Boletim de segurança de 13 de outubro de 2026

CVE-2026-92817

The Ignition Perspective module does not properly validate session privileges when determining Designer-level access. An authenticated user with access to a Vision project could provide their valid Vision session identifier and gain Designer-level privileges. An attacker could exploit these elevated privileges to...

CVE-2026-94512

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-65674

Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-106618

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

CVE-2026-106617

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

CVE-2026-106615

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

CVE-2026-106613

ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction.

CVE-2026-106090

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

CVE-2026-106089

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

CVE-2026-105901

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

CVE-2026-70098

Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.

CVE-2026-63162

Omnispace Agora Project before 26.10.0 contains a path traversal vulnerability that allows attackers to write arbitrary files outside the intended temporary directory by supplying an unanchored tmpFolderName value in the upload destination path. Attackers can exploit this flaw, for example by setting tmpFolderName to...

CVE-2026-63161

Omnispace Agora Project before 26.10.0 contains a session fixation vulnerability that allows remote attackers to hijack authenticated sessions by planting a known session identifier in a victim's browser prior to login. Attackers can exploit the application's failure to regenerate the session id upon successful...

CVE-2026-63154

Omnispace Agora Project before 26.10.0 contains a SQL identifier injection vulnerability that allows a space administrator to escalate privileges by supplying caller-controlled agoraFields[] names as unvalidated SQL column identifiers during the user import flow. Attackers can inject privileged column names such as...

CVE-2026-102855

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

CVE-2026-102235

Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network.

CVE-2026-97781

Improper neutralization of special elements used in a command ('command injection') in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.

CVE-2026-97780

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97778

Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97777

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97776

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97775

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97773

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97772

Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97771

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97770

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97769

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97768

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97767

Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97766

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97765

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97763

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97762

Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97761

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97759

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97758

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97757

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97756

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97755

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97754

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97753

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97752

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97751

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97750

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97748

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97747

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97746

Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97745

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97742

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97741

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97739

Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97738

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97017

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97012

Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

CVE-2026-97011

Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97010

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97008

Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97007

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97004

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97003

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-96957

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-96952

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

CVE-2026-96943

Integer overflow or wraparound in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.

CVE-2026-96917

Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-96914

Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

CVE-2026-96913

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96251

Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network.

CVE-2026-96235

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

CVE-2026-96230

Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to execute code over a network.

CVE-2026-96224

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

CVE-2026-96202

Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.

CVE-2026-96044

No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVE-2026-88219

Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a network.

CVE-2026-88202

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVE-2026-88200

Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVE-2026-88198

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVE-2026-88197

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

CVE-2026-88196

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

CVE-2026-88186

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVE-2026-88166

Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-88165

Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network.

CVE-2026-88163

Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-88159

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.

CVE-2026-88157

Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

CVE-2026-88155

Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-88150

Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVE-2026-88145

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-88144

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

CVE-2026-88142

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.

CVE-2026-88136

Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network.

CVE-2026-88116

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2026-88115

Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network.

CVE-2026-88114

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2026-88112

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2026-88075

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.

CVE-2026-88073

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-87697

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.

CVE-2026-85936

Double free in Windows Shell allows an unauthorized attacker to execute code over a network.

CVE-2026-85931

Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.

CVE-2026-85905

Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate privileges locally.

CVE-2026-85903

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2026-85900

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-85817

Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized attacker to execute code over a network.

CVE-2026-85363

Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-85339

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

CVE-2026-83934

Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.

CVE-2026-83929

Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network.

CVE-2026-83928

Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.

CVE-2026-83923

Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

CVE-2026-83891

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVE-2026-83889

Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network.

CVE-2026-83874

Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code over a network.

CVE-2026-83851

Heap-based buffer overflow in Windows Partition Management Driver allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-83797

Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-83789

Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-83784

Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.

CVE-2026-83778

Heap-based buffer overflow in Microsoft Internet Messaging API allows an unauthorized attacker to execute code over a network.

CVE-2026-83777

Heap-based buffer overflow in Windows Bluetooth Service allows an unauthorized attacker to elevate privileges over an adjacent network.

CVE-2026-83771

Use after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate privileges over an adjacent network.

CVE-2026-83759

Improper control of generation of code ('code injection') in Windows Encrypting File System (EFS) allows an authorized attacker to execute code over a network.

CVE-2026-83728

Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally.

CVE-2026-83725

Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.

CVE-2026-83716

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.

CVE-2026-83688

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-83643

Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

CVE-2026-83642

Access of resource using incompatible type ('type confusion') in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2026-83523

Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network.

CVE-2026-83520

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.

CVE-2026-77910

Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-77902

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-77496

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

CVE-2026-70580

Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally.

CVE-2026-70343

Heap-based buffer overflow in Microsoft MPEG-2 Video Extension allows an unauthorized attacker to execute code over a network.

CVE-2026-70302

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVE-2026-70301

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVE-2026-70299

Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-70297

Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network.

CVE-2026-70287

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVE-2026-70282

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

CVE-2026-70275

Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-70268

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVE-2026-70266

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVE-2026-70262

Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-70258

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

CVE-2026-70257

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

CVE-2026-70256

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

CVE-2026-70254

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-70250

Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network.

CVE-2026-70246

Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVE-2026-70215

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

CVE-2026-70210

Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-70185

Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature locally.

CVE-2026-70174

Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.

CVE-2026-70167

Access of resource using incompatible type ('type confusion') in DNS Server allows an authorized attacker to execute code over a network.

CVE-2026-70158

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

CVE-2026-70149

Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.

CVE-2026-70089

Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a network.

CVE-2026-70069

Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.

CVE-2026-70068

Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-70035

Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.

CVE-2026-70007

Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.

CVE-2026-69985

Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.

CVE-2026-69945

Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally.

CVE-2026-69943

Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-69918

Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.

CVE-2026-69765

Use after free in Windows Storport Miniport Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-69521

Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network.

CVE-2026-69370

Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

CVE-2026-69326

Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.

CVE-2026-110238

Rapyd Admin from 9.0.0 before 9.20.0 contains an authorization bypass vulnerability that allows authenticated company members with the default customer role to modify or delete arbitrary user accounts through the UsersModalEditEmbed Livewire component. Attackers can dispatch editUser or deleteUser with predictable...

CVE-2026-110215

youlai-boot through 2.21.1 contains a missing authorization vulnerability that allows authenticated users to assign arbitrary menu and button permissions to roles via PUT /api/v1/roles/{roleId}/menus. Low-privileged users such as the GUEST test account can grant all permissions to their own role, refreshing the Redis...

CVE-2026-110207

Wukong AICRM through 20260610 contains a missing authorization vulnerability that allows any authenticated user to call user, role, department and agent administration APIs because no administrator check exists. Attackers can send POST requests to /managerUser/updateUser to reset the admin account's password and...

CVE-2026-110206

Roo Code through 3.54.0 contains a command approval bypass vulnerability in parseCommandLine() that allows attackers to auto-approve arbitrary shell commands by placing a command substitution in command position. Attackers using indirect prompt injection can submit commands like $(echo touch /tmp/x) that pass the echo...

CVE-2026-110205

Roo Code through 3.54.0 contains a command approval bypass vulnerability in parseCommandLine() that discards command substitutions placed next to * or ? glob characters. Attackers using indirect prompt injection can craft commands like echo *$(...) that match allowlisted prefixes, executing denied commands without...

CVE-2026-110204

Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to run denied shell commands because parseCommandLine() treats ${ command; } substitutions as parameter expansions. Attackers using indirect prompt injection can embed denied commands inside an allowlisted command like echo...

CVE-2026-110203

Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to auto-approve denied shell commands by abusing quote-masking regex in parseCommandLine(). Attackers can use indirect prompt injection with escaped or single-quoted double quotes to hide command separators behind...

CVE-2026-110202

Roo Code through 3.54.0 contains a command approval bypass vulnerability in getCommandDecision() that allows attackers to auto-approve denied shell commands by prefixing them with a bare >& redirect. Attackers using indirect prompt injection can make the allowlist match a redirect target like echo while the shell runs...

CVE-2026-109429

Mistral Vibe before 2.25.4 contains a command permission gate bypass vulnerability that allows attackers to execute arbitrary commands by hiding a command substitution inside a single-quoted variable value that tree-sitter-bash static parsing cannot detect. Attackers can craft input such as embedding a command...

CVE-2026-109428

Mistral Vibe before 2.25.5 contains a permission validation bypass vulnerability that allows attackers to execute unauthorized commands by exploiting a parsing discrepancy between tree-sitter-bash and bash in handling backslash-newline line continuations in the _extract_commands() function of bash.py. Attackers can...

CVE-2026-108471

Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

CVE-2026-108467

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network.

CVE-2026-108463

Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-108458

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-108400

Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.

CVE-2026-108398

Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally.

CVE-2026-105733

Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally.

CVE-2026-105727

Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network.

CVE-2026-105718

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-105717

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

CVE-2026-105716

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

CVE-2026-105598

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

CVE-2026-105597

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

CVE-2026-105596

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

CVE-2026-105595

Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

CVE-2026-105593

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

CVE-2026-105591

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

CVE-2026-105007

An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it. To exploit the vulnerability, in a local attack scenario, an attacker could run a specially crafted application to elevate the...

CVE-2026-103575

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-103572

Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network.

CVE-2026-102870

Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute code over a network.

CVE-2026-102869

Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-102863

Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVE-2026-102862

Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVE-2026-102861

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVE-2026-102860

Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVE-2026-102858

Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.

CVE-2026-102857

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

CVE-2026-102856

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

CVE-2026-102850

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

CVE-2026-102849

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

CVE-2026-102226

Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network.

CVE-2026-102225

Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

CVE-2026-102217

Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network.

CVE-2026-102214

Use after free in Windows Hyper-V allows an authorized attacker to execute code locally.

CVE-2026-102203

Access of resource using incompatible type ('type confusion') in RPC Runtime allows an unauthorized attacker to execute code over a network.

