255753 matches found
CVE-2026-97800
A vulnerability in Windows Mobile Broadband arises from an incorrect permission assignment for a critical resource. This flaw allows an authorized attacker to achieve local privilege elevation . While the CVSS 3.1 score reflects a High severity (7.8), specific details regarding the affected compo...
CVE-2026-96183
A vulnerability exists in the Windows Health and Optimized Experiences Service due to missing authentication for a critical function. This flaw allows an authorized attacker to perform a local information disclosure . The vulnerability is assigned CWE-306 and has an official fix available. No spe...
CVE-2026-102227
A heap-based buffer overflow exists in the Windows Resilient File System (ReFS) . This vulnerability allows an authorized attacker to achieve local code execution . Official remediation is available via Microsoft updates.
CVE-2026-108468
A Use after free vulnerability exists in the Windows Installer component. This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability has a CVSS 3.1 base score of 7.0 and is categorized under CWE-416 . No specific exploit details or patch versions are provided...
CVE-2026-108457
An out-of-bounds write vulnerability exists in Microsoft Windows PDF that could allow an unauthorized attacker to execute code over a network . The vulnerability is associated with CWE-787 . While specific technical details regarding the underlying function or file are not provided, the impact is...
CVE-2026-108400
A vulnerability in the Microsoft Windows Codecs Library involving an integer overflow or wraparound allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. Specifically, this affects the HEVC Video Extensions component. The vulnerability carries a HIGH base severity...
CVE-2026-105725
A Use after free vulnerability exists in the Windows Security App . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is categorized under CWE-416 and has a CVSS 3.1 base score of 7.0 (High). Remediation is available via an official fix provided by M...
CVE-2026-110233 rovr through 0.10.3 OS Command Injection via Unquoted Path to cmd.exe
Rovr through 0.10.3 on Windows contains an OS command injection vulnerability that allows attackers to execute commands by crafting malicious file names. Attackers can deliver a file named with shell metacharacters like & alongside a payload, which runs with user privileges when the file is opene...
CVE-2026-110233 rovr through 0.10.3 OS Command Injection via Unquoted Path to cmd.exe
Rovr through 0.10.3 on Windows contains an OS command injection vulnerability that allows attackers to execute commands by crafting malicious file names. Attackers can deliver a file named with shell metacharacters like & alongside a payload, which runs with user privileges when the file is opene...
CVE-2026-110233
The rovr tool (versions through 0.10.3 ) on Windows is vulnerable to an OS command injection vulnerability. The root cause is an unquoted path to cmd.exe triggered when the application opens a file via the open_file function. Attackers can exploit this by providing a file name containing shell me...
Vulnerabilities in Microsoft Windows
Microsoft has identified 1,159 vulnerabilities in Windows. It is too complex to list every vulnerability individually. The 53 most severe vulnerabilities, with a CVSS score of 9 or higher, are listed below. These vulnerabilities give malicious actors the ability to impersonate other users, gain...
2026-10 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Version 21H2 for ARM64 (KB5128924)
2026-10 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Version 21H2 for ARM64 KB5128924...
2026-10 Cumulative Update for Windows 10 Version 22H2 for ARM64-based Systems (KB5126657)
2026-10 Cumulative Update for Windows 10 Version 22H2 for ARM64-based Systems KB5126657...
2026-10 Cumulative Update for Windows 10 Version 21H2 for x64-based Systems (KB5126657)
2026-10 Cumulative Update for Windows 10 Version 21H2 for x64-based Systems KB5126657...
2026-10 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2 for x64 (KB5128925)
2026-10 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2 for x64 KB5128925...
2026-10 Cumulative Update for Windows 10 Version 21H2 for x86-based Systems (KB5126657)
2026-10 Cumulative Update for Windows 10 Version 21H2 for x86-based Systems KB5126657...
2026-10 Cumulative Update for Windows 10 Version 22H2 for x86-based Systems (KB5126657)
2026-10 Cumulative Update for Windows 10 Version 22H2 for x86-based Systems KB5126657...
2026-10 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 21H2 for x64 (KB5128924)
2026-10 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 21H2 for x64 KB5128924...