CVE-2026-83747

Out-of-bounds read in Windows Error Reporting allows an authorized attacker to disclose information locally...

Microsoft Office SharePoint Elevation of Privilege Vulnerability

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

Microsoft Windows: CVE-2026-69954: Windows Overlay Filter Information Disclosure Vulnerability

Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally...

CVE-2026-72943

Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...

CVE-2026-69834

Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally...

CVE-2026-69615

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-69536

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...

CVE-2026-69474

Use after free in Windows Overlay Filter allows an authorized attacker to disclose information over a network...

CVE-2026-69406

Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally...

CVE-2026-67645

CVE-2026-67645 is an out-of-bounds read in Microsoft SQL Server that allows an authorized attacker to disclose information over a network . The CVSS 3.1 base score is 6.5 (MEDIUM) , reflecting low complexity, low privileges required, and high confidentiality impact with no integrity or availabili...

EUVD-2026-73694

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-69592

CVE-2026-69592 is a heap-based buffer overflow in the Windows Universal Disk Format File System (UDFS) driver that allows an authorized local attacker to escalate privileges . The vulnerability is rated CVSS 3.1: 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating local at...

CVE-2026-69569

CVE-2026-69569 is an untrusted pointer dereference in Windows Print Spooler Components that allows an authorized attacker to cause a denial of service over a network. The CVSS v3.1 score is 5.7 (Medium) , with high availability impact but no confidentiality or integrity impact. Exploitation requi...

CVE-2026-69536

CVE-2026-69536 is a use-after-free vulnerability in Windows Remote Desktop Services that allows an authorized attacker to achieve remote code execution over a network. The CVSS v3.1 score is 7.1 (HIGH) , with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating that while exploitation requ...

CVE-2026-69416

CVE-2026-69416 is a buffer over-read in Windows DHCP Server that allows an authorized attacker with low privileges on an adjacent network to cause a denial of service , with high availability impact and no confidentiality or integrity impact (CVSS 3.1: 5.7 MEDIUM ). CISA assesses exploitation as ...

EUVD-2026-73389

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-67379

CVE-2026-67379 is a stack-based buffer overflow in Microsoft SQL Server that allows an authorized attacker (low privileges) to achieve remote code execution over the network. The CVSS 3.1 score is 8.5 (HIGH) with a scope change, reflecting high impact on confidentiality, integrity, and availabili...

CVE-2026-69273

CVE-2026-69273 is an improper access control vulnerability in Microsoft Office SharePoint that allows an authorized attacker to execute code over a network. The CVSS 3.1 base score is 8.8 (HIGH) , with a network attack vector, low complexity, and low required privileges, resulting in high impact ...

CVE-2026-72945

CVE-2026-72945 is an information disclosure vulnerability in Windows Task Scheduler , caused by the use of an uninitialized resource . An authorized local attacker with low privileges can exploit this to disclose information, with high confidentiality impact and no integrity or availability impac...

CVE-2026-69451

Windows Management Instrumentation (WMI) contains a use-after-free vulnerability that allows an authorized attacker to escalate privileges over a network. The CVSS 3.1 score is 7.1 (HIGH) with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires network access , low priv...