CVE-2026-65801: Server-Side Request Forgery (SSRF)

Server-side request forgery ssrf in Microsoft Exchange Online allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-69543: Server-Side Request Forgery (SSRF)

Server-side request forgery ssrf in Azure Virtual Machines allows an authorized attacker to elevate privileges over a network...

CVE-2026-62727: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

CVE-2026-56686: Improper Neutralization of Special Elements used in an OS Command

Dell ObjectScale, versions prior to 4.3.0.1, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-62732: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

CVE-2026-56174: Untrusted Search Path

Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally...

CVE-2026-65814: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-65813: Server-Side Request Forgery (SSRF)

Server-side request forgery ssrf in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-62758: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-62832: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...

CVE-2026-62799: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally...

CVE-2026-62778: Use After Free

Use after free in Windows DNS allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-62741: Integer Underflow (Wrap or Wraparound)

Integer underflow wrap or wraparound in Windows HTTP.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-65781: Use After Free

Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally...

CVE-2026-61357: Use After Free

Use after free in Application Information Services allows an authorized attacker to elevate privileges locally...

CVE-2026-61364: Missing Authentication for Critical Function

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...

CVE-2026-61359: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally...

CVE-2026-70355: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2026-70344: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-65672: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally...