CVE-2026-61936

Missing authorization in Windows Defender Firewall Service allows an authorized attacker to bypass a security feature locally...

CVE-2026-61366

Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally...

CVE-2026-61353

Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

CVE-2026-59122

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

CVE-2026-59128

Out-of-bounds read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...

CVE-2026-57105

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-48435

CAI Content Credentials is affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not...

UBUNTU-CVE-2026-62909

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-48375

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in an application denial-of-service. A low-privileged attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user...

DEBIAN-CVE-2026-20713

Always-incorrect control flow implementation in some firmware for some IntelR XeonR processors may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via...

EUVD-2026-56778

Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-68817

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

EUVD-2026-56747

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-65798 Windows DNS Elevation of Privilege Vulnerability

...

CVE-2026-65797 Windows DNS Elevation of Privilege Vulnerability

...

CVE-2026-65780 Windows Autopilot Elevation of Privilege Vulnerability

...

EUVD-2026-56730

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-65773

CVE-2026-65773 concerns improper access control in Windows Kernel, enabling a locally authenticated attacker to elevate privileges. Affected software/component: Windows Kernel (details not expanded in provided documents). Root cause: incorrect access control checks; impact: local privilege escala...

CVE-2026-62882 Microsoft Outlook Spoofing Vulnerability

...

CVE-2026-64911

CVE-2026-64911 is an integer overflow/wraparound vulnerability in Microsoft Office that enables local code execution by an attacker with user interaction. The root cause is an overflow in a Microsoft Office component, enabling a privileged or unauthenticated user to run arbitrary code locally onc...