CVE-2026-105715: Integer Overflow or Wraparound

Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-105725: Use After Free

Use after free in Windows Security App allows an authorized attacker to elevate privileges locally...

CVE-2026-105598: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

CVE-2026-105595: Out-of-bounds Read

Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

CVE-2026-105013: Deserialization of Untrusted Data

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-97829: Out-of-bounds Read

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

CVE-2026-70122: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use toctou race condition in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

CVE-2026-105005: Out-of-bounds Write

Out-of-bounds write in Windows Schannel allows an unauthorized attacker to execute code over a network...

CVE-2026-97800: Incorrect Permission Assignment for Critical Resource

Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally...

CVE-2026-105009: Incorrect Default Permissions

Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally...

CVE-2026-97839: Out-of-bounds Read

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

CVE-2026-105007: Out-of-bounds Read

An elevation of privilege vulnerability exists in the Network Driver Interface Specification NDIS when ndis.sys fails to check the length of a buffer prior to copying memory to it. To exploit the vulnerability, in a local attack scenario, an attacker could run a specially crafted application to...

CVE-2026-105008: Authentication Bypass by Spoofing

No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-104343: NULL Pointer Dereference

Adobe Framemaker is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in...

Microsoft Windows: CVE-2026-96946: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83909: Windows Win32 Kernel Subsystem Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83897: Windows Win32 Kernel Subsystem Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

CVE-2026-14552: Incorrect Authorization

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with Guest access to read confidential epic content meant to be restricted by external...

CVE-2026-88107: Use After Free

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-84016: Out-of-bounds Write

Out-of-bounds write in Windows EAPHost Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83579: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85368: Windows TCP/IP Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

CVE-2026-84011: Incorrect Authorization

Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally...

CVE-2026-88197: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-83665: Windows DHCP Server Denial of Service Vulnerability

Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network...

Microsoft Windows: CVE-2026-96913: Windows Kernel Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-85832: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Background Intelligent Transfer Service BITS allows an authorized attacker to elevate privileges locally...

CVE-2026-105458: Reliance on Untrusted Inputs in a Security Decision

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user holding a specific granular permission to obtain a GitLab Duo Agent Platform token that...

CVE-2026-55601: Improper Neutralization of Special Elements used in an OS Command

MultiTail is a utility for monitoring multiple log files in one terminal. In version 7.1.5 and earlier, the -ex and -eX execute-on-match feature appended attacker-controlled matched input to a configured command inside double quotes, then checkfilterexec in mt.c passed the constructed command...

CVE-2026-69922: Out-of-bounds Read

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network...

CVE-2026-70229: Incorrect Authorization

Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-70164: Windows TCP/IP Elevation of Privilege Vulnerability

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

CVE-2026-102861: Missing Authorization

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2026-70051: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in Windows SmartScreen allows an authorized attacker to elevate privileges locally...

CVE-2026-70054: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally...

CVE-2026-83688: Heap-based Buffer Overflow

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-70006: Use After Free

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-88179: Windows DWM Core Library Elevation of Privilege Vulnerability

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

CVE-2026-69991: Use After Free

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-69949: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally...

CVE-2026-83854: Missing Authentication for Critical Function

Improper access control in Windows Notification allows an authorized attacker to disclose information locally...

CVE-2026-69802: Weak Authentication

Weak authentication in Network Device Enrollment Service NDES allows an unauthorized attacker to execute code over a network...

CVE-2026-69882: Untrusted Search Path

Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83828: Windows MIDI Service Module Elevation of Privileges Vulnerability

Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

CVE-2026-69521: Integer Overflow or Wraparound

Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network...

CVE-2026-69935: Use After Free

Use after free in Windows Storage allows an authorized attacker to elevate privileges locally...

CVE-2026-85936: Double Free

Double free in Windows Shell allows an unauthorized attacker to execute code over a network...

CVE-2026-63351: Improper Neutralization of Input During Web Page Generation

Affected devices do not properly validate and sanitize visual properties of calculated signals contained in imported CSV trace files before rendering them on the Trace page. This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into...

CVE-2026-84015: Heap-based Buffer Overflow

Heap-based buffer overflow in Remote Access Point-to-Point Protocol PPP EAP-TLS allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-85810: Windows Telephony Server Elevation of Privilege Vulnerability

Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally...