Microsoft CVEs, last 30 days (1,500 CVEs)
CVE Title CVSS Type Status CVE-2026-96951 Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security featur... 8.8 Unknown/Unlisted Weakness Exploited CVE-2026-124194 Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network. 6.5 Unknown/Unlisted Weakness Exploited CVE-2026-109469 Authorization bypass through user-controlled key in Entra Device Registration allows an unauthorized attacker to elevate privileges over a network. 10.0 Unknown/Unlisted Weakness Not exploited CVE-2026-97785 Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network. 10.0 Improper Authentication Not exploited CVE-2026-83938 Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker to elevate privileges over a network. 10.0 Unknown/Unlisted Weakness Not exploited CVE-2026-110063 Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual Machines allows an unauthorized attacker to elevate privileges ... 10.0 Unknown/Unlisted Weakness Not exploited CVE-2026-120002 Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. 9.9 Unknown/Unlisted Weakness Not exploited CVE-2026-109467 Improper authentication in Azure DevOps allows an authorized attacker to execute code over a network. 9.9 Improper Authentication Not exploited CVE-2026-96157 Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96078 Heap-based buffer overflow in Microsoft Color Management allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96067 Integer overflow or wraparound in Microsoft Color Management allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-95901 Double free in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-95882 Stack-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88243 Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to execute code over a network. 9.8 Out-of-bounds Read Not exploited CVE-2026-88234 Release of invalid pointer or reference in Windows iSCSI allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88218 Double free in Windows DNS allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85844 Authentication bypass using an alternate path or channel in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-66801 Heap-based buffer overflow in Xbox allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-119990 Missing authentication for critical function in Azure OpenAI allows an unauthorized attacker to elevate privileges over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-119958 Out-of-bounds write in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-116945 Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-116928 Out-of-bounds write in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-114160 Server-side request forgery (ssrf) in Azure Managed Grafana allows an unauthorized attacker to elevate privileges over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-112967 Heap-based buffer overflow in Windows Xbox Live Networking Service allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97816 Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97814 Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97815 Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97805 Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network. 9.8 Improper Input Validation Not exploited CVE-2026-97749 Double free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97016 Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96934 Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96924 Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96909 Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96864 Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96320 Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96219 Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96113 Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96096 Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88178 Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88156 Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88102 Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85928 Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85809 Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85814 Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85806 Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85792 Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-84015 Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83935 Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83910 Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83869 Integer underflow (wrap or wraparound) in DNS Server allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83782 Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83780 Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83770 Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83748 Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83693 Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83578 Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83517 Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83519 Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70300 Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70291 Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70242 Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70157 Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70153 Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70147 Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70096 Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70024 Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network. 9.8 Improper Input Validation Not exploited CVE-2026-69883 Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-69886 Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-69705 Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-69634 Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-69639 Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-105010 Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-105016 Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-102210 Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-100219 Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-100222 Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-100202 Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. 9.8 Unknown/Unlisted Weakness Not exploited CVE-2026-120779 Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network. 9.6 Code Injection Not exploited CVE-2026-102238 Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to execute code over a netw... 9.6 Path Traversal Not exploited CVE-2026-88092 Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a net... 9.4 Unknown/Unlisted Weakness Not exploited CVE-2026-105769 kaniko before 1.25.20 can send a Microsoft Entra ID (Azure AD) access token for Azure Resource Manager to an attacker-controlled registry host. 9.3 Unknown/Unlisted Weakness Not exploited CVE-2023-22793 A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the Veeam Virtualization Extensions service of Ve... 9.3 Unknown/Unlisted Weakness Not exploited CVE-2026-114119 Best Practice Software Bp Premier before 1.14.1.1128 uses a hardcoded Microsoft SQL Server administrative password that is shared across all installations and c... 9.3 Use of Hard-coded Credentials Not exploited CVE-2026-70279 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spo... 9.3 Cross-site Scripting (XSS) Not exploited CVE-2026-118740 Missing authorization in Aspire allows an unauthorized attacker to bypass a security feature over a network. 9.1 Missing Authorization Not exploited CVE-2026-114162 Incorrect authorization in Microsoft Graph allows an authorized attacker to elevate privileges over a network. 9.1 Unknown/Unlisted Weakness Not exploited CVE-2026-105014 Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an unauthorized attacker to execute code over a ne... 9.1 Unknown/Unlisted Weakness Not exploited CVE-2026-96252 Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a netw... 9.1 Unknown/Unlisted Weakness Not exploited CVE-2026-70188 Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature ov... 9.1 Unknown/Unlisted Weakness Not exploited CVE-2026-95962 Use after free in Windows Virtual Filtering Platform (VFP) allows an unauthorized attacker to execute code over a network. 9.0 Unknown/Unlisted Weakness Not exploited CVE-2026-80095 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to elevate pri... 9.0 Cross-site Scripting (XSS) Not exploited CVE-2026-114146 Incorrect authorization in ASP.NET Core allows an authorized attacker to elevate privileges over a network. 9.0 Unknown/Unlisted Weakness Not exploited CVE-2026-109454 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spo... 9.0 Cross-site Scripting (XSS) Not exploited CVE-2026-106076 A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam Backup for Microsoft 365 ... 9.0 SQL Injection Not exploited CVE-2026-85818 Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to perform spoofing over a network. 9.0 Unknown/Unlisted Weakness Not exploited CVE-2026-105008 No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network. 9.0 Unknown/Unlisted Weakness Not exploited CVE-2026-96164 Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96064 Heap-based buffer overflow in DNS Server allows an authorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96020 Out-of-bounds write in DNS Server allows an authorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96010 Integer underflow (wrap or wraparound) in HID Parser Library allows an authorized attacker to elevate privileges over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96002 Heap-based buffer overflow in DNS Server allows an authorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-95996 Integer underflow (wrap or wraparound) in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-95975 Heap-based buffer overflow in Windows Performance Counters allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-95960 Access of resource using incompatible type ('type confusion') in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges loc... 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-94511 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88249 Use after free in Windows Client for NFS allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88229 Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88222 Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85923 Authorization bypass through user-controlled key in Azure DevOps Server allows an authorized attacker to elevate privileges over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88176 Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. 