# CVEs published 2026-09-08 1,563 CVEs were published on September 8, 2026: 96 critical, 926 high. 3 are now in CISA KEV. Days are UTC. - [CVE-2026-19201](https://cve.now/CVE-2026-19201.md): Denial of Service via Unbounded Recursion in go-attestation Windows SIPA Parser (CVSS 6.6, Google go-attestation) - [CVE-2026-53939](https://cve.now/CVE-2026-53939.md): OpenIDC/cjose uses all-zero Content Encryption Key for AES-CBC-HMAC JWE encryption (CVSS 9.1, OpenIDC cjose) - [CVE-2026-53938](https://cve.now/CVE-2026-53938.md): OpenIDC/cjose has a heap buffer overflow in AES Key Wrap decryption (A128KW/A192KW/A256KW) (CVSS 8.2, OpenIDC cjose) - [CVE-2026-53937](https://cve.now/CVE-2026-53937.md): MCP Kotlin SDK's unbounded line buffer in StdioServerTransport/StdioClientTransport leads to memory exhaustion (DoS) (CVSS 6.2, io.modelcontextprotocol:kotlin-sdk · io.modelcontextprot… +2) - [CVE-2026-86564](https://cve.now/CVE-2026-86564.md): Dpdk: dpdk: missing length validation before reading command\_data in virtio-net control queue handler (CVSS 3.3, Red Hat Fast Datapath for RHEL · Red Hat Enterprise Linux +1) - [CVE-2026-47680](https://cve.now/CVE-2026-47680.md): Source controller: Improper path handling allows traversal (CVSS 5.3, fluxcd source-controller · github.com/fluxcd/source-control…) - [CVE-2026-18090](https://cve.now/CVE-2026-18090.md): Gdk-pixbuf: gdk-pixbuf: heap out-of-bounds read in uncompress() via crafted icns rle block (CVSS 6.1, Red Hat Enterprise Linux) - [CVE-2026-53581](https://cve.now/CVE-2026-53581.md): ntp: write path traversal (CVSS 9.0, opnsense core) - [CVE-2026-53637](https://cve.now/CVE-2026-53637.md): Sylius: Cart FormComponent allows modification or deletion of an already-completed order (CVSS 6.5, Sylius · sylius/sylius) - [CVE-2026-53638](https://cve.now/CVE-2026-53638.md): Sylius: Channel-based payment method restriction bypass on shop account orders API endpoint (CVSS 4.3, Sylius · sylius/sylius) - [CVE-2026-53639](https://cve.now/CVE-2026-53639.md): Sylius: IDOR on Shop Payment Request API endpoints (CVSS 6.3, Sylius · sylius/sylius) - [CVE-2026-55250](https://cve.now/CVE-2026-55250.md): Maravel-Framework Token Replay Vulnerability via Premature JWT Blacklist Eviction in Tagged Caches (CVSS 8.7, macropay-solutions maravel-framework) - [CVE-2026-53933](https://cve.now/CVE-2026-53933.md): Maravel-Framework Vulnerable to Side-Channel Information Disclosure (Error Oracle) via Dynamic Route Fuzzing (CVSS 6.9, macropay-solutions maravel-framework) - [CVE-2026-81904](https://cve.now/CVE-2026-81904.md): Concrete CMS before 9.5.3 is vulnerable to Missing Authorization in Stack/Container Sub-Block Asset Registration (CVSS 6.3, Concrete CMS) - [CVE-2026-86075](https://cve.now/CVE-2026-86075.md): n8n: Unauthenticated Persistent Storage Exhaustion via OAuth Dynamic Client Registration Endpoint (CVSS 8.7, n8n-io n8n · n8n) - [CVE-2026-86076](https://cve.now/CVE-2026-86076.md): n8n: Expression Sandbox Escape in Editor-UI Enables Stored Cross-User JavaScript Execution (CVSS 8.7, n8n-io n8n · n8n) - [CVE-2026-86077](https://cve.now/CVE-2026-86077.md): n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket (CVSS 6.3, n8n-io n8n · n8n) - [CVE-2026-86078](https://cve.now/CVE-2026-86078.md): n8n: Prototype Pollution via Workflow Structure Summary Can Lead to Denial of Service (CVSS 6.0, n8n-io n8n · n8n) - [CVE-2026-86079](https://cve.now/CVE-2026-86079.md): n8n: Path Injection in Elasticsearch and ElasticSecurity Nodes via Unencoded Identifiers (CVSS 6.3, n8n-io n8n · n8n) - [CVE-2026-86080](https://cve.now/CVE-2026-86080.md): n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-Open (CVSS 6.3, n8n-io n8n · n8n) - [CVE-2026-86081](https://cve.now/CVE-2026-86081.md): n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone Path (CVSS 7.1, n8n-io n8n · n8n) - [CVE-2026-86082](https://cve.now/CVE-2026-86082.md): n8n: Domain-Restriction Bypass via Unguarded Model-Search Endpoint in OpenAI Chat Model Node (CVSS 7.1, n8n-io n8n · n8n) - [CVE-2026-86083](https://cve.now/CVE-2026-86083.md): n8n: Expression Sandbox Escape via Shared Builtin Tampering and Code-Printer Injection Leads to Code Execution (CVSS 7.7, n8n-io n8n · n8n) - [CVE-2026-86084](https://cve.now/CVE-2026-86084.md): n8n: Disabled OIDC SSO Endpoints Remain Active and Issue Valid Sessions (CVSS 6.0, n8n-io n8n · n8n) - [CVE-2026-86085](https://cve.now/CVE-2026-86085.md): n8n: Cross-Tenant Project-Member PII Disclosure via Missing Per-Project Scope Check on Role Assignment Endpoints (CVSS 5.1, n8n-io n8n · n8n) - [CVE-2026-86993](https://cve.now/CVE-2026-86993.md): n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership Check (CVSS 5.9, n8n-io n8n · n8n) - [CVE-2026-86994](https://cve.now/CVE-2026-86994.md): n8n: Cross-User Active Workflow ID and Lifecycle Event Disclosure via Missing userId Filter (CVSS 5.3, n8n-io n8n · n8n) - [CVE-2026-86995](https://cve.now/CVE-2026-86995.md): n8n: Git Node branch.\.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read (CVSS 5.3, n8n-io n8n · n8n) - [CVE-2026-86996](https://cve.now/CVE-2026-86996.md): n8n: Agent Workflow Tool Bypasses Sub-Workflow Caller Policy (CVSS 5.3, n8n-io n8n · n8n) - [CVE-2026-81984](https://cve.now/CVE-2026-81984.md): Acrobat Reader | Use After Free (CWE-416) (CVSS 5.5, Adobe Acrobat) - [CVE-2026-81989](https://cve.now/CVE-2026-81989.md): Acrobat Reader | Use After Free (CWE-416) (CVSS 7.8, Adobe Acrobat) - [CVE-2026-81991](https://cve.now/CVE-2026-81991.md): Acrobat Reader | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Acrobat) - [CVE-2026-81980](https://cve.now/CVE-2026-81980.md): Acrobat Reader | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Acrobat) - [CVE-2026-81990](https://cve.now/CVE-2026-81990.md): Acrobat Reader | Use After Free (CWE-416) (CVSS 7.8, Adobe Acrobat) - [CVE-2026-81987](https://cve.now/CVE-2026-81987.md): Acrobat Reader | Integer Overflow or Wraparound (CWE-190) (CVSS 7.8, Adobe Acrobat) - [CVE-2026-79910](https://cve.now/CVE-2026-79910.md): Acrobat Reader | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Acrobat) - [CVE-2026-81993](https://cve.now/CVE-2026-81993.md): Acrobat Reader | Heap-based Buffer Overflow (CWE-122) (CVSS 5.5, Adobe Acrobat) - [CVE-2026-79907](https://cve.now/CVE-2026-79907.md): Acrobat Reader | Double Free (CWE-415) (CVSS 7.8, Adobe Acrobat) - [CVE-2026-79909](https://cve.now/CVE-2026-79909.md): Acrobat Reader | Use After Free (CWE-416) (CVSS 7.8, Adobe Acrobat) - [CVE-2026-80159](https://cve.now/CVE-2026-80159.md): Acrobat Reader | Untrusted Search Path (CWE-426) (CVSS 4.0, Adobe Acrobat) - [CVE-2026-81973](https://cve.now/CVE-2026-81973.md): Acrobat Reader | Use After Free (CWE-416) (CVSS 7.8, Adobe Acrobat) - [CVE-2026-81988](https://cve.now/CVE-2026-81988.md): Acrobat Reader | Use After Free (CWE-416) (CVSS 7.8, Adobe Acrobat) - [CVE-2026-81977](https://cve.now/CVE-2026-81977.md): Acrobat Reader | Integer Underflow (Wrap or Wraparound) (CWE-191) (CVSS 5.5, Adobe Acrobat) - [CVE-2026-80162](https://cve.now/CVE-2026-80162.md): Acrobat Reader | Use After Free (CWE-416) (CVSS 5.5, Adobe Acrobat) - [CVE-2026-81986](https://cve.now/CVE-2026-81986.md): Acrobat Reader | Use After Free (CWE-416) (CVSS 7.8, Adobe Acrobat) - [CVE-2026-81981](https://cve.now/CVE-2026-81981.md): Acrobat Reader | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Acrobat) - [CVE-2026-80161](https://cve.now/CVE-2026-80161.md): Acrobat Reader | Access of Resource Using Incompatible Type ('Type Confusion') (CWE-843) (CVSS 7.8, Adobe Acrobat) - [CVE-2026-81997](https://cve.now/CVE-2026-81997.md): Acrobat Reader | Incorrect Authorization (CWE-863) (CVSS 6.3, Adobe Acrobat) - [CVE-2026-81976](https://cve.now/CVE-2026-81976.md): Acrobat Reader | Use After Free (CWE-416) (CVSS 7.8, Adobe Acrobat) - [CVE-2026-81994](https://cve.now/CVE-2026-81994.md): Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321) (CVSS 8.2, Adobe Acrobat) - [CVE-2026-81985](https://cve.now/CVE-2026-81985.md): Acrobat Reader | Use After Free (CWE-416) (CVSS 7.8, Adobe Acrobat) - [CVE-2026-81979](https://cve.now/CVE-2026-81979.md): Acrobat Reader | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Acrobat) - [CVE-2026-80160](https://cve.now/CVE-2026-80160.md): Acrobat Reader | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Acrobat) - [CVE-2026-81996](https://cve.now/CVE-2026-81996.md): Acrobat Reader | Incorrect Authorization (CWE-863) (CVSS 8.8, Adobe Acrobat) - [CVE-2026-81992](https://cve.now/CVE-2026-81992.md): Acrobat Reader | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe Acrobat) - [CVE-2026-81982](https://cve.now/CVE-2026-81982.md): Acrobat Reader | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Acrobat) - [CVE-2026-82001](https://cve.now/CVE-2026-82001.md): Acrobat Reader | Uncontrolled Resource Consumption (CWE-400) (CVSS 5.5, Adobe Acrobat) - [CVE-2026-81978](https://cve.now/CVE-2026-81978.md): Acrobat Reader | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Acrobat) - [CVE-2026-81983](https://cve.now/CVE-2026-81983.md): Acrobat Reader | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Acrobat) - [CVE-2026-81975](https://cve.now/CVE-2026-81975.md): Acrobat Reader | Use After Free (CWE-416) (CVSS 7.8, Adobe Acrobat) - [CVE-2026-79908](https://cve.now/CVE-2026-79908.md): Acrobat Reader | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Acrobat) - [CVE-2026-86819](https://cve.now/CVE-2026-86819.md): Waves Central local privilege escalation via Improper XPC Client Authentication in macOS (CVSS 8.4, Waves Audio Waves Central) - [CVE-2026-77827](https://cve.now/CVE-2026-77827.md): Maono Link local privilege escalation (CVSS 7.1, Maono Link) - [CVE-2026-19625](https://cve.now/CVE-2026-19625.md): IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities (CVSS 5.3, IBM Enterprise Build of Quarkus) - [CVE-2026-84685](https://cve.now/CVE-2026-84685.md): Improper Cache Isolation in auth0/react-native-auth0 SDK Web Platform Credential Management (CVSS 6.5, react-native-auth0) - [CVE-2026-85983](https://cve.now/CVE-2026-85983.md): Local Privilege Escalation in Auth0 AD/LDAP Connector (CVSS 7.8, Auth0 AD/LDAP Connector) - [CVE-2026-81192](https://cve.now/CVE-2026-81192.md): OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOS (CVSS 7.0, open-telemetry opentelemetry-dotnet-contrib · OpenTelemetry…) - [CVE-2026-85982](https://cve.now/CVE-2026-85982.md): Stored Cross-Site Scripting (XSS) in Auth0 AD/LDAP Connector (CVSS 9.0, Auth0 AD/LDAP Connector) - [CVE-2026-85981](https://cve.now/CVE-2026-85981.md): Unauthenticated Localhost Admin Panel in Auth0 AD/LDAP Connector (CVSS 6.7, Auth0 AD/LDAP Connector) - [CVE-2026-78622](https://cve.now/CVE-2026-78622.md): Improper Link Resolution in Okta Verify for Windows Uninstaller Data Removal (CVSS 6.0, Okta Verify for Windows) - [CVE-2026-78631](https://cve.now/CVE-2026-78631.md): Improper Restriction of Sensitive Information in Okta Hyperdrive Agent Logging (CVSS 5.3, Okta Hyperdrive Agent) - [CVE-2026-78630](https://cve.now/CVE-2026-78630.md): Improper Input Neutralization in Okta Access Gateway SNMP Configuration Processing (CVSS 6.7, Okta Access Gateway) - [CVE-2026-78629](https://cve.now/CVE-2026-78629.md): Improper Authentication Verification in the Okta Hyperdrive Agent MFA Response Handling (CVSS 5.6, Okta Hyperdrive Agent) - [CVE-2026-19651](https://cve.now/CVE-2026-19651.md): IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities (CVSS 7.4, IBM Enterprise Build of Quarkus) - [CVE-2026-78635](https://cve.now/CVE-2026-78635.md): Improper Input Validation in the Okta Privileged Access SSH Client URL Handler Argument (CVSS 5.0, Okta Privileged Access Client) - [CVE-2026-78620](https://cve.now/CVE-2026-78620.md): Improper Path Validation in Okta Access Gateway Kerberos Configuration Handling (CVSS 5.9, Okta Access Gateway) - [CVE-2026-78579](https://cve.now/CVE-2026-78579.md): Improper Input Sanitization in Okta Access Gateway LDAP Datastore Filter Interpolation (CVSS 6.8, Okta Access Gateway) - [CVE-2026-78627](https://cve.now/CVE-2026-78627.md): Improper Credential Protection in Okta Hyperdrive Integration Installer Logging (CVSS 7.3, Okta Hyperdrive Integration Plugin) - [CVE-2026-78574](https://cve.now/CVE-2026-78574.md): Improper Assembly Resolution in Okta Hyperdrive Integration Plugin Registry Handling (CVSS 7.5, Okta Hyperdrive Integration Plugin) - [CVE-2026-78626](https://cve.now/CVE-2026-78626.md): Improper Input Sanitization in Okta Access Gateway Protected Rules (CVSS 8.1, Okta Access Gateway) - [CVE-2026-78625](https://cve.now/CVE-2026-78625.md): Insufficient Validation of Dashboard Application Labels in Okta Access Gateway Dashboard Site Configuration (CVSS 6.7, Okta Access Gateway) - [CVE-2026-78624](https://cve.now/CVE-2026-78624.md): Improper Path Validation in Okta Access Gateway Backup and Restore Functionality (CVSS 4.9, Okta Access Gateway) - [CVE-2026-78560](https://cve.now/CVE-2026-78560.md): Improper Authentication Validation in Okta Access Gateway Pass-Through Authentication Source (CVSS 4.8, Okta Access Gateway) - [CVE-2026-85630](https://cve.now/CVE-2026-85630.md): HTML::FormHandler versions before 0.410002 for Perl render field attributes into HTML without escaping using the process\_attrs method (CVSS 6.1, HTML-FormHandler) - [CVE-2026-85485](https://cve.now/CVE-2026-85485.md): HTML::FormHandler versions before 0.410002 for Perl render some error messages into HTML without escaping (CVSS 6.1, HTML-FormHandler) - [CVE-2026-78552](https://cve.now/CVE-2026-78552.md): Validation Bypass in Okta Access Gateway Custom Directives (CVSS 6.0, Okta Access Gateway) - [CVE-2026-85484](https://cve.now/CVE-2026-85484.md): HTML::FormHandler versions before 0.410002 for Perl render option group labels and radio button labels into HTML without escaping (CVSS 6.1, HTML-FormHandler) - [CVE-2026-19872](https://cve.now/CVE-2026-19872.md): HTML::FormHandler versions before 0.410000 for Perl allow cross-site scripting via a submitted value rendered unescaped in an error message (CVSS 6.1, HTML-FormHandler) - [CVE-2026-78623](https://cve.now/CVE-2026-78623.md): Improper Handling of SAML Assertion Attributes in Okta Access Gateway Advanced Mode Datastores (CVSS 7.7, Okta Access Gateway) - [CVE-2026-78550](https://cve.now/CVE-2026-78550.md): Improper Input Handling in Okta Access Gateway Management Console Exception Handler (CVSS 6.6, Okta Access Gateway) - [CVE-2026-78545](https://cve.now/CVE-2026-78545.md): Improper Input Sanitization in Okta Access Gateway Application Label Configuration (CVSS 6.6, Okta Access Gateway) - [CVE-2026-84197](https://cve.now/CVE-2026-84197.md): In Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto-javascript-client-node from 2.0.0 to 3.9.0 and o (CVSS 9.2, Eclipse Foundation Eclipse Ditto) - [CVE-2026-86810](https://cve.now/CVE-2026-86810.md): Open-Web-Analytics Controller Controller.php checkCapabilityAndAuthenticateUser improper authentication (CVSS 6.9, Open-Web-Analytics) - [CVE-2026-71357](https://cve.now/CVE-2026-71357.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75678](https://cve.now/CVE-2026-75678.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-71565](https://cve.now/CVE-2026-71565.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75687](https://cve.now/CVE-2026-75687.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75672](https://cve.now/CVE-2026-75672.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75734](https://cve.now/CVE-2026-75734.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75706](https://cve.now/CVE-2026-75706.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75730](https://cve.now/CVE-2026-75730.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75719](https://cve.now/CVE-2026-75719.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75707](https://cve.now/CVE-2026-75707.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75690](https://cve.now/CVE-2026-75690.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75715](https://cve.now/CVE-2026-75715.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2025-64838](https://cve.now/CVE-2025-64838.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75646](https://cve.now/CVE-2026-75646.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75640](https://cve.now/CVE-2026-75640.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75643](https://cve.now/CVE-2026-75643.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75726](https://cve.now/CVE-2026-75726.md): Adobe Experience Manager | Improper Input Validation (CWE-20) (CVSS 3.5, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-19612](https://cve.now/CVE-2026-19612.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75660](https://cve.now/CVE-2026-75660.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-19479](https://cve.now/CVE-2026-19479.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75735](https://cve.now/CVE-2026-75735.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75637](https://cve.now/CVE-2026-75637.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75705](https://cve.now/CVE-2026-75705.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75694](https://cve.now/CVE-2026-75694.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75741](https://cve.now/CVE-2026-75741.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75679](https://cve.now/CVE-2026-75679.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2025-64830](https://cve.now/CVE-2025-64830.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75729](https://cve.now/CVE-2026-75729.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75685](https://cve.now/CVE-2026-75685.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75677](https://cve.now/CVE-2026-75677.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75642](https://cve.now/CVE-2026-75642.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75671](https://cve.now/CVE-2026-75671.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75667](https://cve.now/CVE-2026-75667.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75636](https://cve.now/CVE-2026-75636.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75644](https://cve.now/CVE-2026-75644.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75704](https://cve.now/CVE-2026-75704.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75708](https://cve.now/CVE-2026-75708.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2025-64854](https://cve.now/CVE-2025-64854.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2025-64866](https://cve.now/CVE-2025-64866.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2025-64589](https://cve.now/CVE-2025-64589.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75635](https://cve.now/CVE-2026-75635.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75742](https://cve.now/CVE-2026-75742.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75713](https://cve.now/CVE-2026-75713.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75739](https://cve.now/CVE-2026-75739.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75666](https://cve.now/CVE-2026-75666.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-72627](https://cve.now/CVE-2026-72627.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-19644](https://cve.now/CVE-2026-19644.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75674](https://cve.now/CVE-2026-75674.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75709](https://cve.now/CVE-2026-75709.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75652](https://cve.now/CVE-2026-75652.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2025-64610](https://cve.now/CVE-2025-64610.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75733](https://cve.now/CVE-2026-75733.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75661](https://cve.now/CVE-2026-75661.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75691](https://cve.now/CVE-2026-75691.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75725](https://cve.now/CVE-2026-75725.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75647](https://cve.now/CVE-2026-75647.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2025-64584](https://cve.now/CVE-2025-64584.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75740](https://cve.now/CVE-2026-75740.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75669](https://cve.now/CVE-2026-75669.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75710](https://cve.now/CVE-2026-75710.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75668](https://cve.now/CVE-2026-75668.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75716](https://cve.now/CVE-2026-75716.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-71388](https://cve.now/CVE-2026-71388.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75683](https://cve.now/CVE-2026-75683.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-72626](https://cve.now/CVE-2026-72626.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75639](https://cve.now/CVE-2026-75639.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75731](https://cve.now/CVE-2026-75731.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-19232](https://cve.now/CVE-2026-19232.md): Adobe Experience Manager | Incorrect Authorization (CWE-863) (CVSS 9.9, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-19713](https://cve.now/CVE-2026-19713.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75738](https://cve.now/CVE-2026-75738.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2025-64618](https://cve.now/CVE-2025-64618.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75629](https://cve.now/CVE-2026-75629.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75659](https://cve.now/CVE-2026-75659.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75722](https://cve.now/CVE-2026-75722.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75651](https://cve.now/CVE-2026-75651.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75718](https://cve.now/CVE-2026-75718.