CVE-2026-100220

Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network.

CVE-2026-100214

Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network.

CVE-2026-100212

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-100211

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-100210

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-100209

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-108385

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, BaseGenerator.parse_enum and EnumRepresentation.render_symbols use each schema-controlled enum symbol as a generated enum member...

CVE-2026-108384

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, BaseGenerator.parse_fixed interpolates a fixed type's aliases value directly into a generated types.confixed annotation. A list is...

CVE-2026-108383

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, FieldRepresentation.get_field_default renders a schema-controlled enum field default as an enum member reference after applying case...

CVE-2026-108382

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, EnumRepresentation.render_symbols concatenates each schema-controlled enum symbol between double quotes in a generated enum...

CVE-2026-108381

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.44.0 through 0.70.5, the Pydantic and AvroDantic model generators insert a schema field's pydantic-class value after pydantic. in a generated field...

CVE-2026-108380

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.65.9 through 0.70.5, PydanticFieldRepresentation.add_field_properties inserts a schema field's doc value between the quotes of a generated pydantic.Field...

CVE-2026-108379

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, BaseGenerator.parse_fixed inserts a fixed type's namespace value between quotes inside a generated types.confixed annotation without...

CVE-2026-108378

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.40.0 through 0.70.5, ClassRepresentation.render_docstring copies a schema record's doc value into a generated triple-double-quoted class docstring...

CVE-2026-108377

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.62.3 through 0.70.5, ClassRepresentation.render_metaclass inserts a schema-controlled Avro record name into the quoted Meta.schema_name field of...

CVE-2026-108376

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.47.3 through 0.70.5, FieldRepresentation.get_field_default inserts a schema-controlled referenced record name into the callable position of a generated...

CVE-2026-108375

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, FieldRepresentation.get_field_default inserts schema-controlled string, UUID, bytes, and fixed field defaults into quoted literals...

CVE-2026-104085

odt2spip plugin for SPIP before 4.4.0 contains an OS command injection vulnerability that allows authenticated authors to execute arbitrary commands by uploading a document with a maliciously crafted filename through the document import form. Attackers can embed shell metacharacters such as $(id) in a non-.odt...

CVE-2025-57739

An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3, FortiMail 7.4.0 through 7.4.5, FortiMail 7.2.0 through 7.2.8 allows an authenticated attacker to execute unauthorized code or commands via specifically...

CVE-2025-46773

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiAnalyzer Cloud 7.4.1 through...

CVE-2026-85990

Leantime is an open source project management system. Prior to 3.10.0, for the provisionally grouped account-creation and plugin-management surfaces, Leantime's JSON-RPC dispatcher in app/Domain/Api/Controllers/Jsonrpc.php exposes public API service methods, while PermissionEnforcer::enforce allows methods that lack a...

CVE-2026-55376

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to 0.0.40, an authenticated user who can create or edit a workflow with an Agent custom Python tool can bypass the blacklist-based sandbox in backend/app/services/python_tool_executor.py because allowed...

CVE-2026-12655

A security issue exists within 1732E ArmorBlock® I/O, where an unauthenticated attacker can change the device's webserver password without valid credentials. This could result in admin account takeover or unauthorized modification of device configuration.

CVE-2026-11732

An insufficient input validation vulnerability in the website blocking feature (Block Sites) of the listed NETGEAR router models allows a network-adjacent attacker having network access (such as WiFi credentials) to run unauthorized commands on the router. This vulnerability could affect the confidentiality,...

CVE-2026-11731

An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with adjacent access to the affected device’s management service to access certain device information or modify administrative settings. This vulnerability may impact the confidentiality and integrity of...

CVE-2026-109676

FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling that allows attackers to access a freed smartcard handle object after an invalid connect operation. Attackers can trigger an invalid smartcard connect operation to cause reuse of the freed handle, leading to memory...

CVE-2026-109520

A flaw has been found in Colorful iGameCenter 2.0.0.82. Affected by this vulnerability is the function MmMapIoSpace in the library AMDRyzenMasterDriver.sys of the component Dispatch Handler. This manipulation of the argument SystemBuffer causes privilege defined with unsafe actions. The attack needs to be launched...

CVE-2026-109778

Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

CVE-2026-109756

Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

CVE-2026-109709

Information disclosure, privilege escalation in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

CVE-2026-89199

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to sensitive configuration items via specific database queries. This could allow an authenticated attacker to retrieve administrative credentials for various internal systems, leading to...

CVE-2026-89198

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize the filename of firmware files uploaded to the system. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.

CVE-2026-89197

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Value field of notification conditions processed during the Notification Profile configuration. This could allow an authenticated attacker with specific privileges to...

CVE-2026-89196

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in facility names processed during the Bulk Import/Export workflow. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the...

CVE-2026-59241

A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions < V8.0 Update 11), SIMATIC WinCC V8.1 (All versions < V8.1 Update 7). The affected application does not sufficiently restrict the permissions assigned to a database role. This could allow an authenticated remote...

