CVEs published October 13, 2026
2,000 CVEs were published on October 13, 2026: 130 critical, 1,275 high. 2 are now in CISA KEV.
- Published
- 2,000
- Critical
- 130
- High
- 1,275
- Medium
- 580
- Low
- 15
- Unrated
- 0
- Now in CISA KEV
- 2
- Fix available
- 1,673
Most affected products
- Microsoft Windows
- 1,072
- Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1
- 48
- Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2
- 43
- Microsoft 365 Apps for Enterprise · Microsoft Office LTSC
- 41
- Google Chrome
- 37
- Microsoft SharePoint Server Subscription Edition
- 34
- Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1
- 32
- Adobe ColdFusion
- 31
- Microsoft Windows Server
- 30
- Microsoft SQL Server
- 22
This page lists the newest 2,000. Browse every vulnerability.
Critical 130
- CVE-2026-97381Legacy Update ActiveX control accepts unauthorized hosting originsLegacyUpdate
- CVE-2026-110142Use after free in FileSystem in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandboxGoogle Chrome
- CVE-2026-110144Incorrect authorization in Mojo in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to potentially execute arbitrGoogle Chrome
- CVE-2026-110159Incorrect authorization in Updater in Google Chrome prior to 155.0.8059.79 allowed a local attacker to execute arbitrary code outside the saGoogle Chrome
- CVE-2026-110165Use after free in Core in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary codeGoogle Chrome
- CVE-2026-110161Use after free in Network in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox viGoogle Chrome
- CVE-2026-110136Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a Google Chrome
- CVE-2026-110149Use after free in Browser in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox viGoogle Chrome
- CVE-2026-110152Buffer overflow in ANGLE in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary coGoogle Chrome
- CVE-2026-106622ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)Adobe ColdFusion
- CVE-2026-106619ColdFusion | Improper Input Validation (CWE-20)Adobe ColdFusion
- CVE-2026-106624ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)Adobe ColdFusion
- CVE-2026-106621ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)Adobe ColdFusion
- CVE-2026-90530ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)Adobe ColdFusion
- CVE-2026-105903ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)Adobe ColdFusion
- CVE-2026-75994ColdFusion | Incorrect Authorization (CWE-863)Adobe ColdFusion
- CVE-2026-106620ColdFusion | Incorrect Authorization (CWE-863)Adobe ColdFusion
- CVE-2026-106612ColdFusion | Incorrect Authorization (CWE-863)Adobe ColdFusion
- CVE-2026-105899ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434)Adobe ColdFusion
- CVE-2026-49950Xorbits Xoscar 0.11.2 Unauthenticated Deserialization RCE via Actor Poolxorbitsai xoscar
- CVE-2026-93909IBM WebSphere Application Server Liberty is affected by an authentication bypassIBM WebSphere Application Server - Liberty
- CVE-2026-93895IBM WebSphere Application Server Liberty Improper Access ControlIBM WebSphere Application Server - Liberty
- CVE-2026-63160Omnispace Agora Project < 26.10.0 Insecure Remember-Me Token StorageOmnispace Agora Project
- CVE-2026-63159Omnispace Agora Project < 26.10.0 Predictable Password-Reset Token Account TakeoverOmnispace Agora Project
- CVE-2026-63158Omnispace Agora Project < 26.10.0 Pass-the-Hash Authentication Bypass via CookiesOmnispace Agora Project
- CVE-2026-63149Omnispace Agora Project < 26.10.0 Predictable Default Password via uniqid()Omnispace Agora Project
- CVE-2026-90532Adobe Experience Manager | Incorrect Authorization (CWE-863)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-90531Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-83662Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75732Adobe Experience Manager | Incorrect Authorization (CWE-863)Adobe Experience Manager 6.5 LTS · Adobe Experience Manager
- CVE-2026-48383Adobe Experience Manager | Incorrect Authorization (CWE-863)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-48382Adobe Experience Manager | Incorrect Authorization (CWE-863)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-106630Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager 6.5 LTS · Adobe Experience Manager
- CVE-2026-106629Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager 6.5 LTS · Adobe Experience Manager
- CVE-2026-106626Adobe Experience Manager | Improper Input Validation (CWE-20)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-105895Adobe Experience Manager | Improper Input Validation (CWE-20)Adobe Experience Manager
- CVE-2026-63146Omnispace Agora Project < 26.10.0 PHP Code Injection via config.inc.phpOmnispace Agora Project
- CVE-2026-103848Adobe Experience Manager | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)Adobe Experience Manager 6.5 LTS · Adobe Experience Manager
- CVE-2026-104252Vitess vttablet /twopcz reflected XSSvitessio vitess · vitess.io/vitess
- CVE-2026-110130Dockhand before 1.0.45 Authentication Bypass via Static-Asset CheckFinsys dockhand
- CVE-2026-110112Dockhand before 1.0.50 OIDC Privilege Escalation via Missing Token Claim ValidationFinsys dockhand
- CVE-2026-105016Microsoft QUIC Remote Code Execution VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +4
- CVE-2026-97816Microsoft OpenSSH for Windows Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-97815Windows Error Reporting Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-97814Windows Text Shaping Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-97805Windows Partition Management Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-96113Windows Domain Name Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-105010Microsoft Windows Search Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105008Windows Schannel Spoofing VulnerabilityMicrosoft Windows
- CVE-2026-102210Windows Text Shaping Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-100222Network Policy Server (NPS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-100219Microsoft QUIC Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-100202Windows Message Queuing Queue Manager Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-96934Windows DHCP Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-96924Windows OLE Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-96909Windows BitLocker Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-96320Windows DHCP Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-96252Active Directory Federation Services (AD FS) Spoofing VulnerabilityMicrosoft Windows
- CVE-2026-70242Microsoft Office Outlook Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-70153Microsoft PostScript Printer Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-88092ASP.NET Core Tampering VulnerabilityMicrosoft ASP.NET Core · Microsoft Visual Studio +12
- CVE-2026-70279Microsoft Exchange Server Spoofing VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Micro… +1
- CVE-2026-83935Microsoft XML Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-83910RPC Runtime Library Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-83770Windows Text Shaping Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-83519Windows Error Reporting Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-83517Microsoft Windows Media Foundation Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-70157Windows System Information Console Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-96096Windows Media Player Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-97749Microsoft Office Outlook Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-97016Microsoft Office Outlook Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-96864Microsoft Failover Cluster Virtual Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-96219Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-88178Microsoft Office PowerPoint Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-88156Microsoft Office Outlook Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-70300Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-70291Microsoft Office Outlook Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-70188ASP.NET Core Security Feature Bypass VulnerabilityMicrosoft ASP.NET Core · Microsoft Visual Studio
- CVE-2026-70147Microsoft PostScript Printer Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-70024Windows Internet Information Services Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-88102Microsoft Failover Cluster Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2026-85928Windows Volume Manager Extension Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-85818Windows Schannel Spoofing VulnerabilityMicrosoft Windows
- CVE-2026-85814Microsoft Windows Media Foundation Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-85809Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-85806Network Policy Server (NPS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-85792Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-84015Remote Access Point-to-Point Protocol (PPP) EAP-TLS Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69886Windows Imaging Component Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-83869Windows Domain Name Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-83782Windows Shell Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-83780Windows CCFFilter Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-83748Windows Error Reporting Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-83693Windows Error Reporting Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-83578Microsoft PowerShell Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69883Windows iSCSI Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69634Windows iSCSI Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69705Windows iSCSI Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-70096Windows Rich Text Edit Control Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-69639Windows libarchive Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-102238Visual Studio Code Remote Code Execution VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-103849Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)Adobe Commerce · Adobe Magento Open Source
- CVE-2026-91013Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Commerce · Adobe Magento Open Source
- CVE-2026-92464Adobe Commerce | Improper Input Validation (CWE-20)Adobe Commerce · Adobe Magento Open Source
- CVE-2026-92909Adobe Commerce | Incorrect Authorization (CWE-863)Adobe Commerce · Adobe Magento Open Source
- CVE-2026-100133Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Commerce · Adobe Magento Open Source
- CVE-2026-75120Remote Code Execution (RCE) vulnerability identified in the OpenText™ EnCase SAFE AgentsOpenText Endpoint Investigator · OpenText Endpoint Foren… +2
- CVE-2026-92892Potential command execution on the host running JFrog CLI.jfrog-cli
- CVE-2026-106173A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attackeFortinet FortiSIEM
- CVE-2026-105445Docker Hub account conversion could reassign an active personal access token to another userDocker Hub
- CVE-2026-94603Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotationpodman-container-tools podman · github.com/containers/po… +5
- CVE-2026-54454OpenCATS: Authenticated RCE in the Import moduleOpenCATS
- CVE-2026-77459Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooksargoproj argo-cd · argo-cd +3
- CVE-2026-109412An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitive authentication infIvanti Neurons Patch for Intune
- CVE-2026-55183RClone Manager: Unauthenticated RClone Daemon Enables Remote Attack via Malicious Web PageZarestia-Dev rclone-manager
- CVE-2026-55562Cronicle: Stored XSS in admin Activity Log via account full_name fieldjhuckaby Cronicle
- CVE-2026-102989TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responsesTanStack router · @tanstack react-start +7
- CVE-2026-106042An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to rIvanti Xtraction
- CVE-2026-69227BUG-000187331 Portal for ArcGIS has a security vulnerabilityEsri Portal for ArcGIS
- CVE-2026-55695FearlessCMS: Remote Code Execution via Unvalidated Update Repository URL in System Updaterfearlessgeekmedia FearlessCMS
- CVE-2026-103928Metabase: Arbitrary File Read/Write via Unsafe H2 Built-in Functionsmetabase
- CVE-2026-79608x86/AMD: ineffectual Zenbleed workaroundXen
- CVE-2026-55675Salty documentation workflow executes fork-controlled Python build hooks with deployment secretssaltyorg docs
- CVE-2026-104192DragonflyDB stream RDB deserialization double-freedragonflydb dragonfly
- CVE-2026-53709MCP Context Forge: Hardcoded default JWT_SECRET_KEY shipped in source and .env.example enables pre-authentication platform admin token forgeryIBM mcp-context-forge
- CVE-2026-77099CVFS Command ExecutionCommvault Cloud · Commvault Grid(HSX) CVFS
- CVE-2026-107460Apache Fesod (Incubating): UrlImageConverter SSRF protection bypass via DNS rebindingApache Software Foundation Apache Fesod
- CVE-2026-109520Colorful iGameCenter Dispatch AMDRyzenMasterDriver.sys MmMapIoSpace privilege defined with unsafe actionsColorful iGameCenter
- CVE-2026-74040Wazuh 3.9.0 before 4.14.8 Arbitrary File Overwrite RCE via process_files_from_workerwazuh-manager
- CVE-2026-65173NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint where an unauthenticated remote atNVIDIA AIStore framework
High 1275
- CVE-2026-92817Inductive Automation Ignition Software Incorrect AuthorizationInductive Automation Ignition
- CVE-2026-88964An integer underflow in OpenVPN version 2.7_alpha3 through 2.7.7 on Windows and Android allows remote authenticated servers to cause a deniaOpenVPN
- CVE-2026-84790OpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject fieldOpenVPN
- CVE-2026-77207Null Pointer Dereference in PKCS#7 bundle with no certificatesThe Libreswan Project libreswan
- CVE-2026-77206IKEv2 pre-authentication Null Pointer Dereference in EAP codeThe Libreswan Project libreswan
- CVE-2026-100119CAI Content Credentials | Improper Input Validation (CWE-20)Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1
- CVE-2026-94453IKEv2 Use-After-Free bug when using IKE-over-TCPThe Libreswan Project libreswan
- CVE-2026-100114CAI Content Credentials | Improper Access Control (CWE-284)Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1
- CVE-2026-100136CAI Content Credentials | Integer Overflow or Wraparound (CWE-190)Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1
- CVE-2026-100139CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1
- CVE-2026-104345CAI Content Credentials | Improper Input Validation (CWE-20)Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1
- CVE-2026-105902CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1
- CVE-2026-103297CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1
- CVE-2026-103296CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1
- CVE-2026-100123CAI Content Credentials | Improper Certificate Validation (CWE-295)Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1
- CVE-2026-95633CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1
- CVE-2026-100122CAI Content Credentials | Improper Certificate Validation (CWE-295)Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1
- CVE-2026-100121CAI Content Credentials | Improper Certificate Validation (CWE-295)Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1
- CVE-2026-100120CAI Content Credentials | Improper Input Validation (CWE-20)Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1
- CVE-2026-95634CAI Content Credentials | Server-Side Request Forgery (SSRF) (CWE-918)Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1
- CVE-2026-100115CAI Content Credentials | Improper Access Control (CWE-284)Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1
- CVE-2026-100137CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1
- CVE-2026-100117CAI Content Credentials | Improper Input Validation (CWE-20)Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1
- CVE-2026-100135CAI Content Credentials | Improper Input Validation (CWE-20)Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1
- CVE-2026-100118CAI Content Credentials | Improper Certificate Validation (CWE-295)Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1
- CVE-2026-100113CAI Content Credentials | Improper Input Validation (CWE-20)Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1
- CVE-2026-100124CAI Content Credentials | Improper Input Validation (CWE-20)Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1
- CVE-2026-106627CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1
- CVE-2026-95632CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1
- CVE-2026-100138CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1
- CVE-2026-110171Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via aGoogle Chrome
- CVE-2026-110167Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via aGoogle Chrome
- CVE-2026-110155Buffer overflow in PDFium in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox viaGoogle Chrome
- CVE-2026-110154Use after free in Canvas in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code inside the Google Chrome
- CVE-2026-110147Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a cGoogle Chrome
- CVE-2026-110157Use after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a cGoogle Chrome
- CVE-2026-110138Use after free in ShapeDetection in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process Google Chrome
- CVE-2026-110163Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a cGoogle Chrome
- CVE-2026-110164Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code inside the sanGoogle Chrome
- CVE-2026-110172Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via aGoogle Chrome
- CVE-2026-110139Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via aGoogle Chrome
- CVE-2026-110168Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crGoogle Chrome
- CVE-2026-110169Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crGoogle Chrome
- CVE-2026-110166Buffer overflow in Animation in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox Google Chrome
- CVE-2026-110153Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via aGoogle Chrome
- CVE-2026-110145Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to exGoogle Chrome
- CVE-2026-110158Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to exGoogle Chrome
- CVE-2026-110140Type confusion in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crGoogle Chrome
- CVE-2026-110137Use after free in WebRTC in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via Google Chrome
- CVE-2026-110156Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 155.0.8059.79 allowed a remote attacker who had compromisedGoogle Chrome
- CVE-2026-110162Use after free in Desktop in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox viaGoogle Chrome
- CVE-2026-110151Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via aGoogle Chrome
- CVE-2026-110148Use after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a cGoogle Chrome
- CVE-2026-100128Bridge | Out-of-bounds Write (CWE-787)Adobe Bridge
- CVE-2026-100129Bridge | Out-of-bounds Write (CWE-787)Adobe Bridge
- CVE-2026-100127Bridge | Out-of-bounds Write (CWE-787)Adobe Bridge
- CVE-2026-94512SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-88088Microsoft SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server
- CVE-2026-85919Microsoft SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server
- CVE-2026-85888Microsoft SQL Server Information Disclosure VulnerabilityMicrosoft SQL Server
- CVE-2026-88081Microsoft SQL Server Information Disclosure VulnerabilityMicrosoft SQL Server
- CVE-2026-88083Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-88082Microsoft SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server
- CVE-2026-62840Linux Kernel Elevation of Privilege VulnerabilityMicrosoft Linux 3P (Third Party) Distros
- CVE-2026-65674Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-85886Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-85876Microsoft SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server
- CVE-2026-68883Microsoft SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server
- CVE-2026-67625Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-96956SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server
- CVE-2026-103821Substance3D - Designer | Out-of-bounds Write (CWE-787)Adobe Substance 3D Designer
- CVE-2026-83966Substance3D - Sampler | Out-of-bounds Write (CWE-787)Adobe Substance 3D Sampler
- CVE-2026-83965Substance3D - Sampler | Stack-based Buffer Overflow (CWE-121)Adobe Substance 3D Sampler
- CVE-2026-96521Photoshop Desktop | Out-of-bounds Write (CWE-787)Adobe Photoshop
- CVE-2026-96522Photoshop Desktop | Out-of-bounds Write (CWE-787)Adobe Photoshop
- CVE-2026-83661Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)Adobe Photoshop
- CVE-2026-95635Photoshop Desktop | Double Free (CWE-415)Adobe Photoshop
- CVE-2026-95638Photoshop Desktop | Heap-based Buffer Overflow (CWE-122)Adobe Photoshop
- CVE-2026-96523Photoshop Desktop | Out-of-bounds Write (CWE-787)Adobe Photoshop
- CVE-2026-104346Photoshop Desktop | Out-of-bounds Write (CWE-787)Adobe Photoshop
- CVE-2026-95637Photoshop Desktop | Out-of-bounds Write (CWE-787)Adobe Photoshop
- CVE-2026-97312Photoshop Desktop | Out-of-bounds Write (CWE-787)Adobe Photoshop
- CVE-2026-95639Photoshop Desktop | Incorrect Authorization (CWE-863)Adobe Photoshop
- CVE-2026-100111Photoshop Desktop | Out-of-bounds Write (CWE-787)Adobe Photoshop
- CVE-2026-104347Photoshop Desktop | Out-of-bounds Write (CWE-787)Adobe Photoshop
- CVE-2026-95636Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)Adobe Photoshop
- CVE-2026-104348Photoshop Desktop | Heap-based Buffer Overflow (CWE-122)Adobe Photoshop
- CVE-2026-100112Photoshop Desktop | Out-of-bounds Write (CWE-787)Adobe Photoshop
- CVE-2026-95641Photoshop Desktop | Out-of-bounds Write (CWE-787)Adobe Photoshop
- CVE-2026-105897ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)Adobe ColdFusion
- CVE-2026-106616ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)Adobe ColdFusion
- CVE-2026-34633ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)Adobe ColdFusion
- CVE-2026-106618ColdFusion | Incorrect Authorization (CWE-863)Adobe ColdFusion
- CVE-2026-105994ColdFusion | Incorrect Authorization (CWE-863)Adobe ColdFusion
- CVE-2026-106089ColdFusion | Incorrect Authorization (CWE-863)Adobe ColdFusion
- CVE-2026-106613ColdFusion | Improper Input Validation (CWE-20)Adobe ColdFusion
- CVE-2026-106614ColdFusion | Incorrect Authorization (CWE-863)Adobe ColdFusion
- CVE-2026-75996ColdFusion | Uncontrolled Resource Consumption (CWE-400)Adobe ColdFusion
- CVE-2026-105898ColdFusion | Incorrect Authorization (CWE-863)Adobe ColdFusion
- CVE-2026-106090ColdFusion | Incorrect Authorization (CWE-863)Adobe ColdFusion
- CVE-2026-34634ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)Adobe ColdFusion
- CVE-2026-76001ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)Adobe ColdFusion
- CVE-2026-106615ColdFusion | Incorrect Authorization (CWE-863)Adobe ColdFusion
- CVE-2026-75995ColdFusion | Improper Input Validation (CWE-20)Adobe ColdFusion
- CVE-2026-75748ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)Adobe ColdFusion
- CVE-2026-105900ColdFusion | Improper Input Validation (CWE-20)Adobe ColdFusion
- CVE-2026-105901ColdFusion | Incorrect Authorization (CWE-863)Adobe ColdFusion
- CVE-2026-71385ColdFusion | Incorrect Authorization (CWE-863)Adobe ColdFusion
- CVE-2026-106623ColdFusion | Incorrect Authorization (CWE-863)Adobe ColdFusion
- CVE-2026-106617ColdFusion | Incorrect Authorization (CWE-863)Adobe ColdFusion
- CVE-2026-93905IBM WebSphere Application Server Liberty is affected by a deserialization of untrusted dataIBM WebSphere Application Server - Liberty
- CVE-2026-95695IBM WebSphere Application Server Liberty Incorrect AuthorizationIBM WebSphere Application Server - Liberty
- CVE-2026-101294IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a missing cryptographic stepIBM WebSphere Application Server - Liberty · IBM WebSphere…
- CVE-2026-105442IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a deserialization of untrusted dataIBM WebSphere Application Server
- CVE-2026-105443IBM WebSphere Application Server Liberty is affected by an improper access controlIBM WebSphere Application Server - Liberty
- CVE-2026-103832Substance3D - Stager | Out-of-bounds Write (CWE-787)Adobe Substance 3D Stager
- CVE-2026-103842Substance3D - Stager | Out-of-bounds Read (CWE-125)Adobe Substance 3D Stager
- CVE-2026-103836Substance3D - Stager | Out-of-bounds Write (CWE-787)Adobe Substance 3D Stager
- CVE-2026-103835Substance3D - Stager | Out-of-bounds Write (CWE-787)Adobe Substance 3D Stager
- CVE-2026-103837Substance3D - Stager | Out-of-bounds Write (CWE-787)Adobe Substance 3D Stager
- CVE-2026-103833Substance3D - Stager | Out-of-bounds Write (CWE-787)Adobe Substance 3D Stager
- CVE-2026-103834Substance3D - Stager | Out-of-bounds Write (CWE-787)Adobe Substance 3D Stager
- CVE-2026-103841Substance3D - Stager | Out-of-bounds Read (CWE-125)Adobe Substance 3D Stager
- CVE-2026-103839Substance3D - Stager | Out-of-bounds Write (CWE-787)Adobe Substance 3D Stager
- CVE-2026-103838Substance3D - Stager | Out-of-bounds Write (CWE-787)Adobe Substance 3D Stager
- CVE-2026-103851Substance3D - Stager | Stack-based Buffer Overflow (CWE-121)Adobe Substance 3D Stager
- CVE-2026-103840Substance3D - Stager | Out-of-bounds Read (CWE-125)Adobe Substance 3D Stager
- CVE-2026-103830Substance3D - Stager | Stack-based Buffer Overflow (CWE-121)Adobe Substance 3D Stager
- CVE-2026-103843Substance3D - Stager | Use After Free (CWE-416)Adobe Substance 3D Stager
- CVE-2026-63172Omnispace Agora Project < 26.10.0 Broken Function-Level Authorization via User-EditOmnispace Agora Project
- CVE-2026-63161Omnispace Agora Project < 26.10.0 Session Fixation via AuthenticationOmnispace Agora Project
- CVE-2026-63174Omnispace Agora Project < 26.10.0 Broken Access Control via spaceAffectListOmnispace Agora Project
- CVE-2026-63153Omnispace Agora Project < 26.10.0 Broken Access Control via setAffectations()Omnispace Agora Project
- CVE-2026-63165Omnispace Agora Project < 26.10.0 SQL Injection via sortEvents ParameterOmnispace Agora Project
- CVE-2026-63152Omnispace Agora Project < 26.10.0 Second-Order SQL Injection via _idCategoryFilterOmnispace Agora Project
- CVE-2026-63163Omnispace Agora Project < 26.10.0 Broken Access Control via MobileFileDownloadOmnispace Agora Project
- CVE-2026-63162Omnispace Agora Project < 26.10.0 Path Traversal via tmpFolderName ParameterOmnispace Agora Project
- CVE-2026-103846Dimension | Improper Neutralization of Input During Web Page Generation (Cross-Site Scripting) (CWE-79)Adobe Dimension
- CVE-2026-103845Dimension | Uncontrolled Search Path Element (CWE-427)Adobe Dimension
- CVE-2026-103844Dimension | Out-of-bounds Write (CWE-787)Adobe Dimension
- CVE-2026-103854Dimension | Stack-based Buffer Overflow (CWE-121)Adobe Dimension
- CVE-2026-103847Dimension | Untrusted Search Path (CWE-426)Adobe Dimension
- CVE-2026-63154Omnispace Agora Project < 26.10.0 SQL Identifier Injection via agoraFields[]Omnispace Agora Project
- CVE-2026-110084Adobe Experience Manager | XML Injection (aka Blind XPath Injection) (CWE-91)Adobe Experience Manager
- CVE-2026-110083Adobe Experience Manager | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)Adobe Experience Manager
- CVE-2026-106634Adobe Experience Manager | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)Adobe Experience Manager 6.5 LTS · Adobe Experience Manager
- CVE-2026-110005Moghtech Komodo contains an OS command injection vulnerabilityKomodo
- CVE-2026-16753CVE-2026-16753Lowcoder
- CVE-2026-86022VNote: Argument injection to arbitrary command execution via crafted note filename in external-program handlingvnotex vnote
- CVE-2026-86016VNote: Stored XSS via YAML Frontmatter Leading to Local File Read and Remote Exfiltrationvnotex vnote
- CVE-2026-55601MultiTail: Shell injection in execute-on-match command handlingfolkertvanheusden multitail
- CVE-2026-104875Ente: Accepted emergency contact can bypass the recovery notice periodente · ghcr.io/ente/server
- CVE-2026-110255Dockhand before 1.0.43 SSRF via /api/templates/compose EndpointFinsys dockhand
- CVE-2026-110111Xen Orchestra before 6.9.0 Privilege Escalation via Prototype Pollution in vm.importFromEsxivatesfr xen-orchestra
- CVE-2026-102599Socket.IO: Engine.IO Protocol Revision Mismatch DoSsocketio socket.io · engine.io
- CVE-2026-86063Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash Pinninganthropics claude-code · @anthropic-ai/claude-code
- CVE-2026-97781Microsoft Office OneNote Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise
- CVE-2026-97801.NET Framework Tampering VulnerabilityMicrosoft .NET Framework
- CVE-2026-108463Windows SmartScreen Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-108471Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-108136Microsoft Windows Search Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-108135Windows Backup Engine Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-108134Windows Autopilot Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-108133Windows Modern Device Management (MDM) Elevation of Privilege VulnerabilityMicrosoft Windows Server
- CVE-2026-108132Windows Kerberos Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-108131Active Directory Federation Services (AD FS) Spoofing VulnerabilityMicrosoft Windows
- CVE-2026-108130Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-97830Windows Internet Information Services Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-97812Windows Update Orchestrator Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-97811Microsoft OpenSSH for Windows Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-97810Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-97809Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-97808Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-97807Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-97806Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-97804HID Class Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-97803Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105013Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-97799Windows Audio Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-97798Windows Error Reporting Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105009Windows Server Update Service Elevation of Privilege VulnerabilityMicrosoft Windows Server
- CVE-2026-105007Windows NDIS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105005Windows Schannel Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-105004Windows Overlay Filter Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105003HID Class Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-103577Microsoft QUIC Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-103575Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-103569Windows IKE Extension Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-103568Windows Credential Providers Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-103565Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-103558Windows Routing and Remote Access Service (RRAS) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-103555Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-103554Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-103553Windows Partition Management Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-109453Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-102869.NET and Visual Studio Elevation of Privilege VulnerabilityMicrosoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 ·… +3
- CVE-2026-102226Dynamics Business Central Elevation of Privilege VulnerabilityMicrosoft Dynamics NAV
- CVE-2026-102225Windows Text Shaping Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-100215Microsoft Graphics Component Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-102217WebDAV Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-102214Windows Hyper-V Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-102220Windows VHD miniport driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-102215Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-102218Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-102216Windows StateRepository API Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-102211Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-102209Microsoft Graphics Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-102208Windows Win32 Kernel Subsystem Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-102207Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-102205Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-102204Windows Subsystem for Linux Elevation of Privilege VulnerabilityMicrosoft Windows Subsystem for Linux
- CVE-2026-102202Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-102203RPC Runtime Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-102201Microsoft Windows Media Foundation Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-102197Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-102196Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-102195Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-102194Windows Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-102193Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-102192Windows Failover Cluster Denial of Service VulnerabilityMicrosoft Windows Server
- CVE-2026-102191Windows Storage Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-102189Windows Storage Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96209Windows Network File System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70212Windows Security Center Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70023Windows Hyper-V Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-100225Windows Storage Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88219RPC Runtime Library Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-100220Windows Media Video Decoder Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-100218Remote Desktop Gateway Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-100217Windows Group Policy Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-100216Windows Storage Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-100214Microsoft Dynamics 365 Business Central Remote Code Execution VulnerabilityMicrosoft Dynamics NAV
- CVE-2026-108396Windows Modern Device Management (MDM) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105729SysInternals Elevation of Privilege VulnerabilityMicrosoft Windows Sysinternals Process Monitor
- CVE-2026-102870ASP.NET Core Remote Code Execution VulnerabilityMicrosoft .NET 10.0 installed on Linux · Microsoft .NET… +7
- CVE-2026-58280.NET Denial of Service VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +4
- CVE-2026-100212Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-100210Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-100209Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-100211Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-100207Azure CycleCloud Remote Code Execution VulnerabilityMicrosoft Azure CycleCloud
- CVE-2026-100205SysInternals Elevation of Privilege VulnerabilityMicrosoft Windows Sysinternals Process Monitor
- CVE-2026-100203Windows Update Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-100201Windows Client License Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-100200Windows Update Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-97793Windows Setup and Deployment Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-97792Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-97787Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-97788Active Directory Federation Services (AD FS) Information Disclosure VulnerabilityMicrosoft .NET Framework · Microsoft Windows
- CVE-2026-96118Windows Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96071Windows Media Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-97745Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-97768Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-97772Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-97775Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-97763Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-97741Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-97004Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-97746Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-97742Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-97738Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-97757Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-97011Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-97762Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-97777Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-97010Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-97773Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-97769Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-97008Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-97756Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-97007Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-97748Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-96960.NET Denial of Service VulnerabilityMicrosoft .NET Framework · Microsoft System.Security.Crypto…
- CVE-2026-96959.NET Denial of Service VulnerabilityMicrosoft .NET Framework · Microsoft System.Security.Crypto…
- CVE-2026-96958.NET Denial of Service VulnerabilityMicrosoft .NET Framework · Microsoft System.Security.Crypto…
- CVE-2026-96957.NET Security Feature Bypass VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +1
- CVE-2026-95943Connected Devices Platform Service (Cdpsvc) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96952Microsoft Windows Media Foundation Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-96953Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-96951Windows Shell Security Feature Bypass VulnerabilityMicrosoft Edge · Microsoft Outlook.com +1
- CVE-2026-96950Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96949Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96947Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96946Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96945Windows Failover Cluster Denial of Service VulnerabilityMicrosoft Windows Server
- CVE-2026-96202Windows Raw Image Extension Remote Code Execution VulnerabilityMicrosoft Edge · Microsoft Raw Image Extension
- CVE-2026-88094Azure Storage Library Elevation of Privilege VulnerabilityMicrosoft azure-storage-blob-batch · Microsoft Edge
- CVE-2026-96939Servicing Stack Updates Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96937Microsoft Windows Search Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96929Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96931Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96932Windows Embedded Mode Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96933Windows COM+ Event System Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96923Windows Workstation Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96919Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96918Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96917Windows PCI Bus Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96914Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96915Windows Kernel-Mode Drivers Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96913Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96912Windows Client License Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96911Microsoft Windows Search Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96916Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96852Windows TCP/IP Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96843WebDAV Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96847WebDAV Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96844Microsoft Bluetooth Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96325Windows SMB Server Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-96324Microsoft Windows Search Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96322Windows Remote Desktop Protocol Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96323Windows Update Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96304Windows USB Print Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96251Microsoft PowerShell Remote Code Execution VulnerabilityMicrosoft PowerShell · powershell
- CVE-2026-96253Windows USB Print Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96254Windows USB Print Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96310Windows USB Print Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96301Windows USB Print Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96250Windows USB Print Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96249Windows Win32 Kernel Subsystem Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96243Windows WalletService Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96237.NET Remote Code Execution VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 8.0 runtime +2
- CVE-2026-96235.NET Remote Code Execution VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +3
- CVE-2026-96232.NET Information Disclosure VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +3
- CVE-2026-96230ASP.NET Core Remote Code Execution VulnerabilityMicrosoft Visual Studio · Microsoft.AspNetCore.Components.W…
- CVE-2026-96233ASP.NET Core Denial of Service VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +3
- CVE-2026-96225.NET Elevation of Privilege VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +3
- CVE-2026-96231.NET Elevation of Privilege VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +3
- CVE-2026-85363.NET Framework Elevation of Privilege VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +4
- CVE-2026-84008.NET Denial of Service VulnerabilityMicrosoft .NET Framework · Microsoft Visual Studio +1
- CVE-2026-83520.NET Remote Code Execution VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +4
- CVE-2026-70035.NET Framework Remote Code Execution VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +4
- CVE-2026-70007.NET Framework Remote Code Execution VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +4
- CVE-2026-96188Microsoft PowerToys Elevation of Privilege VulnerabilityMicrosoft PowerToys
- CVE-2026-96186Microsoft Windows Media Foundation Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96044Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-70343Microsoft MPEG-2 Video Extension Remote Code Execution VulnerabilityMicrosoft MPEG-2 Video Extension
- CVE-2026-88207Microsoft Office PowerPoint Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-88210Microsoft Office Word Security Feature Bypass VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-88206Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-88186Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-88185Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-88200Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-88166Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-88163Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-85340Microsoft Office Click-To-Run Elevation of Privilege VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-88144Microsoft Office PowerPoint Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-70246Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-70215Microsoft Office PowerPoint Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-70281Microsoft Office Outlook Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-70254Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-70202Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-69802Network Device Enrollment Service (NDES) Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2026-88120Windows DHCP Server Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2026-88119Windows DHCP Server Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2026-88117Windows DHCP Server Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2026-88116Windows Domain Name Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-88114Windows Domain Name Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-88112Windows Domain Name Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-88093Desktop Window Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88075Configuration Manager Elevation of Privilege VulnerabilityMicrosoft Configuration Manager
- CVE-2026-87696Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Micro… +1
- CVE-2026-87695Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Micro… +1
- CVE-2026-87692Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Micro… +1
- CVE-2026-83746Skype for Business Elevation of Privilege VulnerabilityMicrosoft Skype for Business Server 2015 CU13 · Microsof… +1
- CVE-2026-77910Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Micro… +1
- CVE-2026-70571Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Micro… +1
- CVE-2026-70297Skype for Business Remote Code Execution VulnerabilityMicrosoft Skype for Business Server 2015 CU13 · Microsof… +1
- CVE-2026-70250Windows DHCP Client Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2026-70229Windows Active Directory Domain Services Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-70228Desktop Window Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70184Windows Backup Engine Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70111Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85925Azure Key Vault Client SDK Elevation of Privilege VulnerabilityMicrosoft azure-keyvault-administration · Microsoft azur… +2
- CVE-2026-85922Azure Key Vault Security Feature Bypass VulnerabilityMicrosoft azure_security_keyvault_certificates · Microso… +6
- CVE-2026-70160Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70158Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-70143Windows Network File System Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-70112Windows Spaceport.sys Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-70054Windows NetBIOS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69915Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69884Windows GDI Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88193Microsoft Scripting Engine Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88188Windows DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88191Microsoft Windows Search Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88189Windows DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88194Windows DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88181Windows DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88182Microsoft Windows Search Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88180Windows DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88179Windows DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88177Windows DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88174Windows Deployment Services Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-88171Windows DHCP Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-88149Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88142Windows Background Intelligent Transfer Service (BITS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-88141Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88139Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88133Windows Portable Device Enumerator Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88152Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88121Windows Background Intelligent Transfer Service (BITS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-88147Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88118Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88128Windows DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88115Windows Server for NFS Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-88135WebDAV Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88113Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88110Windows Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88126WebDAV Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88109Microsoft Office Click-To-Run Elevation of Privilege VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-88134Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88127Windows SMB Server Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88105Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88103Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88079Windows MIDI Service Module Elevation of Privileges VulnerabilityMicrosoft Windows
- CVE-2026-87702Windows Resource Management (MRM) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88072Windows Host Guardian Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-87715Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-87700Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-87704Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-87694Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-87693Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-87705Windows Hyper-V Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-88076Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-87699Winlogon Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85943Reliable Multicast Transport Driver (RMCAST) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85941Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85884Windows Health and Optimized Experiences Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69798Windows Wired AutoConfig Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69789Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-85879Windows Subsystem for Linux Elevation of Privilege VulnerabilityMicrosoft Windows Subsystem for Linux
- CVE-2026-85874Windows Message Queuing Queue Manager Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-83934Windows GDI+ Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-83930Windows Update Orchestrator Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83931Windows Hyper-V Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-83924Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83923Microsoft OpenSSH for Windows Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-83918Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83915Windows Diagnostic Policy Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85912Clipboard User Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83913Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85911Windows StateRepository API Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85908Windows Graphics Component Elevation of Privilege VulnerabilityMicrosoft Office 365 for Mac · Microsoft Office for Andr… +2
- CVE-2026-83908RPC Runtime Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85906Windows Direct Composition Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85905Windows UI Immersive Server API Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85903Windows Domain Name Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-85902Windows Direct Composition Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85901Windows Graphics Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85872Windows Storage VSP Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83903Windows Direct Composition Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83900Windows Bind Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83899Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83889Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-83873Windows Shell Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83877Windows Devices Human Interface Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83881Windows exFAT File System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83883Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83874Windows Event Tracing Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-83863Servicing Stack Updates Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83861Windows Remote Desktop Protocol Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83860Windows GDI Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-83859Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83857Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83856Windows Event Logging Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-83850Microsoft Windows Search Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83845Windows Internet (wininet.dll) Spoofing VulnerabilityMicrosoft Windows
- CVE-2026-83841Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83840Windows Error Reporting Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83837Windows Kernel-Mode Drivers Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83830Windows COM+ Event System Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83829Microsoft Windows Search Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83797Windows Partition Management Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-83795Windows Internet Key Exchange (IKE) Extension Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-83792Windows Device Install Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83791Windows Virtual Input Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83790Windows Hello Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83789Windows SMB Client Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83781Windows Program Compatibility Assistant Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83785Windows COM+ Event System Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83783Windows Management Instrumentation Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83777Windows Bluetooth Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83778Microsoft Internet Messaging API Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-83771Windows Camera Frame Server Monitor Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83767Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83763Windows Input System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83762Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83757Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83756Windows Win32 Kernel Subsystem Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83752Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-84994Qwik: Crashing any Qwik Server via Resource thenableQwikDev qwik · @builder.io qwik +2
- CVE-2026-83751Windows MIDI Service Module Elevation of Privileges VulnerabilityMicrosoft Windows
- CVE-2026-83750Windows Error Reporting Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83735Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83739Windows Bluetooth Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-83732Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83728Windows Hyper-V Spoofing VulnerabilityMicrosoft Windows
- CVE-2026-83725Microsoft Windows Search Component Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-83724Windows Management Instrumentation Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83721Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83720Windows Kerberos Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83718Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83717Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83716Windows Hyper-V Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-83709Windows NTLM Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83702Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83701Windows Now Playing Session Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83698Windows Client-Side Caching (CSC) Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83696Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83689Windows Error Reporting Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83682Windows TCP/IP Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83680Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83679Windows Defender Firewall Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83677Windows DHCP Client Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-83676Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83670Function Discovery Service (fdwsd.dll) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83665Windows DHCP Server Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-83659Windows User Profile Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83647Windows Active Directory Domain Services Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-83645Active Directory Federation Services (AD FS) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-83643Windows Error Reporting Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-83640Windows NTFS Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-83639Windows Sensor Data Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83638Windows USB Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83637Windows Kernel-Mode Drivers Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83634Windows BitLocker Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83588Windows USB Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83587Windows Core Messaging Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83585Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83579Windows Smart Card Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83574Windows Search Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83570Windows Search Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83568Windows Kernel-Mode Drivers Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83567Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83566Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83564Windows Search Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83523Windows Image Acquisition Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-83522Windows IKE Extension Spoofing VulnerabilityMicrosoft Windows
- CVE-2026-83513Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83514Windows Partition Management Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83511Active Directory Federation Services (AD FS) Spoofing VulnerabilityMicrosoft Windows
- CVE-2026-83509Windows Setup Files Cleanup Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83508Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83506Servicing Stack Updates Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83505Windows Setup Files Cleanup Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-81971Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69454Microsoft Azure Attestation service and Device Health Attestation Service Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2026-69326Graphic Fonts Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-77496Windows Imaging Component Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-73027Windows Setup Files Cleanup Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-78459Microsoft Internet Information Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69596Windows Program Compatibility Assistant Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69577Microsoft Azure Attestation service and Device Health Attestation Service Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2026-69471Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69783Windows Update Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69733Windows Update Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-77902Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-69765Windows Storport Miniport Driver Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2026-69736Windows Credential Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70258Microsoft Windows Media Foundation Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-70237Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70236Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70209Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70230Windows Audio Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70207Network Policy Server (NPS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-70144Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70069Windows DHCP Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-70067Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70066Windows DHCP Server Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70051Windows SmartScreen Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70006Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-70004Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-70012Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69998Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69992Remote Desktop Services Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69994Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69991Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69996Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69997Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69995Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69987Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69988Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69986Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69985Windows libarchive Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69984Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69880Desktop Window Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69856Windows Storage Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69931Windows Storage Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-97794Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-97789Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-97783Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-97774Microsoft Office Click-To-Run Elevation of Privilege VulnerabilityMicrosoft 365 Apps for Enterprise
- CVE-2026-97759Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-97778Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-97739Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-97765Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-97755Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +3
- CVE-2026-97771Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-97770Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-97767Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-97780Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-97747Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-97761Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-97754Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-97758Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-97752Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-97776Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-97751Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-97003Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-97766Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-97017Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-97753Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-97750Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-97009Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-96997Microsoft Office OneNote Elevation of Privilege VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-97001Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-96996Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-96995Microsoft Office Word Elevation of Privilege VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-97012Microsoft Office Outlook Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-96108Desktop Window Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69452Windows Enterprise App Management Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96943Windows Raw Image Extension Remote Code Execution VulnerabilityMicrosoft Raw Image Extension
- CVE-2026-96928Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96920Windows Program Compatibility Assistant Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96868Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96867Windows NTFS Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-96861Network Device Enrollment Service (NDES) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-96856Windows Management Instrumentation Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96862Windows Spaceport.sys Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96866Network Device Enrollment Service (NDES) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-96318Windows Resume Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96319Windows USB Print Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96317Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96313Windows Push Notifications Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96312Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96309Windows Subsystem for Linux Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96308Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96307Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96306Windows Sysmain Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96305Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96302Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96248Windows Host Guardian Service Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-96246Network Policy Server (NPS) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-96245Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-96244Windows Internal System User Profile Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96236ASP.NET Core Denial of Service VulnerabilityMicrosoft ASP.NET Core · Microsoft Visual Studio
- CVE-2026-96224.NET Remote Code Execution VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +4