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75695](https://cve.now/CVE-2026-75695.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75727](https://cve.now/CVE-2026-75727.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75680](https://cve.now/CVE-2026-75680.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-27227](https://cve.now/CVE-2026-27227.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75675](https://cve.now/CVE-2026-75675.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75712](https://cve.now/CVE-2026-75712.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75702](https://cve.now/CVE-2026-75702.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75700](https://cve.now/CVE-2026-75700.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-71440](https://cve.now/CVE-2026-71440.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75711](https://cve.now/CVE-2026-75711.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2025-64868](https://cve.now/CVE-2025-64868.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75737](https://cve.now/CVE-2026-75737.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75681](https://cve.now/CVE-2026-75681.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-71356](https://cve.now/CVE-2026-71356.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75696](https://cve.now/CVE-2026-75696.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75701](https://cve.now/CVE-2026-75701.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75724](https://cve.now/CVE-2026-75724.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2025-64542](https://cve.now/CVE-2025-64542.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75692](https://cve.now/CVE-2026-75692.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75714](https://cve.now/CVE-2026-75714.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75657](https://cve.now/CVE-2026-75657.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2025-64588](https://cve.now/CVE-2025-64588.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75736](https://cve.now/CVE-2026-75736.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75693](https://cve.now/CVE-2026-75693.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75670](https://cve.now/CVE-2026-75670.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75717](https://cve.now/CVE-2026-75717.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-79905](https://cve.now/CVE-2026-79905.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-75720](https://cve.now/CVE-2026-75720.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1) - [CVE-2026-86464](https://cve.now/CVE-2026-86464.md): In the current development version of Eclipse aeriOS, for which no official release has yet been published, the Identity Manager (IdM) deplo (CVSS 9.9, Eclipse Foundation Eclipse aeriOS) - [CVE-2026-84942](https://cve.now/CVE-2026-84942.md): Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch Dashboards (CVSS 8.7, AWS Amazon OpenSearch Service · OpenSearch Dashboards) - [CVE-2026-76002](https://cve.now/CVE-2026-76002.md): ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 6.1, Adobe ColdFusion) - [CVE-2026-75746](https://cve.now/CVE-2026-75746.md): ColdFusion | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) (CVSS 9.1, Adobe ColdFusion) - [CVE-2026-76000](https://cve.now/CVE-2026-76000.md): ColdFusion | Uncontrolled Resource Consumption (CWE-400) (CVSS 6.5, Adobe ColdFusion) - [CVE-2026-75998](https://cve.now/CVE-2026-75998.md): ColdFusion | Improper Access Control (CWE-284) (CVSS 7.5, Adobe ColdFusion) - [CVE-2026-48273](https://cve.now/CVE-2026-48273.md): ColdFusion | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95) (CVSS 9.9, Adobe ColdFusion) - [CVE-2026-76190](https://cve.now/CVE-2026-76190.md): ColdFusion | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95) (CVSS 8.6, Adobe ColdFusion) - [CVE-2026-75999](https://cve.now/CVE-2026-75999.md): ColdFusion | Improper Input Validation (CWE-20) (CVSS 8.4, Adobe ColdFusion) - [CVE-2026-75993](https://cve.now/CVE-2026-75993.md): ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 8.5, Adobe ColdFusion) - [CVE-2026-75771](https://cve.now/CVE-2026-75771.md): Photoshop Desktop | Integer Overflow or Wraparound (CWE-190) (CVSS 7.8, Adobe Photoshop) - [CVE-2026-75631](https://cve.now/CVE-2026-75631.md): Photoshop Desktop | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Photoshop) - [CVE-2026-75862](https://cve.now/CVE-2026-75862.md): Photoshop Desktop | Integer Overflow or Wraparound (CWE-190) (CVSS 7.8, Adobe Photoshop) - [CVE-2026-76199](https://cve.now/CVE-2026-76199.md): Photoshop Desktop | Uncontrolled Search Path Element (CWE-427) (CVSS 8.6, Adobe Photoshop) - [CVE-2026-82005](https://cve.now/CVE-2026-82005.md): Photoshop Desktop | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Photoshop) - [CVE-2026-82007](https://cve.now/CVE-2026-82007.md): Photoshop Desktop | Integer Overflow or Wraparound (CWE-190) (CVSS 7.8, Adobe Photoshop) - [CVE-2026-82006](https://cve.now/CVE-2026-82006.md): Photoshop Desktop | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe Photoshop) - [CVE-2026-75863](https://cve.now/CVE-2026-75863.md): Photoshop Desktop | Integer Overflow or Wraparound (CWE-190) (CVSS 7.8, Adobe Photoshop) - [CVE-2026-86808](https://cve.now/CVE-2026-86808.md): moltis-org moltis vault.rs vault\_recovery\_handler missing authentication (CVSS 6.9, moltis-org moltis) - [CVE-2026-75991](https://cve.now/CVE-2026-75991.md): Illustrator | Improper Input Validation (CWE-20) (CVSS 8.6, Adobe Illustrator Desktop) - [CVE-2026-75990](https://cve.now/CVE-2026-75990.md): Illustrator | Incorrect Authorization (CWE-863) (CVSS 8.6, Adobe Illustrator Desktop) - [CVE-2026-75992](https://cve.now/CVE-2026-75992.md): Illustrator | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Illustrator Desktop) - [CVE-2026-84869](https://cve.now/CVE-2026-84869.md): ScreenConnect Client: Guest-to-Host File Execution via File-Transfer Actions (CVSS 9.9, KEV, ConnectWise ScreenConnect) - [CVE-2026-28659](https://cve.now/CVE-2026-28659.md): In MicroXR Blobstore, there is a possible way to access other app's files due to a missing permission check. (CVSS 10.0, Google Android XR) - [CVE-2026-86806](https://cve.now/CVE-2026-86806.md): opengeos GeoLibre \_is\_within\_roots server-side request forgery (CVSS 6.9, opengeos GeoLibre) - [CVE-2026-49883](https://cve.now/CVE-2026-49883.md): In checkReadPermission of PermissionsManager.java, there is a possible way to monitor sensitive device state data due to a missing permissio (CVSS 10.0, Google Android Wear) - [CVE-2026-86804](https://cve.now/CVE-2026-86804.md): seakee CPA-Manager-Plus HTTP handler.go CPAResource improper authorization (CVSS 6.9, seakee CPA-Manager-Plus) - [CVE-2026-82004](https://cve.now/CVE-2026-82004.md): Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) (CVSS 10.0, Adobe Campaign Classic) - [CVE-2026-86716](https://cve.now/CVE-2026-86716.md): Cesanta mJS mjs\_tok.c skip\_spaces\_and\_comments heap-based overflow (CVSS 6.9, Cesanta mJS) - [CVE-2026-85384](https://cve.now/CVE-2026-85384.md): Authenticated Stack-Based Buffer Overflow in RE210 AC750 Configuration Import (CVSS 8.5, TP-Link Systems RE210 AC750) - [CVE-2026-66307](https://cve.now/CVE-2026-66307.md): Skype for Business and Lync Denial of Service Vulnerability (CVSS 7.5, Microsoft Skype for Business Server 2015 CU13 · Microsof… +1) - [CVE-2026-66303](https://cve.now/CVE-2026-66303.md): Skype for Business and Lync Denial of Service Vulnerability (CVSS 6.5, Microsoft Skype for Business Server 2015 CU13 · Microsof… +1) - [CVE-2026-69646](https://cve.now/CVE-2026-69646.md): Skype for Business Spoofing Vulnerability (CVSS 8.3, Microsoft Skype for Business Server 2015 CU13 · Microsof… +1) - [CVE-2026-69642](https://cve.now/CVE-2026-69642.md): Skype for Business Spoofing Vulnerability (CVSS 6.5, Microsoft Skype for Business Server 2015 CU13 · Microsof… +1) - [CVE-2026-66305](https://cve.now/CVE-2026-66305.md): Skype for Business Spoofing Vulnerability (CVSS 7.1, Microsoft Skype for Business Server 2015 CU13 · Microsof… +1) - [CVE-2026-63523](https://cve.now/CVE-2026-63523.md): Skype for Business Spoofing Vulnerability (CVSS 6.5, Microsoft Skype for Business Server 2015 CU13 · Microsof… +1) - [CVE-2026-66308](https://cve.now/CVE-2026-66308.md): Skype for Business and Lync Denial of Service Vulnerability (CVSS 6.5, Microsoft Skype for Business Server 2015 CU13 · Microsof… +1) - [CVE-2026-66306](https://cve.now/CVE-2026-66306.md): Skype for Business Information Disclosure Vulnerability (CVSS 6.5, Microsoft Skype for Business Server 2015 CU13 · Microsof… +1) - [CVE-2026-66302](https://cve.now/CVE-2026-66302.md): Skype for Business Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Skype for Business Server 2015 CU13 · Microsof… +1) - [CVE-2026-66304](https://cve.now/CVE-2026-66304.md): Skype for Business Information Disclosure Vulnerability (CVSS 7.5, Microsoft Skype for Business Server 2015 CU13 · Microsof… +1) - [CVE-2026-86675](https://cve.now/CVE-2026-86675.md): itsourcecode Sales and Inventory System us\_edit.php sql injection (CVSS 5.3, itsourcecode Sales and Inventory System) - [CVE-2026-82537](https://cve.now/CVE-2026-82537.md): Roo-Code 3.54.0 Auto-Approve Bypass via Shell Parser Word-Boundary Mismatch (CVSS 7.7, RooCodeInc Roo-Code) - [CVE-2026-82536](https://cve.now/CVE-2026-82536.md): Roo-Code 3.54.0 Auto-Approve Bypass via Shell Command Pipe Operator (CVSS 7.7, RooCodeInc Roo-Code) - [CVE-2026-86674](https://cve.now/CVE-2026-86674.md): ningzichun Student Management System login.php session\_start session fixiation (CVSS 5.3, ningzichun Student Management System) - [CVE-2026-79721](https://cve.now/CVE-2026-79721.md): Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to (CVSS 8.6, mlflow) - [CVE-2026-76200](https://cve.now/CVE-2026-76200.md): Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 9.3, Adobe Commerce · Adobe Magento Open Source) - [CVE-2026-76201](https://cve.now/CVE-2026-76201.md): Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 9.3, Adobe Commerce · Adobe Magento Open Source) - [CVE-2026-77109](https://cve.now/CVE-2026-77109.md): Adobe Commerce | Incorrect Authorization (CWE-863) (CVSS 8.6, Adobe Commerce · Adobe Magento Open Source) - [CVE-2026-77110](https://cve.now/CVE-2026-77110.md): Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) (CVSS 7.6, Adobe Commerce · Adobe Magento Open Source) - [CVE-2026-77108](https://cve.now/CVE-2026-77108.md): Adobe Commerce | Incorrect Authorization (CWE-863) (CVSS 7.5, Adobe Commerce · Adobe Magento Open Source) - [CVE-2026-76202](https://cve.now/CVE-2026-76202.md): Adobe Commerce | Incorrect Authorization (CWE-863) (CVSS 8.2, Adobe Commerce · Adobe Magento Open Source) - [CVE-2026-77774](https://cve.now/CVE-2026-77774.md): Adobe Commerce | Incorrect Authorization (CWE-863) (CVSS 8.6, Adobe Commerce · Adobe Magento Open Source) - [CVE-2026-77111](https://cve.now/CVE-2026-77111.md): Adobe Commerce | Incorrect Authorization (CWE-863) (CVSS 8.7, Adobe Commerce · Adobe Magento Open Source) - [CVE-2026-58941](https://cve.now/CVE-2026-58941.md): In multiple functions of iommu.c, there is a possible out of bounds read/write due to improper input validation. (CVSS 7.8, Google Android) - [CVE-2026-58874](https://cve.now/CVE-2026-58874.md): In multiple functions of SmsController.java, there is a possible escalation of privilege due to a missing permission check. (CVSS 7.8, Google Android) - [CVE-2026-58848](https://cve.now/CVE-2026-58848.md): In multiple functions of alloc.c, there is a possible unauthorized read/write access due to a race condition. (CVSS 7.0, Google Android) - [CVE-2026-58846](https://cve.now/CVE-2026-58846.md): In kvm\_iommu\_map\_sg of iommu.c, there is a possible use after free due to a missing permission check. (CVSS 7.8, Google Android) - [CVE-2026-58839](https://cve.now/CVE-2026-58839.md): In forEachLine of MountRegistry.cpp, there is a possible out of bounds read due to a buffer overflow. (CVSS 7.8, Google Android) - [CVE-2026-58823](https://cve.now/CVE-2026-58823.md): In stpropnci\_process\_std of stpropnci\_std.cc, there is a possible memory safety issue due to a missing bounds check. (CVSS 7.8, Google Android) - [CVE-2026-58822](https://cve.now/CVE-2026-58822.md): In multiple functions of ftsmooth.c, there is a possible memory safety issue due to improper casting. (CVSS 9.8, Google Android) - [CVE-2026-58820](https://cve.now/CVE-2026-58820.md): In multiple locations, there is a possible memory safety issue due to integer overflow. (CVSS 7.8, Google Android) - [CVE-2026-55294](https://cve.now/CVE-2026-55294.md): In ihevcd\_get\_tu\_data\_size of ihevcd\_utils.c, there is a possible out of bounds write due to a heap buffer overflow. (CVSS 7.8, Google Android) - [CVE-2026-55290](https://cve.now/CVE-2026-55290.md): In setTo of ResourceTypes.cpp, there is a possible out-of-bounds heap read due to a missing bounds check. (CVSS 3.3, Google Android) - [CVE-2026-55285](https://cve.now/CVE-2026-55285.md): In openLogicalChannel of multiple files, there is a possible out-of-bounds write due to a missing bounds check. (CVSS 7.8, Google Android) - [CVE-2026-55277](https://cve.now/CVE-2026-55277.md): In checkUiccListenConfigNeeded of RoutingManager.cpp, there is a possible out of bounds write due to a missing bounds check. (CVSS 8.0, Google Android) - [CVE-2026-55273](https://cve.now/CVE-2026-55273.md): In AppendCommentLine of AnnotationProcessor.cpp, there is a possible supply chain risk due to improper input validation. (CVSS 7.8, Google Android) - [CVE-2026-55256](https://cve.now/CVE-2026-55256.md): In parsePartHeaders of multiple files, there is a possible persistent denial of service due to improper input validation. (CVSS 6.5, Google Android) - [CVE-2026-49932](https://cve.now/CVE-2026-49932.md): In parseParts of PduParser.java, there is a possible out of bounds read due to a heap buffer overflow. (CVSS 7.8, Google Android) - [CVE-2026-49927](https://cve.now/CVE-2026-49927.md): In multiple locations, there is a possible out of bounds write due to an integer overflow. (CVSS 7.8, Google Android) - [CVE-2026-49921](https://cve.now/CVE-2026-49921.md): In multiple locations, there is a possible memory safety issue due to a heap buffer overflow. (CVSS 9.8, Google Android) - [CVE-2026-49919](https://cve.now/CVE-2026-49919.md): In tt\_face\_colr\_blend\_layer of ttcolr.c, there is a possible remote code execution due to an integer overflow. (CVSS 7.8, Google Android) - [CVE-2026-49918](https://cve.now/CVE-2026-49918.md): In multiple functions, there is a possible out of bounds write due to an integer overflow. (CVSS 7.8, Google Android) - [CVE-2026-49895](https://cve.now/CVE-2026-49895.md): In get\_eht\_operation\_channel\_width of ieee802\_11\_common.c, there is a possible out of bounds read due to an incorrect bounds check. (CVSS 3.5, Google Android) - [CVE-2026-49887](https://cve.now/CVE-2026-49887.md): In maybeRemoveInvalidInstallerPackageName of InstallRepository.kt, there is a possible unauthorized app update due to a permissions bypass. (CVSS 7.8, Google Android) - [CVE-2026-49884](https://cve.now/CVE-2026-49884.md): In rw\_mfc\_handle\_read\_op of rw\_mfc.cc, there is a possible out of bounds write due to an incorrect bounds check. (CVSS 7.8, Google Android) - [CVE-2026-49882](https://cve.now/CVE-2026-49882.md): In rw\_mfc\_handle\_read\_op of rw\_mfc.cc, there is a possible memory safety issue due to a heap buffer overflow. (CVSS 8.8, Google Android) - [CVE-2026-49881](https://cve.now/CVE-2026-49881.md): In serviceClassExists of InCallController.java, there is a possible arbitrary code execution due to a logic error in the code. (CVSS 7.8, Google Android) - [CVE-2026-49879](https://cve.now/CVE-2026-49879.md): In multiple functions of rw\_t3t.cc, there is a possible out of bounds write due to an integer overflow. (CVSS 8.8, Google Android) - [CVE-2026-45531](https://cve.now/CVE-2026-45531.md): In read\_boot\_region of fsck.c, there is a possible out of bounds read due to a heap buffer overflow. (CVSS 7.8, Google Android) - [CVE-2026-45528](https://cve.now/CVE-2026-45528.md): In getManageSpaceActivityIntent of StorageManagerService.java, there is a possible LaunchAnyWhere chain due to an unsafe PendingIntent. (CVSS 7.3, Google Android) - [CVE-2026-45527](https://cve.now/CVE-2026-45527.md): In convertCleanApertureToRect of HeifCleanAperture.cpp, there is a possible way to cause a temporary denial of service due to an integer ove (CVSS 4.3, Google Android) - [CVE-2026-45525](https://cve.now/CVE-2026-45525.md): In multiple locations, there is a possible improper data sanitization due to a logic error in the code. (CVSS 3.3, Google Android) - [CVE-2026-45521](https://cve.now/CVE-2026-45521.md): In openFile of AppFuseBridge.java, there is a possible information disclosure due to a missing permission check. (CVSS 3.3, Google Android) - [CVE-2026-45520](https://cve.now/CVE-2026-45520.md): In onAttach of BiometricsSettingsBase.java, there is a possible authentication bypass due to a confused deputy. (CVSS 7.8, Google Android) - [CVE-2026-45519](https://cve.now/CVE-2026-45519.md): In screenArgsForPermissionCheckIfAny of multiple locations there is a possible risk of unauthorized access due to a confused deputy. (CVSS 3.3, Google Android) - [CVE-2026-45515](https://cve.now/CVE-2026-45515.md): In a2dp\_vendor\_opus\_decoder\_decode\_packet of a2dp\_vendor\_opus\_decoder.cc, there is a possible out of bounds write due to a heap buffer overf (CVSS 7.8, Google Android) - [CVE-2026-28671](https://cve.now/CVE-2026-28671.md): In updateInternal of MediaProvider.java, there is a possible expose contents of files due to a race condition. (CVSS 3.3, Google Android) - [CVE-2026-28668](https://cve.now/CVE-2026-28668.md): In LimitRealloc of malloc\_limit.cpp, there is a possible use after free due to a logic error in the code. (CVSS 7.8, Google Android) - [CVE-2026-28666](https://cve.now/CVE-2026-28666.md): In multiple functions of LocalImageResolver.java, there is a possible Remote Persistent Denial of Service due to a DNG image rendering check (CVSS 8.8, Google Android) - [CVE-2026-28664](https://cve.now/CVE-2026-28664.md): In WriteImageToDisk of runtime\_image.cc, there is a possible file tampering due to a logic error in the code. (CVSS 7.8, Google Android) - [CVE-2026-28663](https://cve.now/CVE-2026-28663.md): In buildIntentSenderForUser of LauncherAppsService.java, there is a possible way to launch an activity from the background due to BAL Bypass (CVSS 7.8, Google Android) - [CVE-2026-28662](https://cve.now/CVE-2026-28662.md): In p2p\_process\_prov\_disc\_bootstrap\_req of p2p\_pd.c, there is a possible out of bounds write due to a heap buffer overflow. (CVSS 8.0, Google Android) - [CVE-2026-28660](https://cve.now/CVE-2026-28660.md): In getAllSessions of multiple files, there is a possible confused deputy due to a logic error in the code. (CVSS 3.3, Google Android) - [CVE-2026-28658](https://cve.now/CVE-2026-28658.md): In findMetaAuthUid of AccountsDb.java, there is a possible frp bypass due to a logic error in the code. (CVSS 7.8, Google Android) - [CVE-2026-28657](https://cve.now/CVE-2026-28657.md): In onActivityResult of AppWidgetConfigActivityProxy.java, there is a possible unauthorized URI permission grant due to a confused deputy. (CVSS 7.8, Google Android) - [CVE-2026-28656](https://cve.now/CVE-2026-28656.md): In multiple functions of DeviceAdminAdd.java, there is a possible way to an overlay due to a tapjacking/overlay attack. (CVSS 7.3, Google Android) - [CVE-2026-28655](https://cve.now/CVE-2026-28655.md): In multiple functions of RemoteViews.java, there is a possible background activity launch bypass due to a logic error in the code. (CVSS 7.8, Google Android) - [CVE-2026-28653](https://cve.now/CVE-2026-28653.md): In multiple functions of rw\_t3t.cc, there is a possible out of bounds write due to an integer overflow. (CVSS 7.8, Google Android) - [CVE-2026-28652](https://cve.now/CVE-2026-28652.md): In multiple functions of RangingServiceImpl.java, there is a possible MITM due to a missing permission check. (CVSS 3.1, Google Android) - [CVE-2026-28650](https://cve.now/CVE-2026-28650.md): In setHiddenWhileSuspended of WindowState.java, there is a possible overlay bypass due to a logic error in the code. (CVSS 7.8, Google Android) - [CVE-2026-28644](https://cve.now/CVE-2026-28644.md): In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible permission bypass due to a confused deputy. (CVSS 7.8, Google Android) - [CVE-2026-28642](https://cve.now/CVE-2026-28642.md): In executeRequest of ActivityStarter.java, there is a possible background activity launch due to a logic error in the code. (CVSS 7.8, Google Android) - [CVE-2026-28639](https://cve.now/CVE-2026-28639.md): In rw\_mfc\_handle\_read\_op of rw\_mfc.cc, there is a possible out of bounds write due to a logic error in the code. (CVSS 7.8, Google Android) - [CVE-2026-28638](https://cve.now/CVE-2026-28638.md): In multiple functions of XmpDataParser.java, there is a possible improper data sanitization due to a logic error in the code. (CVSS 3.3, Google Android) - [CVE-2026-28636](https://cve.now/CVE-2026-28636.md): In setupLayout of PickActivity.java, there is a possible bypass of the "Install unknown apps" security restriction due to a confused deputy. (CVSS 7.8, Google Android) - [CVE-2026-28634](https://cve.now/CVE-2026-28634.md): In handleUssdRequest of PhoneInterfaceManager.java, there is a possible way to send a USSD request without permission due to a logic error i (CVSS 7.8, Google Android) - [CVE-2026-28633](https://cve.now/CVE-2026-28633.md): In initForUserNoTracing of VoiceInteractionManagerService.java, there is a possible persistent denial of service due to resource exhaustion. (CVSS 5.5, Google Android) - [CVE-2026-28631](https://cve.now/CVE-2026-28631.md): In buildMiniResolver of IntentForwarderActivity.java, there is a possible consent bypass due to a tapjacking/overlay attack. (CVSS 7.8, Google Android) - [CVE-2026-28630](https://cve.now/CVE-2026-28630.md): In onCreate of ContactsPickerActivity.kt, there is a possible misleading UI due to a tapjacking/overlay attack. (CVSS 3.3, Google Android) - [CVE-2026-28627](https://cve.now/CVE-2026-28627.md): In btm\_sec\_encrypt\_change of btm\_sec.cc, there is a possible downgrade attack due to a logic error in the code. (CVSS 4.3, Google Android) - [CVE-2026-28626](https://cve.now/CVE-2026-28626.md): In onCreate of SetupPassthroughActivity.java, there is a possible way to launch arbitrary activity due to Intent redirection . (CVSS 7.3, Google Android) - [CVE-2026-28624](https://cve.now/CVE-2026-28624.md): In multiple locations, there is a possible read/write access to files without the proper permissions due to a confused deputy. (CVSS 7.8, Google Android) - [CVE-2026-28623](https://cve.now/CVE-2026-28623.md): In writeToParcel of BleRssiRangingCapabilities.java, there is a possible way to obtain the Bluetooth MAC address due to a missing permission (CVSS 3.3, Google Android) - [CVE-2026-28622](https://cve.now/CVE-2026-28622.md): In getQueryBuilderInternal of MediaProvider.java, there is a possible way to retrieve location metadata due to a permissions bypass. (CVSS 3.3, Google Android) - [CVE-2026-28620](https://cve.now/CVE-2026-28620.md): In multiple locations, there is a possible unauthorized URI access due to a permissions bypass. (CVSS 7.8, Google Android) - [CVE-2026-28618](https://cve.now/CVE-2026-28618.md): In dec\_frm\_prepare of oapv.c, there is a possible OOB write due to a heap buffer overflow. (CVSS 8.8, Google Android) - [CVE-2026-28617](https://cve.now/CVE-2026-28617.md): In add of WifiNetworkSuggestionsManager.java, there is a possible persistent DOS due to resource exhaustion. (CVSS 5.5, Google Android) - [CVE-2026-28616](https://cve.now/CVE-2026-28616.md): In Setup Wizard, there is a possible way to force connection to a malicious network due to confused deputy. (CVSS 7.8, Google Android) - [CVE-2026-28614](https://cve.now/CVE-2026-28614.md): In onCreate of SlicePermissionActivity.java, there is a possible permission bypass due to a confused deputy. (CVSS 7.8, Google Android) - [CVE-2026-28613](https://cve.now/CVE-2026-28613.md): In initAppLinkTypeAndIntent of ChannelImpl.java, there is a possible launch an arbitrary intent due to improper input validation. (CVSS 7.3, Google Android) - [CVE-2026-28612](https://cve.now/CVE-2026-28612.md): In resolveActivity of ActivityStarter.java, there is a possible way to perform Intent Redirection attacks due to a logic error in the code. (CVSS 7.8, Google Android) - [CVE-2026-28611](https://cve.now/CVE-2026-28611.md): In multiple functions of NfcService.java, there is a possible silent payment session hijacking enablement due to a missing permission check. (CVSS 7.8, Google Android) - [CVE-2026-28609](https://cve.now/CVE-2026-28609.md): In read of MatroskaExtractor.cpp, there is a possible out-of-bounds write due to improper casting. (CVSS 8.8, Google Android) - [CVE-2026-28607](https://cve.now/CVE-2026-28607.md): In multiple functions in multiple locations, there is a possible background activity launch bypass due to a confused deputy. (CVSS 7.8, Google Android) - [CVE-2026-28606](https://cve.now/CVE-2026-28606.md): In handleBondStateChanged of AdapterService.java, there is a possible way to skip pairing due to a logic error in the code. (CVSS 9.8, Google Android) - [CVE-2026-28604](https://cve.now/CVE-2026-28604.md): In multiple locations, there is a possible use after free due to a race condition. (CVSS 7.5, Google Android) - [CVE-2026-28603](https://cve.now/CVE-2026-28603.md): In assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a possible read/write access to private files due to a confused (CVSS 7.8, Google Android) - [CVE-2026-28602](https://cve.now/CVE-2026-28602.md): In setClipboardAccessNotificationsEnabledForUser of ClipboardService.java, there is a possible mult-iuser isolation due to a logic error in (CVSS 7.8, Google Android) - [CVE-2026-28600](https://cve.now/CVE-2026-28600.md): In onCreate of PaymentDefaultDialog.java, there is a possible way to change default payment app due to a confused deputy. (CVSS 7.8, Google Android) - [CVE-2026-28599](https://cve.now/CVE-2026-28599.md): In addCreatorToken of ActivityManagerService.java, there is a possible Intent Redirection Bypass due to a logic error in the code. (CVSS 7.8, Google Android) - [CVE-2026-28596](https://cve.now/CVE-2026-28596.md): In parseInterventionFromXml of GameManagerService.java, there is a possible permanent denial of service due to resource exhaustion. (CVSS 5.5, Google Android) - [CVE-2026-28594](https://cve.now/CVE-2026-28594.md): In multiple locations, there is a possible use after free due to a logic error in the code. (CVSS 7.8, Google Android) - [CVE-2026-28593](https://cve.now/CVE-2026-28593.md): In getItemList of SettingsFragment.java, there is a possible user interaction bypass due to misleading or insufficient UI. (CVSS 7.8, Google Android) - [CVE-2026-28590](https://cve.now/CVE-2026-28590.md): In multiple locations, there is a possible improper encryption key validation due to a logic error in the code. (CVSS 7.8, Google Android) - [CVE-2026-28584](https://cve.now/CVE-2026-28584.md): In createSessionInternal of PackageInstallerService.java, there is a possible way to permanently DoS the device due to a logic error in the (CVSS 5.5, Google Android) - [CVE-2026-28583](https://cve.now/CVE-2026-28583.md): In validate\_camera\_metadata\_structure of camera\_metadata.c, there is a possible out of bounds write due to a logical error in the code. (CVSS 7.8, Google Android) - [CVE-2026-28582](https://cve.now/CVE-2026-28582.md): In onCreate of ConfirmDeviceCredentialActivity.java, there is a possible unauthorized access to and modification of device credentials due t (CVSS 3.3, Google Android) - [CVE-2026-28572](https://cve.now/CVE-2026-28572.md): In onCreate of InstallLaunch.kt, there is a possible misleading UI due to a tapjacking/overlay attack. (CVSS 7.8, Google Android) - [CVE-2026-0084](https://cve.now/CVE-2026-0084.md): In multiple functions of HostEmulationManager.java, there is a possible background activity launch due to a logic error in the code. (CVSS 7.8, Google Android) - [CVE-2026-0065](https://cve.now/CVE-2026-0065.md): In areBackgroundActivityStartsAllowed of BackgroundLaunchProcessController.java, there is a possible unintended way to launch activities in (CVSS 7.8, Google Android) - [CVE-2026-0054](https://cve.now/CVE-2026-0054.md): In isCallerAllowed of WalletContextualLocationsService.kt, there is a possible way to get wallet information due to a missing permission che (CVSS 3.3, Google Android) - [CVE-2026-86673](https://cve.now/CVE-2026-86673.md): ningzichun Student Management System Database Connection database.php mysqli\_connect hard-coded credentials (CVSS 6.9, ningzichun Student Management System) - [CVE-2026-86672](https://cve.now/CVE-2026-86672.md): ningzichun Student Management System Backup example.7z information disclosure (CVSS 6.9, ningzichun Student Management System) - [CVE-2026-81821](https://cve.now/CVE-2026-81821.md): AVEVA Pipeline Integrity Monitor Use of hard-coded cryptographic key (CVSS 8.3, AVEVA Pipeline Integrity Monitor) - [CVE-2026-81822](https://cve.now/CVE-2026-81822.md): AVEVA Pipeline Integrity Monitor Use of a Broken or Risky Cryptographic Algorithm (CVSS 8.3, AVEVA Pipeline Integrity Monitor) - [CVE-2026-86074](https://cve.now/CVE-2026-86074.md): n8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched Content (CVSS 5.9, n8n-io n8n · n8n) - [CVE-2026-81823](https://cve.now/CVE-2026-81823.md): AVEVA Pipeline Integrity Monitor Missing Authorization (CVSS 6.9, AVEVA Pipeline Integrity Monitor) - [CVE-2026-81824](https://cve.now/CVE-2026-81824.md): AVEVA Pipeline Integrity Monitor cross-site scripting (CVSS 6.3, AVEVA Pipeline Integrity Monitor) - [CVE-2026-86670](https://cve.now/CVE-2026-86670.md): aircheng-org iWebShop-5 Authentication Storage admin.php weak password hash (CVSS 6.3, aircheng-org iWebShop-5) - [CVE-2026-76196](https://cve.now/CVE-2026-76196.md): Photoshop Mobile | Session Fixation (CWE-384) (CVSS 7.4, Adobe Photoshop Android) - [CVE-2026-79904](https://cve.now/CVE-2026-79904.md): Photoshop Mobile | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) (CVSS 5.0, Adobe Photoshop Android) - [CVE-2026-48707](https://cve.now/CVE-2026-48707.md): InstantCMS vulnerable to SSRF via upload redirect bypass allows internal network service scanning (CVSS 3.1, instantsoft icms2) - [CVE-2026-62804](https://cve.now/CVE-2026-62804.md): Microsoft Word Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365 fo…) - [CVE-2026-84003](https://cve.now/CVE-2026-84003.md): Microsoft Authentication Library (MSAL) for Node.js Spoofing Vulnerability (CVSS 7.4, Microsoft Authentication Library) - [CVE-2026-83498](https://cve.now/CVE-2026-83498.md): Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-83501](https://cve.now/CVE-2026-83501.md): Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-85875](https://cve.now/CVE-2026-85875.md): Microsoft Office Excel Information Disclosure Vulnerability (CVSS 5.5, Microsoft 365 Apps for Enterprise · Microsoft Excel +1) - [CVE-2026-69806](https://cve.now/CVE-2026-69806.md): .NET Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +2) - [CVE-2026-84000](https://cve.now/CVE-2026-84000.md): Microsoft Graphics Component Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-83997](https://cve.now/CVE-2026-83997.md): Windows Message Queuing Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows) - [CVE-2026-83995](https://cve.now/CVE-2026-83995.md): Windows NTFS Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-83992](https://cve.now/CVE-2026-83992.md): Windows Imaging Component Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-83990](https://cve.now/CVE-2026-83990.md): Microsoft Graphics Component Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-83989](https://cve.now/CVE-2026-83989.md): Windows Services for NFS ONCRPC XDR Driver Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-83985](https://cve.now/CVE-2026-83985.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-83983](https://cve.now/CVE-2026-83983.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-83987](https://cve.now/CVE-2026-83987.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-83980](https://cve.now/CVE-2026-83980.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-83982](https://cve.now/CVE-2026-83982.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-83978](https://cve.now/CVE-2026-83978.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-83977](https://cve.now/CVE-2026-83977.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-83981](https://cve.now/CVE-2026-83981.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-83973](https://cve.now/CVE-2026-83973.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-70145](https://cve.now/CVE-2026-70145.md): Microsoft Windows Search Component Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-83968](https://cve.now/CVE-2026-83968.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-83972](https://cve.now/CVE-2026-83972.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-83970](https://cve.now/CVE-2026-83970.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-83967](https://cve.now/CVE-2026-83967.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-83954](https://cve.now/CVE-2026-83954.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-83971](https://cve.now/CVE-2026-83971.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69598](https://cve.now/CVE-2026-69598.md): Windows iSCSI Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-72965](https://cve.now/CVE-2026-72965.md): Windows WebClient Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69381](https://cve.now/CVE-2026-69381.md): Windows Storage Port Driver Information Disclosure Vulnerability (CVSS 4.6, Microsoft Windows) - [CVE-2026-69530](https://cve.now/CVE-2026-69530.md): Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows) - [CVE-2026-83949](https://cve.now/CVE-2026-83949.md): Microsoft Office Word Information Disclosure Vulnerability (CVSS 5.5, Microsoft 365 Apps for Enterprise · Microsoft Office +1) - [CVE-2026-83951](https://cve.now/CVE-2026-83951.md): Microsoft Office Word Information Disclosure Vulnerability (CVSS 5.5, Microsoft 365 Apps for Enterprise · Microsoft Office +1) - [CVE-2026-81963](https://cve.now/CVE-2026-81963.md): Windows Update Stack Elevation of Privilege Vulnerability (CVSS 7.8, KEV, Microsoft Windows) - [CVE-2026-83948](https://cve.now/CVE-2026-83948.md): Microsoft Azure CLI Remote Code Execution Vulnerability (CVSS 8.0, Microsoft Azure CLI) - [CVE-2026-77897](https://cve.now/CVE-2026-77897.md): Microsoft Power Automate Desktop Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Power Automate agent for virtual desktops · Micro…) - [CVE-2026-57099](https://cve.now/CVE-2026-57099.md): ASP.NET Core Denial of Service Vulnerability (CVSS 7.5, Microsoft AspNetCore.OData) - [CVE-2026-83939](https://cve.now/CVE-2026-83939.md): Windows Secure Kernel Mode Elevation of Privilege Vulnerability (CVSS 8.2, Microsoft Windows) - [CVE-2026-83940](https://cve.now/CVE-2026-83940.md): Windows Device Association Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-77906](https://cve.now/CVE-2026-77906.md): Visual Studio Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Visual Studio) - [CVE-2026-81948](https://cve.now/CVE-2026-81948.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1) - [CVE-2026-81950](https://cve.now/CVE-2026-81950.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1) - [CVE-2026-81949](https://cve.now/CVE-2026-81949.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1) - [CVE-2026-81953](https://cve.now/CVE-2026-81953.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1) - [CVE-2026-81959](https://cve.now/CVE-2026-81959.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1) - [CVE-2026-81952](https://cve.now/CVE-2026-81952.md): Microsoft Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office) - [CVE-2026-81951](https://cve.now/CVE-2026-81951.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1) - [CVE-2026-81955](https://cve.now/CVE-2026-81955.md): Windows Graphics Component Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office +1) - [CVE-2026-81388](https://cve.now/CVE-2026-81388.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1) - [CVE-2026-81957](https://cve.now/CVE-2026-81957.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1) - [CVE-2026-81395](https://cve.now/CVE-2026-81395.md): Microsoft Excel Information Disclosure Vulnerability (CVSS 5.5, Microsoft 365 Apps for Enterprise · Microsoft Excel +1) - [CVE-2026-81960](https://cve.now/CVE-2026-81960.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1) - [CVE-2026-81394](https://cve.now/CVE-2026-81394.md): Microsoft Excel Information Disclosure Vulnerability (CVSS 5.5, Microsoft 365 Apps for Enterprise · Microsoft Excel +1) - [CVE-2026-81389](https://cve.now/CVE-2026-81389.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.0, Microsoft 365 Apps for Enterprise · Microsoft Excel +1) - [CVE-2026-81400](https://cve.now/CVE-2026-81400.md): Microsoft Excel Information Disclosure Vulnerability (CVSS 5.5, Microsoft 365 Apps for Enterprise · Microsoft Excel +1) - [CVE-2026-81393](https://cve.now/CVE-2026-81393.md): Microsoft Excel Information Disclosure Vulnerability (CVSS 5.5, Microsoft 365 Apps for Enterprise · Microsoft Excel +1) - [CVE-2026-81956](https://cve.now/CVE-2026-81956.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1) - [CVE-2026-81397](https://cve.now/CVE-2026-81397.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1) - [CVE-2026-81392](https://cve.now/CVE-2026-81392.md): Microsoft Excel Information Disclosure Vulnerability (CVSS 5.5, Microsoft 365 Apps for Enterprise · Microsoft Excel +1) - [CVE-2026-81396](https://cve.now/CVE-2026-81396.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1) - [CVE-2026-81958](https://cve.now/CVE-2026-81958.md): Microsoft Excel Information Disclosure Vulnerability (CVSS 5.5, Microsoft 365 Apps for Enterprise · Microsoft Excel +1) - [CVE-2026-81401](https://cve.now/CVE-2026-81401.md): Microsoft Excel Information Disclosure Vulnerability (CVSS 5.5, Microsoft 365 Apps for Enterprise · Microsoft Excel +1) - [CVE-2026-81391](https://cve.now/CVE-2026-81391.md): Microsoft Excel Information Disclosure Vulnerability (CVSS 5.5, Microsoft 365 Apps for Enterprise · Microsoft Excel +1) - [CVE-2026-81399](https://cve.now/CVE-2026-81399.md): Microsoft Excel Information Disclosure Vulnerability (CVSS 5.5, Microsoft 365 Apps for Enterprise · Microsoft Excel +1) - [CVE-2026-81390](https://cve.now/CVE-2026-81390.md): Microsoft Excel Information Disclosure Vulnerability (CVSS 5.5, Microsoft 365 Apps for Enterprise · Microsoft Excel +1) - [CVE-2026-81954](https://cve.now/CVE-2026-81954.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1) - [CVE-2026-81387](https://cve.now/CVE-2026-81387.md): Microsoft Excel Information Disclosure Vulnerability (CVSS 5.5, Microsoft 365 Apps for Enterprise · Microsoft Excel +1) - [CVE-2026-81947](https://cve.now/CVE-2026-81947.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1) - [CVE-2026-81386](https://cve.now/CVE-2026-81386.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1) - [CVE-2026-81398](https://cve.now/CVE-2026-81398.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1) - [CVE-2026-81385](https://cve.now/CVE-2026-81385.md): Microsoft Office Publisher Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office +1) - [CVE-2026-81383](https://cve.now/CVE-2026-81383.md): Visual Studio Code Information Disclosure Vulnerability (CVSS 7.4, Microsoft Visual Studio Code) - [CVE-2026-81354](https://cve.now/CVE-2026-81354.md): Windows Hello Elevation of Privilege Vulnerability (CVSS 8.2, Microsoft Windows) - [CVE-2026-81353](https://cve.now/CVE-2026-81353.md): HEIF Image Extensions Remote Code Execution Vulnerability (CVSS 7.8, Microsoft HEIF Image Extension) - [CVE-2026-81352](https://cve.now/CVE-2026-81352.md): Web Media Extensions Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Web Media Extensions) - [CVE-2026-80096](https://cve.now/CVE-2026-80096.md): Windows Remote Desktop Services Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-80082](https://cve.now/CVE-2026-80082.md): Microsoft Office Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office) - [CVE-2026-80081](https://cve.now/CVE-2026-80081.md): Microsoft Office PowerPoint Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise) - [CVE-2026-80090](https://cve.now/CVE-2026-80090.md): Microsoft Office Word Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office +1) - [CVE-2026-80089](https://cve.now/CVE-2026-80089.md): Microsoft Office Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office) - [CVE-2026-80091](https://cve.now/CVE-2026-80091.md): Microsoft Office Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office) - [CVE-2026-80088](https://cve.now/CVE-2026-80088.md): Microsoft Office Word Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office) - [CVE-2026-80085](https://cve.now/CVE-2026-80085.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office +1) - [CVE-2026-80087](https://cve.now/CVE-2026-80087.md): Microsoft Office Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office) - [CVE-2026-80080](https://cve.now/CVE-2026-80080.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office +1) - [CVE-2026-80086](https://cve.now/CVE-2026-80086.md): Microsoft Office PowerPoint Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office) - [CVE-2026-78525](https://cve.now/CVE-2026-78525.md): Microsoft Office Outlook Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office +1) - [CVE-2026-80084](https://cve.now/CVE-2026-80084.md): Microsoft Office Outlook Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office) - [CVE-2026-78526](https://cve.now/CVE-2026-78526.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office) - [CVE-2026-80076](https://cve.now/CVE-2026-80076.md): Microsoft Office Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office) - [CVE-2026-80078](https://cve.now/CVE-2026-80078.md): Microsoft Office Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office) - [CVE-2026-78524](https://cve.now/CVE-2026-78524.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office) - [CVE-2026-78520](https://cve.now/CVE-2026-78520.md): Microsoft Office Outlook Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office +1) - [CVE-2026-78522](https://cve.now/CVE-2026-78522.md): Microsoft Office Word Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office +1) - [CVE-2026-80073](https://cve.now/CVE-2026-80073.md): Microsoft Office Outlook Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office +1) - [CVE-2026-78521](https://cve.now/CVE-2026-78521.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office +1) - [CVE-2026-80079](https://cve.now/CVE-2026-80079.md): Microsoft Office Word Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office +1) - [CVE-2026-78519](https://cve.now/CVE-2026-78519.md): Microsoft Office Outlook Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office +1) - [CVE-2026-77481](https://cve.now/CVE-2026-77481.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SQL Server) - [CVE-2026-67645](https://cve.now/CVE-2026-67645.md): Microsoft SQL Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft SQL Server) - [CVE-2026-67624](https://cve.now/CVE-2026-67624.md): Microsoft SQL Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft SQL Server) - [CVE-2026-78516](https://cve.now/CVE-2026-78516.md): Windows Storage Information Disclosure Vulnerability (CVSS 4.3, Microsoft Windows) - [CVE-2026-78503](https://cve.now/CVE-2026-78503.md): Microsoft Office Word Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office +1) - [CVE-2026-78514](https://cve.now/CVE-2026-78514.