8.8 Missing Authorization Not exploited CVE-2026-85838 Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85839 Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70094 Untrusted search path in Visual Studio Code allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-67632 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-67637 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-67646 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-67387 Untrusted pointer dereference in SQL Server allows an authorized attacker to elevate privileges over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-67391 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-67372 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-67374 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-67375 Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-125136 Heap-based buffer overflow in Windows Network Connected Devices Auto-Setup Service allows an unauthorized attacker to execute code over an adjacent network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-124228 Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office Outlook allows an authorized attacker to execute code over a ... 8.8 Path Traversal Not exploited CVE-2026-124226 Execution with unnecessary privileges in Windows PowerShell allows an authorized attacker to bypass a security feature locally. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-124187 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-124176 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-124174 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-123391 Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-123394 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-123385 Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-123390 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-123380 Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-123381 Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-123382 Untrusted pointer dereference in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-123383 Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-123384 Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-123375 Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-123376 Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-123377 Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-122475 Untrusted pointer dereference in Windows Storage Spaces Controller allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-122194 Null pointer dereference in Microsoft Defender allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-122198 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-122176 Heap-based buffer overflow in Windows SMB allows an authorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-122171 Heap-based buffer overflow in Microsoft XPS Document Converter allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-121665 Trust boundary violation in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-121663 Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-120789 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-120790 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-120791 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-120785 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-120786 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-120788 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-120003 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-120005 Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-120001 Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-119983 Server-side request forgery (ssrf) in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-119986 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-119975 Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to execute code over ... 8.8 Cross-site Scripting (XSS) Not exploited CVE-2026-119969 Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-119950 Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to elevate privileges over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-119934 Double free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-119925 Out-of-bounds read in Windows Text Services Framework allows an authorized attacker to elevate privileges locally. 8.8 Out-of-bounds Read Not exploited CVE-2026-119916 Heap-based buffer overflow in Windows Input System allows an authorized attacker to elevate privileges locally. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-119908 Integer underflow (wrap or wraparound) in Windows Storage Spaces Controller allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-119881 Heap-based buffer overflow in Microsoft XPS Document Converter allows an unauthorized attacker to elevate privileges over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-119862 Out-of-bounds read in Windows Input System allows an authorized attacker to elevate privileges locally. 8.8 Out-of-bounds Read Not exploited CVE-2026-119839 Untrusted search path in Remote Desktop Client allows an unauthorized attacker to elevate privileges over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-119824 Missing authentication for critical function in Remote Desktop Client allows an unauthorized attacker to perform tampering over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-119392 Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to elevate privileges over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118745 Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118729 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118730 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118731 Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118732 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118725 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to elevate privileges over a network. 8.8 Out-of-bounds Read Not exploited CVE-2026-118726 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118721 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118722 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118724 Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118715 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to elevate privileges over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118716 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118717 Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118718 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118719 Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118720 Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118708 Release of invalid pointer or reference in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118709 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118710 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118711 Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118712 Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118713 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118714 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118704 Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118705 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118706 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118707 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118700 Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118701 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118702 Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118703 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118296 Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118297 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118298 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118299 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118302 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118292 Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118293 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Out-of-bounds Read Not exploited CVE-2026-118294 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118295 Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118283 Stack-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118229 Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118232 Out-of-bounds read in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. 8.8 Out-of-bounds Read Not exploited CVE-2026-118277 Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118278 Out-of-bounds read in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. 8.8 Out-of-bounds Read Not exploited CVE-2026-118279 Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118225 Inclusion of functionality from untrusted control sphere in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118226 Stack-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118227 Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118228 Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118219 Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118221 Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118216 Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118217 Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118218 Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118154 Reliance on untrusted inputs in a security decision in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118207 Improper input validation in Microsoft Exchange Server allows an authorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118149 Improper control of generation of code ('code injection') in Microsoft Exchange Server allows an authorized attacker to execute code over a network. 8.8 Code Injection Not exploited CVE-2026-118150 Authorization bypass through user-controlled key in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118146 Incorrect authorization in Active Directory Domain Services allows an authorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118141 Stack-based buffer overflow in Windows Client for NFS allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118120 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a ne... 8.8 SQL Injection Not exploited CVE-2026-118109 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a ne... 8.8 SQL Injection Not exploited CVE-2026-118110 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a ne... 8.8 SQL Injection Not exploited CVE-2026-118105 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a ne... 8.8 SQL Injection Not exploited CVE-2026-116941 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-116942 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-116946 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-116934 Untrusted pointer dereference in SQL Server allows an authorized attacker to elevate privileges over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-116930 Improper neutralization of special elements used in a command ('command injection') in SQL Server allows an unauthorized attacker to execute code over a network... 