CVE-2026-105731: Use of Uninitialized Resource

Use of uninitialized resource in Microsoft Graphics Component allows an authorized attacker to disclose information locally...

CVE-2026-105732: Stack-based Buffer Overflow

Stack-based buffer overflow in SysInternals allows an authorized attacker to elevate privileges locally...

CVE-2026-108399: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

CVE-2026-70235: Missing Authorization

Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally...

CVE-2026-96183: Missing Authentication for Critical Function

Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally...

Microsoft Office: CVE-2026-102867: Microsoft Office Word Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...

Microsoft Office: CVE-2026-105591: Microsoft Office Access Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

Microsoft Office: CVE-2026-105592: Microsoft Office Access Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

Microsoft Office: CVE-2026-105593: Microsoft Office Access Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

Microsoft Office: CVE-2026-105596: Microsoft Office Access Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

Microsoft Office: CVE-2026-105597: Microsoft Office Access Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

Microsoft Office: CVE-2026-105717: Microsoft Office Access Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-105723: Windows Distributed File System (DFS) Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Distributed File System DFS allows an unauthorized attacker to elevate privileges over a network...

Microsoft Windows: CVE-2026-108399: Windows Hyper-V Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70235: Windows Event Tracing Spoofing Vulnerability

Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally...

Microsoft Windows: CVE-2026-96183: Windows Health and Optimized Experiences Service Information Disclosure Vulnerability

Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally...

CVE-2026-103558: Deadlock

Deadlock in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to deny service over a network...

CVE-2026-100116: Improper Certificate Validation

CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploit depends on conditions beyond the attacker's...

CVE-2026-71385: Incorrect Authorization

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. The vulnerable component is restricted to an...

CVE-2026-83916: Double Free

Double free in Windows Error Reporting allows an authorized attacker to execute code locally...

CVE-2026-85800: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-83840: Weak Authentication

Weak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-83826: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-83758: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code locally...

CVE-2026-85354: Use After Free

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

Microsoft Office: CVE-2026-97739: Microsoft Office Excel Remote Code Execution Vulnerability

Integer underflow wrap or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

CVE-2026-70090: Use of Uninitialized Resource

Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose information locally...

CVE-2026-97750: Stack-based Buffer Overflow

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-69783: Windows Update Elevation of Privilege Vulnerability

External control of file name or path in Windows Update allows an authorized attacker to elevate privileges locally...

CVE-2026-108132: Double Free

Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally...

CVE-2026-106618: Incorrect Authorization

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction...

CVE-2026-96300: Allocation of Resources Without Limits or Throttling

Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network...

CVE-2026-70127: Use After Free

Use after free in DNS Server allows an unauthorized attacker to execute code over a network...

CVE-2026-69783: External Control of File Name or Path

External control of file name or path in Windows Update allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83916: Windows Error Reporting Remote Code Execution Vulnerability

Double free in Windows Error Reporting allows an authorized attacker to execute code locally...

Microsoft Windows: CVE-2026-85834: Windows TCP/IP Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83748: Windows Error Reporting Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-83758: Windows Error Reporting Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code locally...

Microsoft Windows: CVE-2026-85354: Windows Error Reporting Elevation of Privilege Vulnerability

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83840: Windows Error Reporting Elevation of Privilege Vulnerability

Weak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-110005: Undefined Security Weakness

The periphery agent's container-management functionality of Komodo version 2.2.0 contains an OS command injection vulnerability. An authenticated low-privileged user with Execute, or Read plus Logs, permission on a managed server can supply shell metacharacters in a container name processed by th...

Microsoft Windows: CVE-2026-69898: Windows Kernel Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-88089: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally...

Microsoft Windows: CVE-2026-83674: Active Directory Federation Services (AD FS) Spoofing Vulnerability

Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

Microsoft Windows: CVE-2026-70005: Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability

Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to bypass a security feature over a network...

Microsoft Windows: CVE-2026-87691: Windows Management Services Elevation of Privilege Vulnerability

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally...

CVE-2026-103928: External Control of File Name or Path

Metabase is an open source business intelligence and analytics platform. From 1.55.0 until 1.58.16, 1.59.13, 1.60.9, and 1.61.4, native queries and actions against an H2 data source are passed through without restricting host-facing built-in functions. A user authorized to run native queries or...

CVE-2026-103823: Stack-based Buffer Overflow

Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user...

CVE-2026-103821: Out-of-bounds Write

Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-103549: Incorrect Authorization

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with maintainer-role permissions to remove certain package registry metadata that...