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office +1) - [CVE-2026-78512](https://cve.now/CVE-2026-78512.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office) - [CVE-2026-78506](https://cve.now/CVE-2026-78506.md): Microsoft Office Word Information Disclosure Vulnerability (CVSS 5.5, Microsoft 365 Apps for Enterprise · Microsoft Office +1) - [CVE-2026-78507](https://cve.now/CVE-2026-78507.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office) - [CVE-2026-67369](https://cve.now/CVE-2026-67369.md): Microsoft SQL Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft SQL Server) - [CVE-2026-66819](https://cve.now/CVE-2026-66819.md): Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft SQL Server) - [CVE-2026-78464](https://cve.now/CVE-2026-78464.md): Windows MIDI Service Module Elevation of Privileges Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69595](https://cve.now/CVE-2026-69595.md): Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows Server) - [CVE-2026-78462](https://cve.now/CVE-2026-78462.md): Visual Studio Code Security Feature Bypass Vulnerability (CVSS 8.8, Microsoft Visual Studio Code) - [CVE-2026-78457](https://cve.now/CVE-2026-78457.md): Windows Security Health Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-78456](https://cve.now/CVE-2026-78456.md): SQL Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SQL Server) - [CVE-2026-78454](https://cve.now/CVE-2026-78454.md): Windows CD-ROM Driver Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-78452](https://cve.now/CVE-2026-78452.md): Microsoft Windows SCSI Class System File Information Disclosure Vulnerability (CVSS 4.6, Microsoft Windows) - [CVE-2026-78455](https://cve.now/CVE-2026-78455.md): Xbox Information Disclosure Vulnerability (CVSS 4.3, Microsoft Windows) - [CVE-2026-78453](https://cve.now/CVE-2026-78453.md): Microsoft Windows SCSI Class System File Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows) - [CVE-2026-78451](https://cve.now/CVE-2026-78451.md): Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability (CVSS 6.8, Microsoft Windows) - [CVE-2026-78448](https://cve.now/CVE-2026-78448.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-78447](https://cve.now/CVE-2026-78447.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-78450](https://cve.now/CVE-2026-78450.md): Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows) - [CVE-2026-78444](https://cve.now/CVE-2026-78444.md): Microsoft Failover Cluster Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows) - [CVE-2026-78449](https://cve.now/CVE-2026-78449.md): Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows) - [CVE-2026-78446](https://cve.now/CVE-2026-78446.md): Windows Distributed File System (DFS) Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-78445](https://cve.now/CVE-2026-78445.md): Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows Server) - [CVE-2026-78441](https://cve.now/CVE-2026-78441.md): Windows OLE DB Information Disclosure Vulnerability (CVSS 6.5, Microsoft SQL Server) - [CVE-2026-78442](https://cve.now/CVE-2026-78442.md): Windows OLE DB Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SQL Server) - [CVE-2026-69562](https://cve.now/CVE-2026-69562.md): Microsoft SQL Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft SQL Server) - [CVE-2026-77911](https://cve.now/CVE-2026-77911.md): Microsoft Office Word Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office +1) - [CVE-2026-77905](https://cve.now/CVE-2026-77905.md): Windows Management Instrumentation Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69854](https://cve.now/CVE-2026-69854.md): Spring Cloud Azure Elevation of Privilege Vulnerability (CVSS 9.0, Microsoft Spring Cloud Azure) - [CVE-2026-77901](https://cve.now/CVE-2026-77901.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office +1) - [CVE-2026-77488](https://cve.now/CVE-2026-77488.md): Microsoft SQL Server Information Disclosure Vulnerability (CVSS 5.5, Microsoft SQL Server) - [CVE-2026-77486](https://cve.now/CVE-2026-77486.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SQL Server) - [CVE-2026-77485](https://cve.now/CVE-2026-77485.md): SQL Server Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft SQL Server) - [CVE-2026-77487](https://cve.now/CVE-2026-77487.md): SQL Server Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft SQL Server) - [CVE-2026-77484](https://cve.now/CVE-2026-77484.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SQL Server) - [CVE-2026-77483](https://cve.now/CVE-2026-77483.md): SQL Server Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft SQL Server) - [CVE-2026-77480](https://cve.now/CVE-2026-77480.md): SQL Server Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft SQL Server) - [CVE-2026-73028](https://cve.now/CVE-2026-73028.md): SQL Server Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft SQL Server) - [CVE-2026-71328](https://cve.now/CVE-2026-71328.md): .NET and Visual Studio Remote Code Execution Vulnerability (CVSS 8.8, Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +6) - [CVE-2026-73017](https://cve.now/CVE-2026-73017.md): Graphics Kernel Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-73016](https://cve.now/CVE-2026-73016.md): DirectWrite Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-73025](https://cve.now/CVE-2026-73025.md): Windows iSCSI Security Feature Bypass Vulnerability (CVSS 9.8, Microsoft Windows) - [CVE-2026-73013](https://cve.now/CVE-2026-73013.md): Windows Imaging Component Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Office for Android · Microsoft Windows) - [CVE-2026-73023](https://cve.now/CVE-2026-73023.md): Windows Imaging Component Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-73010](https://cve.now/CVE-2026-73010.md): Microsoft Failover Cluster Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows) - [CVE-2026-73006](https://cve.now/CVE-2026-73006.md): DirectWrite Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-73009](https://cve.now/CVE-2026-73009.md): Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows) - [CVE-2026-73012](https://cve.now/CVE-2026-73012.md): Windows Management Services Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-73004](https://cve.now/CVE-2026-73004.md): Windows Autopilot Tampering Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-73026](https://cve.now/CVE-2026-73026.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-73007](https://cve.now/CVE-2026-73007.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-73024](https://cve.now/CVE-2026-73024.md): Windows Services for NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-73005](https://cve.now/CVE-2026-73005.md): Windows Authentication Methods Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-73008](https://cve.now/CVE-2026-73008.md): Windows Biometric Service Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-73014](https://cve.now/CVE-2026-73014.md): Data Sharing Service Client Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-73011](https://cve.now/CVE-2026-73011.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-73022](https://cve.now/CVE-2026-73022.md): Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-73003](https://cve.now/CVE-2026-73003.md): Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-73015](https://cve.now/CVE-2026-73015.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-73021](https://cve.now/CVE-2026-73021.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-73001](https://cve.now/CVE-2026-73001.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-73000](https://cve.now/CVE-2026-73000.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-73020](https://cve.now/CVE-2026-73020.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-73002](https://cve.now/CVE-2026-73002.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-72999](https://cve.now/CVE-2026-72999.md): Windows USB Hub Driver Elevation of Privilege Vulnerability (CVSS 6.8, Microsoft Windows) - [CVE-2026-73019](https://cve.now/CVE-2026-73019.md): Windows URL Moniker Security Feature Bypass Vulnerability (CVSS 4.3, Microsoft Windows) - [CVE-2026-73018](https://cve.now/CVE-2026-73018.md): Graphic Fonts Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-72997](https://cve.now/CVE-2026-72997.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-72996](https://cve.now/CVE-2026-72996.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-72994](https://cve.now/CVE-2026-72994.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-72993](https://cve.now/CVE-2026-72993.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-72992](https://cve.now/CVE-2026-72992.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-72991](https://cve.now/CVE-2026-72991.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-72990](https://cve.now/CVE-2026-72990.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-72988](https://cve.now/CVE-2026-72988.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-72995](https://cve.now/CVE-2026-72995.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-72987](https://cve.now/CVE-2026-72987.md): Windows DNS Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows) - [CVE-2026-72989](https://cve.now/CVE-2026-72989.md): Windows Failover Cluster Information Disclosure Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-69304](https://cve.now/CVE-2026-69304.md): ASP.NET Core Denial of Service Vulnerability (CVSS 5.9, Microsoft .NET 10.0 runtime · Microsoft .NET 8.0 runtime +7) - [CVE-2026-69465](https://cve.now/CVE-2026-69465.md): Microsoft Office SharePoint Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SharePoint Server Subscription Edition) - [CVE-2026-65812](https://cve.now/CVE-2026-65812.md): Microsoft Teams for Android Information Disclosure Vulnerability (CVSS 6.8, Microsoft Teams for Android) - [CVE-2026-65772](https://cve.now/CVE-2026-65772.md): Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Dynamics 365 (on-premises)) - [CVE-2026-72985](https://cve.now/CVE-2026-72985.md): Volume Shadow Copy Elevation of Privilege Vulnerability (CVSS 6.8, Microsoft Windows) - [CVE-2026-72976](https://cve.now/CVE-2026-72976.md): Microsoft Office Word Information Disclosure Vulnerability (CVSS 5.0, Microsoft 365 Apps for Enterprise · Microsoft Office +1) - [CVE-2026-72975](https://cve.now/CVE-2026-72975.md): Microsoft Office PowerPoint Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office +1) - [CVE-2026-72977](https://cve.now/CVE-2026-72977.md): Microsoft Office PowerPoint Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office +1) - [CVE-2026-72974](https://cve.now/CVE-2026-72974.md): Microsoft Office Excel Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office) - [CVE-2026-72973](https://cve.now/CVE-2026-72973.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office +1) - [CVE-2026-72938](https://cve.now/CVE-2026-72938.md): Microsoft Office PowerPoint Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office) - [CVE-2026-72972](https://cve.now/CVE-2026-72972.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office +1) - [CVE-2026-72956](https://cve.now/CVE-2026-72956.md): Microsoft Office PowerPoint Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office) - [CVE-2026-70570](https://cve.now/CVE-2026-70570.md): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-70296](https://cve.now/CVE-2026-70296.md): Windows Imaging Component Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows) - [CVE-2026-70203](https://cve.now/CVE-2026-70203.md): Windows Media Player Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-69906](https://cve.now/CVE-2026-69906.md): Windows Secure Kernel Mode Elevation of Privilege Vulnerability (CVSS 8.2, Microsoft Windows) - [CVE-2026-69904](https://cve.now/CVE-2026-69904.md): Microsoft Office SharePoint Information Disclosure Vulnerability (CVSS 3.5, Microsoft SharePoint Server Subscription Edition) - [CVE-2026-69441](https://cve.now/CVE-2026-69441.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-58649](https://cve.now/CVE-2026-58649.md): .NET Information Disclosure Vulnerability (CVSS 6.5, Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +3) - [CVE-2026-69805](https://cve.now/CVE-2026-69805.md): .NET Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft Visual Studio · Microsoft.Diagnostics.Runtime) - [CVE-2026-69439](https://cve.now/CVE-2026-69439.md): .NET and Visual Studio Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +6) - [CVE-2026-69632](https://cve.now/CVE-2026-69632.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office) - [CVE-2026-69626](https://cve.now/CVE-2026-69626.md): Microsoft Office Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office) - [CVE-2026-69477](https://cve.now/CVE-2026-69477.md): Microsoft Office Access Remote Code Execution Vulnerability (CVSS 7.3, Microsoft 365 Apps for Enterprise · Microsoft Access +1) - [CVE-2026-69629](https://cve.now/CVE-2026-69629.md): Microsoft Office Outlook Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office +1) - [CVE-2026-69636](https://cve.now/CVE-2026-69636.md): Microsoft Office SharePoint Information Disclosure Vulnerability (CVSS 6.5, Microsoft SharePoint Server Subscription Edition) - [CVE-2026-69614](https://cve.now/CVE-2026-69614.md): Microsoft Office Access Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Access +1) - [CVE-2026-69464](https://cve.now/CVE-2026-69464.md): Microsoft Office SharePoint Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft SharePoint Server Subscription Edition) - [CVE-2026-69615](https://cve.now/CVE-2026-69615.md): Microsoft Office SharePoint Spoofing Vulnerability (CVSS 3.5, Microsoft SharePoint Server Subscription Edition) - [CVE-2026-69442](https://cve.now/CVE-2026-69442.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office) - [CVE-2026-69601](https://cve.now/CVE-2026-69601.md): Microsoft Windows Media Foundation Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-69590](https://cve.now/CVE-2026-69590.md): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows) - [CVE-2026-69607](https://cve.now/CVE-2026-69607.md): Windows Deployment Services Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-69575](https://cve.now/CVE-2026-69575.md): Windows Storage Spaces Controller Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69568](https://cve.now/CVE-2026-69568.md): Storage Spaces Controller Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-69593](https://cve.now/CVE-2026-69593.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69564](https://cve.now/CVE-2026-69564.md): Windows Online Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69560](https://cve.now/CVE-2026-69560.md): Windows Work Folder Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69559](https://cve.now/CVE-2026-69559.md): Microsoft Teams for Android Information Disclosure Vulnerability (CVSS 5.8, Microsoft Teams for Android) - [CVE-2026-69510](https://cve.now/CVE-2026-69510.md): Windows DHCP Server Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows) - [CVE-2026-69499](https://cve.now/CVE-2026-69499.md): Windows Imaging Component Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Office 365 for Mac · Microsoft Office for Andr… +1) - [CVE-2026-69490](https://cve.now/CVE-2026-69490.md): Windows USB Mass Storage Class Driver Elevation of Privilege Vulnerability (CVSS 6.8, Microsoft Windows) - [CVE-2026-69489](https://cve.now/CVE-2026-69489.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69426](https://cve.now/CVE-2026-69426.md): Windows VOLSNAP.SYS Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69417](https://cve.now/CVE-2026-69417.md): Microsoft Office SharePoint Spoofing Vulnerability (CVSS 7.3, Microsoft SharePoint Server Subscription Edition) - [CVE-2026-69409](https://cve.now/CVE-2026-69409.md): Microsoft Office SharePoint Information Disclosure Vulnerability (CVSS 6.5, Microsoft SharePoint Server Subscription Edition) - [CVE-2026-69402](https://cve.now/CVE-2026-69402.md): Microsoft Office SharePoint Spoofing Vulnerability (CVSS 7.3, Microsoft SharePoint Server Subscription Edition) - [CVE-2026-69397](https://cve.now/CVE-2026-69397.md): Microsoft OpenSSH for Windows Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-69395](https://cve.now/CVE-2026-69395.md): Active Directory Certificate Services (AD CS) Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows) - [CVE-2026-69392](https://cve.now/CVE-2026-69392.md): Windows Shell Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69910](https://cve.now/CVE-2026-69910.md): Windows Hyper-V Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows) - [CVE-2026-69352](https://cve.now/CVE-2026-69352.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69311](https://cve.now/CVE-2026-69311.md): Windows Audio Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69298](https://cve.now/CVE-2026-69298.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69323](https://cve.now/CVE-2026-69323.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69334](https://cve.now/CVE-2026-69334.md): Windows Volume Manager Extension Driver Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-69291](https://cve.now/CVE-2026-69291.md): Windows Volume Manager Extension Driver Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-69290](https://cve.now/CVE-2026-69290.md): Windows Storage Spaces Controller Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69309](https://cve.now/CVE-2026-69309.md): Windows Print Spooler Components Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69287](https://cve.now/CVE-2026-69287.md): Windows Remote Desktop Services Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-68896](https://cve.now/CVE-2026-68896.md): Microsoft Windows Search Component Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-72967](https://cve.now/CVE-2026-72967.md): Windows Network Connection Broker Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-72966](https://cve.now/CVE-2026-72966.md): Windows Remote Access Connection Manager Tampering Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-72964](https://cve.now/CVE-2026-72964.md): Windows Internet Connection Sharing (ICS) Tampering Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-72961](https://cve.now/CVE-2026-72961.md): Windows Hyper-V Elevation of Privilege Vulnerability (CVSS 8.2, Microsoft Windows) - [CVE-2026-72960](https://cve.now/CVE-2026-72960.md): Windows Media Player Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-72954](https://cve.now/CVE-2026-72954.md): Windows Deployment Services Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-72959](https://cve.now/CVE-2026-72959.md): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-72950](https://cve.now/CVE-2026-72950.md): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-72957](https://cve.now/CVE-2026-72957.md): Windows Deployment Services Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-72942](https://cve.now/CVE-2026-72942.md): Windows Spaceport.sys Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows) - [CVE-2026-72941](https://cve.now/CVE-2026-72941.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-72953](https://cve.now/CVE-2026-72953.md): Windows USB Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-72952](https://cve.now/CVE-2026-72952.md): Windows Spaceport.sys Remote Code Execution Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-72932](https://cve.now/CVE-2026-72932.md): Windows Message Queuing Queue Manager Information Disclosure Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-72933](https://cve.now/CVE-2026-72933.md): Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-72936](https://cve.now/CVE-2026-72936.md): Windows SMB Client Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows) - [CVE-2026-72931](https://cve.now/CVE-2026-72931.md): Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability (CVSS 4.7, Microsoft Windows) - [CVE-2026-72928](https://cve.now/CVE-2026-72928.md): Windows DNS Server Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows Server) - [CVE-2026-72927](https://cve.now/CVE-2026-72927.md): Winsock Elevation of Privilege Vulnerability (CVSS 6.7, Microsoft Windows) - [CVE-2026-71352](https://cve.now/CVE-2026-71352.md): Windows Remote Access Connection Manager Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-71342](https://cve.now/CVE-2026-71342.md): Windows Remote Access Connection Manager Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-71349](https://cve.now/CVE-2026-71349.md): Windows Spaceport.sys Remote Code Execution Vulnerability (CVSS 6.8, Microsoft Windows) - [CVE-2026-70583](https://cve.now/CVE-2026-70583.md): Windows Core Messaging Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-70579](https://cve.now/CVE-2026-70579.md): Windows Mobile Broadband Information Disclosure Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-70578](https://cve.now/CVE-2026-70578.md): Windows Credential Guard Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-70577](https://cve.now/CVE-2026-70577.md): Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-70581](https://cve.now/CVE-2026-70581.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-70575](https://cve.now/CVE-2026-70575.md): Windows Schannel Denial of Service Vulnerability (CVSS 5.3, Microsoft Windows) - [CVE-2026-70572](https://cve.now/CVE-2026-70572.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-70573](https://cve.now/CVE-2026-70573.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-70569](https://cve.now/CVE-2026-70569.md): Windows Spaceport.sys Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-70568](https://cve.now/CVE-2026-70568.md): Windows Defender Firewall Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-70567](https://cve.now/CVE-2026-70567.md): Windows Display Enhancement Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-70574](https://cve.now/CVE-2026-70574.md): Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability (CVSS 7.8, Microsoft Windows) - [CVE-2026-70565](https://cve.now/CVE-2026-70565.md): Windows AF\_UNIX Socket Provider Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-47297](https://cve.now/CVE-2026-47297.