CVE-2026-103418

Firefox for iOS directly interpolated the page’s HTML language attribute into translation JavaScript, allowing attacker-controlled markup to execute code in Firefox’s privileged content world and bypass the page’s Content Security Policy. This vulnerability was fixed in Firefox for iOS 157.1.

CVE-2026-110385

A remote code execution vulnerability in ONLYOFFICE Document Server versions before10.0.0 allows an authenticated attacker with a valid Inbox-compatible JWT to execute arbitrary operating system commands as the ds service account. The Document Builder API improperly processes user-controlled converter XML supplied...

CVE-2026-108473

Multiple Kasa devices contain an improper authentication vulnerability in the local device-management protocol. An unauthenticated adjacent attacker may send management instructions to an affected device without adequate authentication or authorization, allowing modification of the device state or management settings....

CVE-2026-101294

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass cryptographic signature verification due to improper verification of cryptographic signature.

CVE-2026-95631

Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is...

CVE-2026-92911

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field, potentially...

CVE-2026-84994

Qwik is a performance-focused JavaScript framework. Prior to @builder.io/qwik 1.20.0 and @qwik.dev/core 2.0.0-beta.37, default server-side qwik-json deserialization causes ResourceSerializer.$fill$ to pass resource._resolved to Promise.resolve without first rejecting attacker-controlled thenables. An unauthenticated...

CVE-2026-104817

Misskey is an open source, federated social media platform. From 12.112.1 until 2026.7.0, the unauthenticated fetch-rss API lacks rate limiting and response-size restrictions and performs synchronous XML parsing. An attacker can trigger unbounded outbound HTTP requests and synchronous parsing, exhausting instance...

CVE-2026-103937

Misskey is an open source, federated social media platform. From 13.0.0 until 2025.4.1 and from 2025.5.0 until 2026.7.0, cleanup processing may not execute during file uploads. Repeated uploads can exhaust storage or file descriptors and deny service regardless of whether federation is enabled. This issue is fixed in...

CVE-2026-55823

Frappe is a full-stack web application framework. Prior to 16.23.0, the get_count() method in reportview composes a count operation around generated SQL through a raw database execution path, allowing crafted report input to alter SQL executed by the application. This issue is fixed in version 16.23.0.

CVE-2026-97334

The network messaging layer contained improper handling of highly compressed data affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe server, Web Server, Command Center, MediaAgents, clients, and HyperScale.

CVE-2026-77100

MediaAgent contained a heap-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update Commvault installation of MediaAgents and HyperScale.

CVE-2026-77090

CVFS contained an XML external entity (XXE) reference handling issue affecting information dislcosure. Software customers upgrade to resolved maintenance release. Update CVFS.

CVE-2026-12656

A denial-of-service security issue exists in the affected product and version. The security issue stems from improper handling of network storm traffic, which can interrupt communication, cause device faults, and affect open TCP and UDP ports. A power cycle is required to recover the device to its normal state.

CVE-2026-63316

A SQL injection vulnerability has been identified in Payload CMS. Improper neutralization of input provided by user into "in" and "not_in" query paramethers allows an authenticated attacker to perform SQL Injection attacks. This issue was fixed in version 3.90.0 and 4.0.0-canary.34.

CVE-2026-95634

CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.

CVE-2026-95639

Photoshop Desktop is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2026-34634

ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.

CVE-2026-106616

ColdFusion is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require...

CVE-2026-105897

ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.

CVE-2026-103847

Dimension is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. A local attacker with user permissions could exploit this vulnerability to execute arbitrary code....

CVE-2026-103846

Dimension is affected by an Improper Neutralization of Input During Web Page Generation vulnerability that could result in arbitrary code execution in the context of the current user. A local attacker with user permissions could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires...

CVE-2026-103845

Dimension is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A local attacker with user permissions could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a...

CVE-2026-92088

Improper handling of undefined values vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Escalation. This issue affects upKeeper Instant Privilege Access: through 1.7.1.

CVE-2026-65198

Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy. An attacker who holds the key (recoverable from the open-source build) can authenticate SNMPv3 to, and decrypt SNMPv3 traffic from, any unit that still carries the shipped key. The build customization...

CVE-2026-102250

CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could allow modified firmware to be uploaded when an authorized admin user begins a firmware update procedure which could result in control over the device.

CVE-2026-65172

NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnerability in the ETL management API where an unauthenticated remote attacker may access ETL information or control existing ETL jobs by sending crafted GET or POST requests to an AIStore proxy. A successful exploit may lead to information...

CVE-2026-65170

NVIDIA AIStore for Linux contains a vulnerability in the experimental HT backend where an unauthenticated remote attacker may cause server-side request forgery by supplying a crafted original URL. A successful exploit of this vulnerability may lead to information disclosure.

