# CVEs published 2026-10-13

2,000 CVEs were published on October 13, 2026: 130 critical, 1,275 high. 2 are now in CISA KEV. This page lists the newest 2000. Days are UTC.

- [CVE-2026-92817](https://cve.now/CVE-2026-92817.md): Inductive Automation Ignition Software Incorrect Authorization (CVSS 8.8, Inductive Automation Ignition)
- [CVE-2026-105390](https://cve.now/CVE-2026-105390.md): Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers (CVSS 6.9, OpenVPN ovpn-dco-win)
- [CVE-2026-15468](https://cve.now/CVE-2026-15468.md): Authorization bypass through User-Controlled key vulnerability in HYPR Passwordless on Windows allows Privilege Escalation. (CVSS 6.9, HYPR Passwordless)
- [CVE-2026-88964](https://cve.now/CVE-2026-88964.md): An integer underflow in OpenVPN version 2.7\_alpha3 through 2.7.7 on Windows and Android allows remote authenticated servers to cause a denia (CVSS 7.1, OpenVPN)
- [CVE-2026-53564](https://cve.now/CVE-2026-53564.md): Arbitrary file read and write (CVSS 5.1, Citrix UniconOS)
- [CVE-2026-53563](https://cve.now/CVE-2026-53563.md): Persistent Command Execution (CVSS 6.9, Citrix UniconOS)
- [CVE-2026-84420](https://cve.now/CVE-2026-84420.md): Out-of-Bounds Write and Out-of-Bounds Read (CVSS 5.8, Citirx Citrix Workspace app for Windows)
- [CVE-2026-84419](https://cve.now/CVE-2026-84419.md): Out-of-Bounds Write (CVSS 6.8, Citrix Workspace app for Windows)
- [CVE-2026-84790](https://cve.now/CVE-2026-84790.md): OpenVPN 2.7\_alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject field (CVSS 7.6, OpenVPN)
- [CVE-2026-77207](https://cve.now/CVE-2026-77207.md): Null Pointer Dereference in PKCS#7 bundle with no certificates (CVSS 7.5, The Libreswan Project libreswan)
- [CVE-2026-77206](https://cve.now/CVE-2026-77206.md): IKEv2 pre-authentication Null Pointer Dereference in EAP code (CVSS 7.5, The Libreswan Project libreswan)
- [CVE-2026-77205](https://cve.now/CVE-2026-77205.md): Denial of Service via sending bogus X.509 certificates (CVSS 3.7, The Libreswan Project libreswan)
- [CVE-2026-100119](https://cve.now/CVE-2026-100119.md): CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 7.5, Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1)
- [CVE-2026-102501](https://cve.now/CVE-2026-102501.md): CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 5.3, Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1)
- [CVE-2026-94453](https://cve.now/CVE-2026-94453.md): IKEv2 Use-After-Free bug when using IKE-over-TCP (CVSS 7.5, The Libreswan Project libreswan)
- [CVE-2026-100114](https://cve.now/CVE-2026-100114.md): CAI Content Credentials | Improper Access Control (CWE-284) (CVSS 7.5, Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1)
- [CVE-2026-100136](https://cve.now/CVE-2026-100136.md): CAI Content Credentials | Integer Overflow or Wraparound (CWE-190) (CVSS 7.5, Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1)
- [CVE-2026-103294](https://cve.now/CVE-2026-103294.md): CAI Content Credentials | Improper Certificate Validation (CWE-295) (CVSS 5.9, Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1)
- [CVE-2026-100139](https://cve.now/CVE-2026-100139.md): CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) (CVSS 7.5, Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1)
- [CVE-2026-104345](https://cve.now/CVE-2026-104345.md): CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 7.5, Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1)
- [CVE-2026-105902](https://cve.now/CVE-2026-105902.md): CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) (CVSS 7.5, Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1)
- [CVE-2026-103297](https://cve.now/CVE-2026-103297.md): CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347) (CVSS 7.5, Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1)
- [CVE-2026-103296](https://cve.now/CVE-2026-103296.md): CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347) (CVSS 7.5, Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1)
- [CVE-2026-100116](https://cve.now/CVE-2026-100116.md): CAI Content Credentials | Improper Certificate Validation (CWE-295) (CVSS 5.9, Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1)
- [CVE-2026-100123](https://cve.now/CVE-2026-100123.md): CAI Content Credentials | Improper Certificate Validation (CWE-295) (CVSS 7.5, Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1)
- [CVE-2026-48378](https://cve.now/CVE-2026-48378.md): CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 5.3, Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1)
- [CVE-2026-95633](https://cve.now/CVE-2026-95633.md): CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347) (CVSS 7.5, Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1)
- [CVE-2026-100122](https://cve.now/CVE-2026-100122.md): CAI Content Credentials | Improper Certificate Validation (CWE-295) (CVSS 7.5, Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1)
- [CVE-2026-102502](https://cve.now/CVE-2026-102502.md): CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347) (CVSS 5.3, Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1)
- [CVE-2026-100121](https://cve.now/CVE-2026-100121.md): CAI Content Credentials | Improper Certificate Validation (CWE-295) (CVSS 7.5, Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1)
- [CVE-2026-100120](https://cve.now/CVE-2026-100120.md): CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 7.5, Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1)
- [CVE-2026-95634](https://cve.now/CVE-2026-95634.md): CAI Content Credentials | Server-Side Request Forgery (SSRF) (CWE-918) (CVSS 8.6, Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1)
- [CVE-2026-100115](https://cve.now/CVE-2026-100115.md): CAI Content Credentials | Improper Access Control (CWE-284) (CVSS 7.5, Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1)
- [CVE-2026-100137](https://cve.now/CVE-2026-100137.md): CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) (CVSS 7.5, Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1)
- [CVE-2026-100117](https://cve.now/CVE-2026-100117.md): CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 7.5, Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1)
- [CVE-2026-100135](https://cve.now/CVE-2026-100135.md): CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 7.5, Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1)
- [CVE-2026-100118](https://cve.now/CVE-2026-100118.md): CAI Content Credentials | Improper Certificate Validation (CWE-295) (CVSS 7.5, Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1)
- [CVE-2026-100113](https://cve.now/CVE-2026-100113.md): CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 7.5, Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1)
- [CVE-2026-100124](https://cve.now/CVE-2026-100124.md): CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 7.5, Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1)
- [CVE-2026-106627](https://cve.now/CVE-2026-106627.md): CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) (CVSS 7.5, Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1)
- [CVE-2026-95632](https://cve.now/CVE-2026-95632.md): CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347) (CVSS 7.5, Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1)
- [CVE-2026-100125](https://cve.now/CVE-2026-100125.md): CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 5.9, Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1)
- [CVE-2026-100138](https://cve.now/CVE-2026-100138.md): CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) (CVSS 7.5, Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1)
- [CVE-2026-48377](https://cve.now/CVE-2026-48377.md): CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 5.3, Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1)
- [CVE-2026-103820](https://cve.now/CVE-2026-103820.md): CAI Content Credentials | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) (CVSS 5.5, Adobe Content Credentials Rust SDK · Adobe C2PA Tool +1)
- [CVE-2026-97381](https://cve.now/CVE-2026-97381.md): Legacy Update ActiveX control accepts unauthorized hosting origins (CVSS 9.9, LegacyUpdate)
- [CVE-2026-110142](https://cve.now/CVE-2026-110142.md): Use after free in FileSystem in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox (CVSS 9.6, Google Chrome)
- [CVE-2026-110171](https://cve.now/CVE-2026-110171.md): Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome)
- [CVE-2026-110167](https://cve.now/CVE-2026-110167.md): Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome)
- [CVE-2026-110155](https://cve.now/CVE-2026-110155.md): Buffer overflow in PDFium in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via (CVSS 8.8, Google Chrome)
- [CVE-2026-110154](https://cve.now/CVE-2026-110154.md): Use after free in Canvas in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code inside the (CVSS 8.8, Google Chrome)
- [CVE-2026-110147](https://cve.now/CVE-2026-110147.md): Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a c (CVSS 8.8, Google Chrome)
- [CVE-2026-110157](https://cve.now/CVE-2026-110157.md): Use after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a c (CVSS 8.8, Google Chrome)
- [CVE-2026-110138](https://cve.now/CVE-2026-110138.md): Use after free in ShapeDetection in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process (CVSS 8.3, Google Chrome)
- [CVE-2026-110141](https://cve.now/CVE-2026-110141.md): Observable discrepancy in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to leak cross-origin data via a crafted HT (CVSS 3.1, Google Chrome)
- [CVE-2026-110163](https://cve.now/CVE-2026-110163.md): Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a c (CVSS 8.8, Google Chrome)
- [CVE-2026-110164](https://cve.now/CVE-2026-110164.md): Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code inside the san (CVSS 8.8, Google Chrome)
- [CVE-2026-110172](https://cve.now/CVE-2026-110172.md): Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome)
- [CVE-2026-110139](https://cve.now/CVE-2026-110139.md): Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome)
- [CVE-2026-110168](https://cve.now/CVE-2026-110168.md): Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr (CVSS 8.8, Google Chrome)
- [CVE-2026-110169](https://cve.now/CVE-2026-110169.md): Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr (CVSS 8.8, Google Chrome)
- [CVE-2026-110166](https://cve.now/CVE-2026-110166.md): Buffer overflow in Animation in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome)
- [CVE-2026-110153](https://cve.now/CVE-2026-110153.md): Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome)
- [CVE-2026-110144](https://cve.now/CVE-2026-110144.md): Incorrect authorization in Mojo in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to potentially execute arbitr (CVSS 9.6, Google Chrome)
- [CVE-2026-110159](https://cve.now/CVE-2026-110159.md): Incorrect authorization in Updater in Google Chrome prior to 155.0.8059.79 allowed a local attacker to execute arbitrary code outside the sa (CVSS 9.6, Google Chrome)
- [CVE-2026-110145](https://cve.now/CVE-2026-110145.md): Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to ex (CVSS 8.3, Google Chrome)
- [CVE-2026-110158](https://cve.now/CVE-2026-110158.md): Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to ex (CVSS 8.3, Google Chrome)
- [CVE-2026-110140](https://cve.now/CVE-2026-110140.md): Type confusion in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr (CVSS 8.8, Google Chrome)
- [CVE-2026-110137](https://cve.now/CVE-2026-110137.md): Use after free in WebRTC in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via (CVSS 8.8, Google Chrome)
- [CVE-2026-110156](https://cve.now/CVE-2026-110156.md): Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 155.0.8059.79 allowed a remote attacker who had compromised (CVSS 8.3, Google Chrome)
- [CVE-2026-110150](https://cve.now/CVE-2026-110150.md): Privilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to obtain sensitive informat (CVSS 5.5, Google Chrome)
- [CVE-2026-110146](https://cve.now/CVE-2026-110146.md): Information leak in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker leveraging social engineering to obtain sens (CVSS 6.5, Google Chrome)
- [CVE-2026-110143](https://cve.now/CVE-2026-110143.md): Use of uninitialized variable in ThirdParty lmza\_sdk in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially read m (CVSS 4.3, Google Chrome)
- [CVE-2026-110160](https://cve.now/CVE-2026-110160.md): Missing authorization in ReadingMode in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer proc (CVSS 4.2, Google Chrome)
- [CVE-2026-110170](https://cve.now/CVE-2026-110170.md): Use after free in Bindings in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to read memory inside the sandbox via a crafted (CVSS 4.3, Google Chrome)
- [CVE-2026-110162](https://cve.now/CVE-2026-110162.md): Use after free in Desktop in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via (CVSS 8.8, Google Chrome)
- [CVE-2026-110151](https://cve.now/CVE-2026-110151.md): Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome)
- [CVE-2026-110148](https://cve.now/CVE-2026-110148.md): Use after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a c (CVSS 8.8, Google Chrome)
- [CVE-2026-110165](https://cve.now/CVE-2026-110165.md): Use after free in Core in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code (CVSS 9.6, Google Chrome)
- [CVE-2026-110161](https://cve.now/CVE-2026-110161.md): Use after free in Network in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox vi (CVSS 9.6, Google Chrome)
- [CVE-2026-110136](https://cve.now/CVE-2026-110136.md): Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a (CVSS 9.6, Google Chrome)
- [CVE-2026-110149](https://cve.now/CVE-2026-110149.md): Use after free in Browser in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox vi (CVSS 9.6, Google Chrome)
- [CVE-2026-110152](https://cve.now/CVE-2026-110152.md): Buffer overflow in ANGLE in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary co (CVSS 9.6, Google Chrome)
- [CVE-2026-100128](https://cve.now/CVE-2026-100128.md): Bridge | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Bridge)
- [CVE-2026-100129](https://cve.now/CVE-2026-100129.md): Bridge | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Bridge)
- [CVE-2026-100126](https://cve.now/CVE-2026-100126.md): Bridge | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Bridge)
- [CVE-2026-100127](https://cve.now/CVE-2026-100127.md): Bridge | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Bridge)
- [CVE-2026-94520](https://cve.now/CVE-2026-94520.md): Microsoft SQL Server Denial of Service Vulnerability (CVSS 4.9, Microsoft SQL Server)
- [CVE-2026-94512](https://cve.now/CVE-2026-94512.md): SQL Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SQL Server)
- [CVE-2026-88089](https://cve.now/CVE-2026-88089.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 6.7, Microsoft SQL Server)
- [CVE-2026-88085](https://cve.now/CVE-2026-88085.md): Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 6.4, Microsoft SQL Server)
- [CVE-2026-88088](https://cve.now/CVE-2026-88088.md): Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft SQL Server)
- [CVE-2026-85919](https://cve.now/CVE-2026-85919.md): Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft SQL Server)
- [CVE-2026-88086](https://cve.now/CVE-2026-88086.md): Microsoft SQL Server Information Disclosure Vulnerability (CVSS 5.3, Microsoft SQL Server)
- [CVE-2026-88084](https://cve.now/CVE-2026-88084.md): Microsoft SQL Server Denial of Service Vulnerability (CVSS 5.3, Microsoft SQL Server)
- [CVE-2026-85888](https://cve.now/CVE-2026-85888.md): Microsoft SQL Server Information Disclosure Vulnerability (CVSS 7.7, Microsoft SQL Server)
- [CVE-2026-88081](https://cve.now/CVE-2026-88081.md): Microsoft SQL Server Information Disclosure Vulnerability (CVSS 7.7, Microsoft SQL Server)
- [CVE-2026-88083](https://cve.now/CVE-2026-88083.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 7.5, Microsoft SQL Server)
- [CVE-2026-88082](https://cve.now/CVE-2026-88082.md): Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft SQL Server)
- [CVE-2026-62840](https://cve.now/CVE-2026-62840.md): Linux Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Linux 3P (Third Party) Distros)
- [CVE-2026-67628](https://cve.now/CVE-2026-67628.md): Microsoft SQL Server Information Disclosure Vulnerability (CVSS 4.9, Microsoft SQL Server)
- [CVE-2026-67626](https://cve.now/CVE-2026-67626.md): Microsoft SQL Server Denial of Service Vulnerability (CVSS 6.5, Microsoft SQL Server)
- [CVE-2026-65674](https://cve.now/CVE-2026-65674.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SQL Server)
- [CVE-2026-85886](https://cve.now/CVE-2026-85886.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 8.5, Microsoft SQL Server)
- [CVE-2026-85876](https://cve.now/CVE-2026-85876.md): Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft SQL Server)
- [CVE-2026-83945](https://cve.now/CVE-2026-83945.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 6.6, Microsoft SQL Server)
- [CVE-2026-70189](https://cve.now/CVE-2026-70189.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 6.7, Microsoft SQL Server)
- [CVE-2026-68883](https://cve.now/CVE-2026-68883.md): Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 8.5, Microsoft SQL Server)
- [CVE-2026-67625](https://cve.now/CVE-2026-67625.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 8.5, Microsoft SQL Server)
- [CVE-2026-96956](https://cve.now/CVE-2026-96956.md): SQL Server Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft SQL Server)
- [CVE-2026-103822](https://cve.now/CVE-2026-103822.md): Substance3D - Designer | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Substance 3D Designer)
- [CVE-2026-103825](https://cve.now/CVE-2026-103825.md): Substance3D - Designer | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Substance 3D Designer)
- [CVE-2026-103823](https://cve.now/CVE-2026-103823.md): Substance3D - Designer | Stack-based Buffer Overflow (CWE-121) (CVSS 5.5, Adobe Substance 3D Designer)
- [CVE-2026-103824](https://cve.now/CVE-2026-103824.md): Substance3D - Designer | NULL Pointer Dereference (CWE-476) (CVSS 5.5, Adobe Substance 3D Designer)
- [CVE-2026-103826](https://cve.now/CVE-2026-103826.md): Substance3D - Designer | NULL Pointer Dereference (CWE-476) (CVSS 5.5, Adobe Substance 3D Designer)
- [CVE-2026-103827](https://cve.now/CVE-2026-103827.md): Substance3D - Designer | Stack-based Buffer Overflow (CWE-121) (CVSS 5.5, Adobe Substance 3D Designer)
- [CVE-2026-103828](https://cve.now/CVE-2026-103828.md): Substance3D - Designer | NULL Pointer Dereference (CWE-476) (CVSS 5.5, Adobe Substance 3D Designer)
- [CVE-2026-103821](https://cve.now/CVE-2026-103821.md): Substance3D - Designer | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance 3D Designer)
- [CVE-2026-103829](https://cve.now/CVE-2026-103829.md): Substance3D - Designer | NULL Pointer Dereference (CWE-476) (CVSS 5.5, Adobe Substance 3D Designer)
- [CVE-2026-83966](https://cve.now/CVE-2026-83966.md): Substance3D - Sampler | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance 3D Sampler)
- [CVE-2026-100131](https://cve.now/CVE-2026-100131.md): Substance3D - Sampler | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Substance 3D Sampler)
- [CVE-2026-83965](https://cve.now/CVE-2026-83965.md): Substance3D - Sampler | Stack-based Buffer Overflow (CWE-121) (CVSS 7.8, Adobe Substance 3D Sampler)
- [CVE-2026-100130](https://cve.now/CVE-2026-100130.md): Substance3D - Sampler | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Substance 3D Sampler)
- [CVE-2026-96521](https://cve.now/CVE-2026-96521.md): Photoshop Desktop | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Photoshop)
- [CVE-2026-96522](https://cve.now/CVE-2026-96522.md): Photoshop Desktop | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Photoshop)
- [CVE-2026-83661](https://cve.now/CVE-2026-83661.md): Photoshop Desktop | Integer Overflow or Wraparound (CWE-190) (CVSS 7.8, Adobe Photoshop)
- [CVE-2026-95635](https://cve.now/CVE-2026-95635.md): Photoshop Desktop | Double Free (CWE-415) (CVSS 7.8, Adobe Photoshop)
- [CVE-2026-95638](https://cve.now/CVE-2026-95638.md): Photoshop Desktop | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe Photoshop)
- [CVE-2026-96523](https://cve.now/CVE-2026-96523.md): Photoshop Desktop | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Photoshop)
- [CVE-2026-104346](https://cve.now/CVE-2026-104346.md): Photoshop Desktop | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Photoshop)
- [CVE-2026-95637](https://cve.now/CVE-2026-95637.md): Photoshop Desktop | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Photoshop)
- [CVE-2026-97312](https://cve.now/CVE-2026-97312.md): Photoshop Desktop | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Photoshop)
- [CVE-2026-95639](https://cve.now/CVE-2026-95639.md): Photoshop Desktop | Incorrect Authorization (CWE-863) (CVSS 8.6, Adobe Photoshop)
- [CVE-2026-100111](https://cve.now/CVE-2026-100111.md): Photoshop Desktop | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Photoshop)
- [CVE-2026-104347](https://cve.now/CVE-2026-104347.md): Photoshop Desktop | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Photoshop)
- [CVE-2026-95636](https://cve.now/CVE-2026-95636.md): Photoshop Desktop | Integer Overflow or Wraparound (CWE-190) (CVSS 7.8, Adobe Photoshop)
- [CVE-2026-104348](https://cve.now/CVE-2026-104348.md): Photoshop Desktop | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe Photoshop)
- [CVE-2026-100112](https://cve.now/CVE-2026-100112.md): Photoshop Desktop | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Photoshop)
- [CVE-2026-95640](https://cve.now/CVE-2026-95640.md): Photoshop Desktop | NULL Pointer Dereference (CWE-476) (CVSS 5.5, Adobe Photoshop)
- [CVE-2026-105896](https://cve.now/CVE-2026-105896.md): Photoshop Desktop | NULL Pointer Dereference (CWE-476) (CVSS 5.5, Adobe Photoshop)
- [CVE-2026-95641](https://cve.now/CVE-2026-95641.md): Photoshop Desktop | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Photoshop)
- [CVE-2026-108388](https://cve.now/CVE-2026-108388.md): Indico legacy contribution export cache poisoning discloses restricted metadata (CVSS 3.5, indico)
- [CVE-2026-105897](https://cve.now/CVE-2026-105897.md): ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918) (CVSS 8.6, Adobe ColdFusion)
- [CVE-2026-106616](https://cve.now/CVE-2026-106616.md): ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611) (CVSS 8.6, Adobe ColdFusion)
- [CVE-2026-34633](https://cve.now/CVE-2026-34633.md): ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918) (CVSS 7.7, Adobe ColdFusion)
- [CVE-2026-106618](https://cve.now/CVE-2026-106618.md): ColdFusion | Incorrect Authorization (CWE-863) (CVSS 8.8, Adobe ColdFusion)
- [CVE-2026-105994](https://cve.now/CVE-2026-105994.md): ColdFusion | Incorrect Authorization (CWE-863) (CVSS 7.7, Adobe ColdFusion)
- [CVE-2026-106622](https://cve.now/CVE-2026-106622.md): ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918) (CVSS 10.0, Adobe ColdFusion)
- [CVE-2026-106619](https://cve.now/CVE-2026-106619.md): ColdFusion | Improper Input Validation (CWE-20) (CVSS 9.0, Adobe ColdFusion)
- [CVE-2026-106089](https://cve.now/CVE-2026-106089.md): ColdFusion | Incorrect Authorization (CWE-863) (CVSS 8.8, Adobe ColdFusion)
- [CVE-2026-106613](https://cve.now/CVE-2026-106613.md): ColdFusion | Improper Input Validation (CWE-20) (CVSS 8.8, Adobe ColdFusion)
- [CVE-2026-106614](https://cve.now/CVE-2026-106614.md): ColdFusion | Incorrect Authorization (CWE-863) (CVSS 7.8, Adobe ColdFusion)
- [CVE-2026-106624](https://cve.now/CVE-2026-106624.md): ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94) (CVSS 10.0, Adobe ColdFusion)
- [CVE-2026-75996](https://cve.now/CVE-2026-75996.md): ColdFusion | Uncontrolled Resource Consumption (CWE-400) (CVSS 7.5, Adobe ColdFusion)
- [CVE-2026-106621](https://cve.now/CVE-2026-106621.md): ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94) (CVSS 9.1, Adobe ColdFusion)
- [CVE-2026-90530](https://cve.now/CVE-2026-90530.md): ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) (CVSS 9.3, Adobe ColdFusion)
- [CVE-2026-105898](https://cve.now/CVE-2026-105898.md): ColdFusion | Incorrect Authorization (CWE-863) (CVSS 8.2, Adobe ColdFusion)
- [CVE-2026-105903](https://cve.now/CVE-2026-105903.md): ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94) (CVSS 9.9, Adobe ColdFusion)
- [CVE-2026-75994](https://cve.now/CVE-2026-75994.md): ColdFusion | Incorrect Authorization (CWE-863) (CVSS 9.6, Adobe ColdFusion)
- [CVE-2026-106090](https://cve.now/CVE-2026-106090.md): ColdFusion | Incorrect Authorization (CWE-863) (CVSS 8.8, Adobe ColdFusion)
- [CVE-2026-34634](https://cve.now/CVE-2026-34634.md): ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918) (CVSS 8.6, Adobe ColdFusion)
- [CVE-2026-106620](https://cve.now/CVE-2026-106620.md): ColdFusion | Incorrect Authorization (CWE-863) (CVSS 9.6, Adobe ColdFusion)
- [CVE-2026-76001](https://cve.now/CVE-2026-76001.md): ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918) (CVSS 7.1, Adobe ColdFusion)
- [CVE-2026-106612](https://cve.now/CVE-2026-106612.md): ColdFusion | Incorrect Authorization (CWE-863) (CVSS 9.9, Adobe ColdFusion)
- [CVE-2026-106615](https://cve.now/CVE-2026-106615.md): ColdFusion | Incorrect Authorization (CWE-863) (CVSS 8.8, Adobe ColdFusion)
- [CVE-2026-75995](https://cve.now/CVE-2026-75995.md): ColdFusion | Improper Input Validation (CWE-20) (CVSS 8.4, Adobe ColdFusion)
- [CVE-2026-75748](https://cve.now/CVE-2026-75748.md): ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918) (CVSS 7.6, Adobe ColdFusion)
- [CVE-2026-105900](https://cve.now/CVE-2026-105900.md): ColdFusion | Improper Input Validation (CWE-20) (CVSS 7.5, Adobe ColdFusion)
- [CVE-2026-105901](https://cve.now/CVE-2026-105901.md): ColdFusion | Incorrect Authorization (CWE-863) (CVSS 8.8, Adobe ColdFusion)
- [CVE-2026-71385](https://cve.now/CVE-2026-71385.md): ColdFusion | Incorrect Authorization (CWE-863) (CVSS 8.4, Adobe ColdFusion)
- [CVE-2026-106623](https://cve.now/CVE-2026-106623.md): ColdFusion | Incorrect Authorization (CWE-863) (CVSS 7.5, Adobe ColdFusion)
- [CVE-2026-105899](https://cve.now/CVE-2026-105899.md): ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434) (CVSS 10.0, Adobe ColdFusion)
- [CVE-2026-106617](https://cve.now/CVE-2026-106617.md): ColdFusion | Incorrect Authorization (CWE-863) (CVSS 8.8, Adobe ColdFusion)
- [CVE-2026-49950](https://cve.now/CVE-2026-49950.md): Xorbits Xoscar 0.11.2 Unauthenticated Deserialization RCE via Actor Pool (CVSS 9.3, xorbitsai xoscar)
- [CVE-2026-93905](https://cve.now/CVE-2026-93905.md): IBM WebSphere Application Server Liberty is affected by a deserialization of untrusted data (CVSS 8.2, IBM WebSphere Application Server - Liberty)
- [CVE-2026-93909](https://cve.now/CVE-2026-93909.md): IBM WebSphere Application Server Liberty is affected by an authentication bypass (CVSS 9.1, IBM WebSphere Application Server - Liberty)
- [CVE-2026-93895](https://cve.now/CVE-2026-93895.md): IBM WebSphere Application Server Liberty Improper Access Control (CVSS 9.1, IBM WebSphere Application Server - Liberty)
- [CVE-2026-95695](https://cve.now/CVE-2026-95695.md): IBM WebSphere Application Server Liberty Incorrect Authorization (CVSS 7.4, IBM WebSphere Application Server - Liberty)
- [CVE-2026-95696](https://cve.now/CVE-2026-95696.md): IBM WebSphere Application Server Liberty Denial of Service (CVSS 6.5, IBM WebSphere Application Server - Liberty)
- [CVE-2026-101294](https://cve.now/CVE-2026-101294.md): IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a missing cryptographic step (CVSS 8.7, IBM WebSphere Application Server - Liberty · IBM WebSphere…)
- [CVE-2026-105442](https://cve.now/CVE-2026-105442.md): IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a deserialization of untrusted data (CVSS 7.5, IBM WebSphere Application Server)
- [CVE-2026-105443](https://cve.now/CVE-2026-105443.md): IBM WebSphere Application Server Liberty is affected by an improper access control (CVSS 8.2, IBM WebSphere Application Server - Liberty)
- [CVE-2026-11713](https://cve.now/CVE-2026-11713.md): IBM WebSphere Application Server Liberty Incorrect Authorization (CVSS 5.4, IBM WebSphere Application Server - Liberty)
- [CVE-2026-14532](https://cve.now/CVE-2026-14532.md): IBM WebSphere Application Server Liberty Integer Overflow (CVSS 4.3, IBM WebSphere Application Server - Liberty)
- [CVE-2026-14909](https://cve.now/CVE-2026-14909.md): IBM WebSphere Application Server Liberty Information Disclosure (CVSS 6.5, IBM WebSphere Application Server - Liberty)
- [CVE-2026-77816](https://cve.now/CVE-2026-77816.md): IBM WebSphere Application Server Liberty Improper Certificate Validation (CVSS 6.5, IBM WebSphere Application Server - Liberty)
- [CVE-2026-79715](https://cve.now/CVE-2026-79715.md): IBM WebSphere Application Server Liberty Path Traversal (CVSS 5.5, IBM WebSphere Application Server - Liberty)
- [CVE-2026-85473](https://cve.now/CVE-2026-85473.md): Out-of-Range Timestamp Claim Handling in auth0/java-jwt (CVSS 5.3, Auth0 java-jwt)
- [CVE-2026-78633](https://cve.now/CVE-2026-78633.md): Denial of Service in Okta RADIUS Agent Packet Parser (CVSS 6.5, Okta RADIUS Agent)
- [CVE-2026-78632](https://cve.now/CVE-2026-78632.md): Insecure Default File Permissions in Okta RADIUS Agent Windows Installer (CVSS 5.3, Okta RADIUS Agent)
- [CVE-2026-107371](https://cve.now/CVE-2026-107371.md): Missing Verification of auth\_time Claim in auth0.js (CVSS 5.4, auth0.js)
- [CVE-2026-107370](https://cve.now/CVE-2026-107370.md): Improper Request Handling for Active Directory Logins in auth0-lock (CVSS 5.3, auth0-lock)
- [CVE-2026-107369](https://cve.now/CVE-2026-107369.md): Improper Validation of Post-Login Redirect URL in nextjs-auth0 (CVSS 6.1, nextjs-auth0)
- [CVE-2026-78628](https://cve.now/CVE-2026-78628.md): Improper Input Validation in the Okta Credential Provider for Windows (CVSS 6.0, Okta Credential Provider for Windows)
- [CVE-2026-63171](https://cve.now/CVE-2026-63171.md): Omnispace Agora Project \< 26.10.0 Stored XSS via Category Description (CVSS 5.1, Omnispace Agora Project)
- [CVE-2026-63169](https://cve.now/CVE-2026-63169.md): Omnispace Agora Project \< 26.10.0 Stored XSS via Messenger Iframe (CVSS 5.3, Omnispace Agora Project)
- [CVE-2026-19810](https://cve.now/CVE-2026-19810.md): Cross-Site Scripting (XSS) in Symantec Endpoint Detection and Response Console (CVSS 5.4, Broadcom Symantec Endpoint Detection and Response)
- [CVE-2026-63168](https://cve.now/CVE-2026-63168.md): Omnispace Agora Project \< 26.10.0 Stored XSS via Nested POST Array Bypass (CVSS 5.1, Omnispace Agora Project)
- [CVE-2026-63157](https://cve.now/CVE-2026-63157.md): Omnispace Agora Project \< 26.10.0 Stored XSS via Links Module (CVSS 5.1, Omnispace Agora Project)
- [CVE-2026-63156](https://cve.now/CVE-2026-63156.md): Omnispace Agora Project \< 26.10.0 Reflected XSS via visioUrl Parameter (CVSS 5.1, Omnispace Agora Project)
- [CVE-2026-63148](https://cve.now/CVE-2026-63148.md): Omnispace Agora Project \< 26.10.0 Stored XSS via Poll-Response Attachment Filename (CVSS 5.1, Omnispace Agora Project)
- [CVE-2026-103852](https://cve.now/CVE-2026-103852.md): Substance3D - Stager | NULL Pointer Dereference (CWE-476) (CVSS 5.5, Adobe Substance 3D Stager)
- [CVE-2026-103832](https://cve.now/CVE-2026-103832.md): Substance3D - Stager | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance 3D Stager)
- [CVE-2026-103842](https://cve.now/CVE-2026-103842.md): Substance3D - Stager | Out-of-bounds Read (CWE-125) (CVSS 7.8, Adobe Substance 3D Stager)
- [CVE-2026-103836](https://cve.now/CVE-2026-103836.md): Substance3D - Stager | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance 3D Stager)
- [CVE-2026-103835](https://cve.now/CVE-2026-103835.md): Substance3D - Stager | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance 3D Stager)
- [CVE-2026-103837](https://cve.now/CVE-2026-103837.md): Substance3D - Stager | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance 3D Stager)
- [CVE-2026-103833](https://cve.now/CVE-2026-103833.md): Substance3D - Stager | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance 3D Stager)
- [CVE-2026-103834](https://cve.now/CVE-2026-103834.md): Substance3D - Stager | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance 3D Stager)
- [CVE-2026-103841](https://cve.now/CVE-2026-103841.md): Substance3D - Stager | Out-of-bounds Read (CWE-125) (CVSS 7.8, Adobe Substance 3D Stager)
- [CVE-2026-103839](https://cve.now/CVE-2026-103839.md): Substance3D - Stager | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance 3D Stager)
- [CVE-2026-103850](https://cve.now/CVE-2026-103850.md): Substance3D - Stager | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Substance 3D Stager)
- [CVE-2026-103838](https://cve.now/CVE-2026-103838.md): Substance3D - Stager | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance 3D Stager)
- [CVE-2026-103851](https://cve.now/CVE-2026-103851.md): Substance3D - Stager | Stack-based Buffer Overflow (CWE-121) (CVSS 7.8, Adobe Substance 3D Stager)
- [CVE-2026-103840](https://cve.now/CVE-2026-103840.md): Substance3D - Stager | Out-of-bounds Read (CWE-125) (CVSS 7.8, Adobe Substance 3D Stager)
- [CVE-2026-103830](https://cve.now/CVE-2026-103830.md): Substance3D - Stager | Stack-based Buffer Overflow (CWE-121) (CVSS 7.8, Adobe Substance 3D Stager)
- [CVE-2026-103843](https://cve.now/CVE-2026-103843.md): Substance3D - Stager | Use After Free (CWE-416) (CVSS 7.8, Adobe Substance 3D Stager)
- [CVE-2026-63147](https://cve.now/CVE-2026-63147.md): Omnispace Agora Project \< 26.10.0 Stored XSS via Uploaded File Name (CVSS 5.1, Omnispace Agora Project)
- [CVE-2026-63172](https://cve.now/CVE-2026-63172.md): Omnispace Agora Project \< 26.10.0 Broken Function-Level Authorization via User-Edit (CVSS 7.1, Omnispace Agora Project)
- [CVE-2026-63161](https://cve.now/CVE-2026-63161.md): Omnispace Agora Project \< 26.10.0 Session Fixation via Authentication (CVSS 8.6, Omnispace Agora Project)
- [CVE-2026-63174](https://cve.now/CVE-2026-63174.md): Omnispace Agora Project \< 26.10.0 Broken Access Control via spaceAffectList (CVSS 8.6, Omnispace Agora Project)
- [CVE-2026-63153](https://cve.now/CVE-2026-63153.md): Omnispace Agora Project \< 26.10.0 Broken Access Control via setAffectations() (CVSS 8.6, Omnispace Agora Project)
- [CVE-2026-63165](https://cve.now/CVE-2026-63165.md): Omnispace Agora Project \< 26.10.0 SQL Injection via sortEvents Parameter (CVSS 8.6, Omnispace Agora Project)
- [CVE-2026-63152](https://cve.now/CVE-2026-63152.md): Omnispace Agora Project \< 26.10.0 Second-Order SQL Injection via \_idCategoryFilter (CVSS 8.6, Omnispace Agora Project)
- [CVE-2026-63163](https://cve.now/CVE-2026-63163.md): Omnispace Agora Project \< 26.10.0 Broken Access Control via MobileFileDownload (CVSS 8.7, Omnispace Agora Project)
- [CVE-2026-63162](https://cve.now/CVE-2026-63162.md): Omnispace Agora Project \< 26.10.0 Path Traversal via tmpFolderName Parameter (CVSS 8.7, Omnispace Agora Project)
- [CVE-2026-103846](https://cve.now/CVE-2026-103846.md): Dimension | Improper Neutralization of Input During Web Page Generation (Cross-Site Scripting) (CWE-79) (CVSS 8.6, Adobe Dimension)
- [CVE-2026-103845](https://cve.now/CVE-2026-103845.md): Dimension | Uncontrolled Search Path Element (CWE-427) (CVSS 8.6, Adobe Dimension)
- [CVE-2026-103855](https://cve.now/CVE-2026-103855.md): Dimension | NULL Pointer Dereference (CWE-476) (CVSS 5.5, Adobe Dimension)
- [CVE-2026-103844](https://cve.now/CVE-2026-103844.md): Dimension | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Dimension)
- [CVE-2026-103854](https://cve.now/CVE-2026-103854.md): Dimension | Stack-based Buffer Overflow (CWE-121) (CVSS 7.8, Adobe Dimension)
- [CVE-2026-103853](https://cve.now/CVE-2026-103853.md): Dimension | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Dimension)
- [CVE-2026-103847](https://cve.now/CVE-2026-103847.md): Dimension | Untrusted Search Path (CWE-426) (CVSS 8.6, Adobe Dimension)
- [CVE-2026-63154](https://cve.now/CVE-2026-63154.md): Omnispace Agora Project \< 26.10.0 SQL Identifier Injection via agoraFields\[\] (CVSS 8.7, Omnispace Agora Project)
- [CVE-2026-63160](https://cve.now/CVE-2026-63160.md): Omnispace Agora Project \< 26.10.0 Insecure Remember-Me Token Storage (CVSS 9.1, Omnispace Agora Project)
- [CVE-2026-63159](https://cve.now/CVE-2026-63159.md): Omnispace Agora Project \< 26.10.0 Predictable Password-Reset Token Account Takeover (CVSS 9.1, Omnispace Agora Project)
- [CVE-2026-63158](https://cve.now/CVE-2026-63158.md): Omnispace Agora Project \< 26.10.0 Pass-the-Hash Authentication Bypass via Cookies (CVSS 9.1, Omnispace Agora Project)
- [CVE-2026-63149](https://cve.now/CVE-2026-63149.md): Omnispace Agora Project \< 26.10.0 Predictable Default Password via uniqid() (CVSS 9.1, Omnispace Agora Project)
- [CVE-2026-90532](https://cve.now/CVE-2026-90532.md): Adobe Experience Manager | Incorrect Authorization (CWE-863) (CVSS 10.0, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-90531](https://cve.now/CVE-2026-90531.md): Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611) (CVSS 9.6, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-83960](https://cve.now/CVE-2026-83960.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-83958](https://cve.now/CVE-2026-83958.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-83662](https://cve.now/CVE-2026-83662.md): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 9.3, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-75732](https://cve.now/CVE-2026-75732.md): Adobe Experience Manager | Incorrect Authorization (CWE-863) (CVSS 9.9, Adobe Experience Manager 6.5 LTS · Adobe Experience Manager)
- [CVE-2026-48398](https://cve.now/CVE-2026-48398.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2026-48383](https://cve.now/CVE-2026-48383.md): Adobe Experience Manager | Incorrect Authorization (CWE-863) (CVSS 10.0, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-48382](https://cve.now/CVE-2026-48382.md): Adobe Experience Manager | Incorrect Authorization (CWE-863) (CVSS 10.0, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-110084](https://cve.now/CVE-2026-110084.md): Adobe Experience Manager | XML Injection (aka Blind XPath Injection) (CWE-91) (CVSS 7.1, Adobe Experience Manager)
- [CVE-2026-110083](https://cve.now/CVE-2026-110083.md): Adobe Experience Manager | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) (CVSS 7.1, Adobe Experience Manager)
- [CVE-2026-110082](https://cve.now/CVE-2026-110082.md): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager 6.5 LTS · Adobe Experience Manager)
- [CVE-2026-110081](https://cve.now/CVE-2026-110081.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager 6.5 LTS · Adobe Experience Manager)
- [CVE-2026-110080](https://cve.now/CVE-2026-110080.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2026-110079](https://cve.now/CVE-2026-110079.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2026-110078](https://cve.now/CVE-2026-110078.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2026-110077](https://cve.now/CVE-2026-110077.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2026-110076](https://cve.now/CVE-2026-110076.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2026-110075](https://cve.now/CVE-2026-110075.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2026-110074](https://cve.now/CVE-2026-110074.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager 6.5 LTS · Adobe Experience Manager)
- [CVE-2026-110073](https://cve.now/CVE-2026-110073.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2026-110037](https://cve.now/CVE-2026-110037.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager 6.5 LTS · Adobe Experience Manager)
- [CVE-2026-109415](https://cve.now/CVE-2026-109415.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager 6.5 LTS · Adobe Experience Manager)
- [CVE-2026-107682](https://cve.now/CVE-2026-107682.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2026-107305](https://cve.now/CVE-2026-107305.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2026-106634](https://cve.now/CVE-2026-106634.md): Adobe Experience Manager | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) (CVSS 7.7, Adobe Experience Manager 6.5 LTS · Adobe Experience Manager)
- [CVE-2026-106633](https://cve.now/CVE-2026-106633.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager 6.5 LTS · Adobe Experience Manager)
- [CVE-2026-106632](https://cve.now/CVE-2026-106632.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager 6.5 LTS · Adobe Experience Manager)
- [CVE-2026-106631](https://cve.now/CVE-2026-106631.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager 6.5 LTS · Adobe Experience Manager)
- [CVE-2026-106630](https://cve.now/CVE-2026-106630.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 9.3, Adobe Experience Manager 6.5 LTS · Adobe Experience Manager)
- [CVE-2026-106629](https://cve.now/CVE-2026-106629.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 9.3, Adobe Experience Manager 6.5 LTS · Adobe Experience Manager)
- [CVE-2026-106628](https://cve.now/CVE-2026-106628.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager 6.5 LTS · Adobe Experience Manager)
- [CVE-2026-106626](https://cve.now/CVE-2026-106626.md): Adobe Experience Manager | Improper Input Validation (CWE-20) (CVSS 9.1, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-105895](https://cve.now/CVE-2026-105895.md): Adobe Experience Manager | Improper Input Validation (CWE-20) (CVSS 9.9, Adobe Experience Manager)
- [CVE-2026-63146](https://cve.now/CVE-2026-63146.md): Omnispace Agora Project \< 26.10.0 PHP Code Injection via config.inc.php (CVSS 9.3, Omnispace Agora Project)
- [CVE-2026-103848](https://cve.now/CVE-2026-103848.md): Adobe Experience Manager | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) (CVSS 9.9, Adobe Experience Manager 6.5 LTS · Adobe Experience Manager)
- [CVE-2026-110005](https://cve.now/CVE-2026-110005.md): Moghtech Komodo contains an OS command injection vulnerability (CVSS 8.8, Komodo)
- [CVE-2026-104252](https://cve.now/CVE-2026-104252.md): Vitess vttablet /twopcz reflected XSS (CVSS 9.8, vitessio vitess · vitess.io/vitess)
- [CVE-2026-16753](https://cve.now/CVE-2026-16753.md): CVE-2026-16753 (CVSS 8.8, Lowcoder)
- [CVE-2026-86022](https://cve.now/CVE-2026-86022.md): VNote: Argument injection to arbitrary command execution via crafted note filename in external-program handling (CVSS 7.0, vnotex vnote)
- [CVE-2026-86016](https://cve.now/CVE-2026-86016.md): VNote: Stored XSS via YAML Frontmatter Leading to Local File Read and Remote Exfiltration (CVSS 8.2, vnotex vnote)
- [CVE-2026-55601](https://cve.now/CVE-2026-55601.md): MultiTail: Shell injection in execute-on-match command handling (CVSS 7.3, folkertvanheusden multitail)
- [CVE-2026-56826](https://cve.now/CVE-2026-56826.md): Shopper: Missing function-level authorization on Settings tax/zone/shipping Livewire components allows a low-privileged user to delete commerce configuration (CVSS 5.4, shopperlabs shopper · shopper/framework)
- [CVE-2026-104875](https://cve.now/CVE-2026-104875.md): Ente: Accepted emergency contact can bypass the recovery notice period (CVSS 7.1, ente · ghcr.io/ente/server)
- [CVE-2026-110256](https://cve.now/CVE-2026-110256.md): Dockhand before 1.0.19 Username Enumeration via LDAP Injection in tryLdapAuth (CVSS 6.3, Finsys dockhand)
- [CVE-2026-110255](https://cve.now/CVE-2026-110255.md): Dockhand before 1.0.43 SSRF via /api/templates/compose Endpoint (CVSS 8.4, Finsys dockhand)
- [CVE-2026-110254](https://cve.now/CVE-2026-110254.md): Dockhand before 1.0.45 SSRF via IPv6 Transition Address Bypass in ipCategory (CVSS 5.3, Finsys dockhand)
- [CVE-2026-110130](https://cve.now/CVE-2026-110130.md): Dockhand before 1.0.45 Authentication Bypass via Static-Asset Check (CVSS 10.0, Finsys dockhand)
- [CVE-2026-110112](https://cve.now/CVE-2026-110112.md): Dockhand before 1.0.50 OIDC Privilege Escalation via Missing Token Claim Validation (CVSS 9.2, Finsys dockhand)
- [CVE-2026-110111](https://cve.now/CVE-2026-110111.md): Xen Orchestra before 6.9.0 Privilege Escalation via Prototype Pollution in vm.importFromEsxi (CVSS 7.7, vatesfr xen-orchestra)
- [CVE-2026-102599](https://cve.now/CVE-2026-102599.md): Socket.IO: Engine.IO Protocol Revision Mismatch DoS (CVSS 7.5, socketio socket.io · engine.io)
- [CVE-2026-86063](https://cve.now/CVE-2026-86063.md): Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash Pinning (CVSS 7.5, anthropics claude-code · @anthropic-ai/claude-code)
- [CVE-2026-97781](https://cve.now/CVE-2026-97781.md): Microsoft Office OneNote Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise)
- [CVE-2026-105016](https://cve.now/CVE-2026-105016.md): Microsoft QUIC Remote Code Execution Vulnerability (CVSS 9.8, Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +4)
- [CVE-2026-97801](https://cve.now/CVE-2026-97801.md): .NET Framework Tampering Vulnerability (CVSS 7.5, Microsoft .NET Framework)
- [CVE-2026-108463](https://cve.now/CVE-2026-108463.md): Windows SmartScreen Security Feature Bypass Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-108471](https://cve.now/CVE-2026-108471.md): Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-108136](https://cve.now/CVE-2026-108136.md): Microsoft Windows Search Component Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-108135](https://cve.now/CVE-2026-108135.md): Windows Backup Engine Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-108134](https://cve.now/CVE-2026-108134.md): Windows Autopilot Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-108133](https://cve.now/CVE-2026-108133.md): Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows Server)
- [CVE-2026-108132](https://cve.now/CVE-2026-108132.md): Windows Kerberos Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-108131](https://cve.now/CVE-2026-108131.md): Active Directory Federation Services (AD FS) Spoofing Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-108130](https://cve.now/CVE-2026-108130.md): Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-108129](https://cve.now/CVE-2026-108129.md): Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-108128](https://cve.now/CVE-2026-108128.md): Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-108127](https://cve.now/CVE-2026-108127.md): Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-97844](https://cve.now/CVE-2026-97844.md): Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-97843](https://cve.now/CVE-2026-97843.md): Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-97842](https://cve.now/CVE-2026-97842.md): Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-97841](https://cve.now/CVE-2026-97841.md): Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-97840](https://cve.now/CVE-2026-97840.md): Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-97839](https://cve.now/CVE-2026-97839.md): Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-97838](https://cve.now/CVE-2026-97838.md): Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-97837](https://cve.now/CVE-2026-97837.md): Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-97836](https://cve.now/CVE-2026-97836.md): Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-97835](https://cve.now/CVE-2026-97835.md): Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-97834](https://cve.now/CVE-2026-97834.md): Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-97833](https://cve.now/CVE-2026-97833.md): Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-97832](https://cve.now/CVE-2026-97832.md): Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-97831](https://cve.now/CVE-2026-97831.md): Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-97830](https://cve.now/CVE-2026-97830.md): Windows Internet Information Services Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-97829](https://cve.now/CVE-2026-97829.md): Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-97828](https://cve.now/CVE-2026-97828.md): Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-97827](https://cve.now/CVE-2026-97827.md): Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-97826](https://cve.now/CVE-2026-97826.md): Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-97825](https://cve.now/CVE-2026-97825.md): Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-97824](https://cve.now/CVE-2026-97824.md): Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-97823](https://cve.now/CVE-2026-97823.md): Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-97822](https://cve.now/CVE-2026-97822.md): Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-97821](https://cve.now/CVE-2026-97821.md): Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-97820](https://cve.now/CVE-2026-97820.md): Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-97819](https://cve.now/CVE-2026-97819.md): Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-97817](https://cve.now/CVE-2026-97817.md): Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-97816](https://cve.now/CVE-2026-97816.md): Microsoft OpenSSH for Windows Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-97815](https://cve.now/CVE-2026-97815.md): Windows Error Reporting Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-97814](https://cve.now/CVE-2026-97814.md): Windows Text Shaping Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-97813](https://cve.now/CVE-2026-97813.md): Windows Hyper-V Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-97812](https://cve.now/CVE-2026-97812.md): Windows Update Orchestrator Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-97811](https://cve.now/CVE-2026-97811.md): Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-97810](https://cve.now/CVE-2026-97810.md): Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-97809](https://cve.now/CVE-2026-97809.md): Windows Broadcast DVR User Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-97808](https://cve.now/CVE-2026-97808.md): Windows Broadcast DVR User Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-97807](https://cve.now/CVE-2026-97807.md): Windows Broadcast DVR User Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-97806](https://cve.now/CVE-2026-97806.md): Windows Broadcast DVR User Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-97805](https://cve.now/CVE-2026-97805.md): Windows Partition Management Driver Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-97804](https://cve.now/CVE-2026-97804.md): HID Class Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-97803](https://cve.now/CVE-2026-97803.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96113](https://cve.now/CVE-2026-96113.md): Windows Domain Name Service Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-105013](https://cve.now/CVE-2026-105013.md): Microsoft Office SharePoint Remote Code Execution Vulnerability (CVSS 7.4, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-70162](https://cve.now/CVE-2026-70162.md): .NET Denial of Service Vulnerability (CVSS 5.9, Microsoft Visual Studio · Microsoft System.Security.Cryptog…)
- [CVE-2026-97799](https://cve.now/CVE-2026-97799.md): Windows Audio Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-97798](https://cve.now/CVE-2026-97798.md): Windows Error Reporting Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-105010](https://cve.now/CVE-2026-105010.md): Microsoft Windows Search Component Elevation of Privilege Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-105009](https://cve.now/CVE-2026-105009.md): Windows Server Update Service Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft Windows Server)
- [CVE-2026-105008](https://cve.now/CVE-2026-105008.md): Windows Schannel Spoofing Vulnerability (CVSS 9.0, Microsoft Windows)
- [CVE-2026-105007](https://cve.now/CVE-2026-105007.md): Windows NDIS Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-105006](https://cve.now/CVE-2026-105006.md): HID Class Driver Elevation of Privilege Vulnerability (CVSS 6.4, Microsoft Windows)
- [CVE-2026-105005](https://cve.now/CVE-2026-105005.md): Windows Schannel Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2026-105004](https://cve.now/CVE-2026-105004.md): Windows Overlay Filter Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-105003](https://cve.now/CVE-2026-105003.md): HID Class Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-103578](https://cve.now/CVE-2026-103578.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2026-103577](https://cve.now/CVE-2026-103577.md): Microsoft QUIC Security Feature Bypass Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-103576](https://cve.now/CVE-2026-103576.md): Active Directory Federation Services (AD FS) Spoofing Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-103575](https://cve.now/CVE-2026-103575.md): Remote Desktop Client Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-103569](https://cve.now/CVE-2026-103569.md): Windows IKE Extension Information Disclosure Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-103568](https://cve.now/CVE-2026-103568.md): Windows Credential Providers Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-103567](https://cve.now/CVE-2026-103567.md): Windows Broadcast DVR User Service Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-103565](https://cve.now/CVE-2026-103565.md): Windows Broadcast DVR User Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-103560](https://cve.now/CVE-2026-103560.md): Role: DNS Server Tampering Vulnerability (CVSS 5.5, Microsoft Windows Server)
- [CVE-2026-103558](https://cve.now/CVE-2026-103558.md): Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-103555](https://cve.now/CVE-2026-103555.md): Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-103554](https://cve.now/CVE-2026-103554.md): Windows Broadcast DVR User Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-103553](https://cve.now/CVE-2026-103553.md): Windows Partition Management Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-69922](https://cve.now/CVE-2026-69922.md): Microsoft Office Excel Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-109453](https://cve.now/CVE-2026-109453.md): Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-102869](https://cve.now/CVE-2026-102869.md): .NET and Visual Studio Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 ·… +3)
- [CVE-2026-102226](https://cve.now/CVE-2026-102226.md): Dynamics Business Central Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Dynamics NAV)
- [CVE-2026-102225](https://cve.now/CVE-2026-102225.md): Windows Text Shaping Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-100215](https://cve.now/CVE-2026-100215.md): Microsoft Graphics Component Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-102217](https://cve.now/CVE-2026-102217.md): WebDAV Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-102214](https://cve.now/CVE-2026-102214.md): Windows Hyper-V Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-102220](https://cve.now/CVE-2026-102220.md): Windows VHD miniport driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-102221](https://cve.now/CVE-2026-102221.md): Secure Boot Security Feature Bypass Vulnerability (CVSS 4.4, Microsoft Windows)
- [CVE-2026-102215](https://cve.now/CVE-2026-102215.md): Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-102218](https://cve.now/CVE-2026-102218.md): Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-102216](https://cve.now/CVE-2026-102216.md): Windows StateRepository API Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-102211](https://cve.now/CVE-2026-102211.md): Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-102210](https://cve.now/CVE-2026-102210.md): Windows Text Shaping Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-102209](https://cve.now/CVE-2026-102209.md): Microsoft Graphics Component Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-102208](https://cve.now/CVE-2026-102208.md): Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-102207](https://cve.now/CVE-2026-102207.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-102205](https://cve.now/CVE-2026-102205.md): Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-102206](https://cve.now/CVE-2026-102206.md): Windows Portable Device MTP Driver Elevation of Privilege Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2026-102204](https://cve.now/CVE-2026-102204.md): Windows Subsystem for Linux Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows Subsystem for Linux)
- [CVE-2026-102202](https://cve.now/CVE-2026-102202.md): Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-102203](https://cve.now/CVE-2026-102203.md): RPC Runtime Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-102201](https://cve.now/CVE-2026-102201.md): Microsoft Windows Media Foundation Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-102199](https://cve.now/CVE-2026-102199.md): Microsoft Windows Codecs Library Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-102198](https://cve.now/CVE-2026-102198.md): Windows Remote Desktop Protocol Information Disclosure Vulnerability (CVSS 5.3, Microsoft Windows)
- [CVE-2026-102197](https://cve.now/CVE-2026-102197.md): Windows Broadcast DVR User Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-102196](https://cve.now/CVE-2026-102196.md): Windows Broadcast DVR User Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-102195](https://cve.now/CVE-2026-102195.md): Windows Broadcast DVR User Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-102194](https://cve.now/CVE-2026-102194.md): Windows Graphics Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-102193](https://cve.now/CVE-2026-102193.md): Windows Broadcast DVR User Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-102192](https://cve.now/CVE-2026-102192.md): Windows Failover Cluster Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows Server)
- [CVE-2026-102191](https://cve.now/CVE-2026-102191.md): Windows Storage Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-102189](https://cve.now/CVE-2026-102189.md): Windows Storage Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-102188](https://cve.now/CVE-2026-102188.md): Windows Storage Port Driver Elevation of Privilege Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2026-102186](https://cve.now/CVE-2026-102186.md): Windows Network File System Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2026-102187](https://cve.now/CVE-2026-102187.md): Windows Kernel Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-96209](https://cve.now/CVE-2026-96209.md): Windows Network File System Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-88226](https://cve.now/CVE-2026-88226.md): Windows Storage Port Driver Information Disclosure Vulnerability (CVSS 4.6, Microsoft Windows)
- [CVE-2026-70212](https://cve.now/CVE-2026-70212.md): Windows Security Center Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-70023](https://cve.now/CVE-2026-70023.md): Windows Hyper-V Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-100225](https://cve.now/CVE-2026-100225.md): Windows Storage Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-100222](https://cve.now/CVE-2026-100222.md): Network Policy Server (NPS) Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-69506](https://cve.now/CVE-2026-69506.md): Windows Key Storage Provider Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2026-88219](https://cve.now/CVE-2026-88219.md): RPC Runtime Library Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-100220](https://cve.now/CVE-2026-100220.md): Windows Media Video Decoder Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-100219](https://cve.now/CVE-2026-100219.md): Microsoft QUIC Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-100218](https://cve.now/CVE-2026-100218.md): Remote Desktop Gateway Service Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2026-100217](https://cve.now/CVE-2026-100217.md): Windows Group Policy Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-100216](https://cve.now/CVE-2026-100216.md): Windows Storage Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-100214](https://cve.now/CVE-2026-100214.md): Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Dynamics NAV)
- [CVE-2026-108396](https://cve.now/CVE-2026-108396.md): Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-105729](https://cve.now/CVE-2026-105729.md): SysInternals Elevation of Privilege Vulnerability (CVSS 7.1, Microsoft Windows Sysinternals Process Monitor)
- [CVE-2026-102870](https://cve.now/CVE-2026-102870.md): ASP.NET Core Remote Code Execution Vulnerability (CVSS 8.8, Microsoft .NET 10.0 installed on Linux · Microsoft .NET… +7)
- [CVE-2026-58280](https://cve.now/CVE-2026-58280.md): .NET Denial of Service Vulnerability (CVSS 7.5, Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +4)
- [CVE-2026-102851](https://cve.now/CVE-2026-102851.md): Visual Studio Code Security Feature Bypass Vulnerability (CVSS 6.1, Microsoft Visual Studio Code)
- [CVE-2026-100212](https://cve.now/CVE-2026-100212.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-100210](https://cve.now/CVE-2026-100210.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-100209](https://cve.now/CVE-2026-100209.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-100211](https://cve.now/CVE-2026-100211.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-100207](https://cve.now/CVE-2026-100207.md): Azure CycleCloud Remote Code Execution Vulnerability (CVSS 7.3, Microsoft Azure CycleCloud)
- [CVE-2026-100205](https://cve.now/CVE-2026-100205.md): SysInternals Elevation of Privilege Vulnerability (CVSS 7.1, Microsoft Windows Sysinternals Process Monitor)
- [CVE-2026-100203](https://cve.now/CVE-2026-100203.md): Windows Update Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-100202](https://cve.now/CVE-2026-100202.md): Windows Message Queuing Queue Manager Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-100201](https://cve.now/CVE-2026-100201.md): Windows Client License Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-100200](https://cve.now/CVE-2026-100200.md): Windows Update Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-97793](https://cve.now/CVE-2026-97793.md): Windows Setup and Deployment Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-97792](https://cve.now/CVE-2026-97792.md): Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-97790](https://cve.now/CVE-2026-97790.md): Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-97787](https://cve.now/CVE-2026-97787.md): Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-97788](https://cve.now/CVE-2026-97788.md): Active Directory Federation Services (AD FS) Information Disclosure Vulnerability (CVSS 7.5, Microsoft .NET Framework · Microsoft Windows)
- [CVE-2026-96118](https://cve.now/CVE-2026-96118.md): Windows Graphics Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96071](https://cve.now/CVE-2026-96071.md): Windows Media Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-97745](https://cve.now/CVE-2026-97745.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-97768](https://cve.now/CVE-2026-97768.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-97772](https://cve.now/CVE-2026-97772.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-97775](https://cve.now/CVE-2026-97775.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-97763](https://cve.now/CVE-2026-97763.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-97741](https://cve.now/CVE-2026-97741.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-97004](https://cve.now/CVE-2026-97004.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-97746](https://cve.now/CVE-2026-97746.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-97760](https://cve.now/CVE-2026-97760.md): Microsoft Office Excel Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-97742](https://cve.now/CVE-2026-97742.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-97738](https://cve.now/CVE-2026-97738.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-97757](https://cve.now/CVE-2026-97757.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-97011](https://cve.now/CVE-2026-97011.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-97762](https://cve.now/CVE-2026-97762.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-97777](https://cve.now/CVE-2026-97777.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-97743](https://cve.now/CVE-2026-97743.md): Microsoft Office Excel Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-97010](https://cve.now/CVE-2026-97010.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-97773](https://cve.now/CVE-2026-97773.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-97769](https://cve.now/CVE-2026-97769.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-97008](https://cve.now/CVE-2026-97008.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-97756](https://cve.now/CVE-2026-97756.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-97779](https://cve.now/CVE-2026-97779.md): Microsoft Office Excel Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-97007](https://cve.now/CVE-2026-97007.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-97748](https://cve.now/CVE-2026-97748.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-96960](https://cve.now/CVE-2026-96960.md): .NET Denial of Service Vulnerability (CVSS 7.5, Microsoft .NET Framework · Microsoft System.Security.Crypto…)
- [CVE-2026-96959](https://cve.now/CVE-2026-96959.md): .NET Denial of Service Vulnerability (CVSS 7.5, Microsoft .NET Framework · Microsoft System.Security.Crypto…)
- [CVE-2026-96958](https://cve.now/CVE-2026-96958.md): .NET Denial of Service Vulnerability (CVSS 7.5, Microsoft .NET Framework · Microsoft System.Security.Crypto…)
- [CVE-2026-96957](https://cve.now/CVE-2026-96957.md): .NET Security Feature Bypass Vulnerability (CVSS 8.8, Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +1)
- [CVE-2026-95943](https://cve.now/CVE-2026-95943.md): Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96952](https://cve.now/CVE-2026-96952.md): Microsoft Windows Media Foundation Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-96953](https://cve.now/CVE-2026-96953.md): Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96951](https://cve.now/CVE-2026-96951.md): Windows Shell Security Feature Bypass Vulnerability (CVSS 8.8, KEV, Microsoft Edge · Microsoft Outlook.com +1)
- [CVE-2026-96950](https://cve.now/CVE-2026-96950.md): Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96949](https://cve.now/CVE-2026-96949.md): Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96948](https://cve.now/CVE-2026-96948.md): Windows Client Side Caching driver (csc.sys) Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-96947](https://cve.now/CVE-2026-96947.md): Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96946](https://cve.now/CVE-2026-96946.md): Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96945](https://cve.now/CVE-2026-96945.md): Windows Failover Cluster Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows Server)
- [CVE-2026-96944](https://cve.now/CVE-2026-96944.md): Windows Storage Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-96202](https://cve.now/CVE-2026-96202.md): Windows Raw Image Extension Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Edge · Microsoft Raw Image Extension)
- [CVE-2026-88094](https://cve.now/CVE-2026-88094.md): Azure Storage Library Elevation of Privilege Vulnerability (CVSS 8.1, Microsoft azure-storage-blob-batch · Microsoft Edge)
- [CVE-2026-96939](https://cve.now/CVE-2026-96939.md): Servicing Stack Updates Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96938](https://cve.now/CVE-2026-96938.md): Windows Distributed File System (DFS) Elevation of Privilege Vulnerability (CVSS 6.7, Microsoft Windows)
- [CVE-2026-96937](https://cve.now/CVE-2026-96937.md): Microsoft Windows Search Component Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-85866](https://cve.now/CVE-2026-85866.md): Windows ALPC Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2026-69675](https://cve.now/CVE-2026-69675.md): Windows Network File System Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows Server)
- [CVE-2026-96926](https://cve.now/CVE-2026-96926.md): Role: DNS Server Tampering Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-96929](https://cve.now/CVE-2026-96929.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96931](https://cve.now/CVE-2026-96931.md): Windows NTFS Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96932](https://cve.now/CVE-2026-96932.md): Windows Embedded Mode Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96934](https://cve.now/CVE-2026-96934.md): Windows DHCP Server Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-96930](https://cve.now/CVE-2026-96930.md): Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-96927](https://cve.now/CVE-2026-96927.md): Windows NTFS Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-96933](https://cve.now/CVE-2026-96933.md): Windows COM+ Event System Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96924](https://cve.now/CVE-2026-96924.md): Windows OLE Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-96925](https://cve.now/CVE-2026-96925.md): Windows NTFS Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-96923](https://cve.now/CVE-2026-96923.md): Windows Workstation Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96919](https://cve.now/CVE-2026-96919.md): Windows Broadcast DVR User Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96918](https://cve.now/CVE-2026-96918.md): Windows NTFS Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96917](https://cve.now/CVE-2026-96917.md): Windows PCI Bus Driver Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-96914](https://cve.now/CVE-2026-96914.md): Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-96915](https://cve.now/CVE-2026-96915.md): Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96913](https://cve.now/CVE-2026-96913.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-96912](https://cve.now/CVE-2026-96912.md): Windows Client License Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96910](https://cve.now/CVE-2026-96910.md): Microsoft Windows Search Component Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-96911](https://cve.now/CVE-2026-96911.md): Microsoft Windows Search Component Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96916](https://cve.now/CVE-2026-96916.md): Windows NTFS Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96909](https://cve.now/CVE-2026-96909.md): Windows BitLocker Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-96858](https://cve.now/CVE-2026-96858.md): Windows Security Account Manager Tampering Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-96853](https://cve.now/CVE-2026-96853.md): Windows Win32 Kernel Subsystem Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2026-96852](https://cve.now/CVE-2026-96852.md): Windows TCP/IP Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96854](https://cve.now/CVE-2026-96854.md): Windows Device Association Service Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-96843](https://cve.now/CVE-2026-96843.md): WebDAV Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96847](https://cve.now/CVE-2026-96847.md): WebDAV Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96846](https://cve.now/CVE-2026-96846.md): WebDAV Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-96844](https://cve.now/CVE-2026-96844.md): Microsoft Bluetooth Driver Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows)
- [CVE-2026-96850](https://cve.now/CVE-2026-96850.md): Windows Modern Device Management (MDM) Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-96325](https://cve.now/CVE-2026-96325.md): Windows SMB Server Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-96324](https://cve.now/CVE-2026-96324.md): Microsoft Windows Search Component Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96321](https://cve.now/CVE-2026-96321.md): Remote Desktop Display Driver Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-96322](https://cve.now/CVE-2026-96322.md): Windows Remote Desktop Protocol Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96323](https://cve.now/CVE-2026-96323.md): Windows Update Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96320](https://cve.now/CVE-2026-96320.md): Windows DHCP Server Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-96303](https://cve.now/CVE-2026-96303.md): Microsoft PowerShell Security Feature Bypass Vulnerability (CVSS 6.5, Microsoft PowerShell · powershell)
- [CVE-2026-96304](https://cve.now/CVE-2026-96304.md): Windows USB Print Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96300](https://cve.now/CVE-2026-96300.md): RPC Endpoint Mapper Service Denial of Service Vulnerability (CVSS 5.9, Microsoft Windows)
- [CVE-2026-96251](https://cve.now/CVE-2026-96251.md): Microsoft PowerShell Remote Code Execution Vulnerability (CVSS 8.8, Microsoft PowerShell · powershell)
- [CVE-2026-96252](https://cve.now/CVE-2026-96252.md): Active Directory Federation Services (AD FS) Spoofing Vulnerability (CVSS 9.1, Microsoft Windows)
- [CVE-2026-96253](https://cve.now/CVE-2026-96253.md): Windows USB Print Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96254](https://cve.now/CVE-2026-96254.md): Windows USB Print Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96310](https://cve.now/CVE-2026-96310.md): Windows USB Print Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96301](https://cve.now/CVE-2026-96301.md): Windows USB Print Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96250](https://cve.now/CVE-2026-96250.md): Windows USB Print Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96249](https://cve.now/CVE-2026-96249.md): Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96243](https://cve.now/CVE-2026-96243.md): Windows WalletService Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96238](https://cve.now/CVE-2026-96238.md): .NET Security Feature Bypass Vulnerability (CVSS 6.5, Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +3)
- [CVE-2026-96237](https://cve.now/CVE-2026-96237.md): .NET Remote Code Execution Vulnerability (CVSS 7.5, Microsoft .NET 10.0 runtime · Microsoft .NET 8.0 runtime +2)
- [CVE-2026-96235](https://cve.now/CVE-2026-96235.md): .NET Remote Code Execution Vulnerability (CVSS 8.8, Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +3)
- [CVE-2026-96234](https://cve.now/CVE-2026-96234.md): .NET Information Disclosure Vulnerability (CVSS 5.3, Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +3)
- [CVE-2026-96232](https://cve.now/CVE-2026-96232.md): .NET Information Disclosure Vulnerability (CVSS 7.5, Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +3)
- [CVE-2026-96230](https://cve.now/CVE-2026-96230.md): ASP.NET Core Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Visual Studio · Microsoft.AspNetCore.Components.W…)
- [CVE-2026-96229](https://cve.now/CVE-2026-96229.md): .NET Information Disclosure Vulnerability (CVSS 6.5, Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +3)
- [CVE-2026-96233](https://cve.now/CVE-2026-96233.md): ASP.NET Core Denial of Service Vulnerability (CVSS 7.5, Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +3)
- [CVE-2026-96225](https://cve.now/CVE-2026-96225.md): .NET Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +3)
- [CVE-2026-96231](https://cve.now/CVE-2026-96231.md): .NET Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +3)
- [CVE-2026-85363](https://cve.now/CVE-2026-85363.md): .NET Framework Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +4)
- [CVE-2026-84008](https://cve.now/CVE-2026-84008.md): .NET Denial of Service Vulnerability (CVSS 7.5, Microsoft .NET Framework · Microsoft Visual Studio +1)
- [CVE-2026-83520](https://cve.now/CVE-2026-83520.md): .NET Remote Code Execution Vulnerability (CVSS 8.8, Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +4)
- [CVE-2026-70035](https://cve.now/CVE-2026-70035.md): .NET Framework Remote Code Execution Vulnerability (CVSS 8.8, Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +4)
- [CVE-2026-70007](https://cve.now/CVE-2026-70007.md): .NET Framework Remote Code Execution Vulnerability (CVSS 8.8, Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +4)
- [CVE-2026-96206](https://cve.now/CVE-2026-96206.md): Windows Subsystem for Linux Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows Subsystem for Linux)
- [CVE-2026-96188](https://cve.now/CVE-2026-96188.md): Microsoft PowerToys Elevation of Privilege Vulnerability (CVSS 7.3, Microsoft PowerToys)
- [CVE-2026-96186](https://cve.now/CVE-2026-96186.md): Microsoft Windows Media Foundation Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96044](https://cve.now/CVE-2026-96044.md): Microsoft Office SharePoint Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-70343](https://cve.now/CVE-2026-70343.md): Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability (CVSS 8.8, Microsoft MPEG-2 Video Extension)
- [CVE-2026-88207](https://cve.now/CVE-2026-88207.md): Microsoft Office PowerPoint Remote Code Execution Vulnerability (CVSS 7.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-88210](https://cve.now/CVE-2026-88210.md): Microsoft Office Word Security Feature Bypass Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-88206](https://cve.now/CVE-2026-88206.md): Microsoft Office SharePoint Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-88203](https://cve.now/CVE-2026-88203.md): Microsoft Office PowerPoint Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-88195](https://cve.now/CVE-2026-88195.md): Microsoft Office Excel Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-88190](https://cve.now/CVE-2026-88190.md): Microsoft Office Excel Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-88192](https://cve.now/CVE-2026-88192.md): Microsoft Office Excel Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-88183](https://cve.now/CVE-2026-88183.md): Microsoft Office PowerPoint Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-88186](https://cve.now/CVE-2026-88186.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-88185](https://cve.now/CVE-2026-88185.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.1, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-88200](https://cve.now/CVE-2026-88200.md): Microsoft Office SharePoint Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-88166](https://cve.now/CVE-2026-88166.md): Microsoft Office SharePoint Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-88184](https://cve.now/CVE-2026-88184.md): Microsoft Office Excel Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-88172](https://cve.now/CVE-2026-88172.md): Microsoft Office Excel Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-88154](https://cve.now/CVE-2026-88154.md): Microsoft Office Excel Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-88163](https://cve.now/CVE-2026-88163.md): Microsoft Office SharePoint Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-85932](https://cve.now/CVE-2026-85932.md): Microsoft Office SharePoint Information Disclosure Vulnerability (CVSS 6.5, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-85340](https://cve.now/CVE-2026-85340.md): Microsoft Office Click-To-Run Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-88144](https://cve.now/CVE-2026-88144.md): Microsoft Office PowerPoint Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-70242](https://cve.now/CVE-2026-70242.md): Microsoft Office Outlook Remote Code Execution Vulnerability (CVSS 9.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-70246](https://cve.now/CVE-2026-70246.md): Microsoft Office SharePoint Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-70215](https://cve.now/CVE-2026-70215.md): Microsoft Office PowerPoint Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-70281](https://cve.now/CVE-2026-70281.md): Microsoft Office Outlook Information Disclosure Vulnerability (CVSS 7.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-70217](https://cve.now/CVE-2026-70217.md): Microsoft Office SharePoint Information Disclosure Vulnerability (CVSS 4.9, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-70219](https://cve.now/CVE-2026-70219.md): Microsoft Office Excel Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-70254](https://cve.now/CVE-2026-70254.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-70214](https://cve.now/CVE-2026-70214.md): Microsoft Office Excel Information Disclosure Vulnerability (CVSS 5.5, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-70202](https://cve.now/CVE-2026-70202.md): Microsoft Office SharePoint Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-70153](https://cve.now/CVE-2026-70153.md): Microsoft PostScript Printer Driver Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-69919](https://cve.now/CVE-2026-69919.md): Windows Cryptographic Services Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-69802](https://cve.now/CVE-2026-69802.md): Network Device Enrollment Service (NDES) Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows Server)
- [CVE-2026-88130](https://cve.now/CVE-2026-88130.md): Role: DNS Server Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows Server)
- [CVE-2026-88129](https://cve.now/CVE-2026-88129.md): Role: DNS Server Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows Server)
- [CVE-2026-88125](https://cve.now/CVE-2026-88125.md): Role: DNS Server Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows Server)
- [CVE-2026-88123](https://cve.now/CVE-2026-88123.md): Role: DNS Server Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows Server)
- [CVE-2026-88122](https://cve.now/CVE-2026-88122.md): Role: DNS Server Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows Server)
- [CVE-2026-88120](https://cve.now/CVE-2026-88120.md): Windows DHCP Server Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows Server)
- [CVE-2026-88119](https://cve.now/CVE-2026-88119.md): Windows DHCP Server Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows Server)
- [CVE-2026-88117](https://cve.now/CVE-2026-88117.md): Windows DHCP Server Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows Server)
- [CVE-2026-88116](https://cve.now/CVE-2026-88116.md): Windows Domain Name Service Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-88114](https://cve.now/CVE-2026-88114.md): Windows Domain Name Service Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-88112](https://cve.now/CVE-2026-88112.md): Windows Domain Name Service Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-88093](https://cve.now/CVE-2026-88093.md): Desktop Window Manager Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-88092](https://cve.now/CVE-2026-88092.md): ASP.NET Core Tampering Vulnerability (CVSS 9.4, Microsoft ASP.NET Core · Microsoft Visual Studio +12)
- [CVE-2026-88075](https://cve.now/CVE-2026-88075.md): Configuration Manager Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Configuration Manager)
- [CVE-2026-87696](https://cve.now/CVE-2026-87696.md): Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft Exchange Server 2016 Cumulative Update · Micro… +1)
- [CVE-2026-87695](https://cve.now/CVE-2026-87695.md): Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Exchange Server 2016 Cumulative Update · Micro… +1)
- [CVE-2026-87692](https://cve.now/CVE-2026-87692.md): Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Exchange Server 2016 Cumulative Update · Micro… +1)
- [CVE-2026-85873](https://cve.now/CVE-2026-85873.md): Skype for Business Elevation of Privilege Vulnerability (CVSS 6.5, Microsoft Skype for Business Server 2015 CU13 · Microsof… +1)
- [CVE-2026-83746](https://cve.now/CVE-2026-83746.md): Skype for Business Elevation of Privilege Vulnerability (CVSS 8.1, Microsoft Skype for Business Server 2015 CU13 · Microsof… +1)
- [CVE-2026-77910](https://cve.now/CVE-2026-77910.md): Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Exchange Server 2016 Cumulative Update · Micro… +1)
- [CVE-2026-70571](https://cve.now/CVE-2026-70571.md): Microsoft Exchange Server Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Exchange Server 2016 Cumulative Update · Micro… +1)
- [CVE-2026-70297](https://cve.now/CVE-2026-70297.md): Skype for Business Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Skype for Business Server 2015 CU13 · Microsof… +1)
- [CVE-2026-70279](https://cve.now/CVE-2026-70279.md): Microsoft Exchange Server Spoofing Vulnerability (CVSS 9.3, Microsoft Exchange Server 2016 Cumulative Update · Micro… +1)
- [CVE-2026-70264](https://cve.now/CVE-2026-70264.md): Microsoft Defender Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows Defender)
- [CVE-2026-70261](https://cve.now/CVE-2026-70261.md): Microsoft Trace Data Helper Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-70260](https://cve.now/CVE-2026-70260.md): Microsoft Trace Data Helper Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-70250](https://cve.now/CVE-2026-70250.md): Windows DHCP Client Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows Server)
- [CVE-2026-70229](https://cve.now/CVE-2026-70229.md): Windows Active Directory Domain Services Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2026-70228](https://cve.now/CVE-2026-70228.md): Desktop Window Manager Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70227](https://cve.now/CVE-2026-70227.md): Windows Device Association Service Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-70184](https://cve.now/CVE-2026-70184.md): Windows Backup Engine Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70111](https://cve.now/CVE-2026-70111.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2026-85925](https://cve.now/CVE-2026-85925.md): Azure Key Vault Client SDK Elevation of Privilege Vulnerability (CVSS 8.2, Microsoft azure-keyvault-administration · Microsoft azur… +2)
- [CVE-2026-85922](https://cve.now/CVE-2026-85922.md): Azure Key Vault Security Feature Bypass Vulnerability (CVSS 7.4, Microsoft azure\_security\_keyvault\_certificates · Microso… +6)
- [CVE-2026-70160](https://cve.now/CVE-2026-70160.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-70158](https://cve.now/CVE-2026-70158.md): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-70148](https://cve.now/CVE-2026-70148.md): Windows Broadcast DVR User Service Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-70143](https://cve.now/CVE-2026-70143.md): Windows Network File System Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70122](https://cve.now/CVE-2026-70122.md): Windows Broadcast DVR User Service Elevation of Privilege Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-70112](https://cve.now/CVE-2026-70112.md): Windows Spaceport.sys Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70084](https://cve.now/CVE-2026-70084.md): Windows Projected File System Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-70054](https://cve.now/CVE-2026-70054.md): Windows NetBIOS Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-69915](https://cve.now/CVE-2026-69915.md): Windows NTFS Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-69902](https://cve.now/CVE-2026-69902.md): Windows NTFS Remote Code Execution Vulnerability (CVSS 6.7, Microsoft Windows)
- [CVE-2026-69884](https://cve.now/CVE-2026-69884.md): Windows GDI Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-88193](https://cve.now/CVE-2026-88193.md): Microsoft Scripting Engine Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-88188](https://cve.now/CVE-2026-88188.md): Windows DWM Core Library Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-88191](https://cve.now/CVE-2026-88191.md): Microsoft Windows Search Component Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-88189](https://cve.now/CVE-2026-88189.md): Windows DWM Core Library Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-88194](https://cve.now/CVE-2026-88194.md): Windows DWM Core Library Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-88181](https://cve.now/CVE-2026-88181.md): Windows DWM Core Library Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-88182](https://cve.now/CVE-2026-88182.md): Microsoft Windows Search Component Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-88180](https://cve.now/CVE-2026-88180.md): Windows DWM Core Library Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-88179](https://cve.now/CVE-2026-88179.md): Windows DWM Core Library Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-88177](https://cve.now/CVE-2026-88177.md): Windows DWM Core Library Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-88174](https://cve.now/CVE-2026-88174.md): Windows Deployment Services Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2026-88171](https://cve.now/CVE-2026-88171.md): Windows DHCP Server Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2026-88149](https://cve.now/CVE-2026-88149.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-88142](https://cve.now/CVE-2026-88142.md): Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-88141](https://cve.now/CVE-2026-88141.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-88139](https://cve.now/CVE-2026-88139.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-88133](https://cve.now/CVE-2026-88133.md): Windows Portable Device Enumerator Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-88152](https://cve.now/CVE-2026-88152.md): Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-88121](https://cve.now/CVE-2026-88121.md): Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability (CVSS 8.0, Microsoft Windows)
- [CVE-2026-88147](https://cve.now/CVE-2026-88147.md): Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-88118](https://cve.now/CVE-2026-88118.md): Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-88128](https://cve.now/CVE-2026-88128.md): Windows DWM Core Library Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-88115](https://cve.now/CVE-2026-88115.md): Windows Server for NFS Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-88135](https://cve.now/CVE-2026-88135.md): WebDAV Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-88113](https://cve.now/CVE-2026-88113.md): Windows Broadcast DVR User Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-88110](https://cve.now/CVE-2026-88110.md): Windows Graphics Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-88126](https://cve.now/CVE-2026-88126.md): WebDAV Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-88109](https://cve.now/CVE-2026-88109.md): Microsoft Office Click-To-Run Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-88134](https://cve.now/CVE-2026-88134.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-88127](https://cve.now/CVE-2026-88127.md): Windows SMB Server Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-88105](https://cve.now/CVE-2026-88105.md): Windows Broadcast DVR User Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-88103](https://cve.now/CVE-2026-88103.md): Windows Broadcast DVR User Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-88079](https://cve.now/CVE-2026-88079.md): Windows MIDI Service Module Elevation of Privileges Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-87702](https://cve.now/CVE-2026-87702.md): Windows Resource Management (MRM) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-88072](https://cve.now/CVE-2026-88072.md): Windows Host Guardian Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-87715](https://cve.now/CVE-2026-87715.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-87700](https://cve.now/CVE-2026-87700.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-87704](https://cve.now/CVE-2026-87704.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-87698](https://cve.now/CVE-2026-87698.md): Windows Remote Access Service Infrastructure Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-87709](https://cve.now/CVE-2026-87709.md): Windows Host Guardian Service Tampering Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-87694](https://cve.now/CVE-2026-87694.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-87693](https://cve.now/CVE-2026-87693.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-87705](https://cve.now/CVE-2026-87705.md): Windows Hyper-V Security Feature Bypass Vulnerability (CVSS 7.4, Microsoft Windows)
- [CVE-2026-88076](https://cve.now/CVE-2026-88076.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-87699](https://cve.now/CVE-2026-87699.md): Winlogon Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85943](https://cve.now/CVE-2026-85943.md): Reliable Multicast Transport Driver (RMCAST) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-85941](https://cve.now/CVE-2026-85941.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-85884](https://cve.now/CVE-2026-85884.md): Windows Health and Optimized Experiences Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-69798](https://cve.now/CVE-2026-69798.md): Windows Wired AutoConfig Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-69789](https://cve.now/CVE-2026-69789.md): Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-85879](https://cve.now/CVE-2026-85879.md): Windows Subsystem for Linux Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows Subsystem for Linux)
- [CVE-2026-85874](https://cve.now/CVE-2026-85874.md): Windows Message Queuing Queue Manager Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83935](https://cve.now/CVE-2026-83935.md): Microsoft XML Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-83934](https://cve.now/CVE-2026-83934.md): Windows GDI+ Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-83933](https://cve.now/CVE-2026-83933.md): Windows Update Orchestrator Service Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-83930](https://cve.now/CVE-2026-83930.md): Windows Update Orchestrator Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83931](https://cve.now/CVE-2026-83931.md): Windows Hyper-V Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83925](https://cve.now/CVE-2026-83925.md): Windows Kernel Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2026-83924](https://cve.now/CVE-2026-83924.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83923](https://cve.now/CVE-2026-83923.md): Microsoft OpenSSH for Windows Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-83918](https://cve.now/CVE-2026-83918.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83915](https://cve.now/CVE-2026-83915.md): Windows Diagnostic Policy Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-85912](https://cve.now/CVE-2026-85912.md): Clipboard User Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83913](https://cve.now/CVE-2026-83913.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85911](https://cve.now/CVE-2026-85911.md): Windows StateRepository API Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85910](https://cve.now/CVE-2026-85910.md): Windows StateRepository API Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-85909](https://cve.now/CVE-2026-85909.md): Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-83910](https://cve.now/CVE-2026-83910.md): RPC Runtime Library Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-85908](https://cve.now/CVE-2026-85908.md): Windows Graphics Component Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Office 365 for Mac · Microsoft Office for Andr… +2)
- [CVE-2026-83908](https://cve.now/CVE-2026-83908.md): RPC Runtime Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83907](https://cve.now/CVE-2026-83907.md): Windows Hello Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-85906](https://cve.now/CVE-2026-85906.md): Windows Direct Composition Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85905](https://cve.now/CVE-2026-85905.md): Windows UI Immersive Server API Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-83905](https://cve.now/CVE-2026-83905.md): Windows Shell Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2026-83904](https://cve.now/CVE-2026-83904.md): HID Parser Library Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-85903](https://cve.now/CVE-2026-85903.md): Windows Domain Name Service Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-85902](https://cve.now/CVE-2026-85902.md): Windows Direct Composition Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85901](https://cve.now/CVE-2026-85901.md): Windows Graphics Component Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85872](https://cve.now/CVE-2026-85872.md): Windows Storage VSP Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83903](https://cve.now/CVE-2026-83903.md): Windows Direct Composition Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83900](https://cve.now/CVE-2026-83900.md): Windows Bind Filter Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83899](https://cve.now/CVE-2026-83899.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83897](https://cve.now/CVE-2026-83897.md): Windows Win32 Kernel Subsystem Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2026-83889](https://cve.now/CVE-2026-83889.md): Windows DNS Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-83873](https://cve.now/CVE-2026-83873.md): Windows Shell Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83877](https://cve.now/CVE-2026-83877.md): Windows Devices Human Interface Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83895](https://cve.now/CVE-2026-83895.md): Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2026-83870](https://cve.now/CVE-2026-83870.md): Windows Aggregated Data Platform Service Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-83898](https://cve.now/CVE-2026-83898.md): HID Parser Library Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-83884](https://cve.now/CVE-2026-83884.md): Windows Human Interface Device Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-83887](https://cve.now/CVE-2026-83887.md): HID Parser Library Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-83881](https://cve.now/CVE-2026-83881.md): Windows exFAT File System Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83883](https://cve.now/CVE-2026-83883.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83874](https://cve.now/CVE-2026-83874.md): Windows Event Tracing Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-83863](https://cve.now/CVE-2026-83863.md): Servicing Stack Updates Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83861](https://cve.now/CVE-2026-83861.md): Windows Remote Desktop Protocol Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83860](https://cve.now/CVE-2026-83860.md): Windows GDI Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-83859](https://cve.now/CVE-2026-83859.md): Windows NTFS Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83857](https://cve.now/CVE-2026-83857.md): Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83856](https://cve.now/CVE-2026-83856.md): Windows Event Logging Service Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-83850](https://cve.now/CVE-2026-83850.md): Microsoft Windows Search Component Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83845](https://cve.now/CVE-2026-83845.md): Windows Internet (wininet.dll) Spoofing Vulnerability (CVSS 8.4, Microsoft Windows)
- [CVE-2026-83841](https://cve.now/CVE-2026-83841.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83840](https://cve.now/CVE-2026-83840.md): Windows Error Reporting Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83837](https://cve.now/CVE-2026-83837.md): Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83835](https://cve.now/CVE-2026-83835.md): Windows Common Log File System Driver Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-83830](https://cve.now/CVE-2026-83830.md): Windows COM+ Event System Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83829](https://cve.now/CVE-2026-83829.md): Microsoft Windows Search Component Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83797](https://cve.now/CVE-2026-83797.md): Windows Partition Management Driver Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-83795](https://cve.now/CVE-2026-83795.md): Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-83794](https://cve.now/CVE-2026-83794.md): Windows Portable Device MTP Driver Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-83792](https://cve.now/CVE-2026-83792.md): Windows Device Install Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83791](https://cve.now/CVE-2026-83791.md): Windows Virtual Input Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83790](https://cve.now/CVE-2026-83790.md): Windows Hello Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83789](https://cve.now/CVE-2026-83789.md): Windows SMB Client Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-83788](https://cve.now/CVE-2026-83788.md): Windows rndismp6.sys Information Disclosure Vulnerability (CVSS 4.6, Microsoft Windows)
- [CVE-2026-83786](https://cve.now/CVE-2026-83786.md): Windows NTFS Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2026-83781](https://cve.now/CVE-2026-83781.md): Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83785](https://cve.now/CVE-2026-83785.md): Windows COM+ Event System Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83783](https://cve.now/CVE-2026-83783.md): Windows Management Instrumentation Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83777](https://cve.now/CVE-2026-83777.md): Windows Bluetooth Service Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-83778](https://cve.now/CVE-2026-83778.md): Microsoft Internet Messaging API Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-83774](https://cve.now/CVE-2026-83774.md): Windows Win32 Kernel Subsystem Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2026-83773](https://cve.now/CVE-2026-83773.md): Windows MIDI Service Module Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-83771](https://cve.now/CVE-2026-83771.md): Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-83770](https://cve.now/CVE-2026-83770.md): Windows Text Shaping Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-83767](https://cve.now/CVE-2026-83767.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83766](https://cve.now/CVE-2026-83766.md): Windows Hyper-V Security Feature Bypass Vulnerability (CVSS 4.2, Microsoft Windows)
- [CVE-2026-83763](https://cve.now/CVE-2026-83763.md): Windows Input System Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83764](https://cve.now/CVE-2026-83764.md): Windows Clipboard User Service Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-83765](https://cve.now/CVE-2026-83765.md): Windows DWM Core Library Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-83762](https://cve.now/CVE-2026-83762.md): Win32k Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83757](https://cve.now/CVE-2026-83757.md): Win32k Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83756](https://cve.now/CVE-2026-83756.md): Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83755](https://cve.now/CVE-2026-83755.md): Win32k Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-83752](https://cve.now/CVE-2026-83752.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-84994](https://cve.now/CVE-2026-84994.md): Qwik: Crashing any Qwik Server via Resource thenable (CVSS 8.7, QwikDev qwik · @builder.io qwik +2)
- [CVE-2026-83751](https://cve.now/CVE-2026-83751.md): Windows MIDI Service Module Elevation of Privileges Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83750](https://cve.now/CVE-2026-83750.md): Windows Error Reporting Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83747](https://cve.now/CVE-2026-83747.md): Windows Error Reporting Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-83737](https://cve.now/CVE-2026-83737.md): Windows NTFS Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-83735](https://cve.now/CVE-2026-83735.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83736](https://cve.now/CVE-2026-83736.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-83739](https://cve.now/CVE-2026-83739.md): Windows Bluetooth Service Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-83732](https://cve.now/CVE-2026-83732.md): Win32k Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83728](https://cve.now/CVE-2026-83728.md): Windows Hyper-V Spoofing Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-83725](https://cve.now/CVE-2026-83725.md): Microsoft Windows Search Component Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-83724](https://cve.now/CVE-2026-83724.md): Windows Management Instrumentation Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83721](https://cve.now/CVE-2026-83721.md): Win32k Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83720](https://cve.now/CVE-2026-83720.md): Windows Kerberos Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83718](https://cve.now/CVE-2026-83718.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83717](https://cve.now/CVE-2026-83717.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83716](https://cve.now/CVE-2026-83716.md): Windows Hyper-V Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-83714](https://cve.now/CVE-2026-83714.md): HTTP.sys Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-83709](https://cve.now/CVE-2026-83709.md): Windows NTLM Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83703](https://cve.now/CVE-2026-83703.md): Windows Wi-Fi Driver Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-83702](https://cve.now/CVE-2026-83702.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83701](https://cve.now/CVE-2026-83701.md): Windows Now Playing Session Manager Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83698](https://cve.now/CVE-2026-83698.md): Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83697](https://cve.now/CVE-2026-83697.md): Windows Modern Device Management (MDM) Tampering Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2026-83695](https://cve.now/CVE-2026-83695.md): Windows Event Logging Service Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-83696](https://cve.now/CVE-2026-83696.md): Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83689](https://cve.now/CVE-2026-83689.md): Windows Error Reporting Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83686](https://cve.now/CVE-2026-83686.md): Microsoft Windows Search Component Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-83685](https://cve.now/CVE-2026-83685.md): Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-83683](https://cve.now/CVE-2026-83683.md): Windows Encrypting File System (EFS) Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-83682](https://cve.now/CVE-2026-83682.md): Windows TCP/IP Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83680](https://cve.now/CVE-2026-83680.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83679](https://cve.now/CVE-2026-83679.md): Windows Defender Firewall Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83677](https://cve.now/CVE-2026-83677.md): Windows DHCP Client Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-83676](https://cve.now/CVE-2026-83676.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83672](https://cve.now/CVE-2026-83672.md): Windows Installer Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2026-83670](https://cve.now/CVE-2026-83670.md): Function Discovery Service (fdwsd.dll) Information Disclosure Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-83668](https://cve.now/CVE-2026-83668.md): Windows WLAN Service Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-83665](https://cve.now/CVE-2026-83665.md): Windows DHCP Server Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-83664](https://cve.now/CVE-2026-83664.md): Windows Portable Device File System Driver Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-83659](https://cve.now/CVE-2026-83659.md): Windows User Profile Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83656](https://cve.now/CVE-2026-83656.md): Windows Modern Device Management (MDM) Tampering Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2026-83651](https://cve.now/CVE-2026-83651.md): Windows GDI Information Disclosure Vulnerability (CVSS 6.5, Microsoft Office 365 for Mac · Microsoft Office for Andr… +2)
- [CVE-2026-83647](https://cve.now/CVE-2026-83647.md): Windows Active Directory Domain Services Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-83645](https://cve.now/CVE-2026-83645.md): Active Directory Federation Services (AD FS) Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-83643](https://cve.now/CVE-2026-83643.md): Windows Error Reporting Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-83640](https://cve.now/CVE-2026-83640.md): Windows NTFS Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83639](https://cve.now/CVE-2026-83639.md): Windows Sensor Data Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83638](https://cve.now/CVE-2026-83638.md): Windows USB Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83637](https://cve.now/CVE-2026-83637.md): Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83636](https://cve.now/CVE-2026-83636.md): Windows Hyper-V Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-83634](https://cve.now/CVE-2026-83634.md): Windows BitLocker Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83588](https://cve.now/CVE-2026-83588.md): Windows USB Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83587](https://cve.now/CVE-2026-83587.md): Windows Core Messaging Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83585](https://cve.now/CVE-2026-83585.md): Windows NTFS Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83582](https://cve.now/CVE-2026-83582.md): Windows Graphics Kernel Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2026-83579](https://cve.now/CVE-2026-83579.md): Windows Smart Card Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83574](https://cve.now/CVE-2026-83574.md): Windows Search Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83573](https://cve.now/CVE-2026-83573.md): Windows Kernel-Mode Driver Elevation of Privilege Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2026-83570](https://cve.now/CVE-2026-83570.md): Windows Search Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83568](https://cve.now/CVE-2026-83568.md): Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83567](https://cve.now/CVE-2026-83567.md): Windows NTFS Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83566](https://cve.now/CVE-2026-83566.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83565](https://cve.now/CVE-2026-83565.md): Windows Encrypting File System (EFS) Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-83564](https://cve.now/CVE-2026-83564.md): Windows Search Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83523](https://cve.now/CVE-2026-83523.md): Windows Image Acquisition Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-83522](https://cve.now/CVE-2026-83522.md): Windows IKE Extension Spoofing Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2026-83519](https://cve.now/CVE-2026-83519.md): Windows Error Reporting Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-83517](https://cve.now/CVE-2026-83517.md): Microsoft Windows Media Foundation Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-83513](https://cve.now/CVE-2026-83513.md): Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83514](https://cve.now/CVE-2026-83514.md): Windows Partition Management Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83511](https://cve.now/CVE-2026-83511.md): Active Directory Federation Services (AD FS) Spoofing Vulnerability (CVSS 7.4, Microsoft Windows)
- [CVE-2026-83509](https://cve.now/CVE-2026-83509.md): Windows Setup Files Cleanup Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83507](https://cve.now/CVE-2026-83507.md): Windows Update Orchestrator Service Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-83508](https://cve.now/CVE-2026-83508.md): Windows NTFS Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83506](https://cve.now/CVE-2026-83506.md): Servicing Stack Updates Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83505](https://cve.now/CVE-2026-83505.md): Windows Setup Files Cleanup Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-81971](https://cve.now/CVE-2026-81971.md): Windows NTFS Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-69454](https://cve.now/CVE-2026-69454.md): Microsoft Azure Attestation service and Device Health Attestation Service Information Disclosure Vulnerability (CVSS 7.5, Microsoft Windows Server)
- [CVE-2026-69326](https://cve.now/CVE-2026-69326.md): Graphic Fonts Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-77496](https://cve.now/CVE-2026-77496.md): Windows Imaging Component Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-73027](https://cve.now/CVE-2026-73027.md): Windows Setup Files Cleanup Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-69635](https://cve.now/CVE-2026-69635.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 6.6, Microsoft Windows)
- [CVE-2026-78459](https://cve.now/CVE-2026-78459.md): Microsoft Internet Information Services Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-69596](https://cve.now/CVE-2026-69596.md): Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-69577](https://cve.now/CVE-2026-69577.md): Microsoft Azure Attestation service and Device Health Attestation Service Information Disclosure Vulnerability (CVSS 7.5, Microsoft Windows Server)
- [CVE-2026-69471](https://cve.now/CVE-2026-69471.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-69783](https://cve.now/CVE-2026-69783.md): Windows Update Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-69733](https://cve.now/CVE-2026-69733.md): Windows Update Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-69640](https://cve.now/CVE-2026-69640.md): Windows Key Distribution Center Security Feature Bypass Vulnerability (CVSS 5.3, Microsoft Windows)
- [CVE-2026-77902](https://cve.now/CVE-2026-77902.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-69765](https://cve.now/CVE-2026-69765.md): Windows Storport Miniport Driver Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows Server)
- [CVE-2026-69736](https://cve.now/CVE-2026-69736.md): Windows Credential Manager Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-70295](https://cve.now/CVE-2026-70295.md): Win32k Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-70294](https://cve.now/CVE-2026-70294.md): Win32k Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-70293](https://cve.now/CVE-2026-70293.md): Win32k Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-70292](https://cve.now/CVE-2026-70292.md): Win32k Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-70288](https://cve.now/CVE-2026-70288.md): Win32k Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-70258](https://cve.now/CVE-2026-70258.md): Microsoft Windows Media Foundation Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-70237](https://cve.now/CVE-2026-70237.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-70236](https://cve.now/CVE-2026-70236.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-70232](https://cve.now/CVE-2026-70232.md): Windows Kernel Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-70209](https://cve.now/CVE-2026-70209.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-70208](https://cve.now/CVE-2026-70208.md): HTTP.sys Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-70230](https://cve.now/CVE-2026-70230.md): Windows Audio Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-70201](https://cve.now/CVE-2026-70201.md): Windows DHCP Server Denial of Service Vulnerability (CVSS 5.5, Microsoft Windows Server)
- [CVE-2026-70211](https://cve.now/CVE-2026-70211.md): Win32k Information Disclosure Vulnerability (CVSS 5.5, Microsoft Office 365 for Mac · Microsoft Office for Andr… +2)
- [CVE-2026-70199](https://cve.now/CVE-2026-70199.md): Windows Kernel Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-70157](https://cve.now/CVE-2026-70157.md): Windows System Information Console Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-70207](https://cve.now/CVE-2026-70207.md): Network Policy Server (NPS) Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-70144](https://cve.now/CVE-2026-70144.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-70075](https://cve.now/CVE-2026-70075.md): Windows Virtualization-Based Security (VBS) Enclave Security Feature Bypass Vulnerability (CVSS 4.4, Microsoft Windows)
- [CVE-2026-70072](https://cve.now/CVE-2026-70072.md): Windows Netlogon Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-70074](https://cve.now/CVE-2026-70074.md): Windows DNS Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-70071](https://cve.now/CVE-2026-70071.md): Role: DNS Server Tampering Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-70069](https://cve.now/CVE-2026-70069.md): Windows DHCP Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-70067](https://cve.now/CVE-2026-70067.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-70066](https://cve.now/CVE-2026-70066.md): Windows DHCP Server Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-70055](https://cve.now/CVE-2026-70055.md): Windows Cryptographic Services Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-70051](https://cve.now/CVE-2026-70051.md): Windows SmartScreen Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70006](https://cve.now/CVE-2026-70006.md): Remote Desktop Client Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-70004](https://cve.now/CVE-2026-70004.md): Remote Desktop Client Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-70012](https://cve.now/CVE-2026-70012.md): Remote Desktop Client Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-69999](https://cve.now/CVE-2026-69999.md): Windows Update Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-69998](https://cve.now/CVE-2026-69998.md): Remote Desktop Client Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-69992](https://cve.now/CVE-2026-69992.md): Remote Desktop Services Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-69994](https://cve.now/CVE-2026-69994.md): Remote Desktop Client Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-69991](https://cve.now/CVE-2026-69991.md): Remote Desktop Client Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-69996](https://cve.now/CVE-2026-69996.md): Remote Desktop Client Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-69997](https://cve.now/CVE-2026-69997.md): Remote Desktop Client Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-69995](https://cve.now/CVE-2026-69995.md): Remote Desktop Client Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-69987](https://cve.now/CVE-2026-69987.md): Remote Desktop Client Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-69988](https://cve.now/CVE-2026-69988.md): Remote Desktop Client Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-69986](https://cve.now/CVE-2026-69986.md): Remote Desktop Client Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-69985](https://cve.now/CVE-2026-69985.md): Windows libarchive Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-69984](https://cve.now/CVE-2026-69984.md): Remote Desktop Client Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-69880](https://cve.now/CVE-2026-69880.md): Desktop Window Manager Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-69856](https://cve.now/CVE-2026-69856.md): Windows Storage Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-69931](https://cve.now/CVE-2026-69931.md): Windows Storage Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-62687](https://cve.now/CVE-2026-62687.md): Windows Backup Engine Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-62879](https://cve.now/CVE-2026-62879.md): Windows SmartScreen Tampering Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-59116](https://cve.now/CVE-2026-59116.md): Windows Remote Desktop Security Feature Bypass Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2026-97794](https://cve.now/CVE-2026-97794.md): Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-97789](https://cve.now/CVE-2026-97789.md): Remote Desktop Client Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-96096](https://cve.now/CVE-2026-96096.md): Windows Media Player Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-97783](https://cve.now/CVE-2026-97783.md): Microsoft Office SharePoint Spoofing Vulnerability (CVSS 8.1, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2026-97782](https://cve.now/CVE-2026-97782.md): Microsoft Office SharePoint Tampering Vulnerability (CVSS 6.8, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-97774](https://cve.now/CVE-2026-97774.md): Microsoft Office Click-To-Run Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft 365 Apps for Enterprise)
- [CVE-2026-97759](https://cve.now/CVE-2026-97759.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-97778](https://cve.now/CVE-2026-97778.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-97739](https://cve.now/CVE-2026-97739.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-97765](https://cve.now/CVE-2026-97765.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-97755](https://cve.now/CVE-2026-97755.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +3)
- [CVE-2026-97771](https://cve.now/CVE-2026-97771.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-97770](https://cve.now/CVE-2026-97770.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-97767](https://cve.now/CVE-2026-97767.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-97780](https://cve.now/CVE-2026-97780.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-97747](https://cve.now/CVE-2026-97747.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-97761](https://cve.now/CVE-2026-97761.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-97754](https://cve.now/CVE-2026-97754.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-97758](https://cve.now/CVE-2026-97758.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-97752](https://cve.now/CVE-2026-97752.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-97776](https://cve.now/CVE-2026-97776.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-97751](https://cve.now/CVE-2026-97751.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-97003](https://cve.now/CVE-2026-97003.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-97766](https://cve.now/CVE-2026-97766.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-97740](https://cve.now/CVE-2026-97740.md): Microsoft Office Excel Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-97017](https://cve.now/CVE-2026-97017.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-97753](https://cve.now/CVE-2026-97753.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-97750](https://cve.now/CVE-2026-97750.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-97009](https://cve.now/CVE-2026-97009.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-97014](https://cve.now/CVE-2026-97014.md): Microsoft Office Excel Information Disclosure Vulnerability (CVSS 5.5, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-96997](https://cve.now/CVE-2026-96997.md): Microsoft Office OneNote Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-97744](https://cve.now/CVE-2026-97744.md): Microsoft Office PowerPoint Information Disclosure Vulnerability (CVSS 5.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-97001](https://cve.now/CVE-2026-97001.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-97749](https://cve.now/CVE-2026-97749.md): Microsoft Office Outlook Remote Code Execution Vulnerability (CVSS 9.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-97005](https://cve.now/CVE-2026-97005.md): Microsoft Office PowerPoint Information Disclosure Vulnerability (CVSS 5.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-96996](https://cve.now/CVE-2026-96996.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-96995](https://cve.now/CVE-2026-96995.md): Microsoft Office Word Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-97016](https://cve.now/CVE-2026-97016.md): Microsoft Office Outlook Remote Code Execution Vulnerability (CVSS 9.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-97012](https://cve.now/CVE-2026-97012.md): Microsoft Office Outlook Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-96108](https://cve.now/CVE-2026-96108.md): Desktop Window Manager Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-95904](https://cve.now/CVE-2026-95904.md): Windows Event Logging Service Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-69452](https://cve.now/CVE-2026-69452.md): Windows Enterprise App Management Elevation of Privilege Vulnerability (CVSS 7.1, Microsoft Windows)
- [CVE-2026-96943](https://cve.now/CVE-2026-96943.md): Windows Raw Image Extension Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Raw Image Extension)
- [CVE-2026-96935](https://cve.now/CVE-2026-96935.md): Windows NTFS Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-96928](https://cve.now/CVE-2026-96928.md): Windows NTFS Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96921](https://cve.now/CVE-2026-96921.md): Windows Message Queuing Queue Manager Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-96920](https://cve.now/CVE-2026-96920.md): Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96868](https://cve.now/CVE-2026-96868.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96867](https://cve.now/CVE-2026-96867.md): Windows NTFS Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96865](https://cve.now/CVE-2026-96865.md): Windows Secure Kernel Mode Information Disclosure Vulnerability (CVSS 5.6, Microsoft Windows)
- [CVE-2026-96864](https://cve.now/CVE-2026-96864.md): Microsoft Failover Cluster Virtual Driver Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-96861](https://cve.now/CVE-2026-96861.md): Network Device Enrollment Service (NDES) Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-96860](https://cve.now/CVE-2026-96860.md): Windows USB Print Driver Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-96859](https://cve.now/CVE-2026-96859.md): Windows Imaging Component Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-96863](https://cve.now/CVE-2026-96863.md): Windows Storage Port Driver Elevation of Privilege Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2026-96857](https://cve.now/CVE-2026-96857.md): Windows Projected File System Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-96856](https://cve.now/CVE-2026-96856.md): Windows Management Instrumentation Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96855](https://cve.now/CVE-2026-96855.md): Windows Modern Device Management (MDM) Tampering Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-96862](https://cve.now/CVE-2026-96862.md): Windows Spaceport.sys Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96851](https://cve.now/CVE-2026-96851.md): Windows Management Instrumentation Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-96866](https://cve.now/CVE-2026-96866.md): Network Device Enrollment Service (NDES) Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-96848](https://cve.now/CVE-2026-96848.md): Windows Win32 Kernel Subsystem Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-96849](https://cve.now/CVE-2026-96849.md): Windows Kernel-Mode Drivers Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-96318](https://cve.now/CVE-2026-96318.md): Windows Resume Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96319](https://cve.now/CVE-2026-96319.md): Windows USB Print Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96317](https://cve.now/CVE-2026-96317.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96316](https://cve.now/CVE-2026-96316.md): Windows Routing and Remote Access Service (RRAS) Tampering Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-96315](https://cve.now/CVE-2026-96315.md): Windows Overlay Filter Tampering Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-96313](https://cve.now/CVE-2026-96313.md): Windows Push Notifications Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96312](https://cve.now/CVE-2026-96312.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96314](https://cve.now/CVE-2026-96314.md): Windows Audio Service Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-96309](https://cve.now/CVE-2026-96309.md): Windows Subsystem for Linux Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96308](https://cve.now/CVE-2026-96308.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96307](https://cve.now/CVE-2026-96307.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96311](https://cve.now/CVE-2026-96311.md): Windows Network List Service Tampering Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-96306](https://cve.now/CVE-2026-96306.md): Windows Sysmain Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96305](https://cve.now/CVE-2026-96305.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96302](https://cve.now/CVE-2026-96302.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96248](https://cve.now/CVE-2026-96248.md): Windows Host Guardian Service Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-96247](https://cve.now/CVE-2026-96247.md): Windows Kernel-Mode Drivers Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-96246](https://cve.now/CVE-2026-96246.md): Network Policy Server (NPS) Information Disclosure Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-96245](https://cve.now/CVE-2026-96245.md): Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-96244](https://cve.now/CVE-2026-96244.md): Windows Internal System User Profile Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96236](https://cve.now/CVE-2026-96236.md): ASP.NET Core Denial of Service Vulnerability (CVSS 7.5, Microsoft ASP.NET Core · Microsoft Visual Studio)
- [CVE-2026-96224](https://cve.now/CVE-2026-96224.md): .NET Remote Code Execution Vulnerability (CVSS 8.8, Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +4)
- [CVE-2026-96223](https://cve.now/CVE-2026-96223.md): Windows Hyper-V Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96222](https://cve.now/CVE-2026-96222.md): Active Directory Federation Services (AD FS) Spoofing Vulnerability (CVSS 7.4, Microsoft .NET Framework · Microsoft Visual Studio +2)
- [CVE-2026-96220](https://cve.now/CVE-2026-96220.md): Windows Assigned Access Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96219](https://cve.now/CVE-2026-96219.md): Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-96218](https://cve.now/CVE-2026-96218.md): Windows Update Stack Tampering Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-96217](https://cve.now/CVE-2026-96217.md): Windows NTFS Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-96216](https://cve.now/CVE-2026-96216.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96215](https://cve.now/CVE-2026-96215.md): Windows Autopilot Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-96204](https://cve.now/CVE-2026-96204.md): Azure Arc Elevation of Privilege Vulnerability (CVSS 6.5, Microsoft Arc Enabled Servers - Azure Connected Machine Age…)
- [CVE-2026-70049](https://cve.now/CVE-2026-70049.md): Microsoft Configuration Manager Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Configuration Manager)