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 8.1, Microsoft SQL Server) - [CVE-2026-64918](https://cve.now/CVE-2026-64918.md): Microsoft Office Spoofing Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise) - [CVE-2026-58599](https://cve.now/CVE-2026-58599.md): HEVC Video Extensions Remote Code Execution Vulnerability (CVSS 7.8, Microsoft HEVC Video Extensions) - [CVE-2026-69784](https://cve.now/CVE-2026-69784.md): Windows Hello Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-69820](https://cve.now/CVE-2026-69820.md): Windows Hello Elevation of Privilege Vulnerability (CVSS 8.2, Microsoft Windows) - [CVE-2026-69864](https://cve.now/CVE-2026-69864.md): Windows Hello Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69725](https://cve.now/CVE-2026-69725.md): Windows Hello Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69874](https://cve.now/CVE-2026-69874.md): Windows ALPC Elevation of Privilege Vulnerability (CVSS 8.2, Microsoft Windows) - [CVE-2026-69858](https://cve.now/CVE-2026-69858.md): Windows DNS Server Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows Server) - [CVE-2026-69710](https://cve.now/CVE-2026-69710.md): Windows Hello Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-69813](https://cve.now/CVE-2026-69813.md): Windows DNS Server Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows) - [CVE-2026-69799](https://cve.now/CVE-2026-69799.md): Windows Hello Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69786](https://cve.now/CVE-2026-69786.md): Windows Text Shaping Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows) - [CVE-2026-69852](https://cve.now/CVE-2026-69852.md): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-69769](https://cve.now/CVE-2026-69769.md): Windows HTTP Print Provider Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows) - [CVE-2026-69829](https://cve.now/CVE-2026-69829.md): Windows Shell Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows) - [CVE-2026-69845](https://cve.now/CVE-2026-69845.md): Windows DHCP Server Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows) - [CVE-2026-69876](https://cve.now/CVE-2026-69876.md): Windows DHCP Server Remote Code Execution Vulnerability (CVSS 8.0, Microsoft Windows) - [CVE-2026-69781](https://cve.now/CVE-2026-69781.md): Windows DHCP Client Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows) - [CVE-2026-69807](https://cve.now/CVE-2026-69807.md): PowerShell Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows) - [CVE-2026-69777](https://cve.now/CVE-2026-69777.md): Windows DHCP Client Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows) - [CVE-2026-69760](https://cve.now/CVE-2026-69760.md): Windows Kerberos Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-69824](https://cve.now/CVE-2026-69824.md): Microsoft Standard XPS Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows) - [CVE-2026-69911](https://cve.now/CVE-2026-69911.md): Microsoft Windows Search Component Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69847](https://cve.now/CVE-2026-69847.md): Windows DHCP Server Remote Code Execution Vulnerability (CVSS 8.0, Microsoft Windows) - [CVE-2026-69891](https://cve.now/CVE-2026-69891.md): Windows Media Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69900](https://cve.now/CVE-2026-69900.md): Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69818](https://cve.now/CVE-2026-69818.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69907](https://cve.now/CVE-2026-69907.md): Windows Enterprise App Management Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69785](https://cve.now/CVE-2026-69785.md): Windows Smart Card Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69878](https://cve.now/CVE-2026-69878.md): Windows DHCP Server Remote Code Execution Vulnerability (CVSS 6.4, Microsoft Windows) - [CVE-2026-69708](https://cve.now/CVE-2026-69708.md): Windows Web Platform Storage Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69761](https://cve.now/CVE-2026-69761.md): Windows TCP/IP Elevation of Privilege Vulnerability (CVSS 7.1, Microsoft Windows) - [CVE-2026-69853](https://cve.now/CVE-2026-69853.md): Win32k Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows) - [CVE-2026-69792](https://cve.now/CVE-2026-69792.md): Windows Win32K Security Feature Bypass Vulnerability (CVSS 4.7, Microsoft Windows) - [CVE-2026-69809](https://cve.now/CVE-2026-69809.md): Windows Active Directory Domain Services Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-69672](https://cve.now/CVE-2026-69672.md): Windows DNS Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-69895](https://cve.now/CVE-2026-69895.md): Windows Spaceport.sys Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows) - [CVE-2026-69779](https://cve.now/CVE-2026-69779.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69921](https://cve.now/CVE-2026-69921.md): Windows Print Spooler Components Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69793](https://cve.now/CVE-2026-69793.md): Windows TCP/IP Security Feature Bypass Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-69713](https://cve.now/CVE-2026-69713.md): Windows Secure Boot Security Feature Bypass Vulnerability (CVSS 4.4, Microsoft Windows) - [CVE-2026-69768](https://cve.now/CVE-2026-69768.md): Windows RNDIS Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows) - [CVE-2026-69706](https://cve.now/CVE-2026-69706.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.1, Microsoft Windows) - [CVE-2026-69794](https://cve.now/CVE-2026-69794.md): Windows Encrypting File System (EFS) Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-69773](https://cve.now/CVE-2026-69773.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows) - [CVE-2026-69731](https://cve.now/CVE-2026-69731.md): HID Class Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69814](https://cve.now/CVE-2026-69814.md): Windows Credential Providers Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69692](https://cve.now/CVE-2026-69692.md): Windows Audio Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69801](https://cve.now/CVE-2026-69801.md): Windows Audio Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69738](https://cve.now/CVE-2026-69738.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69826](https://cve.now/CVE-2026-69826.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows) - [CVE-2026-69727](https://cve.now/CVE-2026-69727.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows) - [CVE-2026-76191](https://cve.now/CVE-2026-76191.md): Animate | Improper Control of Generation of Code ('Code Injection') (CWE-94) (CVSS 8.2, Adobe Animate) - [CVE-2026-69841](https://cve.now/CVE-2026-69841.md): Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69688](https://cve.now/CVE-2026-69688.md): Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability (CVSS 7.1, Microsoft Windows) - [CVE-2026-69674](https://cve.now/CVE-2026-69674.md): Windows Modern Device Management (MDM) Security Feature Bypass Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-69866](https://cve.now/CVE-2026-69866.md): Windows Device Association Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69679](https://cve.now/CVE-2026-69679.md): Windows DHCP Server Denial of Service Vulnerability (CVSS 5.7, Microsoft Windows) - [CVE-2026-69844](https://cve.now/CVE-2026-69844.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69709](https://cve.now/CVE-2026-69709.md): Windows NTFS Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69714](https://cve.now/CVE-2026-69714.md): Windows Device Association Service Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows) - [CVE-2026-69816](https://cve.now/CVE-2026-69816.md): Windows Accounts Control Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69654](https://cve.now/CVE-2026-69654.md): Windows Accounts Control Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69834](https://cve.now/CVE-2026-69834.md): Windows ALPC Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69652](https://cve.now/CVE-2026-69652.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69707](https://cve.now/CVE-2026-69707.md): Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69791](https://cve.now/CVE-2026-69791.md): Windows Device Association Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69687](https://cve.now/CVE-2026-69687.md): Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69643](https://cve.now/CVE-2026-69643.md): Windows Spaceport.sys Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows) - [CVE-2026-69803](https://cve.now/CVE-2026-69803.md): Windows DHCP Server Information Disclosure Vulnerability (CVSS 5.9, Microsoft Windows) - [CVE-2026-69685](https://cve.now/CVE-2026-69685.md): Windows Kerberos Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69682](https://cve.now/CVE-2026-69682.md): Windows Host Guardian Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69637](https://cve.now/CVE-2026-69637.md): Windows DHCP Server Denial of Service Vulnerability (CVSS 5.7, Microsoft Windows) - [CVE-2026-69715](https://cve.now/CVE-2026-69715.md): Windows Direct Show Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows) - [CVE-2026-69821](https://cve.now/CVE-2026-69821.md): Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69720](https://cve.now/CVE-2026-69720.md): Windows MIDI Service Module Elevation of Privileges Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69620](https://cve.now/CVE-2026-69620.md): Windows DHCP Server Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows) - [CVE-2026-69619](https://cve.now/CVE-2026-69619.md): Windows exFAT File System Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows) - [CVE-2026-69817](https://cve.now/CVE-2026-69817.md): Windows Bluetooth Port Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69680](https://cve.now/CVE-2026-69680.md): Windows DNS Spoofing Vulnerability (CVSS 8.1, Microsoft Windows) - [CVE-2026-69881](https://cve.now/CVE-2026-69881.md): Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-69669](https://cve.now/CVE-2026-69669.md): Windows Kernel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-54611](https://cve.now/CVE-2026-54611.md): InstantCMS has Remote Code Execution in package installer (CVSS 5.5, instantsoft icms2) - [CVE-2026-69613](https://cve.now/CVE-2026-69613.md): Windows Image Acquisition Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69610](https://cve.now/CVE-2026-69610.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Office 365 for Mac · Microsoft Office LTSC for Mac) - [CVE-2026-69630](https://cve.now/CVE-2026-69630.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69616](https://cve.now/CVE-2026-69616.md): Windows Remote Desktop Services Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-69617](https://cve.now/CVE-2026-69617.md): Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69611](https://cve.now/CVE-2026-69611.md): Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69602](https://cve.now/CVE-2026-69602.md): Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability (CVSS 7.1, Microsoft Windows) - [CVE-2026-69597](https://cve.now/CVE-2026-69597.md): Windows HTTP.sys Elevation of Privilege Vulnerability (CVSS 7.1, Microsoft Windows) - [CVE-2026-69624](https://cve.now/CVE-2026-69624.md): Active Directory Certificate Services (AD CS) Tampering Vulnerability (CVSS 6.5, Microsoft Windows) - [CVE-2026-69618](https://cve.now/CVE-2026-69618.md): Windows SMB Client Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-69625](https://cve.now/CVE-2026-69625.md): Connected User Experiences and Telemetry Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows) - [CVE-2026-69606](https://cve.now/CVE-2026-69606.md): Windows Shell Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69600](https://cve.now/CVE-2026-69600.md): Microsoft Windows Search Component Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69584](https://cve.now/CVE-2026-69584.md): Windows USB Video Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69592](https://cve.now/CVE-2026-69592.md): Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69567](https://cve.now/CVE-2026-69567.md): Windows NTFS Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69566](https://cve.now/CVE-2026-69566.md): Windows NTFS Remote Code Execution Vulnerability (CVSS 6.8, Microsoft Windows) - [CVE-2026-69612](https://cve.now/CVE-2026-69612.md): Windows Error Reporting Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69586](https://cve.now/CVE-2026-69586.md): Microsoft Windows PDF Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows) - [CVE-2026-69581](https://cve.now/CVE-2026-69581.md): Windows Device Association Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69569](https://cve.now/CVE-2026-69569.md): Windows Print Spooler Components Denial of Service Vulnerability (CVSS 5.7, Microsoft Windows) - [CVE-2026-69591](https://cve.now/CVE-2026-69591.md): Windows NTFS Information Disclosure Vulnerability (CVSS 5.7, Microsoft Windows) - [CVE-2026-69542](https://cve.now/CVE-2026-69542.md): Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69538](https://cve.now/CVE-2026-69538.md): Windows Spaceport.sys Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69535](https://cve.now/CVE-2026-69535.md): Windows Spaceport.sys Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69571](https://cve.now/CVE-2026-69571.md): Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69546](https://cve.now/CVE-2026-69546.md): Windows Active Directory Domain Services Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows) - [CVE-2026-69536](https://cve.now/CVE-2026-69536.md): Remote Desktop Services Remote Code Execution Vulnerability (CVSS 7.1, Microsoft Windows) - [CVE-2026-69547](https://cve.now/CVE-2026-69547.md): Windows DHCP Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-69599](https://cve.now/CVE-2026-69599.md): Remote Desktop Services Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-69509](https://cve.now/CVE-2026-69509.md): Role: Windows Fax Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69508](https://cve.now/CVE-2026-69508.md): Windows MIDI Service Module Elevation of Privileges Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69503](https://cve.now/CVE-2026-69503.md): Windows USB Driver Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows) - [CVE-2026-69498](https://cve.now/CVE-2026-69498.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69512](https://cve.now/CVE-2026-69512.md): Windows Spaceport.sys Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows) - [CVE-2026-69497](https://cve.now/CVE-2026-69497.md): Windows DHCP Server Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows) - [CVE-2026-69511](https://cve.now/CVE-2026-69511.md): Microsoft Windows Media Foundation Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-69493](https://cve.now/CVE-2026-69493.md): Windows Event Logging Service Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows) - [CVE-2026-69488](https://cve.now/CVE-2026-69488.md): Windows Device Association Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69578](https://cve.now/CVE-2026-69578.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69483](https://cve.now/CVE-2026-69483.md): Windows Image Acquisition Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows) - [CVE-2026-69480](https://cve.now/CVE-2026-69480.md): Windows Partition Management Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69561](https://cve.now/CVE-2026-69561.md): Windows CD-ROM Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69478](https://cve.now/CVE-2026-69478.md): Windows Device Association Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69482](https://cve.now/CVE-2026-69482.md): Windows Error Reporting Tampering Vulnerability (CVSS 7.1, Microsoft Windows) - [CVE-2026-69474](https://cve.now/CVE-2026-69474.md): Windows Overlay Filter Information Disclosure Vulnerability (CVSS 4.8, Microsoft Windows) - [CVE-2026-69467](https://cve.now/CVE-2026-69467.md): Microsoft Graphics Component Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69460](https://cve.now/CVE-2026-69460.md): Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability (CVSS 7.1, Microsoft Windows) - [CVE-2026-69459](https://cve.now/CVE-2026-69459.md): Windows Power Dependency Coordinator Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69456](https://cve.now/CVE-2026-69456.md): Microsoft Windows Speech Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69453](https://cve.now/CVE-2026-69453.md): Microsoft Windows Search Component Tampering Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-69462](https://cve.now/CVE-2026-69462.md): Windows Error Reporting Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows) - [CVE-2026-69445](https://cve.now/CVE-2026-69445.md): Windows Compressed Folder Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69466](https://cve.now/CVE-2026-69466.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69444](https://cve.now/CVE-2026-69444.md): Microsoft Windows Speech Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69440](https://cve.now/CVE-2026-69440.md): Windows MIDI Service Module Elevation of Privileges Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69434](https://cve.now/CVE-2026-69434.md): Windows URL Moniker Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-69433](https://cve.now/CVE-2026-69433.md): Windows Error Reporting Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69447](https://cve.now/CVE-2026-69447.md): Windows Audio Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69449](https://cve.now/CVE-2026-69449.md): Windows BitLocker Remote Code Execution Vulnerability (CVSS 6.7, Microsoft Windows) - [CVE-2026-69430](https://cve.now/CVE-2026-69430.md): Windows Embedded Mode Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69475](https://cve.now/CVE-2026-69475.md): Windows Remote Desktop Services Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69427](https://cve.now/CVE-2026-69427.md): Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows) - [CVE-2026-69425](https://cve.now/CVE-2026-69425.md): Windows NTFS Tampering Vulnerability (CVSS 4.7, Microsoft Windows) - [CVE-2026-69438](https://cve.now/CVE-2026-69438.md): Microsoft JScript Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows) - [CVE-2026-69422](https://cve.now/CVE-2026-69422.md): Windows USB Video Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69428](https://cve.now/CVE-2026-69428.md): Windows LDAP - Lightweight Directory Access Protocol Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-69424](https://cve.now/CVE-2026-69424.md): Windows Distributed File System (DFS) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69416](https://cve.now/CVE-2026-69416.md): Windows DHCP Server Denial of Service Vulnerability (CVSS 5.7, Microsoft Windows) - [CVE-2026-69407](https://cve.now/CVE-2026-69407.md): Volume Manager Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69405](https://cve.now/CVE-2026-69405.md): Windows DHCP Server Denial of Service Vulnerability (CVSS 5.7, Microsoft Windows) - [CVE-2026-69421](https://cve.now/CVE-2026-69421.md): Windows Kernel-Mode Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69398](https://cve.now/CVE-2026-69398.md): Windows Bluetooth Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69410](https://cve.now/CVE-2026-69410.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69396](https://cve.now/CVE-2026-69396.md): Windows NDIS Elevation of Privilege Vulnerability (CVSS 7.1, Microsoft Windows) - [CVE-2026-69393](https://cve.now/CVE-2026-69393.md): Windows Spaceport.sys Information Disclosure Vulnerability (CVSS 5.7, Microsoft Windows) - [CVE-2026-69388](https://cve.now/CVE-2026-69388.md): Windows Bluetooth Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69386](https://cve.now/CVE-2026-69386.md): Microsoft Windows Media Foundation Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-69385](https://cve.now/CVE-2026-69385.md): Windows TCP/IP Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69374](https://cve.now/CVE-2026-69374.md): Windows SMB Server Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows) - [CVE-2026-69373](https://cve.now/CVE-2026-69373.md): Windows Overlay Filter Elevation of Privilege Vulnerability (CVSS 6.7, Microsoft Windows) - [CVE-2026-69403](https://cve.now/CVE-2026-69403.md): Windows SMB Server Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-69369](https://cve.now/CVE-2026-69369.md): Windows DNS Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-69364](https://cve.now/CVE-2026-69364.md): Windows Print Spooler Components Elevation of Privilege Vulnerability (CVSS 7.1, Microsoft Windows) - [CVE-2026-69365](https://cve.now/CVE-2026-69365.md): Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows) - [CVE-2026-69360](https://cve.now/CVE-2026-69360.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-69372](https://cve.now/CVE-2026-69372.md): Windows Network File System Denial of Service Vulnerability (CVSS 5.7, Microsoft Windows) - [CVE-2026-69384](https://cve.now/CVE-2026-69384.md): Virtual Hard Disk (VHD) Miniport Driver Denial of Service Vulnerability (CVSS 7.1, Microsoft Windows) - [CVE-2026-69376](https://cve.now/CVE-2026-69376.md): Microsoft Standard XPS Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-69357](https://cve.now/CVE-2026-69357.md): Windows NDIS Elevation of Privilege Vulnerability (CVSS 7.1, Microsoft Windows) - [CVE-2026-69358](https://cve.now/CVE-2026-69358.md): Remote Desktop Client Remote Code Execution Vulnerability (CVSS 7.1, Microsoft Windows) - [CVE-2026-69353](https://cve.now/CVE-2026-69353.md): Windows Text Shaping Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-69350](https://cve.now/CVE-2026-69350.md): Windows Overlay Filter Elevation of Privilege Vulnerability (CVSS 6.7, Microsoft Windows) - [CVE-2026-69348](https://cve.now/CVE-2026-69348.