CVE-2026-69304: Improper Handling of Highly Compressed Data (Data Amplification)

Improper handling of highly compressed data data amplification in ASP.NET Core allows an unauthorized attacker to deny service over a network...

CVE-2026-68846: Use After Free

Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network...

CVE-2026-69273: Improper Access Control

Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-69342: Out-of-bounds Read

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network...

CVE-2026-69809: Missing Release of Memory after Effective Lifetime

Missing release of memory after effective lifetime in Active Directory Domain Services allows an unauthorized attacker to deny service over a network...

CVE-2026-69807: Improper Limitation of a Pathname to a Restricted Directory

Improper limitation of a pathname to a restricted directory 'path traversal' in Windows PowerShell allows an authorized attacker to elevate privileges over a network...

CVE-2026-69334: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network...

CVE-2026-69497: Missing Release of Memory after Effective Lifetime

Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over a network...

CVE-2026-69462: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network...

CVE-2026-69380: Missing Authorization

Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-70575: NULL Pointer Dereference

Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network...

CVE-2026-69562: Out-of-bounds Read

Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network...

CVE-2026-69569: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to deny service over a network...

CVE-2026-69586: Integer Overflow or Wraparound

Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network...

CVE-2026-69427: Out-of-bounds Read

Out-of-bounds read in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges over a network...

CVE-2026-69337: Double Free

Double free in Windows Registry allows an authorized attacker to elevate privileges over a network...

CVE-2026-69775: Use After Free

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges over a network...

CVE-2026-69624: Incomplete List of Disallowed Inputs

Incomplete list of disallowed inputs in Active Directory Certificate Services AD CS allows an authorized attacker to perform tampering over a network...

CVE-2026-69676: Authentication Bypass by Capture-replay

Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network...

CVE-2026-69690: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...