17844 matches found
VulnCheck KEV: CVE-2026-32996
This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation...
(0Day) Microsoft Windows HTTP Proxy Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of...
Exploit for CVE-2026-32996
CVE-2026-32996 A vu...
Windows Push Notifications Local Privilege Escalation Research
Microsoft Windows contains a race condition in the Push Notifications service that can result in local privilege escalation. Research into patched and unpatched versions of wpncore.dll identifies a use-after-free condition involving PresentationEndpointFacade methods during notification platform...
PT-2026-89285
Today is Patch Tuesday and it's a significant one. 966 vulnerabilities patched in the official count, with another 204 fixed separately earlier in September across Azure, Entra ID, Edge, and Copilot Studio. By any count this is the biggest single security release Microsoft has ever shipped. Two o...
Microsoft fixes record 964 flaws, including 2 exploited zero-days
Microsoft’s September 2026 Patch Tuesday addresses 964 CVEs, including 104 rated Critical and 860 rated Important, making it the company’s largest Patch Tuesday release on record. Microsoft lists 974 CVEs in its full September security release. However, 10 of those affect cloud services or involv...
Vulnerabilities in Microsoft Windows
Microsoft has identified 666 vulnerabilities in Windows. Malicious actors can exploit these vulnerabilities to carry out attacks that can cause various types of damage, as listed in the table below. Microsoft has identified 666 vulnerabilities in Windows. The 32 most severe vulnerabilities are...
Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days
Microsoft on Tuesday broke Patch Tuesday records by addressing an earth-shattering 974 vulnerabilities spanning its software portfolio, including two flaws that it said have been actively exploited in the wild. These include 723 flaws in Windows, 111 in Office and Office 2016, 62 in SQL, and 22 i...
CVE-2026-72962
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-70145
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...
CVE-2026-69601
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...
CVE-2026-69586
Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network...
CVE-2026-69531
Unintended proxy or intermediary 'confused deputy' in Microsoft Windows Speech allows an authorized attacker to perform tampering locally...
EUVD-2026-73710
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...
CVE-2026-69554
CVE-2026-69554 is a missing authentication vulnerability in the Microsoft Windows Search Component , allowing a local, low-privilege attacker to perform tampering with high integrity impact (CVSS v3.1: 5.5 MEDIUM , AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N). No confidentiality or availability impact is...
EUVD-2026-72995
Unintended proxy or intermediary 'confused deputy' in Microsoft Windows Speech allows an authorized attacker to perform tampering locally...
CVE-2026-69531
CVE-2026-69531 is a confused deputy vulnerability in Microsoft Windows Speech . An authorized attacker with low privileges can exploit an unintended proxy or intermediary relationship to perform local tampering (high integrity impact, no confidentiality or availability impact). The CVSS 3.1 base ...
EUVD-2026-73165
Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...