CVE-2026-65101

NVIDIA AIStore for Linux contains a vulnerability in the distributed sort component where an attacker could cause server-side request forgery by supplying a crafted external key map URL. A successful exploit of this vulnerability might lead to information disclosure.

CVE-2026-13138

Client-Side Enforcement of Server-Side Security vulnerability in Divasoft Software and E-Commerce Inc. Biletiva Ticketing Platform allows Manipulating State. This issue affects Biletiva Ticketing Platform: through 2026-07-23.

CVE-2026-85886

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-68883

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-67625

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-110255

Finsys Dockhand before 1.0.43 contains a response-disclosing server-side request forgery vulnerability that allows authenticated users to make the server fetch arbitrary URLs by supplying repository URL and stackfile values. Attackers can send stack templates pointing to internal services or cloud metadata endpoints...

CVE-2026-104816

Misskey is an open source, federated social media platform. From 12.0.0 until 2026.7.0, the RSS components display feed item links from configured feeds without verifying their URL schemes. Missing URL scheme verification allows an attacker who controls feed content to provide an unsafe-scheme link that causes script...

CVE-2026-53562

Improper link resolution before file access ('link following') vulnerability in Citrix UniconOS. This issue affects UniconOS: before 2607 CR and before 2603 LTSR CU2.

CVE-2026-102982

Plane is an open-source project management tool. Prior to 1.4.0, the plane comments fail to sanitize unsafe URL schemes stored in comment_html. A project member can store a crafted link in a comment, and attacker-controlled script executes in the browser context of another user who selects the link. This issue is...

CVE-2026-109961

Froxlor 0.10.0 before 2.3.14 contains a newline injection vulnerability that allows authenticated customers to inject arbitrary entries into the root-owned NSS group database via the unvalidated additional_members parameter of the Ftps.add API. Attackers can embed newline characters that the REBUILD_NSSUSERS cron...

CVE-2026-101020

An incorrect permission assignment for critical resource issue exists in AssetView, AssetView CLOUD, and AssetView Cloud +. If this vulnerability is exploited, a local authenticated attacker who can log in to the Windows system where Management Console or Client Terminal for the product is running may gain SYSTEM...

CVE-2026-75826

Command injection in the backup function in Teltonika Networks RUTOS 7.22 before 7.24.6 and 7.25 before 7.25.2 (RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, and EBG devices), RUTOS 7.22 before 7.25.2 (TAP devices), and TSWOS 1.9 before 1.10.4 (TSW and SWM devices) allows a remote authenticated attacker to...

CVE-2026-75995

ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. The vulnerable component is restricted to an administrative network zone by...

CVE-2026-71385

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. The vulnerable component is restricted to an administrative network zone by...

CVE-2026-83845

Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoofing locally.

CVE-2026-92908

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access, causing a limited disruption to availability. Exploitation of this...

CVE-2026-109519

A vulnerability was detected in YouTransfer up to 0.0.7/1.0.6/1.1.0. Affected is an unknown function of the file /settings/template of the component Template Rendering. The manipulation results in path traversal. The attack may be launched remotely. The exploit is now public and may be used. The vendor was contacted...

CVE-2025-58774

AMI APTIOV contains vulnerabilities in BIOS where users may cause “Buffer Access with Incorrect Length Value” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability.

CVE-2026-78557

A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The application fails to properly sanitize or escape data received from the backend before rendering it in the user interface. Because the front end is integrated with Node.js, this vulnerability allows for the execution of...

CVE-2026-93905

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 could allow an unauthenticated remote attacker to corrupt the persisted status of batch job instances.

CVE-2026-105898

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a...

CVE-2026-105443

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 has insufficient isolation between servers sharing an install.

CVE-2026-86016

VNote is a note-taking platform. Prior to 4.3.0, VNote uses the assignment `preNode.innerHTML = p_metaData` in src/data/extra/web/js/markdownit.js to insert YAML frontmatter metadata into a pre element before the protectFromXss sanitization path runs. Opening an attacker-supplied Markdown note can therefore execute...

CVE-2026-85925

Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network.

CVE-2026-85369

Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

CVE-2025-58772

AMI APTIOV contains vulnerabilities in BIOS where users may cause “Classic Buffer Overflow” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability.

CVE-2026-102073

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Ethernet) (All versions <...

CVE-2026-17092

The Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 8.10.2.1. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated...

CVE-2026-104995

The BP Profile Search plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 5.9 via the 'ajax_template' value parsed from the client-controlled 'bps_directory' cookie during BuddyPress AJAX directory requests. The bps_directory_ajax() filter (hooked onto...

CVE-2026-63174

Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability that allows a space administrator to assign users into spaces outside their authority because the spaceAffectList affectation was performed without verifying the caller's rights to the target space. Attackers can exploit the missing...

CVE-2026-63165

Omnispace Agora Project before 26.10.0 contains a SQL injection vulnerability in the calendar functionality that allows attackers to inject malicious SQL by manipulating the sortEvents parameter, which is concatenated into the ORDER BY clause without sanitization in app/ModCalendar/CtrlCalendar.php. Attackers can...