- CVE-2026-96223Windows Hyper-V Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96222Active Directory Federation Services (AD FS) Spoofing VulnerabilityMicrosoft .NET Framework · Microsoft Visual Studio +2
- CVE-2026-96220Windows Assigned Access Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96217Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96216Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96215Windows Autopilot Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70049Microsoft Configuration Manager Elevation of Privilege VulnerabilityMicrosoft Configuration Manager
- CVE-2026-88204Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-88202Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-88198Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-88196Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-88197Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-88155Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-88145Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-88150Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-85900Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-83891Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-70301Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-70302Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-70276Microsoft Office Click-To-Run Elevation of Privilege VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-70287Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-70266Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-70282Microsoft Office Outlook Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-70257Microsoft Office Outlook Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-70269Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-70251Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-70267Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-70256Microsoft Office Outlook Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-70220Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-70268Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-70197.NET and Visual Studio Remote Code Execution VulnerabilityMicrosoft .NET 10.0 installed on Linux · Microsoft .NET… +15
- CVE-2026-70190.NET Elevation of Privilege VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +2
- CVE-2026-70183ASP.NET Core Elevation of Privilege VulnerabilityMicrosoft ASP.NET Core · Microsoft Visual Studio
- CVE-2026-70181ASP.NET Core Denial of Service VulnerabilityMicrosoft ASP.NET Core · Microsoft Visual Studio
- CVE-2026-70179ASP.NET Core Elevation of Privilege VulnerabilityMicrosoft Visual Studio · Microsoft.AspNetCore.Authenticati…
- CVE-2026-70175ASP.NET Core Elevation of Privilege VulnerabilityMicrosoft ASP.NET Core · Microsoft Visual Studio
- CVE-2026-70161.NET Elevation of Privilege VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +2
- CVE-2026-70159ASP.NET Core Denial of Service VulnerabilityMicrosoft Visual Studio · Microsoft.AspNetCore.SignalR.C… +1
- CVE-2026-70174.NET Remote Code Execution VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +4
- CVE-2026-70186ASP.NET Core Denial of Service VulnerabilityMicrosoft ASP.NET Core · Microsoft Visual Studio
- CVE-2026-70149Windows Client Side Caching driver (csc.sys) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70109Microsoft PostScript Printer Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70092Microsoft PostScript Printer Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70110Microsoft PostScript Printer Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70068Windows Client-Side Caching (CSC) Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70131Microsoft Windows Media Foundation Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70102Windows Spaceport.sys Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70134Windows Event Tracing Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70045Windows Work Folders Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70013Windows iSCSI Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-70031Windows iSCSI Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-70038Windows iSCSI Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-70008Windows IP Over USB Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70113Windows Client for NFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69977Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69949Windows Client for NFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69923Windows AI Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88146Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88136Web Distributed Authoring and Versioning (WEBDAV) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-88107Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88106Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88100Windows Storage Spaces Controller Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88098Windows Security Support Provider Interface Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88074Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88073Windows Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88071Windows Hyper-V Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88070Windows BitLocker Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-87716Windows Storage Spaces Controller Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-87713Windows Bluetooth Port Driver Remote Code ExecutionMicrosoft Windows
- CVE-2026-87712Microsoft Windows QoS Scheduler Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-87710Microsoft Local Security Authority (LSA) Server Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-87707Windows Fax and Scan Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-87706Windows Storage Spaces Controller Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-87697.NET Remote Code Execution VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +3
- CVE-2026-87691Windows Management Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85945Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85936Windows Shell Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-85934Windows AppX Deployment Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85933Windows Print Spooler Components Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85931Windows Distributed File System (DFS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-85930Windows Image Acquisition Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85926Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-85914Windows Embedded Mode Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85904Windows Device Association Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85867Windows Remote Access Connection Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85329Microsoft Account Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83710Windows Device Association Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83674Active Directory Federation Services (AD FS) Spoofing VulnerabilityMicrosoft Windows
- CVE-2026-70303Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70262WebDAV Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70238Windows Storage Spaces Controller Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70213Microsoft Power Apps Remote Code Execution VulnerabilityMicrosoft Power Apps for Android
- CVE-2026-70210Windows OLE DB Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70187Windows Remote Desktop Services Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2026-70185Microsoft PowerShell Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-70172Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70167Windows Domain Name Service Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2026-70164Windows TCP/IP Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70052Microsoft PowerShell Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-70048Windows Resilient File System (ReFS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69934Windows Spaceport.sys Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69916Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69943Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-88165Windows Active Directory Domain Services Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-88173Windows Background Intelligent Transfer Service (BITS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-88168Windows Bind Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88159Windows Background Intelligent Transfer Service (BITS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-88160Microsoft Windows Search Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88161Windows Local Security Authority (LSA) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88157Microsoft OpenSSH for Windows Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-88124Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88101Microsoft Input Method Editor (IME) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88096Windows DCOM Server Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88091Windows Management Instrumentation Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-87711Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-87708Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88080Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85927Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85920Windows BitLocker Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85918Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85915Windows PCI Bus Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85891Azure HDInsight Information Disclosure VulnerabilityMicrosoft Azure HDInsight
- CVE-2026-85881Microsoft Office Graphics Elevation of Privilege VulnerabilityMicrosoft Office for Android
- CVE-2026-85871Windows Kernel-Mode Drivers Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85869Microsoft Windows Search Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85870Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85868Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85864Python Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85863Clipboard User Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85861Clipboard User Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85858Windows Win32 Kernel Subsystem Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85860Windows Message Queuing Queue Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85856Internet Connection Sharing (ICS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-85855Windows DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85854Windows DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85853Windows DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85851Windows SmartScreen Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85850Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85849Windows AppX Deployment Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85848Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85846Web Account Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85843Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85842Windows Image Acquisition Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85837Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85836Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85834Windows TCP/IP Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85833Windows Modern Device Management (MDM) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85832Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85829Windows Wired AutoConfig Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85828WebDAV Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85827WebDAV Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85826Windows Fast FAT Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85824Windows Composite Image File System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85823Windows Composite Image File System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85825Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85822Windows exFAT File System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85820Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85817Microsoft PowerShell Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-85811Network Policy Server (NPS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-85810Windows Telephony Server Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85808Windows Routing and Remote Access Service (RRAS) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-85807Windows USB Video Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85804Windows Win32 Kernel Subsystem Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85803Windows Camera Frame Server Monitor Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85802Windows Win32 Kernel Subsystem Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85800Windows Error Reporting Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85799Network Policy Server (NPS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-85798Windows Distributed File System (DFS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-85796Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85795Windows Text Services Framework Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85791Windows Encrypting File System (EFS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85377Windows CD-ROM Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85376Windows Print Spooler Components Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85375Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85373Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85371Network Policy Server (NPS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-85372Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85369Windows Hyper-V Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85370WebDAV Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85367Windows Cash Drawer Protocol Provider Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85368Windows TCP/IP Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85366Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85365Servicing Stack Updates Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85364Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85362Windows Management Instrumentation Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85361Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85359Windows Performance Monitor Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85358Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85357Windows Phone Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85356Windows Volume Manager Extension Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85355Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85354Windows Error Reporting Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85352Windows Device Association Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85341Windows USB Video Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85339Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-85343Windows Hyper-V Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85338Microsoft Graphics Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85353Windows Print Spooler Components Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-85342Windows Device Association Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85334Windows Message Queuing Queue Manager Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-85332Windows Device Association Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85328Windows Projected File System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85327Windows Print Spooler Components Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85324Active Directory Federation Services (AD FS) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-85322Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-85321Active Directory Federation Services (AD FS) Denial of Service VulnerabilityMicrosoft Windows Server 2012 R2 · Microsoft Windows Server
- CVE-2026-85319Active Directory Federation Services (AD FS) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-85318Servicing Stack Updates Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-84020Windows Routing and Remote Access Service (RRAS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-84019Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-84018Windows Print Spooler Components Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-84017Windows Routing and Remote Access Service (RRAS) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-84016Windows EAPHost Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-84014Windows Device Association Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-84013Windows Telephony Server Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-84012Windows Remote Desktop Services Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-83929Windows GDI Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-83932Windows Group Policy Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83927Windows Registry Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83928Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-83922Windows Direct Composition Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83920Windows Search Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83919Microsoft Internet Messaging API Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-83921Windows Search Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83917Windows ALPC Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83916Windows Error Reporting Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-83914Microsoft XML Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-83912Windows Direct Composition Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83886Windows Update Orchestrator Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83871Microsoft OpenSSH for Windows Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83911Windows Storage Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83769Microsoft OpenSSH for Windows Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83741Internet Explorer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83586Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83569HID Parser Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70299Windows Bind Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70286Windows Graphics Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70275Windows CD-ROM File System Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-70243Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70241Windows Kerberos Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70222Windows Shell Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70163Microsoft OpenSSH for Windows Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-70151Windows Direct Composition Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70089Windows GDI Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-70086Microsoft Windows Search Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83896Windows Direct Composition Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83902Windows Direct Composition Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83879Windows Overlay Filter Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83867Windows Push Notifications Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83868Microsoft Bluetooth Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83901Windows Win32 Kernel Subsystem Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83882Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83866Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83876Windows Shell Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83872Windows TCP/IP Local Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83862Windows Network Load Balancing Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-83855Windows WLAN Service Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-83853Windows Hello Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83852Windows Bind Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83851Windows Partition Management Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83848Windows COM+ Event System Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83846Connected Devices Platform Service (Cdpsvc) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83847Microsoft Account Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83844Windows Paint Remote Code Execution VulnerabilityMicrosoft Paint
- CVE-2026-83843Windows Internet Key Exchange (IKE) Extension Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-83842Windows TCP/IP Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83838Windows Bluetooth A2DP driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83839Windows Hyper-V Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83834Windows Kernel-Mode Drivers Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83836Windows Event Tracing Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-83833Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83832Windows Spaceport.sys Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83828Windows MIDI Service Module Elevation of Privileges VulnerabilityMicrosoft Windows
- CVE-2026-83827Windows Bluetooth Port Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83826Windows Error Reporting Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83796Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83793Windows Update Orchestrator Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83784Windows Encrypting File System (EFS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83779Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83775Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83768Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83759Windows Encrypting File System (EFS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-83758Windows Error Reporting Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-83761Windows Win32 Kernel Subsystem Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83754Microsoft OpenSSH for Windows Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-83753Windows Camera Frame Server Monitor Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83749Windows Overlay Filter Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83740Windows Hello Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83738Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83727Windows Overlay Filter Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83726Windows DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83722Microsoft Local Security Authority (LSA) Server Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83715Windows Error Reporting Tampering VulnerabilityMicrosoft Windows
- CVE-2026-83712Windows NTFS Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-83708Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83707Windows Event Tracing Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83704Microsoft Windows Search Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83700Windows Now Playing Session Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83699Windows Client-Side Caching (CSC) Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83694Windows Volume Manager Extension Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83692Windows Bind Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83691Windows DHCP Server Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83690Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83688Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-83687Windows Connected User Experiences and Telemetry Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83678Windows TCP/IP Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83675Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83669Windows Error Reporting Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83666Active Directory Certificate Services (AD CS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83655Network Policy Server (NPS) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-83654Windows Modern Device Management (MDM) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83652Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83650Windows Media Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83644Windows Audio Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83642Windows Domain Name Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-83641Windows Media Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83635Role: DNS Server Denial of Service VulnerabilityMicrosoft Windows Server
- CVE-2026-83584Windows Smart Card Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83583Windows Geotag Broker Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83580Windows Client-Side Caching (CSC) Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83575Windows Search Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83518RPC Runtime Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83516Windows Local Security Authority Subsystem Service (LSASS) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-83510Windows Setup Files Cleanup Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83499Windows Server Update Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-81969Windows Server Update Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69882Windows Update Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69718Windows Update Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69673Windows Update Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69633Windows Update Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69743Windows Program Compatibility Assistant Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-72969Windows Program Compatibility Assistant Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69650Windows Key Distribution Center Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69830Windows DHCP Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69387Windows Error Reporting Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-72934Windows Program Compatibility Assistant Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69354Windows Error Reporting Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70580Windows Credential Guard Spoofing VulnerabilityMicrosoft Windows
- CVE-2026-69651.NET Denial of Service VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +4
- CVE-2026-72955Windows Application Compatibility Cache Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69521Windows iSCSI Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-68836Windows kernel32.dll Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70285Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70278Microsoft Windows Media Foundation Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70274Windows Bind Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70273Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70272Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70271Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Office for Android · Microsoft Windows
- CVE-2026-70252Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege VulernabilityMicrosoft Windows
- CVE-2026-70255Desktop Window Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70253Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70249Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70225Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70223Windows Console Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70218Windows StateRepository API Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70247HTTP.sys Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-70233Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70205Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70245Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70168Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70169Windows Connected Devices Platform Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70198Windows Push Notifications Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70156Microsoft Windows Search Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70177Microsoft Windows Search Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70176Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70150Microsoft Windows Search Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70142Windows Update Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70133Windows SMB Server Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-70155Windows DNS Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-70138Windows OLE Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70136Microsoft Windows Search Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70126Windows Bluetooth Port Driver Remote Code ExecutionMicrosoft Windows
- CVE-2026-70118Windows Audio Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70132Windows Portable Device File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70115Microsoft Windows Search Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70140Windows Audio Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70123Microsoft Graphics Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70127Windows Domain Name Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-70114Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70117Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70108Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70139Windows Update Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70121Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70106Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Office 365 for Mac · Microsoft Windows
- CVE-2026-70093Windows Rich Text Edit Control Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70103Windows Error Reporting Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70095Windows iSCSI Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-70104Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70082Windows DNS Denial of Service VulnerabilityMicrosoft Windows Server
- CVE-2026-70079Windows DNS Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-70076Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70064Windows Kerberos Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70062Windows libarchive Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-70060Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70059Windows OLE Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70058Windows DHCP Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-70056Windows Update Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70033Windows Remote Desktop Gateway (RD Gateway) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-70027Windows Subsystem for Linux Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70026Windows Secure Kernel Mode Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70021Windows Direct Composition Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70015Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70014Windows Cryptographic Services Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-70010Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69976Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69970Kernel Streaming Service Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69964Kernel Streaming Service Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69966Kernel Streaming Service Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69963Kernel Streaming Service Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69959Windows Overlay Filter Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69957Windows Overlay Filter Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69953Windows Overlay Filter Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69952Windows Overlay Filter Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69950Windows Overlay Filter Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69945Windows AppX Deployment Extensions Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69942Windows Overlay Filter Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69918Windows Core Messaging Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69913Windows TCP/IP Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69909Microsoft COM for Windows Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69926Desktop Window Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69850Windows Certificates Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69840Windows Certificates Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69867SQLite Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69795Windows Clipboard Server Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69935Windows Storage Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69766Windows Storage Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69763Windows Storage Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-61931Windows Perception Simulation Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70566Windows Schannel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69363Windows Error Reporting Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-72968Windows Program Compatibility Assistant Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-49785UEFI Secure Boot Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-108460Windows Message Queuing Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69898Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-108465Windows Update Delivery Optimization Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-108464Software Protection Platform (SPP) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-108461Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-108399Windows Hyper-V Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105733Windows Hyper-V Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-105732SysInternals Elevation of Privilege VulnerabilityMicrosoft Sysinternals Suite
- CVE-2026-105723Windows Distributed File System (DFS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105722Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105718Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-105717Microsoft Office Access Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-108467Microsoft PostScript Printer Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-108398.NET Framework Security Feature Bypass VulnerabilityMicrosoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 ·… +2
- CVE-2026-69370Visual Studio Code Remote Code Execution VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-108458Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-97800Windows Mobile Broadband Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105716Microsoft Office Access Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-105715Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-105714Microsoft Office Access Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-105599Microsoft Office PowerPoint Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-105598Microsoft Office Access Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-105597Microsoft Office Access Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-105596Microsoft Office Access Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-105595Microsoft Office Access Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-105593Microsoft Office Access Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-105592Microsoft Office Access Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-105591Microsoft Office Access Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-102866Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-102863Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-102862Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-102861Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-102860Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-102858Microsoft Office OneNote Remote Code Execution VulnerabilityMicrosoft Office 365 for Mac · Microsoft Office LTSC for Mac
- CVE-2026-102857Microsoft Office Visio Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-102856Microsoft Office Visio Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-102855Microsoft Office Visio Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-70098Visual Studio Code Remote Code Execution VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-102235Visual Studio Code Remote Code Execution VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-102234Visual Studio Code Security Feature Bypass VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-102233Visual Studio Code Security Feature Bypass VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-102232Visual Studio Code Security Feature Bypass VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-102231Visual Studio Code Security Feature Bypass VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-102227Windows Resilient File System (ReFS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-108468Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-108457Microsoft Windows PDF Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-108400HEVC Video Extensions Remote Code Execution VulnerabilityMicrosoft HEVC Video Extensions
- CVE-2026-105728Dynamics Business Central Information Disclosure VulnerabilityMicrosoft Dynamics NAV
- CVE-2026-105727Microsoft Dynamics 365 Business Central Elevation of Privilege VulnerabilityMicrosoft Dynamics NAV
- CVE-2026-105725Windows Security App Elevation of Privilege VulnerabilityMicrosoft Windows Security App
- CVE-2026-103572Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution VulnerabilityMicrosoft Visual Studio
- CVE-2026-102850Microsoft Office Access Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-102849Microsoft Office Access Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-110238Rapyd Admin 9.0.0 before 9.20.0 Authorization Bypass via UsersModalEditEmbed Componentzofe rapyd-admin
- CVE-2026-110237Vifm 0.8.1-beta through 0.14.4 Unverified IPC FIFO Ownership Allows Cross-User Command Executionvifm
- CVE-2026-110236KDE Dolphin 24.08.0 through 26.08.2 OS Command Injection via Crafted Folder NameKDE Dolphin
- CVE-2026-110233rovr through 0.10.3 OS Command Injection via Unquoted Path to cmd.exeNSPC911 rovr
- CVE-2026-110220Kubeflow Model Registry through 0.3.17 SSRF via InferenceService Controller URL AnnotationKubeflow Model Registry
- CVE-2026-110217vhr through commit 03abbd3 Information Disclosure of Operator Password Hashes via GET /chat/hrslenve vhr
- CVE-2026-110216youlai-boot through 2.21.1 Missing Authorization in User Status Update Endpointyoulaitech youlai-boot
- CVE-2026-110215youlai-boot through 2.21.1 Missing Authorization in Role Menu Assignment Allows Privilege Escalationyoulaitech youlai-boot
- CVE-2026-110211SkillHub through 0.2.22 Missing Authorization in CLI Skill Delete Endpointiflytek skillhub
- CVE-2026-110209ai-fusion-video through 1.2.0 Missing Authorization in Configuration Read Endpoints Exposes Stored CredentialsStonewuu ai-fusion-video
- CVE-2026-110208Wukong AICRM through 20260610 Missing Authorization in System Configuration APIs Exposes Stored AI Provider KeysWuKongOpenSource Wukong AICRM
- CVE-2026-110207Wukong AICRM through 20260610 Missing Authorization in User and Role Management APIsWuKongOpenSource Wukong AICRM
- CVE-2026-110206Roo-Code through 3.54.0 Auto-Approve Bypass via Command Substitution at Command PositionRooCodeInc Roo-Code
- CVE-2026-110205Roo-Code through 3.54.0 Auto-Approve Bypass via Glob Token Discarding Command SubstitutionRooCodeInc Roo-Code
- CVE-2026-110204Roo-Code through 3.54.0 Auto-Approve Bypass via Funsub Command SubstitutionRooCodeInc Roo-Code
- CVE-2026-110203Roo-Code through 3.54.0 Auto-Approve Bypass via Quote Masking DesynchronizationRooCodeInc Roo-Code
- CVE-2026-110202Roo-Code through 3.54.0 Auto-Approve Bypass via Redirect Operator StrippingRooCodeInc Roo-Code
- CVE-2026-92088Improper handling of undefined values vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Escalation.upKeeper Solutions upKeeper Instant Privilege Access
- CVE-2026-103937Misskey: Denial of service resulting from insufficient cleanup processing during file uploadsmisskey-dev misskey
- CVE-2026-104817Misskey: Lack of rate limiting and size restrictions in RSS fetching APImisskey-dev misskey
- CVE-2026-104816Misskey: Cross-site scripting in RSS feed item linksmisskey-dev misskey
- CVE-2026-104340Adobe Framemaker | Heap-based Buffer Overflow (CWE-122)Adobe FrameMaker
- CVE-2026-103966Adobe Framemaker | Heap-based Buffer Overflow (CWE-122)Adobe FrameMaker
- CVE-2026-106625Adobe Framemaker | Out-of-bounds Write (CWE-787)Adobe FrameMaker
- CVE-2026-104341Adobe Framemaker | Out-of-bounds Write (CWE-787)Adobe FrameMaker
- CVE-2026-104342Adobe Framemaker | Use After Free (CWE-416)Adobe FrameMaker
- CVE-2026-104344Adobe Framemaker | Heap-based Buffer Overflow (CWE-122)Adobe FrameMaker
- CVE-2026-103967Adobe Framemaker | Out-of-bounds Write (CWE-787)Adobe FrameMaker
- CVE-2026-109429Mistral Vibe < 2.25.4 Bash Permission Bypass via ${var@P} Prompt-Transformmistralai mistral-vibe
- CVE-2026-109428Mistral Vibe < 2.25.5 Permission Bypass via Bash Line Continuationmistralai mistral-vibe
- CVE-2026-95631Adobe Commerce | Improper Input Validation (CWE-20)Adobe Commerce · Adobe Magento Open Source
- CVE-2026-92910Adobe Commerce | Incorrect Authorization (CWE-863)Adobe Commerce · Adobe Magento Open Source
- CVE-2026-92922Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Commerce · Adobe Magento Open Source
- CVE-2026-92908Adobe Commerce | Incorrect Authorization (CWE-863)Adobe Commerce · Adobe Magento Open Source
- CVE-2026-92911Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Commerce · Adobe Magento Open Source
- CVE-2026-104937CVE-2026-104937Shopware
- CVE-2026-110249Denial-of-service in the Exchange email componentMozilla Thunderbird
- CVE-2026-110247Integer overflow in libmime buffer growth could lead to heap corruptionMozilla Thunderbird
- CVE-2026-108385dataclasses-avroschema enum symbols can inject statements through generated member namesmarcosschroh dataclasses-avroschema
- CVE-2026-108384dataclasses-avroschema allows code injection through fixed-type aliases supplied as a bare stringmarcosschroh dataclasses-avroschema
- CVE-2026-108383dataclasses-avroschema enum field defaults can inject statements into generated modulesmarcosschroh dataclasses-avroschema
- CVE-2026-108382dataclasses-avroschema allows code injection through generated enum-symbol string literalsmarcosschroh dataclasses-avroschema
- CVE-2026-108381dataclasses-avroschema pydantic-class metadata allows code injection in generated annotationsmarcosschroh dataclasses-avroschema
- CVE-2026-108380dataclasses-avroschema field documentation allows code injection in generated Pydantic descriptionsmarcosschroh dataclasses-avroschema
- CVE-2026-108379dataclasses-avroschema fixed namespaces allow code injection in generated annotationsmarcosschroh dataclasses-avroschema
- CVE-2025-46773An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet ForFortinet FortiAnalyzer Cloud · Fortinet FortiAnalyzer
- CVE-2025-57739An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89] vulnerability in Fortinet ForFortinet FortiMail
- CVE-2026-108378dataclasses-avroschema record documentation can terminate generated class docstringsmarcosschroh dataclasses-avroschema
- CVE-2026-104085odt2spip < 4.4.0 OS Command Injection via Document Filenameodt2spip
- CVE-2026-108377dataclasses-avroschema allows code injection through generated Meta.schema_namemarcosschroh dataclasses-avroschema
- CVE-2026-108376dataclasses-avroschema allows code injection through record names in generated default factoriesmarcosschroh dataclasses-avroschema
- CVE-2026-108375dataclasses-avroschema allows code injection through generated field-default literalsmarcosschroh dataclasses-avroschema
- CVE-2026-53562Local Privilege EscalationCitrix UniconOS
- CVE-2026-110129fuintCatering through commit 122c9e6 IDOR via /clientApi/refund/detailfushengqian fuintCatering
- CVE-2026-110128fuint through commit 4c4bc8a Missing Authentication via /clientApi/order/detailfushengqian fuint
- CVE-2026-110124FastBee through 2.1.0 IDOR via DeviceController /iot/device Endpointskerwincui FastBee
- CVE-2026-110123Makunet maku-boot 4.3.0 through 5.0.0 Missing Authorization via Mail and SMS Config Endpointsmakunet maku-boot
- CVE-2026-110121PickMall lilishop through 4.4 IDOR via Goods Edit EndpointPickMall lilishop
- CVE-2026-110119yshopmall through 2.0.0 IDOR via Member Address API in UserAddressControllerguchengwuyue yshopmall
- CVE-2026-110118WorkFlow-Engine through 9.6.11 Missing Authorization via flowableui buttonOperation Endpointsrisesoft-y9 WorkFlow-Engine
- CVE-2026-110117SmartAdmin through 3.30.0 Missing Authorization via AdminProtectController1024-lab SmartAdmin
- CVE-2026-110116Digital-Infrastructure 9.6.5 through 9.6.11 Path Traversal via fileManager storeFilerisesoft-y9 Digital-Infrastructure
- CVE-2026-110115Digital-Infrastructure 9.6.5 through 9.6.11 Path Traversal via fileManager retrieveFileStreamrisesoft-y9 Digital-Infrastructure
- CVE-2026-110109JetLinks Community through 2.10.0 Missing Authorization via Product-Level Transparent Codec SaveJetLinks Community
- CVE-2026-110108MateCloud through 5.0.8 Missing Authorization via /api/v1/admin/storage APImateaix MateCloud
- CVE-2026-110104novel through 3.5.0 Unsalted MD5 Password Storagexxyopen novel
- CVE-2026-110102powerlevel10k through 1.20.0 Download of Code Without Integrity Check in gitstatus Installerromkatv powerlevel10k
- CVE-2026-110097Ikaros 1.2.0 through 1.2.5 TOTP Authentication Bypass via Temp Tokenikaros-dev ikaros
- CVE-2026-55823Frappe: Possibility of SQL injection in reportviewfrappe
- CVE-2026-103030Dio: Cross-origin redirect leaks sensitive request headers in `dio_http2_adapter`cfug dio · dio_http2_adapter
- CVE-2026-61642Squid Request Smuggling in HTTP Transfer-Encodingsquid-cache squid
- CVE-2026-82416FrankenPHP: Cross-request PHP session ID leak in worker mode when the session extension is a shared modulefrankenphp · github.com/dunglas/frankenphp
- CVE-2026-106047A Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before version 2026.4 allows a remote authenticated Ivanti Xtraction
- CVE-2026-106043A Missing Authentication for Critical Function vulnerability in Ivanti Xtraction before version 2026.4 allows a remote unauthenticated attacIvanti Xtraction
- CVE-2026-85990Leantime: Any Authenticated User Can Self-Escalate to Admin via Unauthorized JSON-RPC Methodsleantime · leantime/leantime
- CVE-2026-54641OpenRemote: Cross-Realm User Information Disclosure in UserResourceImplopenremote · io.openremote:openremote-manager
- CVE-2026-54640OpenRemote: XXE in KNXProtocol.startAssetImport() allows arbitrary file read via unprotected XMLInputFactoryopenremote · io.openremote openremote-manager +1
- CVE-2026-102702Arm: multiple issues with GNTTABOP_cache_flushXen
- CVE-2026-102699Arm: multiple issues with GNTTABOP_cache_flushXen
- CVE-2026-79610grant-table: double version change raceXen
- CVE-2026-79609x86: XPTI may break on huge-memory systemsXen
- CVE-2026-104005Incorrect authorization in MongoDB Server router for bulk writes to system namespacesMongoDB Server
- CVE-2026-104004Collection validators using collation-accepting expressions can crash MongoDB Server on insertMongoDB Server
- CVE-2026-102982Plane: XSS in work item commentsmakeplane plane
- CVE-2026-104935Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands.Ivanti Connect Secure
- CVE-2026-96299Missing Authorization Check on Internal Aggregation Stage in MongoDB Server mongos Leads to Denial of ServiceMongoDB Server
- CVE-2026-55376heym Python Tool Sandbox Escapeheymrun heym
- CVE-2026-102250CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could allow modified firmware to be uploaded when an authoSchneider Electric Sage RTU
- CVE-2026-108185Improper certificate validation in the My Notes feature of certain Zoom Clients may allow an unauthenticated user to conduct an information Zoom Communications Zoom Clients
- CVE-2026-108184Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an information disclosure vZoom Communications Zoom Clients
- CVE-2026-97334Network messaging layer decompression resource exhaustionCommvault Cloud
- CVE-2026-97333QAPI stack-based buffer overflowCommvault Cloud
- CVE-2026-77100MediaAgent Denial of ServiceCommvault Cloud
- CVE-2026-77096CVFS Missing AuthenticationCommvault Cloud · Commvault Grid(HSX) CVFS
- CVE-2026-77095CvFWD Null Pointer DereferenceCommvault Cloud
- CVE-2026-77094CvFWD Out-of-Bounds WriteCommvault Cloud
- CVE-2026-77093CvFWD Denial of ServiceCommvault Cloud
- CVE-2026-77090CVFS Information DisclosureCommvault Cloud · Commvault Grid(HSX) CVFS
- CVE-2026-18228Hyperscale Path TraversalCommvault Cloud
- CVE-2026-53420Buffer overflow in a Zoom Phone feature of Zoom Workplace Clients may allow an unauthenticated user to conduct a escalation of privilege viaZoom Communications Zoom Workplace
- CVE-2026-65198Huawei Default SNMPv3 USM keyHuawei openUBMC
- CVE-2026-53418Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an unauthenticated userZoom Communications Zoom Workplace
- CVE-2026-126561732E ArmorBlock® - Multiple VulnerabilitiesRockwell Automation 1732E ArmorBlock® I/O
- CVE-2026-126551732E ArmorBlock® - Multiple VulnerabilitiesRockwell Automation 1732E ArmorBlock® I/O
- CVE-2025-58774UEFI OOB Write and Buffer Overflow VulnerabilitiesAMI AptioV
- CVE-2025-58773UEFI OOB Write and Buffer Overflow VulnerabilitiesAMI AptioV
- CVE-2025-58772UEFI OOB Write and Buffer Overflow VulnerabilitiesAMI AptioV
- CVE-2025-58771UEFI OOB Write and Buffer Overflow VulnerabilitiesAMI AptioV
- CVE-2026-109967yt-dlp-web-ui through 4.0.0 NULL Pointer Dereference DoS via Service.Formatsmarcopiovanello yt-dlp-web-ui
- CVE-2026-109965Serena before 2.0.0 Symlink Following in File Tools Allows Access Outside Project Rootoraios serena
- CVE-2026-93907IBM WebSphere Application Server is affected by a bypass authentication vulnerabilityIBM WebSphere Application Server
- CVE-2026-95680IBM WebSphere Application Server is affected by an authorization bypassIBM WebSphere Application Server
- CVE-2026-103499IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of serviceIBM WebSphere Application Server - Liberty · IBM WebSphere…
- CVE-2026-74047Wazuh 4.0.0 before 4.14.8 authd.pass Disclosure via Agent 000 Config Endpointwazuh-manager
- CVE-2026-74045Wazuh 3.12.0 before 4.14.8 Heap Buffer Overflow in wazuh-analysisd FIM Decoderwazuh-manager
- CVE-2026-74043Wazuh 4.1.1 before 4.14.8 Path Traversal via Cluster Upload Functionswazuh-manager
- CVE-2026-74041Wazuh 4.14.3 < 4.14.8 / 4.10.4 Remote Command Validation Bypass via Case Mismatchwazuh-manager
- CVE-2026-74037Wazuh 4.0.0 before 4.14.8 Session Invalidation Bypass in check_tokenwazuh-manager
- CVE-2026-74036Wazuh 4.3.0 before 4.14.8 Remote Code Execution via SCA Command Policieswazuh-agent
- CVE-2026-74035Wazuh 4.6.0 before 4.14.8 Authentication Bypass via Empty Password in update_userwazuh-manager
- CVE-2026-74034Wazuh 4.1.0 before 4.14.8 Arbitrary File Read via upgrade_custom Commandwazuh-manager
- CVE-2026-74033Wazuh from 4.1.1 before 4.14.8 Path Traversal in CDB List Cluster Handlerswazuh-manager
- CVE-2026-74031Wazuh 4.1.1 before 4.14.8 Path Traversal File Deletion via Rule/Decoder Delete Helperswazuh-manager
- CVE-2026-109961Froxlor 0.10.0 before 2.3.14 Newline Injection via Ftps.add additional_membersfroxlor
- CVE-2026-109960Froxlor 2.0.0 before 2.3.14 Stored XSS via Customer Theme Valuefroxlor
- CVE-2026-109956NLTK through 3.10.3 Path Traversal via WekaClassifier Model Pathnltk
- CVE-2026-109954Parse Server 9.0.0 before 9.10.2-alpha.5 Transactional Batch Request Write Interferenceparse-community parse-server · parse
- CVE-2026-109949FreeRDP 3.0.0 before 3.32.0 PIN Brute-Force via Virtual SmartcardFreeRDP
- CVE-2026-109947FreeRDP 3.20.1 before 3.32.0 Unbounded Allocation via drive_process_irp_readFreeRDP
- CVE-2026-109946FreeRDP 3.11.0 before 3.32.0 Reachable Assertion via AVC444 Odd Region WidthFreeRDP
- CVE-2026-109944FreeRDP 3.0.0 before 3.32.0 Reachable Assertion via Stale Smartcard HandleFreeRDP
- CVE-2026-109943FreeRDP 3.29.0 before 3.32.0 Double Free via Async-Update Polygon OrderFreeRDP
- CVE-2026-109942FreeRDP 2.3.0 before 3.32.0 NULL Pointer Dereference via RD Gateway Close Channel PacketFreeRDP
- CVE-2026-109941FreeRDP 2.3.0 before 3.32.0 Infinite Loop via RD Gateway Chunked ResponseFreeRDP
- CVE-2026-109939FreeRDP 3.27.1 before 3.32.0 NULL Pointer Dereference via Cache Bitmap V3 OrderFreeRDP
- CVE-2026-109938FreeRDP 3.11.0 before 3.32.0 Integer Overflow via Mapped Video Geometry UpdateFreeRDP
- CVE-2026-109678FreeRDP 3.0.0-beta1 before 3.32.0 Reachable Assertion via Emulated SCardStatusAFreeRDP
- CVE-2026-109677FreeRDP 2.0.0-beta1 before 3.28.0 Out-of-Bounds Read via LocateCardsByATRA HandlerFreeRDP
- CVE-2026-109676FreeRDP 3.0.0-beta1 before 3.32.0 Use-After-Free via Smartcard ConnectFreeRDP
- CVE-2026-65180NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciouNVIDIA Megatron-LM
- CVE-2026-65104NVIDIA Megatron-LM for all platforms contains a vulnerability in inference, where an attacker could cause hash collisions in the cache used NVIDIA Megatron-LM
- CVE-2026-65110NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where, an attacker could cause an RCE by convincing a user to load a malicNVIDIA Megatron-LM
- CVE-2026-65172NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnerability in the ETL management API where an unauthenticated reNVIDIA AIStore framework
- CVE-2026-65164NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component where a remote attacker may causeNVIDIA AIStore framework
Medium, low and unrated 595
- CVE-2026-105390Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackersOpenVPN ovpn-dco-win
- CVE-2026-15468Authorization bypass through User-Controlled key vulnerability in HYPR Passwordless on Windows allows Privilege Escalation.HYPR Passwordless
- CVE-2026-53564Arbitrary file read and writeCitrix UniconOS
- CVE-2026-53563Persistent Command ExecutionCitrix UniconOS
- CVE-2026-84420Out-of-Bounds Write and Out-of-Bounds ReadCitirx Citrix Workspace app for Windows
- CVE-2026-84419Out-of-Bounds WriteCitrix Workspace app for Windows
- CVE-2026-77205Denial of Service via sending bogus X.509 certificatesThe Libreswan Project libreswan
- CVE-2026-102501CAI Content Credentials | Improper Input Validation (CWE-20)Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1
- CVE-2026-103294CAI Content Credentials | Improper Certificate Validation (CWE-295)Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1
- CVE-2026-100116CAI Content Credentials | Improper Certificate Validation (CWE-295)Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1
- CVE-2026-48378CAI Content Credentials | Improper Input Validation (CWE-20)Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1
- CVE-2026-102502CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1
- CVE-2026-100125CAI Content Credentials | Improper Input Validation (CWE-20)Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1
- CVE-2026-48377CAI Content Credentials | Improper Input Validation (CWE-20)Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1
- CVE-2026-103820CAI Content Credentials | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1
- CVE-2026-110141Observable discrepancy in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to leak cross-origin data via a crafted HTGoogle Chrome
- CVE-2026-110150Privilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to obtain sensitive informatGoogle Chrome
- CVE-2026-110146Information leak in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker leveraging social engineering to obtain sensGoogle Chrome
- CVE-2026-110143Use of uninitialized variable in ThirdParty lmza_sdk in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially read mGoogle Chrome
- CVE-2026-110160Missing authorization in ReadingMode in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer procGoogle Chrome
- CVE-2026-110170Use after free in Bindings in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to read memory inside the sandbox via a craftedGoogle Chrome
- CVE-2026-100126Bridge | Out-of-bounds Read (CWE-125)Adobe Bridge
- CVE-2026-94520Microsoft SQL Server Denial of Service VulnerabilityMicrosoft SQL Server
- CVE-2026-88089Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-88085Microsoft SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server
- CVE-2026-88086Microsoft SQL Server Information Disclosure VulnerabilityMicrosoft SQL Server
- CVE-2026-88084Microsoft SQL Server Denial of Service VulnerabilityMicrosoft SQL Server
- CVE-2026-67628Microsoft SQL Server Information Disclosure VulnerabilityMicrosoft SQL Server
- CVE-2026-67626Microsoft SQL Server Denial of Service VulnerabilityMicrosoft SQL Server
- CVE-2026-83945Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-70189Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-103822Substance3D - Designer | Out-of-bounds Read (CWE-125)Adobe Substance 3D Designer
- CVE-2026-103825Substance3D - Designer | Out-of-bounds Read (CWE-125)Adobe Substance 3D Designer
- CVE-2026-103823Substance3D - Designer | Stack-based Buffer Overflow (CWE-121)Adobe Substance 3D Designer
- CVE-2026-103824Substance3D - Designer | NULL Pointer Dereference (CWE-476)Adobe Substance 3D Designer
- CVE-2026-103826Substance3D - Designer | NULL Pointer Dereference (CWE-476)Adobe Substance 3D Designer
- CVE-2026-103827Substance3D - Designer | Stack-based Buffer Overflow (CWE-121)Adobe Substance 3D Designer
- CVE-2026-103828Substance3D - Designer | NULL Pointer Dereference (CWE-476)Adobe Substance 3D Designer
- CVE-2026-103829Substance3D - Designer | NULL Pointer Dereference (CWE-476)Adobe Substance 3D Designer
- CVE-2026-100131Substance3D - Sampler | Out-of-bounds Read (CWE-125)Adobe Substance 3D Sampler
- CVE-2026-100130Substance3D - Sampler | Out-of-bounds Read (CWE-125)Adobe Substance 3D Sampler
- CVE-2026-95640Photoshop Desktop | NULL Pointer Dereference (CWE-476)Adobe Photoshop
- CVE-2026-105896Photoshop Desktop | NULL Pointer Dereference (CWE-476)Adobe Photoshop
- CVE-2026-108388Indico legacy contribution export cache poisoning discloses restricted metadataindico
- CVE-2026-95696IBM WebSphere Application Server Liberty Denial of ServiceIBM WebSphere Application Server - Liberty
- CVE-2026-11713IBM WebSphere Application Server Liberty Incorrect AuthorizationIBM WebSphere Application Server - Liberty
- CVE-2026-14532IBM WebSphere Application Server Liberty Integer OverflowIBM WebSphere Application Server - Liberty
- CVE-2026-14909IBM WebSphere Application Server Liberty Information DisclosureIBM WebSphere Application Server - Liberty
- CVE-2026-77816IBM WebSphere Application Server Liberty Improper Certificate ValidationIBM WebSphere Application Server - Liberty
- CVE-2026-79715IBM WebSphere Application Server Liberty Path TraversalIBM WebSphere Application Server - Liberty
- CVE-2026-85473Out-of-Range Timestamp Claim Handling in auth0/java-jwtAuth0 java-jwt
- CVE-2026-78633Denial of Service in Okta RADIUS Agent Packet ParserOkta RADIUS Agent
- CVE-2026-78632Insecure Default File Permissions in Okta RADIUS Agent Windows InstallerOkta RADIUS Agent
- CVE-2026-107371Missing Verification of auth_time Claim in auth0.jsauth0.js
- CVE-2026-107370Improper Request Handling for Active Directory Logins in auth0-lockauth0-lock
- CVE-2026-107369Improper Validation of Post-Login Redirect URL in nextjs-auth0nextjs-auth0
- CVE-2026-78628Improper Input Validation in the Okta Credential Provider for WindowsOkta Credential Provider for Windows
- CVE-2026-63171Omnispace Agora Project < 26.10.0 Stored XSS via Category DescriptionOmnispace Agora Project
- CVE-2026-63169Omnispace Agora Project < 26.10.0 Stored XSS via Messenger IframeOmnispace Agora Project
- CVE-2026-19810Cross-Site Scripting (XSS) in Symantec Endpoint Detection and Response ConsoleBroadcom Symantec Endpoint Detection and Response
- CVE-2026-63168Omnispace Agora Project < 26.10.0 Stored XSS via Nested POST Array BypassOmnispace Agora Project
- CVE-2026-63157Omnispace Agora Project < 26.10.0 Stored XSS via Links ModuleOmnispace Agora Project
- CVE-2026-63156Omnispace Agora Project < 26.10.0 Reflected XSS via visioUrl ParameterOmnispace Agora Project
- CVE-2026-63148Omnispace Agora Project < 26.10.0 Stored XSS via Poll-Response Attachment FilenameOmnispace Agora Project
- CVE-2026-103852Substance3D - Stager | NULL Pointer Dereference (CWE-476)Adobe Substance 3D Stager
- CVE-2026-103850Substance3D - Stager | Out-of-bounds Read (CWE-125)Adobe Substance 3D Stager
- CVE-2026-63147Omnispace Agora Project < 26.10.0 Stored XSS via Uploaded File NameOmnispace Agora Project
- CVE-2026-103855Dimension | NULL Pointer Dereference (CWE-476)Adobe Dimension
- CVE-2026-103853Dimension | Out-of-bounds Read (CWE-125)Adobe Dimension
- CVE-2026-83960Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-83958Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-48398Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2026-110082Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Experience Manager 6.5 LTS · Adobe Experience Manager
- CVE-2026-110081Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager 6.5 LTS · Adobe Experience Manager
- CVE-2026-110080Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2026-110079Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2026-110078Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2026-110077Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2026-110076Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2026-110075Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2026-110074Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager 6.5 LTS · Adobe Experience Manager
- CVE-2026-110073Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2026-110037Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager 6.5 LTS · Adobe Experience Manager
- CVE-2026-109415Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager 6.5 LTS · Adobe Experience Manager
- CVE-2026-107682Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2026-107305Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2026-106633Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager 6.5 LTS · Adobe Experience Manager
- CVE-2026-106632Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager 6.5 LTS · Adobe Experience Manager
- CVE-2026-106631Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager 6.5 LTS · Adobe Experience Manager
- CVE-2026-106628Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager 6.5 LTS · Adobe Experience Manager
- CVE-2026-56826Shopper: Missing function-level authorization on Settings tax/zone/shipping Livewire components allows a low-privileged user to delete commerce configurationshopperlabs shopper · shopper/framework
- CVE-2026-110256Dockhand before 1.0.19 Username Enumeration via LDAP Injection in tryLdapAuthFinsys dockhand
- CVE-2026-110254Dockhand before 1.0.45 SSRF via IPv6 Transition Address Bypass in ipCategoryFinsys dockhand
- CVE-2026-108129Role: DNS Server Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-108128Role: DNS Server Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-108127Role: DNS Server Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-97844Role: DNS Server Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-97843Role: DNS Server Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-97842Role: DNS Server Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-97841Role: DNS Server Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-97840Role: DNS Server Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-97839Role: DNS Server Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-97838Role: DNS Server Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-97837Role: DNS Server Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-97836Role: DNS Server Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-97835Role: DNS Server Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-97834Role: DNS Server Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-97833Role: DNS Server Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-97832Role: DNS Server Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-97831Role: DNS Server Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-97829Role: DNS Server Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-97828Role: DNS Server Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-97827Role: DNS Server Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-97826Role: DNS Server Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-97825Role: DNS Server Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-97824Role: DNS Server Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-97823Role: DNS Server Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-97822Role: DNS Server Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-97821Role: DNS Server Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-97820Role: DNS Server Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-97819Role: DNS Server Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-97817Role: DNS Server Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-97813Windows Hyper-V Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-70162.NET Denial of Service VulnerabilityMicrosoft Visual Studio · Microsoft System.Security.Cryptog…
- CVE-2026-105006HID Class Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-103578Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-103576Active Directory Federation Services (AD FS) Spoofing VulnerabilityMicrosoft Windows
- CVE-2026-103567Windows Broadcast DVR User Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-103560Role: DNS Server Tampering VulnerabilityMicrosoft Windows Server
- CVE-2026-69922Microsoft Office Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-102221Secure Boot Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-102206Windows Portable Device MTP Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-102199Microsoft Windows Codecs Library Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-102198Windows Remote Desktop Protocol Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-102188Windows Storage Port Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-102186Windows Network File System Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-102187Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-88226Windows Storage Port Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69506Windows Key Storage Provider Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-102851Visual Studio Code Security Feature Bypass VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-97790Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering VulnerabilityMicrosoft Windows
- CVE-2026-97760Microsoft Office Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-97743Microsoft Office Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-97779Microsoft Office Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-96948Windows Client Side Caching driver (csc.sys) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-96944Windows Storage Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-96938Windows Distributed File System (DFS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85866Windows ALPC Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69675Windows Network File System Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2026-96926Role: DNS Server Tampering VulnerabilityMicrosoft Windows
- CVE-2026-96930Windows Universal Disk Format File System Driver (UDFS) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-96927Windows NTFS Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-96925Windows NTFS Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-96910Microsoft Windows Search Component Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-96858Windows Security Account Manager Tampering VulnerabilityMicrosoft Windows
- CVE-2026-96853Windows Win32 Kernel Subsystem Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-96854Windows Device Association Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-96846WebDAV Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-96850Windows Modern Device Management (MDM) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-96321Remote Desktop Display Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-96303Microsoft PowerShell Security Feature Bypass VulnerabilityMicrosoft PowerShell · powershell
- CVE-2026-96300RPC Endpoint Mapper Service Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-96238.NET Security Feature Bypass VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +3
- CVE-2026-96234.NET Information Disclosure VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +3
- CVE-2026-96229.NET Information Disclosure VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +3
- CVE-2026-96206Windows Subsystem for Linux Information Disclosure VulnerabilityMicrosoft Windows Subsystem for Linux
- CVE-2026-88203Microsoft Office PowerPoint Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-88195Microsoft Office Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-88190Microsoft Office Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-88192Microsoft Office Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-88183Microsoft Office PowerPoint Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-88184Microsoft Office Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-88172Microsoft Office Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-88154Microsoft Office Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-85932Microsoft Office SharePoint Information Disclosure VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-70217Microsoft Office SharePoint Information Disclosure VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-70219Microsoft Office Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-70214Microsoft Office Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-69919Windows Cryptographic Services Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-88130Role: DNS Server Denial of Service VulnerabilityMicrosoft Windows Server
- CVE-2026-88129Role: DNS Server Denial of Service VulnerabilityMicrosoft Windows Server
- CVE-2026-88125Role: DNS Server Denial of Service VulnerabilityMicrosoft Windows Server
- CVE-2026-88123Role: DNS Server Denial of Service VulnerabilityMicrosoft Windows Server
- CVE-2026-88122Role: DNS Server Denial of Service VulnerabilityMicrosoft Windows Server
- CVE-2026-85873Skype for Business Elevation of Privilege VulnerabilityMicrosoft Skype for Business Server 2015 CU13 · Microsof… +1
- CVE-2026-70264Microsoft Defender Information Disclosure VulnerabilityMicrosoft Windows Defender
- CVE-2026-70261Microsoft Trace Data Helper Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-70260Microsoft Trace Data Helper Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-70227Windows Device Association Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-70148Windows Broadcast DVR User Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-70122Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70084Windows Projected File System Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69902Windows NTFS Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-87698Windows Remote Access Service Infrastructure Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-87709Windows Host Guardian Service Tampering VulnerabilityMicrosoft Windows
- CVE-2026-83933Windows Update Orchestrator Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83925Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-85910Windows StateRepository API Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-85909Windows Universal Disk Format File System Driver (UDFS) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83907Windows Hello Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83905Windows Shell Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83904HID Parser Library Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83897Windows Win32 Kernel Subsystem Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83895Windows Win32 Kernel Subsystem Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83870Windows Aggregated Data Platform Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83898HID Parser Library Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83884Windows Human Interface Device Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83887HID Parser Library Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83835Windows Common Log File System Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83794Windows Portable Device MTP Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83788Windows rndismp6.sys Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83786Windows NTFS Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83774Windows Win32 Kernel Subsystem Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83773Windows MIDI Service Module Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83766Windows Hyper-V Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-83764Windows Clipboard User Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83765Windows DWM Core Library Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83755Win32k Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83747Windows Error Reporting Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83737Windows NTFS Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83736Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83714HTTP.sys Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83703Windows Wi-Fi Driver Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-83697Windows Modern Device Management (MDM) Tampering VulnerabilityMicrosoft Windows
- CVE-2026-83695Windows Event Logging Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83686Microsoft Windows Search Component Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83685Windows Internet Key Exchange (IKE) Extension Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-83683Windows Encrypting File System (EFS) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83672Windows Installer Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83668Windows WLAN Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83664Windows Portable Device File System Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83656Windows Modern Device Management (MDM) Tampering VulnerabilityMicrosoft Windows
- CVE-2026-83651Windows GDI Information Disclosure VulnerabilityMicrosoft Office 365 for Mac · Microsoft Office for Andr… +2
- CVE-2026-83636Windows Hyper-V Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-83582Windows Graphics Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83573Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83565Windows Encrypting File System (EFS) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83507Windows Update Orchestrator Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69635Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69640Windows Key Distribution Center Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-70295Win32k Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-70294Win32k Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-70293Win32k Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-70292Win32k Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-70288Win32k Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-70232Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-70208HTTP.sys Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-70201Windows DHCP Server Denial of Service VulnerabilityMicrosoft Windows Server
- CVE-2026-70211Win32k Information Disclosure VulnerabilityMicrosoft Office 365 for Mac · Microsoft Office for Andr… +2
- CVE-2026-70199Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-70075Windows Virtualization-Based Security (VBS) Enclave Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-70072Windows Netlogon Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-70074Windows DNS Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-70071Role: DNS Server Tampering VulnerabilityMicrosoft Windows
- CVE-2026-70055Windows Cryptographic Services Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69999Windows Update Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-62687Windows Backup Engine Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-62879Windows SmartScreen Tampering VulnerabilityMicrosoft Windows
- CVE-2026-59116Windows Remote Desktop Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-97782Microsoft Office SharePoint Tampering VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-97740Microsoft Office Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-97014Microsoft Office Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-97744Microsoft Office PowerPoint Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-97005Microsoft Office PowerPoint Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-95904Windows Event Logging Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-96935Windows NTFS Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-96921Windows Message Queuing Queue Manager Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-96865Windows Secure Kernel Mode Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-96860Windows USB Print Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-96859Windows Imaging Component Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-96863Windows Storage Port Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96857Windows Projected File System Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-96855Windows Modern Device Management (MDM) Tampering VulnerabilityMicrosoft Windows
- CVE-2026-96851Windows Management Instrumentation Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-96848Windows Win32 Kernel Subsystem Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-96849Windows Kernel-Mode Drivers Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-96316Windows Routing and Remote Access Service (RRAS) Tampering VulnerabilityMicrosoft Windows
- CVE-2026-96315Windows Overlay Filter Tampering VulnerabilityMicrosoft Windows
- CVE-2026-96314Windows Audio Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-96311Windows Network List Service Tampering VulnerabilityMicrosoft Windows
- CVE-2026-96247Windows Kernel-Mode Drivers Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-96218Windows Update Stack Tampering VulnerabilityMicrosoft Windows
- CVE-2026-96204Azure Arc Elevation of Privilege VulnerabilityMicrosoft Arc Enabled Servers - Azure Connected Machine Age…
- CVE-2026-88208Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-88209Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-88201Microsoft Office Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-88169Microsoft Office Word Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-88167Microsoft Office Word Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-88175Microsoft Office Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-88151Microsoft Office Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-88153Microsoft Office Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-70298Microsoft Office SharePoint Information Disclosure VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-70259Microsoft Office SharePoint Information Disclosure VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-70263Microsoft Office Word Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-70206Microsoft Office Word Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-70194.NET Framework Security Feature Bypass VulnerabilityMicrosoft .NET 11.0 runtime · Microsoft Visual Studio
- CVE-2026-70196ASP.NET Core Denial of Service VulnerabilityMicrosoft ASP.NET Core · Microsoft Visual Studio
- CVE-2026-70165.NET Elevation of Privilege VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +2
- CVE-2026-70116Windows Resilient File System (ReFS) Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-70044Microsoft Windows Media Foundation Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-70137Windows Remote Access Connection Manager Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-70011Windows IP Over USB Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-70005Active Directory Federation Services (AD FS) Security Feature Bypass VulnerabilityMicrosoft Windows Server
- CVE-2026-69982Active Directory Federation Services (AD FS) Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-69955Windows Client for NFS Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69940Windows Client for NFS Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-88143Windows Storage Spaces Controller Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88140Windows Key Storage Provider Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-88137WebDAV Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-88132Azure Key Vault Information Disclosure VulnerabilityMicrosoft azure-keyvault-administration · Microsoft azur… +2
- CVE-2026-88099Windows Failover Cluster Denial of Service VulnerabilityMicrosoft Windows Server
- CVE-2026-87714WebDAV Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-85939Windows Kernel Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-85938Windows Broadcast DVR User Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-85935Windows USB Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-85916Azure Active Directory Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83888Windows CD-ROM Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70277Windows Fast FAT File System Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-70270Windows Container Isolation FS Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70244Windows DNS Server Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-70216Windows Mobile Device Management Tampering VulnerabilityMicrosoft Windows
- CVE-2026-70170Windows Kernel Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-70041Windows CD-ROM Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69877Azure DevOps Information Disclosure VulnerabilityMicrosoft Azure CLI · Microsoft Azure DevOps CLI Extension
- CVE-2026-88162Windows Encrypting File System (EFS) Tampering VulnerabilityMicrosoft Windows
- CVE-2026-88158Microsoft Digest Authentication Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-71347Windows Security Center Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85865Windows DHCP Server Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-85859Windows Message Queuing Queue Manager Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-85857Windows Kernel-Mode Drivers Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-85852Windows Management Instrumentation Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-85847Windows Print Spooler Components Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-85840Windows Event Viewer Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-85835Servicing Stack Updates Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-85831Windows Biometric Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-85830Windows Installer Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-85821Windows Universal Disk Format File System Driver (UDFS) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-85816Windows Wi-Fi Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-85815Windows Device Association Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-85812Windows Bind Filter Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-85805Microsoft PowerShell Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-85797Windows GDI Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-85794Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-85793Windows Sysmain Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-85790Microsoft QUIC Information Disclosure VulnerabilityMicrosoft Visual Studio · Microsoft.Native.Quic.MsQuic.S… +1
- CVE-2026-85374Windows Installer Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-85337Windows Remote Desktop Client Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-85333Windows Performance Monitor Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85336Windows Device Association Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-85331Windows Device Association Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-85323Network Device Enrollment Service (NDES) Spoofing VulnerabilityMicrosoft Windows
- CVE-2026-85320Windows Print Spooler Components Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-84011Windows SMB Client Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-84007Remote Desktop Gateway Service Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2026-84009Windows Projected File System Tampering VulnerabilityMicrosoft Windows
- CVE-2026-83926Windows Hello Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-85841Windows DHCP Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-83906Windows Shell Spoofing VulnerabilityMicrosoft Windows
- CVE-2026-70248Windows Hyper-V Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-83909Windows Win32 Kernel Subsystem Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-70128HID Parser Library Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83893Windows Clipboard User Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83892Windows Human Interface Device Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83885Windows Virtualization-Based Security (VBS) Enclave Spoofing VulnerabilityMicrosoft Windows
- CVE-2026-83875Windows Human Interface Device Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83865Windows Internet (wininet.dll) Tampering VulnerabilityMicrosoft Windows
- CVE-2026-83864Windows NTFS Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83854Windows Notification Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83849Windows Hello Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83798Windows Update Stack Spoofing VulnerabilityMicrosoft Windows
- CVE-2026-83787Windows DHCP Server Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-83776Windows Bluetooth Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83760Microsoft Bluetooth Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83733Windows Print Spooler Components Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83723Windows Event Logging Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83719Servicing Stack Updates Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83713Windows Universal Disk Format File System Driver (UDFS) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83706Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83705HTTP.sys Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83681Microsoft PowerToys Tampering VulnerabilityMicrosoft PowerToys
- CVE-2026-83671Windows Hyper-V Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83667Windows Active Directory Domain Services Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-83658Windows Error Reporting Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83657Windows Modern Device Management (MDM) Tampering VulnerabilityMicrosoft Windows
- CVE-2026-83649Windows Local Security Authority Subsystem Service (LSASS) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-83648Windows Active Directory Domain Services Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-83646Active Directory Federation Services (AD FS) Spoofing VulnerabilityMicrosoft Windows