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-116927 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-116925 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-116722 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-116923 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-116720 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-116719 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-116717 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-114171 User interface (ui) misrepresentation of critical information in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-114169 Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-114164 Integer underflow (wrap or wraparound) in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-114158 Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-114159 Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-114151 Deserialization of untrusted data in Visual Studio allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-114152 Stack-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-113863 Heap-based buffer overflow in Windows DHCP Client allows an unauthorized attacker to elevate privileges over an adjacent network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-113814 Untrusted pointer dereference in Windows Storage Spaces Controller allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-113760 Heap-based buffer overflow in Windows XWizard Framework allows an authorized attacker to elevate privileges locally. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-112805 Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-112762 Relative path traversal in Windows Print Spooler Components allows an unauthorized attacker to elevate privileges over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-112737 Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-112739 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-112741 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-112730 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-112733 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-112734 Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-112735 Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-112724 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-112726 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-112727 Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-112728 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-112729 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-112718 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-112719 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-112721 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-112722 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-112723 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-111309 Release of invalid pointer or reference in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-111310 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-112714 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-112715 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-112716 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-112717 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-111304 Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-111305 Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-111306 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-111307 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-111308 Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-111295 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-111298 Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Out-of-bounds Read Not exploited CVE-2026-111299 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-111301 Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-111289 Use after free in Microsoft Office allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-111290 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-111294 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-110068 Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-111285 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-110062 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-110064 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-110067 Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-110055 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-110058 Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-110059 Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-110060 Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-110061 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-110050 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-110054 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-110047 Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-110048 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-109505 Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-110043 Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-110044 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-109501 Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Out-of-bounds Read Not exploited CVE-2026-109502 Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-109503 Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-109493 Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-109494 Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-109496 Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-109499 Access of resource using incompatible type ('type confusion') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-109492 Authorization bypass through user-controlled key in Microsoft MCP Gateway allows an authorized attacker to elevate privileges over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-109472 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-109463 Deserialization of untrusted data in Windows DNS allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-109464 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-108411 Heap-based buffer overflow in Windows ODBC Driver allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-108401 Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-105581 Stack-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-105542 Untrusted pointer dereference in Windows NTFS allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-105534 Heap-based buffer overflow in Windows Storage allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-105518 Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-105499 Out-of-bounds read in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-105495 Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-105496 Double free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-105497 Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-105498 Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-105490 Stack-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-105491 Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-105493 Stack-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-105023 Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-105026 Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-105020 Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-105021 Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-107239 A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution (RCE) on servers running the Veeam Managem... 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96203 Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96192 Use after free in Microsoft Edge for iOS allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96196 Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96198 Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96199 Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88077 Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85890 Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85897 Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85898 Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83831 Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-108445 Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-108446 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-108447 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-108449 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-108450 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-108451 Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-108452 Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over... 8.8 Path Traversal Not exploited CVE-2026-108437 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-108439 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-108440 Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-108441 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-108442 Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-108443 Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-108444 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-108428 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-108429 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-108430 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-108431 Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-108432 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-108426 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-108427 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Improper Input Validation Not exploited CVE-2026-88164 Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. 8.8 Missing Authorization Not exploited CVE-2026-94512 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-65674 Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70098 Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network. 8.8 Missing Authorization Not exploited CVE-2026-102855 Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-102235 Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97780 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97781 Improper neutralization of special elements used in a command ('command injection') in Microsoft Office OneNote allows an unauthorized attacker to execute code ... 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97772 Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97773 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97775 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97776 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97777 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97778 Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97763 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97765 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97766 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97767 Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97768 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97769 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Improper Input Validation Not exploited CVE-2026-97770 Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97771 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97755 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Out-of-bounds Read Not exploited CVE-2026-97756 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97757 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97758 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97759 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97761 Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97762 Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97747 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97748 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97750 Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97751 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97752 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97753 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97754 