CVE-2026-63153

Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in setAffectations() that allows authenticated attackers to insert access-right records for a caller-supplied target space without verifying the caller has rights to that space. Attackers can assign access affectations to spaces...

CVE-2026-63152

Omnispace Agora Project before 26.10.0 contains a second-order SQL injection vulnerability that allows authenticated attackers to inject malicious SQL via the _idCategoryFilter parameter, which is persisted into the session and later concatenated into a SQL statement without parameterization. Attackers can store a...

CVE-2026-97783

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-92922

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field,...

CVE-2026-88185

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVE-2026-88174

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Deployment Services allows an unauthorized attacker to execute code over a network.

CVE-2026-88173

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.

CVE-2026-88171

Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

CVE-2026-88120

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

CVE-2026-88119

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

CVE-2026-88117

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

CVE-2026-88094

Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Storage Library allows an authorized attacker to elevate privileges over a network.

CVE-2026-85926

Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.

CVE-2026-85799

Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.

CVE-2026-85371

Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.

CVE-2026-84012

Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

CVE-2026-83914

Use after free in Microsoft XML allows an unauthorized attacker to execute code over a network.

CVE-2026-83844

Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code over a network.

CVE-2026-83746

Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.

CVE-2026-83674

Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-83522

Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-70571

Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.

CVE-2026-70269

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVE-2026-70229

Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.

CVE-2026-70197

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

CVE-2026-70187

Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

CVE-2026-70175

Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-70127

Use after free in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2026-70111

Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-70062

Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network.

CVE-2026-70038

Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.

CVE-2026-70013

Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.

CVE-2026-69913

Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.

CVE-2026-69830

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

CVE-2026-69802

Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute code over a network.

CVE-2026-110211

iFlytek SkillHub through 0.2.22 contains a missing authorization vulnerability that allows any authenticated user to permanently delete other users' skills via DELETE /api/cli/v1/skills/{namespace}/{slug}. Attackers can locate targets through the anonymous search endpoint and trigger deletion without ownership checks,...

CVE-2026-110112

Dockhand before 1.0.50 contains a privilege escalation vulnerability that allows users from another tenant to gain admin access because OIDC iss, aud, nonce and exp claims are not validated. Attackers with admin rights in another tenant of a shared provider like Microsoft Entra ID can recreate the mapped admin group...

CVE-2026-108460

Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

CVE-2026-108457

Out-of-bounds write in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network.

CVE-2026-105005

Out-of-bounds write in Windows Schannel allows an unauthorized attacker to execute code over a network.

CVE-2026-102866

Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-100218

Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

CVE-2026-110124

FastBee through 2.1.0 contains an insecure direct object reference vulnerability in DeviceController that allows authenticated low-privilege users to read and modify other tenants' devices by supplying sequential device IDs. Self-registered attackers can enumerate deviceId or serialNumber values to read owner, IP, and...

CVE-2026-110108

MateCloud through 5.0.8 contains a missing authorization vulnerability that allows any authenticated user to manage object storage by calling the unprotected /api/v1/admin/storage endpoints in StorageController. Low-privilege or self-registered users can supply arbitrary bucket and objectName values to list objects,...

CVE-2026-110097

Ikaros 1.2.0 through 1.2.5 contains an authentication bypass vulnerability that allows attackers with a valid password to skip TOTP verification by reusing the login temp token. Attackers can present the temp token from the jwt/apply endpoint as a bearer JWT, refresh it, or use HTTP Basic login to gain full account...

CVE-2026-53418

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an unauthenticated user to conduct an escalation of privilege via network access.

CVE-2026-93907

IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass authentication by exploiting a flaw in the CSIv2 inbound propagation handler.

CVE-2026-65164

NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component where a remote attacker may cause an improper limitation of a pathname to a restricted directory by supplying crafted archive member names to a dSort job. A successful exploit may lead to arbitrary file creation...

CVE-2026-65103

NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-side object rename handler, where an unauthenticated remote attacker could cause an improper limitation of a pathname to a restricted directory by submitting a crafted rename destination directly to an AIStore target, resulting in the...

CVE-2026-96956

Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-96844

Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network.

CVE-2026-88121

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.

CVE-2026-85881

Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network.

CVE-2026-83838

Integer underflow (wrap or wraparound) in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network.

CVE-2026-70213

Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network.

CVE-2026-70049

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network.

CVE-2026-69363

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.

CVE-2026-53420

Buffer overflow in a Zoom Phone feature of Zoom Workplace Clients may allow an unauthenticated user to conduct a escalation of privilege via network access.

CVE-2026-95680

IBM WebSphere Application Server 8.5, and 9.0 could allow an authenticated attacker to bypass authorization leading to administrative impersonation across the cell.

CVE-2026-82715

Insecure Temporary File vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O Server. This issue affects Hitachi Disk Array Driver for AIX: from 01-00 before 01-23-/A; Hitachi Disk Array Driver for Virtual I/O Server: from 01-04 before 01-23-/A.