- CVE-2026-83571Windows Audio Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83521Windows IKE Extension Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83515RPC Runtime Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83500Windows BitLocker Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-83504Windows SmartScreen Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-81964Windows Update Orchestrator Service Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-66822.NET Information Disclosure VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +3
- CVE-2026-69721Windows iSCSI Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69644Windows iSCSI Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-70284Win32k Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-70280Windows Hello Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-70234Desktop Window Manager Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-70195Windows Ancillary Function Driver for WinSock Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-70173Microsoft Windows Search Component Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-70141Microsoft Windows Search Component Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-70119Windows DNS Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2026-70166Windows DNS Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-70135Windows Remote POS Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-70097Windows Virtualization-Based Security (VBS) Enclave Spoofing VulnerabilityMicrosoft Windows
- CVE-2026-70090Windows Netlogon Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-70087Role: DNS Server Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-70083Role: DNS Server Tampering VulnerabilityMicrosoft Windows
- CVE-2026-70085Role: DNS Server Tampering VulnerabilityMicrosoft Windows Server
- CVE-2026-70077Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-70063Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-70057Windows Routing and Remote Access Service (RRAS) Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-70025Windows Netlogon Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-70017Windows Secure Kernel Mode Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69979Windows AppX Deployment Service Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-69978Microsoft Windows VMSwitch Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-69974Desktop Window Manager Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69973Windows libarchive Tampering VulnerabilityMicrosoft Windows
- CVE-2026-69971Windows Kernel-Mode Drivers Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69969Windows AppX Deployment Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69968Windows libarchive Tampering VulnerabilityMicrosoft Windows
- CVE-2026-69967Windows Overlay Filter Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69958Windows Overlay Filter Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69954Windows Overlay Filter Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69947Windows Overlay Filter Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69905Windows AppX Deployment Service Tampering VulnerabilityMicrosoft Windows
- CVE-2026-69914Windows AppX Deployment Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-108466Windows Kernel Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-108462Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-105731Microsoft Office Graphics Component Information Disclosure VulnerabilityMicrosoft Office for Android
- CVE-2026-70235Windows Event Tracing Spoofing VulnerabilityMicrosoft Windows
- CVE-2026-105726Microsoft Defender Information Disclosure VulnerabilityMicrosoft Defender for Endpoint for Windows
- CVE-2026-105719Microsoft SharePoint Server Information Disclosure VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-105720Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-105713Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-94506Microsoft Office Access Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-96183Windows Health and Optimized Experiences Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-102867Microsoft Office Word Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-102865Microsoft Office SharePoint Information Disclosure VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-102864Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-102859Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-102229Visual Studio Code Information Disclosure VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-110240Lancet through 2.3.9 SSRF Protection Bypass via netutil.IsInternalIPduke-git lancet
- CVE-2026-110239Rapyd Admin before 9.20.0 Stored XSS via rich-text Componentzofe rapyd-admin
- CVE-2026-110235MP Manager through 1.1.0 Path Traversal via Archive Extraction sanitizeEntryName BypassAbdurazaaq Mohammed MP Manager
- CVE-2026-110234Elio through 1.13.0 Insecure Temporary File Creation in External Preview Command Captureelio-fm elio
- CVE-2026-110232Fossify File Manager through 1.6.2 Zip Slip Path Traversal via DecompressActivityFossify File Manager
- CVE-2026-110231muCommander through 1.6.2 Path Traversal via Archive Extraction to FTP/SFTPmuCommander
- CVE-2026-110230XBackBone through 3.8.2 Missing Authorization via Upload Vanity Endpointsergix44 XBackBone
- CVE-2026-110229QloApps through 1.7.0 Missing Hotel Access Restriction in Credit SlipsWebkul QloApps
- CVE-2026-110228wallabag 2.6.13 through 2.6.14 Stored XSS via Failed HTML Import Uploadwallabag
- CVE-2026-110226QloApps through 1.7.0 Authorization Bypass via id_hotel in Room Type CreationWebkul QloApps
- CVE-2026-110225Shaarli through 0.16.9 SSRF via Thumbnail Retrieval update-thumbnail RouteShaarli
- CVE-2026-110224QloApps through 1.7.0 Reflected XSS via Search Alias Validation ErrorsWebkul QloApps
- CVE-2026-110223Kavita 0.9.0 through 0.9.1.4 SSRF Blocklist Bypass via upload-cbl-file EndpointKareadita Kavita
- CVE-2026-110222Razorpay IFSC Ruby gem through 2.0.62 SSRF via IFSC lookupRazorpay IFSC
- CVE-2026-110221QloApps through 1.7.0 Reflected XSS via Advanced Price Rule Name and Impact ValueWebkul QloApps
- CVE-2026-110219QloApps through 1.7.0 Reflected XSS via Additional Facility Price FieldWebkul QloApps
- CVE-2026-110218Aureus ERP through 1.6.0 Unpublished Blog Post Disclosure via Direct URLWebkul Aureus ERP
- CVE-2026-110214Snowy 3.6.5 Hard-coded Download Signature Key Allows Unauthenticated File Downloadxiaonuobase Snowy
- CVE-2026-110213ai-fusion-video through 1.2.0 Insecure Direct Object Reference in Generation Task Item EndpointsStonewuu ai-fusion-video
- CVE-2026-110212ai-fusion-video through 1.2.0 Path Traversal in Media Upload subDir ParameterStonewuu ai-fusion-video
- CVE-2026-110210Phase Console through 2.77.3 Missing Authorization via secretHistory GraphQL QueryPhase Console
- CVE-2026-110036Device-mapper-persistent-data: device-mapper-persistent-data: denial of service via crafted block indicesRed Hat Enterprise Linux · Red Hat OpenShift Container Plat…
- CVE-2026-103856Adobe Framemaker | Out-of-bounds Read (CWE-125)Adobe FrameMaker
- CVE-2026-104343Adobe Framemaker | NULL Pointer Dereference (CWE-476)Adobe FrameMaker
- CVE-2026-103857Adobe Framemaker | Out-of-bounds Read (CWE-125)Adobe FrameMaker
- CVE-2026-54086SLE API for Java: Uncontrolled Memory Allocation / handled exception leading to Denial of Serviceesa sleapi-j
- CVE-2026-85747Distribution: Client `manifests.Get()` does not verify returned content against requested digestdistribution · github.com/docker/distribution +1
- CVE-2026-107607Missing authentication for critical function in Swann Communications SWIFI-SE2KICSwann Communications SWIFI-SE2KIC
- CVE-2026-107606Missing authentication for critical function in Swann Communications SWIFI-SE2KICSwann Communications SWIFI-SE2KIC
- CVE-2026-107605Missing authentication for critical function in Swann Communications SWIFI-SE2KICSwann Communications SWIFI-SE2KIC
- CVE-2026-95630Adobe Commerce | Improper Input Validation (CWE-20)Adobe Commerce · Adobe Magento Open Source
- CVE-2026-106175A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.8, FortiOS 7.4 all versions, FortiOS 7.2 all versiFortinet FortiOS · Fortinet FortiSwitch +1
- CVE-2026-106172A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSanFortinet FortiSandbox
- CVE-2026-23707An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet ForFortinet FortiManager Cloud · Fortinet FortiAnalyzer Clo… +2
- CVE-2026-23706An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet ForFortinet FortiAnalyzer Cloud · Fortinet FortiAnalyzer +1
- CVE-2026-23705An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet ForFortinet FortiAnalyzer · Fortinet FortiManager
- CVE-2026-106170An Uncaught Exception vulnerability [CWE-248] vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, Fortinet FortiSandbox
- CVE-2026-106176A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially Fortinet FortiSIEM
- CVE-2026-106171A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiManager 8.0.0, FFortinet FortiManager
- CVE-2026-33374Unbounded memory allocation in the Prometheus rule conversion APIGrafana Enterprise · Grafana OSS
- CVE-2026-15577Git Sync connection configuration can be modified with read-only accessGrafana Enterprise · Grafana OSS
- CVE-2026-93294Azure Monitor data source resource proxy allows calls to arbitrary Azure Resource Manager APIsGrafana Enterprise · Grafana OSS
- CVE-2026-95502Git Sync memory exhaustion via a malicious Git serverGrafana Nanogit · Grafana OSS +1
- CVE-2026-109828libsndfile WAV Parsing wavlike.c wavlike_subchunk_parse uninitialized variablelibsndfile
- CVE-2026-88834Busybox: busybox: httpd user existence oracle in non-default shadow-disabled buildsRed Hat Hardened Images
- CVE-2026-88838Busybox: busybox: non-root mount option filter bypass allows clearing fstab security restrictionsRed Hat Hardened Images
- CVE-2026-88833Busybox: busybox: udhcpc integer underflow in dhcp packet length calculation causes denial of serviceRed Hat Hardened Images
- CVE-2026-110131ThriveX-Server through 4.0 Missing Authorization via Article Retrieval EndpointsLiuYuYang01 ThriveX-Server
- CVE-2026-110127waynboot-mall through 2.0.0 IDOR via Mobile Cart Endpointswayn111 waynboot-mall
- CVE-2026-110126waynboot-mall through 2.0.0 IDOR via Mobile Address Endpointswayn111 waynboot-mall
- CVE-2026-110125waynboot-mall through 2.0.0 IDOR via Mobile Order Endpointswayn111 waynboot-mall
- CVE-2026-110122PickMall lilishop through 4.4 IDOR via Goods Freight EndpointPickMall lilishop
- CVE-2026-110120yshopmall through 2.0.0 IDOR via After-Sales API in StoreAfterSalesControllerguchengwuyue yshopmall
- CVE-2026-110114oms-erp through PRE Missing Authentication via skyer-goods es-test EndpointsFJ-OMS oms-erp
- CVE-2026-110113PublicCMS through V6.202608.a IDOR via tradeAddress/save EndpointSanluan PublicCMS
- CVE-2026-110110JetLinks Community through 2.10.0 Missing Authorization via Alarm Enable/Disable EndpointsJetLinks Community
- CVE-2026-110107RuoYi-Cloud-Plus through 6.0.0 IDOR via DELETE /auth/unlock/{socialId}dromara RuoYi-Cloud-Plus
- CVE-2026-110106RuoYi-Vue-Plus through 6.0.0 IDOR via DELETE /auth/unlock/{socialId}dromara RuoYi-Vue-Plus
- CVE-2026-110105B3log Symphony through 3.6.4 Missing Authorization in Admin Console Routesb3log Symphony
- CVE-2026-110103bbs-go through 4.4.6 Stored XSS via Image Upload Content-Typemlogclub bbs-go
- CVE-2026-110101Koillection through 1.8.4 Stored XSS via Datum File Attachment Uploadsbenjaminjonard Koillection
- CVE-2026-110100Jorani before 1.0.4 Missing Authorization and SSRF via Contracts::import()Jorani
- CVE-2026-110099Jorani before 1.0.4 Missing Authorization in HR Export ActionsJorani
- CVE-2026-110098Jorani before 1.0.4 Insecure Direct Object Reference in Leave and Overtime RequestsJorani
- CVE-2026-66057Frappe: Open Redirect via Unsanitized OAuth State Param.frappe
- CVE-2026-109827GPAC AIT Parser ait.c gf_m2ts_decode_ait out-of-bounds writeGPAC
- CVE-2026-19940Bluetooth HFP AG reuses a connection slot while a delayable work item is still armed, corrupting kernel timeout bookkeepingzephyrproject zephyr
- CVE-2026-19939Bluetooth Classic AVDTP: stale timeout work on signalling-channel disconnect leads to kernel timeout-list corruptionzephyrproject zephyr
- CVE-2026-104126JumpServer: Ansible Automation Template Rendering Allows Unsafe Lookup Plugin Invocationjumpserver
- CVE-2026-109620SourceCodester Online Reviewer System index.php prepare sql injectionSourceCodester Online Reviewer System
- CVE-2026-104250unstructured: Stored XSS via unescaped HTML generationUnstructured-IO unstructured · unstructured
- CVE-2026-85733FrankenPHP: Docker images serve phpinfo() as the default index.php, leaking environment variablesfrankenphp
- CVE-2026-109898WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerabilityArraytics WP Event Solution
- CVE-2026-109896WordPress Download Monitor integration for WooCommerce plugin <= 1.0.3 - Broken Access Control vulnerabilityWP Chill Download Monitor integration for WooCommerce
- CVE-2026-109890WordPress Premium Addons for Elementor plugin <= 4.11.110 - Broken Access Control vulnerabilityLeapWorx Premium Addons for Elementor
- CVE-2026-109607SourceCodester Online Exam System Login Endpoint loginExe.php sql injectionSourceCodester Online Exam System
- CVE-2026-106035An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 allows a remote authenticated aIvanti Xtraction
- CVE-2026-69226Portal for ArcGIS has a security vulnerabilityEsri Portal for ArcGIS
- CVE-2026-10759BUG-000171040 Portal for ArcGIS has a security vulnerabilityEsri Portal for ArcGIS
- CVE-2026-106034A Path Traversal vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to create, modify, arbitraryIvanti Xtraction
- CVE-2026-109606SourceCodester Art Gallery Management System Account Creation admin_class.php save_user sql injectionSourceCodester Art Gallery Management System
- CVE-2026-54697ConnectBot SSH: Excessive allocation and integer overflow in DER private-key parsingconnectbot cbssh · org.connectbot.sshlib:sshlib
- CVE-2026-54700ConnectBot SSH: Unbounded SSH field lengths can cause excessive memory allocationconnectbot cbssh · org.connectbot.sshlib:sshlib
- CVE-2026-102672Electron: Local race condition in Squirrel.Mac update installation on macOSelectron
- CVE-2026-101899Axios: CIDR-form NO_PROXY entries are ignored, causing proxy exclusion bypass for internal IP rangesaxios
- CVE-2026-49264OAuthLib: Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generationoauthlib
- CVE-2026-49265OAuthLib: Timing Attack Vulnerability in PKCE code_verifier Comparisonoauthlib
- CVE-2026-102700gnttab: cache-flush handling may cause page reference leakXen
- CVE-2026-109605SourceCodester Simple Cafe Billing System User Management admin_class.php save_user improper authorizationSourceCodester Simple Cafe Billing System
- CVE-2026-79611VMX: VMentry failure with branch tracing and blocked statesXen
- CVE-2026-79607Xenstore: Guests can crash xenstored during Live UpdateXen
- CVE-2026-110025slackero phpwcms Extension Check cnt23.article.inc.php unrestricted uploadslackero phpwcms
- CVE-2026-102981Plane: Unauthenticated Workspace Invitation Token Leakagemakeplane plane
- CVE-2026-103965Fixed values in MongoDB Server $bucket stage may be misread as field referencesMongoDB Server
- CVE-2026-102988Plane: ORM Field Injection via Unvalidated `order_by` Parameter (Including Unauthenticated Path)makeplane plane
- CVE-2026-109526HBAI-Ltd Toonflow-app exportData Endpoint information disclosureHBAI-Ltd Toonflow-app
- CVE-2026-102734asteval sandbox escape: arbitrary native memory read/write via numpy ctypes in default asteval Interpreterlmfit asteval · asteval
- CVE-2026-96297MongoDB Server may disclose process memory via a crafted `$_internalApplyOplogUpdate` aggregation pipelineMongoDB Server
- CVE-2026-69150KeePassXC: Heap use-after-free in KeePass1 (KDB) importer via unpruned m_entryUuids mapkeepassxreboot keepassxc
- CVE-2026-102832JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clickedjupyterlab · notebook +1
- CVE-2026-109525girishsaraf Online-Appointment-Booking-System submit2 changebookingstatus.php authorizationgirishsaraf Online-Appointment-Booking-System
- CVE-2026-105460Bluez: bluez: stack-based out-of-bounds read in btmon via unvalidated num_keys in return_link_keys_evt()Red Hat Enterprise Linux
- CVE-2026-81507ESF-IDF: Bluetooth Classic L2CAP Heap Memory Disclosure Allowing Unauthorized Access to Sensitive Dataespressif esp-idf
- CVE-2026-109524girishsaraf Online-Appointment-Booking-System Admin Display Pages showdoctor.php authorizationgirishsaraf Online-Appointment-Booking-System
- CVE-2026-106108Quasar Framework: App Vite SSG page output paths can escape the configured distribution directoryquasarframework quasar · @quasar app-vite +1
- CVE-2026-103028SFTPGo source-side file-pattern filter bypass during copy operationsdrakkan sftpgo · github.com/drakkan/sftpgo/v2 +1
- CVE-2026-77375SFTPGo: Denial of service via malformed SSH channel requestdrakkan sftpgo · github.com/drakkan/sftpgo/v2 +1
- CVE-2026-107918Insufficient input validation vulnerability in NETGEAR R7300NETGEAR R7300DST
- CVE-2026-107917Insufficient input validation vulnerability in NETGEAR R7300 routerNETGEAR R7300DST
- CVE-2026-109523girishsaraf Online-Appointment-Booking-System AJAX Endpoint getclinic.php sql injectiongirishsaraf Online-Appointment-Booking-System
- CVE-2026-11732Insufficient input validation vulnerability exists in website blocking feature of certain NETGEAR RAX/CAX series modelsNETGEAR CAX30 · NETGEAR RAX30 +2
- CVE-2026-11731Authentication Bypass Vulnerability in Certain NETGEAR RAX Series ModelsNETGEAR RAX30 · NETGEAR RAX29 +1
- CVE-2026-11730Insufficient session randomness vulnerability exists in certain NETGEAR EX Series ModelsNETGEAR EX3700 · NETGEAR EX6120
- CVE-2026-9218Insufficient input validation vulnerability in Certain NETGEAR routers allows unauthorized accessNETGEAR CBR40 · NETGEAR R7000 +2
- CVE-2026-53711MCP ContextForge: Global Prompts stored cross-site scripting compromises the Admin UIIBM mcp-context-forge
- CVE-2026-109522girishsaraf Online-Appointment-Booking-System Admin CRUD Endpoint deleteclinic.php sql injectiongirishsaraf Online-Appointment-Booking-System
- CVE-2026-102342ammonia allows stored XSS through unsanitized SVG animate and set attributesrust-ammonia ammonia · ammonia
- CVE-2026-102603Gotify: Insufficiently Protected Password Change endpointgotify server · github.com/gotify/server/v2 +2
- CVE-2026-65200Huawei malicious on-bus PLDM or NCSI device can drive out-of-bounds-heap reads via short MCTP responsesHuawei openBMC
- CVE-2026-65199Huawei openUBMC low-privilege SNMP to administrator privilege escalationHuawei openBMC
- CVE-2026-65197H3C G3/G5 HDM Firmware Verification Key ReplacementH3C HDM Family-A G5
- CVE-2026-109521girishsaraf Online-Appointment-Booking-System changebookingstatus.php sql injectiongirishsaraf Online-Appointment-Booking-System
- CVE-2026-4869Potential Privilege Escalation in InstallShieldFlexera InstallShield
- CVE-2026-0893Uncleared Password Keystrokes VulnerabilityAMI AptioV
- CVE-2026-77361obsidian-tc symlink path mismatch bypasses read ACL restrictionsThe-40-Thieves obsidian-tc · obsidian-tc
- CVE-2026-109966yt-dlp-web-ui through 4.0.0 Argument Injection via Service.Formats JSON-RPC Methodmarcopiovanello yt-dlp-web-ui
- CVE-2026-77362obsidian-tc bridge tools expose data outside the read ACLThe-40-Thieves obsidian-tc · obsidian-tc
- CVE-2026-109519YouTransfer Template Rendering template path traversalYouTransfer
- CVE-2026-109964ImageMagick before 7.1.2-33 and 6.9.13-58 Heap Buffer Underwrite in PICT DecoderImageMagick
- CVE-2026-109410macrozheng mall mall-admin/mall-portal moneyInfo OmsOrderServiceImpl.updateMoneyInfo calculationmacrozheng mall
- CVE-2026-93347Wazuh 4.1.1 before 4.14.8 Path Traversal via Cluster get_list_filewazuh-manager
- CVE-2026-93346Wazuh 4.0.0 before 4.14.8 API Brute-Force Protection Bypass via Race Conditionwazuh-manager
- CVE-2026-74032Wazuh 4.0.0 before 4.14.8 RBAC Authorization Bypass via /security/actionswazuh-manager
- CVE-2026-74030Wazuh 3.9.0 before 4.14.8 Memory Exhaustion via SCA YAML Alias Expansionwazuh-agent · wazuh-manager
- CVE-2026-109963Froxlor before 2.3.14 IDOR in Email Template Editor via admin_templates.phpfroxlor
- CVE-2026-109962Froxlor 0.10.0 before 2.3.14 Missing Authorization in MysqlServer and Cronjobs APIfroxlor
- CVE-2026-109959EspoCRM 4.0.0 before 10.0.7 Field-Level Security Bypass via Note Read Endpointespocrm
- CVE-2026-109958EspoCRM 4.0.0 before 10.0.7 Field-Level Access Bypass via Address-Book Searchespocrm
- CVE-2026-109957EspoCRM before 10.0.7 IDOR via Import attachmentId Parameterespocrm
- CVE-2026-109955Hono 4.12.4 before 4.13.11 Middleware Bypass via serveStatic Double Decodinghonojs hono · hono
- CVE-2026-109953FreeRDP 3.0.0 before 3.32.0 Cleartext Credential Disclosure via /restricted-adminFreeRDP
- CVE-2026-109952FreeRDP 3.0.0 before 3.32.0 Security Protocol Downgrade via Negotiation ResponseFreeRDP
- CVE-2026-109951FreeRDP 3.17.1 before 3.32.0 Heap Buffer Over-Read via Proxy DRDYNVC Channel NameFreeRDP
- CVE-2026-109950FreeRDP 3.0.0 before 3.32.0 Heap Out-of-Bounds Read via RD Gateway MessagesFreeRDP
- CVE-2026-109948FreeRDP 3.0.0 before 3.32.0 Memory Disclosure via SCardTransmit Smartcard RedirectionFreeRDP
- CVE-2026-109945FreeRDP 3.0.0 before 3.32.0 Smartcard Use-After-Free via Concurrent Disconnect and TransmitFreeRDP
- CVE-2026-109940FreeRDP 3.0.0-beta1 before 3.32.0 Stack Buffer Overflow via PKCS#11 Key NameFreeRDP
- CVE-2026-109680FreeRDP 3.18.0 before 3.32.0 Heap Out-of-Bounds Write via ARM Redirected UsernameFreeRDP
- CVE-2026-109679FreeRDP 3.0.0-beta4 before 3.32.0 NULL Pointer Crash via ARM ResponseFreeRDP
- CVE-2026-107832fastify vulnerable to header validation bypass via case-sensitive propertyNamesfastify
- CVE-2026-109409HBAI-Ltd Toonflow-app Open Folder Endpoint openFolder.ts child_process.exec command injectionHBAI-Ltd Toonflow-app
- CVE-2026-65131NVIDIA NVSentinel for Linux contains a vulnerability in the platform-connectors component, where the gRPC health-event interface, exposed ovNVIDIA NVSentinel