17293 matches found
CVE-2026-92254: Improper Input Validation
Missing Authorization in the IOCTL handlers of the wsdkd.sys kernel drivers in Watchdog WatchDog Antivirus 1.8.640 driver versions 1.3.0.0 and earlier on Microsoft Windows allows local, low-privileged attackers to delete arbitrary files with SYSTEM privileges, bypassing NTFS access controls and...
VulnCheck KEV: CVE-2026-32996
This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation...
Exploit for CVE-2026-32996
CVE-2026-32996 A vu...
Microsoft fixes record 964 flaws, including 2 exploited zero-days
Microsoft’s September 2026 Patch Tuesday addresses 964 CVEs, including 104 rated Critical and 860 rated Important, making it the company’s largest Patch Tuesday release on record. Microsoft lists 974 CVEs in its full September security release. However, 10 of those affect cloud services or involv...
Vulnerabilities in Microsoft Windows
Microsoft has identified 666 vulnerabilities in Windows. Malicious actors can exploit these vulnerabilities to carry out attacks that can cause various types of damage, as listed in the table below. Microsoft has identified 666 vulnerabilities in Windows. The 32 most severe vulnerabilities are...
Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days
Microsoft on Tuesday broke Patch Tuesday records by addressing an earth-shattering 974 vulnerabilities spanning its software portfolio, including two flaws that it said have been actively exploited in the wild. These include 723 flaws in Windows, 111 in Office and Office 2016, 62 in SQL, and 22 i...
CVE-2026-72962
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-70145
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...
CVE-2026-69601
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...
CVE-2026-69586
Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network...
CVE-2026-69531
Unintended proxy or intermediary 'confused deputy' in Microsoft Windows Speech allows an authorized attacker to perform tampering locally...
EUVD-2026-73710
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...
CVE-2026-69554
CVE-2026-69554 is a missing authentication vulnerability in the Microsoft Windows Search Component , allowing a local, low-privilege attacker to perform tampering with high integrity impact (CVSS v3.1: 5.5 MEDIUM , AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N). No confidentiality or availability impact is...
EUVD-2026-72995
Unintended proxy or intermediary 'confused deputy' in Microsoft Windows Speech allows an authorized attacker to perform tampering locally...
CVE-2026-69531
CVE-2026-69531 is a confused deputy vulnerability in Microsoft Windows Speech . An authorized attacker with low privileges can exploit an unintended proxy or intermediary relationship to perform local tampering (high integrity impact, no confidentiality or availability impact). The CVSS 3.1 base ...
EUVD-2026-73165
Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...
Windows Work Folder Service Remote Code Execution Vulnerability
Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execute code over a network...
Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability
Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally...