CVE-2026-69840

Use after free in Windows Certificates allows an authorized attacker to elevate privileges locally...

CVE-2026-69877

Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network...

CVE-2026-69880

Access of resource using incompatible type 'type confusion' in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-69783

External control of file name or path in Windows Update allows an authorized attacker to elevate privileges locally...

CVE-2026-69798

Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69766

Use after free in Windows Storage allows an authorized attacker to elevate privileges locally...

CVE-2026-69789

Heap-based buffer overflow in Reliable Multicast Transport Driver RMCAST allows an unauthorized attacker to execute code over an adjacent network...

CVE-2026-69795

Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privileges locally...

CVE-2026-69802

Weak authentication in Network Device Enrollment Service NDES allows an unauthorized attacker to execute code over a network...

CVE-2026-69830

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

CVE-2026-69721

Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally...

CVE-2026-69763

Use after free in Windows Storage allows an authorized attacker to elevate privileges locally...

CVE-2026-69765

Use after free in Windows Storport Miniport Driver allows an unauthorized attacker to execute code over a network...

CVE-2026-69736

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Credential Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-69733

Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally...

CVE-2026-69743

Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69650

Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally...

CVE-2026-69673

Improper link resolution before file access 'link following' in Windows Update allows an authorized attacker to elevate privileges locally...

CVE-2026-69651

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network...

CVE-2026-69675

Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally...

CVE-2026-69705

Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network...

CVE-2026-69644

Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information locally...

CVE-2026-69718

Improper neutralization of special elements used in a command 'command injection' in Windows Update allows an authorized attacker to elevate privileges locally...

CVE-2026-69639

Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network...

CVE-2026-69633

Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally...

CVE-2026-69596

Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69634

Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network...

CVE-2026-69635

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges with a physical attack...

CVE-2026-69640

Incorrect authorization in Windows Key Distribution Center allows an authorized attacker to bypass a security feature over a network...

CVE-2026-69452

Use after free in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network...

CVE-2026-69521

Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network...

CVE-2026-69454

Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network...

CVE-2026-69471

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-69506

Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally...

CVE-2026-69577

Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network...

CVE-2026-69326

Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network...

CVE-2026-69370

Improper neutralization of special elements used in a command 'command injection' in Visual Studio Code allows an unauthorized attacker to execute code over a network...

CVE-2026-69354

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-69363

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network...

CVE-2026-69387

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-62687

Improper link resolution before file access 'link following' in Windows Backup Engine allows an authorized attacker to disclose information locally...

CVE-2026-61931

Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally...

CVE-2026-62879

Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally...

CVE-2026-66822

Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network...

CVE-2026-68836

Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally...

CVE-2026-58280

Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network...

CVE-2026-49785

Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally...

CVE-2026-54086

SLE API for Java is an implementation of CCSDS Space Link Extension Services. Prior to 5.1.7, the ISP1 PDU handling path decodes an attacker-controlled body length and allocates a byte array without an upper bound, while malformed or truncated input can also terminate reads unexpectedly, allowing...

CVE-2026-59116

Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-110239

Rapyd Admin before 9.20.0 contains a stored cross-site scripting vulnerability in the x-rpd::rich-text Blade component that outputs bound model values as raw HTML without sanitisation. Authenticated users can set the bound property through the Livewire client API to store JavaScript that executes...