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69346](https://cve.now/CVE-2026-69346.md): Windows Print Spooler Components Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows) - [CVE-2026-69344](https://cve.now/CVE-2026-69344.md): Windows Print Spooler Components Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-69343](https://cve.now/CVE-2026-69343.md): Windows Overlay Filter Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-69342](https://cve.now/CVE-2026-69342.md): Windows DHCP Server Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-69340](https://cve.now/CVE-2026-69340.md): Windows NTFS Elevation of Privilege Vulnerability (CVSS 7.1, Microsoft Windows) - [CVE-2026-69335](https://cve.now/CVE-2026-69335.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69332](https://cve.now/CVE-2026-69332.md): Windows NTFS Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows) - [CVE-2026-69331](https://cve.now/CVE-2026-69331.md): Windows Remote Access Connection Manager Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69328](https://cve.now/CVE-2026-69328.md): Windows Storage Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69329](https://cve.now/CVE-2026-69329.md): BranchCache Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-69351](https://cve.now/CVE-2026-69351.md): Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-69324](https://cve.now/CVE-2026-69324.md): Windows Performance Monitor Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69322](https://cve.now/CVE-2026-69322.md): Microsoft Windows Search Component Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows) - [CVE-2026-69319](https://cve.now/CVE-2026-69319.md): Windows USB Video Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69316](https://cve.now/CVE-2026-69316.md): Windows Overlay Filter Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows) - [CVE-2026-69317](https://cve.now/CVE-2026-69317.md): Windows Remote Desktop Client Information Disclosure Vulnerability (CVSS 5.7, Microsoft Windows) - [CVE-2026-69318](https://cve.now/CVE-2026-69318.md): Windows Imaging Component Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-86669](https://cve.now/CVE-2026-86669.md): aircheng-org iWebShop-5 systemseller.php login improper authentication (CVSS 6.9, aircheng-org iWebShop-5) - [CVE-2026-69308](https://cve.now/CVE-2026-69308.md): Microsoft Standard XPS Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-69312](https://cve.now/CVE-2026-69312.md): Windows NTFS Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69315](https://cve.now/CVE-2026-69315.md): Windows License Manager Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-69313](https://cve.now/CVE-2026-69313.md): Microsoft Standard XPS Elevation of Privilege Vulnerability (CVSS 7.1, Microsoft Windows) - [CVE-2026-69303](https://cve.now/CVE-2026-69303.md): Push Message Routing Service Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-69301](https://cve.now/CVE-2026-69301.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows) - [CVE-2026-69321](https://cve.now/CVE-2026-69321.md): Windows Power Dependency Coordinator Tampering Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-69300](https://cve.now/CVE-2026-69300.md): Windows Push Notifications Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69314](https://cve.now/CVE-2026-69314.md): Windows Device Association Broker Service Elevation of Privilege Vulnerability (CVSS 7.1, Microsoft Windows) - [CVE-2026-69294](https://cve.now/CVE-2026-69294.md): Microsoft COM for Windows Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-69289](https://cve.now/CVE-2026-69289.md): Windows Setup Files Cleanup Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69297](https://cve.now/CVE-2026-69297.md): Windows DHCP Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows) - [CVE-2026-69283](https://cve.now/CVE-2026-69283.md): Windows CD-ROM Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69295](https://cve.now/CVE-2026-69295.md): Windows USB Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69299](https://cve.now/CVE-2026-69299.md): Microsoft COM for Windows Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69275](https://cve.now/CVE-2026-69275.md): Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69284](https://cve.now/CVE-2026-69284.md): Windows DCOM Server Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69286](https://cve.now/CVE-2026-69286.md): Windows USB Audio Class Driver Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-69305](https://cve.now/CVE-2026-69305.md): Microsoft Windows Search Component Elevation of Privilege Vulnerability (CVSS 7.1, Microsoft Windows) - [CVE-2026-69277](https://cve.now/CVE-2026-69277.md): Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69270](https://cve.now/CVE-2026-69270.md): Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69269](https://cve.now/CVE-2026-69269.md): Microsoft Standard XPS Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69280](https://cve.now/CVE-2026-69280.md): Windows Push Notifications Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-68895](https://cve.now/CVE-2026-68895.md): Internet Storage Name Service Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-68894](https://cve.now/CVE-2026-68894.md): Windows Error Reporting Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows) - [CVE-2026-69266](https://cve.now/CVE-2026-69266.md): Windows DHCP Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-69288](https://cve.now/CVE-2026-69288.md): Windows GDI+ Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-69274](https://cve.now/CVE-2026-69274.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.1, Microsoft Windows) - [CVE-2026-69272](https://cve.now/CVE-2026-69272.md): Microsoft Standard XPS Elevation of Privilege Vulnerability (CVSS 7.1, Microsoft Windows) - [CVE-2026-68891](https://cve.now/CVE-2026-68891.md): Microsoft Standard XPS Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows) - [CVE-2026-68889](https://cve.now/CVE-2026-68889.md): Microsoft Standard XPS Elevation of Privilege Vulnerability (CVSS 7.1, Microsoft Windows) - [CVE-2026-68888](https://cve.now/CVE-2026-68888.md): Microsoft Standard XPS Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-68886](https://cve.now/CVE-2026-68886.md): Windows Network Connection Broker Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-68898](https://cve.now/CVE-2026-68898.md): Windows iSCSI Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows) - [CVE-2026-68885](https://cve.now/CVE-2026-68885.md): Microsoft Standard XPS Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-68873](https://cve.now/CVE-2026-68873.md): Windows Program Compatibility Assistant Service Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-69265](https://cve.now/CVE-2026-69265.md): Windows NTFS Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-68852](https://cve.now/CVE-2026-68852.md): Microsoft Account Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-68850](https://cve.now/CVE-2026-68850.md): Microsoft Account Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-68874](https://cve.now/CVE-2026-68874.md): Windows Program Compatibility Assistant Service Information Disclosure Vulnerability (CVSS 5.7, Microsoft Windows) - [CVE-2026-68876](https://cve.now/CVE-2026-68876.md): Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows) - [CVE-2026-68880](https://cve.now/CVE-2026-68880.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Office 365 for Mac · Microsoft Office for Andr… +1) - [CVE-2026-68842](https://cve.now/CVE-2026-68842.md): Windows MIDI Service Module Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-68848](https://cve.now/CVE-2026-68848.md): Windows Print Spooler Components Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-68840](https://cve.now/CVE-2026-68840.md): Windows USB Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-68839](https://cve.now/CVE-2026-68839.md): Windows USB Mass Storage Class Driver Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows) - [CVE-2026-68838](https://cve.now/CVE-2026-68838.md): Windows NTFS Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows) - [CVE-2026-68843](https://cve.now/CVE-2026-68843.md): Microsoft Office Word Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-68834](https://cve.now/CVE-2026-68834.md): Windows NTFS Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows) - [CVE-2026-68827](https://cve.now/CVE-2026-68827.md): Windows GDI+ Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows) - [CVE-2026-68831](https://cve.now/CVE-2026-68831.md): Windows Defender Firewall Service Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-68828](https://cve.now/CVE-2026-68828.md): Remote Desktop Client Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-68780](https://cve.now/CVE-2026-68780.md): Microsoft SQL Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft SQL Server) - [CVE-2026-68779](https://cve.now/CVE-2026-68779.md): Microsoft SQL Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft SQL Server) - [CVE-2026-68778](https://cve.now/CVE-2026-68778.md): Microsoft SQL Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft SQL Server) - [CVE-2026-68777](https://cve.now/CVE-2026-68777.md): Microsoft SQL Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft SQL Server) - [CVE-2026-68776](https://cve.now/CVE-2026-68776.md): Microsoft SQL Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft SQL Server) - [CVE-2026-68775](https://cve.now/CVE-2026-68775.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SQL Server) - [CVE-2026-67648](https://cve.now/CVE-2026-67648.md): Microsoft SQL Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft SQL Server) - [CVE-2026-67642](https://cve.now/CVE-2026-67642.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SQL Server) - [CVE-2026-67641](https://cve.now/CVE-2026-67641.md): Microsoft SQL Server Denial of Service Vulnerability (CVSS 6.5, Microsoft SQL Server) - [CVE-2026-67639](https://cve.now/CVE-2026-67639.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SQL Server) - [CVE-2026-67638](https://cve.now/CVE-2026-67638.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SQL Server) - [CVE-2026-67393](https://cve.now/CVE-2026-67393.md): Microsoft SQL Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft SQL Server) - [CVE-2026-67390](https://cve.now/CVE-2026-67390.md): Microsoft SQL Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft SQL Server) - [CVE-2026-67388](https://cve.now/CVE-2026-67388.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SQL Server) - [CVE-2026-67386](https://cve.now/CVE-2026-67386.md): Microsoft SQL Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft SQL Server) - [CVE-2026-67385](https://cve.now/CVE-2026-67385.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SQL Server) - [CVE-2026-67381](https://cve.now/CVE-2026-67381.md): Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft SQL Server) - [CVE-2026-67380](https://cve.now/CVE-2026-67380.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SQL Server) - [CVE-2026-66820](https://cve.now/CVE-2026-66820.md): SQL Server Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft SQL Server) - [CVE-2026-66818](https://cve.now/CVE-2026-66818.md): Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft SQL Server) - [CVE-2026-66816](https://cve.now/CVE-2026-66816.md): Microsoft SQL Server Security Feature Bypass Vulnerability (CVSS 6.5, Microsoft SQL Server) - [CVE-2026-66814](https://cve.now/CVE-2026-66814.md): Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft SQL Server) - [CVE-2026-56172](https://cve.now/CVE-2026-56172.md): Windows VHD miniport driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-62697](https://cve.now/CVE-2026-62697.md): Windows Push Notifications Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-62813](https://cve.now/CVE-2026-62813.md): Windows Active Directory Domain Services Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-62762](https://cve.now/CVE-2026-62762.md): Windows Active Directory Domain Services Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows) - [CVE-2026-62759](https://cve.now/CVE-2026-62759.md): Windows Netlogon Spoofing Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-62810](https://cve.now/CVE-2026-62810.md): Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-58611](https://cve.now/CVE-2026-58611.md): Xbox Gaming Services Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Xbox Gaming Services) - [CVE-2026-56198](https://cve.now/CVE-2026-56198.md): Microsoft Trace Data Helper Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-56177](https://cve.now/CVE-2026-56177.md): Windows Server Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-85880](https://cve.now/CVE-2026-85880.md): Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability (CVSS 7.8, KEV, Microsoft Windows) - [CVE-2026-85877](https://cve.now/CVE-2026-85877.md): Windows Print Spooler Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-84001](https://cve.now/CVE-2026-84001.md): Windows Key Distribution Center Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-83999](https://cve.now/CVE-2026-83999.md): Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-83998](https://cve.now/CVE-2026-83998.md): Remote Desktop Client Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-83996](https://cve.now/CVE-2026-83996.md): Windows Error Reporting Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-83991](https://cve.now/CVE-2026-83991.md): Windows Cloud Files Mini Filter Driver Tampering Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-70290](https://cve.now/CVE-2026-70290.md): Win32k Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-83976](https://cve.now/CVE-2026-83976.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-83975](https://cve.now/CVE-2026-83975.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-83974](https://cve.now/CVE-2026-83974.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-83979](https://cve.now/CVE-2026-83979.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-83988](https://cve.now/CVE-2026-83988.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-83969](https://cve.now/CVE-2026-83969.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-83986](https://cve.now/CVE-2026-83986.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-83955](https://cve.now/CVE-2026-83955.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69492](https://cve.now/CVE-2026-69492.md): Windows Partition Management Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-72937](https://cve.now/CVE-2026-72937.md): Windows Storage Port Driver Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-69573](https://cve.now/CVE-2026-69573.md): Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-72940](https://cve.now/CVE-2026-72940.md): Windows Schannel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-70019](https://cve.now/CVE-2026-70019.md): Windows Compressed Folder Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows) - [CVE-2026-72949](https://cve.now/CVE-2026-72949.md): Windows SMB Server Network Transport Driver (srvnet.sys) Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-72947](https://cve.now/CVE-2026-72947.md): Windows File History Service Elevation of Privilege Vulnerability (CVSS 6.4, Microsoft Windows) - [CVE-2026-69827](https://cve.now/CVE-2026-69827.md): Windows DNS Server Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows) - [CVE-2026-69989](https://cve.now/CVE-2026-69989.md): Windows DNS Server Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows) - [CVE-2026-83952](https://cve.now/CVE-2026-83952.md): Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-83942](https://cve.now/CVE-2026-83942.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-70065](https://cve.now/CVE-2026-70065.md): Windows DHCP Server Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-81381](https://cve.now/CVE-2026-81381.md): GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability (CVSS 6.5, Microsoft Visual Studio Code) - [CVE-2026-81380](https://cve.now/CVE-2026-81380.md): GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability (CVSS 5.3, Microsoft Visual Studio Code) - [CVE-2026-81379](https://cve.now/CVE-2026-81379.md): Visual Studio Code Security Feature Bypass Vulnerability (CVSS 8.2, Microsoft Visual Studio Code) - [CVE-2026-81378](https://cve.now/CVE-2026-81378.md): Visual Studio Code Security Feature Bypass Vulnerability (CVSS 8.2, Microsoft Visual Studio Code) - [CVE-2026-81377](https://cve.now/CVE-2026-81377.md): Visual Studio Code Tampering Vulnerability (CVSS 6.5, Microsoft Visual Studio Code) - [CVE-2026-81376](https://cve.now/CVE-2026-81376.md): Visual Studio Code Security Feature Bypass Vulnerability (CVSS 9.6, Microsoft Visual Studio Code) - [CVE-2026-81357](https://cve.now/CVE-2026-81357.md): Visual Studio Code Security Feature Bypass Vulnerability (CVSS 8.2, Microsoft Visual Studio Code) - [CVE-2026-81356](https://cve.now/CVE-2026-81356.md): Visual Studio Code Security Feature Bypass Vulnerability (CVSS 8.2, Microsoft Visual Studio Code) - [CVE-2026-81355](https://cve.now/CVE-2026-81355.md): Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-81349](https://cve.now/CVE-2026-81349.md): Azure HDInsight Ambari Elevation of Privilege Vulnerability (CVSS 7.2, Microsoft Azure HDInsight) - [CVE-2026-80097](https://cve.now/CVE-2026-80097.md): Microsoft Authenticator Elevation of Privilege Vulnerability (CVSS 8.6, Microsoft Authenticator for Android) - [CVE-2026-80093](https://cve.now/CVE-2026-80093.md): Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-80083](https://cve.now/CVE-2026-80083.md): Windows Hyper-V Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-80075](https://cve.now/CVE-2026-80075.md): Windows Work Folders Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-80077](https://cve.now/CVE-2026-80077.md): Remote Desktop Client Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Remote Desktop client for Windows Desktop) - [CVE-2026-80074](https://cve.now/CVE-2026-80074.md): Remote Desktop Client Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Remote Desktop client for Windows Desktop) - [CVE-2026-78523](https://cve.now/CVE-2026-78523.md): Windows DNS Server Denial of Service Vulnerability (CVSS 5.9, Microsoft Windows) - [CVE-2026-65669](https://cve.now/CVE-2026-65669.md): Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 9.6, Microsoft SQL Server Management Studio) - [CVE-2026-73029](https://cve.now/CVE-2026-73029.md): Microsoft SQL Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft SQL Server) - [CVE-2026-68786](https://cve.now/CVE-2026-68786.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SQL Server) - [CVE-2026-67643](https://cve.now/CVE-2026-67643.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 9.8, Microsoft SQL Server) - [CVE-2026-67636](https://cve.now/CVE-2026-67636.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 9.0, Microsoft SQL Server) - [CVE-2026-78518](https://cve.now/CVE-2026-78518.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1) - [CVE-2026-67389](https://cve.now/CVE-2026-67389.md): Microsoft SQL Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft SQL Server) - [CVE-2026-78509](https://cve.now/CVE-2026-78509.md): Microsoft Office Outlook Remote Code Execution Vulnerability (CVSS 9.8, Microsoft 365 Apps for Enterprise · Microsoft Office +1) - [CVE-2026-78517](https://cve.now/CVE-2026-78517.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office +1) - [CVE-2026-78504](https://cve.now/CVE-2026-78504.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office +1) - [CVE-2026-78513](https://cve.now/CVE-2026-78513.md): Microsoft Office PowerPoint Information Disclosure Vulnerability (CVSS 5.5, Microsoft 365 Apps for Enterprise · Microsoft Office +1) - [CVE-2026-78508](https://cve.now/CVE-2026-78508.md): Windows CD-ROM Driver Information Disclosure Vulnerability (CVSS 4.6, Microsoft Windows) - [CVE-2026-78510](https://cve.now/CVE-2026-78510.md): Microsoft Outlook and Word Remote Code Execution Vulnerability (CVSS 8.4, Microsoft 365 Apps for Enterprise · Microsoft Office) - [CVE-2026-78505](https://cve.now/CVE-2026-78505.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office) - [CVE-2026-78515](https://cve.now/CVE-2026-78515.md): Microsoft Office Excel Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office) - [CVE-2026-78502](https://cve.now/CVE-2026-78502.md): Microsoft Office Word Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office +1) - [CVE-2026-78511](https://cve.now/CVE-2026-78511.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office +1) - [CVE-2026-67384](https://cve.now/CVE-2026-67384.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SQL Server) - [CVE-2026-67383](https://cve.now/CVE-2026-67383.md): Microsoft SQL Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft SQL Server) - [CVE-2026-67379](https://cve.now/CVE-2026-67379.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 8.5, Microsoft SQL Server) - [CVE-2026-67376](https://cve.now/CVE-2026-67376.md): Microsoft SQL Server Denial of Service Vulnerability (CVSS 7.5, Microsoft SQL Server) - [CVE-2026-78463](https://cve.now/CVE-2026-78463.md): Remote Desktop Client Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Remote Desktop client for Windows Desktop) - [CVE-2026-67378](https://cve.now/CVE-2026-67378.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 9.0, Microsoft SQL Server) - [CVE-2026-78461](https://cve.now/CVE-2026-78461.md): Visual Studio Code Security Feature Bypass Vulnerability (CVSS 7.4, Microsoft Visual Studio Code) - [CVE-2026-78439](https://cve.now/CVE-2026-78439.md): Microsoft Office Graphics Component Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Office 365 for Mac · Microsoft Office for Andr… +1) - [CVE-2026-77909](https://cve.now/CVE-2026-77909.md): Azure CycleCloud Information Disclosure Vulnerability (CVSS 7.7, Microsoft Azure CycleCloud) - [CVE-2026-77908](https://cve.now/CVE-2026-77908.md): Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Dynamics 365 Customer Engagement) - [CVE-2026-77907](https://cve.now/CVE-2026-77907.md): Visual Studio Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Visual Studio) - [CVE-2026-77904](https://cve.now/CVE-2026-77904.md): Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-77899](https://cve.now/CVE-2026-77899.md): Windows Security Center Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-77898](https://cve.now/CVE-2026-77898.