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97739 Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97741 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97742 Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97745 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97746 Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97010 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97011 Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97012 Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97017 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97738 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97003 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97004 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97007 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97008 Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96957 Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96952 Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96943 Integer overflow or wraparound in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96913 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96914 Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96917 Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96251 Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96235 Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96224 Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96230 Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to execute code over a netw... 8.8 Cross-site Scripting (XSS) Not exploited CVE-2026-96202 Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96044 No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88219 Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88196 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88197 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88198 Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. 8.8 Missing Authorization Not exploited CVE-2026-88200 Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88202 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88186 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88165 Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88166 Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88159 Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network. 8.8 Out-of-bounds Read Not exploited CVE-2026-88163 Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88155 Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88157 Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88150 Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88144 Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88145 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88136 Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88142 Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88112 Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88114 Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88115 Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network. 8.8 Out-of-bounds Read Not exploited CVE-2026-88116 Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88073 Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88075 Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate... 8.8 SQL Injection Not exploited CVE-2026-87697 Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85936 Double free in Windows Shell allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85931 Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85903 Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85905 Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate privileges locally. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85900 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85817 Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85363 Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85339 Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83934 Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83928 Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83929 Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83923 Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83891 Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Improper Input Validation Not exploited CVE-2026-83889 Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83874 Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83862 Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over an adjacent network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83851 Heap-based buffer overflow in Windows Partition Management Driver allows an unauthorized attacker to elevate privileges over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83797 Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network. 8.8 Out-of-bounds Read Not exploited CVE-2026-83789 Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83784 Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83777 Heap-based buffer overflow in Windows Bluetooth Service allows an unauthorized attacker to elevate privileges over an adjacent network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83778 Heap-based buffer overflow in Microsoft Internet Messaging API allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83771 Use after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate privileges over an adjacent network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83759 Improper control of generation of code ('code injection') in Windows Encrypting File System (EFS) allows an authorized attacker to execute code over a network. 8.8 Code Injection Not exploited CVE-2026-83728 Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83725 Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83716 Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83688 Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83643 Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83642 Access of resource using incompatible type ('type confusion') in DNS Server allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83523 Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83520 Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-77910 Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-77496 Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-77902 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70580 Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70301 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70302 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70343 Heap-based buffer overflow in Microsoft MPEG-2 Video Extension allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70297 Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70299 Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70287 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70282 Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70275 Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70266 Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate pri... 8.8 SQL Injection Not exploited CVE-2026-70268 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70256 Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70257 Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70258 Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70262 Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70254 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Out-of-bounds Read Not exploited CVE-2026-70250 Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70246 Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70215 Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70210 Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70185 Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature locally. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70174 Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70167 Access of resource using incompatible type ('type confusion') in DNS Server allows an authorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70158 Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70149 Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information... 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70089 Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70068 Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to elevate privileges over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70069 Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70035 Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70007 Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-69985 Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-69943 Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over... 8.8 Path Traversal Not exploited CVE-2026-69945 Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally. 8.8 Missing Authorization Not exploited CVE-2026-69918 Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-69765 Use after free in Windows Storport Miniport Driver allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-69521 Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-69326 Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-69370 Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a... 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-108471 Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-108463 Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-108467 Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-108400 Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-108458 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-108398 Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-105733 Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-105727 External control of file name or path in Dynamics Business Central allows an authorized attacker to elevate privileges over a network. 8.8 Path Traversal Not exploited CVE-2026-105716 Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-105717 Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. 8.8 Improper Input Validation Not exploited CVE-2026-105718 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Improper Input Validation Not exploited CVE-2026-105591 Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-105593 Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-105595 Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network. 8.8 Out-of-bounds Read Not exploited CVE-2026-105596 Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-105597 Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-105598 Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-105007 An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to... 8.8 Out-of-bounds Read Not exploited CVE-2026-103572 Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attack... 8.8 Code Injection Not exploited CVE-2026-103575 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-102869 Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-102870 Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute code over a network. 8.8 Code Injection Not exploited CVE-2026-102857 Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-102858 Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-102860 Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-102861 Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. 8.8 Missing Authorization Not exploited CVE-2026-102862 Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-102863 Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. 8.8 Code Injection Not exploited CVE-2026-102849 Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-102850 Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-102856 Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-102225 Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network. 8.8 Out-of-bounds Read Not exploited CVE-2026-102226 Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges ... 8.8 Path Traversal Not exploited CVE-2026-102217 Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-102214 Use after free in Windows Hyper-V allows an authorized attacker to execute code locally. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-102203 Access of resource using incompatible type ('type confusion') in RPC Runtime allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-100220 Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-100211 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-100212 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-100214 Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-100209 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-100210 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 8.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70003 Improper verification of cryptographic signature in JDBC Driver for SQL Server allows an unauthorized attacker to bypass a security feature over a network. 8.7 Unknown/Unlisted Weakness Not exploited CVE-2026-107238 A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) as the LocalSystem account on servers running the Veeam Management ... 8.7 Unknown/Unlisted Weakness Not exploited CVE-2026-121662 Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code locall... 8.6 Unknown/Unlisted Weakness Not exploited CVE-2026-118742 Incorrect permission assignment for critical resource in Azure Front Door (AFD) allows an unauthorized attacker to elevate privileges over a network. 8.6 Unknown/Unlisted Weakness Not exploited CVE-2026-102236 Improper restriction of rendered ui layers or frames in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. 8.6 Unknown/Unlisted Weakness Not exploited CVE-2026-85886 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. 8.5 Unknown/Unlisted Weakness Not exploited CVE-2026-67625 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. 8.5 Unknown/Unlisted Weakness Not exploited CVE-2026-68883 Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network. 8.5 Unknown/Unlisted Weakness Not exploited CVE-2026-102224 Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an authorized attacker to elevate privileg... 8.4 OS Command Injection Not exploited CVE-2026-83845 Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoofing locally. 8.4 Unknown/Unlisted Weakness Not exploited CVE-2026-121664 Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to execute code over ... 8.3 Cross-site Scripting (XSS) Not exploited CVE-2026-120780 Improper access control in Visual Studio Code allows an unauthorized attacker to execute code over a network. 8.3 Unknown/Unlisted Weakness Not exploited CVE-2026-119985 Incorrect authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network. 8.3 Unknown/Unlisted Weakness Not exploited CVE-2026-106077 A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on the backup server with LocalSystem privile... 8.3 Unknown/Unlisted Weakness Not exploited CVE-2026-119989 Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an authorized attacker to execute code over a netw... 8.2 Unknown/Unlisted Weakness Not exploited CVE-2026-113753 Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to elevate privileges locally. 8.2 Unknown/Unlisted Weakness Not exploited CVE-2026-85925 Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network. 8.2 Unknown/Unlisted Weakness Not exploited CVE-2026-85369 Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally. 8.2 Out-of-bounds Read Not exploited CVE-2026-96177 Use after free in DNS Server allows an unauthorized attacker to execute code over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-96092 Use after free in DNS Server allows an unauthorized attacker to execute code over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-95956 Use after free in Windows eSCL Scanner allows an unauthorized attacker to execute code over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-95885 Use after free in Windows Client for NFS allows an unauthorized attacker to elevate privileges over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-81384 Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-72998 Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-66813 Out-of-bounds read in SQL Server allows an unauthorized attacker to elevate privileges over a network. 8.1 Out-of-bounds Read Not exploited CVE-2026-122979 Improper control of generation of code ('code injection') in Microsoft Teams for Android allows an unauthorized attacker to perform spoofing over a network. 8.1 Code Injection Not exploited CVE-2026-119964 Double free in Windows Message Queuing allows an unauthorized attacker to execute code over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-119967 Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-119961 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Internet Information Services allows an unauthorized atta... 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-119962 Double free in Windows Cred SSProvider Protocol allows an unauthorized attacker to execute code over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-119963 Double free in Windows Message Queuing allows an unauthorized attacker to execute code over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-119951 Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-119952 Observable timing discrepancy in Windows Schannel allows an unauthorized attacker to execute code over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-119945 Use after free in Windows Modern Device Management (MDM) allows an unauthorized attacker to execute code over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-118741 Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-118737 Improper verification of cryptographic signature in Windows Remote Procedure Call Runtime allows an unauthorized attacker to execute code over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-118106 Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-116710 Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-113862 Use after free in Windows Network Address Translation (NAT) allows an unauthorized attacker to execute code over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-109459 Heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-102219 Inadequate encryption strength in Windows Modern Device Management (MDM) allows an unauthorized attacker to execute code over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-77691 ZohoCorp ManageEngine Key Manager Plus versions before 7151 allow authenticated users to enter malicious input when configuring a Microsoft CA 8.1 OS Command Injection Not exploited CVE-2026-85899 Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-97783 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform s... 8.1 Cross-site Scripting (XSS) Not exploited CVE-2026-88185 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-88174 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Deployment Services allows an unauthorized attacker to ex... 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-88171 Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-88173 Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-88117 Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-88119 Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-88120 Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-88094 Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Storage Library allows an authorized attacker to ele... 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-85926 Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-85799 Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-85371 Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-84012 Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-83914 Use after free in Microsoft XML allows an unauthorized attacker to execute code over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-83746 Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-83674 Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-83522 Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized attacker to perform spoofing over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-70571 Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-70269 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-70229 Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-70197 Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-70187 Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-70175 Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-70127 Use after free in DNS Server allows an unauthorized attacker to execute code over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-70111 Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-70062 Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-70038 Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-70013 Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-69913 Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-69802 Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute code over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-69830 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Server allows an unauthorized attacker to execute co... 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-108457 Out-of-bounds write in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-108460 Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-105005 Out-of-bounds write in Windows Schannel allows an unauthorized attacker to execute code over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-102866 Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-100218 Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. 8.1 Unknown/Unlisted Weakness Not exploited CVE-2026-96115 Double free in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network. 8.0 Unknown/Unlisted Weakness Not exploited CVE-2026-94513 Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network. 8.0 Unknown/Unlisted Weakness Not exploited CVE-2026-88240 Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network. 8.0 Unknown/Unlisted Weakness Not exploited CVE-2026-88187 Heap-based buffer overflow in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network. 8.0 Unknown/Unlisted Weakness Not exploited CVE-2026-123387 Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows an authorized attacker to elevate privile... 8.0 Unknown/Unlisted Weakness Not exploited CVE-2026-122988 Improper authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network. 