification Core Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96022](https://cve.now/CVE-2026-96022.md): Windows Text Services Framework Information Disclosure Vulnerability (CVSS 5.6, Microsoft Windows)
- [CVE-2026-96019](https://cve.now/CVE-2026-96019.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96017](https://cve.now/CVE-2026-96017.md): Role: DNS Server Denial of Service Vulnerability (CVSS 4.9, Microsoft Windows Server)
- [CVE-2026-96016](https://cve.now/CVE-2026-96016.md): Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96020](https://cve.now/CVE-2026-96020.md): Windows Domain Name Service Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows Server)
- [CVE-2026-96007](https://cve.now/CVE-2026-96007.md): Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96004](https://cve.now/CVE-2026-96004.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96002](https://cve.now/CVE-2026-96002.md): Windows Domain Name Service Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows Server)
- [CVE-2026-95997](https://cve.now/CVE-2026-95997.md): Windows Event Logging Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-95996](https://cve.now/CVE-2026-95996.md): Windows Bluetooth Port Driver Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-95991](https://cve.now/CVE-2026-95991.md): Windows Graphics Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-95988](https://cve.now/CVE-2026-95988.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-95987](https://cve.now/CVE-2026-95987.md): Windows User Manager Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-95983](https://cve.now/CVE-2026-95983.md): Windows Graphics Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-95976](https://cve.now/CVE-2026-95976.md): Windows Diagnostic Policy Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-95974](https://cve.now/CVE-2026-95974.md): Windows Graphics Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-95968](https://cve.now/CVE-2026-95968.md): Windows Smart Card Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-95966](https://cve.now/CVE-2026-95966.md): Windows Graphics Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-95965](https://cve.now/CVE-2026-95965.md): Windows USB Video Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-95962](https://cve.now/CVE-2026-95962.md): Windows Virtual Filtering Platform (VFP) Remote Code Execution Vulnerability (CVSS 9.0, Microsoft Windows)
- [CVE-2026-95956](https://cve.now/CVE-2026-95956.md): Windows eSCL Scanner Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2026-95951](https://cve.now/CVE-2026-95951.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-95948](https://cve.now/CVE-2026-95948.md): Windows Graphics Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-95934](https://cve.now/CVE-2026-95934.md): Windows Diagnostic Policy Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-95932](https://cve.now/CVE-2026-95932.md): Windows Graphics Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-95920](https://cve.now/CVE-2026-95920.md): Windows Management Instrumentation Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-95910](https://cve.now/CVE-2026-95910.md): Windows Hyper-V Security Feature Bypass Vulnerability (CVSS 6.7, Microsoft Windows)
- [CVE-2026-95909](https://cve.now/CVE-2026-95909.md): Windows Graphics Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-95908](https://cve.now/CVE-2026-95908.md): Windows Remote Desktop Client Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-95896](https://cve.now/CVE-2026-95896.md): Microsoft DirectMusic Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-95895](https://cve.now/CVE-2026-95895.md): Windows Graphics Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-95893](https://cve.now/CVE-2026-95893.md): Win32k Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-95891](https://cve.now/CVE-2026-95891.md): Microsoft DirectMusic Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-95889](https://cve.now/CVE-2026-95889.md): Windows Storage Elevation of Privilege Vulnerability (CVSS 6.6, Microsoft Windows)
- [CVE-2026-95888](https://cve.now/CVE-2026-95888.md): Windows Graphics Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-95881](https://cve.now/CVE-2026-95881.md): Windows Push Notifications Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-95879](https://cve.now/CVE-2026-95879.md): Windows Graphics Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-95877](https://cve.now/CVE-2026-95877.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-95876](https://cve.now/CVE-2026-95876.md): Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-95871](https://cve.now/CVE-2026-95871.md): Windows Broadcast DVR User Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-94531](https://cve.now/CVE-2026-94531.md): Windows COM Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-94529](https://cve.now/CVE-2026-94529.md): Windows Broadcast DVR User Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-94525](https://cve.now/CVE-2026-94525.md): Windows Error Reporting Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-94514](https://cve.now/CVE-2026-94514.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-94507](https://cve.now/CVE-2026-94507.md): DirectX Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-88245](https://cve.now/CVE-2026-88245.md): Windows Brokering File System Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows Server)
- [CVE-2026-88243](https://cve.now/CVE-2026-88243.md): Windows DHCP Server Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows Server)
- [CVE-2026-88242](https://cve.now/CVE-2026-88242.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-88240](https://cve.now/CVE-2026-88240.md): Windows DHCP Client Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows)
- [CVE-2026-88239](https://cve.now/CVE-2026-88239.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-88238](https://cve.now/CVE-2026-88238.md): Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-88237](https://cve.now/CVE-2026-88237.md): Windows Subsystem for Linux Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-88234](https://cve.now/CVE-2026-88234.md): Windows iSCSI Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows Server)
- [CVE-2026-88229](https://cve.now/CVE-2026-88229.md): Windows Media Player Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-88224](https://cve.now/CVE-2026-88224.md): Windows AppX Deployment Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-88217](https://cve.now/CVE-2026-88217.md): Windows Graphics Kernel Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-88215](https://cve.now/CVE-2026-88215.md): Windows Filtering Platform (WFP) Elevation of Privilege Vulnerability (CVSS 6.4, Microsoft Windows)
- [CVE-2026-99287](https://cve.now/CVE-2026-99287.md): xen-netback: Zero out sring pointers on unmap (no CVSS, Linux)
- [CVE-2026-99286](https://cve.now/CVE-2026-99286.md): xen-netback: Fix XenBus connection failure cleanup (no CVSS, Linux)
- [CVE-2026-88213](https://cve.now/CVE-2026-88213.md): Windows Bluetooth Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-88211](https://cve.now/CVE-2026-88211.md): Graphic Fonts Information Disclosure Vulnerability (CVSS 5.7, Microsoft Windows)
- [CVE-2026-88187](https://cve.now/CVE-2026-88187.md): Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows)
- [CVE-2026-70094](https://cve.now/CVE-2026-70094.md): Visual Studio Code Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Visual Studio Code)
- [CVE-2026-85923](https://cve.now/CVE-2026-85923.md): Azure DevOps Server Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Azure DevOps Server)
- [CVE-2026-85907](https://cve.now/CVE-2026-85907.md): Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability (CVSS 4.4, Microsoft Windows)
- [CVE-2026-83953](https://cve.now/CVE-2026-83953.md): GitHub Copilot for Jetbrains Information Disclosure Vulnerability (CVSS 5.5, Microsoft GitHub Copilot Plugin for JetBrains IDEs)
- [CVE-2026-72998](https://cve.now/CVE-2026-72998.md): Windows DHCP Server Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows Server)
- [CVE-2026-67632](https://cve.now/CVE-2026-67632.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SQL Server)
- [CVE-2026-66813](https://cve.now/CVE-2026-66813.md): Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 8.1, Microsoft SQL Server)
- [CVE-2026-67637](https://cve.now/CVE-2026-67637.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SQL Server)
- [CVE-2026-67382](https://cve.now/CVE-2026-67382.md): Microsoft SQL Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft SQL Server)
- [CVE-2026-96988](https://cve.now/CVE-2026-96988.md): Windows DNS Information Disclosure Vulnerability (CVSS 4.9, Microsoft Windows Server)
- [CVE-2026-96987](https://cve.now/CVE-2026-96987.md): Windows DNS Information Disclosure Vulnerability (CVSS 4.9, Microsoft Windows Server)
- [CVE-2026-96986](https://cve.now/CVE-2026-96986.md): Windows DNS Information Disclosure Vulnerability (CVSS 4.9, Microsoft Windows Server)
- [CVE-2026-96972](https://cve.now/CVE-2026-96972.md): Windows DNS Server Information Disclosure Vulnerability (CVSS 7.5, Microsoft Windows Server)
- [CVE-2026-96970](https://cve.now/CVE-2026-96970.md): Windows DNS Information Disclosure Vulnerability (CVSS 4.9, Microsoft Windows Server)
- [CVE-2026-96976](https://cve.now/CVE-2026-96976.md): Windows DNS Information Disclosure Vulnerability (CVSS 4.9, Microsoft Windows Server)
- [CVE-2026-96992](https://cve.now/CVE-2026-96992.md): Windows PCI Bus Driver Elevation of Privilege Vulnerability (CVSS 6.4, Microsoft Windows)
- [CVE-2026-96981](https://cve.now/CVE-2026-96981.md): Windows PCI Bus Driver Elevation of Privilege Vulnerability (CVSS 6.4, Microsoft Windows)
- [CVE-2026-97015](https://cve.now/CVE-2026-97015.md): Windows BitLocker Security Feature Bypass Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2026-96993](https://cve.now/CVE-2026-96993.md): Windows Performance Monitor Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-97013](https://cve.now/CVE-2026-97013.md): Windows Shell Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96965](https://cve.now/CVE-2026-96965.md): Windows Hyper-V Denial of Service Vulnerability (CVSS 5.3, Microsoft Windows)
- [CVE-2026-96978](https://cve.now/CVE-2026-96978.md): Windows Credential User Interface Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-67387](https://cve.now/CVE-2026-67387.md): Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft SQL Server)
- [CVE-2026-67646](https://cve.now/CVE-2026-67646.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SQL Server 2025 CU10 · Microsoft SQL Server 2025…)
- [CVE-2026-67372](https://cve.now/CVE-2026-67372.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SQL Server 2025 CU10 · Microsoft SQL Server 2025…)
- [CVE-2026-96184](https://cve.now/CVE-2026-96184.md): Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96179](https://cve.now/CVE-2026-96179.md): Windows DNS Elevation of Privilege Vulnerability (CVSS 6.7, Microsoft Windows Server)
- [CVE-2026-96177](https://cve.now/CVE-2026-96177.md): Windows Domain Name Service Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows Server)
- [CVE-2026-96176](https://cve.now/CVE-2026-96176.md): Windows DNS Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-96174](https://cve.now/CVE-2026-96174.md): Desktop Window Manager Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96171](https://cve.now/CVE-2026-96171.md): Windows Graphics Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96164](https://cve.now/CVE-2026-96164.md): Windows Imaging Component Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-96158](https://cve.now/CVE-2026-96158.md): Microsoft ActiveX Installer Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96152](https://cve.now/CVE-2026-96152.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96150](https://cve.now/CVE-2026-96150.md): Microsoft Windows Codecs Library Information Disclosure Vulnerability (CVSS 5.6, Microsoft Windows)
- [CVE-2026-96144](https://cve.now/CVE-2026-96144.md): Windows Graphics Kernel Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2026-96137](https://cve.now/CVE-2026-96137.md): Windows Graphics Kernel Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-96134](https://cve.now/CVE-2026-96134.md): Windows DHCP Server Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows Server)
- [CVE-2026-96133](https://cve.now/CVE-2026-96133.md): Windows Graphics Kernel Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-96129](https://cve.now/CVE-2026-96129.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96126](https://cve.now/CVE-2026-96126.md): Windows Graphics Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96117](https://cve.now/CVE-2026-96117.md): Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96115](https://cve.now/CVE-2026-96115.md): Windows DHCP Client Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows)
- [CVE-2026-96112](https://cve.now/CVE-2026-96112.md): Windows DNS Server Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows Server)
- [CVE-2026-96102](https://cve.now/CVE-2026-96102.md): Windows TCP/IP Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96101](https://cve.now/CVE-2026-96101.md): Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-96085](https://cve.now/CVE-2026-96085.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96084](https://cve.now/CVE-2026-96084.md): Graphic Fonts Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96082](https://cve.now/CVE-2026-96082.md): Windows Kerberos Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-96081](https://cve.now/CVE-2026-96081.md): Windows Rich Text Edit Control Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-96078](https://cve.now/CVE-2026-96078.md): Microsoft Color Management Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-96077](https://cve.now/CVE-2026-96077.md): Windows TCP/IP Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-96072](https://cve.now/CVE-2026-96072.md): Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96066](https://cve.now/CVE-2026-96066.md): Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96064](https://cve.now/CVE-2026-96064.md): Windows Domain Name Service Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows Server)
- [CVE-2026-96062](https://cve.now/CVE-2026-96062.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96059](https://cve.now/CVE-2026-96059.md): HID class driver Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-96058](https://cve.now/CVE-2026-96058.md): Windows Kernel Information Disclosure Vulnerability (CVSS 4.6, Microsoft Windows)
- [CVE-2026-96056](https://cve.now/CVE-2026-96056.md): Windows USB Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96053](https://cve.now/CVE-2026-96053.md): Windows Task Scheduler Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96052](https://cve.now/CVE-2026-96052.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96054](https://cve.now/CVE-2026-96054.md): Microsoft Color Management Remote Code Execution Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-95692](https://cve.now/CVE-2026-95692.md): Out-of-Bounds Read and Incorrect IV Length Handling in AES-GCM-SIV (low (no CVSS), OpenSSL)
- [CVE-2026-96048](https://cve.now/CVE-2026-96048.md): Windows Graphics Kernel Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2026-96047](https://cve.now/CVE-2026-96047.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96046](https://cve.now/CVE-2026-96046.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96043](https://cve.now/CVE-2026-96043.md): Windows Connection Manager Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96031](https://cve.now/CVE-2026-96031.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96026](https://cve.now/CVE-2026-96026.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96018](https://cve.now/CVE-2026-96018.md): Windows AppContainer Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-96008](https://cve.now/CVE-2026-96008.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96010](https://cve.now/CVE-2026-96010.md): HID Parser Library Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-96005](https://cve.now/CVE-2026-96005.md): Windows USB Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96001](https://cve.now/CVE-2026-96001.md): Windows Bluetooth Service Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-95999](https://cve.now/CVE-2026-95999.md): Windows USB Hub Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-95998](https://cve.now/CVE-2026-95998.md): Windows StateRepository API Tampering Vulnerability (CVSS 4.4, Microsoft Windows)
- [CVE-2026-95989](https://cve.now/CVE-2026-95989.md): vhdmp.sys Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-95979](https://cve.now/CVE-2026-95979.md): Windows Brokering File System Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-95977](https://cve.now/CVE-2026-95977.md): Windows Event Viewer Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-95975](https://cve.now/CVE-2026-95975.md): Windows Performance Counters Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-95973](https://cve.now/CVE-2026-95973.md): Windows Graphics Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-95971](https://cve.now/CVE-2026-95971.md): Windows Graphics Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-95964](https://cve.now/CVE-2026-95964.md): Remote Desktop Client Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-95963](https://cve.now/CVE-2026-95963.md): Data Sharing Service Client Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-95961](https://cve.now/CVE-2026-95961.md): Windows USB Video Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-95960](https://cve.now/CVE-2026-95960.md): Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-95953](https://cve.now/CVE-2026-95953.md): Windows Graphics Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-95950](https://cve.now/CVE-2026-95950.md): Windows Graphics Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-95947](https://cve.now/CVE-2026-95947.md): Windows Error Reporting Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-95946](https://cve.now/CVE-2026-95946.md): Windows Graphics Kernel Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-95691](https://cve.now/CVE-2026-95691.md): Retransmitted QUIC CRYPTO Frames Can Cause DoS or One-byte Disclosure (low (no CVSS), OpenSSL)
- [CVE-2026-95944](https://cve.now/CVE-2026-95944.md): Windows App Readiness Service Tampering Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-95942](https://cve.now/CVE-2026-95942.md): Windows Graphics Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-95938](https://cve.now/CVE-2026-95938.md): Windows Graphics Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-95935](https://cve.now/CVE-2026-95935.md): Windows Graphics Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-95933](https://cve.now/CVE-2026-95933.md): Windows OLE Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-95923](https://cve.now/CVE-2026-95923.md): Windows HTTP.sys Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-95922](https://cve.now/CVE-2026-95922.md): Windows Graphics Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-95913](https://cve.now/CVE-2026-95913.md): Windows Hyper-V Denial of Service Vulnerability (CVSS 5.9, Microsoft Windows)
- [CVE-2026-95906](https://cve.now/CVE-2026-95906.md): Windows Graphics Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-95905](https://cve.now/CVE-2026-95905.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2026-95902](https://cve.now/CVE-2026-95902.md): Windows USB Hub Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-95901](https://cve.now/CVE-2026-95901.md): Microsoft DirectMusic Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-95898](https://cve.now/CVE-2026-95898.md): Windows iSCSI Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-95894](https://cve.now/CVE-2026-95894.md): Windows Task Scheduler Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-95885](https://cve.now/CVE-2026-95885.md): Windows Client for NFS Elevation of Privilege Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2026-95884](https://cve.now/CVE-2026-95884.md): Windows Active Directory Certificate Services Information Disclosure Vulnerability (CVSS 5.3, Microsoft Windows Server)
- [CVE-2026-95882](https://cve.now/CVE-2026-95882.md): Microsoft DirectMusic Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-95874](https://cve.now/CVE-2026-95874.md): Xbox Gaming Services Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-95872](https://cve.now/CVE-2026-95872.md): Windows USB Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-94527](https://cve.now/CVE-2026-94527.md): Windows GDI Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-94522](https://cve.now/CVE-2026-94522.md): Windows Kernel Transaction Manager Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-94519](https://cve.now/CVE-2026-94519.md): Windows Graphics Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-94517](https://cve.now/CVE-2026-94517.md): Windows Kernel Transaction Manager Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-94515](https://cve.now/CVE-2026-94515.md): Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-88249](https://cve.now/CVE-2026-88249.md): Windows Client for NFS Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-88247](https://cve.now/CVE-2026-88247.md): Windows Program Compatibility Assistant Service Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-88823](https://cve.now/CVE-2026-88823.md): AES-GCM-SIV AAD Forgery After Zero-length Incremental AAD Update (low (no CVSS), OpenSSL)
- [CVE-2026-88244](https://cve.now/CVE-2026-88244.md): Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-88241](https://cve.now/CVE-2026-88241.md): Windows Sensor Data Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-88236](https://cve.now/CVE-2026-88236.md): Microsoft QUIC Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-88235](https://cve.now/CVE-2026-88235.md): Servicing Stack Updates Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-88233](https://cve.now/CVE-2026-88233.md): Windows Task Scheduler Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-88232](https://cve.now/CVE-2026-88232.md): Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-88231](https://cve.now/CVE-2026-88231.md): Windows iSCSI Information Disclosure Vulnerability (CVSS 5.7, Microsoft Windows)
- [CVE-2026-88230](https://cve.now/CVE-2026-88230.md): Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-88228](https://cve.now/CVE-2026-88228.md): Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-88227](https://cve.now/CVE-2026-88227.md): Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-88221](https://cve.now/CVE-2026-88221.md): Windows Broadcast DVR User Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-88220](https://cve.now/CVE-2026-88220.md): Windows Performance Counters Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-88218](https://cve.now/CVE-2026-88218.md): Windows DNS Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-88216](https://cve.now/CVE-2026-88216.md): Windows DHCP Server Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows Server)
- [CVE-2026-70240](https://cve.now/CVE-2026-70240.md): Windows Kerberos Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-70120](https://cve.now/CVE-2026-70120.md): Microsoft Bluetooth Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-70231](https://cve.now/CVE-2026-70231.md): Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-88822](https://cve.now/CVE-2026-88822.md): QUIC Uses Uninitialized Stack Bytes During Automated Peer Detection (low (no CVSS), OpenSSL)
- [CVE-2026-85862](https://cve.now/CVE-2026-85862.md): Windows Error Reporting Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-81384](https://cve.now/CVE-2026-81384.md): Windows DNS Server Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows Server)
- [CVE-2026-69327](https://cve.now/CVE-2026-69327.md): Windows Remote Desktop Services Remote Code Execution Vulnerability (CVSS 7.4, Microsoft Windows Server)
- [CVE-2026-67391](https://cve.now/CVE-2026-67391.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SQL Server)
- [CVE-2026-69565](https://cve.now/CVE-2026-69565.md): Windows Remote Desktop Services Remote Code Execution Vulnerability (CVSS 7.0, Microsoft Windows Server)
- [CVE-2026-109487](https://cve.now/CVE-2026-109487.md): Microsoft PowerPoint Remote Code Execution Vulnerability (CVSS 7.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-109485](https://cve.now/CVE-2026-109485.md): Microsoft 365 Agents SDK Information Disclosure Vulnerability (CVSS 6.3, Microsoft Agent Framework SDK)
- [CVE-2026-108425](https://cve.now/CVE-2026-108425.md): Windows DNS Information Disclosure Vulnerability (CVSS 5.9, Microsoft Windows Server)
- [CVE-2026-109492](https://cve.now/CVE-2026-109492.md): Microsoft MCP Gateway Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft mcp-gateway)
- [CVE-2026-109491](https://cve.now/CVE-2026-109491.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 7.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-109481](https://cve.now/CVE-2026-109481.md): ASP.NET Core Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft .NET 11.0 installed on Linux · Microsoft .NET… +13)
- [CVE-2026-109472](https://cve.now/CVE-2026-109472.md): Microsoft Office SharePoint Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-109466](https://cve.now/CVE-2026-109466.md): Microsoft Office SharePoint Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-109464](https://cve.now/CVE-2026-109464.md): Microsoft Office SharePoint Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-109460](https://cve.now/CVE-2026-109460.md): Microsoft Entra Private Network Connector Information Disclosure Vulnerability (CVSS 5.5, Microsoft Entra Private Network Connector)
- [CVE-2026-109457](https://cve.now/CVE-2026-109457.md): Azure CLI Remote Code Execution Vulnerability (CVSS 8.0, Microsoft Azure Machine Learning)
- [CVE-2026-109456](https://cve.now/CVE-2026-109456.md): Microsoft Office SharePoint Spoofing Vulnerability (CVSS 4.6, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-109455](https://cve.now/CVE-2026-109455.md): Microsoft Office SharePoint Information Disclosure Vulnerability (CVSS 6.5, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-109454](https://cve.now/CVE-2026-109454.md): Microsoft Office SharePoint Spoofing Vulnerability (CVSS 9.0, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-108414](https://cve.now/CVE-2026-108414.md): Windows Projected File System Filter Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-85839](https://cve.now/CVE-2026-85839.md): Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-85838](https://cve.now/CVE-2026-85838.md): Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-62903](https://cve.now/CVE-2026-62903.md): Microsoft.Data.SqlClient Information Disclosure Vulnerability (CVSS 7.4, Microsoft.Data.SqlClient)
- [CVE-2026-102200](https://cve.now/CVE-2026-102200.md): Windows NTFS Tampering Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2026-100223](https://cve.now/CVE-2026-100223.md): Windows NTFS Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83684](https://cve.now/CVE-2026-83684.md): Windows iSCSI Target Service Information Disclosure Vulnerability (CVSS 7.5, Microsoft Windows Server)
- [CVE-2026-85801](https://cve.now/CVE-2026-85801.md): Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-94513](https://cve.now/CVE-2026-94513.md): Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft SQL Server)
- [CVE-2026-94511](https://cve.now/CVE-2026-94511.md): SQL Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SQL Server)
- [CVE-2026-109478](https://cve.now/CVE-2026-109478.md): ASP.NET Core Denial of Service Vulnerability (CVSS 7.5, Microsoft .NET 8.0 installed on Linux · Microsoft .NET… +16)
- [CVE-2026-109476](https://cve.now/CVE-2026-109476.md): ASP.NET Core Information Disclosure Vulnerability (CVSS 6.1, Microsoft .NET 10.0 installed on Linux · Microsoft .NET… +22)
- [CVE-2026-109475](https://cve.now/CVE-2026-109475.md): .NET Denial of Service Vulnerability (CVSS 7.5, Microsoft .NET 10.0 installed on Linux · Microsoft .NET… +14)
- [CVE-2026-108419](https://cve.now/CVE-2026-108419.md): Windows Remote Desktop Client Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-108418](https://cve.now/CVE-2026-108418.md): Windows Remote Desktop Client Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-108402](https://cve.now/CVE-2026-108402.md): Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability (CVSS 5.3, Microsoft Windows)
- [CVE-2026-105734](https://cve.now/CVE-2026-105734.md): Azure Local Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Azure Local)
- [CVE-2026-109462](https://cve.now/CVE-2026-109462.md): Azure Firmware Security Feature Bypass Vulnerability (CVSS 4.4, Microsoft Azure Virtual Machines)
- [CVE-2026-102224](https://cve.now/CVE-2026-102224.md): Azure CycleCloud Elevation of Privilege Vulnerability (CVSS 8.4, Microsoft Azure CycleCloud)
- [CVE-2026-102236](https://cve.now/CVE-2026-102236.md): Visual Studio Code Security Feature Bypass Vulnerability (CVSS 8.6, Microsoft Visual Studio Code)
- [CVE-2026-88176](https://cve.now/CVE-2026-88176.md): Microsoft Office SharePoint Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-84004](https://cve.now/CVE-2026-84004.md): AMD Zen Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-84005](https://cve.now/CVE-2026-84005.md): AMD Zen Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-83894](https://cve.now/CVE-2026-83894.md): RPC Runtime Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-114170](https://cve.now/CVE-2026-114170.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-114169](https://cve.now/CVE-2026-114169.md): Windows Raw Image Extension Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Raw Image Extension)
- [CVE-2026-114167](https://cve.now/CVE-2026-114167.md): HEVC Video Extensions Remote Code Execution Vulnerability (CVSS 7.8, Microsoft HEVC Video Extensions)
- [CVE-2026-114166](https://cve.now/CVE-2026-114166.md): Microsoft Raw Image Extension Information Disclosure Vulnerability (CVSS 5.5, Microsoft Raw Image Extension)
- [CVE-2026-114165](https://cve.now/CVE-2026-114165.md): HEVC Video Extensions Remote Code Execution Vulnerability (CVSS 7.8, Microsoft HEVC Video Extensions)
- [CVE-2026-114164](https://cve.now/CVE-2026-114164.md): HEVC Video Extensions Remote Code Execution Vulnerability (CVSS 8.8, Microsoft HEVC Video Extensions)
- [CVE-2026-105544](https://cve.now/CVE-2026-105544.md): .NET Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft .NET 10.0 installed on Linux · Microsoft .NET… +12)
- [CVE-2026-66801](https://cve.now/CVE-2026-66801.md): Microsoft Xbox Remote Code Execution Vulnerability (CVSS 9.8, Microsoft GDK)
- [CVE-2026-109467](https://cve.now/CVE-2026-109467.md): Azure DevOps Server Remote Code Execution Vulnerability (CVSS 9.9, Microsoft Azure DevOps)
- [CVE-2026-109463](https://cve.now/CVE-2026-109463.md): Windows DNS Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-108416](https://cve.now/CVE-2026-108416.md): Windows File Server Resource Management Service Elevation of Privilege Vulnerability (CVSS 6.8, Microsoft Windows Server)
- [CVE-2026-108415](https://cve.now/CVE-2026-108415.md): Windows File Server Resource Management Service Elevation of Privilege Vulnerability (CVSS 6.8, Microsoft Windows Server)
- [CVE-2026-108411](https://cve.now/CVE-2026-108411.md): Microsoft ODBC Driver Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-108403](https://cve.now/CVE-2026-108403.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-108424](https://cve.now/CVE-2026-108424.md): Windows GDI Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-108417](https://cve.now/CVE-2026-108417.md): Windows Remote Desktop Client Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-108409](https://cve.now/CVE-2026-108409.md): Windows Overlay Filter Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-100204](https://cve.now/CVE-2026-100204.md): HEIF Image Extensions Remote Code Execution Vulnerability (CVSS 7.0, Microsoft HEIF Image Extension)
- [CVE-2026-105590](https://cve.now/CVE-2026-105590.md): Windows Active Directory Certificate Services Security Feature Bypass (CVSS 5.3, Microsoft Windows Server)
- [CVE-2026-105589](https://cve.now/CVE-2026-105589.md): Windows Wireless Networking Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-105588](https://cve.now/CVE-2026-105588.md): Windows DHCP Server Elevation of Privilege Vulnerability (CVSS 6.4, Microsoft Windows Server)
- [CVE-2026-105587](https://cve.now/CVE-2026-105587.md): Windows OLE DB Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-105586](https://cve.now/CVE-2026-105586.md): Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-105584](https://cve.now/CVE-2026-105584.md): Windows Inventory Backup Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-105583](https://cve.now/CVE-2026-105583.md): Windows DWM Core Library Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-105582](https://cve.now/CVE-2026-105582.md): Windows DWM Core Library Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-102868](https://cve.now/CVE-2026-102868.md): Windows Shell Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-107496](https://cve.now/CVE-2026-107496.md): Infinite Loop in CMS\_encrypt() With an EC Group Order of 1 (low (no CVSS), OpenSSL)
- [CVE-2026-125328](https://cve.now/CVE-2026-125328.md): pgEdge Go LLM Library discloses provider API key fragments in error messages (CVSS 5.8, pgedge-go-llm-lib)
- [CVE-2026-125327](https://cve.now/CVE-2026-125327.md): pgEdge RAG Server unbounded corpus read allows resource exhaustion from unauthenticated requests (CVSS 7.5, pgedge-rag-server)
- [CVE-2026-125326](https://cve.now/CVE-2026-125326.md): pgEdge RAG Server discloses part of the configured provider credential through API error messagespgEdge RAG Server discloses part of the… (CVSS 5.8, pgedge-rag-server)
- [CVE-2026-125325](https://cve.now/CVE-2026-125325.md): pgEdge RAG Server shared keyword index leaked results between concurrent unauthenticated requests (CVSS 5.9, pgedge-rag-server)
- [CVE-2026-79914](https://cve.now/CVE-2026-79914.md): NocoBase: SSRF in customRequests:send via runtime options.url override (CVSS 4.3, nocobase · @nocobase/plugin-action-custom-request)
- [CVE-2026-125323](https://cve.now/CVE-2026-125323.md): pgEdge Control Plane generates pg\_hba.conf with trust authentication for local and loopback connections (CVSS 7.8, pgEdge control-plane)
- [CVE-2026-63540](https://cve.now/CVE-2026-63540.md): Heap-based buffer overflow for some Hyperscan before version v5.4.2.1 within Ring 3: User Applications may allow a denial of service. (CVSS 6.9, Hyperscan)
- [CVE-2026-63028](https://cve.now/CVE-2026-63028.md): Improper initialization in the MigTD virtio-vsock stream handling for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0… (CVSS 5.1, Intel(R) TDX Migration Trust Domain)
- [CVE-2026-63027](https://cve.now/CVE-2026-63027.md): Incorrect behavior order in the get\_tcb\_level\_by\_svn for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may… (CVSS 5.3, Intel(R) TDX Migration Trust Domain)
- [CVE-2026-63018](https://cve.now/CVE-2026-63018.md): Integer underflow (wrap or wraparound) for some Intel(R) Metrics Discovery Application Programming Interface software before version… (CVSS 4.8, Intel(R) Metrics Discovery Application Programming Interfac…)
- [CVE-2026-62930](https://cve.now/CVE-2026-62930.md): Unchecked return value in the MigTD's TLS implementation for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may… (CVSS 5.3, Intel(R) TDX Migration Trust Domain)
- [CVE-2026-62929](https://cve.now/CVE-2026-62929.md): Expired pointer dereference in the MigTD's virtio-vsock implementation for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0… (CVSS 8.4, Intel(R) TDX Migration Trust Domain)
- [CVE-2026-62920](https://cve.now/CVE-2026-62920.md): Unchecked return value in the MigTD error handling for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow… (CVSS 6.7, Intel(R) TDX Migration Trust Domain)
- [CVE-2026-62275](https://cve.now/CVE-2026-62275.md): Detection of error condition without action in the MigTD's vmcall\_raw transport for the Intel(R) TDX Migration Trust Domain (MigTD) within… (CVSS 5.6, Intel(R) TDX Migration Trust Domain)
- [CVE-2026-61887](https://cve.now/CVE-2026-61887.md): Missing critical step in authentication in the MigTD SPDM rebind implementation for the Intel(R) TDX Migration Trust Domain (MigTD) within… (CVSS 9.4, Intel(R) TDX Migration Trust Domain)
- [CVE-2026-61473](https://cve.now/CVE-2026-61473.md): Authentication bypass by capture-replay in the MigTD for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may… (CVSS 9.2, Intel(R) TDX Migration Trust Domain)
- [CVE-2026-61470](https://cve.now/CVE-2026-61470.md): Improper control of a resource through its lifetime in the MigTD's TLS client for the Intel(R) TDX Migration Trust Domain (MigTD) within… (CVSS 5.3, Intel(R) TDX Migration Trust Domain)
- [CVE-2026-61469](https://cve.now/CVE-2026-61469.md): Off-by-one error in the MigTD's vmcall\_raw transport for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may… (CVSS 5.1, Intel(R) TDX Migration Trust Domain)
- [CVE-2026-61468](https://cve.now/CVE-2026-61468.md): Improper privilege management in the MigTD logging for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow… (CVSS 6.7, Intel(R) TDX Migration Trust Domain)
- [CVE-2026-61467](https://cve.now/CVE-2026-61467.md): Use after free in the MigTD virtio driver for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an… (CVSS 6.8, Intel(R) TDX Migration Trust Domain)
- [CVE-2026-61383](https://cve.now/CVE-2026-61383.md): Incorrect calculation of buffer size in the MigTD's servtd\_get\_quote for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0… (CVSS 2.0, Intel(R) TDX Migration Trust Domain)
- [CVE-2026-61377](https://cve.now/CVE-2026-61377.md): Sensitive information uncleared in resource before release for reuse in the MigTD for the Intel(R) TDX Migration Trust Domain (MigTD)… (CVSS 6.8, Intel(R) TDX Migration Trust Domain)
- [CVE-2026-60142](https://cve.now/CVE-2026-60142.md): Write-what-where condition in the MigTD for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an… (CVSS 8.4, Intel(R) TDX Migration Trust Domain)
- [CVE-2026-60141](https://cve.now/CVE-2026-60141.md): Improper null termination for some Intel(R) Metrics Discovery Application Programming Interface before version 1.16.189 within Ring 3… (CVSS 4.8, Intel(R) Metrics Discovery Application Programming Interface)
- [CVE-2026-60139](https://cve.now/CVE-2026-60139.md): Improper neutralization in the MigTD SPDM transport for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may… (CVSS 6.0, Intel(R) TDX Migration Trust Domain)
- [CVE-2026-60138](https://cve.now/CVE-2026-60138.md): Use of out-of-range pointer offset in the MigTD's virtio-vsock implementation for the Intel(R) TDX Migration Trust Domain (MigTD) within… (CVSS 8.4, Intel(R) TDX Migration Trust Domain)
- [CVE-2026-60133](https://cve.now/CVE-2026-60133.md): Integer overflow in the MigTD vsock for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow a denial of… (CVSS 5.8, Intel(R) TDX Migration Trust Domain)
- [CVE-2026-60071](https://cve.now/CVE-2026-60071.md): Improper validation of specified quantity in input in the MigTD vsock packet handling for the Intel(R) TDX Migration Trust Domain (MigTD)… (CVSS 6.7, Intel(R) TDX Migration Trust Domain)
- [CVE-2026-60059](https://cve.now/CVE-2026-60059.md): Use of uninitialized resource in the MigTD memory for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow… (CVSS 4.8, Intel(R) TDX Migration Trust Domain)
- [CVE-2026-60020](https://cve.now/CVE-2026-60020.md): Missing release of memory after effective lifetime in the MigTD virtio-serial driver for the Intel(R) TDX Migration Trust Domain (MigTD)… (CVSS 4.6, Intel(R) TDX Migration Trust Domain)
- [CVE-2026-59771](https://cve.now/CVE-2026-59771.md): Improper validation of array index in the MigTD's virtio-serial driver for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0… (CVSS 6.7, Intel(R) TDX Migration Trust Domain)
- [CVE-2026-57893](https://cve.now/CVE-2026-57893.md): Incomplete internal state distinction in the MigTD's SPDM responder for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0… (CVSS 6.8, Intel(R) TDX Migration Trust Domain)
- [CVE-2026-57892](https://cve.now/CVE-2026-57892.md): Insufficient granularity of access control in the MigTD v2 policy evaluation engine for the Intel(R) TDX Migration Trust Domain (MigTD)… (CVSS 8.8, Intel(R) TDX Migration Trust Domain)
- [CVE-2026-57891](https://cve.now/CVE-2026-57891.md): Out-of-bounds write in the XmlCliCommonDxe for the Intel(R) Server Board D50DNP and Intel(R) Server Board M50FCP within Ring 0 UEFI may… (CVSS 8.7, Intel(R) Server Board D50DNP and Intel(R) Server Board M50F…)
- [CVE-2026-57890](https://cve.now/CVE-2026-57890.md): Improper cleanup on thrown exception in the MigTD's SPDM responder for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0… (CVSS 8.7, Intel(R) TDX Migration Trust Domain)
- [CVE-2026-57882](https://cve.now/CVE-2026-57882.md): Out-of-bounds write in the XmlCliCommonDxe for the Intel(R) Server Board D50DNP and Intel(R) Server Board M50FCP within Ring 0 UEFI may… (CVSS 8.7, Intel(R) Server Board D50DNP and Intel(R) Server Board M50F…)
- [CVE-2026-56759](https://cve.now/CVE-2026-56759.md): Improper input validation in the MigTD PCI BAR handling for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may… (CVSS 6.7, Intel(R) TDX Migration Trust Domain)
- [CVE-2026-56440](https://cve.now/CVE-2026-56440.md): Improper input validation for some BigDL before version 2.5.0b1 within Ring 3: User Applications may allow an escalation of privilege. (CVSS 4.6, BigDL)
- [CVE-2026-56435](https://cve.now/CVE-2026-56435.md): Out-of-bounds write in the XmlCliCommonDxe for the Intel(R) Server Board D50DNP and Intel(R) Server Board M50FCP within Ring 0 UEFI may… (CVSS 8.7, Intel(R) Server Board D50DNP and Intel(R) Server Board M50F…)
- [CVE-2026-56432](https://cve.now/CVE-2026-56432.md): Unintended proxy or intermediary ('confused deputy') in the MigTD signing for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring… (CVSS 8.2, Intel(R) TDX Migration Trust Domain)
- [CVE-2026-55716](https://cve.now/CVE-2026-55716.md): Out-of-bounds read in the CheckUefiVgaMode for the Intel(R) Server Board D50DNP and Intel(R) Server Board M50FCP within Ring 0 UEFI may… (CVSS 5.6, Intel(R) Server Board D50DNP and Intel(R) Server Board M50F…)
- [CVE-2026-55709](https://cve.now/CVE-2026-55709.md): Loop with unreachable exit condition ('infinite loop') in the MigTD's GetQuote for the Intel(R) TDX Migration Trust Domain (MigTD) within… (CVSS 6.9, Intel(R) TDX Migration Trust Domain)
- [CVE-2026-52899](https://cve.now/CVE-2026-52899.md): Deserialization of untrusted data for some BigDL software before version 2.5.0b1 within Ring 3: User Applications may allow an escalation… (CVSS 6.9, BigDL software)
- [CVE-2026-50249](https://cve.now/CVE-2026-50249.md): Out-of-bounds read in the GenerationSetup for the Intel(R) Server Board D50DNP and Intel(R) Server Board M50FCP within Ring 0 UEFI may… (CVSS 5.6, Intel(R) Server Board D50DNP and Intel(R) Server Board M50F…)
- [CVE-2026-50175](https://cve.now/CVE-2026-50175.md): Untrusted pointer dereference in the FirmwareWakingVector for the Intel(R) Slim Bootloader within Ring 0: Bare Metal OS may allow an… (CVSS 8.4, Intel(R) Slim Bootloader)
- [CVE-2026-49036](https://cve.now/CVE-2026-49036.md): Time-of-check time-of-use race condition in the MigTD shared memory for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0… (CVSS 5.7, Intel(R) TDX Migration Trust Domain)
- [CVE-2026-44685](https://cve.now/CVE-2026-44685.md): Authentication bypass by spoofing in the MigTD rebinding protocol for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0… (CVSS 9.3, Intel(R) TDX Migration Trust Domain)