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 7.5, Microsoft 365 Apps for Enterprise · Microsoft Office) - [CVE-2026-69282](https://cve.now/CVE-2026-69282.md): Microsoft Office SharePoint Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SharePoint Server Subscription Edition) - [CVE-2026-69273](https://cve.now/CVE-2026-69273.md): Microsoft Office SharePoint Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SharePoint Server Subscription Edition) - [CVE-2026-69285](https://cve.now/CVE-2026-69285.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office) - [CVE-2026-69268](https://cve.now/CVE-2026-69268.md): Microsoft Office SharePoint Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SharePoint Server Subscription Edition) - [CVE-2026-77896](https://cve.now/CVE-2026-77896.md): Windows Remote Desktop Client Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows) - [CVE-2026-77895](https://cve.now/CVE-2026-77895.md): Windows DHCP Server Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-77894](https://cve.now/CVE-2026-77894.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-77893](https://cve.now/CVE-2026-77893.md): Windows DHCP Server Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-77892](https://cve.now/CVE-2026-77892.md): Windows Boot Manager Elevation of Privilege Vulnerability (CVSS 6.8, Microsoft Windows) - [CVE-2026-77891](https://cve.now/CVE-2026-77891.md): Windows DHCP Server Remote Code Execution Vulnerability (CVSS 6.4, Microsoft Windows) - [CVE-2026-77889](https://cve.now/CVE-2026-77889.md): Windows DHCP Server Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-77890](https://cve.now/CVE-2026-77890.md): Windows DHCP Server Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-77886](https://cve.now/CVE-2026-77886.md): Windows DHCP Server Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-77888](https://cve.now/CVE-2026-77888.md): Windows DHCP Server Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-77505](https://cve.now/CVE-2026-77505.md): Windows DNS Server Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows) - [CVE-2026-77504](https://cve.now/CVE-2026-77504.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-77887](https://cve.now/CVE-2026-77887.md): Windows DHCP Server Remote Code Execution Vulnerability (CVSS 6.4, Microsoft Windows) - [CVE-2026-77503](https://cve.now/CVE-2026-77503.md): Windows NTFS Elevation of Privilege Vulnerability (CVSS 8.4, Microsoft Windows) - [CVE-2026-77502](https://cve.now/CVE-2026-77502.md): Windows DHCP Server Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-77501](https://cve.now/CVE-2026-77501.md): Windows DHCP Server Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-77499](https://cve.now/CVE-2026-77499.md): Windows DHCP Server Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-77500](https://cve.now/CVE-2026-77500.md): Windows Device Association Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-77498](https://cve.now/CVE-2026-77498.md): Windows DHCP Server Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-77494](https://cve.now/CVE-2026-77494.md): Windows DHCP Server Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-77493](https://cve.now/CVE-2026-77493.md): Windows Graphics Component Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows) - [CVE-2026-77492](https://cve.now/CVE-2026-77492.md): Windows Storage Port Driver Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-77491](https://cve.now/CVE-2026-77491.md): Windows GDI Information Disclosure Vulnerability (CVSS 5.5, Microsoft Office 365 for Mac · Microsoft Office for Andr… +2) - [CVE-2026-77489](https://cve.now/CVE-2026-77489.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69579](https://cve.now/CVE-2026-69579.md): Windows Message Queuing Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows) - [CVE-2026-72986](https://cve.now/CVE-2026-72986.md): Graphic Fonts Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-69787](https://cve.now/CVE-2026-69787.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69476](https://cve.now/CVE-2026-69476.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-72982](https://cve.now/CVE-2026-72982.md): Windows Netlogon Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows) - [CVE-2026-72983](https://cve.now/CVE-2026-72983.md): Internet Connection Sharing (ICS) Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows) - [CVE-2026-72981](https://cve.now/CVE-2026-72981.md): IP Helper Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows) - [CVE-2026-72980](https://cve.now/CVE-2026-72980.md): Windows Hello Security Feature Bypass Vulnerability (CVSS 4.4, Microsoft Windows) - [CVE-2026-72979](https://cve.now/CVE-2026-72979.md): Windows DHCP Server Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows) - [CVE-2026-77495](https://cve.now/CVE-2026-77495.md): Windows Imaging Component Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-72978](https://cve.now/CVE-2026-72978.md): Active Directory Federation Services (AD FS) Denial of Service Vulnerability (CVSS 5.9, Microsoft Windows) - [CVE-2026-70283](https://cve.now/CVE-2026-70283.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-70124](https://cve.now/CVE-2026-70124.md): Windows DHCP Server Information Disclosure Vulnerability (CVSS 5.9, Microsoft Windows) - [CVE-2026-69930](https://cve.now/CVE-2026-69930.md): Windows DHCP Server Information Disclosure Vulnerability (CVSS 5.9, Microsoft Windows) - [CVE-2026-69929](https://cve.now/CVE-2026-69929.md): Windows DHCP Server Information Disclosure Vulnerability (CVSS 5.9, Microsoft Windows) - [CVE-2026-69846](https://cve.now/CVE-2026-69846.md): Windows Secure Kernel Mode Elevation of Privilege Vulnerability (CVSS 8.2, Microsoft Windows) - [CVE-2026-69804](https://cve.now/CVE-2026-69804.md): Microsoft Office SharePoint Remote Code Execution Vulnerability (CVSS 7.5, Microsoft SharePoint Server Subscription Edition) - [CVE-2026-69797](https://cve.now/CVE-2026-69797.md): Microsoft Office PowerPoint Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office +1) - [CVE-2026-69767](https://cve.now/CVE-2026-69767.md): Microsoft Office PowerPoint Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office +1) - [CVE-2026-69778](https://cve.now/CVE-2026-69778.md): Microsoft Office Access Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Access +1) - [CVE-2026-69764](https://cve.now/CVE-2026-69764.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office +1) - [CVE-2026-69759](https://cve.now/CVE-2026-69759.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office +1) - [CVE-2026-69529](https://cve.now/CVE-2026-69529.md): Microsoft Office Access Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Access +1) - [CVE-2026-69683](https://cve.now/CVE-2026-69683.md): Microsoft Office SharePoint Information Disclosure Vulnerability (CVSS 6.5, Microsoft SharePoint Server Subscription Edition) - [CVE-2026-69739](https://cve.now/CVE-2026-69739.md): Microsoft Office Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office) - [CVE-2026-69690](https://cve.now/CVE-2026-69690.md): Microsoft Office SharePoint Spoofing Vulnerability (CVSS 4.6, Microsoft SharePoint Server Subscription Edition) - [CVE-2026-69719](https://cve.now/CVE-2026-69719.md): Microsoft Office Word Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office +1) - [CVE-2026-69724](https://cve.now/CVE-2026-69724.md): Microsoft Office SharePoint Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SharePoint Server Subscription Edition) - [CVE-2026-69742](https://cve.now/CVE-2026-69742.md): Microsoft Office Publisher Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office +1) - [CVE-2026-69734](https://cve.now/CVE-2026-69734.md): Microsoft Office Word Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office +1) - [CVE-2026-69716](https://cve.now/CVE-2026-69716.md): Microsoft Office SharePoint Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft SharePoint Server Subscription Edition) - [CVE-2026-69722](https://cve.now/CVE-2026-69722.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office +1) - [CVE-2026-69686](https://cve.now/CVE-2026-69686.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office +1) - [CVE-2026-69678](https://cve.now/CVE-2026-69678.md): Microsoft Office PowerPoint Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office +1) - [CVE-2026-69671](https://cve.now/CVE-2026-69671.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office +1) - [CVE-2026-69649](https://cve.now/CVE-2026-69649.md): Raw Image Extension Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Raw Image Extension) - [CVE-2026-69641](https://cve.now/CVE-2026-69641.md): Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 9.1, Microsoft Exchange Server 2016 Cumulative Update · Micro… +1) - [CVE-2026-69603](https://cve.now/CVE-2026-69603.md): Windows Hyper-V Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-69604](https://cve.now/CVE-2026-69604.md): Windows Audio Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69576](https://cve.now/CVE-2026-69576.md): Graphic Fonts Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Office 365 for Mac · Microsoft Office for Andr… +1) - [CVE-2026-69580](https://cve.now/CVE-2026-69580.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69589](https://cve.now/CVE-2026-69589.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69583](https://cve.now/CVE-2026-69583.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69556](https://cve.now/CVE-2026-69556.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office +1) - [CVE-2026-69548](https://cve.now/CVE-2026-69548.md): Windows RNDIS Information Disclosure Vulnerability (CVSS 4.6, Microsoft Windows) - [CVE-2026-69544](https://cve.now/CVE-2026-69544.md): Windows SMB Client Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69518](https://cve.now/CVE-2026-69518.md): Windows Remote Desktop Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-69501](https://cve.now/CVE-2026-69501.md): Windows Secure Kernel Mode Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69469](https://cve.now/CVE-2026-69469.md): Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability (CVSS 6.6, Microsoft Windows) - [CVE-2026-69443](https://cve.now/CVE-2026-69443.md): Windows Device Health Attestation (DHA) Information Disclosure Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-69394](https://cve.now/CVE-2026-69394.md): Windows Audio Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69383](https://cve.now/CVE-2026-69383.md): Windows Shell Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69382](https://cve.now/CVE-2026-69382.md): Microsoft Exchange Server Information Disclosure Vulnerability (CVSS 5.9, Microsoft Exchange Server 2016 Cumulative Update · Micro… +1) - [CVE-2026-69380](https://cve.now/CVE-2026-69380.md): Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 8.1, Microsoft Exchange Server 2016 Cumulative Update · Micro… +1) - [CVE-2026-69378](https://cve.now/CVE-2026-69378.md): Microsoft Exchange Server Denial of Service Vulnerability (CVSS 7.5, Microsoft Exchange Server 2016 Cumulative Update · Micro… +1) - [CVE-2026-69375](https://cve.now/CVE-2026-69375.md): Microsoft Exchange Server Tampering Vulnerability (CVSS 6.5, Microsoft Exchange Server 2016 Cumulative Update · Micro… +1) - [CVE-2026-69361](https://cve.now/CVE-2026-69361.md): Microsoft Exchange Server Spoofing Vulnerability (CVSS 6.5, Microsoft Exchange Server 2016 Cumulative Update · Micro… +1) - [CVE-2026-69356](https://cve.now/CVE-2026-69356.md): Microsoft Exchange Server Spoofing Vulnerability (CVSS 9.3, Microsoft Exchange Server 2016 Cumulative Update · Micro… +1) - [CVE-2026-69355](https://cve.now/CVE-2026-69355.md): Microsoft Exchange Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Exchange Server 2016 Cumulative Update · Micro… +1) - [CVE-2026-69293](https://cve.now/CVE-2026-69293.md): Windows Biometric Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-68887](https://cve.now/CVE-2026-68887.md): Windows Message Queuing Queue Manager Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-68877](https://cve.now/CVE-2026-68877.md): Windows Storage Spaces Controller Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-68844](https://cve.now/CVE-2026-68844.md): Windows Storage Spaces Controller Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-68837](https://cve.now/CVE-2026-68837.md): Windows File History Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-68825](https://cve.now/CVE-2026-68825.md): Windows Bind Filter Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-72963](https://cve.now/CVE-2026-72963.md): Windows Modern Execution Server Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-72962](https://cve.now/CVE-2026-72962.md): Windows USB Video Driver Elevation of Privilege Vulnerability (CVSS 8.2, Microsoft Windows) - [CVE-2026-72958](https://cve.now/CVE-2026-72958.md): Windows Credential Guard Elevation of Privilege Vulnerability (CVSS 8.2, Microsoft Windows) - [CVE-2026-72948](https://cve.now/CVE-2026-72948.md): Windows DNS Elevation of Privilege Vulnerability (CVSS 6.7, Microsoft Windows) - [CVE-2026-72945](https://cve.now/CVE-2026-72945.md): Windows Task Scheduler Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-72943](https://cve.now/CVE-2026-72943.md): Windows Deployment Services Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-72946](https://cve.now/CVE-2026-72946.md): Microsoft Storage Port Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-72944](https://cve.now/CVE-2026-72944.md): Role: Windows Fax Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-72939](https://cve.now/CVE-2026-72939.md): Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows) - [CVE-2026-72935](https://cve.now/CVE-2026-72935.md): Windows NTFS Elevation of Privilege Vulnerability (CVSS 6.7, Microsoft Windows) - [CVE-2026-72930](https://cve.now/CVE-2026-72930.md): Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-71351](https://cve.now/CVE-2026-71351.md): Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-72929](https://cve.now/CVE-2026-72929.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-71345](https://cve.now/CVE-2026-71345.md): Windows Spaceport.sys Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-71353](https://cve.now/CVE-2026-71353.md): Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-71341](https://cve.now/CVE-2026-71341.md): Windows Partition Management Driver Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-71343](https://cve.now/CVE-2026-71343.md): Windows Remote Access Connection Manager Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-72926](https://cve.now/CVE-2026-72926.md): Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-71348](https://cve.now/CVE-2026-71348.md): Windows Spaceport.sys Remote Code Execution Vulnerability (CVSS 6.8, Microsoft Windows) - [CVE-2026-71350](https://cve.now/CVE-2026-71350.md): Windows Spaceport.sys Remote Code Execution Vulnerability (CVSS 6.8, Microsoft Windows) - [CVE-2026-71339](https://cve.now/CVE-2026-71339.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 6.7, Microsoft Windows) - [CVE-2026-71340](https://cve.now/CVE-2026-71340.md): Windows File History Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-71338](https://cve.now/CVE-2026-71338.md): Windows Failover Cluster Elevation of Privilege Vulnerability (CVSS 6.4, Microsoft Windows) - [CVE-2026-71334](https://cve.now/CVE-2026-71334.md): Windows NFS Portmapper Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-71332](https://cve.now/CVE-2026-71332.md): Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-71337](https://cve.now/CVE-2026-71337.md): Windows Storage Management Provider Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-71333](https://cve.now/CVE-2026-71333.md): Windows Remote Access Connection Manager Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-71330](https://cve.now/CVE-2026-71330.md): Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-71336](https://cve.now/CVE-2026-71336.md): Windows Work Folder Service Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-71329](https://cve.now/CVE-2026-71329.md): Windows NTFS Remote Code Execution Vulnerability (CVSS 6.8, Microsoft Windows) - [CVE-2026-70587](https://cve.now/CVE-2026-70587.md): Windows Remote Desktop Protocol Information Disclosure Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-70586](https://cve.now/CVE-2026-70586.md): Windows Paint Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-70585](https://cve.now/CVE-2026-70585.md): Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability (CVSS 7.0, Microsoft Windows Server) - [CVE-2026-70584](https://cve.now/CVE-2026-70584.md): Windows Core Messaging Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-70582](https://cve.now/CVE-2026-70582.md): Windows Management Instrumentation Elevation of Privilege Vulnerability (CVSS 6.4, Microsoft Windows) - [CVE-2026-70564](https://cve.now/CVE-2026-70564.md): Windows Print Spooler Components Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-70563](https://cve.now/CVE-2026-70563.md): Windows Shell Spoofing Vulnerability (CVSS 8.1, Microsoft Windows) - [CVE-2026-72923](https://cve.now/CVE-2026-72923.md): Microsoft.OpenApi.YamlReader vulnerable to denial of service via YAML alias expansion (CVSS 7.5, microsoft OpenAPI.NET · Microsoft.OpenApi.YamlReader +1) - [CVE-2026-70562](https://cve.now/CVE-2026-70562.md): Windows Audio Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-70351](https://cve.now/CVE-2026-70351.md): Microsoft WebP Image Extension Remote Code Execution Vulnerability (CVSS 8.8, Microsoft WebP Image Extension) - [CVE-2026-58600](https://cve.now/CVE-2026-58600.md): HEVC Video Extensions Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft HEVC Video Extensions) - [CVE-2026-70342](https://cve.now/CVE-2026-70342.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 8.1, Microsoft Windows) - [CVE-2026-70289](https://cve.now/CVE-2026-70289.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-70334](https://cve.now/CVE-2026-70334.md): Visual Studio Code Security Feature Bypass Vulnerability (CVSS 7.8, Microsoft Visual Studio Code) - [CVE-2026-69890](https://cve.now/CVE-2026-69890.md): Windows Virtual Trusted Platform Module Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-69740](https://cve.now/CVE-2026-69740.md): Windows Hello Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-69676](https://cve.now/CVE-2026-69676.md): Windows Kerberos Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-69712](https://cve.now/CVE-2026-69712.md): Windows Key Distribution Center Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows Server) - [CVE-2026-69730](https://cve.now/CVE-2026-69730.md): Windows DNS Server Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows) - [CVE-2026-69860](https://cve.now/CVE-2026-69860.md): Windows Imaging Component Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-69770](https://cve.now/CVE-2026-69770.md): Windows Spaceport.sys Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-69732](https://cve.now/CVE-2026-69732.md): Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows) - [CVE-2026-69822](https://cve.now/CVE-2026-69822.md): Windows Kerberos Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69771](https://cve.now/CVE-2026-69771.md): Windows Container Manager Service Security Feature Bypass Vulnerability (CVSS 4.7, Microsoft Windows) - [CVE-2026-69758](https://cve.now/CVE-2026-69758.md): Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69775](https://cve.now/CVE-2026-69775.md): Windows DWM Core Library Elevation of Privilege Vulnerability (CVSS 7.1, Microsoft Windows) - [CVE-2026-69772](https://cve.now/CVE-2026-69772.md): Windows Network File System Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-69839](https://cve.now/CVE-2026-69839.md): Windows iSCSI Target Service Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows) - [CVE-2026-69808](https://cve.now/CVE-2026-69808.md): Win32k Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-69838](https://cve.now/CVE-2026-69838.md): Windows Print Spooler Components Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69691](https://cve.now/CVE-2026-69691.md): Windows Spaceport.sys Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69832](https://cve.now/CVE-2026-69832.md): Win32k Information Disclosure Vulnerability (CVSS 5.6, Microsoft Windows) - [CVE-2026-69862](https://cve.now/CVE-2026-69862.md): Windows Wireless Wide Area Network Service Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-69744](https://cve.now/CVE-2026-69744.md): Windows Kerberos Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-69819](https://cve.now/CVE-2026-69819.md): RPC Runtime Library Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows) - [CVE-2026-69762](https://cve.now/CVE-2026-69762.