413894 matches found
CVE-2026-87709
Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally...
CVE-2026-87711
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-87713
Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privileges over an adjacent network...
CVE-2026-87706
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...
CVE-2026-87707
Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate privileges locally...
CVE-2026-87708
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-87702
Integer overflow or wraparound in Windows Resource Management MRM allows an authorized attacker to elevate privileges locally...
CVE-2026-87705
Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a security feature over an adjacent network...
CVE-2026-87704
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-87695
Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...
CVE-2026-87696
Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-87700
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-87698
Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally...
CVE-2026-87699
Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally...
CVE-2026-87697
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network...
CVE-2026-87691
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally...
CVE-2026-87692
Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...
CVE-2026-86063
Claude Code is an agentic coding tool. Prior to 2.1.179, the Claude Code and Claude Desktop plugin installation flow runs git checkout for a marketplace-pinned commit without verifying that the resulting HEAD equals the pinned 40-character SHA. An attacker who controls a plugin repository on a Gi...
CVE-2026-85945
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-87693
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-85943
Time-of-check time-of-use toctou race condition in Reliable Multicast Transport Driver RMCAST allows an authorized attacker to elevate privileges locally...
CVE-2026-87694
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-85938
Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally...
CVE-2026-85936
Double free in Windows Shell allows an unauthorized attacker to execute code over a network...
CVE-2026-85941
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-85935
Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally...
CVE-2026-85939
Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network...
CVE-2026-85932
Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...
CVE-2026-85933
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...
CVE-2026-85931
Heap-based buffer overflow in Windows Distributed File System DFS allows an authorized attacker to execute code over a network...
CVE-2026-85930
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally...
CVE-2026-85934
Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally...
CVE-2026-85927
Heap-based buffer overflow in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...
CVE-2026-85926
Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized attacker to execute code over a network...
CVE-2026-85928
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network...
CVE-2026-85920
Time-of-check time-of-use toctou race condition in Windows BitLocker allows an authorized attacker to elevate privileges locally...
CVE-2026-85925
Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network...
CVE-2026-85922
Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-85910
Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally...
CVE-2026-85914
Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally...
CVE-2026-85915
Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-85912
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally...
CVE-2026-85911
Use after free in Windows StateRepository API allows an authorized attacker to elevate privileges locally...
CVE-2026-85918
Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...
CVE-2026-85916
Exposure of private personal information to an unauthorized actor in Azure Active Directory allows an unauthorized attacker to disclose information locally...
CVE-2026-85904
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
CVE-2026-85903
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network...
CVE-2026-85908
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...