CVE-2026-69397 - Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network

CVE-2026-69396 - Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network.

CVE-2026-69395 - Use of externally-controlled format string in Active Directory Certificate Services (AD CS) allows a

CVE-2026-69394 - Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privile

CVE-2026-69393 - Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information ov

CVE-2026-69392 - Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.

CVE-2026-69391 - Stack-based buffer overflow in Windows Broker Infrastructure Service allows an authorized attacker t

CVE-2026-69390 - Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information lo

CVE-2026-69389 - Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to e

CVE-2026-69388 - Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges loca

CVE-2026-69386 - Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to

CVE-2026-69385 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-69384 - Null pointer dereference in Virtual Hard Disk (VHD) Miniport Driver allows an unauthorized attacker

CVE-2026-69383 - External control of file name or path in Windows Shell allows an authorized attacker to elevate priv

CVE-2026-69382 - Use of a broken or risky cryptographic algorithm in Microsoft Exchange Server allows an unauthorized

CVE-2026-69381 - Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose inform

CVE-2026-69380 - Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileg

CVE-2026-69379 - Improper link resolution before file access ('link following') in Windows NTFS allows an authorized

CVE-2026-69378 - Uncontrolled recursion in Microsoft Exchange Server allows an unauthorized attacker to deny service

CVE-2026-69377 - Missing authorization in Windows Modern Device Management (MDM) allows an authorized attacker to ele

CVE-2026-69376 - Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information l

CVE-2026-69375 - Authorization bypass through user-controlled key in Microsoft Exchange Server allows an authorized a

CVE-2026-69374 - Allocation of resources without limits or throttling in Windows SMB Server allows an authorized atta

CVE-2026-69373 - Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate pr

CVE-2026-69372 - Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over

CVE-2026-69371 - Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privil

CVE-2026-69369 - Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.

CVE-2026-69368 - Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privil

CVE-2026-69367 - Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information l

CVE-2026-69366 - Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network.

CVE-2026-69365 - Out-of-bounds read in Microsoft Local Security Authority Server (lsasrv) allows an authorized attack

CVE-2026-69364 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-69362 - Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locall

CVE-2026-69361 - Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to per

CVE-2026-69360 - Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code

CVE-2026-69359 - Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elev

CVE-2026-69358 - Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code

CVE-2026-69357 - Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network.

CVE-2026-69356 - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Ex

CVE-2026-69355 - External control of file name or path in Microsoft Exchange Server allows an authorized attacker to

CVE-2026-69353 - Out-of-bounds read in Windows Text Shaping allows an authorized attacker to disclose information loc

CVE-2026-69352 - Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri

CVE-2026-69351 - Exposure of private personal information to an unauthorized actor in Windows Universal Plug and Play

CVE-2026-69350 - Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privil

CVE-2026-69349 - Use of uninitialized resource in Windows Management Instrumentation allows an authorized attacker to

CVE-2026-69348 - Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges loc

CVE-2026-69347 - Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to execute cod

CVE-2026-69346 - Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elev

CVE-2026-69345 - Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information l

CVE-2026-69344 - Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose inf

CVE-2026-69343 - Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information l

CVE-2026-69342 - Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a net

CVE-2026-69341 - Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges loca

CVE-2026-69340 - Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over

CVE-2026-69339 - Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service M

CVE-2026-69338 - Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges

CVE-2026-69337 - Double free in Windows Registry allows an authorized attacker to elevate privileges over a network.

CVE-2026-69336 - Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privil

CVE-2026-69335 - Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-69334 - Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacke

CVE-2026-69333 - Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-69332 - Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a networ

CVE-2026-69331 - Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate

CVE-2026-69329 - Out-of-bounds read in BranchCache allows an unauthorized attacker to deny service over a network.

CVE-2026-69328 - Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally

CVE-2026-69325 - Heap-based buffer overflow in Microsoft JScript allows an unauthorized attacker to execute code over

CVE-2026-69324 - Access of resource using incompatible type ('type confusion') in Windows Performance Monitor allows

CVE-2026-69323 - Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri

CVE-2026-69322 - Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privilege

CVE-2026-69321 - Missing authentication for critical function in Windows Power Dependency Coordinator allows an autho

CVE-2026-69319 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-69318 - Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose informatio

CVE-2026-69317 - Out-of-bounds read in Remote Desktop Client allows an authorized attacker to disclose information ov

CVE-2026-69316 - Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information loc

CVE-2026-69315 - Exposure of sensitive system information to an unauthorized control sphere in Windows License Manage

CVE-2026-69314 - Use after free in Windows Device Association Broker service allows an authorized attacker to elevate

CVE-2026-69313 - Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privil

CVE-2026-69312 - Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-69311 - Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69310 - Use after free in Windows DNS allows an authorized attacker to elevate privileges locally.

CVE-2026-69309 - Double free in Windows Print Spooler Components allows an authorized attacker to elevate privileges

CVE-2026-69308 - Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information l

CVE-2026-69307 - Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized att

CVE-2026-69305 - Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil

CVE-2026-69304 - Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthori

CVE-2026-69303 - Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose informa

CVE-2026-69301 - Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges ov

CVE-2026-69300 - Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges loc

CVE-2026-69299 - Use after free in Microsoft COM for Windows allows an authorized attacker to elevate privileges loca

CVE-2026-69298 - Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate

CVE-2026-69297 - Storing passwords in a recoverable format in Windows DHCP Server allows an authorized attacker to di

CVE-2026-69296 - Use after free in Windows Device Association Service allows an authorized attacker to elevate privil

CVE-2026-69295 - Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally

CVE-2026-69294 - Generation of error message containing sensitive information in Microsoft COM for Windows allows an

CVE-2026-69293 - Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri

CVE-2026-69292 - Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges lo

CVE-2026-69291 - Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacke

CVE-2026-69290 - Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to el

CVE-2026-69289 - Improper link resolution before file access ('link following') in Windows Setup Files Cleanup allows

CVE-2026-69288 - Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information

CVE-2026-69287 - Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privilege

CVE-2026-69286 - Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to

CVE-2026-69285 - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over

CVE-2026-69284 - Heap-based buffer overflow in Windows DCOM Server allows an authorized attacker to elevate privilege

CVE-2026-69283 - Heap-based buffer overflow in Windows CD-ROM Driver allows an authorized attacker to elevate privile

CVE-2026-69282 - Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code

CVE-2026-69281 - Use after free in Windows License Manager allows an authorized attacker to elevate privileges locall

CVE-2026-69280 - Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges loc

CVE-2026-69279 - Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate pr

CVE-2026-69277 - Stack-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authoriz

CVE-2026-69276 - Integer underflow (wrap or wraparound) in Microsoft UxTheme Library (uxtheme.dll) allows an unauthor

CVE-2026-69275 - Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate

CVE-2026-69274 - Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.

CVE-2026-69273 - Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code

CVE-2026-69272 - Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privil

CVE-2026-69271 - Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privil

CVE-2026-69270 - Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized att

CVE-2026-69269 - Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an authorized attacker to el

CVE-2026-69268 - Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code

CVE-2026-69267 - Insufficient granularity of access control in Windows Connected User Experiences and Telemetry allow

CVE-2026-69266 - Integer overflow or wraparound in Windows DHCP Server allows an unauthorized attacker to execute cod

CVE-2026-69265 - Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-68898 - Out-of-bounds read in Windows iSCSI allows an unauthorized attacker to deny service over a network.

CVE-2026-68897 - Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privil

CVE-2026-68896 - Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to eleva

CVE-2026-68895 - Numeric truncation error in Internet Storage Name Service allows an authorized attacker to disclose

CVE-2026-68894 - Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privi

CVE-2026-68893 - Use after free in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate

CVE-2026-68892 - Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privil

CVE-2026-68891 - Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information l

CVE-2026-68890 - Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privil

CVE-2026-68889 - Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privil

CVE-2026-68888 - Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privil

CVE-2026-68887 - Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to deny

CVE-2026-68886 - Use after free in Windows Network Connection Broker allows an authorized attacker to disclose inform

CVE-2026-68885 - Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privil

CVE-2026-68884 - Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc

CVE-2026-68881 - Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information l

CVE-2026-68880 - Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges ove

CVE-2026-68878 - Stack-based buffer overflow in Windows Fast FAT Driver allows an authorized attacker to elevate priv

CVE-2026-68877 - Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to exe

CVE-2026-68876 - Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized a

CVE-2026-68875 - Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally.

CVE-2026-68874 - Out-of-bounds read in Windows Program Compatibility Assistant Service allows an authorized attacker

CVE-2026-68873 - Insertion of sensitive information into log file in Windows Program Compatibility Assistant Service

CVE-2026-68852 - Use of uninitialized resource in Microsoft Account allows an authorized attacker to disclose informa

CVE-2026-68851 - Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-68850 - Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges

CVE-2026-68849 - Out-of-bounds read in Windows Bluetooth Port Driver allows an authorized attacker to disclose inform

CVE-2026-68848 - Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elev

CVE-2026-68847 - Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to

CVE-2026-68846 - Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network.

CVE-2026-68845 - Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized a

CVE-2026-68844 - Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to exe

CVE-2026-68843 - Use after free in Microsoft Office Word allows an authorized attacker to disclose information locall

CVE-2026-68842 - Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service M

CVE-2026-68841 - Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges local

CVE-2026-68840 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-68839 - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker

CVE-2026-68838 - Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over

CVE-2026-68837 - Use after free in Windows File History Service allows an authorized attacker to elevate privileges l

CVE-2026-68835 - Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileg

CVE-2026-68834 - Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over

CVE-2026-68833 - Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a ph

CVE-2026-68832 - Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges l

CVE-2026-68831 - Files or directories accessible to external parties in Windows Defender Firewall Service allows an a

CVE-2026-68830 - Improper link resolution before file access ('link following') in Windows Universal Plug and Play (U

CVE-2026-68828 - Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code

CVE-2026-68827 - Integer underflow (wrap or wraparound) in Windows GDI+ allows an authorized attacker to elevate priv

CVE-2026-68825 - Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges loc

CVE-2026-68824 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-68787 - Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.

CVE-2026-68786 - Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a networ

CVE-2026-68785 - Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a networ

CVE-2026-68784 - Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ

CVE-2026-68781 - Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ

CVE-2026-68780 - Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ

CVE-2026-68779 - Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ

CVE-2026-68778 - Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ

CVE-2026-68777 - Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ

CVE-2026-68776 - Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information ov

CVE-2026-68775 - Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a networ

CVE-2026-67648 - Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information ov

CVE-2026-67645 - Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ

CVE-2026-67643 - Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a netw

CVE-2026-67642 - Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a networ

CVE-2026-67641 - Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service over a ne

CVE-2026-67639 - Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a networ

CVE-2026-67638 - Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a networ

CVE-2026-67636 - Out-of-bounds read in SQL Server allows an unauthorized attacker to execute code over a network.

CVE-2026-67633 - Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network.

CVE-2026-67631 - Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a netw

CVE-2026-67630 - Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ

CVE-2026-67629 - Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ

CVE-2026-67624 - Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ

CVE-2026-67393 - Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-67390 - Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-67389 - Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ

CVE-2026-67388 - Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a networ

CVE-2026-67386 - Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information ov

CVE-2026-67385 - Use after free in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-67384 - Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a ne

CVE-2026-67383 - Generation of error message containing sensitive information in SQL Server allows an authorized atta

CVE-2026-67381 - Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a

CVE-2026-67380 - Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a networ

CVE-2026-67379 - Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a netwo

CVE-2026-67378 - Untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute code over a n

CVE-2026-67376 - Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a

CVE-2026-67373 - Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a networ

CVE-2026-67370 - Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server a

CVE-2026-67369 - Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ

CVE-2026-67368 - Improper link resolution before file access ('link following') in SQL Server allows an authorized at

CVE-2026-66820 - Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server a

CVE-2026-66819 - Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server a

CVE-2026-66818 - Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over

CVE-2026-66816 - Insufficient logging in SQL Server allows an authorized attacker to bypass a security feature over a

CVE-2026-66814 - Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate pr

CVE-2026-65812 - Insertion of sensitive information into sent data in Microsoft Teams for Android allows an authorize

CVE-2026-65772 - Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute

CVE-2026-65669 - Improper neutralization of special elements in output used by a downstream component ('injection') i

CVE-2026-64918 - Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform

CVE-2026-62895 - Permissive cross-domain policy with untrusted domains in Azure Arc allows an unauthorized attacker t

CVE-2026-62813 - Use after free in Active Directory Domain Services allows an authorized attacker to execute code ove

CVE-2026-62810 - Heap-based buffer overflow in Active Directory Certificate Services (AD CS) allows an authorized att

CVE-2026-62804 - External control of file name or path in Microsoft Office Word allows an unauthorized attacker to ex

CVE-2026-62801 - Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell

CVE-2026-62762 - Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny s

CVE-2026-62759 - Authentication bypass by spoofing in Windows Netlogon allows an unauthorized attacker to perform spo

CVE-2026-62744 - Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to

CVE-2026-62706 - Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to execute

CVE-2026-62697 - Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges loc

CVE-2026-62694 - Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-58649 - Origin validation error in .NET allows an unauthorized attacker to disclose information over a netwo

CVE-2026-58611 - Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges l

CVE-2026-58600 - Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to el

CVE-2026-58599 - Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to ex

CVE-2026-57099 - Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker

CVE-2026-57098 - Improper verification of cryptographic signature in Windows RDP Client allows an unauthorized attack

CVE-2026-56198 - Out-of-bounds read in Microsoft Trace Data Helper allows an authorized attacker to elevate privilege

CVE-2026-56177 - Use after free in Windows Server allows an authorized attacker to elevate privileges locally.

CVE-2026-56172 - Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges lo

CVE-2026-55007 - Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a netw

CVE-2026-54611 - InstantCMS is a free and open source content management system. Versions prior to 2.18.2 have a Remo

CVE-2026-50349 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-48707 - InstantCMS is a free and open source content management system. Versions prior to 2.18.2 have a Serv

CVE-2026-47297 - Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over

CVE-2026-86668 - A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.15. The impacted eleme

CVE-2026-86667 - A weakness has been identified in aircheng-org iWebShop-5 up to 5.15. The affected element is the fu

CVE-2026-86073 - n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.1, the OAuth token endp

CVE-2026-84393 - A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 thro