CVE-2026-110359

Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation. This is caused by a privileged service running from the %PROGRAMDATA%\Hyland\DesktopHost\bin folder with weak permissions. A local user can exploit this to escalate privileges.

CVE-2026-97312

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-96523

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-96522

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-96521

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-95641

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-95638

Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-95637

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-95636

Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-95635

Photoshop Desktop is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-83966

Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-83965

Substance3D - Sampler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-83661

Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-106614

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploit depends on conditions beyond the attacker's control. Exploitation of this...

CVE-2026-104348

Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-104347

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-104346

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-103821

Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-100129

Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-100128

Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-100127

Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-100112

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-100111

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-103854

Dimension is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-103851

Substance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-103844

Dimension is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-103843

Substance3D - Stager is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-103842

Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user...

CVE-2026-103841

Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user...

CVE-2026-103840

Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user...

CVE-2026-103839

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-103838

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-103837

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-103836

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-103835

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-103834

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-103833

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-103832

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-103830

Substance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-97811

Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.

CVE-2026-97809

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-97807

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-97806

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-97804

Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.

CVE-2026-97803

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-97800

Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.

CVE-2026-97799

Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally.

CVE-2026-97798

Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-97794

Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

CVE-2026-97792

Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

CVE-2026-97009

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-97001

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2026-96997

Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally.

CVE-2026-96996

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2026-96995

Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally.

CVE-2026-96953

Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally.

CVE-2026-96950

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-96947

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-96946

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-96933

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.

CVE-2026-96931

Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-96929

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96928

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-96920

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

CVE-2026-96918

Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-96916

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-96915

Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

CVE-2026-96912

Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally.

CVE-2026-96911

Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-96867

Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally.

CVE-2026-96862

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-96856

Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

CVE-2026-96847

Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.

CVE-2026-96843

Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.

CVE-2026-96324

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-96318

Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally.

CVE-2026-96317

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96312

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96309

Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

CVE-2026-96308

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96306

Out-of-bounds read in Windows Sysmain Service allows an authorized attacker to elevate privileges locally.

CVE-2026-96249

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-96244

Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally.

CVE-2026-96243

Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges locally.

CVE-2026-96231

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

CVE-2026-96225

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

CVE-2026-96223

Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

CVE-2026-96220

Improper control of generation of code ('code injection') in Windows Assigned Access allows an authorized attacker to elevate privileges locally.

CVE-2026-96217

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-96186

Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.

CVE-2026-96118

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96108

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-88210

Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.

CVE-2026-88194

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-88193

Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally.

CVE-2026-88191

Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-88189

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-88188

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-88182

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-88181

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-88180

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-88179

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-88177

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-88168

Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-88152

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

CVE-2026-88147

Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.

CVE-2026-88135

Improper access control in WebDAV allows an authorized attacker to elevate privileges locally.

CVE-2026-88134

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-88133

Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally.

CVE-2026-88128

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-88126

Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.

CVE-2026-88118

Integer overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

CVE-2026-88109

Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.

CVE-2026-88105

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-88101

Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.

CVE-2026-88100

Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

CVE-2026-88093

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-88091

Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

CVE-2026-88080

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-88074

Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

CVE-2026-88072

Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.

CVE-2026-88071

Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

CVE-2026-88070

Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally.

CVE-2026-87712

Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate privileges locally.

CVE-2026-87711

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-87707

Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate privileges locally.

CVE-2026-87706

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

CVE-2026-87702

Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to elevate privileges locally.

CVE-2026-87700

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-87699

Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally.

CVE-2026-87695

Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.

CVE-2026-87694

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-87692

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.

CVE-2026-87691

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.

CVE-2026-85945

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-85933

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

CVE-2026-85927

Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

CVE-2026-85915

Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-85911

Use after free in Windows StateRepository API allows an authorized attacker to elevate privileges locally.

CVE-2026-85908

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

CVE-2026-85906

Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

CVE-2026-85902

Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

CVE-2026-85901

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

CVE-2026-85884

Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally.

CVE-2026-85874

Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally.

CVE-2026-85872

Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-85871

Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

CVE-2026-85869

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-85867

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-85864

Improper privilege management in Python allows an authorized attacker to elevate privileges locally.

CVE-2026-85863

Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-85861

Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-85860

Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-85858

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-85851

Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally.

CVE-2026-85850

Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-85849

Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.

CVE-2026-85848

Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

CVE-2026-85843

Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

CVE-2026-85842

Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.

CVE-2026-85837

Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-85836

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-85833

Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

CVE-2026-85832

Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

CVE-2026-85829

Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.

CVE-2026-85822

Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.

CVE-2026-85820

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-85807

Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-85804

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-85800

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-85796

Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-85795

Use after free in Windows Text Services Framework allows an authorized attacker to elevate privileges locally.

CVE-2026-85377

Access of resource using incompatible type ('type confusion') in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-85376

Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

CVE-2026-85375

Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

CVE-2026-85373

Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

CVE-2026-85368

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-85366

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-85359

Improper control of generation of code ('code injection') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.