8.0 OS Command Injection Not exploited CVE-2026-122164 Weak authentication in Windows Kerberos allows an authorized attacker to elevate privileges over a network. 8.0 Unknown/Unlisted Weakness Not exploited CVE-2026-118117 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a ne... 8.0 SQL Injection Not exploited CVE-2026-118118 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a ne... 8.0 SQL Injection Not exploited CVE-2026-118119 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a ne... 8.0 SQL Injection Not exploited CVE-2026-118111 Origin validation error in SQL Server allows an authorized attacker to elevate privileges over a network. 8.0 Unknown/Unlisted Weakness Not exploited CVE-2026-118112 Improper control of generation of code ('code injection') in SQL Server allows an authorized attacker to elevate privileges over a network. 8.0 Code Injection Not exploited CVE-2026-118113 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a ne... 8.0 SQL Injection Not exploited CVE-2026-111296 Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. 8.0 Unknown/Unlisted Weakness Not exploited CVE-2026-111297 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spo... 8.0 Cross-site Scripting (XSS) Not exploited CVE-2026-109466 Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over an adjacent network. 8.0 Missing Authorization Not exploited CVE-2026-109457 Improper neutralization of special elements used in an os command ('os command injection') in Azure CLI allows an authorized attacker to execute code over a net... 8.0 OS Command Injection Not exploited CVE-2026-96956 Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network. 8.0 Unknown/Unlisted Weakness Not exploited CVE-2026-96844 Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network. 8.0 Unknown/Unlisted Weakness Not exploited CVE-2026-88121 Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network. 8.0 Unknown/Unlisted Weakness Not exploited CVE-2026-85881 Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network. 8.0 Unknown/Unlisted Weakness Not exploited CVE-2026-83838 Integer underflow (wrap or wraparound) in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network. 8.0 Unknown/Unlisted Weakness Not exploited CVE-2026-70213 Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network. 8.0 Unknown/Unlisted Weakness Not exploited CVE-2026-70049 Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate... 8.0 SQL Injection Not exploited CVE-2026-69363 Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network. 8.0 Unknown/Unlisted Weakness Not exploited CVE-2026-97013 Access of resource using incompatible type ('type confusion') in Windows Shell allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96184 Heap-based buffer overflow in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96845 Improper authorization in Windows Task Scheduler allows an authorized attacker to elevate privileges locally. 7.8 Missing Authorization Not exploited CVE-2026-96172 No cwe for this issue in Desktop Window Manager allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96174 Release of invalid pointer or reference in Desktop Window Manager allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96175 Release of invalid pointer or reference in Desktop Window Manager allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96160 Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. 7.8 Out-of-bounds Read Not exploited CVE-2026-96162 Incorrect authorization in Windows Clipboard Virtual Channel Extension allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96152 Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96126 Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96127 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96129 Inclusion of functionality from untrusted control sphere in Windows Kernel allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96117 Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96122 Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96102 Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96103 Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96085 Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96084 Heap-based buffer overflow in Graphic Fonts allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96074 Heap-based buffer overflow in Windows AppX Package Manager allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96076 Use after free in Windows DIAL Client allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96062 Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96066 Stack-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96056 Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96057 Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96060 Out-of-bounds read in Windows Installer allows an authorized attacker to elevate privileges locally. 7.8 Out-of-bounds Read Not exploited CVE-2026-96052 Integer underflow (wrap or wraparound) in Windows Kernel allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96053 Improper neutralization of special elements used in a command ('command injection') in Windows Task Scheduler allows an authorized attacker to elevate privilege... 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96055 Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96036 Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96037 Heap-based buffer overflow in Windows User Manager Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96038 Inclusion of functionality from untrusted control sphere in Windows Audio Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96028 Access of resource using incompatible type ('type confusion') in Windows Installer allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96029 Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally. 7.8 Missing Authorization Not exploited CVE-2026-96031 Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96023 Use after free in Windows Push Notification Core allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96005 Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96016 Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-95997 Use after free in Windows Event Logging Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-95999 Out-of-bounds read in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally. 7.8 Out-of-bounds Read Not exploited CVE-2026-95988 Incorrect authorization in Windows Kernel allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-95991 Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-95983 Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-95965 Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-95963 Improper link resolution before file access ('link following') in Data Sharing Service Client allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-95953 Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. 7.8 Out-of-bounds Read Not exploited CVE-2026-95947 An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-95948 Stack-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-95951 Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-95934 Double free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-95935 Integer overflow or wraparound in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-95942 Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. 7.8 Out-of-bounds Read Not exploited CVE-2026-95920 Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-95932 Inclusion of functionality from untrusted control sphere in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-95933 Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-95909 Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. 7.8 Out-of-bounds Read Not exploited CVE-2026-95896 Heap-based buffer overflow in Windows Microsoft DirectMusic allows an authorized attacker to execute code locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-95898 Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-95902 Heap-based buffer overflow in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-95891 Heap-based buffer overflow in Windows Microsoft DirectMusic allows an authorized attacker to execute code locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-95894 Heap-based buffer overflow in Windows Task Scheduler allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-95895 Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-95881 Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-95872 Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-95874 Heap-based buffer overflow in Xbox allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-95877 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-95879 Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. 7.8 Out-of-bounds Read Not exploited CVE-2026-94527 Heap-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-94531 Stack-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-94515 Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-94507 Heap-based buffer overflow in Windows DirectX allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88245 Missing authentication for critical function in Windows Brokering File System allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88239 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88241 Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88233 Improper authorization in Windows Task Scheduler allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88235 Unintended proxy or intermediary ('confused deputy') in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88238 Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88230 Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88232 Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88227 Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88213 Numeric truncation error in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85929 Incorrect permission assignment for critical resource in Windows Brokering File System allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85942 Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85801 Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83563 Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70182 Weak authentication in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-125137 Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-124225 Improper control of generation of code ('code injection') in Windows PowerShell allows an unauthorized attacker to execute code locally. 7.8 Code Injection Not exploited CVE-2026-123388 Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-122986 Improper privilege management in Microsoft Azure Kubernetes Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-122984 Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-122183 Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally. 7.8 Out-of-bounds Read Not exploited CVE-2026-122172 Use after free in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-122165 Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-122166 Stack-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-122168 Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-121681 Heap-based buffer overflow in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-121673 Use after free in Windows Filter Manager allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-121661 Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-120782 Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. 