- [CVE-2026-44625](https://cve.now/CVE-2026-44625.md): Use after free for some Intel(R) Wireless Bluetooth(R) within Ring 0: Kernel may allow a denial of service. (CVSS 6.8, Intel(R) Wireless Bluetooth)
- [CVE-2026-44624](https://cve.now/CVE-2026-44624.md): Incorrect comparison in the Ext2 parser for the Intel(R) Slim Bootloader within Ring 0: Bare Metal OS may allow a denial of service. (CVSS 5.7, Intel(R) Slim Bootloader)
- [CVE-2026-44606](https://cve.now/CVE-2026-44606.md): Out-of-bounds write for some Intel(R) Intelligent Storage Acceleration Library within Ring 3: User Applications may allow an escalation of… (CVSS 5.4, Intel(R) Intelligent Storage Acceleration Library)
- [CVE-2026-44382](https://cve.now/CVE-2026-44382.md): Out-of-bounds read for some Intel(R) Wireless Bluetooth(R) within Ring 0: Kernel may allow a denial of service. (CVSS 7.1, Intel(R) Wireless Bluetooth)
- [CVE-2026-42956](https://cve.now/CVE-2026-42956.md): Out-of-bounds write for some Intel(R) Wireless Bluetooth(R) within Ring 0: Kernel may allow a denial of service. (CVSS 7.1, Intel(R) Wireless Bluetooth)
- [CVE-2026-42056](https://cve.now/CVE-2026-42056.md): Stack-based buffer overflow for some Intel(R) Wireless Bluetooth(R) within Ring 0: Kernel may allow a denial of service. (CVSS 6.0, Intel(R) Wireless Bluetooth)
- [CVE-2026-41224](https://cve.now/CVE-2026-41224.md): Out-of-bounds write in the UEFI firmware for the Intel(R) Slim Bootloader within Ring 0: Bare Metal OS may allow an escalation of privilege. (CVSS 8.6, Intel(R) Slim Bootloader)
- [CVE-2026-41221](https://cve.now/CVE-2026-41221.md): Integer overflow in the UEFI firmware for the Intel(R) Slim Bootloader within Ring 0: Bare Metal OS may allow an escalation of privilege. (CVSS 8.6, Intel(R) Slim Bootloader)
- [CVE-2026-40697](https://cve.now/CVE-2026-40697.md): Use after free for some Intel(R) Wireless Software for Windows within Ring 3: User Applications may allow denial of service. (CVSS 5.8, Intel(R) Wireless Software for Windows)
- [CVE-2026-40695](https://cve.now/CVE-2026-40695.md): Null pointer dereference for some Intel(R) Wireless Bluetooth(R) within Ring 0: Kernel may allow a denial of service. (CVSS 6.8, Intel(R) Wireless Bluetooth)
- [CVE-2026-40694](https://cve.now/CVE-2026-40694.md): Out-of-bounds write for some Hyperscan before version v5.4.2.1 within Ring 3: User Applications may allow a denial of service. (CVSS 5.8, Hyperscan)
- [CVE-2026-40626](https://cve.now/CVE-2026-40626.md): Uncontrolled search path for some Intel(R) Wireless Bluetooth(R) software for Windows within Ring 3: User Applications may allow an… (CVSS 5.4, Intel(R) Wireless Bluetooth(R) software for Windows)
- [CVE-2026-40433](https://cve.now/CVE-2026-40433.md): Heap-based buffer overflow for some Intel(R) PROSet Wireless Wi-Fi Software for Windows within Ring 0: Kernel may allow a denial of service. (CVSS 8.5, Intel(R) PROSet Wireless Wi-Fi Software for Windows)
- [CVE-2026-40424](https://cve.now/CVE-2026-40424.md): Out-of-bounds read for some Hyperscan before version v5.4.2.1 within Ring 3: User Applications may allow a denial of service. (CVSS 5.9, Hyperscan)
- [CVE-2026-40216](https://cve.now/CVE-2026-40216.md): Out-of-bounds read for some Hyperscan before version v5.4.2.1 within Ring 3: User Applications may allow a denial of service. (CVSS 4.8, Hyperscan)
- [CVE-2026-40064](https://cve.now/CVE-2026-40064.md): Improper input validation for some Intel(R) oneAPI CLI Tool software within Ring 3: User Applications may allow a denial of service. (CVSS 4.6, Intel(R) oneAPI CLI Tool software)
- [CVE-2026-35500](https://cve.now/CVE-2026-35500.md): Stack-based buffer overflow in the UEFI firmware for the Intel(R) Slim Bootloader within Ring 0: Bare Metal OS may allow an escalation of… (CVSS 8.6, Intel(R) Slim Bootloader)
- [CVE-2026-34489](https://cve.now/CVE-2026-34489.md): Untrusted pointer dereference for some Hyperscan before version v5.4.2.1 within Ring 3: User Applications may allow a denial of service. (CVSS 5.9, Hyperscan)
- [CVE-2026-34017](https://cve.now/CVE-2026-34017.md): Heap-based buffer overflow for some Hyperscan before version v5.4.2.1 within Ring 3: User Applications may allow a denial of service. (CVSS 5.8, Hyperscan)
- [CVE-2026-33275](https://cve.now/CVE-2026-33275.md): Improper resource shutdown or release for some Intel(R) PROSet/Wireless Wi-Fi Software for Windows within Ring 3: User Applications may… (CVSS 6.8, Intel(R) PROSet/Wireless Wi-Fi Software for Windows)
- [CVE-2026-33094](https://cve.now/CVE-2026-33094.md): Out-of-bounds write for some Hyperscan before version v5.4.2.1 within Ring 3: User Applications may allow a denial of service. (CVSS 5.9, Hyperscan)
- [CVE-2026-28746](https://cve.now/CVE-2026-28746.md): Out-of-bounds read in the AuthenticateComponent for the Intel(R) Slim Bootloader within Ring 0: Bare Metal OS may allow a denial of service. (CVSS 6.7, Intel(R) Slim Bootloader)
- [CVE-2026-28730](https://cve.now/CVE-2026-28730.md): Null pointer dereference for some Hyperscan before version v5.4.2.1 within Ring 3: User Applications may allow a denial of service. (CVSS 6.9, Hyperscan)
- [CVE-2026-20703](https://cve.now/CVE-2026-20703.md): Protection mechanism failure for some BigDL before version 2.4.0 within Ring 3: User Applications may allow an escalation of privilege. (CVSS 5.4, BigDL)
- [CVE-2026-120212](https://cve.now/CVE-2026-120212.md): Web::Simple versions before 0.037 for Perl do not escape single quotes in HTML::Tags output (no CVSS, Web-Simple)
- [CVE-2026-125322](https://cve.now/CVE-2026-125322.md): pgEdge Postgres MCP Server SQL injection in the count\_rows where parameter (CVSS 6.5, pgedge-postgres-mcp)
- [CVE-2026-99285](https://cve.now/CVE-2026-99285.md): netfilter: nft\_byteorder: remove multi-register support (no CVSS, Linux)
- [CVE-2026-125321](https://cve.now/CVE-2026-125321.md): pgEdge Postgres MCP Server login rate limiting can be evaded by a caller-supplied header (CVSS 6.5, pgedge-postgres-mcp)
- [CVE-2026-125729](https://cve.now/CVE-2026-125729.md): Plack::Middleware::CSP versions before 0.03 for Perl send the Content Security Policy under the wrong header name, so browsers never… (no CVSS, Plack-Middleware-CSP)
- [CVE-2026-121691](https://cve.now/CVE-2026-121691.md): Unbounded decompression in the whatstk ZIP loader exhausts memory and disk (CVSS 6.7, lucasrodes whatstk)
- [CVE-2026-125320](https://cve.now/CVE-2026-125320.md): pgEdge Postgres MCP Server did not validate the Origin header, allowing DNS rebinding (CVSS 5.3, pgedge-postgres-mcp)
- [CVE-2026-125342](https://cve.now/CVE-2026-125342.md): Uninitialized resource in GPU in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to read memory outside the sandbox via a… (CVSS 4.7, Google Chrome)
- [CVE-2026-125349](https://cve.now/CVE-2026-125349.md): Uninitialized resource in GPU in Google Chrome on on Android prior to 157.0.8103.50 allowed a remote attacker who had compromised the… (CVSS 3.4, Google Chrome)
- [CVE-2026-125350](https://cve.now/CVE-2026-125350.md): Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a… (CVSS 8.8, KEV, Google Chrome)
- [CVE-2026-125346](https://cve.now/CVE-2026-125346.md): Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a… (CVSS 8.8, Google Chrome)
- [CVE-2026-125344](https://cve.now/CVE-2026-125344.md): Type confusion in V8 in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a… (CVSS 8.8, Google Chrome)
- [CVE-2026-125348](https://cve.now/CVE-2026-125348.md): Out of bounds write in GPU in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to potentially execute arbitrary code outside… (CVSS 8.8, Google Chrome)
- [CVE-2026-125343](https://cve.now/CVE-2026-125343.md): Buffer overflow in Compositing in Google Chrome prior to 157.0.8103.50 allowed a remote attacker who had compromised the renderer process… (CVSS 8.3, Google Chrome)
- [CVE-2026-125347](https://cve.now/CVE-2026-125347.md): Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.50 allowed a remote attacker leveraging social engineering to… (CVSS 9.6, Google Chrome)
- [CVE-2026-125345](https://cve.now/CVE-2026-125345.md): Uninitialized resource in WebGL in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to read memory outside the sandbox via a… (CVSS 4.7, Google Chrome)
- [CVE-2026-111729](https://cve.now/CVE-2026-111729.md): In Kura versions \<= 5.6.2, the "Command" file-upload handler at \`POST /admin/denali/file/command\` extracts a client-supplied ZIP archive… (CVSS 7.0, Eclipse Foundation Eclipse Kura)
- [CVE-2026-97401](https://cve.now/CVE-2026-97401.md): In Kura versions \<= 5.6.2, \`CommandCloudApp.execute()\` extracts a caller-supplied ZIP archive into a caller-supplied directory inside the… (CVSS 7.4, Eclipse Foundation Eclipse Kura)
- [CVE-2026-112186](https://cve.now/CVE-2026-112186.md): In Eclipse Kura versions 5.4.0 through 5.6.2, the Service Listing V1 REST API read the JSON body of every request into memory, with no… (CVSS 8.7, Eclipse Foundation Eclipse Kura)
- [CVE-2026-112185](https://cve.now/CVE-2026-112185.md): In Eclipse Kura versions 5.1.0 through 5.6.2, the Configuration REST API v2 (org.eclipse.kura.rest.configuration.provider) does not… (CVSS 8.6, Eclipse Foundation Eclipse Kura)
- [CVE-2026-126050](https://cve.now/CVE-2026-126050.md): apitrace 2.0 through 14.0 Heap Buffer Overflow via SnappyFile::flushReadCache() (CVSS 8.5, apitrace)
- [CVE-2026-126049](https://cve.now/CVE-2026-126049.md): Gwenhywfar 5.14.2 Use-After-Free via GWEN\_TLV\_Buffer\_To\_DB() Nested BER-TLV Parsing (CVSS 5.1, Martin Preuss Gwenhywfar)
- [CVE-2026-126048](https://cve.now/CVE-2026-126048.md): Gwenhywfar 4.99.8beta before 5.14.2 Stack Buffer Overflow via GWEN\_TLV\_Buffer\_To\_DB() (CVSS 5.1, Martin Preuss Gwenhywfar)
- [CVE-2026-125125](https://cve.now/CVE-2026-125125.md): compose-lint: A symlink in a pull request can issue workflow commands through the compose-lint Action's SARIF-directory error message (CVSS 2.3, tmatens compose-lint)
- [CVE-2026-97891](https://cve.now/CVE-2026-97891.md): In Eclipse Kura version 5.0.0 to 5.6.2, the Web Console allocates a new HTTP session for every request to its built-in authentication… (CVSS 8.8, Eclipse Foundation Eclipse Kura)
- [CVE-2026-125124](https://cve.now/CVE-2026-125124.md): compose-lint: Text in a pull request can reach Azure Pipelines as logging commands through compose-lint 0.31.0's output (CVSS 2.3, tmatens compose-lint)
- [CVE-2026-125123](https://cve.now/CVE-2026-125123.md): compose-lint: A file path in a pull request can issue CI workflow commands through compose-lint 0.31.0's command-line error messages (CVSS 2.3, tmatens compose-lint · compose-lint)
- [CVE-2026-125122](https://cve.now/CVE-2026-125122.md): compose-lint: Text in a pull request can issue CI workflow commands through compose-lint 0.31.0's JSON and SARIF output on stdout (CVSS 2.3, tmatens compose-lint · compose-lint)
- [CVE-2026-92684](https://cve.now/CVE-2026-92684.md): Aggregation queries can bypass authentication restrictions in @neo4j/graphql (CVSS 8.7, @neo4j/graphql)
- [CVE-2026-125121](https://cve.now/CVE-2026-125121.md): compose-lint: Text in a pull request can still issue CI workflow commands through compose-lint 0.31.0's output (CVSS 5.3, tmatens compose-lint · compose-lint)
- [CVE-2026-57907](https://cve.now/CVE-2026-57907.md): WatchGuard Endpoint Protection Local Privilege Escalation in Console-Service Communication Allows SYSTEM Code Execution (CVSS 8.5, WatchGuard Endpoint Security)
- [CVE-2026-126042](https://cve.now/CVE-2026-126042.md): VNote 3.11.0 before 4.12.0 OS Command Injection via Tasks Magic Variables (CVSS 7.3, vnotex VNote)
- [CVE-2026-63653](https://cve.now/CVE-2026-63653.md): Group-Office: SSRF via Bookmark/description JMAP action — server makes arbitrary HTTP(S) requests to user-controlled URL and reflects part… (CVSS 5.0, Intermesh groupoffice)
- [CVE-2026-63011](https://cve.now/CVE-2026-63011.md): GroupOffice Vulnerable to RCE in TemplateParser eval() via Contact/labels (CVSS 9.4, Intermesh groupoffice)
- [CVE-2026-63010](https://cve.now/CVE-2026-63010.md): Group-Office: Stored XSS via Manual Reminders (CVSS 8.7, Intermesh groupoffice)
- [CVE-2026-115791](https://cve.now/CVE-2026-115791.md): Prevent shadowing stdlib in gzip/tarfile/zipfile CLI during extraction (CVSS 5.3, Python Software Foundation CPython)
- [CVE-2026-125271](https://cve.now/CVE-2026-125271.md): AWS API MCP Server Security Policy Bypass via Incorrect Operation Name Normalization (CVSS 7.8, aws-api-mcp-server)
- [CVE-2026-57884](https://cve.now/CVE-2026-57884.md): Uncontrolled search path for some Intel(R) Graphics Software before version 26.14.2303.1 within Ring 3: User Applications may allow an… (CVSS 5.4, Intel(R) Graphics Software)
- [CVE-2026-82518](https://cve.now/CVE-2026-82518.md): Akamai CLI before 2.0.6 Path Traversal via cli.json Command Names (CVSS 7.1, Akamai CLI)
- [CVE-2026-56438](https://cve.now/CVE-2026-56438.md): Uncontrolled search path for the libva software for all versions within Ring 3: User Applications may allow an escalation of privilege. (CVSS 5.4, libva software)
- [CVE-2026-50177](https://cve.now/CVE-2026-50177.md): Deserialization of untrusted data for some Intel(R) Neural Compressor software before version 3.8 within Ring 3: User Applications may… (CVSS 4.8, Intel(R) Neural Compressor software)
- [CVE-2026-50109](https://cve.now/CVE-2026-50109.md): Out-of-bounds write for some Intel(R) Performance Counter Monitor (Intel(R) PCM) within Ring 3: User Applications may allow a denial of… (CVSS 8.3, Intel(R) Performance Counter Monitor (Intel(R) PCM))
- [CVE-2026-49028](https://cve.now/CVE-2026-49028.md): Deserialization of untrusted data for some Intel(R) Neural Compressor software before version 3.8 within Ring 3: User Applications may… (CVSS 4.8, Intel(R) Neural Compressor software)
- [CVE-2026-46632](https://cve.now/CVE-2026-46632.md): Uncontrolled search path for some Intel(R) Application Optimization User Interface within Ring 3: User Applications may allow an… (CVSS 5.4, Intel(R) Application Optimization User Interface)
- [CVE-2026-44627](https://cve.now/CVE-2026-44627.md): Integer overflow to buffer overflow for some Intel(R) oneAPI Deep Neural Network Library (oneDNN) software before version v2026.0.0 within… (CVSS 5.8, Intel(R) oneAPI Deep Neural Network Library (oneDNN) softwa…)
- [CVE-2026-42966](https://cve.now/CVE-2026-42966.md): Uncaught exception for some Intel(R) Neural Compressor software before version 3.8 within Ring 3: User Applications may allow an… (CVSS 4.8, Intel(R) Neural Compressor software)
- [CVE-2026-42917](https://cve.now/CVE-2026-42917.md): Deserialization of untrusted data for some Intel(R) Neural Compressor software before version 3.8 within Ring 3: User Applications may… (CVSS 4.8, Intel(R) Neural Compressor software)
- [CVE-2026-42067](https://cve.now/CVE-2026-42067.md): Improper certificate validation for some Intel(R) TDX Workload Attestation software within Ring 3: User Applications may allow an… (CVSS 5.9, Intel(R) TDX Workload Attestation software)
- [CVE-2026-41214](https://cve.now/CVE-2026-41214.md): Improper input validation for some Intel(R) Neural Compressor software before version 3.8 within Ring 3: User Applications may allow a… (CVSS 4.8, Intel(R) Neural Compressor software)
- [CVE-2026-40705](https://cve.now/CVE-2026-40705.md): Improper resource locking for the Intel(R) NPU Drivers before version 32.0.100.4778 within Ring 1: Device Drivers may allow a denial of… (CVSS 6.8, Intel(R) NPU Drivers)
- [CVE-2026-40704](https://cve.now/CVE-2026-40704.md): Protection mechanism failure for some Intel Neural Compressor software before version master within Ring 3: User Applications may allow an… (CVSS 5.4, Intel Neural Compressor software)
- [CVE-2026-102803](https://cve.now/CVE-2026-102803.md): Joomla Extension - j2commerce.com - Gift voucher and single-use coupon could pay for more than one order in J2Store 6.0.0 - 6.6.5 (CVSS 6.0, j2commerce.com J2Store extension for Joomla)
- [CVE-2026-40693](https://cve.now/CVE-2026-40693.md): Improper input validation for some Intel(R) TDX Workload Attestation software within Ring 3: User Applications may allow a denial of… (CVSS 5.7, Intel(R) TDX Workload Attestation software)
- [CVE-2026-40427](https://cve.now/CVE-2026-40427.md): Use after free for some Intel(R) QuickAssist Technology Driver for Windows within Ring 3: User Applications may allow a denial of service. (CVSS 6.9, Intel(R) QuickAssist Technology Driver for Windows)
- [CVE-2026-40426](https://cve.now/CVE-2026-40426.md): Integer underflow (wrap or wraparound) for the Intel(R) NPU Driver software before version 1.33.0 within Ring 3: User Applications may… (CVSS 5.8, Intel(R) NPU Driver software)
- [CVE-2026-40065](https://cve.now/CVE-2026-40065.md): Improper input validation for some Intel(R) Neural Compressor software before version v3.7 within Ring 3: User Applications may allow an… (CVSS 5.4, Intel(R) Neural Compressor software)
- [CVE-2026-39456](https://cve.now/CVE-2026-39456.md): Improper input validation for some Media Transcode Accelerator before version 1.0.0-00128 within Ring 3: User Applications may allow a… (CVSS 5.6, Media Transcode Accelerator)
- [CVE-2026-35683](https://cve.now/CVE-2026-35683.md): Out-of-bounds write for some Intel(R) Multi-Buffer Crypto for IPSec within Ring 3: User Applications may allow a denial of service. (CVSS 5.9, Intel(R) Multi-Buffer Crypto for IPSec)
- [CVE-2026-35060](https://cve.now/CVE-2026-35060.md): Missing authentication for critical function for some AI Playground software before version v3.1.1-beta within Ring 3: User Applications… (CVSS 2.0, AI Playground software)
- [CVE-2026-34016](https://cve.now/CVE-2026-34016.md): Time-of-check time-of-use race condition for the Intel(R) VTune(TM) Profiler software before version 2026.0.0 within Ring 1: Device… (CVSS 8.5, Intel(R) VTune(TM) Profiler software)
- [CVE-2026-33571](https://cve.now/CVE-2026-33571.md): Out-of-bounds read for the Intel(R) VTune(TM) Profiler software before version 2026.0.0 within Ring 1: Device Drivers may allow a denial… (CVSS 6.9, Intel(R) VTune(TM) Profiler software)
- [CVE-2026-33567](https://cve.now/CVE-2026-33567.md): Improper input validation for the Intel(R) VTune(TM) Profiler software within Ring 3: User Applications may allow an escalation of… (CVSS 5.4, Intel(R) VTune(TM) Profiler software)
- [CVE-2026-33563](https://cve.now/CVE-2026-33563.md): Exposure of sensitive information to an unauthorized actor for some Intel(R) Platform Monitoring Technology (Intel(R) PMT) software before… (CVSS 4.8, Intel(R) Platform Monitoring Technology (Intel(R) PMT) soft…)
- [CVE-2026-33279](https://cve.now/CVE-2026-33279.md): Out-of-bounds write for the Intel(R) VTune(TM) Profiler software before version 2026.0.0 within Ring 1: Device Drivers may allow a denial… (CVSS 6.9, Intel(R) VTune(TM) Profiler software)
- [CVE-2026-33270](https://cve.now/CVE-2026-33270.md): Improper input validation for some Intel(R) Graphics Software within Ring 3: User Applications may allow a denial of service. (CVSS 6.8, Intel(R) Graphics Software)
- [CVE-2026-33089](https://cve.now/CVE-2026-33089.md): Improper input validation for some Intel(R) CIP software within Ring 2: Privileged Process may allow a denial of service. (CVSS 6.8, Intel(R) CIP software)
- [CVE-2026-32672](https://cve.now/CVE-2026-32672.md): Null pointer dereference for the Intel(R) NPU Drivers before version 32.0.100.4778 within Ring 1: Device Drivers may allow a denial of… (CVSS 6.8, Intel(R) NPU Drivers)
- [CVE-2026-32670](https://cve.now/CVE-2026-32670.md): Time-of-check time-of-use race condition for the Intel(R) VTune(TM) Profiler software within Ring 1: Device Drivers may allow an… (CVSS 8.5, Intel(R) VTune(TM) Profiler software)
- [CVE-2026-32667](https://cve.now/CVE-2026-32667.md): Out-of-bounds write for the Intel(R) VTune(TM) Profiler software within Ring 1: Device Drivers may allow an escalation of privilege. (CVSS 8.5, Intel(R) VTune(TM) Profiler software)
- [CVE-2026-28765](https://cve.now/CVE-2026-28765.md): Improper input validation for the Intel(R) VTune(TM) Profiler software before version 2026.0.0 within Ring 1: Device Drivers may allow a… (CVSS 6.8, Intel(R) VTune(TM) Profiler software)
- [CVE-2026-28743](https://cve.now/CVE-2026-28743.md): Out-of-bounds write for the Intel(R) VTune(TM) Profiler software before version 2026.0.0 within Ring 1: Device Drivers may allow a denial… (CVSS 6.9, Intel(R) VTune(TM) Profiler software)
- [CVE-2026-28702](https://cve.now/CVE-2026-28702.md): Incorrect default permissions for the Intel(R) VTune(TM) Profiler software within Ring 3: User Applications may allow an escalation of… (CVSS 6.3, Intel(R) VTune(TM) Profiler software)
- [CVE-2026-26052](https://cve.now/CVE-2026-26052.md): Insecure inherited permissions for some Intel(R) Graphics Driver software installers within Ring 3: User Applications may allow an… (CVSS 5.4, Intel(R) Graphics Driver software installers)
- [CVE-2026-21407](https://cve.now/CVE-2026-21407.md): Deadlock for some Intel(R) Arc(TM) B-series graphics cards within Ring 1: Device Drivers may allow a denial of service. (CVSS 6.8, Intel(R) Arc(TM) B-series graphics cards)
- [CVE-2026-20880](https://cve.now/CVE-2026-20880.md): Incorrect default permissions for some Intel(R) Graphics Driver software installers within Ring 3: User Applications may allow an… (CVSS 5.4, Intel(R) Graphics Driver software installers)
- [CVE-2026-20798](https://cve.now/CVE-2026-20798.md): Uncontrolled search path for some Intel(R) Graphics Driver software installers within Ring 3: User Applications may allow an escalation of… (CVSS 5.4, Intel(R) Graphics Driver software installers)
- [CVE-2026-20756](https://cve.now/CVE-2026-20756.md): Incorrect default permissions for some Intel(R) Graphics Driver software installers within Ring 3: User Applications may allow an… (CVSS 5.4, Intel(R) Graphics Driver software installers)
- [CVE-2026-63651](https://cve.now/CVE-2026-63651.md): LiveDocs: fetch\_docs/introspect fetch client-supplied URLs with no host allowlist and follow redirects (CVSS 8.7, PsychQuant livedocs)
- [CVE-2026-66335](https://cve.now/CVE-2026-66335.md): Heap Overflow in SmiVariable SMM Handler (CVSS 6.8, AMI AptioV)
- [CVE-2026-66334](https://cve.now/CVE-2026-66334.md): OFBD SMM Write Validation Issues (CVSS 6.8, AMI AptioV)
- [CVE-2026-66333](https://cve.now/CVE-2026-66333.md): OFBD SMM Read Validation Issues (CVSS 4.8, AMI AptioV)
- [CVE-2026-66332](https://cve.now/CVE-2026-66332.md): OOB-Read in FmpCapsuleUpdate (CVSS 4.6, AMI AptioV)
- [CVE-2026-61547](https://cve.now/CVE-2026-61547.md): rabbitmq-c: Heap Buffer Overflow in amqp\_send\_frame() When Serializing Oversized AMQP\_FRAME\_BODY (CVSS 9.8, alanxz rabbitmq-c)
- [CVE-2026-59986](https://cve.now/CVE-2026-59986.md): rabbitmq-c: amqp\_decode\_bytes size\_t integer overflow bypasses bounds check on 32-bit (OOB read) (CVSS 7.4, alanxz rabbitmq-c)
- [CVE-2026-124251](https://cve.now/CVE-2026-124251.md): WordPress WPIDE – File Manager & Code Editor plugin \<= 3.6.4 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8, XplodedThemes WPIDE – File Manager & Code Editor)
- [CVE-2026-83528](https://cve.now/CVE-2026-83528.md): Exposure of PII in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with admin… (CVSS 4.9, Ivanti Endpoint Manager Mobile)
- [CVE-2026-123180](https://cve.now/CVE-2026-123180.md): Missing Authentication Vulnerability in NETGEAR Nighthawk RAX30 models (CVSS 6.3, NETGEAR RAX30)
- [CVE-2026-123178](https://cve.now/CVE-2026-123178.md): Insufficient Input Validation Vulnerability in NETGEAR Orbi RBR350 (CVSS 4.3, NETGEAR RBR350 · NETGEAR RBS350)
- [CVE-2026-107405](https://cve.now/CVE-2026-107405.md): An exposed dangerous function in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a local authenticated attacker to… (CVSS 5.5, Ivanti Endpoint Manager Mobile)
- [CVE-2026-107404](https://cve.now/CVE-2026-107404.md): Argument injection in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with admin… (CVSS 4.9, Ivanti Endpoint Manager Mobile)
- [CVE-2026-105427](https://cve.now/CVE-2026-105427.md): Improper input validation in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with… (CVSS 4.9, Ivanti Endpoint Manager Mobile)
- [CVE-2026-97402](https://cve.now/CVE-2026-97402.md): In Eclipse Kura versions 3.1.0 to 5.6.2, the iBeacon and Eddystone advertisement decoders wrongly parse the AD-structure length field of… (CVSS 2.3, Eclipse Foundation Eclipse Kura)
- [CVE-2026-105426](https://cve.now/CVE-2026-105426.md): Improper input validation in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with… (CVSS 6.7, Ivanti Endpoint Manager Mobile)
- [CVE-2026-123181](https://cve.now/CVE-2026-123181.md): A path traversal vulnerability in Ivanti Sentry before versions 11.0, 10.8.3, and 10.7.4 allows a remote authenticated attacker with… (CVSS 5.5, Ivanti Sentry)
- [CVE-2026-123179](https://cve.now/CVE-2026-123179.md): An insecure default initialization of resource in the Tomcat shutdown listener of Ivanti Sentry before versions 11.0, 10.8.3, and 10.7.4… (CVSS 5.5, Ivanti Sentry)
- [CVE-2026-124038](https://cve.now/CVE-2026-124038.md): Uncontrolled XML entity expansion in the Flock Installer app for Android (CVSS 1.0, Flock Installer app)
- [CVE-2026-105669](https://cve.now/CVE-2026-105669.md): Argument injection in Ivanti Sentry before version 11.0, 10.8.3, and 10.7.4 allows a remote authenticated attacker with admin privileges… (CVSS 6.7, Ivanti Sentry)
- [CVE-2026-124037](https://cve.now/CVE-2026-124037.md): Information exposure in Flock Safety Platform public access-list sign-up (CVSS 8.2, Flock Safety Platform)
- [CVE-2026-105425](https://cve.now/CVE-2026-105425.md): OS command injection in Ivanti Sentry before versions 11.0.0, 10.8.3, and 10.7.4 as well as in Ivanti EPMM before versions 12.11.0.0… (CVSS 7.2, Ivanti Sentry · Ivanti Endpoint Manager Mobile)
- [CVE-2026-124036](https://cve.now/CVE-2026-124036.md): Cross-organization access to saved-search alerts in FlockOS (CVSS 7.6, FlockOS)
- [CVE-2026-112191](https://cve.now/CVE-2026-112191.md): In Eclipse Kura versions 5.4.0 through 5.6.2, the Identity REST APIs (identity/v1, and identity/v2 since 5.5.0, provided by… (CVSS 8.6, Eclipse Foundation Eclipse Kura)
- [CVE-2026-86336](https://cve.now/CVE-2026-86336.md): Apache TomEE: EJB method authorization is silently skipped on JDK 21+ (no CVSS, Apache Software Foundation org.apache.tomee:openejb-core)
- [CVE-2026-86531](https://cve.now/CVE-2026-86531.md): Apache TomEE: DoS via unbounded request body and multipart handling in embedded HTTP server (no CVSS, Apache Software Foundation org.apache.openejb:openejb-http…)
- [CVE-2026-87758](https://cve.now/CVE-2026-87758.md): Apache TomEE: Missing TLS hostname verification in ejbds client connections (no CVSS, Apache Software Foundation org.apache.openejb:openejb-clien…)
- [CVE-2026-97849](https://cve.now/CVE-2026-97849.md): Apache TomEE: Derby network service listens on all interfaces (no CVSS, Apache Software Foundation org.apache.openejb:openejb-derby…)
- [CVE-2026-97867](https://cve.now/CVE-2026-97867.md): Apache TomEE: Database credential disclosure via remote JNDI lookup (no CVSS, Apache Software Foundation org.apache.openejb:openejb-ejbd…)
- [CVE-2026-108187](https://cve.now/CVE-2026-108187.md): Origin Validation Error in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network… (CVSS 8.1, Zoom Communications Zoom Workplace)
- [CVE-2026-97870](https://cve.now/CVE-2026-97870.md): Apache TomEE: Missing authentication for Hessian endpoints in embedded HTTP server (no CVSS, Apache Software Foundation org.apache.openejb:openejb-hessi…)
- [CVE-2026-97872](https://cve.now/CVE-2026-97872.md): Apache TomEE: Authentication bypass of Hessian EJB endpoints due to ignored security settings (no CVSS, Apache Software Foundation org.apache.openejb:openejb-hessi…)
- [CVE-2026-97874](https://cve.now/CVE-2026-97874.md): Apache TomEE: Authentication bypass for Hessian endpoints in non-root web applications (no CVSS, Apache Software Foundation org.apache.openejb:openejb-hessi…)
- [CVE-2026-121683](https://cve.now/CVE-2026-121683.md): Missing authentication in Ivanti Cloud Services Application version 5.0.8 allows a remote unauthenticated attacker to add and delete… (CVSS 9.4, Ivanti Cloud Services Application)
- [CVE-2026-97880](https://cve.now/CVE-2026-97880.md): Apache TomEE: Authentication bypass in the embedded HTTP server for endpoints protected by HTTP Basic authentication (no CVSS, Apache Software Foundation org.apache.openejb:openejb-http…)
- [CVE-2026-97881](https://cve.now/CVE-2026-97881.md): Apache TomEE: Path traversal in embedded HTTP server static resource handling (no CVSS, Apache Software Foundation org.apache.tomee:openejb-http)
- [CVE-2026-108186](https://cve.now/CVE-2026-108186.md): Improper Input Validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via… (CVSS 9.6, Zoom Communications Zoom Workplace)
- [CVE-2026-97888](https://cve.now/CVE-2026-97888.md): Apache TomEE: Caller identity leaks across requests in embedded HTTP server (no CVSS, Apache Software Foundation org.apache.tomee:openejb-http)
- [CVE-2026-97890](https://cve.now/CVE-2026-97890.md): Apache TomEE: Session fixation in embedded HTTP server (low (no CVSS), Apache Software Foundation org.apache.tomee:openejb-http)
- [CVE-2026-111239](https://cve.now/CVE-2026-111239.md): Apache TomEE: Code execution by any authenticated user via the SSH administration shell (no CVSS, Apache Software Foundation org.apache.openejb:openejb-ss… +2)
- [CVE-2026-111240](https://cve.now/CVE-2026-111240.md): Apache TomEE: Authentication bypass for accounts without a stored password in SQL login module (no CVSS, Apache Software Foundation org.apache.openejb:openejb-core…)
- [CVE-2026-18128](https://cve.now/CVE-2026-18128.md): Cleartext transmission of sensitive information in the Agent of Ivanti Endpoint Manager before version 2024 SU8 allows a remote… (CVSS 6.8, ivanti Endpoint Manager)
- [CVE-2026-111241](https://cve.now/CVE-2026-111241.md): Apache TomEE: Local code execution via predictable passivation files in the shared temporary directory (no CVSS, Apache Software Foundation org.apache.openejb:openejb-core…)
- [CVE-2026-11315](https://cve.now/CVE-2026-11315.md): A out-of-bounds read vulnerability exists in the dr\_mp3 drmp3\_init\_internal functionality of dr\_libs (version(s): 0.7.3). (CVSS 4.3, mackron dr\_libs)
- [CVE-2026-11316](https://cve.now/CVE-2026-11316.md): A out-of-bounds write vulnerability exists in the dr\_wav drwav\_\_read\_cue\_to\_metadata\_obj functionality of dr\_libs (version(s): 0.14.5). (CVSS 8.8, mackron dr\_libs)
- [CVE-2026-111242](https://cve.now/CVE-2026-111242.md): Apache TomEE: Privilege escalation via leaked MicroProfile JWT run-as identity (no CVSS, Apache Software Foundation org.apache.tomee:mp-jwt)
- [CVE-2026-111243](https://cve.now/CVE-2026-111243.md): Apache TomEE: Expired MicroProfile JWT tokens accepted with negative clock skew (low (no CVSS), Apache Software Foundation org.apache.tomee:mp-jwt)
- [CVE-2026-121653](https://cve.now/CVE-2026-121653.md): SQL injection in the Core of Ivanti Endpoint Manager before version 2024 SU8 allows a remote unauthenticated attacker to achieve remote… (CVSS 9.8, ivanti Endpoint Manager)
- [CVE-2026-111244](https://cve.now/CVE-2026-111244.md): Apache TomEE: Authorization bypass in MicroProfile JWT role checks for JAX-RS resources (no CVSS, Apache Software Foundation org.apache.tomee:mp-jwt)
- [CVE-2026-105813](https://cve.now/CVE-2026-105813.md): Cleartext storage of sensitive information in Ivanti UWM before version 2026.4 allows a local authenticated attacker to retrieve another… (CVSS 6.3, Ivanti User Workspace Manager)
- [CVE-2026-111245](https://cve.now/CVE-2026-111245.md): Apache TomEE: Privilege escalation via WS-Security caller identity leaking between requests (no CVSS, Apache Software Foundation org.apache.openejb:openejb-cxf ·…)
- [CVE-2026-111246](https://cve.now/CVE-2026-111246.md): Apache TomEE: HTTP sessions shared across web applications in embedded HTTP server (low (no CVSS), Apache Software Foundation org.apache.openejb:openejb-http…)
- [CVE-2026-111247](https://cve.now/CVE-2026-111247.md): Apache TomEE: Privilege escalation via user name matching a role name (no CVSS, Apache Software Foundation org.apache.tomee:tomee-catalina)
- [CVE-2026-125759](https://cve.now/CVE-2026-125759.md): Nango before 0.71.3 SQL Injection via Orchestrator Task Group Key (CVSS 7.7, NangoHQ nango)
- [CVE-2026-125758](https://cve.now/CVE-2026-125758.md): Aptabase before commit 61d4c01 Authentication Bypass via Known Example AUTH\_SECRET (CVSS 9.1, aptabase)
- [CVE-2026-125757](https://cve.now/CVE-2026-125757.md): mailcow: dockerized before 2026-11 Template Injection RCE via Domain-Wide Footer (CVSS 9.4, mailcow: dockerized)
- [CVE-2026-125756](https://cve.now/CVE-2026-125756.md): postal-mime before 4.2.1 Sender Spoofing via Address Parser Domain Truncation (CVSS 8.2, postalsys postal-mime)
- [CVE-2026-125755](https://cve.now/CVE-2026-125755.md): Nodemailer 3.0.0 before 10.4.1 Recipient Allow-List Bypass via addressparser (CVSS 8.3, nodemailer)
- [CVE-2026-125754](https://cve.now/CVE-2026-125754.md): Dolibarr 20.0.0 through 23.0.4 and 24.x before 24.0.2 IDOR via ExpenseReport Payment API (CVSS 7.1, dolibarr)
- [CVE-2026-125753](https://cve.now/CVE-2026-125753.md): ABP Framework before 10.6.2 and 10.7.0 Path Traversal via Blogging File Endpoints (CVSS 8.2, abpframework abp)
- [CVE-2026-111248](https://cve.now/CVE-2026-111248.md): Apache TomEE: Authentication with the stored password digest in Tomcat user identity store (low (no CVSS), Apache Software Foundation org.apache.tomee:tomee-security)
- [CVE-2026-125752](https://cve.now/CVE-2026-125752.md): Meteroid before 2.2.0 Cross-Tenant Authorization Bypass via UpdateCouponStatus (CVSS 2.3, meteroid-oss Meteroid)
- [CVE-2026-125751](https://cve.now/CVE-2026-125751.md): Meteroid before 2.2.0 Cross-Tenant API Token Hash Disclosure via GetApiTokenById (CVSS 2.3, meteroid-oss Meteroid)
- [CVE-2026-125750](https://cve.now/CVE-2026-125750.md): Firekylin through 2.18.1 Improper Authorization via Admin REST API GET Actions (CVSS 7.1, Firekylin)
- [CVE-2026-125749](https://cve.now/CVE-2026-125749.md): TaxHacker through 0.8.5 IDOR via Settings Server Actions userId (CVSS 2.3, vas3k TaxHacker)
- [CVE-2026-125748](https://cve.now/CVE-2026-125748.md): Parabol before 15.21.2 Missing Authorization via addReactjiToReactable Mutation (CVSS 5.3, Parabol)
- [CVE-2026-125747](https://cve.now/CVE-2026-125747.md): ZenTao PMS through 22.7 IDOR via Build Module Mutation Methods (CVSS 5.3, easysoft zentaopms)
- [CVE-2026-111249](https://cve.now/CVE-2026-111249.md): Apache TomEE: Unauthenticated LiveReload endpoint reachable from the network (low (no CVSS), Apache Software Foundation org.apache.tomee:livereload-tomee)
- [CVE-2026-111250](https://cve.now/CVE-2026-111250.md): Apache TomEE: Authentication bypass via programmatic authentication in embedded HTTP server (no CVSS, Apache Software Foundation org.apache.openejb:openejb-http…)
- [CVE-2026-111251](https://cve.now/CVE-2026-111251.md): Apache TomEE: Unauthenticated server shutdown via the admin port (no CVSS, Apache Software Foundation org.apache.openejb:openejb-serve…)
- [CVE-2026-111256](https://cve.now/CVE-2026-111256.md): Apache TomEE: Missing authentication for web service endpoints in embedded HTTP server (no CVSS, Apache Software Foundation org.apache.openejb:openejb-we… +2)
- [CVE-2026-111257](https://cve.now/CVE-2026-111257.md): Apache TomEE: Well-known administrative credentials created at startup (no CVSS, Apache Software Foundation org.apache.openejb:tomee-catalin…)
- [CVE-2026-111258](https://cve.now/CVE-2026-111258.md): Apache TomEE: Security constraint bypass via request routing (no CVSS, Apache Software Foundation org.apache.openejb:tomee-catalin…)
- [CVE-2026-111259](https://cve.now/CVE-2026-111259.md): Apache TomEE: Predictable HTTP session identifiers in embedded server (no CVSS, Apache Software Foundation org.apache.tomee:tomee-embedded)
- [CVE-2026-111260](https://cve.now/CVE-2026-111260.md): Apache TomEE: Predictable OpenID Connect state and nonce values (low (no CVSS), Apache Software Foundation org.apache.tomee:tomee-security)
- [CVE-2026-111261](https://cve.now/CVE-2026-111261.md): Apache TomEE: Authentication bypass with empty password in LDAP identity store (no CVSS, Apache Software Foundation org.apache.tomee:tomee-security)
- [CVE-2026-111262](https://cve.now/CVE-2026-111262.md): Apache TomEE: LDAP injection in LDAP identity store (no CVSS, Apache Software Foundation org.apache.tomee:tomee-security)
- [CVE-2026-111263](https://cve.now/CVE-2026-111263.md): Apache TomEE: Missing authentication on EJB web service endpoints deployed in a web application (no CVSS, Apache Software Foundation org.apache.openejb:tomee-webserv…)
- [CVE-2026-111264](https://cve.now/CVE-2026-111264.md): Apache TomEE: Authentication bypass on EJB web service endpoints via HTTP method (no CVSS, Apache Software Foundation org.apache.openejb:tomee-webserv…)
- [CVE-2026-87756](https://cve.now/CVE-2026-87756.md): Apache TomEE: Missing authorization on internal deployer EJBs in default profile (no CVSS, Apache Software Foundation org.apache.openejb:openejb-core…)
- [CVE-2026-87755](https://cve.now/CVE-2026-87755.md): Apache TomEE: Stateful session bean hijacking via predictable session identifiers (no CVSS, Apache Software Foundation org.apache.openejb:openejb-core…)
- [CVE-2026-86811](https://cve.now/CVE-2026-86811.md): Apache TomEE: Path traversal via stateful EJB passivation (no CVSS, Apache Software Foundation org.apache.openejb:openejb-core…)
- [CVE-2026-86532](https://cve.now/CVE-2026-86532.md): Apache TomEE: Username enumeration and timing side channel in JAAS login modules (low (no CVSS), Apache Software Foundation org.apache.openejb:openejb-core…)
- [CVE-2026-123082](https://cve.now/CVE-2026-123082.md): Docker Desktop logs can expose the Docker Hub access token (CVSS 5.7, Docker Desktop)
- [CVE-2026-113422](https://cve.now/CVE-2026-113422.md): In Eclipse Kura versions 5.0.0 through 5.6.2, the Wire Graph update functionality of the Kura Web UI, and the Wire Service REST API v1… (CVSS 7.7, Eclipse Foundation Eclipse Kura)
- [CVE-2026-121885](https://cve.now/CVE-2026-121885.md): Podman: untrusted image labels allow auto-update to restart arbitrary systemd units (CVSS 6.5, Red Hat Enterprise Linux · Red Hat Hardened Images +1)
- [CVE-2026-114359](https://cve.now/CVE-2026-114359.md): Eclipse Kura downloads deployment packages (DPs) from a remote URL without any limit on the size of the data it receives. (CVSS 7.0, Eclipse Foundation Eclipse Kura)
- [CVE-2026-120399](https://cve.now/CVE-2026-120399.md): Flightctl-api: flightctl-remote-access: flightctl: unbounded tls handshake in conncontext can block accepting connections (CVSS 7.5, Red Hat Edge Manager)
- [CVE-2026-124952](https://cve.now/CVE-2026-124952.md): Use-after-free in the Audio/Video component (CVSS 8.8, Mozilla Firefox)
- [CVE-2026-124950](https://cve.now/CVE-2026-124950.md): Same-origin policy bypass in the CSS Parsing and Computation component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124949](https://cve.now/CVE-2026-124949.md): Other issue in the SVG component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124947](https://cve.now/CVE-2026-124947.md): Incorrect boundary conditions in the Graphics component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124946](https://cve.now/CVE-2026-124946.md): Invalid pointer in the JavaScript Engine: JIT component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124945](https://cve.now/CVE-2026-124945.md): Invalid pointer in the Layout: Text and Fonts component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124944](https://cve.now/CVE-2026-124944.md): Information disclosure in the Marionette component (CVSS 4.3, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124943](https://cve.now/CVE-2026-124943.md): Use-after-free in the Layout component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124937](https://cve.now/CVE-2026-124937.md): Other issue in the Media component in Firefox for Android (no CVSS, Mozilla Firefox)
- [CVE-2026-124936](https://cve.now/CVE-2026-124936.md): Spoofing issue in the Address Bar component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124928](https://cve.now/CVE-2026-124928.md): Mitigation bypass in the SVG component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124925](https://cve.now/CVE-2026-124925.md): Information disclosure in the Layout component (CVSS 4.3, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124923](https://cve.now/CVE-2026-124923.md): Sandbox escape in the Agent component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124921](https://cve.now/CVE-2026-124921.md): Sandbox escape in the Graphics: WebGPU component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124920](https://cve.now/CVE-2026-124920.md): Uninitialized memory in the Graphics: WebGPU component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124911](https://cve.now/CVE-2026-124911.md): Clickjacking issue in the Autofill component in Firefox for Android (no CVSS, Mozilla Firefox)
- [CVE-2026-124908](https://cve.now/CVE-2026-124908.md): Use-after-free in the CSS Parsing and Computation component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124904](https://cve.now/CVE-2026-124904.md): Use-after-free in the SVG component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124900](https://cve.now/CVE-2026-124900.md): Sandbox escape due to use-after-free in the DOM: Service Workers component (CVSS 9.6, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124878](https://cve.now/CVE-2026-124878.md): Use-after-free in the Layout: Positioned component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124871](https://cve.now/CVE-2026-124871.md): Use-after-free in the DOM: HTML Parser component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124867](https://cve.now/CVE-2026-124867.md): Use-after-free in the DOM: Editor component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124852](https://cve.now/CVE-2026-124852.md): Incorrect boundary conditions in the Graphics: CanvasWebGL component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124951](https://cve.now/CVE-2026-124951.md): Privilege escalation in the Nimbus Desktop Client component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124948](https://cve.now/CVE-2026-124948.md): Incorrect boundary conditions, use-after-free in the Graphics component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124942](https://cve.now/CVE-2026-124942.md): Invalid pointer in the DOM: Streams component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124941](https://cve.now/CVE-2026-124941.md): Information disclosure in the Security: RLBox component (CVSS 4.3, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124940](https://cve.now/CVE-2026-124940.md): Mitigation bypass in the File Handling component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124939](https://cve.now/CVE-2026-124939.md): JIT miscompilation in the JavaScript Engine: JIT component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124938](https://cve.now/CVE-2026-124938.md): Mitigation bypass in the Add-ons Manager component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124935](https://cve.now/CVE-2026-124935.md): Undefined behavior in the WebRTC: Networking component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124934](https://cve.now/CVE-2026-124934.md): Spoofing issue in the Security component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124933](https://cve.now/CVE-2026-124933.md): Sandbox escape in the Console component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124932](https://cve.now/CVE-2026-124932.md): Use-after-free in the Graphics component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124931](https://cve.now/CVE-2026-124931.md): Same-origin policy bypass in the DOM: Core & HTML component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124930](https://cve.now/CVE-2026-124930.md): Information disclosure in the Address Bar component (CVSS 4.3, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124929](https://cve.now/CVE-2026-124929.md): Information disclosure in the Layout: Form Controls component (CVSS 4.3, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124927](https://cve.now/CVE-2026-124927.md): Site isolation issue in the Graphics: WebRender component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124926](https://cve.now/CVE-2026-124926.md): Incorrect boundary conditions in the WebRTC component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124924](https://cve.now/CVE-2026-124924.md): Incorrect boundary conditions in the Graphics: WebRender component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124922](https://cve.now/CVE-2026-124922.md): Use-after-free in the CSS Transitions and Animations component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124919](https://cve.now/CVE-2026-124919.md): Privilege escalation due to use-after-free in the WebRTC: Networking component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124918](https://cve.now/CVE-2026-124918.md): Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124917](https://cve.now/CVE-2026-124917.md): Sandbox escape due to use-after-free in the Widget: Gtk component (CVSS 9.6, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124915](https://cve.now/CVE-2026-124915.md): Incorrect boundary conditions in the Graphics: WebGPU component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124914](https://cve.now/CVE-2026-124914.md): Site isolation issue in the DOM: Navigation component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124913](https://cve.now/CVE-2026-124913.md): Site isolation issue in the Networking component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124912](https://cve.now/CVE-2026-124912.md): Spoofing issue in the DOM: Security component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124910](https://cve.now/CVE-2026-124910.md): Mitigation bypass in the WebExtensions component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124909](https://cve.now/CVE-2026-124909.md): Information disclosure in the Private Browsing component (CVSS 4.3, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124907](https://cve.now/CVE-2026-124907.md): Privilege escalation, sandbox escape due to use-after-free in the Graphics: CanvasWebGL component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124906](https://cve.now/CVE-2026-124906.md): Use-after-free in the Graphics: WebRender component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124905](https://cve.now/CVE-2026-124905.md): Sandbox escape in the DOM: Navigation component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124903](https://cve.now/CVE-2026-124903.md): Sandbox escape due to use-after-free in the IPC component (CVSS 9.6, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124902](https://cve.now/CVE-2026-124902.md): Same-origin policy bypass due to race condition in the Audio/Video component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124901](https://cve.now/CVE-2026-124901.md): Other issue in the Networking: JAR component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124899](https://cve.now/CVE-2026-124899.md): Use-after-free in the Layout: Text and Fonts component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124898](https://cve.now/CVE-2026-124898.md): Use-after-free in the DOM: Editor component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124897](https://cve.now/CVE-2026-124897.md): Use-after-free in the JavaScript: GC component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124896](https://cve.now/CVE-2026-124896.md): Invalid pointer in the Layout: Text and Fonts component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124895](https://cve.now/CVE-2026-124895.md): Use-after-free in the Storage: localStorage & sessionStorage component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124894](https://cve.now/CVE-2026-124894.md): Use-after-free in the Networking: Cookies component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124893](https://cve.now/CVE-2026-124893.md): Use-after-free in the DOM: Workers component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124892](https://cve.now/CVE-2026-124892.md): Use-after-free in the JavaScript: GC component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124891](https://cve.now/CVE-2026-124891.md): Incorrect boundary conditions in the DOM: Selection component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124890](https://cve.now/CVE-2026-124890.md): Use-after-free in the DOM: Core & HTML component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124889](https://cve.now/CVE-2026-124889.md): Use-after-free in the CSS Parsing and Computation component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124888](https://cve.now/CVE-2026-124888.md): Incorrect boundary conditions in the Layout: Text and Fonts component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124887](https://cve.now/CVE-2026-124887.md): Incorrect boundary conditions in the Layout: Text and Fonts component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124886](https://cve.now/CVE-2026-124886.md): Invalid pointer in the Layout: Text and Fonts component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124885](https://cve.now/CVE-2026-124885.md): Use-after-free in the Graphics: Text component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124884](https://cve.now/CVE-2026-124884.md): Use-after-free in the JavaScript: GC component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124883](https://cve.now/CVE-2026-124883.md): Use-after-free in the DOM: Core & HTML component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124882](https://cve.now/CVE-2026-124882.md): Use-after-free in the CSS Parsing and Computation component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124881](https://cve.now/CVE-2026-124881.md): Use-after-free in the CSS Parsing and Computation component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124880](https://cve.now/CVE-2026-124880.md): Use-after-free in the DOM: Core & HTML component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124879](https://cve.now/CVE-2026-124879.md): Invalid pointer in the Networking: Cache component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124877](https://cve.now/CVE-2026-124877.md): Use-after-free in the Layout: Positioned component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124876](https://cve.now/CVE-2026-124876.md): Use-after-free in the CSS Parsing and Computation component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124875](https://cve.now/CVE-2026-124875.md): Incorrect boundary conditions in the DOM: CSS Object Model component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124874](https://cve.now/CVE-2026-124874.md): Same-origin policy bypass in the Networking: HTTP component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124873](https://cve.now/CVE-2026-124873.md): Invalid pointer in the DOM: Editor component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124872](https://cve.now/CVE-2026-124872.md): Use-after-free in the Cycle Collector component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124870](https://cve.now/CVE-2026-124870.md): Incorrect boundary conditions in the JavaScript: GC component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124869](https://cve.now/CVE-2026-124869.md): Use-after-free in the DOM: Core & HTML component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124868](https://cve.now/CVE-2026-124868.md): Incorrect boundary conditions in the DOM: Core & HTML component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124866](https://cve.now/CVE-2026-124866.md): Use-after-free in the Layout component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124865](https://cve.now/CVE-2026-124865.md): Use-after-free in the Audio/Video component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124864](https://cve.now/CVE-2026-124864.md): Sandbox escape due to use-after-free in the DOM: Service Workers component (CVSS 9.6, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124863](https://cve.now/CVE-2026-124863.md): Use-after-free in the DOM: HTML Parser component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124862](https://cve.now/CVE-2026-124862.md): Use-after-free in the DOM: Core & HTML component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124861](https://cve.now/CVE-2026-124861.md): Sandbox escape due to use-after-free in the Audio/Video: cubeb component (CVSS 9.6, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124860](https://cve.now/CVE-2026-124860.md): Use-after-free in the Audio/Video component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124859](https://cve.now/CVE-2026-124859.md): Sandbox escape due to incorrect boundary conditions in the Storage: Cache API component (CVSS 9.6, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124858](https://cve.now/CVE-2026-124858.md): Use-after-free in the DOM: HTML Parser component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124857](https://cve.now/CVE-2026-124857.md): Use-after-free in the Graphics: Canvas2D component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124856](https://cve.now/CVE-2026-124856.md): Incorrect boundary conditions in the Networking: HTTP component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124855](https://cve.now/CVE-2026-124855.md): Sandbox escape in the DOM: Navigation component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124854](https://cve.now/CVE-2026-124854.md): Privilege escalation in the DOM: Navigation component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-124853](https://cve.now/CVE-2026-124853.md): Sandbox escape due to incorrect boundary conditions in the Graphics: Text component (CVSS 9.6, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-82509](https://cve.now/CVE-2026-82509.md): V Programming Language net.http TLS Certificate Validation Bypass (CVSS 9.1, vlang v)
- [CVE-2026-12708](https://cve.now/CVE-2026-12708.md): Unbounded HTTP/3 Datagram flow map growth in tokio-quiche (CVSS 8.7, Cloudflare tokio-quiche)
- [CVE-2026-124747](https://cve.now/CVE-2026-124747.md): Busybox: heap buffer overflow in wget ftp resume when the resume offset exceeds the reported file size (CVSS 7.5, Red Hat Enterprise Linux · Red Hat Hardened Images)
- [CVE-2026-125744](https://cve.now/CVE-2026-125744.md): Missing permission check in ticket layout API (CVSS 1.2, pretix)
- [CVE-2026-100962](https://cve.now/CVE-2026-100962.md): NVIDIA NeMo Export-Deploy for all platforms contains a vulnerability in multimodal deployment where an attacker could cause a server-side… (CVSS 5.3, NVIDIA Nemo Deploy)
- [CVE-2026-125871](https://cve.now/CVE-2026-125871.md): MISP sourcecache module SSRF allows fetching arbitrary internal URLs via attribute enrichment (CVSS 6.3, misp-modules)
- [CVE-2026-16478](https://cve.now/CVE-2026-16478.md): Arbitrary Package Installation in TÜBİTAK BİLGEM's pardus-nvidia-installer (CVSS 7.0, TÜBİTAK BİLGEM Software Technologies Research Institute par…)
- [CVE-2026-125745](https://cve.now/CVE-2026-125745.md): WCK before 2.4.1 Missing Authorization via wck\_show\_update\_form AJAX (CVSS 2.3, madalinungureanu Custom Post Types and Custom Fields creato…)
- [CVE-2026-121267](https://cve.now/CVE-2026-121267.md): Incorrect Default Permissions Vulnerability in TÜBİTAK BİLGEM's eta-remote (CVSS 7.8, TÜBİTAK BİLGEM Software Technologies Research Institute eta…)
- [CVE-2026-125742](https://cve.now/CVE-2026-125742.md): 7-Zip before 26.06 Heap Out-of-Bounds Write via LZX Decoder in CAB Extraction (CVSS 8.5, 7-Zip)
- [CVE-2026-101275](https://cve.now/CVE-2026-101275.md): Insufficient validation of payment status in pretix-adyen (CVSS 6.3, pretix-adyen)
- [CVE-2026-121191](https://cve.now/CVE-2026-121191.md): Improper Access Control Vulnerability in TÜBİTAK BİLGEM's eta-remote (CVSS 6.5, TÜBİTAK BİLGEM Software Technologies Research Institute eta…)
- [CVE-2026-120350](https://cve.now/CVE-2026-120350.md): Stored Cross-Site Scripting in the Vaadin Rich Text Editor via an Unescaped Video Embed (CVSS 5.1, com.vaadin:vaadin · com.vaadin:vaadin-core +3)
- [CVE-2026-120326](https://cve.now/CVE-2026-120326.md): Unescaped Download File Name Allows Content-Disposition Parameter Injection in Vaadin Flow (CVSS 4.8, com.vaadin:vaadin · com.vaadin:vaadin-core +1)
- [CVE-2026-12266](https://cve.now/CVE-2026-12266.md): Authenticated Broken Access Control (CVSS 7.6, Zohocorp DDI Central)
- [CVE-2026-112137](https://cve.now/CVE-2026-112137.md): A vulnerability has been identified in Mendix Studio Pro 11 (All versions \>= V11.15.0 \< V11.16.0), Mendix Studio Pro 11.12 (All versions… (CVSS 5.4, Siemens Mendix Studio Pro)
- [CVE-2026-112136](https://cve.now/CVE-2026-112136.md): A vulnerability has been identified in Mendix Studio Pro 11 (All versions \>= V11.15.0 \< V11.16.0), Mendix Studio Pro 11.12 (All versions… (CVSS 8.8, Siemens Mendix Studio Pro)
- [CVE-2026-109830](https://cve.now/CVE-2026-109830.md): A vulnerability has been identified in meta-iot2050 (All versions \>= V01.03.01). (CVSS 7.3, Siemens meta-iot2050)
- [CVE-2026-109097](https://cve.now/CVE-2026-109097.md): A vulnerability has been identified in ROS# (All versions \< V2.3.1). (CVSS 8.2, Siemens ROS#)
- [CVE-2026-59082](https://cve.now/CVE-2026-59082.md): A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions), SIMATIC WinCC V8.1 (All… (CVSS 7.8, Siemens SIMATIC WinCC)
- [CVE-2026-58114](https://cve.now/CVE-2026-58114.md): A vulnerability has been identified in SIMATIC BATCH V9.1 (All versions), SIMATIC Information Server 2020 (All versions), SIMATIC… (CVSS 7.5, Siemens SIMATIC BATCH · Siemens SIMATIC Information Serv… +4)
- [CVE-2026-12574](https://cve.now/CVE-2026-12574.md): Server-Side HTML Injection (CVSS 8.1, Zohocorp DDI Central)
- [CVE-2026-125709](https://cve.now/CVE-2026-125709.md): Libstdc++: overflow leaves streambuf in inconsistent state on i/o error. (CVSS 4.2, Red Hat Enterprise Linux · Red Hat Hardened Images +1)
- [CVE-2026-125707](https://cve.now/CVE-2026-125707.md): Gst-plugins-bad: gst-plugins-bad: off-by-one write in mxf demuxer temporal offset table (CVSS 6.1, Red Hat Enterprise Linux)
- [CVE-2026-125706](https://cve.now/CVE-2026-125706.md): Gst-plugins-bad: gst-plugins-bad: missing bounds checks in mpeg ps pes header parsing (CVSS 5.5, Red Hat Enterprise Linux)
- [CVE-2026-125712](https://cve.now/CVE-2026-125712.md): Gst-plugins-base: gst-plugins-base: missing bounds checks in rtcp sdes packet parsing (CVSS 7.5, Red Hat Enterprise Linux)
- [CVE-2026-12573](https://cve.now/CVE-2026-12573.md): Authenticated Command Injection (CVSS 8.8, Zohocorp DDI Central)
- [CVE-2026-125715](https://cve.now/CVE-2026-125715.md): Samsung mTower lacks access control for TA sessions, allowing a Normal World application to open TA sessions and invoke their commands, or… (CVSS 5.3, Samsung Opensource mTower)
- [CVE-2026-123717](https://cve.now/CVE-2026-123717.md): \[Eclipse CSI - otterdog\] OS Command Injection and Arbitrary Code Execution (CVSS 8.8, Eclipse CSI otterdog)
- [CVE-2026-12572](https://cve.now/CVE-2026-12572.md): SQL Injection (CVSS 7.2, Zohocorp DDI Central)
- [CVE-2026-95651](https://cve.now/CVE-2026-95651.md): Authentication Bypass (CVSS 7.5, Zohocorp DDI Central)
- [CVE-2026-95646](https://cve.now/CVE-2026-95646.md): Authenticated Command Injection (CVSS 8.0, Zohocorp DDI Central)
- [CVE-2026-119446](https://cve.now/CVE-2026-119446.md): Session fixation in the CLI login flow allows an unauthenticated attacker to obtain a user's API token (CVSS 9.4, nerves-hub nerves\_hub\_web)
- [CVE-2026-120286](https://cve.now/CVE-2026-120286.md): Missing authorization in device and deployment group page events allows view-role members to change devices and deployment groups (CVSS 5.3, nerves-hub nerves\_hub\_web)
- [CVE-2026-120997](https://cve.now/CVE-2026-120997.md): Improper session invalidation keeps removed or demoted members' open pages and device consoles working at their old role (CVSS 2.3, nerves-hub nerves\_hub\_web)
- [CVE-2026-120730](https://cve.now/CVE-2026-120730.md): Mass assignment of organization, product and deployment group IDs allows users to write into other organizations and receive their firmware (CVSS 8.6, nerves-hub nerves\_hub\_web)
- [CVE-2026-125703](https://cve.now/CVE-2026-125703.md): Gst-plugins-bad: gst-plugins-bad: bounds check errors in mxf vanc packet handling (CVSS 5.5, Red Hat Enterprise Linux)
- [CVE-2026-125672](https://cve.now/CVE-2026-125672.md): Cockpit: cockpit-storaged: tang keyserver address from an untrusted luks header clevis token reaches curl's argument vector as an option (CVSS 6.6, Red Hat Enterprise Linux)
- [CVE-2026-120999](https://cve.now/CVE-2026-120999.md): Improper authentication lets Google sign-in and confirmation links sign users in to accounts registered with their email address by… (CVSS 7.4, nerves-hub nerves\_hub\_web)
- [CVE-2026-120295](https://cve.now/CVE-2026-120295.md): Incorrect authorization in the devices page bulk move allows view-role members to move devices into another organization and receive its… (CVSS 7.1, nerves-hub nerves\_hub\_web)
- [CVE-2026-125704](https://cve.now/CVE-2026-125704.md): Gstreamer: gstreamer: use-after-free in gstreamer core buffer value deserialization (CVSS 7.5, Red Hat Enterprise Linux)
- [CVE-2026-124503](https://cve.now/CVE-2026-124503.md): sooperset mcp-atlassian io.py validate\_safe\_path path traversal (CVSS 5.3, sooperset mcp-atlassian)
- [CVE-2026-104619](https://cve.now/CVE-2026-104619.md): PackageKit ZYpp rollback vulnerability (CVSS 7.8, PackageKit)
- [CVE-2026-60046](https://cve.now/CVE-2026-60046.md): DoS via password reset (CVSS 8.7, MB connect line mbCONNECT24 · MB connect line mymbCONNEC… +2)
- [CVE-2026-60045](https://cve.now/CVE-2026-60045.md): Arbitrary file upload (CVSS 6.9, MB connect line mbCONNECT24 · MB connect line mymbCONNEC… +2)
- [CVE-2026-60044](https://cve.now/CVE-2026-60044.md): Static backup password (CVSS 8.7, MB connect line mbCONNECT24 · MB connect line mymbCONNEC… +2)
- [CVE-2026-60043](https://cve.now/CVE-2026-60043.md): XSS in backend (CVSS 6.4, MB connect line mbCONNECT24 · MB connect line mymbCONNEC… +2)
- [CVE-2026-60042](https://cve.now/CVE-2026-60042.md): Authentication bypass in com\_check (CVSS 6.9, MB connect line mbCONNECT24 · MB connect line mymbCONNEC… +2)
- [CVE-2026-60041](https://cve.now/CVE-2026-60041.md): CSRF in backend (CVSS 5.3, MB connect line mbCONNECT24 · MB connect line mymbCONNEC… +2)
- [CVE-2026-60040](https://cve.now/CVE-2026-60040.md): DoS in backup creation (CVSS 8.7, MB connect line mbCONNECT24 · MB connect line mymbCONNEC… +2)
- [CVE-2026-60039](https://cve.now/CVE-2026-60039.md): Command injection in backup restore (CVSS 8.6, MB connect line mbCONNECT24 · MB connect line mymbCONNEC… +2)
- [CVE-2026-60038](https://cve.now/CVE-2026-60038.md): OpenSSL command injection in ImportPKCS12 (CVSS 8.6, MB connect line mbCONNECT24 · MB connect line mymbCONNEC… +2)
- [CVE-2026-60037](https://cve.now/CVE-2026-60037.md): OpenSSL command injection in device importer (CVSS 8.6, MB connect line mbCONNECT24 · MB connect line mymbCONNEC… +2)
- [CVE-2026-60036](https://cve.now/CVE-2026-60036.md): Command injection in patch activate (CVSS 8.6, MB connect line mbCONNECT24 · MB connect line mymbCONNEC… +2)
- [CVE-2026-60035](https://cve.now/CVE-2026-60035.md): Command injection in network auth (CVSS 8.6, MB connect line mbCONNECT24 · MB connect line mymbCONNEC… +2)
- [CVE-2026-106025](https://cve.now/CVE-2026-106025.md): Cargo Shipping Location for WooCommerce 4.0.0 - 5.7.1 - Unauthenticated Order Status Manipulation (CVSS 5.3, Cargo Shipping Location for WooCommerce)
- [CVE-2026-106007](https://cve.now/CVE-2026-106007.md): FraudLabs Pro SMS Verification \<= 1.12.1 - Unauthenticated Unrestricted SMS Sending via wp\_sms\_action\_send (CVSS 5.3, FraudLabs Pro SMS Verification)
- [CVE-2026-120013](https://cve.now/CVE-2026-120013.md): Path Traversal in Agent Memory Module of SAP Cloud SDK for Python (CVSS 7.5, SAP\_SE SAP Cloud SDK for Python)
- [CVE-2026-120012](https://cve.now/CVE-2026-120012.md): Information Disclosure vulnerability in SAP Cloud SDK for AI(JavaScript) (CVSS 7.5, SAP\_SE SAP Cloud SDK for AI)
- [CVE-2026-125652](https://cve.now/CVE-2026-125652.md): Keycloak-services: keycloak-services: client-level mandatory pkce bypass via login-actions entry point (CVSS 6.8, Red Hat Build of Keycloak · Red Hat Single Sign-On)
- [CVE-2026-84938](https://cve.now/CVE-2026-84938.md): Avada (Fusion) Builder \<= 3.16.1 - Unauthenticated Stored Cross-Site Scripting via Form Notification Dynamic-Data action\_hook (CVSS 7.2, themefusion Avada (Fusion) Builder)
- [CVE-2026-93427](https://cve.now/CVE-2026-93427.md): ARMember Premium \<= 7.8.1 - Unauthenticated Stored Cross-Site Scripting via Registration Custom Field (CVSS 7.2, ARMember Premium – Membership Plugin, Content Restriction,…)
- [CVE-2026-100386](https://cve.now/CVE-2026-100386.md): Ultra Addons for Contact Form 7 \<= 3.5.54 - Unauthenticated Arbitrary File Read via CF7 Field Value in mPDF WriteHTML SVG Parser (CVSS 7.5, themefic Ultra Addons for Contact Form)
- [CVE-2026-120513](https://cve.now/CVE-2026-120513.md): Everest Forms \<= 3.6.2 - Unauthenticated Arbitrary File Deletion via 'everest\_forms\_{form\_id}\_old\_{field\_id}' Parameter (CVSS 8.2, wpeverest Everest Forms – Contact Form, Payment Form, Quiz,…)
- [CVE-2026-76877](https://cve.now/CVE-2026-76877.md): WPML Multilingual CMS \<= 4.9.7 - Unauthenticated Authentication Bypass in Language-per-Domain SSO via 'wpml\_sso\_token\_domain' Parameter (CVSS 8.1, WPML Multilingual CMS)
- [CVE-2026-119273](https://cve.now/CVE-2026-119273.md): BulletProof Security \<= 7.2 - Unauthenticated Sensitive Data Disclosure via Security Log (no CVSS, BulletProof Security)
- [CVE-2026-110516](https://cve.now/CVE-2026-110516.md): All in One Visual Composer Addons \<= 1.2 - Contributor+ LFI via vca\_tabs\_style Shortcode Attribute (no CVSS, All in One Addons For WPBakery Page Builder)
- [CVE-2026-104676](https://cve.now/CVE-2026-104676.md): Zion Builder \<= 3.6.17 - Author+ Stored XSS via SVG Upload (no CVSS, Zion Builder)
- [CVE-2026-63287](https://cve.now/CVE-2026-63287.md): It was possible for an authenticated non-admin user to modify certain data objects without having the appropriate permissions, which could… (CVSS 6.5, Axis Communications AB AXIS Camera Station Pro · Axis Commu…)
- [CVE-2026-13387](https://cve.now/CVE-2026-13387.md): A vulnerability related to URL redirection handling during the sign-out flow that could allow a user to be redirected to unintended… (CVSS 3.5, Axis Communications AB AXIS Camera Station Pro)
- [CVE-2026-13312](https://cve.now/CVE-2026-13312.md): A vulnerability that could allow an attacker to compromise a system. (CVSS 9.9, Axis Communications AB AXIS Camera Station Pro · Axis Commu…)
- [CVE-2026-12964](https://cve.now/CVE-2026-12964.md): A vulnerability allowing for privileged escalation of the viewer account to gain administrator privileges. (CVSS 8.0, Axis Communications AB AXIS Camera Station Pro)
- [CVE-2026-12963](https://cve.now/CVE-2026-12963.md): A vulnerability that could allow a viewer account to gain unauthorized access to network attached storage devices on the server. (CVSS 7.4, Axis Communications AB AXIS Camera Station Pro · Axis Commu…)
- [CVE-2026-12389](https://cve.now/CVE-2026-12389.md): A vulnerability that could lead to a high privileged authenticated user performing a remote code execution attack. (CVSS 8.4, Axis Communications AB AXIS Camera Station Pro)
- [CVE-2026-8372](https://cve.now/CVE-2026-8372.md): A vulnerability that could allow an attacker to gain unauthorized access. (CVSS 8.8, Axis Communications AB AXIS Camera Station Pro)
- [CVE-2026-4762](https://cve.now/CVE-2026-4762.md): A vulnerability to perform a privilege escalation attack on the server as a non-admin user. (CVSS 8.8, Axis Communications AB AXIS Camera Station Pro)
- [CVE-2026-63288](https://cve.now/CVE-2026-63288.md): A WebSocket request sent to a specific API endpoint allows unauthorized access to a separate API endpoint. (CVSS 8.3, Axis Communications AB AXIS A1210 - Secure Entry · Axis… +3)
- [CVE-2026-14918](https://cve.now/CVE-2026-14918.md): The Signed Video Framework contained a out-of-bounds read issue in the Signed Video Framework which could lead the application using this… (CVSS 5.3, Axis Communications AB Signed Video Framework · Axis Com… +1)
- [CVE-2026-63282](https://cve.now/CVE-2026-63282.md): Improper shell quote escaping when processing user-controlled input, potentially allowing command injection, which could lead to privilege… (CVSS 6.5, Axis Communications AB AXIS OS)
- [CVE-2026-14543](https://cve.now/CVE-2026-14543.md): The VAPIX Edge storage API, enabling the escalation of user privileges by circumventing filesystem isolation, granting unauthorized access… (CVSS 3.9, Axis Communications AB AXIS OS)
- [CVE-2026-14542](https://cve.now/CVE-2026-14542.md): The VAPIX SIP configuration API lacked sufficient input validation, which could potentially lead to privilege escalation. (CVSS 6.7, Axis Communications AB AXIS OS)
- [CVE-2026-13409](https://cve.now/CVE-2026-13409.md): The VAPIX API dynamicoverlay.cgi which results in a Denial-of-Service of the overlay functionality. (CVSS 4.3, Axis Communications AB AXIS OS)
- [CVE-2026-9063](https://cve.now/CVE-2026-9063.md): A locally authenticated user can achieve privilege escalation via an insecure configuration that leads to unauthorized code execution. (CVSS 6.7, Axis Communications AB AXIS OS)
- [CVE-2026-91758](https://cve.now/CVE-2026-91758.md): Out-of-bounds Read and Write Vulnerability in Hitachi Dynamic Link Manager for Linux (CVSS 7.8, Hitachi Dynamic Link Manager for Linux)
- [CVE-2026-91759](https://cve.now/CVE-2026-91759.md): Out-of-Bounds Write Vulnerability in Hitachi Dynamic Link Manager for Linux (CVSS 7.8, Hitachi Dynamic Link Manager for Linux)
- [CVE-2026-91760](https://cve.now/CVE-2026-91760.md): Heap-based Buffer Overflow Vulnerability in Hitachi Dynamic Link Manager for Linux (CVSS 7.0, Hitachi Dynamic Link Manager for Linux)
- [CVE-2026-91764](https://cve.now/CVE-2026-91764.md): Improper Link Resolution Before File Access Vulnerability in Hitachi Dynamic Link Manager for Linux (CVSS 8.1, Hitachi Dynamic Link Manager for Linux)
- [CVE-2026-115646](https://cve.now/CVE-2026-115646.md): Partial String Comparison Vulnerability in HiRDB (CVSS 9.8, Hitachi HiRDB Server)
- [CVE-2026-91761](https://cve.now/CVE-2026-91761.md): Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager for Linux (CVSS 8.2, Hitachi Dynamic Link Manager for Linux)
- [CVE-2026-91762](https://cve.now/CVE-2026-91762.md): Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager for Linux (CVSS 7.9, Hitachi Dynamic Link Manager for Linux)
- [CVE-2026-91763](https://cve.now/CVE-2026-91763.md): Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager for Linux (CVSS 8.2, Hitachi Dynamic Link Manager for Linux)
- [CVE-2026-92864](https://cve.now/CVE-2026-92864.md): Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager for AIX (for markets outside Japan) and Hitachi Dynamic Link Manager… (CVSS 7.3, Hitachi Dynamic Link Manager for AIX · Hitachi Dynamic Link…)
- [CVE-2026-112125](https://cve.now/CVE-2026-112125.md): Incorrect Permission Assignment for Critical Resource Vulnerability in HA Monitor (CVSS 7.3, Hitachi HA Monitor)
- [CVE-2026-92863](https://cve.now/CVE-2026-92863.md): Integer Overflow Vulnerability in Hitachi Dynamic Link Manager for AIX (for the Japanese market) (CVSS 7.0, Hitachi Dynamic Link Manager for AIX)
- [CVE-2026-91754](https://cve.now/CVE-2026-91754.md): Stack-based Buffer Overflow Vulnerability in Hitachi Dynamic Link Manager for VMware (CVSS 8.1, Hitachi Dynamic Link Manager for VMware)
- [CVE-2026-91755](https://cve.now/CVE-2026-91755.md): Integer Overflow Vulnerability in Hitachi Dynamic Link Manager for VMware (CVSS 8.1, Hitachi Dynamic Link Manager for VMware)
- [CVE-2026-91756](https://cve.now/CVE-2026-91756.md): OS Command Injection Vulnerability in Hitachi Dynamic Link Manager for VMware (CVSS 8.1, Hitachi Dynamic Link Manager for VMware)
- [CVE-2026-91757](https://cve.now/CVE-2026-91757.md): OS Command Injection Vulnerability in Hitachi Dynamic Link Manager for VMware (CVSS 7.1, Hitachi Dynamic Link Manager for VMware)
- [CVE-2026-86578](https://cve.now/CVE-2026-86578.md): Link Following Vulnerability in Hitachi Dynamic Link Manager for Windows (CVSS 7.3, Hitachi Dynamic Link Manager for Windows)
- [CVE-2026-86579](https://cve.now/CVE-2026-86579.md): Binary Planting Vulnerability in Hitachi Dynamic Link Manager for Windows (CVSS 8.2, Hitachi Dynamic Link Manager for Windows)
- [CVE-2026-96769](https://cve.now/CVE-2026-96769.md): Extend B2B - Companies and Users Management for WooCommerce \<= 2.1.4 - Unauthenticated Sensitive Information Exposure in… (CVSS 5.3, Codup Extend B2B - Companies and Users Management for WooCo…)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2026-11-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.