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows) - [CVE-2026-69741](https://cve.now/CVE-2026-69741.md): Windows Spaceport.sys Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-69735](https://cve.now/CVE-2026-69735.md): Windows Broadcast DVR User Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69896](https://cve.now/CVE-2026-69896.md): Windows Error Reporting Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69681](https://cve.now/CVE-2026-69681.md): Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability (CVSS 8.0, Microsoft Windows) - [CVE-2026-69757](https://cve.now/CVE-2026-69757.md): Windows TCP/IP Elevation of Privilege Vulnerability (CVSS 7.1, Microsoft Windows) - [CVE-2026-69889](https://cve.now/CVE-2026-69889.md): Windows Bluetooth Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69723](https://cve.now/CVE-2026-69723.md): Windows Kernel Information Disclosure Vulnerability (CVSS 5.7, Microsoft Windows) - [CVE-2026-69875](https://cve.now/CVE-2026-69875.md): Windows NTFS Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows) - [CVE-2026-69694](https://cve.now/CVE-2026-69694.md): Windows IP Address Management (IPAM) Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69711](https://cve.now/CVE-2026-69711.md): Windows Device Association Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69717](https://cve.now/CVE-2026-69717.md): Windows Group Policy Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows) - [CVE-2026-69729](https://cve.now/CVE-2026-69729.md): Windows Credential Providers Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-69693](https://cve.now/CVE-2026-69693.md): Windows Device Association Broker Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69859](https://cve.now/CVE-2026-69859.md): Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69638](https://cve.now/CVE-2026-69638.md): Windows NTFS Remote Code Execution Vulnerability (CVSS 8.4, Microsoft Windows) - [CVE-2026-69631](https://cve.now/CVE-2026-69631.md): Windows DNS Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-69790](https://cve.now/CVE-2026-69790.md): Windows Credential Providers Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69628](https://cve.now/CVE-2026-69628.md): Windows iSCSI Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-69627](https://cve.now/CVE-2026-69627.md): Windows Remote Desktop Licensing Service Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-69689](https://cve.now/CVE-2026-69689.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows) - [CVE-2026-69623](https://cve.now/CVE-2026-69623.md): Windows HTTP Print Provider Remote Code Execution Vulnerability (CVSS 8.0, Microsoft Windows) - [CVE-2026-69684](https://cve.now/CVE-2026-69684.md): Windows Error Reporting Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-69648](https://cve.now/CVE-2026-69648.md): Windows Notification Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69645](https://cve.now/CVE-2026-69645.md): Windows Message Queuing Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69605](https://cve.now/CVE-2026-69605.md): Microsoft Install Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69594](https://cve.now/CVE-2026-69594.md): Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69609](https://cve.now/CVE-2026-69609.md): Win32k Information Disclosure Vulnerability (CVSS 5.5, Microsoft Office 365 for Mac · Microsoft Office for Andr… +1) - [CVE-2026-69587](https://cve.now/CVE-2026-69587.md): Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-69588](https://cve.now/CVE-2026-69588.md): Windows TCP/IP Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-69608](https://cve.now/CVE-2026-69608.md): Microsoft Windows Search Component Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69585](https://cve.now/CVE-2026-69585.md): Microsoft Windows Search Component Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69572](https://cve.now/CVE-2026-69572.md): Windows SMB Client Information Disclosure Vulnerability (CVSS 5.7, Microsoft Windows) - [CVE-2026-69554](https://cve.now/CVE-2026-69554.md): Microsoft Windows Search Component Tampering Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-69552](https://cve.now/CVE-2026-69552.md): Windows Print Spooler Components Information Disclosure Vulnerability (CVSS 5.7, Microsoft Windows) - [CVE-2026-69553](https://cve.now/CVE-2026-69553.md): Windows Hyper-V Elevation of Privilege Vulnerability (CVSS 7.1, Microsoft Windows) - [CVE-2026-69563](https://cve.now/CVE-2026-69563.md): Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69541](https://cve.now/CVE-2026-69541.md): Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69549](https://cve.now/CVE-2026-69549.md): Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69540](https://cve.now/CVE-2026-69540.md): Windows Audio Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69574](https://cve.now/CVE-2026-69574.md): Windows Device Association Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69534](https://cve.now/CVE-2026-69534.md): Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69528](https://cve.now/CVE-2026-69528.md): Windows Shell Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69524](https://cve.now/CVE-2026-69524.md): Windows Active Directory Domain Services Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows) - [CVE-2026-69582](https://cve.now/CVE-2026-69582.md): Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69539](https://cve.now/CVE-2026-69539.md): Remote Desktop Services Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-69525](https://cve.now/CVE-2026-69525.md): Remote Desktop Services Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows) - [CVE-2026-69527](https://cve.now/CVE-2026-69527.md): Windows USB Mass Storage Class Driver Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-69621](https://cve.now/CVE-2026-69621.md): Role: Windows Fax Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69516](https://cve.now/CVE-2026-69516.md): Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69514](https://cve.now/CVE-2026-69514.md): Remote Desktop Services Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-69551](https://cve.now/CVE-2026-69551.md): Windows DNS Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-69507](https://cve.now/CVE-2026-69507.md): Microsoft Windows Search Component Information Disclosure Vulnerability (CVSS 5.7, Microsoft Windows) - [CVE-2026-69504](https://cve.now/CVE-2026-69504.md): Windows NTFS Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-69505](https://cve.now/CVE-2026-69505.md): Windows NTFS Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows) - [CVE-2026-69500](https://cve.now/CVE-2026-69500.md): Windows Image Acquisition Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69517](https://cve.now/CVE-2026-69517.md): Windows Wireless Networking Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69531](https://cve.now/CVE-2026-69531.md): Microsoft Windows Speech Tampering Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-69496](https://cve.now/CVE-2026-69496.md): Windows Compressed Folder Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows) - [CVE-2026-69495](https://cve.now/CVE-2026-69495.md): Windows Event Logging Service Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-69494](https://cve.now/CVE-2026-69494.md): Windows Event Logging Service Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-69481](https://cve.now/CVE-2026-69481.md): Windows Enterprise App Management Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows) - [CVE-2026-69479](https://cve.now/CVE-2026-69479.md): Windows NTFS Remote Code Execution Vulnerability (CVSS 8.4, Microsoft Windows) - [CVE-2026-69473](https://cve.now/CVE-2026-69473.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69470](https://cve.now/CVE-2026-69470.md): Connected User Experiences and Telemetry Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69468](https://cve.now/CVE-2026-69468.md): Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69472](https://cve.now/CVE-2026-69472.md): Windows Devices Human Interface Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69463](https://cve.now/CVE-2026-69463.md): Windows NTFS Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows) - [CVE-2026-69461](https://cve.now/CVE-2026-69461.md): Windows NTFS Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-69485](https://cve.now/CVE-2026-69485.md): Remote Desktop Client Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-69450](https://cve.now/CVE-2026-69450.md): Windows Error Reporting Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69451](https://cve.now/CVE-2026-69451.md): Windows Management Instrumentation Elevation of Privilege Vulnerability (CVSS 7.1, Microsoft Windows) - [CVE-2026-69532](https://cve.now/CVE-2026-69532.md): Windows NTFS Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69455](https://cve.now/CVE-2026-69455.md): Windows Remote Access Connection Manager Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69513](https://cve.now/CVE-2026-69513.md): Windows Error Reporting Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69491](https://cve.now/CVE-2026-69491.md): Microsoft DirectMusic Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows) - [CVE-2026-69431](https://cve.now/CVE-2026-69431.md): Telnet Client Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows) - [CVE-2026-69432](https://cve.now/CVE-2026-69432.md): Volume Manager Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69448](https://cve.now/CVE-2026-69448.md): Windows Bluetooth Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69458](https://cve.now/CVE-2026-69458.md): Windows BitLocker Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows) - [CVE-2026-69429](https://cve.now/CVE-2026-69429.md): Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows) - [CVE-2026-69423](https://cve.now/CVE-2026-69423.md): Windows USB Video Driver Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows) - [CVE-2026-69436](https://cve.now/CVE-2026-69436.md): Windows State Repository Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69420](https://cve.now/CVE-2026-69420.md): Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69415](https://cve.now/CVE-2026-69415.md): Windows DHCP Server Elevation of Privilege Vulnerability (CVSS 6.8, Microsoft Windows) - [CVE-2026-69412](https://cve.now/CVE-2026-69412.md): Windows DHCP Server Remote Code Execution Vulnerability (CVSS 8.0, Microsoft Windows) - [CVE-2026-69457](https://cve.now/CVE-2026-69457.md): Windows USB Driver Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-69408](https://cve.now/CVE-2026-69408.md): Microsoft Windows Media Foundation Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows) - [CVE-2026-69418](https://cve.now/CVE-2026-69418.md): Volume Manager Driver Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows) - [CVE-2026-69413](https://cve.now/CVE-2026-69413.md): Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69401](https://cve.now/CVE-2026-69401.md): Audio Video Control Transport Protocol Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69406](https://cve.now/CVE-2026-69406.md): Windows Kernel Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-69390](https://cve.now/CVE-2026-69390.md): Windows Spaceport.sys Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-69404](https://cve.now/CVE-2026-69404.md): Windows TCP/IP Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69391](https://cve.now/CVE-2026-69391.md): Windows Broker Infrastructure Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69379](https://cve.now/CVE-2026-69379.md): Windows NTFS Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69371](https://cve.now/CVE-2026-69371.md): Windows Overlay Filter Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows) - [CVE-2026-69368](https://cve.now/CVE-2026-69368.md): Windows Overlay Filter Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69389](https://cve.now/CVE-2026-69389.md): Windows Storage Management Provider Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69367](https://cve.now/CVE-2026-69367.md): Microsoft Standard XPS Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-69359](https://cve.now/CVE-2026-69359.md): Active Directory Domain Services Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69362](https://cve.now/CVE-2026-69362.md): Windows Error Reporting Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69349](https://cve.now/CVE-2026-69349.md): Windows Management Instrumentation Information Disclosure Vulnerability (CVSS 5.7, Microsoft Windows) - [CVE-2026-69377](https://cve.now/CVE-2026-69377.md): Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69345](https://cve.now/CVE-2026-69345.md): Microsoft Standard XPS Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-69347](https://cve.now/CVE-2026-69347.md): Windows Fast FAT Driver Remote Code Execution Vulnerability (CVSS 7.4, Microsoft Windows) - [CVE-2026-69338](https://cve.now/CVE-2026-69338.md): Remote Desktop Gateway Service Elevation of Privilege Vulnerability (CVSS 7.1, Microsoft Windows) - [CVE-2026-69339](https://cve.now/CVE-2026-69339.md): Windows MIDI Service Module Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-69333](https://cve.now/CVE-2026-69333.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69337](https://cve.now/CVE-2026-69337.md): Windows Registry Elevation of Privilege Vulnerability (CVSS 7.1, Microsoft Windows) - [CVE-2026-69366](https://cve.now/CVE-2026-69366.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.1, Microsoft Windows) - [CVE-2026-69310](https://cve.now/CVE-2026-69310.md): Windows DNS Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69336](https://cve.now/CVE-2026-69336.md): Microsoft Standard XPS Elevation of Privilege Vulnerability (CVSS 7.1, Microsoft Windows) - [CVE-2026-69325](https://cve.now/CVE-2026-69325.md): Microsoft JScript Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows) - [CVE-2026-69296](https://cve.now/CVE-2026-69296.md): Windows Device Association Service Elevation of Privilege Vulnerability (CVSS 7.1, Microsoft Windows) - [CVE-2026-69279](https://cve.now/CVE-2026-69279.md): Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69307](https://cve.now/CVE-2026-69307.md): Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69292](https://cve.now/CVE-2026-69292.md): Remote Desktop Gateway Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-69276](https://cve.now/CVE-2026-69276.md): Microsoft UxTheme Library (uxtheme.dll) Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows) - [CVE-2026-69267](https://cve.now/CVE-2026-69267.md): Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows) - [CVE-2026-69281](https://cve.now/CVE-2026-69281.md): Windows License Manager Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-68893](https://cve.now/CVE-2026-68893.md): Remote Desktop Licensing Service Elevation of Privilege Vulnerability (CVSS 7.1, Microsoft Windows) - [CVE-2026-68892](https://cve.now/CVE-2026-68892.md): Microsoft Standard XPS Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-69271](https://cve.now/CVE-2026-69271.md): Microsoft Standard XPS Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows) - [CVE-2026-68890](https://cve.now/CVE-2026-68890.md): Microsoft Standard XPS Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-68881](https://cve.now/CVE-2026-68881.md): Microsoft Standard XPS Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-68884](https://cve.now/CVE-2026-68884.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-68878](https://cve.now/CVE-2026-68878.md): Windows Fast FAT Driver Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows) - [CVE-2026-68897](https://cve.now/CVE-2026-68897.md): Microsoft Standard XPS Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-68875](https://cve.now/CVE-2026-68875.md): Windows NTFS Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-68851](https://cve.now/CVE-2026-68851.md): Windows NTFS Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-68846](https://cve.now/CVE-2026-68846.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.1, Microsoft Windows) - [CVE-2026-68845](https://cve.now/CVE-2026-68845.md): Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-68849](https://cve.now/CVE-2026-68849.md): Windows Bluetooth Port Driver Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows) - [CVE-2026-68847](https://cve.now/CVE-2026-68847.md): Connected User Experiences and Telemetry Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-68841](https://cve.now/CVE-2026-68841.md): Windows NTFS Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-68835](https://cve.now/CVE-2026-68835.md): Windows Print Spooler Components Elevation of Privilege Vulnerability (CVSS 7.1, Microsoft Windows) - [CVE-2026-68833](https://cve.now/CVE-2026-68833.md): Windows NTFS Remote Code Execution Vulnerability (CVSS 6.8, Microsoft Windows) - [CVE-2026-68832](https://cve.now/CVE-2026-68832.md): Windows NTFS Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2026-68830](https://cve.now/CVE-2026-68830.md): Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2026-68824](https://cve.now/CVE-2026-68824.md): Connected User Experiences and Telemetry Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-68787](https://cve.now/CVE-2026-68787.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 7.8, Microsoft SQL Server) - [CVE-2026-68785](https://cve.now/CVE-2026-68785.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 4.9, Microsoft SQL Server) - [CVE-2026-68784](https://cve.now/CVE-2026-68784.md): Microsoft SQL Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft SQL Server) - [CVE-2026-68781](https://cve.now/CVE-2026-68781.md): Microsoft SQL Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft SQL Server) - [CVE-2026-67633](https://cve.now/CVE-2026-67633.md): Microsoft SQL Server Denial of Service Vulnerability (CVSS 6.5, Microsoft SQL Server) - [CVE-2026-67631](https://cve.now/CVE-2026-67631.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 9.8, Microsoft SQL Server) - [CVE-2026-67630](https://cve.now/CVE-2026-67630.md): Microsoft SQL Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft SQL Server) - [CVE-2026-67629](https://cve.now/CVE-2026-67629.md): Microsoft SQL Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft SQL Server) - [CVE-2026-67373](https://cve.now/CVE-2026-67373.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SQL Server) - [CVE-2026-67370](https://cve.now/CVE-2026-67370.md): Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft SQL Server) - [CVE-2026-67368](https://cve.now/CVE-2026-67368.md): Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft SQL Server) - [CVE-2026-50349](https://cve.now/CVE-2026-50349.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-55007](https://cve.now/CVE-2026-55007.md): Microsoft Exchange Server Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Exchange Server 2019 Cumulative Update · Microsof…) - [CVE-2026-62801](https://cve.now/CVE-2026-62801.md): Microsoft PowerShell Security Feature Bypass Vulnerability (CVSS 6.5, Microsoft Windows) - [CVE-2026-57098](https://cve.now/CVE-2026-57098.md): Microsoft Remote Desktop App for Windows Information Disclosure Vulnerability (CVSS 7.5, Microsoft Remote Desktop client for Windows Desktop) - [CVE-2026-77482](https://cve.now/CVE-2026-77482.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SQL Server) - [CVE-2026-85360](https://cve.now/CVE-2026-85360.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-83941](https://cve.now/CVE-2026-83941.md): Entra ID Elevation of Privilege Vulnerability (CVSS 9.9, Microsoft Entra) - [CVE-2026-69782](https://cve.now/CVE-2026-69782.md): Windows DNS Server Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows) - [CVE-2026-70091](https://cve.now/CVE-2026-70091.md): Windows DNS Denial of Service Vulnerability (CVSS 5.9, Microsoft Windows) - [CVE-2026-69522](https://cve.now/CVE-2026-69522.md): .NET and Visual Studio Remote Code Execution Vulnerability (CVSS 8.8, Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +8) - [CVE-2026-69341](https://cve.now/CVE-2026-69341.md): Windows Image Acquisition Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-62895](https://cve.now/CVE-2026-62895.md): Azure Arc SQL Server Extension Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Azure Arc SQL Server Extension) - [CVE-2026-62744](https://cve.now/CVE-2026-62744.md): Microsoft Windows Media Foundation Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-62694](https://cve.now/CVE-2026-62694.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2026-62706](https://cve.now/CVE-2026-62706.md): Microsoft Windows Media Foundation Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows) - [CVE-2026-9216](https://cve.now/CVE-2026-9216.md): Insufficient input validation vulnerability exists in certain NETGEAR RAX Models (CVSS 1.2, NETGEAR RAX30 · NETGEAR RAX35 +3) - [CVE-2026-9215](https://cve.now/CVE-2026-9215.md): A CSRF vulnerability exists in certain NETGEAR XR series devices (CVSS 1.8, NETGEAR XR1000v2 · NETGEAR XR500) - [CVE-2026-86073](https://cve.now/CVE-2026-86073.md): n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Substitution (CVSS 5.9, n8n-io n8n · n8n) - [CVE-2026-82533](https://cve.now/CVE-2026-82533.md): DeepSeek Harness \< 0.1.2-alpha.1 Authentication Bypass via Host Header Spoofing (CVSS 9.4, DeepSeek Harness · @deepseek-ai/dsh-client-connection) - [CVE-2026-81531](https://cve.now/CVE-2026-81531.md): Unauthenticated Account Information Disclosure in Multiple Omada Controllers (CVSS 6.9, TP-Link System Omada Software Controller · TP-Link Syste… +4) - [CVE-2026-75156](https://cve.now/CVE-2026-75156.md): Apache Airflow FAB provider: FAB Azure AD OAuth: id\_token issuer/audience not validated — cross-tenant authentication bypass (CVSS 9.1, Apache Software Foundation Apache Airflow FAB provider) - [CVE-2026-86668](https://cve.now/CVE-2026-86668.md): aircheng-org iWebShop-5 pic.php uploadFile cross site scripting (CVSS 5.3, aircheng-org iWebShop-5) - [CVE-2026-78216](https://cve.now/CVE-2026-78216.md): AshLua eval read operations can read field-policy-protected fields via aggregates (CVSS 6.0, ash-project ash\_lua) - [CVE-2026-84392](https://cve.now/CVE-2026-84392.md): A NULL Pointer Dereference vulnerability \[CWE-476\] vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 (CVSS 2.5, Fortinet FortiOS · Fortinet FortiProxy +1) - [CVE-2026-22575](https://cve.now/CVE-2026-22575.md): An improper access control vulnerability in Fortinet FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.10, FortiManager 7.2 a (CVSS 4.7, Fortinet FortiManager) - [CVE-2026-84391](https://cve.now/CVE-2026-84391.md): A use of uninitialized variable vulnerability in Fortinet FortiAnalyzer 7.6.3 through 7.6.6 may allow attacker to denial of service via \