CVE-2026-85358

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-85356

Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-85343

Improper link resolution before file access ('link following') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

CVE-2026-85341

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-85340

Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.

CVE-2026-85338

Out-of-bounds read in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

CVE-2026-85332

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

CVE-2026-85327

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

CVE-2026-85318

Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.

CVE-2026-84016

Out-of-bounds write in Windows EAPHost Service allows an authorized attacker to elevate privileges locally.

CVE-2026-84013

Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.

CVE-2026-83932

Heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileges locally.

CVE-2026-83931

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.

CVE-2026-83927

Improper link resolution before file access ('link following') in Windows Registry allows an authorized attacker to elevate privileges locally.

CVE-2026-83922

Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

CVE-2026-83920

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-83919

Heap-based buffer overflow in Microsoft Internet Messaging API allows an authorized attacker to execute code locally.

CVE-2026-83918

Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-83913

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-83912

Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

CVE-2026-83903

Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

CVE-2026-83902

Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

CVE-2026-83896

Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

CVE-2026-83883

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-83882

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-83881

Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.

CVE-2026-83877

Integer overflow or wraparound in HID Parser Library allows an authorized attacker to elevate privileges locally.

CVE-2026-83876

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.

CVE-2026-83873

Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.

CVE-2026-83872

Incorrect conversion between numeric types in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-83867

Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

CVE-2026-83863

Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.

CVE-2026-83861

Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.

CVE-2026-83859

Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-83857

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-83850

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-83848

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83847

Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally.

CVE-2026-83840

Weak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-83837

Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

CVE-2026-83836

Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code locally.

CVE-2026-83833

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-83832

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-83830

Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83829

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-83828

Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

CVE-2026-83826

Untrusted pointer dereference in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-83796

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-83792

Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83791

Improper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges locally.

CVE-2026-83783

Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

CVE-2026-83781

Improper null termination in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83779

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-83769

Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.

CVE-2026-83768

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-83767

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-83763

Access of resource using incompatible type ('type confusion') in Windows Input System allows an authorized attacker to elevate privileges locally.

CVE-2026-83762

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-83761

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-83758

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code locally.

CVE-2026-83757

Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-83756

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-83753

Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.

CVE-2026-83741

Use after free in Internet Explorer allows an authorized attacker to elevate privileges locally.

CVE-2026-83735

Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-83732

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-83727

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2026-83726

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-83721

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-83712

Out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally.

CVE-2026-83709

Heap-based buffer overflow in Windows NTLM allows an authorized attacker to elevate privileges locally.

CVE-2026-83704

Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-83700

Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-83699

Stack-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83698

Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83692

Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-83691

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

CVE-2026-83690

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-83679

Use after free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83678

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-83669

Use of uninitialized resource in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-83659

Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83654

Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

CVE-2026-83652

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-83650

Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.

CVE-2026-83641

Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.

CVE-2026-83640

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

CVE-2026-83639

Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83638

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-83637

Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

CVE-2026-83634

Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally.

CVE-2026-83588

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-83587

Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally.

CVE-2026-83586

Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83585

Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-83583

Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally.

CVE-2026-83579

Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally.

CVE-2026-83570

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-83569

Heap-based buffer overflow in HID Parser Library allows an authorized attacker to elevate privileges locally.

CVE-2026-83568

Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

CVE-2026-83567

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-83518

Heap-based buffer overflow in RPC Runtime allows an authorized attacker to elevate privileges locally.

CVE-2026-83514

Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-83513

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-83508

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-83506

Untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.

CVE-2026-83499

Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.

CVE-2026-81969

Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.

CVE-2026-78459

Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges locally.

CVE-2026-73027

External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.

CVE-2026-70566

Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally.

CVE-2026-70303

Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-70286

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

CVE-2026-70285

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70278

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.

CVE-2026-70274

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-70255

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-70247

Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally.

CVE-2026-70245

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-70238

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

CVE-2026-70233

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-70228

Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-70225

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-70222

Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.

CVE-2026-70220

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2026-70218

Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally.

CVE-2026-70184

Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally.

CVE-2026-70177

Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-70172

Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-70151

Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

CVE-2026-70143

Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally.

CVE-2026-70142

Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally.

CVE-2026-70139

Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally.

CVE-2026-70138

Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.

CVE-2026-70132

Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-70131

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to elevate privileges locally.

CVE-2026-70123

Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

CVE-2026-70121

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-70117

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70114

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-70113

Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate privileges locally.

CVE-2026-70112

Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally.

CVE-2026-70110

Stack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.

CVE-2026-70109

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.

CVE-2026-70108

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70106

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-70104

Untrusted pointer dereference in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70103

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-70102

Use after free in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-70093

Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally.

CVE-2026-70092

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.

CVE-2026-70064

Integer underflow (wrap or wraparound) in Windows Kerberos allows an authorized attacker to elevate privileges locally.

CVE-2026-70060

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70059

Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.

CVE-2026-70054

Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally.

CVE-2026-70052

Integer overflow or wraparound in Windows PowerShell allows an authorized attacker to execute code locally.