7.8 Code Injection Not exploited CVE-2026-119997 Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-119987 Untrusted search path in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-119957 Double free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-119953 Use after free in Windows DNS allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-119954 Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-119943 Buffer over-read in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-119939 Improper privilege management in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-119941 Untrusted pointer dereference in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-119933 Use of uninitialized resource in Windows NTFS allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-119929 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-119917 Heap-based buffer overflow in Windows Distributed Transaction Coordinator allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-119906 Improper neutralization of special elements used in an os command ('os command injection') in Windows Sandbox allows an authorized attacker to elevate privilege... 7.8 OS Command Injection Not exploited CVE-2026-119907 Untrusted pointer dereference in Windows Function Discovery Resource Publication allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-119899 Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally. 7.8 Missing Authorization Not exploited CVE-2026-119903 Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally. 7.8 Path Traversal Not exploited CVE-2026-119904 Improper control of generation of code ('code injection') in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally. 7.8 Code Injection Not exploited CVE-2026-119892 Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-119886 Missing authentication for critical function in Windows Telephony Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-119853 Untrusted search path in Windows Remote Access API allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-119846 Out-of-bounds read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. 7.8 Out-of-bounds Read Not exploited CVE-2026-119847 Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-119834 Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-119826 Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-119816 Heap-based buffer overflow in Windows Microsoft Account Sign-in Assistant allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-119817 Double free in Windows Shell allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-119818 Incorrect authorization in Windows Text Services Framework allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-119821 Improper authorization in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-119390 Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-119391 Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-119393 Stack-based buffer overflow in Windows Credential Manager allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-119382 Heap-based buffer overflow in Windows TPM allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118723 Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118280 Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118224 Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118220 Double free in Windows Multiple Provider Router allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118222 Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118223 Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118215 Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118142 Out-of-bounds read in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally. 7.8 Out-of-bounds Read Not exploited CVE-2026-118137 Improper authorization in Windows FTP Service allows an authorized attacker to elevate privileges locally. 7.8 Missing Authorization Not exploited CVE-2026-118138 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Client for NFS allows an authorized attacker to elevate p... 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-118126 Use after free in Windows Message Queuing allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-116714 Incorrect authorization in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-114165 Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-114167 Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-114170 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-114161 Improper limitation of a pathname to a restricted directory ('path traversal') in Azure CycleCloud allows an authorized attacker to elevate privileges locally. 7.8 Path Traversal Not exploited CVE-2026-113865 Time-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-113856 Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-113843 Improper authentication in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-113847 Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-113848 Null pointer dereference in Windows NTFS allows an unauthorized attacker to execute code locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-113767 Inclusion of functionality from untrusted control sphere in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-113765 Heap-based buffer overflow in Windows File Server Resource Management Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-113758 Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally. 7.8 Out-of-bounds Read Not exploited CVE-2026-113759 Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-113748 Stack-based buffer overflow in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-112981 Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-112978 Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-112811 Stack-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-112799 Stack-based buffer overflow in Windows Projected File System allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-112801 Insufficiently protected credentials in Windows eSCL Scanner allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-112802 Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally. 7.8 Missing Authorization Not exploited CVE-2026-112794 Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-112760 Integer overflow or wraparound in Windows Overlay Filter allows an unauthorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-112758 Double free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-112751 Use after free in Windows Remote Assistance allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-112752 Improper access control in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-112743 Untrusted pointer dereference in Windows Device Association Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-111302 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-110056 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-110049 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-109473 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-108412 Heap-based buffer overflow in Windows Redirected Drive Buffering allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-108405 Integer overflow or wraparound in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-108407 Out-of-bounds read in Windows GDI allows an authorized attacker to elevate privileges locally. 7.8 Out-of-bounds Read Not exploited CVE-2026-108403 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-105575 Access of resource using incompatible type ('type confusion') in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-105580 Heap-based buffer overflow in Windows Management Instrumentation allows an unauthorized attacker to execute code locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-105569 Out-of-bounds read in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. 7.8 Out-of-bounds Read Not exploited CVE-2026-105543 Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-105541 Use of out-of-range pointer offset in Windows Audio Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-105532 Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-105528 Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-105524 Weak authentication in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-105507 An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure libra... 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-105501 Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-105503 Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-105505 Relative path traversal in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-105494 Untrusted search path in Azure NFS mount helper (aznfs) allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-105028 Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally. 7.8 Out-of-bounds Read Not exploited CVE-2026-105025 Double free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-105022 Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-100223 An elevation of privilege vulnerability exists when reparse points are created by sandboxed processes allowing sandbox escape. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-114148 Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-108433 Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97809 Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97811 Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97803 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97804 Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97806 Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97807 Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97800 Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97792 Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97794 Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97798 Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privilege... 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97799 Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96997 Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97001 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-97009 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96953 Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96995 Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96996 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96947 Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96950 Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96946 Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96931 Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96933 Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96928 Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. 