CVE-2026-62902

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network...

CVE-2026-62909

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-62908

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Backup Engine allows an authorized attacker to elevate privileges locally...

CVE-2026-62910

Improper control of resource identifiers 'resource injection' in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-62894

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

CVE-2026-62898

Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network...

CVE-2026-62888

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

CVE-2026-62886

Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally...

CVE-2026-62883

Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally...

CVE-2026-62886

Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally...

CVE-2026-62882

Insufficiently protected credentials in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-62881

Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally...

CVE-2026-62880

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2026-62876

Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-62842

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally...

CVE-2026-62832

Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...

CVE-2026-62839

Insufficiently protected credentials in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-62824

Stack-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-62829

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-62812

Improper link resolution before file access 'link following' in Windows DHCP Server allows an authorized attacker to elevate privileges locally...