- [CVE-2026-88208](https://cve.now/CVE-2026-88208.md): Microsoft Office SharePoint Spoofing Vulnerability (CVSS 4.6, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-88209](https://cve.now/CVE-2026-88209.md): Microsoft Office SharePoint Spoofing Vulnerability (CVSS 4.6, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-88204](https://cve.now/CVE-2026-88204.md): Microsoft Office SharePoint Spoofing Vulnerability (CVSS 7.3, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-88202](https://cve.now/CVE-2026-88202.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-88198](https://cve.now/CVE-2026-88198.md): Microsoft Office SharePoint Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-88196](https://cve.now/CVE-2026-88196.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-88197](https://cve.now/CVE-2026-88197.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-88201](https://cve.now/CVE-2026-88201.md): Microsoft Office Excel Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-88178](https://cve.now/CVE-2026-88178.md): Microsoft Office PowerPoint Remote Code Execution Vulnerability (CVSS 9.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-88169](https://cve.now/CVE-2026-88169.md): Microsoft Office Word Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-88167](https://cve.now/CVE-2026-88167.md): Microsoft Office Word Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-88175](https://cve.now/CVE-2026-88175.md): Microsoft Office Excel Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-88155](https://cve.now/CVE-2026-88155.md): Microsoft Office SharePoint Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-88156](https://cve.now/CVE-2026-88156.md): Microsoft Office Outlook Remote Code Execution Vulnerability (CVSS 9.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-88151](https://cve.now/CVE-2026-88151.md): Microsoft Office Excel Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-88145](https://cve.now/CVE-2026-88145.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-88150](https://cve.now/CVE-2026-88150.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-88153](https://cve.now/CVE-2026-88153.md): Microsoft Office Excel Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-85900](https://cve.now/CVE-2026-85900.md): Microsoft Office SharePoint Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-70298](https://cve.now/CVE-2026-70298.md): Microsoft Office SharePoint Information Disclosure Vulnerability (CVSS 6.5, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-83891](https://cve.now/CVE-2026-83891.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-70300](https://cve.now/CVE-2026-70300.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 9.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-70301](https://cve.now/CVE-2026-70301.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-70302](https://cve.now/CVE-2026-70302.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-70291](https://cve.now/CVE-2026-70291.md): Microsoft Office Outlook Remote Code Execution Vulnerability (CVSS 9.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-70276](https://cve.now/CVE-2026-70276.md): Microsoft Office Click-To-Run Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-70287](https://cve.now/CVE-2026-70287.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-70266](https://cve.now/CVE-2026-70266.md): Microsoft Office SharePoint Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-70259](https://cve.now/CVE-2026-70259.md): Microsoft Office SharePoint Information Disclosure Vulnerability (CVSS 6.5, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-70263](https://cve.now/CVE-2026-70263.md): Microsoft Office Word Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-70282](https://cve.now/CVE-2026-70282.md): Microsoft Office Outlook Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-70257](https://cve.now/CVE-2026-70257.md): Microsoft Office Outlook Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-70269](https://cve.now/CVE-2026-70269.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.1, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-70251](https://cve.now/CVE-2026-70251.md): Microsoft Office SharePoint Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-70206](https://cve.now/CVE-2026-70206.md): Microsoft Office Word Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-70267](https://cve.now/CVE-2026-70267.md): Microsoft Office SharePoint Remote Code Execution Vulnerability (CVSS 7.2, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-70256](https://cve.now/CVE-2026-70256.md): Microsoft Office Outlook Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-70220](https://cve.now/CVE-2026-70220.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-70268](https://cve.now/CVE-2026-70268.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-70194](https://cve.now/CVE-2026-70194.md): .NET Framework Security Feature Bypass Vulnerability (CVSS 6.5, Microsoft .NET 11.0 runtime · Microsoft Visual Studio)
- [CVE-2026-70197](https://cve.now/CVE-2026-70197.md): .NET and Visual Studio Remote Code Execution Vulnerability (CVSS 8.1, Microsoft .NET 10.0 installed on Linux · Microsoft .NET… +15)
- [CVE-2026-70188](https://cve.now/CVE-2026-70188.md): ASP.NET Core Security Feature Bypass Vulnerability (CVSS 9.1, Microsoft ASP.NET Core · Microsoft Visual Studio)
- [CVE-2026-70190](https://cve.now/CVE-2026-70190.md): .NET Elevation of Privilege Vulnerability (CVSS 7.3, Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +2)
- [CVE-2026-70183](https://cve.now/CVE-2026-70183.md): ASP.NET Core Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft ASP.NET Core · Microsoft Visual Studio)
- [CVE-2026-70181](https://cve.now/CVE-2026-70181.md): ASP.NET Core Denial of Service Vulnerability (CVSS 7.5, Microsoft ASP.NET Core · Microsoft Visual Studio)
- [CVE-2026-70179](https://cve.now/CVE-2026-70179.md): ASP.NET Core Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft Visual Studio · Microsoft.AspNetCore.Authenticati…)
- [CVE-2026-70196](https://cve.now/CVE-2026-70196.md): ASP.NET Core Denial of Service Vulnerability (CVSS 5.9, Microsoft ASP.NET Core · Microsoft Visual Studio)
- [CVE-2026-70175](https://cve.now/CVE-2026-70175.md): ASP.NET Core Elevation of Privilege Vulnerability (CVSS 8.1, Microsoft ASP.NET Core · Microsoft Visual Studio)
- [CVE-2026-70165](https://cve.now/CVE-2026-70165.md): .NET Elevation of Privilege Vulnerability (CVSS 6.7, Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +2)
- [CVE-2026-70161](https://cve.now/CVE-2026-70161.md): .NET Elevation of Privilege Vulnerability (CVSS 7.3, Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +2)
- [CVE-2026-70159](https://cve.now/CVE-2026-70159.md): ASP.NET Core Denial of Service Vulnerability (CVSS 7.5, Microsoft Visual Studio · Microsoft.AspNetCore.SignalR.C… +1)
- [CVE-2026-70174](https://cve.now/CVE-2026-70174.md): .NET Remote Code Execution Vulnerability (CVSS 8.8, Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +4)
- [CVE-2026-70186](https://cve.now/CVE-2026-70186.md): ASP.NET Core Denial of Service Vulnerability (CVSS 7.5, Microsoft ASP.NET Core · Microsoft Visual Studio)
- [CVE-2026-70149](https://cve.now/CVE-2026-70149.md): Windows Client Side Caching driver (csc.sys) Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-70116](https://cve.now/CVE-2026-70116.md): Windows Resilient File System (ReFS) Security Feature Bypass Vulnerability (CVSS 4.2, Microsoft Windows)
- [CVE-2026-70147](https://cve.now/CVE-2026-70147.md): Microsoft PostScript Printer Driver Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-70109](https://cve.now/CVE-2026-70109.md): Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70092](https://cve.now/CVE-2026-70092.md): Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70110](https://cve.now/CVE-2026-70110.md): Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70068](https://cve.now/CVE-2026-70068.md): Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-70131](https://cve.now/CVE-2026-70131.md): Microsoft Windows Media Foundation Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70044](https://cve.now/CVE-2026-70044.md): Microsoft Windows Media Foundation Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-70102](https://cve.now/CVE-2026-70102.md): Windows Spaceport.sys Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70134](https://cve.now/CVE-2026-70134.md): Windows Event Tracing Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-70137](https://cve.now/CVE-2026-70137.md): Windows Remote Access Connection Manager Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-70045](https://cve.now/CVE-2026-70045.md): Windows Work Folders Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-70013](https://cve.now/CVE-2026-70013.md): Windows iSCSI Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2026-70031](https://cve.now/CVE-2026-70031.md): Windows iSCSI Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-70038](https://cve.now/CVE-2026-70038.md): Windows iSCSI Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2026-70011](https://cve.now/CVE-2026-70011.md): Windows IP Over USB Service Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-70024](https://cve.now/CVE-2026-70024.md): Windows Internet Information Services Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-70008](https://cve.now/CVE-2026-70008.md): Windows IP Over USB Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70113](https://cve.now/CVE-2026-70113.md): Windows Client for NFS Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70005](https://cve.now/CVE-2026-70005.md): Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability (CVSS 5.9, Microsoft Windows Server)
- [CVE-2026-69982](https://cve.now/CVE-2026-69982.md): Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability (CVSS 5.9, Microsoft Windows)
- [CVE-2026-69977](https://cve.now/CVE-2026-69977.md): Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-69955](https://cve.now/CVE-2026-69955.md): Windows Client for NFS Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-69949](https://cve.now/CVE-2026-69949.md): Windows Client for NFS Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-69940](https://cve.now/CVE-2026-69940.md): Windows Client for NFS Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-69923](https://cve.now/CVE-2026-69923.md): Windows AI Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-88146](https://cve.now/CVE-2026-88146.md): Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-88143](https://cve.now/CVE-2026-88143.md): Windows Storage Spaces Controller Elevation of Privilege Vulnerability (CVSS 6.7, Microsoft Windows)
- [CVE-2026-88140](https://cve.now/CVE-2026-88140.md): Windows Key Storage Provider Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-88137](https://cve.now/CVE-2026-88137.md): WebDAV Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-88136](https://cve.now/CVE-2026-88136.md): Web Distributed Authoring and Versioning (WEBDAV) Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-88132](https://cve.now/CVE-2026-88132.md): Azure Key Vault Information Disclosure Vulnerability (CVSS 5.9, Microsoft azure-keyvault-administration · Microsoft azur… +2)
- [CVE-2026-88107](https://cve.now/CVE-2026-88107.md): Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-88106](https://cve.now/CVE-2026-88106.md): Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-88102](https://cve.now/CVE-2026-88102.md): Microsoft Failover Cluster Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows Server)
- [CVE-2026-88100](https://cve.now/CVE-2026-88100.md): Windows Storage Spaces Controller Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-88099](https://cve.now/CVE-2026-88099.md): Windows Failover Cluster Denial of Service Vulnerability (CVSS 5.9, Microsoft Windows Server)
- [CVE-2026-88098](https://cve.now/CVE-2026-88098.md): Windows Security Support Provider Interface Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-88074](https://cve.now/CVE-2026-88074.md): Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-88073](https://cve.now/CVE-2026-88073.md): Windows Graphics Kernel Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-88071](https://cve.now/CVE-2026-88071.md): Windows Hyper-V Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-88070](https://cve.now/CVE-2026-88070.md): Windows BitLocker Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-87716](https://cve.now/CVE-2026-87716.md): Windows Storage Spaces Controller Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-87714](https://cve.now/CVE-2026-87714.md): WebDAV Security Feature Bypass Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-87713](https://cve.now/CVE-2026-87713.md): Windows Bluetooth Port Driver Remote Code Execution (CVSS 7.5, Microsoft Windows)
- [CVE-2026-87712](https://cve.now/CVE-2026-87712.md): Microsoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-87710](https://cve.now/CVE-2026-87710.md): Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-87707](https://cve.now/CVE-2026-87707.md): Windows Fax and Scan Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-87706](https://cve.now/CVE-2026-87706.md): Windows Storage Spaces Controller Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-87697](https://cve.now/CVE-2026-87697.md): .NET Remote Code Execution Vulnerability (CVSS 8.8, Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +3)
- [CVE-2026-87691](https://cve.now/CVE-2026-87691.md): Windows Management Services Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85945](https://cve.now/CVE-2026-85945.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85939](https://cve.now/CVE-2026-85939.md): Windows Kernel Security Feature Bypass Vulnerability (CVSS 5.3, Microsoft Windows)
- [CVE-2026-85936](https://cve.now/CVE-2026-85936.md): Windows Shell Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-85938](https://cve.now/CVE-2026-85938.md): Windows Broadcast DVR User Service Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-85935](https://cve.now/CVE-2026-85935.md): Windows USB Driver Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-85934](https://cve.now/CVE-2026-85934.md): Windows AppX Deployment Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-85933](https://cve.now/CVE-2026-85933.md): Windows Print Spooler Components Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85931](https://cve.now/CVE-2026-85931.md): Windows Distributed File System (DFS) Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-85930](https://cve.now/CVE-2026-85930.md): Windows Image Acquisition Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-85928](https://cve.now/CVE-2026-85928.md): Windows Volume Manager Extension Driver Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-85926](https://cve.now/CVE-2026-85926.md): Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2026-85916](https://cve.now/CVE-2026-85916.md): Azure Active Directory Information Disclosure Vulnerability (CVSS 6.2, Microsoft Windows)
- [CVE-2026-85914](https://cve.now/CVE-2026-85914.md): Windows Embedded Mode Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-85904](https://cve.now/CVE-2026-85904.md): Windows Device Association Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-85867](https://cve.now/CVE-2026-85867.md): Windows Remote Access Connection Manager Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85329](https://cve.now/CVE-2026-85329.md): Microsoft Account Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83888](https://cve.now/CVE-2026-83888.md): Windows CD-ROM Driver Elevation of Privilege Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-83710](https://cve.now/CVE-2026-83710.md): Windows Device Association Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83674](https://cve.now/CVE-2026-83674.md): Active Directory Federation Services (AD FS) Spoofing Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2026-70303](https://cve.now/CVE-2026-70303.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70277](https://cve.now/CVE-2026-70277.md): Windows Fast FAT File System Driver Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-70270](https://cve.now/CVE-2026-70270.md): Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-70262](https://cve.now/CVE-2026-70262.md): WebDAV Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-70244](https://cve.now/CVE-2026-70244.md): Windows DNS Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-70238](https://cve.now/CVE-2026-70238.md): Windows Storage Spaces Controller Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70216](https://cve.now/CVE-2026-70216.md): Windows Mobile Device Management Tampering Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-70213](https://cve.now/CVE-2026-70213.md): Microsoft Power Apps Remote Code Execution Vulnerability (CVSS 8.0, Microsoft Power Apps for Android)
- [CVE-2026-70210](https://cve.now/CVE-2026-70210.md): Windows OLE DB Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-70187](https://cve.now/CVE-2026-70187.md): Windows Remote Desktop Services Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows Server)
- [CVE-2026-70185](https://cve.now/CVE-2026-70185.md): Microsoft PowerShell Security Feature Bypass Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-70172](https://cve.now/CVE-2026-70172.md): Windows NTFS Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70170](https://cve.now/CVE-2026-70170.md): Windows Kernel Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-70167](https://cve.now/CVE-2026-70167.md): Windows Domain Name Service Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows Server)
- [CVE-2026-70164](https://cve.now/CVE-2026-70164.md): Windows TCP/IP Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-70052](https://cve.now/CVE-2026-70052.md): Microsoft PowerShell Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70048](https://cve.now/CVE-2026-70048.md): Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70041](https://cve.now/CVE-2026-70041.md): Windows CD-ROM Driver Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-69934](https://cve.now/CVE-2026-69934.md): Windows Spaceport.sys Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-69916](https://cve.now/CVE-2026-69916.md): Windows NTFS Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-69877](https://cve.now/CVE-2026-69877.md): Azure DevOps Information Disclosure Vulnerability (CVSS 6.5, Microsoft Azure CLI · Microsoft Azure DevOps CLI Extension)
- [CVE-2026-69943](https://cve.now/CVE-2026-69943.md): Microsoft Office SharePoint Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-88165](https://cve.now/CVE-2026-88165.md): Windows Active Directory Domain Services Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-88173](https://cve.now/CVE-2026-88173.md): Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2026-88162](https://cve.now/CVE-2026-88162.md): Windows Encrypting File System (EFS) Tampering Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-88168](https://cve.now/CVE-2026-88168.md): Windows Bind Filter Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-88159](https://cve.now/CVE-2026-88159.md): Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-88160](https://cve.now/CVE-2026-88160.md): Microsoft Windows Search Component Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-88161](https://cve.now/CVE-2026-88161.md): Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-88158](https://cve.now/CVE-2026-88158.md): Microsoft Digest Authentication Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-88157](https://cve.now/CVE-2026-88157.md): Microsoft OpenSSH for Windows Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-88124](https://cve.now/CVE-2026-88124.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-88101](https://cve.now/CVE-2026-88101.md): Microsoft Input Method Editor (IME) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-88096](https://cve.now/CVE-2026-88096.md): Windows DCOM Server Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-88091](https://cve.now/CVE-2026-88091.md): Windows Management Instrumentation Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-87711](https://cve.now/CVE-2026-87711.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-87708](https://cve.now/CVE-2026-87708.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-88080](https://cve.now/CVE-2026-88080.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85927](https://cve.now/CVE-2026-85927.md): Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85920](https://cve.now/CVE-2026-85920.md): Windows BitLocker Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-85918](https://cve.now/CVE-2026-85918.md): Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-85915](https://cve.now/CVE-2026-85915.md): Windows PCI Bus Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85891](https://cve.now/CVE-2026-85891.md): Azure HDInsight Information Disclosure Vulnerability (CVSS 7.5, Microsoft Azure HDInsight)
- [CVE-2026-85881](https://cve.now/CVE-2026-85881.md): Microsoft Office Graphics Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Office for Android)
- [CVE-2026-71347](https://cve.now/CVE-2026-71347.md): Windows Security Center Elevation of Privilege Vulnerability (CVSS 6.4, Microsoft Windows)
- [CVE-2026-85871](https://cve.now/CVE-2026-85871.md): Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85869](https://cve.now/CVE-2026-85869.md): Microsoft Windows Search Component Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85870](https://cve.now/CVE-2026-85870.md): Windows Common Log File System Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-85868](https://cve.now/CVE-2026-85868.md): Windows Common Log File System Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-85865](https://cve.now/CVE-2026-85865.md): Windows DHCP Server Security Feature Bypass Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-85864](https://cve.now/CVE-2026-85864.md): Python Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85863](https://cve.now/CVE-2026-85863.md): Clipboard User Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85861](https://cve.now/CVE-2026-85861.md): Clipboard User Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85859](https://cve.now/CVE-2026-85859.md): Windows Message Queuing Queue Manager Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-85858](https://cve.now/CVE-2026-85858.md): Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85860](https://cve.now/CVE-2026-85860.md): Windows Message Queuing Queue Manager Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85857](https://cve.now/CVE-2026-85857.md): Windows Kernel-Mode Drivers Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-85856](https://cve.now/CVE-2026-85856.md): Internet Connection Sharing (ICS) Remote Code Execution Vulnerability (CVSS 7.1, Microsoft Windows)
- [CVE-2026-85855](https://cve.now/CVE-2026-85855.md): Windows DWM Core Library Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-85854](https://cve.now/CVE-2026-85854.md): Windows DWM Core Library Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-85853](https://cve.now/CVE-2026-85853.md): Windows DWM Core Library Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-85852](https://cve.now/CVE-2026-85852.md): Windows Management Instrumentation Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-85851](https://cve.now/CVE-2026-85851.md): Windows SmartScreen Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85850](https://cve.now/CVE-2026-85850.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85849](https://cve.now/CVE-2026-85849.md): Windows AppX Deployment Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85848](https://cve.now/CVE-2026-85848.md): Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85847](https://cve.now/CVE-2026-85847.md): Windows Print Spooler Components Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-85846](https://cve.now/CVE-2026-85846.md): Web Account Manager Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-85843](https://cve.now/CVE-2026-85843.md): Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85842](https://cve.now/CVE-2026-85842.md): Windows Image Acquisition Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85840](https://cve.now/CVE-2026-85840.md): Windows Event Viewer Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-85837](https://cve.now/CVE-2026-85837.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85836](https://cve.now/CVE-2026-85836.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85835](https://cve.now/CVE-2026-85835.md): Servicing Stack Updates Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-85834](https://cve.now/CVE-2026-85834.md): Windows TCP/IP Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-85833](https://cve.now/CVE-2026-85833.md): Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85832](https://cve.now/CVE-2026-85832.md): Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85831](https://cve.now/CVE-2026-85831.md): Windows Biometric Service Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-85830](https://cve.now/CVE-2026-85830.md): Windows Installer Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-85829](https://cve.now/CVE-2026-85829.md): Windows Wired AutoConfig Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85828](https://cve.now/CVE-2026-85828.md): WebDAV Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-85827](https://cve.now/CVE-2026-85827.md): WebDAV Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-85826](https://cve.now/CVE-2026-85826.md): Windows Fast FAT Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-85824](https://cve.now/CVE-2026-85824.md): Windows Composite Image File System Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-85823](https://cve.now/CVE-2026-85823.md): Windows Composite Image File System Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-85825](https://cve.now/CVE-2026-85825.md): Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-85822](https://cve.now/CVE-2026-85822.md): Windows exFAT File System Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85821](https://cve.now/CVE-2026-85821.md): Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-85820](https://cve.now/CVE-2026-85820.md): Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85818](https://cve.now/CVE-2026-85818.md): Windows Schannel Spoofing Vulnerability (CVSS 9.0, Microsoft Windows)
- [CVE-2026-85817](https://cve.now/CVE-2026-85817.md): Microsoft PowerShell Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-85816](https://cve.now/CVE-2026-85816.md): Windows Wi-Fi Driver Information Disclosure Vulnerability (CVSS 5.7, Microsoft Windows)
- [CVE-2026-85815](https://cve.now/CVE-2026-85815.md): Windows Device Association Service Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-85814](https://cve.now/CVE-2026-85814.md): Microsoft Windows Media Foundation Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-85812](https://cve.now/CVE-2026-85812.md): Windows Bind Filter Driver Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-85811](https://cve.now/CVE-2026-85811.md): Network Policy Server (NPS) Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-85810](https://cve.now/CVE-2026-85810.md): Windows Telephony Server Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-85808](https://cve.now/CVE-2026-85808.md): Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-85809](https://cve.now/CVE-2026-85809.md): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-85807](https://cve.now/CVE-2026-85807.md): Windows USB Video Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85806](https://cve.now/CVE-2026-85806.md): Network Policy Server (NPS) Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-85805](https://cve.now/CVE-2026-85805.md): Microsoft PowerShell Security Feature Bypass Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-85804](https://cve.now/CVE-2026-85804.md): Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85803](https://cve.now/CVE-2026-85803.md): Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-85802](https://cve.now/CVE-2026-85802.md): Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-85800](https://cve.now/CVE-2026-85800.md): Windows Error Reporting Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85799](https://cve.now/CVE-2026-85799.md): Network Policy Server (NPS) Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2026-85798](https://cve.now/CVE-2026-85798.md): Windows Distributed File System (DFS) Remote Code Execution Vulnerability (CVSS 7.2, Microsoft Windows)
- [CVE-2026-85797](https://cve.now/CVE-2026-85797.md): Windows GDI Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-85796](https://cve.now/CVE-2026-85796.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85795](https://cve.now/CVE-2026-85795.md): Windows Text Services Framework Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85794](https://cve.now/CVE-2026-85794.md): Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-85793](https://cve.now/CVE-2026-85793.md): Windows Sysmain Service Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-85792](https://cve.now/CVE-2026-85792.md): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-85791](https://cve.now/CVE-2026-85791.md): Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-85790](https://cve.now/CVE-2026-85790.md): Microsoft QUIC Information Disclosure Vulnerability (CVSS 5.9, Microsoft Visual Studio · Microsoft.Native.Quic.MsQuic.S… +1)
- [CVE-2026-85377](https://cve.now/CVE-2026-85377.md): Windows CD-ROM Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85376](https://cve.now/CVE-2026-85376.md): Windows Print Spooler Components Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85375](https://cve.now/CVE-2026-85375.md): Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85374](https://cve.now/CVE-2026-85374.md): Windows Installer Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-85373](https://cve.now/CVE-2026-85373.md): Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85371](https://cve.now/CVE-2026-85371.md): Network Policy Server (NPS) Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2026-85372](https://cve.now/CVE-2026-85372.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-85369](https://cve.now/CVE-2026-85369.md): Windows Hyper-V Elevation of Privilege Vulnerability (CVSS 8.2, Microsoft Windows)
- [CVE-2026-85370](https://cve.now/CVE-2026-85370.md): WebDAV Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-85367](https://cve.now/CVE-2026-85367.md): Windows Cash Drawer Protocol Provider Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-85368](https://cve.now/CVE-2026-85368.md): Windows TCP/IP Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85366](https://cve.now/CVE-2026-85366.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85365](https://cve.now/CVE-2026-85365.md): Servicing Stack Updates Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-85364](https://cve.now/CVE-2026-85364.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-85362](https://cve.now/CVE-2026-85362.md): Windows Management Instrumentation Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-85361](https://cve.now/CVE-2026-85361.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-85359](https://cve.now/CVE-2026-85359.md): Windows Performance Monitor Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85358](https://cve.now/CVE-2026-85358.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85357](https://cve.now/CVE-2026-85357.md): Windows Phone Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-85356](https://cve.now/CVE-2026-85356.md): Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85355](https://cve.now/CVE-2026-85355.md): Windows Common Log File System Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-85354](https://cve.now/CVE-2026-85354.md): Windows Error Reporting Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-85352](https://cve.now/CVE-2026-85352.md): Windows Device Association Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-85341](https://cve.now/CVE-2026-85341.md): Windows USB Video Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85339](https://cve.now/CVE-2026-85339.md): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-85343](https://cve.now/CVE-2026-85343.md): Windows Hyper-V Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85337](https://cve.now/CVE-2026-85337.md): Windows Remote Desktop Client Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-85338](https://cve.now/CVE-2026-85338.md): Microsoft Graphics Component Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85353](https://cve.now/CVE-2026-85353.md): Windows Print Spooler Components Information Disclosure Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-85342](https://cve.now/CVE-2026-85342.md): Windows Device Association Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-85334](https://cve.now/CVE-2026-85334.md): Windows Message Queuing Queue Manager Information Disclosure Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-85333](https://cve.now/CVE-2026-85333.md): Windows Performance Monitor Elevation of Privilege Vulnerability (CVSS 6.7, Microsoft Windows)
- [CVE-2026-85332](https://cve.now/CVE-2026-85332.md): Windows Device Association Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85336](https://cve.now/CVE-2026-85336.md): Windows Device Association Service Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-85328](https://cve.now/CVE-2026-85328.md): Windows Projected File System Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-85331](https://cve.now/CVE-2026-85331.md): Windows Device Association Service Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-85327](https://cve.now/CVE-2026-85327.md): Windows Print Spooler Components Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-85324](https://cve.now/CVE-2026-85324.md): Active Directory Federation Services (AD FS) Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-85323](https://cve.now/CVE-2026-85323.md): Network Device Enrollment Service (NDES) Spoofing Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2026-85322](https://cve.now/CVE-2026-85322.md): Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-85321](https://cve.now/CVE-2026-85321.md): Active Directory Federation Services (AD FS) Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows Server 2012 R2 · Microsoft Windows Server)
- [CVE-2026-85319](https://cve.now/CVE-2026-85319.md): Active Directory Federation Services (AD FS) Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-85320](https://cve.now/CVE-2026-85320.md): Windows Print Spooler Components Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-85318](https://cve.now/CVE-2026-85318.md): Servicing Stack Updates Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-84020](https://cve.now/CVE-2026-84020.md): Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-84019](https://cve.now/CVE-2026-84019.md): Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-84018](https://cve.now/CVE-2026-84018.md): Windows Print Spooler Components Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-84017](https://cve.now/CVE-2026-84017.md): Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-84016](https://cve.now/CVE-2026-84016.md): Windows EAPHost Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-84015](https://cve.now/CVE-2026-84015.md): Remote Access Point-to-Point Protocol (PPP) EAP-TLS Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-84014](https://cve.now/CVE-2026-84014.md): Windows Device Association Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-84013](https://cve.now/CVE-2026-84013.md): Windows Telephony Server Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-84011](https://cve.now/CVE-2026-84011.md): Windows SMB Client Security Feature Bypass Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-84012](https://cve.now/CVE-2026-84012.md): Windows Remote Desktop Services Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2026-84007](https://cve.now/CVE-2026-84007.md): Remote Desktop Gateway Service Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows Server)
- [CVE-2026-84009](https://cve.now/CVE-2026-84009.md): Windows Projected File System Tampering Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2026-69886](https://cve.now/CVE-2026-69886.md): Windows Imaging Component Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-83929](https://cve.now/CVE-2026-83929.md): Windows GDI Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-83932](https://cve.now/CVE-2026-83932.md): Windows Group Policy Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83927](https://cve.now/CVE-2026-83927.md): Windows Registry Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83928](https://cve.now/CVE-2026-83928.md): Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-83926](https://cve.now/CVE-2026-83926.md): Windows Hello Security Feature Bypass Vulnerability (CVSS 4.4, Microsoft Windows)
- [CVE-2026-83922](https://cve.now/CVE-2026-83922.md): Windows Direct Composition Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83920](https://cve.now/CVE-2026-83920.md): Windows Search Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83919](https://cve.now/CVE-2026-83919.md): Microsoft Internet Messaging API Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83921](https://cve.now/CVE-2026-83921.md): Windows Search Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83917](https://cve.now/CVE-2026-83917.md): Windows ALPC Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83916](https://cve.now/CVE-2026-83916.md): Windows Error Reporting Remote Code Execution Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83914](https://cve.now/CVE-2026-83914.md): Microsoft XML Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2026-85841](https://cve.now/CVE-2026-85841.md): Windows DHCP Server Remote Code Execution Vulnerability (CVSS 6.6, Microsoft Windows)
- [CVE-2026-83906](https://cve.now/CVE-2026-83906.md): Windows Shell Spoofing Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-83912](https://cve.now/CVE-2026-83912.md): Windows Direct Composition Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83886](https://cve.now/CVE-2026-83886.md): Windows Update Orchestrator Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83871](https://cve.now/CVE-2026-83871.md): Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83911](https://cve.now/CVE-2026-83911.md): Windows Storage Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83769](https://cve.now/CVE-2026-83769.md): Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83741](https://cve.now/CVE-2026-83741.md): Internet Explorer Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83586](https://cve.now/CVE-2026-83586.md): Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83569](https://cve.now/CVE-2026-83569.md): HID Parser Library Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70299](https://cve.now/CVE-2026-70299.md): Windows Bind Filter Driver Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-70286](https://cve.now/CVE-2026-70286.md): Windows Graphics Component Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70275](https://cve.now/CVE-2026-70275.md): Windows CD-ROM File System Driver Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-70248](https://cve.now/CVE-2026-70248.md): Windows Hyper-V Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-70243](https://cve.now/CVE-2026-70243.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-70241](https://cve.now/CVE-2026-70241.md): Windows Kerberos Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83909](https://cve.now/CVE-2026-83909.md): Windows Win32 Kernel Subsystem Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2026-70222](https://cve.now/CVE-2026-70222.md): Windows Shell Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70163](https://cve.now/CVE-2026-70163.md): Microsoft OpenSSH for Windows Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-70151](https://cve.now/CVE-2026-70151.md): Windows Direct Composition Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70128](https://cve.now/CVE-2026-70128.md): HID Parser Library Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-70089](https://cve.now/CVE-2026-70089.md): Windows GDI Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-70086](https://cve.now/CVE-2026-70086.md): Microsoft Windows Search Component Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83896](https://cve.now/CVE-2026-83896.md): Windows Direct Composition Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83893](https://cve.now/CVE-2026-83893.md): Windows Clipboard User Service Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-83892](https://cve.now/CVE-2026-83892.md): Windows Human Interface Device Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-83885](https://cve.now/CVE-2026-83885.md): Windows Virtualization-Based Security (VBS) Enclave Spoofing Vulnerability (CVSS 5.6, Microsoft Windows)
- [CVE-2026-83902](https://cve.now/CVE-2026-83902.md): Windows Direct Composition Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83879](https://cve.now/CVE-2026-83879.md): Windows Overlay Filter Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83867](https://cve.now/CVE-2026-83867.md): Windows Push Notifications Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83868](https://cve.now/CVE-2026-83868.md): Microsoft Bluetooth Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83901](https://cve.now/CVE-2026-83901.md): Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83882](https://cve.now/CVE-2026-83882.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83866](https://cve.now/CVE-2026-83866.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83876](https://cve.now/CVE-2026-83876.md): Windows Shell Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83869](https://cve.now/CVE-2026-83869.md): Windows Domain Name Service Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-83875](https://cve.now/CVE-2026-83875.md): Windows Human Interface Device Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-83872](https://cve.now/CVE-2026-83872.md): Windows TCP/IP Local Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83865](https://cve.now/CVE-2026-83865.md): Windows Internet (wininet.dll) Tampering Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2026-83864](https://cve.now/CVE-2026-83864.md): Windows NTFS Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-83862](https://cve.now/CVE-2026-83862.md): Windows Network Load Balancing Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-83855](https://cve.now/CVE-2026-83855.md): Windows WLAN Service Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-83854](https://cve.now/CVE-2026-83854.md): Windows Notification Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-83853](https://cve.now/CVE-2026-83853.md): Windows Hello Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83852](https://cve.now/CVE-2026-83852.md): Windows Bind Filter Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83851](https://cve.now/CVE-2026-83851.md): Windows Partition Management Driver Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-83848](https://cve.now/CVE-2026-83848.md): Windows COM+ Event System Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83846](https://cve.now/CVE-2026-83846.md): Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83847](https://cve.now/CVE-2026-83847.md): Microsoft Account Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83849](https://cve.now/CVE-2026-83849.md): Windows Hello Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-83844](https://cve.now/CVE-2026-83844.md): Windows Paint Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Paint)
- [CVE-2026-83843](https://cve.now/CVE-2026-83843.md): Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-83842](https://cve.now/CVE-2026-83842.md): Windows TCP/IP Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83838](https://cve.now/CVE-2026-83838.md): Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows)
- [CVE-2026-83839](https://cve.now/CVE-2026-83839.md): Windows Hyper-V Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83834](https://cve.now/CVE-2026-83834.md): Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83836](https://cve.now/CVE-2026-83836.md): Windows Event Tracing Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83833](https://cve.now/CVE-2026-83833.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83832](https://cve.now/CVE-2026-83832.md): Windows Spaceport.sys Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83828](https://cve.now/CVE-2026-83828.md): Windows MIDI Service Module Elevation of Privileges Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83827](https://cve.now/CVE-2026-83827.md): Windows Bluetooth Port Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83826](https://cve.now/CVE-2026-83826.md): Windows Error Reporting Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83796](https://cve.now/CVE-2026-83796.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83798](https://cve.now/CVE-2026-83798.md): Windows Update Stack Spoofing Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-83793](https://cve.now/CVE-2026-83793.md): Windows Update Orchestrator Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83787](https://cve.now/CVE-2026-83787.md): Windows DHCP Server Security Feature Bypass Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-83784](https://cve.now/CVE-2026-83784.md): Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-83782](https://cve.now/CVE-2026-83782.md): Windows Shell Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-83780](https://cve.now/CVE-2026-83780.md): Windows CCFFilter Driver Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-83779](https://cve.now/CVE-2026-83779.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83776](https://cve.now/CVE-2026-83776.md): Windows Bluetooth Driver Elevation of Privilege Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2026-83775](https://cve.now/CVE-2026-83775.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83768](https://cve.now/CVE-2026-83768.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83759](https://cve.now/CVE-2026-83759.md): Windows Encrypting File System (EFS) Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-83758](https://cve.now/CVE-2026-83758.md): Windows Error Reporting Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83760](https://cve.now/CVE-2026-83760.md): Microsoft Bluetooth Driver Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-83761](https://cve.now/CVE-2026-83761.md): Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83754](https://cve.now/CVE-2026-83754.md): Microsoft OpenSSH for Windows Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-83753](https://cve.now/CVE-2026-83753.md): Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83749](https://cve.now/CVE-2026-83749.md): Windows Overlay Filter Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83748](https://cve.now/CVE-2026-83748.md): Windows Error Reporting Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-83740](https://cve.now/CVE-2026-83740.md): Windows Hello Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83738](https://cve.now/CVE-2026-83738.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83733](https://cve.now/CVE-2026-83733.md): Windows Print Spooler Components Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-83727](https://cve.now/CVE-2026-83727.md): Windows Overlay Filter Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83726](https://cve.now/CVE-2026-83726.md): Windows DWM Core Library Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83723](https://cve.now/CVE-2026-83723.md): Windows Event Logging Service Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-83722](https://cve.now/CVE-2026-83722.md): Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83719](https://cve.now/CVE-2026-83719.md): Servicing Stack Updates Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-83715](https://cve.now/CVE-2026-83715.md): Windows Error Reporting Tampering Vulnerability (CVSS 7.1, Microsoft Windows)
- [CVE-2026-83713](https://cve.now/CVE-2026-83713.md): Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-83712](https://cve.now/CVE-2026-83712.md): Windows NTFS Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83708](https://cve.now/CVE-2026-83708.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83707](https://cve.now/CVE-2026-83707.md): Windows Event Tracing Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83706](https://cve.now/CVE-2026-83706.md): Windows NTFS Elevation of Privilege Vulnerability (CVSS 6.7, Microsoft Windows)
- [CVE-2026-83705](https://cve.now/CVE-2026-83705.md): HTTP.sys Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-83704](https://cve.now/CVE-2026-83704.md): Microsoft Windows Search Component Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83700](https://cve.now/CVE-2026-83700.md): Windows Now Playing Session Manager Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83699](https://cve.now/CVE-2026-83699.md): Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83693](https://cve.now/CVE-2026-83693.md): Windows Error Reporting Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-83694](https://cve.now/CVE-2026-83694.md): Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83692](https://cve.now/CVE-2026-83692.md): Windows Bind Filter Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83691](https://cve.now/CVE-2026-83691.md): Windows DHCP Server Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83690](https://cve.now/CVE-2026-83690.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83688](https://cve.now/CVE-2026-83688.md): Remote Desktop Client Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-83687](https://cve.now/CVE-2026-83687.md): Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83681](https://cve.now/CVE-2026-83681.md): Microsoft PowerToys Tampering Vulnerability (CVSS 5.5, Microsoft PowerToys)
- [CVE-2026-83678](https://cve.now/CVE-2026-83678.md): Windows TCP/IP Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83675](https://cve.now/CVE-2026-83675.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83669](https://cve.now/CVE-2026-83669.md): Windows Error Reporting Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83671](https://cve.now/CVE-2026-83671.md): Windows Hyper-V Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-83667](https://cve.now/CVE-2026-83667.md): Windows Active Directory Domain Services Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-83666](https://cve.now/CVE-2026-83666.md): Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83658](https://cve.now/CVE-2026-83658.md): Windows Error Reporting Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-83657](https://cve.now/CVE-2026-83657.md): Windows Modern Device Management (MDM) Tampering Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-83655](https://cve.now/CVE-2026-83655.md): Network Policy Server (NPS) Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-83654](https://cve.now/CVE-2026-83654.md): Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83652](https://cve.now/CVE-2026-83652.md): Windows NTFS Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83650](https://cve.now/CVE-2026-83650.md): Windows Media Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83649](https://cve.now/CVE-2026-83649.md): Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-83648](https://cve.now/CVE-2026-83648.md): Windows Active Directory Domain Services Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-83646](https://cve.now/CVE-2026-83646.md): Active Directory Federation Services (AD FS) Spoofing Vulnerability (CVSS 4.8, Microsoft Windows)
- [CVE-2026-83644](https://cve.now/CVE-2026-83644.md): Windows Audio Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83642](https://cve.now/CVE-2026-83642.md): Windows Domain Name Service Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-83641](https://cve.now/CVE-2026-83641.md): Windows Media Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83635](https://cve.now/CVE-2026-83635.md): Role: DNS Server Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows Server)
- [CVE-2026-83584](https://cve.now/CVE-2026-83584.md): Windows Smart Card Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83583](https://cve.now/CVE-2026-83583.md): Windows Geotag Broker Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83580](https://cve.now/CVE-2026-83580.md): Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83578](https://cve.now/CVE-2026-83578.md): Microsoft PowerShell Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-83575](https://cve.now/CVE-2026-83575.md): Windows Search Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83571](https://cve.now/CVE-2026-83571.md): Windows Audio Service Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-83521](https://cve.now/CVE-2026-83521.md): Windows IKE Extension Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-83518](https://cve.now/CVE-2026-83518.md): RPC Runtime Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83515](https://cve.now/CVE-2026-83515.md): RPC Runtime Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-83516](https://cve.now/CVE-2026-83516.md): Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-83510](https://cve.now/CVE-2026-83510.md): Windows Setup Files Cleanup Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-83499](https://cve.now/CVE-2026-83499.md): Windows Server Update Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-83500](https://cve.now/CVE-2026-83500.md): Windows BitLocker Security Feature Bypass Vulnerability (CVSS 6.1, Microsoft Windows)
- [CVE-2026-83504](https://cve.now/CVE-2026-83504.md): Windows SmartScreen Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2026-81969](https://cve.now/CVE-2026-81969.md): Windows Server Update Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-81964](https://cve.now/CVE-2026-81964.md): Windows Update Orchestrator Service Security Feature Bypass Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-69882](https://cve.now/CVE-2026-69882.md): Windows Update Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-69718](https://cve.now/CVE-2026-69718.md): Windows Update Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-69673](https://cve.now/CVE-2026-69673.md): Windows Update Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-69633](https://cve.now/CVE-2026-69633.md): Windows Update Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-69743](https://cve.now/CVE-2026-69743.md): Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-72969](https://cve.now/CVE-2026-72969.md): Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-69650](https://cve.now/CVE-2026-69650.md): Windows Key Distribution Center Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-69830](https://cve.now/CVE-2026-69830.md): Windows DHCP Server Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2026-69387](https://cve.now/CVE-2026-69387.md): Windows Error Reporting Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-72934](https://cve.now/CVE-2026-72934.md): Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-69354](https://cve.now/CVE-2026-69354.md): Windows Error Reporting Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70580](https://cve.now/CVE-2026-70580.md): Windows Credential Guard Spoofing Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-69651](https://cve.now/CVE-2026-69651.md): .NET Denial of Service Vulnerability (CVSS 7.5, Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +4)
- [CVE-2026-66822](https://cve.now/CVE-2026-66822.md): .NET Information Disclosure Vulnerability (CVSS 5.9, Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +3)
- [CVE-2026-72955](https://cve.now/CVE-2026-72955.md): Windows Application Compatibility Cache Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-69721](https://cve.now/CVE-2026-69721.md): Windows iSCSI Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-69883](https://cve.now/CVE-2026-69883.md): Windows iSCSI Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-69644](https://cve.now/CVE-2026-69644.md): Windows iSCSI Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-69634](https://cve.now/CVE-2026-69634.md): Windows iSCSI Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-69705](https://cve.now/CVE-2026-69705.md): Windows iSCSI Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-69521](https://cve.now/CVE-2026-69521.md): Windows iSCSI Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-68836](https://cve.now/CVE-2026-68836.md): Windows kernel32.dll Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70285](https://cve.now/CVE-2026-70285.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70284](https://cve.now/CVE-2026-70284.md): Win32k Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-70280](https://cve.now/CVE-2026-70280.md): Windows Hello Security Feature Bypass Vulnerability (CVSS 4.4, Microsoft Windows)
- [CVE-2026-70278](https://cve.now/CVE-2026-70278.md): Microsoft Windows Media Foundation Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70274](https://cve.now/CVE-2026-70274.md): Windows Bind Filter Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70273](https://cve.now/CVE-2026-70273.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-70272](https://cve.now/CVE-2026-70272.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-70271](https://cve.now/CVE-2026-70271.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Office for Android · Microsoft Windows)
- [CVE-2026-70252](https://cve.now/CVE-2026-70252.md): Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-70255](https://cve.now/CVE-2026-70255.md): Desktop Window Manager Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70253](https://cve.now/CVE-2026-70253.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-70249](https://cve.now/CVE-2026-70249.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-70234](https://cve.now/CVE-2026-70234.md): Desktop Window Manager Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-70225](https://cve.now/CVE-2026-70225.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70223](https://cve.now/CVE-2026-70223.md): Windows Console Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-70218](https://cve.now/CVE-2026-70218.md): Windows StateRepository API Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70247](https://cve.now/CVE-2026-70247.md): HTTP.sys Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70233](https://cve.now/CVE-2026-70233.md): Windows Common Log File System Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70205](https://cve.now/CVE-2026-70205.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-70195](https://cve.now/CVE-2026-70195.md): Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2026-70245](https://cve.now/CVE-2026-70245.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70168](https://cve.now/CVE-2026-70168.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-70169](https://cve.now/CVE-2026-70169.md): Windows Connected Devices Platform Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-70198](https://cve.now/CVE-2026-70198.md): Windows Push Notifications Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-70156](https://cve.now/CVE-2026-70156.md): Microsoft Windows Search Component Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-70177](https://cve.now/CVE-2026-70177.md): Microsoft Windows Search Component Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70176](https://cve.now/CVE-2026-70176.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-70150](https://cve.now/CVE-2026-70150.md): Microsoft Windows Search Component Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-70142](https://cve.now/CVE-2026-70142.md): Windows Update Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70173](https://cve.now/CVE-2026-70173.md): Microsoft Windows Search Component Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-70141](https://cve.now/CVE-2026-70141.md): Microsoft Windows Search Component Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-70133](https://cve.now/CVE-2026-70133.md): Windows SMB Server Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-70155](https://cve.now/CVE-2026-70155.md): Windows DNS Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-70119](https://cve.now/CVE-2026-70119.md): Windows DNS Remote Code Execution Vulnerability (CVSS 6.5, Microsoft Windows Server)
- [CVE-2026-70138](https://cve.now/CVE-2026-70138.md): Windows OLE Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70136](https://cve.now/CVE-2026-70136.md): Microsoft Windows Search Component Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-70166](https://cve.now/CVE-2026-70166.md): Windows DNS Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-70135](https://cve.now/CVE-2026-70135.md): Windows Remote POS Driver Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-70126](https://cve.now/CVE-2026-70126.md): Windows Bluetooth Port Driver Remote Code Execution (CVSS 7.1, Microsoft Windows)
- [CVE-2026-70118](https://cve.now/CVE-2026-70118.md): Windows Audio Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-70132](https://cve.now/CVE-2026-70132.md): Windows Portable Device File System Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70115](https://cve.now/CVE-2026-70115.md): Microsoft Windows Search Component Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-70140](https://cve.now/CVE-2026-70140.md): Windows Audio Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-70123](https://cve.now/CVE-2026-70123.md): Microsoft Graphics Component Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70127](https://cve.now/CVE-2026-70127.md): Windows Domain Name Service Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2026-70114](https://cve.now/CVE-2026-70114.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70117](https://cve.now/CVE-2026-70117.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70108](https://cve.now/CVE-2026-70108.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70139](https://cve.now/CVE-2026-70139.md): Windows Update Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70121](https://cve.now/CVE-2026-70121.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70106](https://cve.now/CVE-2026-70106.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Office 365 for Mac · Microsoft Windows)
- [CVE-2026-70096](https://cve.now/CVE-2026-70096.md): Windows Rich Text Edit Control Remote Code Execution Vulnerability (CVSS 9.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-70093](https://cve.now/CVE-2026-70093.md): Windows Rich Text Edit Control Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70103](https://cve.now/CVE-2026-70103.md): Windows Error Reporting Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70095](https://cve.now/CVE-2026-70095.md): Windows iSCSI Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-70104](https://cve.now/CVE-2026-70104.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70097](https://cve.now/CVE-2026-70097.md): Windows Virtualization-Based Security (VBS) Enclave Spoofing Vulnerability (CVSS 5.6, Microsoft Windows)
- [CVE-2026-70090](https://cve.now/CVE-2026-70090.md): Windows Netlogon Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-70087](https://cve.now/CVE-2026-70087.md): Role: DNS Server Security Feature Bypass Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-70083](https://cve.now/CVE-2026-70083.md): Role: DNS Server Tampering Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-70085](https://cve.now/CVE-2026-70085.md): Role: DNS Server Tampering Vulnerability (CVSS 5.5, Microsoft Windows Server)
- [CVE-2026-70082](https://cve.now/CVE-2026-70082.md): Windows DNS Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows Server)
- [CVE-2026-70079](https://cve.now/CVE-2026-70079.md): Windows DNS Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-70077](https://cve.now/CVE-2026-70077.md): Windows Kernel Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2026-70076](https://cve.now/CVE-2026-70076.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-70064](https://cve.now/CVE-2026-70064.md): Windows Kerberos Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70062](https://cve.now/CVE-2026-70062.md): Windows libarchive Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2026-70063](https://cve.now/CVE-2026-70063.md): Windows Kernel Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2026-70060](https://cve.now/CVE-2026-70060.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70059](https://cve.now/CVE-2026-70059.md): Windows OLE Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70058](https://cve.now/CVE-2026-70058.md): Windows DHCP Server Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-70057](https://cve.now/CVE-2026-70057.md): Windows Routing and Remote Access Service (RRAS) Security Feature Bypass Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-70056](https://cve.now/CVE-2026-70056.md): Windows Update Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-70033](https://cve.now/CVE-2026-70033.md): Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-70027](https://cve.now/CVE-2026-70027.md): Windows Subsystem for Linux Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70026](https://cve.now/CVE-2026-70026.md): Windows Secure Kernel Mode Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-70025](https://cve.now/CVE-2026-70025.md): Windows Netlogon Denial of Service Vulnerability (CVSS 5.3, Microsoft Windows)
- [CVE-2026-70021](https://cve.now/CVE-2026-70021.md): Windows Direct Composition Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-70017](https://cve.now/CVE-2026-70017.md): Windows Secure Kernel Mode Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-70015](https://cve.now/CVE-2026-70015.md): Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-70014](https://cve.now/CVE-2026-70014.md): Windows Cryptographic Services Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-70010](https://cve.now/CVE-2026-70010.md): Windows NTFS Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-69979](https://cve.now/CVE-2026-69979.md): Windows AppX Deployment Service Security Feature Bypass Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-69978](https://cve.now/CVE-2026-69978.md): Microsoft Windows VMSwitch Denial of Service Vulnerability (CVSS 5.6, Microsoft Windows)
- [CVE-2026-69976](https://cve.now/CVE-2026-69976.md): Remote Desktop Client Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-69974](https://cve.now/CVE-2026-69974.md): Desktop Window Manager Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2026-69973](https://cve.now/CVE-2026-69973.md): Windows libarchive Tampering Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-69971](https://cve.now/CVE-2026-69971.md): Windows Kernel-Mode Drivers Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-69969](https://cve.now/CVE-2026-69969.md): Windows AppX Deployment Service Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2026-69970](https://cve.now/CVE-2026-69970.md): Kernel Streaming Service Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-69968](https://cve.now/CVE-2026-69968.md): Windows libarchive Tampering Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-69964](https://cve.now/CVE-2026-69964.md): Kernel Streaming Service Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-69966](https://cve.now/CVE-2026-69966.md): Kernel Streaming Service Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-69967](https://cve.now/CVE-2026-69967.md): Windows Overlay Filter Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-69963](https://cve.now/CVE-2026-69963.md): Kernel Streaming Service Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-69959](https://cve.now/CVE-2026-69959.md): Windows Overlay Filter Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-69958](https://cve.now/CVE-2026-69958.md): Windows Overlay Filter Remote Code Execution Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2026-69957](https://cve.now/CVE-2026-69957.md): Windows Overlay Filter Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-69954](https://cve.now/CVE-2026-69954.md): Windows Overlay Filter Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-69953](https://cve.now/CVE-2026-69953.md): Windows Overlay Filter Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-69952](https://cve.now/CVE-2026-69952.md): Windows Overlay Filter Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-69947](https://cve.now/CVE-2026-69947.md): Windows Overlay Filter Remote Code Execution Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2026-69950](https://cve.now/CVE-2026-69950.md): Windows Overlay Filter Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-69945](https://cve.now/CVE-2026-69945.md): Windows AppX Deployment Extensions Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-69942](https://cve.now/CVE-2026-69942.md): Windows Overlay Filter Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-69918](https://cve.now/CVE-2026-69918.md): Windows Core Messaging Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-69913](https://cve.now/CVE-2026-69913.md): Windows TCP/IP Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2026-69909](https://cve.now/CVE-2026-69909.md): Microsoft COM for Windows Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-69905](https://cve.now/CVE-2026-69905.md): Windows AppX Deployment Service Tampering Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-69926](https://cve.now/CVE-2026-69926.md): Desktop Window Manager Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-69850](https://cve.now/CVE-2026-69850.md): Windows Certificates Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-69840](https://cve.now/CVE-2026-69840.md): Windows Certificates Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-69914](https://cve.now/CVE-2026-69914.md): Windows AppX Deployment Service Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-69867](https://cve.now/CVE-2026-69867.md): SQLite Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-69795](https://cve.now/CVE-2026-69795.md): Windows Clipboard Server Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-69935](https://cve.now/CVE-2026-69935.md): Windows Storage Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-69766](https://cve.now/CVE-2026-69766.md): Windows Storage Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-69763](https://cve.now/CVE-2026-69763.md): Windows Storage Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-61931](https://cve.now/CVE-2026-61931.md): Windows Perception Simulation Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-69639](https://cve.now/CVE-2026-69639.md): Windows libarchive Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-70566](https://cve.now/CVE-2026-70566.md): Windows Schannel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-69363](https://cve.now/CVE-2026-69363.md): Windows Error Reporting Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows)
- [CVE-2026-72968](https://cve.now/CVE-2026-72968.md): Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-49785](https://cve.now/CVE-2026-49785.md): UEFI Secure Boot Security Feature Bypass Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-108460](https://cve.now/CVE-2026-108460.md): Windows Message Queuing Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2026-69898](https://cve.now/CVE-2026-69898.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-108466](https://cve.now/CVE-2026-108466.md): Windows Kernel Denial of Service Vulnerability (CVSS 5.3, Microsoft Windows)
- [CVE-2026-108465](https://cve.now/CVE-2026-108465.md): Windows Update Delivery Optimization Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-108464](https://cve.now/CVE-2026-108464.md): Software Protection Platform (SPP) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-108462](https://cve.now/CVE-2026-108462.md): Windows Kernel Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-108461](https://cve.now/CVE-2026-108461.md): Windows Broadcast DVR User Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-108399](https://cve.now/CVE-2026-108399.md): Windows Hyper-V Elevation of Privilege Vulnerability (CVSS 7.2, Microsoft Windows)
- [CVE-2026-105733](https://cve.now/CVE-2026-105733.md): Windows Hyper-V Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-105732](https://cve.now/CVE-2026-105732.md): SysInternals Elevation of Privilege Vulnerability (CVSS 7.3, Microsoft Sysinternals Suite)
- [CVE-2026-105731](https://cve.now/CVE-2026-105731.md): Microsoft Office Graphics Component Information Disclosure Vulnerability (CVSS 5.5, Microsoft Office for Android)
- [CVE-2026-70235](https://cve.now/CVE-2026-70235.md): Windows Event Tracing Spoofing Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-105726](https://cve.now/CVE-2026-105726.md): Microsoft Defender Information Disclosure Vulnerability (CVSS 5.5, Microsoft Defender for Endpoint for Windows)
- [CVE-2026-105723](https://cve.now/CVE-2026-105723.md): Windows Distributed File System (DFS) Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-105722](https://cve.now/CVE-2026-105722.md): Windows Broadcast DVR User Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-105719](https://cve.now/CVE-2026-105719.md): Microsoft SharePoint Server Information Disclosure Vulnerability (CVSS 6.5, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-105718](https://cve.now/CVE-2026-105718.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-105717](https://cve.now/CVE-2026-105717.md): Microsoft Office Access Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-108467](https://cve.now/CVE-2026-108467.md): Microsoft PostScript Printer Driver Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-108398](https://cve.now/CVE-2026-108398.md): .NET Framework Security Feature Bypass Vulnerability (CVSS 8.8, Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 ·… +2)
- [CVE-2026-69370](https://cve.now/CVE-2026-69370.md): Visual Studio Code Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Visual Studio Code)
- [CVE-2026-108458](https://cve.now/CVE-2026-108458.md): Remote Desktop Client Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-97800](https://cve.now/CVE-2026-97800.md): Windows Mobile Broadband Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-105720](https://cve.now/CVE-2026-105720.md): Microsoft Office SharePoint Elevation of Privilege Vulnerability (CVSS 4.3, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-105716](https://cve.now/CVE-2026-105716.md): Microsoft Office Access Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-105715](https://cve.now/CVE-2026-105715.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 7.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-105714](https://cve.now/CVE-2026-105714.md): Microsoft Office Access Remote Code Execution Vulnerability (CVSS 7.5, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-105713](https://cve.now/CVE-2026-105713.md): Microsoft Office SharePoint Spoofing Vulnerability (CVSS 5.7, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-94506](https://cve.now/CVE-2026-94506.md): Microsoft Office Access Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-105599](https://cve.now/CVE-2026-105599.md): Microsoft Office PowerPoint Remote Code Execution Vulnerability (CVSS 7.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-105598](https://cve.now/CVE-2026-105598.md): Microsoft Office Access Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-105597](https://cve.now/CVE-2026-105597.md): Microsoft Office Access Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-105596](https://cve.now/CVE-2026-105596.md): Microsoft Office Access Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-105595](https://cve.now/CVE-2026-105595.md): Microsoft Office Access Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-105593](https://cve.now/CVE-2026-105593.md): Microsoft Office Access Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-105592](https://cve.now/CVE-2026-105592.md): Microsoft Office Access Remote Code Execution Vulnerability (CVSS 7.5, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-105591](https://cve.now/CVE-2026-105591.md): Microsoft Office Access Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-96183](https://cve.now/CVE-2026-96183.md): Windows Health and Optimized Experiences Service Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-102867](https://cve.now/CVE-2026-102867.md): Microsoft Office Word Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-102866](https://cve.now/CVE-2026-102866.md): Microsoft Office SharePoint Elevation of Privilege Vulnerability (CVSS 8.1, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-102865](https://cve.now/CVE-2026-102865.md): Microsoft Office SharePoint Information Disclosure Vulnerability (CVSS 6.5, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-102864](https://cve.now/CVE-2026-102864.md): Microsoft Office SharePoint Spoofing Vulnerability (CVSS 4.6, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-102863](https://cve.now/CVE-2026-102863.md): Microsoft Office SharePoint Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-102862](https://cve.now/CVE-2026-102862.md): Microsoft Office SharePoint Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-102861](https://cve.now/CVE-2026-102861.md): Microsoft Office SharePoint Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-102860](https://cve.now/CVE-2026-102860.md): Microsoft Office SharePoint Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-102859](https://cve.now/CVE-2026-102859.md): Microsoft Office SharePoint Spoofing Vulnerability (CVSS 4.6, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-102858](https://cve.now/CVE-2026-102858.md): Microsoft Office OneNote Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Office 365 for Mac · Microsoft Office LTSC for Mac)
- [CVE-2026-102857](https://cve.now/CVE-2026-102857.md): Microsoft Office Visio Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-102856](https://cve.now/CVE-2026-102856.md): Microsoft Office Visio Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-102855](https://cve.now/CVE-2026-102855.md): Microsoft Office Visio Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-70098](https://cve.now/CVE-2026-70098.md): Visual Studio Code Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Visual Studio Code)
- [CVE-2026-102238](https://cve.now/CVE-2026-102238.md): Visual Studio Code Remote Code Execution Vulnerability (CVSS 9.6, Microsoft Visual Studio Code)
- [CVE-2026-102235](https://cve.now/CVE-2026-102235.md): Visual Studio Code Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Visual Studio Code)
- [CVE-2026-102234](https://cve.now/CVE-2026-102234.md): Visual Studio Code Security Feature Bypass Vulnerability (CVSS 7.4, Microsoft Visual Studio Code)
- [CVE-2026-102233](https://cve.now/CVE-2026-102233.md): Visual Studio Code Security Feature Bypass Vulnerability (CVSS 7.8, Microsoft Visual Studio Code)
- [CVE-2026-102232](https://cve.now/CVE-2026-102232.md): Visual Studio Code Security Feature Bypass Vulnerability (CVSS 7.0, Microsoft Visual Studio Code)
- [CVE-2026-102231](https://cve.now/CVE-2026-102231.md): Visual Studio Code Security Feature Bypass Vulnerability (CVSS 7.7, Microsoft Visual Studio Code)
- [CVE-2026-102229](https://cve.now/CVE-2026-102229.md): Visual Studio Code Information Disclosure Vulnerability (CVSS 6.8, Microsoft Visual Studio Code)
- [CVE-2026-102227](https://cve.now/CVE-2026-102227.md): Windows Resilient File System (ReFS) Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-108468](https://cve.now/CVE-2026-108468.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-108457](https://cve.now/CVE-2026-108457.md): Microsoft Windows PDF Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2026-108400](https://cve.now/CVE-2026-108400.md): HEVC Video Extensions Remote Code Execution Vulnerability (CVSS 8.8, Microsoft HEVC Video Extensions)
- [CVE-2026-105728](https://cve.now/CVE-2026-105728.md): Dynamics Business Central Information Disclosure Vulnerability (CVSS 7.5, Microsoft Dynamics NAV)
- [CVE-2026-105727](https://cve.now/CVE-2026-105727.md): Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Dynamics NAV)
- [CVE-2026-105725](https://cve.now/CVE-2026-105725.md): Windows Security App Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows Security App)
- [CVE-2026-103572](https://cve.now/CVE-2026-103572.md): Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Visual Studio)
- [CVE-2026-102850](https://cve.now/CVE-2026-102850.md): Microsoft Office Access Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-102849](https://cve.now/CVE-2026-102849.md): Microsoft Office Access Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-110240](https://cve.now/CVE-2026-110240.md): Lancet through 2.3.9 SSRF Protection Bypass via netutil.IsInternalIP (CVSS 6.3, duke-git lancet)
- [CVE-2026-110239](https://cve.now/CVE-2026-110239.md): Rapyd Admin before 9.20.0 Stored XSS via rich-text Component (CVSS 2.1, zofe rapyd-admin)
- [CVE-2026-110238](https://cve.now/CVE-2026-110238.md): Rapyd Admin 9.0.0 before 9.20.0 Authorization Bypass via UsersModalEditEmbed Component (CVSS 8.7, zofe rapyd-admin)
- [CVE-2026-110237](https://cve.now/CVE-2026-110237.md): Vifm 0.8.1-beta through 0.14.4 Unverified IPC FIFO Ownership Allows Cross-User Command Execution (CVSS 7.0, vifm)
- [CVE-2026-110236](https://cve.now/CVE-2026-110236.md): KDE Dolphin 24.08.0 through 26.08.2 OS Command Injection via Crafted Folder Name (CVSS 7.1, KDE Dolphin)
- [CVE-2026-110235](https://cve.now/CVE-2026-110235.md): MP Manager through 1.1.0 Path Traversal via Archive Extraction sanitizeEntryName Bypass (CVSS 6.7, Abdurazaaq Mohammed MP Manager)
- [CVE-2026-110234](https://cve.now/CVE-2026-110234.md): Elio through 1.13.0 Insecure Temporary File Creation in External Preview Command Capture (CVSS 4.1, elio-fm elio)
- [CVE-2026-110233](https://cve.now/CVE-2026-110233.md): rovr through 0.10.3 OS Command Injection via Unquoted Path to cmd.exe (CVSS 8.4, NSPC911 rovr)
- [CVE-2026-110232](https://cve.now/CVE-2026-110232.md): Fossify File Manager through 1.6.2 Zip Slip Path Traversal via DecompressActivity (CVSS 4.6, Fossify File Manager)
- [CVE-2026-110231](https://cve.now/CVE-2026-110231.md): muCommander through 1.6.2 Path Traversal via Archive Extraction to FTP/SFTP (CVSS 5.6, muCommander)
- [CVE-2026-110230](https://cve.now/CVE-2026-110230.md): XBackBone through 3.8.2 Missing Authorization via Upload Vanity Endpoint (CVSS 5.3, sergix44 XBackBone)
- [CVE-2026-110229](https://cve.now/CVE-2026-110229.md): QloApps through 1.7.0 Missing Hotel Access Restriction in Credit Slips (CVSS 5.3, Webkul QloApps)
- [CVE-2026-110228](https://cve.now/CVE-2026-110228.md): wallabag 2.6.13 through 2.6.14 Stored XSS via Failed HTML Import Upload (CVSS 5.1, wallabag)
- [CVE-2026-110226](https://cve.now/CVE-2026-110226.md): QloApps through 1.7.0 Authorization Bypass via id\_hotel in Room Type Creation (CVSS 5.3, Webkul QloApps)
- [CVE-2026-110225](https://cve.now/CVE-2026-110225.md): Shaarli through 0.16.9 SSRF via Thumbnail Retrieval update-thumbnail Route (CVSS 5.1, Shaarli)
- [CVE-2026-110224](https://cve.now/CVE-2026-110224.md): QloApps through 1.7.0 Reflected XSS via Search Alias Validation Errors (CVSS 5.1, Webkul QloApps)
- [CVE-2026-110223](https://cve.now/CVE-2026-110223.md): Kavita 0.9.0 through 0.9.1.4 SSRF Blocklist Bypass via upload-cbl-file Endpoint (CVSS 2.3, Kareadita Kavita)
- [CVE-2026-110222](https://cve.now/CVE-2026-110222.md): Razorpay IFSC Ruby gem through 2.0.62 SSRF via IFSC lookup (CVSS 6.9, Razorpay IFSC)
- [CVE-2026-110221](https://cve.now/CVE-2026-110221.md): QloApps through 1.7.0 Reflected XSS via Advanced Price Rule Name and Impact Value (CVSS 5.1, Webkul QloApps)
- [CVE-2026-110220](https://cve.now/CVE-2026-110220.md): Kubeflow Model Registry through 0.3.17 SSRF via InferenceService Controller URL Annotation (CVSS 7.1, Kubeflow Model Registry)
- [CVE-2026-110219](https://cve.now/CVE-2026-110219.md): QloApps through 1.7.0 Reflected XSS via Additional Facility Price Field (CVSS 5.1, Webkul QloApps)
- [CVE-2026-110218](https://cve.now/CVE-2026-110218.md): Aureus ERP through 1.6.0 Unpublished Blog Post Disclosure via Direct URL (CVSS 6.3, Webkul Aureus ERP)
- [CVE-2026-110217](https://cve.now/CVE-2026-110217.md): vhr through commit 03abbd3 Information Disclosure of Operator Password Hashes via GET /chat/hrs (CVSS 7.1, lenve vhr)
- [CVE-2026-110216](https://cve.now/CVE-2026-110216.md): youlai-boot through 2.21.1 Missing Authorization in User Status Update Endpoint (CVSS 7.1, youlaitech youlai-boot)
- [CVE-2026-110215](https://cve.now/CVE-2026-110215.md): youlai-boot through 2.21.1 Missing Authorization in Role Menu Assignment Allows Privilege Escalation (CVSS 8.7, youlaitech youlai-boot)
- [CVE-2026-110214](https://cve.now/CVE-2026-110214.md): Snowy 3.6.5 Hard-coded Download Signature Key Allows Unauthenticated File Download (CVSS 6.3, xiaonuobase Snowy)
- [CVE-2026-110213](https://cve.now/CVE-2026-110213.md): ai-fusion-video through 1.2.0 Insecure Direct Object Reference in Generation Task Item Endpoints (CVSS 5.3, Stonewuu ai-fusion-video)
- [CVE-2026-110212](https://cve.now/CVE-2026-110212.md): ai-fusion-video through 1.2.0 Path Traversal in Media Upload subDir Parameter (CVSS 5.3, Stonewuu ai-fusion-video)
- [CVE-2026-110211](https://cve.now/CVE-2026-110211.md): SkillHub through 0.2.22 Missing Authorization in CLI Skill Delete Endpoint (CVSS 7.2, iflytek skillhub)
- [CVE-2026-110210](https://cve.now/CVE-2026-110210.md): Phase Console through 2.77.3 Missing Authorization via secretHistory GraphQL Query (CVSS 6.0, Phase Console)
- [CVE-2026-110209](https://cve.now/CVE-2026-110209.md): ai-fusion-video through 1.2.0 Missing Authorization in Configuration Read Endpoints Exposes Stored Credentials (CVSS 7.1, Stonewuu ai-fusion-video)
- [CVE-2026-110208](https://cve.now/CVE-2026-110208.md): Wukong AICRM through 20260610 Missing Authorization in System Configuration APIs Exposes Stored AI Provider Keys (CVSS 7.1, WuKongOpenSource Wukong AICRM)
- [CVE-2026-110207](https://cve.now/CVE-2026-110207.md): Wukong AICRM through 20260610 Missing Authorization in User and Role Management APIs (CVSS 8.7, WuKongOpenSource Wukong AICRM)
- [CVE-2026-110206](https://cve.now/CVE-2026-110206.md): Roo-Code through 3.54.0 Auto-Approve Bypass via Command Substitution at Command Position (CVSS 7.7, RooCodeInc Roo-Code)
- [CVE-2026-110205](https://cve.now/CVE-2026-110205.md): Roo-Code through 3.54.0 Auto-Approve Bypass via Glob Token Discarding Command Substitution (CVSS 7.7, RooCodeInc Roo-Code)
- [CVE-2026-110204](https://cve.now/CVE-2026-110204.md): Roo-Code through 3.54.0 Auto-Approve Bypass via Funsub Command Substitution (CVSS 7.7, RooCodeInc Roo-Code)
- [CVE-2026-110203](https://cve.now/CVE-2026-110203.md): Roo-Code through 3.54.0 Auto-Approve Bypass via Quote Masking Desynchronization (CVSS 7.7, RooCodeInc Roo-Code)
- [CVE-2026-110202](https://cve.now/CVE-2026-110202.md): Roo-Code through 3.54.0 Auto-Approve Bypass via Redirect Operator Stripping (CVSS 7.7, RooCodeInc Roo-Code)
- [CVE-2026-92088](https://cve.now/CVE-2026-92088.md): Improper handling of undefined values vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Escalation. (CVSS 8.6, upKeeper Solutions upKeeper Instant Privilege Access)
- [CVE-2026-110036](https://cve.now/CVE-2026-110036.md): Device-mapper-persistent-data: device-mapper-persistent-data: denial of service via crafted block indices (CVSS 3.3, Red Hat Enterprise Linux · Red Hat OpenShift Container Plat…)
- [CVE-2026-103937](https://cve.now/CVE-2026-103937.md): Misskey: Denial of service resulting from insufficient cleanup processing during file uploads (CVSS 8.7, misskey-dev misskey)
- [CVE-2026-104817](https://cve.now/CVE-2026-104817.md): Misskey: Lack of rate limiting and size restrictions in RSS fetching API (CVSS 8.7, misskey-dev misskey)
- [CVE-2026-104816](https://cve.now/CVE-2026-104816.md): Misskey: Cross-site scripting in RSS feed item links (CVSS 8.5, misskey-dev misskey)
- [CVE-2026-104340](https://cve.now/CVE-2026-104340.md): Adobe Framemaker | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe FrameMaker)
- [CVE-2026-103856](https://cve.now/CVE-2026-103856.md): Adobe Framemaker | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe FrameMaker)
- [CVE-2026-104343](https://cve.now/CVE-2026-104343.md): Adobe Framemaker | NULL Pointer Dereference (CWE-476) (CVSS 5.5, Adobe FrameMaker)
- [CVE-2026-103966](https://cve.now/CVE-2026-103966.md): Adobe Framemaker | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe FrameMaker)
- [CVE-2026-106625](https://cve.now/CVE-2026-106625.md): Adobe Framemaker | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe FrameMaker)
- [CVE-2026-104341](https://cve.now/CVE-2026-104341.md): Adobe Framemaker | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe FrameMaker)
- [CVE-2026-104342](https://cve.now/CVE-2026-104342.md): Adobe Framemaker | Use After Free (CWE-416) (CVSS 7.8, Adobe FrameMaker)
- [CVE-2026-104344](https://cve.now/CVE-2026-104344.md): Adobe Framemaker | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe FrameMaker)
- [CVE-2026-103967](https://cve.now/CVE-2026-103967.md): Adobe Framemaker | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe FrameMaker)
- [CVE-2026-103857](https://cve.now/CVE-2026-103857.md): Adobe Framemaker | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe FrameMaker)
- [CVE-2026-54086](https://cve.now/CVE-2026-54086.md): SLE API for Java: Uncontrolled Memory Allocation / handled exception leading to Denial of Service (CVSS 5.3, esa sleapi-j)
- [CVE-2026-109429](https://cve.now/CVE-2026-109429.md): Mistral Vibe \< 2.25.4 Bash Permission Bypass via ${var@P} Prompt-Transform (CVSS 8.7, mistralai mistral-vibe)
- [CVE-2026-85747](https://cve.now/CVE-2026-85747.md): Distribution: Client \`manifests.Get()\` does not verify returned content against requested digest (CVSS 6.8, distribution · github.com/docker/distribution +1)
- [CVE-2026-107607](https://cve.now/CVE-2026-107607.md): Missing authentication for critical function in Swann Communications SWIFI-SE2KIC (CVSS 6.9, Swann Communications SWIFI-SE2KIC)
- [CVE-2026-107606](https://cve.now/CVE-2026-107606.md): Missing authentication for critical function in Swann Communications SWIFI-SE2KIC (CVSS 6.9, Swann Communications SWIFI-SE2KIC)
- [CVE-2026-107605](https://cve.now/CVE-2026-107605.md): Missing authentication for critical function in Swann Communications SWIFI-SE2KIC (CVSS 5.9, Swann Communications SWIFI-SE2KIC)
- [CVE-2026-109428](https://cve.now/CVE-2026-109428.md): Mistral Vibe \< 2.25.5 Permission Bypass via Bash Line Continuation (CVSS 8.7, mistralai mistral-vibe)
- [CVE-2026-95631](https://cve.now/CVE-2026-95631.md): Adobe Commerce | Improper Input Validation (CWE-20) (CVSS 8.7, Adobe Commerce · Adobe Magento Open Source)
- [CVE-2026-103849](https://cve.now/CVE-2026-103849.md): Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) (CVSS 10.0, Adobe Commerce · Adobe Magento Open Source)
- [CVE-2026-92910](https://cve.now/CVE-2026-92910.md): Adobe Commerce | Incorrect Authorization (CWE-863) (CVSS 7.2, Adobe Commerce · Adobe Magento Open Source)
- [CVE-2026-91013](https://cve.now/CVE-2026-91013.md): Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 9.3, Adobe Commerce · Adobe Magento Open Source)
- [CVE-2026-92464](https://cve.now/CVE-2026-92464.md): Adobe Commerce | Improper Input Validation (CWE-20) (CVSS 9.1, Adobe Commerce · Adobe Magento Open Source)
- [CVE-2026-95630](https://cve.now/CVE-2026-95630.md): Adobe Commerce | Improper Input Validation (CWE-20) (CVSS 4.3, Adobe Commerce · Adobe Magento Open Source)
- [CVE-2026-92922](https://cve.now/CVE-2026-92922.md): Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 8.1, Adobe Commerce · Adobe Magento Open Source)
- [CVE-2026-92908](https://cve.now/CVE-2026-92908.md): Adobe Commerce | Incorrect Authorization (CWE-863) (CVSS 8.3, Adobe Commerce · Adobe Magento Open Source)
- [CVE-2026-92909](https://cve.now/CVE-2026-92909.md): Adobe Commerce | Incorrect Authorization (CWE-863) (CVSS 9.8, Adobe Commerce · Adobe Magento Open Source)
- [CVE-2026-100133](https://cve.now/CVE-2026-100133.md): Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 9.3, Adobe Commerce · Adobe Magento Open Source)
- [CVE-2026-92911](https://cve.now/CVE-2026-92911.md): Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 8.7, Adobe Commerce · Adobe Magento Open Source)
- [CVE-2026-104937](https://cve.now/CVE-2026-104937.md): CVE-2026-104937 (CVSS 8.1, Shopware)
- [CVE-2026-110249](https://cve.now/CVE-2026-110249.md): Denial-of-service in the Exchange email component (CVSS 8.6, Mozilla Thunderbird)
- [CVE-2026-110247](https://cve.now/CVE-2026-110247.md): Integer overflow in libmime buffer growth could lead to heap corruption (CVSS 8.4, Mozilla Thunderbird)
- [CVE-2026-75120](https://cve.now/CVE-2026-75120.md): Remote Code Execution (RCE) vulnerability identified in the OpenText™ EnCase SAFE Agents (CVSS 9.3, OpenText Endpoint Investigator · OpenText Endpoint Foren… +2)
- [CVE-2026-108385](https://cve.now/CVE-2026-108385.md): dataclasses-avroschema enum symbols can inject statements through generated member names (CVSS 8.8, marcosschroh dataclasses-avroschema)
- [CVE-2026-108384](https://cve.now/CVE-2026-108384.md): dataclasses-avroschema allows code injection through fixed-type aliases supplied as a bare string (CVSS 8.8, marcosschroh dataclasses-avroschema)
- [CVE-2026-108383](https://cve.now/CVE-2026-108383.md): dataclasses-avroschema enum field defaults can inject statements into generated modules (CVSS 8.8, marcosschroh dataclasses-avroschema)
- [CVE-2026-92892](https://cve.now/CVE-2026-92892.md): Potential command execution on the host running JFrog CLI. (CVSS 9.0, jfrog-cli)
- [CVE-2026-108382](https://cve.now/CVE-2026-108382.md): dataclasses-avroschema allows code injection through generated enum-symbol string literals (CVSS 8.8, marcosschroh dataclasses-avroschema)
- [CVE-2026-108381](https://cve.now/CVE-2026-108381.md): dataclasses-avroschema pydantic-class metadata allows code injection in generated annotations (CVSS 8.8, marcosschroh dataclasses-avroschema)
- [CVE-2026-108380](https://cve.now/CVE-2026-108380.md): dataclasses-avroschema field documentation allows code injection in generated Pydantic descriptions (CVSS 8.8, marcosschroh dataclasses-avroschema)
- [CVE-2026-108379](https://cve.now/CVE-2026-108379.md): dataclasses-avroschema fixed namespaces allow code injection in generated annotations (CVSS 8.8, marcosschroh dataclasses-avroschema)
- [CVE-2026-106175](https://cve.now/CVE-2026-106175.md): A Double Free vulnerability \[CWE-415\] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.8, FortiOS 7.4 all versions, FortiOS 7.2 all versi (CVSS 2.1, Fortinet FortiOS · Fortinet FortiSwitch +1)
- [CVE-2026-106172](https://cve.now/CVE-2026-106172.md): A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSan (CVSS 4.9, Fortinet FortiSandbox)
- [CVE-2026-23707](https://cve.now/CVE-2026-23707.md): An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability \[CWE-89\] vulnerability in Fortinet For (CVSS 6.5, Fortinet FortiManager Cloud · Fortinet FortiAnalyzer Clo… +2)
- [CVE-2026-23706](https://cve.now/CVE-2026-23706.md): An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability \[CWE-89\] vulnerability in Fortinet For (CVSS 5.9, Fortinet FortiAnalyzer Cloud · Fortinet FortiAnalyzer +1)
- [CVE-2026-23705](https://cve.now/CVE-2026-23705.md): An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability \[CWE-89\] vulnerability in Fortinet For (CVSS 6.5, Fortinet FortiAnalyzer · Fortinet FortiManager)
- [CVE-2025-46773](https://cve.now/CVE-2025-46773.md): An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability \[CWE-89\] vulnerability in Fortinet For (CVSS 7.9, Fortinet FortiAnalyzer Cloud · Fortinet FortiAnalyzer)
- [CVE-2025-57739](https://cve.now/CVE-2025-57739.md): An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability \[CWE-89\] vulnerability in Fortinet For (CVSS 7.7, Fortinet FortiMail)
- [CVE-2026-106170](https://cve.now/CVE-2026-106170.md): An Uncaught Exception vulnerability \[CWE-248\] vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, (CVSS 4.8, Fortinet FortiSandbox)
- [CVE-2026-106173](https://cve.now/CVE-2026-106173.md): A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacke (CVSS 9.4, Fortinet FortiSIEM)
- [CVE-2026-106176](https://cve.now/CVE-2026-106176.md): A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially (CVSS 3.4, Fortinet FortiSIEM)
- [CVE-2026-106171](https://cve.now/CVE-2026-106171.md): A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiManager 8.0.0, F (CVSS 5.3, Fortinet FortiManager)
- [CVE-2026-105445](https://cve.now/CVE-2026-105445.md): Docker Hub account conversion could reassign an active personal access token to another user (CVSS 9.4, Docker Hub)
- [CVE-2026-108378](https://cve.now/CVE-2026-108378.md): dataclasses-avroschema record documentation can terminate generated class docstrings (CVSS 8.8, marcosschroh dataclasses-avroschema)
- [CVE-2026-104085](https://cve.now/CVE-2026-104085.md): odt2spip \< 4.4.0 OS Command Injection via Document Filename (CVSS 8.7, odt2spip)
- [CVE-2026-108377](https://cve.now/CVE-2026-108377.md): dataclasses-avroschema allows code injection through generated Meta.schema\_name (CVSS 8.8, marcosschroh dataclasses-avroschema)
- [CVE-2026-108376](https://cve.now/CVE-2026-108376.md): dataclasses-avroschema allows code injection through record names in generated default factories (CVSS 8.8, marcosschroh dataclasses-avroschema)
- [CVE-2026-33374](https://cve.now/CVE-2026-33374.md): Unbounded memory allocation in the Prometheus rule conversion API (CVSS 6.5, Grafana Enterprise · Grafana OSS)
- [CVE-2026-15577](https://cve.now/CVE-2026-15577.md): Git Sync connection configuration can be modified with read-only access (CVSS 6.5, Grafana Enterprise · Grafana OSS)
- [CVE-2026-93294](https://cve.now/CVE-2026-93294.md): Azure Monitor data source resource proxy allows calls to arbitrary Azure Resource Manager APIs (CVSS 6.3, Grafana Enterprise · Grafana OSS)
- [CVE-2026-95502](https://cve.now/CVE-2026-95502.md): Git Sync memory exhaustion via a malicious Git server (CVSS 5.3, Grafana Nanogit · Grafana OSS +1)
- [CVE-2026-108375](https://cve.now/CVE-2026-108375.md): dataclasses-avroschema allows code injection through generated field-default literals (CVSS 8.8, marcosschroh dataclasses-avroschema)
- [CVE-2026-109828](https://cve.now/CVE-2026-109828.md): libsndfile WAV Parsing wavlike.c wavlike\_subchunk\_parse uninitialized variable (CVSS 5.3, libsndfile)
- [CVE-2026-88834](https://cve.now/CVE-2026-88834.md): Busybox: busybox: httpd user existence oracle in non-default shadow-disabled builds (CVSS 3.7, Red Hat Hardened Images)
- [CVE-2026-88838](https://cve.now/CVE-2026-88838.md): Busybox: busybox: non-root mount option filter bypass allows clearing fstab security restrictions (CVSS 5.5, Red Hat Hardened Images)
- [CVE-2026-88833](https://cve.now/CVE-2026-88833.md): Busybox: busybox: udhcpc integer underflow in dhcp packet length calculation causes denial of service (CVSS 6.5, Red Hat Hardened Images)
- [CVE-2026-53562](https://cve.now/CVE-2026-53562.md): Local Privilege Escalation (CVSS 8.5, Citrix UniconOS)
- [CVE-2026-110131](https://cve.now/CVE-2026-110131.md): ThriveX-Server through 4.0 Missing Authorization via Article Retrieval Endpoints (CVSS 6.9, LiuYuYang01 ThriveX-Server)
- [CVE-2026-110129](https://cve.now/CVE-2026-110129.md): fuintCatering through commit 122c9e6 IDOR via /clientApi/refund/detail (CVSS 7.1, fushengqian fuintCatering)
- [CVE-2026-110128](https://cve.now/CVE-2026-110128.md): fuint through commit 4c4bc8a Missing Authentication via /clientApi/order/detail (CVSS 8.7, fushengqian fuint)
- [CVE-2026-110127](https://cve.now/CVE-2026-110127.md): waynboot-mall through 2.0.0 IDOR via Mobile Cart Endpoints (CVSS 5.3, wayn111 waynboot-mall)
- [CVE-2026-110126](https://cve.now/CVE-2026-110126.md): waynboot-mall through 2.0.0 IDOR via Mobile Address Endpoints (CVSS 5.3, wayn111 waynboot-mall)
- [CVE-2026-110125](https://cve.now/CVE-2026-110125.md): waynboot-mall through 2.0.0 IDOR via Mobile Order Endpoints (CVSS 5.3, wayn111 waynboot-mall)
- [CVE-2026-110124](https://cve.now/CVE-2026-110124.md): FastBee through 2.1.0 IDOR via DeviceController /iot/device Endpoints (CVSS 8.6, kerwincui FastBee)
- [CVE-2026-110123](https://cve.now/CVE-2026-110123.md): Makunet maku-boot 4.3.0 through 5.0.0 Missing Authorization via Mail and SMS Config Endpoints (CVSS 7.1, makunet maku-boot)
- [CVE-2026-110122](https://cve.now/CVE-2026-110122.md): PickMall lilishop through 4.4 IDOR via Goods Freight Endpoint (CVSS 5.3, PickMall lilishop)
- [CVE-2026-110121](https://cve.now/CVE-2026-110121.md): PickMall lilishop through 4.4 IDOR via Goods Edit Endpoint (CVSS 7.1, PickMall lilishop)
- [CVE-2026-110120](https://cve.now/CVE-2026-110120.md): yshopmall through 2.0.0 IDOR via After-Sales API in StoreAfterSalesController (CVSS 5.3, guchengwuyue yshopmall)
- [CVE-2026-110119](https://cve.now/CVE-2026-110119.md): yshopmall through 2.0.0 IDOR via Member Address API in UserAddressController (CVSS 7.1, guchengwuyue yshopmall)
- [CVE-2026-110118](https://cve.now/CVE-2026-110118.md): WorkFlow-Engine through 9.6.11 Missing Authorization via flowableui buttonOperation Endpoints (CVSS 7.1, risesoft-y9 WorkFlow-Engine)
- [CVE-2026-110117](https://cve.now/CVE-2026-110117.md): SmartAdmin through 3.30.0 Missing Authorization via AdminProtectController (CVSS 7.1, 1024-lab SmartAdmin)
- [CVE-2026-110116](https://cve.now/CVE-2026-110116.md): Digital-Infrastructure 9.6.5 through 9.6.11 Path Traversal via fileManager storeFile (CVSS 8.8, risesoft-y9 Digital-Infrastructure)
- [CVE-2026-110115](https://cve.now/CVE-2026-110115.md): Digital-Infrastructure 9.6.5 through 9.6.11 Path Traversal via fileManager retrieveFileStream (CVSS 8.7, risesoft-y9 Digital-Infrastructure)
- [CVE-2026-110114](https://cve.now/CVE-2026-110114.md): oms-erp through PRE Missing Authentication via skyer-goods es-test Endpoints (CVSS 6.9, FJ-OMS oms-erp)
- [CVE-2026-110113](https://cve.now/CVE-2026-110113.md): PublicCMS through V6.202608.a IDOR via tradeAddress/save Endpoint (CVSS 5.3, Sanluan PublicCMS)
- [CVE-2026-110110](https://cve.now/CVE-2026-110110.md): JetLinks Community through 2.10.0 Missing Authorization via Alarm Enable/Disable Endpoints (CVSS 5.3, JetLinks Community)
- [CVE-2026-110109](https://cve.now/CVE-2026-110109.md): JetLinks Community through 2.10.0 Missing Authorization via Product-Level Transparent Codec Save (CVSS 7.1, JetLinks Community)
- [CVE-2026-110108](https://cve.now/CVE-2026-110108.md): MateCloud through 5.0.8 Missing Authorization via /api/v1/admin/storage API (CVSS 8.6, mateaix MateCloud)
- [CVE-2026-110107](https://cve.now/CVE-2026-110107.md): RuoYi-Cloud-Plus through 6.0.0 IDOR via DELETE /auth/unlock/{socialId} (CVSS 2.3, dromara RuoYi-Cloud-Plus)
- [CVE-2026-110106](https://cve.now/CVE-2026-110106.md): RuoYi-Vue-Plus through 6.0.0 IDOR via DELETE /auth/unlock/{socialId} (CVSS 2.3, dromara RuoYi-Vue-Plus)
- [CVE-2026-110105](https://cve.now/CVE-2026-110105.md): B3log Symphony through 3.6.4 Missing Authorization in Admin Console Routes (CVSS 6.9, b3log Symphony)
- [CVE-2026-110104](https://cve.now/CVE-2026-110104.md): novel through 3.5.0 Unsalted MD5 Password Storage (CVSS 8.2, xxyopen novel)
- [CVE-2026-110103](https://cve.now/CVE-2026-110103.md): bbs-go through 4.4.6 Stored XSS via Image Upload Content-Type (CVSS 5.1, mlogclub bbs-go)
- [CVE-2026-110102](https://cve.now/CVE-2026-110102.md): powerlevel10k through 1.20.0 Download of Code Without Integrity Check in gitstatus Installer (CVSS 7.7, romkatv powerlevel10k)
- [CVE-2026-110101](https://cve.now/CVE-2026-110101.md): Koillection through 1.8.4 Stored XSS via Datum File Attachment Uploads (CVSS 5.1, benjaminjonard Koillection)
- [CVE-2026-110100](https://cve.now/CVE-2026-110100.md): Jorani before 1.0.4 Missing Authorization and SSRF via Contracts::import() (CVSS 5.3, Jorani)
- [CVE-2026-110099](https://cve.now/CVE-2026-110099.md): Jorani before 1.0.4 Missing Authorization in HR Export Actions (CVSS 5.3, Jorani)
- [CVE-2026-110098](https://cve.now/CVE-2026-110098.md): Jorani before 1.0.4 Insecure Direct Object Reference in Leave and Overtime Requests (CVSS 5.3, Jorani)
- [CVE-2026-110097](https://cve.now/CVE-2026-110097.md): Ikaros 1.2.0 through 1.2.5 TOTP Authentication Bypass via Temp Token (CVSS 8.6, ikaros-dev ikaros)
- [CVE-2026-94603](https://cve.now/CVE-2026-94603.md): Podman: The \`podman run\` command can be instructed to disable almost all sandboxing by image annotation (CVSS 10.0, podman-container-tools podman · github.com/containers/po… +5)
- [CVE-2026-55823](https://cve.now/CVE-2026-55823.md): Frappe: Possibility of SQL injection in reportview (CVSS 8.7, frappe)
- [CVE-2026-66057](https://cve.now/CVE-2026-66057.md): Frappe: Open Redirect via Unsanitized OAuth State Param. (CVSS 5.1, frappe)
- [CVE-2026-109827](https://cve.now/CVE-2026-109827.md): GPAC AIT Parser ait.c gf\_m2ts\_decode\_ait out-of-bounds write (CVSS 5.3, GPAC)
- [CVE-2026-19940](https://cve.now/CVE-2026-19940.md): Bluetooth HFP AG reuses a connection slot while a delayable work item is still armed, corrupting kernel timeout bookkeeping (CVSS 6.5, zephyrproject zephyr)
- [CVE-2026-19939](https://cve.now/CVE-2026-19939.md): Bluetooth Classic AVDTP: stale timeout work on signalling-channel disconnect leads to kernel timeout-list corruption (CVSS 6.3, zephyrproject zephyr)
- [CVE-2026-104126](https://cve.now/CVE-2026-104126.md): JumpServer: Ansible Automation Template Rendering Allows Unsafe Lookup Plugin Invocation (CVSS 6.0, jumpserver)
- [CVE-2026-54454](https://cve.now/CVE-2026-54454.md): OpenCATS: Authenticated RCE in the Import module (CVSS 9.1, OpenCATS)
- [CVE-2026-103030](https://cve.now/CVE-2026-103030.md): Dio: Cross-origin redirect leaks sensitive request headers in \`dio\_http2\_adapter\` (CVSS 7.5, cfug dio · dio\_http2\_adapter)
- [CVE-2026-109620](https://cve.now/CVE-2026-109620.md): SourceCodester Online Reviewer System index.php prepare sql injection (CVSS 6.9, SourceCodester Online Reviewer System)
- [CVE-2026-61642](https://cve.now/CVE-2026-61642.md): Squid Request Smuggling in HTTP Transfer-Encoding (CVSS 7.7, squid-cache squid)
- [CVE-2026-104250](https://cve.now/CVE-2026-104250.md): unstructured: Stored XSS via unescaped HTML generation (CVSS 6.1, Unstructured-IO unstructured · unstructured)
- [CVE-2026-77459](https://cve.now/CVE-2026-77459.md): Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks (CVSS 9.9, argoproj argo-cd · argo-cd +3)
- [CVE-2026-109412](https://cve.now/CVE-2026-109412.md): An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitive authentication inf (CVSS 9.9, Ivanti Neurons Patch for Intune)
- [CVE-2026-85733](https://cve.now/CVE-2026-85733.md): FrankenPHP: Docker images serve phpinfo() as the default index.php, leaking environment variables (CVSS 5.3, frankenphp)
- [CVE-2026-109898](https://cve.now/CVE-2026-109898.md): WordPress WP Event Solution plugin \<= 4.1.25 - Broken Access Control vulnerability (CVSS 5.3, Arraytics WP Event Solution)
- [CVE-2026-109896](https://cve.now/CVE-2026-109896.md): WordPress Download Monitor integration for WooCommerce plugin \<= 1.0.3 - Broken Access Control vulnerability (CVSS 4.3, WP Chill Download Monitor integration for WooCommerce)
- [CVE-2026-109890](https://cve.now/CVE-2026-109890.md): WordPress Premium Addons for Elementor plugin \<= 4.11.110 - Broken Access Control vulnerability (CVSS 5.3, LeapWorx Premium Addons for Elementor)
- [CVE-2026-82416](https://cve.now/CVE-2026-82416.md): FrankenPHP: Cross-request PHP session ID leak in worker mode when the session extension is a shared module (CVSS 7.7, frankenphp · github.com/dunglas/frankenphp)
- [CVE-2026-55183](https://cve.now/CVE-2026-55183.md): RClone Manager: Unauthenticated RClone Daemon Enables Remote Attack via Malicious Web Page (CVSS 9.6, Zarestia-Dev rclone-manager)
- [CVE-2026-106047](https://cve.now/CVE-2026-106047.md): A Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before version 2026.4 allows a remote authenticated (CVSS 7.7, Ivanti Xtraction)
- [CVE-2026-55562](https://cve.now/CVE-2026-55562.md): Cronicle: Stored XSS in admin Activity Log via account full\_name field (CVSS 9.0, jhuckaby Cronicle)
- [CVE-2026-106043](https://cve.now/CVE-2026-106043.md): A Missing Authentication for Critical Function vulnerability in Ivanti Xtraction before version 2026.4 allows a remote unauthenticated attac (CVSS 7.5, Ivanti Xtraction)
- [CVE-2026-109607](https://cve.now/CVE-2026-109607.md): SourceCodester Online Exam System Login Endpoint loginExe.php sql injection (CVSS 6.9, SourceCodester Online Exam System)
- [CVE-2026-85990](https://cve.now/CVE-2026-85990.md): Leantime: Any Authenticated User Can Self-Escalate to Admin via Unauthorized JSON-RPC Methods (CVSS 8.8, leantime · leantime/leantime)
- [CVE-2026-102989](https://cve.now/CVE-2026-102989.md): TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses (CVSS 9.3, TanStack router · @tanstack react-start +7)
- [CVE-2026-106042](https://cve.now/CVE-2026-106042.md): An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to r (CVSS 9.9, Ivanti Xtraction)
- [CVE-2026-106035](https://cve.now/CVE-2026-106035.md): An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 allows a remote authenticated a (CVSS 5.5, Ivanti Xtraction)
- [CVE-2026-54641](https://cve.now/CVE-2026-54641.md): OpenRemote: Cross-Realm User Information Disclosure in UserResourceImpl (CVSS 7.7, openremote · io.openremote:openremote-manager)
- [CVE-2026-69226](https://cve.now/CVE-2026-69226.md): Portal for ArcGIS has a security vulnerability (CVSS 6.5, Esri Portal for ArcGIS)
- [CVE-2026-10759](https://cve.now/CVE-2026-10759.md): BUG-000171040 Portal for ArcGIS has a security vulnerability (CVSS 5.5, Esri Portal for ArcGIS)
- [CVE-2026-106034](https://cve.now/CVE-2026-106034.md): A Path Traversal vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to create, modify, arbitrary (CVSS 5.0, Ivanti Xtraction)
- [CVE-2026-69227](https://cve.now/CVE-2026-69227.md): BUG-000187331 Portal for ArcGIS has a security vulnerability (CVSS 9.8, Esri Portal for ArcGIS)
- [CVE-2026-54640](https://cve.now/CVE-2026-54640.md): OpenRemote: XXE in KNXProtocol.startAssetImport() allows arbitrary file read via unprotected XMLInputFactory (CVSS 7.6, openremote · io.openremote openremote-manager +1)
- [CVE-2026-109606](https://cve.now/CVE-2026-109606.md): SourceCodester Art Gallery Management System Account Creation admin\_class.php save\_user sql injection (CVSS 6.9, SourceCodester Art Gallery Management System)
- [CVE-2026-54697](https://cve.now/CVE-2026-54697.md): ConnectBot SSH: Excessive allocation and integer overflow in DER private-key parsing (CVSS 6.7, connectbot cbssh · org.connectbot.sshlib:sshlib)
- [CVE-2026-54700](https://cve.now/CVE-2026-54700.md): ConnectBot SSH: Unbounded SSH field lengths can cause excessive memory allocation (CVSS 6.9, connectbot cbssh · org.connectbot.sshlib:sshlib)
- [CVE-2026-102672](https://cve.now/CVE-2026-102672.md): Electron: Local race condition in Squirrel.Mac update installation on macOS (CVSS 6.7, electron)
- [CVE-2026-55695](https://cve.now/CVE-2026-55695.md): FearlessCMS: Remote Code Execution via Unvalidated Update Repository URL in System Updater (CVSS 9.1, fearlessgeekmedia FearlessCMS)
- [CVE-2026-101899](https://cve.now/CVE-2026-101899.md): Axios: CIDR-form NO\_PROXY entries are ignored, causing proxy exclusion bypass for internal IP ranges (CVSS 6.9, axios)
- [CVE-2026-49264](https://cve.now/CVE-2026-49264.md): OAuthLib: Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation (CVSS 6.1, oauthlib)
- [CVE-2026-49265](https://cve.now/CVE-2026-49265.md): OAuthLib: Timing Attack Vulnerability in PKCE code\_verifier Comparison (CVSS 6.8, oauthlib)
- [CVE-2026-102700](https://cve.now/CVE-2026-102700.md): gnttab: cache-flush handling may cause page reference leak (CVSS 4.7, Xen)
- [CVE-2026-102702](https://cve.now/CVE-2026-102702.md): Arm: multiple issues with GNTTABOP\_cache\_flush (CVSS 7.5, Xen)
- [CVE-2026-102699](https://cve.now/CVE-2026-102699.md): Arm: multiple issues with GNTTABOP\_cache\_flush (CVSS 7.5, Xen)
- [CVE-2026-109605](https://cve.now/CVE-2026-109605.md): SourceCodester Simple Cafe Billing System User Management admin\_class.php save\_user improper authorization (CVSS 6.9, SourceCodester Simple Cafe Billing System)
- [CVE-2026-79611](https://cve.now/CVE-2026-79611.md): VMX: VMentry failure with branch tracing and blocked states (CVSS 5.5, Xen)
- [CVE-2026-79610](https://cve.now/CVE-2026-79610.md): grant-table: double version change race (CVSS 8.8, Xen)
- [CVE-2026-103928](https://cve.now/CVE-2026-103928.md): Metabase: Arbitrary File Read/Write via Unsafe H2 Built-in Functions (CVSS 9.3, metabase)
- [CVE-2026-79609](https://cve.now/CVE-2026-79609.md): x86: XPTI may break on huge-memory systems (CVSS 8.8, Xen)
- [CVE-2026-79608](https://cve.now/CVE-2026-79608.md): x86/AMD: ineffectual Zenbleed workaround (CVSS 9.8, Xen)
- [CVE-2026-79607](https://cve.now/CVE-2026-79607.md): Xenstore: Guests can crash xenstored during Live Update (CVSS 5.5, Xen)
- [CVE-2026-110025](https://cve.now/CVE-2026-110025.md): slackero phpwcms Extension Check cnt23.article.inc.php unrestricted upload (CVSS 6.9, slackero phpwcms)
- [CVE-2026-104005](https://cve.now/CVE-2026-104005.md): Incorrect authorization in MongoDB Server router for bulk writes to system namespaces (CVSS 7.1, MongoDB Server)
- [CVE-2026-104004](https://cve.now/CVE-2026-104004.md): Collection validators using collation-accepting expressions can crash MongoDB Server on insert (CVSS 7.1, MongoDB Server)
- [CVE-2026-102981](https://cve.now/CVE-2026-102981.md): Plane: Unauthenticated Workspace Invitation Token Leakage (CVSS 6.5, makeplane plane)
- [CVE-2026-103965](https://cve.now/CVE-2026-103965.md): Fixed values in MongoDB Server $bucket stage may be misread as field references (CVSS 5.3, MongoDB Server)
- [CVE-2026-102982](https://cve.now/CVE-2026-102982.md): Plane: XSS in work item comments (CVSS 8.5, makeplane plane)
- [CVE-2026-104935](https://cve.now/CVE-2026-104935.md): Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. (CVSS 8.6, KEV, Ivanti Connect Secure)
- [CVE-2026-102988](https://cve.now/CVE-2026-102988.md): Plane: ORM Field Injection via Unvalidated \`order\_by\` Parameter (Including Unauthenticated Path) (CVSS 5.3, makeplane plane)
- [CVE-2026-109526](https://cve.now/CVE-2026-109526.md): HBAI-Ltd Toonflow-app exportData Endpoint information disclosure (CVSS 4.8, HBAI-Ltd Toonflow-app)
- [CVE-2026-102734](https://cve.now/CVE-2026-102734.md): asteval sandbox escape: arbitrary native memory read/write via numpy ctypes in default asteval Interpreter (CVSS 5.5, lmfit asteval · asteval)
- [CVE-2026-96299](https://cve.now/CVE-2026-96299.md): Missing Authorization Check on Internal Aggregation Stage in MongoDB Server mongos Leads to Denial of Service (CVSS 7.1, MongoDB Server)
- [CVE-2026-96297](https://cve.now/CVE-2026-96297.md): MongoDB Server may disclose process memory via a crafted \`$\_internalApplyOplogUpdate\` aggregation pipeline (CVSS 6.0, MongoDB Server)
- [CVE-2026-69150](https://cve.now/CVE-2026-69150.md): KeePassXC: Heap use-after-free in KeePass1 (KDB) importer via unpruned m\_entryUuids map (CVSS 4.3, keepassxreboot keepassxc)
- [CVE-2026-102832](https://cve.now/CVE-2026-102832.md): JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clicked (CVSS 4.2, jupyterlab · notebook +1)
- [CVE-2026-55675](https://cve.now/CVE-2026-55675.md): Salty documentation workflow executes fork-controlled Python build hooks with deployment secrets (CVSS 10.0, saltyorg docs)
- [CVE-2026-109525](https://cve.now/CVE-2026-109525.md): girishsaraf Online-Appointment-Booking-System submit2 changebookingstatus.php authorization (CVSS 6.9, girishsaraf Online-Appointment-Booking-System)
- [CVE-2026-55376](https://cve.now/CVE-2026-55376.md): heym Python Tool Sandbox Escape (CVSS 8.8, heymrun heym)
- [CVE-2026-105460](https://cve.now/CVE-2026-105460.md): Bluez: bluez: stack-based out-of-bounds read in btmon via unvalidated num\_keys in return\_link\_keys\_evt() (CVSS 5.5, Red Hat Enterprise Linux)
- [CVE-2026-81507](https://cve.now/CVE-2026-81507.md): ESF-IDF: Bluetooth Classic L2CAP Heap Memory Disclosure Allowing Unauthorized Access to Sensitive Data (CVSS 6.5, espressif esp-idf)
- [CVE-2026-109524](https://cve.now/CVE-2026-109524.md): girishsaraf Online-Appointment-Booking-System Admin Display Pages showdoctor.php authorization (CVSS 6.9, girishsaraf Online-Appointment-Booking-System)
- [CVE-2026-106108](https://cve.now/CVE-2026-106108.md): Quasar Framework: App Vite SSG page output paths can escape the configured distribution directory (CVSS 5.7, quasarframework quasar · @quasar app-vite +1)
- [CVE-2026-103028](https://cve.now/CVE-2026-103028.md): SFTPGo source-side file-pattern filter bypass during copy operations (CVSS 4.3, drakkan sftpgo · github.com/drakkan/sftpgo/v2 +1)
- [CVE-2026-77375](https://cve.now/CVE-2026-77375.md): SFTPGo: Denial of service via malformed SSH channel request (CVSS 6.5, drakkan sftpgo · github.com/drakkan/sftpgo/v2 +1)
- [CVE-2026-102250](https://cve.now/CVE-2026-102250.md): CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could allow modified firmware to be uploaded when an autho (CVSS 8.6, Schneider Electric Sage RTU)
- [CVE-2026-107918](https://cve.now/CVE-2026-107918.md): Insufficient input validation vulnerability in NETGEAR R7300 (CVSS 4.3, NETGEAR R7300DST)
- [CVE-2026-107917](https://cve.now/CVE-2026-107917.md): Insufficient input validation vulnerability in NETGEAR R7300 router (CVSS 4.3, NETGEAR R7300DST)
- [CVE-2026-109523](https://cve.now/CVE-2026-109523.md): girishsaraf Online-Appointment-Booking-System AJAX Endpoint getclinic.php sql injection (CVSS 6.9, girishsaraf Online-Appointment-Booking-System)
- [CVE-2026-104192](https://cve.now/CVE-2026-104192.md): DragonflyDB stream RDB deserialization double-free (CVSS 9.6, dragonflydb dragonfly)
- [CVE-2026-11732](https://cve.now/CVE-2026-11732.md): Insufficient input validation vulnerability exists in website blocking feature of certain NETGEAR RAX/CAX series models (CVSS 6.3, NETGEAR CAX30 · NETGEAR RAX30 +2)
- [CVE-2026-11731](https://cve.now/CVE-2026-11731.md): Authentication Bypass Vulnerability in Certain NETGEAR RAX Series Models (CVSS 6.3, NETGEAR RAX30 · NETGEAR RAX29 +1)
- [CVE-2026-11730](https://cve.now/CVE-2026-11730.md): Insufficient session randomness vulnerability exists in certain NETGEAR EX Series Models (CVSS 2.1, NETGEAR EX3700 · NETGEAR EX6120)
- [CVE-2026-9218](https://cve.now/CVE-2026-9218.md): Insufficient input validation vulnerability in Certain NETGEAR routers allows unauthorized access (CVSS 4.3, NETGEAR CBR40 · NETGEAR R7000 +2)
- [CVE-2026-53711](https://cve.now/CVE-2026-53711.md): MCP ContextForge: Global Prompts stored cross-site scripting compromises the Admin UI (CVSS 5.1, IBM mcp-context-forge)
- [CVE-2026-53709](https://cve.now/CVE-2026-53709.md): MCP Context Forge: Hardcoded default JWT\_SECRET\_KEY shipped in source and .env.example enables pre-authentication platform admin token forgery (CVSS 9.8, IBM mcp-context-forge)
- [CVE-2026-109522](https://cve.now/CVE-2026-109522.md): girishsaraf Online-Appointment-Booking-System Admin CRUD Endpoint deleteclinic.php sql injection (CVSS 6.9, girishsaraf Online-Appointment-Booking-System)
- [CVE-2026-108185](https://cve.now/CVE-2026-108185.md): Improper certificate validation in the My Notes feature of certain Zoom Clients may allow an unauthenticated user to conduct an information (CVSS 7.4, Zoom Communications Zoom Clients)
- [CVE-2026-102342](https://cve.now/CVE-2026-102342.md): ammonia allows stored XSS through unsanitized SVG animate and set attributes (CVSS 5.4, rust-ammonia ammonia · ammonia)
- [CVE-2026-108184](https://cve.now/CVE-2026-108184.md): Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an information disclosure v (CVSS 7.4, Zoom Communications Zoom Clients)
- [CVE-2026-97334](https://cve.now/CVE-2026-97334.md): Network messaging layer decompression resource exhaustion (CVSS 8.7, Commvault Cloud)
- [CVE-2026-97333](https://cve.now/CVE-2026-97333.md): QAPI stack-based buffer overflow (CVSS 7.1, Commvault Cloud)
- [CVE-2026-77100](https://cve.now/CVE-2026-77100.md): MediaAgent Denial of Service (CVSS 8.7, Commvault Cloud)
- [CVE-2026-77099](https://cve.now/CVE-2026-77099.md): CVFS Command Execution (CVSS 9.3, Commvault Cloud · Commvault Grid(HSX) CVFS)
- [CVE-2026-77096](https://cve.now/CVE-2026-77096.md): CVFS Missing Authentication (CVSS 7.7, Commvault Cloud · Commvault Grid(HSX) CVFS)
- [CVE-2026-77095](https://cve.now/CVE-2026-77095.md): CvFWD Null Pointer Dereference (CVSS 7.1, Commvault Cloud)
- [CVE-2026-77094](https://cve.now/CVE-2026-77094.md): CvFWD Out-of-Bounds Write (CVSS 7.1, Commvault Cloud)
- [CVE-2026-77093](https://cve.now/CVE-2026-77093.md): CvFWD Denial of Service (CVSS 7.1, Commvault Cloud)
- [CVE-2026-77090](https://cve.now/CVE-2026-77090.md): CVFS Information Disclosure (CVSS 8.7, Commvault Cloud · Commvault Grid(HSX) CVFS)
- [CVE-2026-18228](https://cve.now/CVE-2026-18228.md): Hyperscale Path Traversal (CVSS 7.1, Commvault Cloud)
- [CVE-2026-53420](https://cve.now/CVE-2026-53420.md): Buffer overflow in a Zoom Phone feature of Zoom Workplace Clients may allow an unauthenticated user to conduct a escalation of privilege via (CVSS 8.0, Zoom Communications Zoom Workplace)
- [CVE-2026-102603](https://cve.now/CVE-2026-102603.md): Gotify: Insufficiently Protected Password Change endpoint (CVSS 5.3, gotify server · github.com/gotify/server/v2 +2)
- [CVE-2026-65200](https://cve.now/CVE-2026-65200.md): Huawei malicious on-bus PLDM or NCSI device can drive out-of-bounds-heap reads via short MCTP responses (CVSS 3.5, Huawei openBMC)
- [CVE-2026-65199](https://cve.now/CVE-2026-65199.md): Huawei openUBMC low-privilege SNMP to administrator privilege escalation (CVSS 5.4, Huawei openBMC)
- [CVE-2026-65198](https://cve.now/CVE-2026-65198.md): Huawei Default SNMPv3 USM key (CVSS 8.6, Huawei openUBMC)
- [CVE-2026-65197](https://cve.now/CVE-2026-65197.md): H3C G3/G5 HDM Firmware Verification Key Replacement (CVSS 3.1, H3C HDM Family-A G5)
- [CVE-2026-107460](https://cve.now/CVE-2026-107460.md): Apache Fesod (Incubating): UrlImageConverter SSRF protection bypass via DNS rebinding (CVSS 9.1, Apache Software Foundation Apache Fesod)
- [CVE-2026-53418](https://cve.now/CVE-2026-53418.md): Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an unauthenticated user (CVSS 8.1, Zoom Communications Zoom Workplace)
- [CVE-2026-109521](https://cve.now/CVE-2026-109521.md): girishsaraf Online-Appointment-Booking-System changebookingstatus.php sql injection (CVSS 6.9, girishsaraf Online-Appointment-Booking-System)
- [CVE-2026-12656](https://cve.now/CVE-2026-12656.md): 1732E ArmorBlock® - Multiple Vulnerabilities (CVSS 8.7, Rockwell Automation 1732E ArmorBlock® I/O)
- [CVE-2026-4869](https://cve.now/CVE-2026-4869.md): Potential Privilege Escalation in InstallShield (CVSS 5.4, Flexera InstallShield)
- [CVE-2026-12655](https://cve.now/CVE-2026-12655.md): 1732E ArmorBlock® - Multiple Vulnerabilities (CVSS 8.8, Rockwell Automation 1732E ArmorBlock® I/O)
- [CVE-2026-0893](https://cve.now/CVE-2026-0893.md): Uncleared Password Keystrokes Vulnerability (CVSS 5.8, AMI AptioV)
- [CVE-2025-58774](https://cve.now/CVE-2025-58774.md): UEFI OOB Write and Buffer Overflow Vulnerabilities (CVSS 8.3, AMI AptioV)
- [CVE-2025-58773](https://cve.now/CVE-2025-58773.md): UEFI OOB Write and Buffer Overflow Vulnerabilities (CVSS 7.1, AMI AptioV)
- [CVE-2025-58772](https://cve.now/CVE-2025-58772.md): UEFI OOB Write and Buffer Overflow Vulnerabilities (CVSS 8.2, AMI AptioV)
- [CVE-2025-58771](https://cve.now/CVE-2025-58771.md): UEFI OOB Write and Buffer Overflow Vulnerabilities (CVSS 7.1, AMI AptioV)
- [CVE-2026-77361](https://cve.now/CVE-2026-77361.md): obsidian-tc symlink path mismatch bypasses read ACL restrictions (CVSS 4.7, The-40-Thieves obsidian-tc · obsidian-tc)
- [CVE-2026-109967](https://cve.now/CVE-2026-109967.md): yt-dlp-web-ui through 4.0.0 NULL Pointer Dereference DoS via Service.Formats (CVSS 8.7, marcopiovanello yt-dlp-web-ui)
- [CVE-2026-109966](https://cve.now/CVE-2026-109966.md): yt-dlp-web-ui through 4.0.0 Argument Injection via Service.Formats JSON-RPC Method (CVSS 6.9, marcopiovanello yt-dlp-web-ui)
- [CVE-2026-109965](https://cve.now/CVE-2026-109965.md): Serena before 2.0.0 Symlink Following in File Tools Allows Access Outside Project Root (CVSS 8.4, oraios serena)
- [CVE-2026-109520](https://cve.now/CVE-2026-109520.md): Colorful iGameCenter Dispatch AMDRyzenMasterDriver.sys MmMapIoSpace privilege defined with unsafe actions (CVSS 9.3, Colorful iGameCenter)
- [CVE-2026-77362](https://cve.now/CVE-2026-77362.md): obsidian-tc bridge tools expose data outside the read ACL (CVSS 4.3, The-40-Thieves obsidian-tc · obsidian-tc)
- [CVE-2026-93907](https://cve.now/CVE-2026-93907.md): IBM WebSphere Application Server is affected by a bypass authentication vulnerability (CVSS 8.1, IBM WebSphere Application Server)
- [CVE-2026-95680](https://cve.now/CVE-2026-95680.md): IBM WebSphere Application Server is affected by an authorization bypass (CVSS 8.0, IBM WebSphere Application Server)
- [CVE-2026-103499](https://cve.now/CVE-2026-103499.md): IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service (CVSS 7.5, IBM WebSphere Application Server - Liberty · IBM WebSphere…)
- [CVE-2026-109519](https://cve.now/CVE-2026-109519.md): YouTransfer Template Rendering template path traversal (CVSS 6.9, YouTransfer)
- [CVE-2026-109964](https://cve.now/CVE-2026-109964.md): ImageMagick before 7.1.2-33 and 6.9.13-58 Heap Buffer Underwrite in PICT Decoder (CVSS 6.3, ImageMagick)
- [CVE-2026-109410](https://cve.now/CVE-2026-109410.md): macrozheng mall mall-admin/mall-portal moneyInfo OmsOrderServiceImpl.updateMoneyInfo calculation (CVSS 4.8, macrozheng mall)
- [CVE-2026-93347](https://cve.now/CVE-2026-93347.md): Wazuh 4.1.1 before 4.14.8 Path Traversal via Cluster get\_list\_file (CVSS 6.9, wazuh-manager)
- [CVE-2026-93346](https://cve.now/CVE-2026-93346.md): Wazuh 4.0.0 before 4.14.8 API Brute-Force Protection Bypass via Race Condition (CVSS 6.9, wazuh-manager)
- [CVE-2026-74047](https://cve.now/CVE-2026-74047.md): Wazuh 4.0.0 before 4.14.8 authd.pass Disclosure via Agent 000 Config Endpoint (CVSS 7.1, wazuh-manager)
- [CVE-2026-74045](https://cve.now/CVE-2026-74045.md): Wazuh 3.12.0 before 4.14.8 Heap Buffer Overflow in wazuh-analysisd FIM Decoder (CVSS 7.1, wazuh-manager)
- [CVE-2026-74043](https://cve.now/CVE-2026-74043.md): Wazuh 4.1.1 before 4.14.8 Path Traversal via Cluster Upload Functions (CVSS 8.5, wazuh-manager)
- [CVE-2026-74041](https://cve.now/CVE-2026-74041.md): Wazuh 4.14.3 \< 4.14.8 / 4.10.4 Remote Command Validation Bypass via Case Mismatch (CVSS 8.6, wazuh-manager)
- [CVE-2026-74040](https://cve.now/CVE-2026-74040.md): Wazuh 3.9.0 before 4.14.8 Arbitrary File Overwrite RCE via process\_files\_from\_worker (CVSS 9.4, wazuh-manager)
- [CVE-2026-74037](https://cve.now/CVE-2026-74037.md): Wazuh 4.0.0 before 4.14.8 Session Invalidation Bypass in check\_token (CVSS 8.6, wazuh-manager)
- [CVE-2026-74036](https://cve.now/CVE-2026-74036.md): Wazuh 4.3.0 before 4.14.8 Remote Code Execution via SCA Command Policies (CVSS 8.6, wazuh-agent)
- [CVE-2026-74035](https://cve.now/CVE-2026-74035.md): Wazuh 4.6.0 before 4.14.8 Authentication Bypass via Empty Password in update\_user (CVSS 8.6, wazuh-manager)
- [CVE-2026-74034](https://cve.now/CVE-2026-74034.md): Wazuh 4.1.0 before 4.14.8 Arbitrary File Read via upgrade\_custom Command (CVSS 8.7, wazuh-manager)
- [CVE-2026-74033](https://cve.now/CVE-2026-74033.md): Wazuh from 4.1.1 before 4.14.8 Path Traversal in CDB List Cluster Handlers (CVSS 8.4, wazuh-manager)
- [CVE-2026-74032](https://cve.now/CVE-2026-74032.md): Wazuh 4.0.0 before 4.14.8 RBAC Authorization Bypass via /security/actions (CVSS 5.3, wazuh-manager)
- [CVE-2026-74031](https://cve.now/CVE-2026-74031.md): Wazuh 4.1.1 before 4.14.8 Path Traversal File Deletion via Rule/Decoder Delete Helpers (CVSS 7.0, wazuh-manager)
- [CVE-2026-74030](https://cve.now/CVE-2026-74030.md): Wazuh 3.9.0 before 4.14.8 Memory Exhaustion via SCA YAML Alias Expansion (CVSS 6.9, wazuh-agent · wazuh-manager)
- [CVE-2026-109963](https://cve.now/CVE-2026-109963.md): Froxlor before 2.3.14 IDOR in Email Template Editor via admin\_templates.php (CVSS 5.3, froxlor)
- [CVE-2026-109962](https://cve.now/CVE-2026-109962.md): Froxlor 0.10.0 before 2.3.14 Missing Authorization in MysqlServer and Cronjobs API (CVSS 5.3, froxlor)
- [CVE-2026-109961](https://cve.now/CVE-2026-109961.md): Froxlor 0.10.0 before 2.3.14 Newline Injection via Ftps.add additional\_members (CVSS 8.4, froxlor)
- [CVE-2026-109960](https://cve.now/CVE-2026-109960.md): Froxlor 2.0.0 before 2.3.14 Stored XSS via Customer Theme Value (CVSS 8.7, froxlor)
- [CVE-2026-109959](https://cve.now/CVE-2026-109959.md): EspoCRM 4.0.0 before 10.0.7 Field-Level Security Bypass via Note Read Endpoint (CVSS 5.3, espocrm)
- [CVE-2026-109958](https://cve.now/CVE-2026-109958.md): EspoCRM 4.0.0 before 10.0.7 Field-Level Access Bypass via Address-Book Search (CVSS 5.3, espocrm)
- [CVE-2026-109957](https://cve.now/CVE-2026-109957.md): EspoCRM before 10.0.7 IDOR via Import attachmentId Parameter (CVSS 5.3, espocrm)
- [CVE-2026-109956](https://cve.now/CVE-2026-109956.md): NLTK through 3.10.3 Path Traversal via WekaClassifier Model Path (CVSS 8.3, nltk)
- [CVE-2026-109955](https://cve.now/CVE-2026-109955.md): Hono 4.12.4 before 4.13.11 Middleware Bypass via serveStatic Double Decoding (CVSS 6.9, honojs hono · hono)
- [CVE-2026-109954](https://cve.now/CVE-2026-109954.md): Parse Server 9.0.0 before 9.10.2-alpha.5 Transactional Batch Request Write Interference (CVSS 8.3, parse-community parse-server · parse)
- [CVE-2026-109953](https://cve.now/CVE-2026-109953.md): FreeRDP 3.0.0 before 3.32.0 Cleartext Credential Disclosure via /restricted-admin (CVSS 6.0, FreeRDP)
- [CVE-2026-109952](https://cve.now/CVE-2026-109952.md): FreeRDP 3.0.0 before 3.32.0 Security Protocol Downgrade via Negotiation Response (CVSS 6.0, FreeRDP)
- [CVE-2026-109951](https://cve.now/CVE-2026-109951.md): FreeRDP 3.17.1 before 3.32.0 Heap Buffer Over-Read via Proxy DRDYNVC Channel Name (CVSS 6.9, FreeRDP)
- [CVE-2026-109950](https://cve.now/CVE-2026-109950.md): FreeRDP 3.0.0 before 3.32.0 Heap Out-of-Bounds Read via RD Gateway Messages (CVSS 5.3, FreeRDP)
- [CVE-2026-109949](https://cve.now/CVE-2026-109949.md): FreeRDP 3.0.0 before 3.32.0 PIN Brute-Force via Virtual Smartcard (CVSS 7.1, FreeRDP)
- [CVE-2026-109948](https://cve.now/CVE-2026-109948.md): FreeRDP 3.0.0 before 3.32.0 Memory Disclosure via SCardTransmit Smartcard Redirection (CVSS 5.3, FreeRDP)
- [CVE-2026-109947](https://cve.now/CVE-2026-109947.md): FreeRDP 3.20.1 before 3.32.0 Unbounded Allocation via drive\_process\_irp\_read (CVSS 7.1, FreeRDP)
- [CVE-2026-109946](https://cve.now/CVE-2026-109946.md): FreeRDP 3.11.0 before 3.32.0 Reachable Assertion via AVC444 Odd Region Width (CVSS 7.1, FreeRDP)
- [CVE-2026-109945](https://cve.now/CVE-2026-109945.md): FreeRDP 3.0.0 before 3.32.0 Smartcard Use-After-Free via Concurrent Disconnect and Transmit (CVSS 6.0, FreeRDP)
- [CVE-2026-109944](https://cve.now/CVE-2026-109944.md): FreeRDP 3.0.0 before 3.32.0 Reachable Assertion via Stale Smartcard Handle (CVSS 7.1, FreeRDP)
- [CVE-2026-109943](https://cve.now/CVE-2026-109943.md): FreeRDP 3.29.0 before 3.32.0 Double Free via Async-Update Polygon Order (CVSS 7.1, FreeRDP)
- [CVE-2026-109942](https://cve.now/CVE-2026-109942.md): FreeRDP 2.3.0 before 3.32.0 NULL Pointer Dereference via RD Gateway Close Channel Packet (CVSS 7.1, FreeRDP)
- [CVE-2026-109941](https://cve.now/CVE-2026-109941.md): FreeRDP 2.3.0 before 3.32.0 Infinite Loop via RD Gateway Chunked Response (CVSS 7.1, FreeRDP)
- [CVE-2026-109940](https://cve.now/CVE-2026-109940.md): FreeRDP 3.0.0-beta1 before 3.32.0 Stack Buffer Overflow via PKCS#11 Key Name (CVSS 5.1, FreeRDP)
- [CVE-2026-109939](https://cve.now/CVE-2026-109939.md): FreeRDP 3.27.1 before 3.32.0 NULL Pointer Dereference via Cache Bitmap V3 Order (CVSS 7.1, FreeRDP)
- [CVE-2026-109938](https://cve.now/CVE-2026-109938.md): FreeRDP 3.11.0 before 3.32.0 Integer Overflow via Mapped Video Geometry Update (CVSS 7.1, FreeRDP)
- [CVE-2026-109680](https://cve.now/CVE-2026-109680.md): FreeRDP 3.18.0 before 3.32.0 Heap Out-of-Bounds Write via ARM Redirected Username (CVSS 6.0, FreeRDP)
- [CVE-2026-109679](https://cve.now/CVE-2026-109679.md): FreeRDP 3.0.0-beta4 before 3.32.0 NULL Pointer Crash via ARM Response (CVSS 6.0, FreeRDP)
- [CVE-2026-109678](https://cve.now/CVE-2026-109678.md): FreeRDP 3.0.0-beta1 before 3.32.0 Reachable Assertion via Emulated SCardStatusA (CVSS 7.1, FreeRDP)
- [CVE-2026-109677](https://cve.now/CVE-2026-109677.md): FreeRDP 2.0.0-beta1 before 3.28.0 Out-of-Bounds Read via LocateCardsByATRA Handler (CVSS 7.1, FreeRDP)
- [CVE-2026-109676](https://cve.now/CVE-2026-109676.md): FreeRDP 3.0.0-beta1 before 3.32.0 Use-After-Free via Smartcard Connect (CVSS 8.7, FreeRDP)
- [CVE-2026-107832](https://cve.now/CVE-2026-107832.md): fastify vulnerable to header validation bypass via case-sensitive propertyNames (CVSS 3.7, fastify)
- [CVE-2026-109409](https://cve.now/CVE-2026-109409.md): HBAI-Ltd Toonflow-app Open Folder Endpoint openFolder.ts child\_process.exec command injection (CVSS 4.8, HBAI-Ltd Toonflow-app)
- [CVE-2026-65180](https://cve.now/CVE-2026-65180.md): NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciou (CVSS 7.8, NVIDIA Megatron-LM)
- [CVE-2026-65104](https://cve.now/CVE-2026-65104.md): NVIDIA Megatron-LM for all platforms contains a vulnerability in inference, where an attacker could cause hash collisions in the cache used (CVSS 7.1, NVIDIA Megatron-LM)
- [CVE-2026-65110](https://cve.now/CVE-2026-65110.md): NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where, an attacker could cause an RCE by convincing a user to load a malic (CVSS 7.8, NVIDIA Megatron-LM)
- [CVE-2026-65131](https://cve.now/CVE-2026-65131.md): NVIDIA NVSentinel for Linux contains a vulnerability in the platform-connectors component, where the gRPC health-event interface, exposed ov (CVSS 6.0, NVIDIA NVSentinel)
- [CVE-2026-65172](https://cve.now/CVE-2026-65172.md): NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnerability in the ETL management API where an unauthenticated re (CVSS 8.6, NVIDIA AIStore framework)
- [CVE-2026-65164](https://cve.now/CVE-2026-65164.md): NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component where a remote attacker may cause (CVSS 8.1, NVIDIA AIStore framework)
- [CVE-2026-65173](https://cve.now/CVE-2026-65173.md): NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint where an unauthenticated remote at (CVSS 9.1, NVIDIA AIStore framework)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-10-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.