7.8 Out-of-bounds Read Not exploited CVE-2026-96929 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96918 Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96920 Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96912 Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96915 Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96916 Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96867 Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally. 7.8 Out-of-bounds Read Not exploited CVE-2026-96911 Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally... 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96862 Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. 7.8 Out-of-bounds Read Not exploited CVE-2026-96856 Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96843 Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96847 Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96324 Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96317 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96318 Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96308 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96309 Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96312 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96306 Out-of-bounds read in Windows Sysmain Service allows an authorized attacker to elevate privileges locally. 7.8 Out-of-bounds Read Not exploited CVE-2026-96249 Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96243 Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96244 Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96223 Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96231 Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96225 Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96217 Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96220 Improper control of generation of code ('code injection') in Windows Assigned Access allows an authorized attacker to elevate privileges locally. 7.8 Code Injection Not exploited CVE-2026-96186 Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96108 Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-96118 Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. 7.8 Out-of-bounds Read Not exploited CVE-2026-88210 Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88189 Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. 7.8 Out-of-bounds Read Not exploited CVE-2026-88191 Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally... 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88193 Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88194 Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. 7.8 Out-of-bounds Read Not exploited CVE-2026-88182 Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88188 Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. 7.8 Out-of-bounds Read Not exploited CVE-2026-88177 Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. 7.8 Out-of-bounds Read Not exploited CVE-2026-88179 Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. 7.8 Out-of-bounds Read Not exploited CVE-2026-88180 Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. 7.8 Out-of-bounds Read Not exploited CVE-2026-88181 Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. 7.8 Out-of-bounds Read Not exploited CVE-2026-88168 Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88152 Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88147 Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88133 Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88134 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88135 Improper access control in WebDAV allows an authorized attacker to elevate privileges locally. 7.8 Missing Authorization Not exploited CVE-2026-88126 Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88128 Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88118 Integer overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88101 Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88105 Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88109 Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88093 Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88100 Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88074 Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88080 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88091 Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88070 Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally. 7.8 Out-of-bounds Read Not exploited CVE-2026-88071 Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-88072 Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-87711 Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-87712 Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-87702 Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-87706 Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-87707 Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-87695 Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-87699 Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-87700 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85945 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-87691 Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-87692 Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-87694 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85933 Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85927 Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85911 Use after free in Windows StateRepository API allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85915 Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85906 Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85908 Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85884 Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85901 Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85902 Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85869 Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85871 Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85872 Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85874 Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85863 Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85864 Improper privilege management in Python allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85867 Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85858 Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. 7.8 Out-of-bounds Read Not exploited CVE-2026-85860 Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85861 Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85849 Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85850 Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85851 Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85842 Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85843 Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85848 Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85833 Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85836 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85837 Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally. 7.8 Out-of-bounds Read Not exploited CVE-2026-85829 Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85832 Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85822 Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85820 Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85804 Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85807 Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85795 Use after free in Windows Text Services Framework allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85796 Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85800 Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85373 Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85375 Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85376 Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85377 Access of resource using incompatible type ('type confusion') in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85368 Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85366 Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85356 Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally. 7.8 Out-of-bounds Read Not exploited CVE-2026-85358 Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85359 Improper control of generation of code ('code injection') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally. 7.8 Code Injection Not exploited CVE-2026-85341 Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85343 Improper link resolution before file access ('link following') in Windows Hyper-V allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85338 Out-of-bounds read in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. 7.8 Out-of-bounds Read Not exploited CVE-2026-85340 Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85332 Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85327 Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-85318 Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-84013 Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-84016 Out-of-bounds write in Windows EAPHost Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83927 Improper link resolution before file access ('link following') in Windows Registry allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83931 Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83932 Heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83922 Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83918 Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83919 Heap-based buffer overflow in Microsoft Internet Messaging API allows an authorized attacker to execute code locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83920 Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83912 Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83913 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83902 Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83903 Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83896 Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83876 Use after free in Windows Shell allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83877 Integer overflow or wraparound in HID Parser Library allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83881 Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83882 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83883 Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83872 Incorrect conversion between numeric types in Windows TCP/IP allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83873 Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83867 Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83861 Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83863 Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83857 Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83859 Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83847 Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83848 Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83850 Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83840 Weak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83833 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83836 Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83837 Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83826 Untrusted pointer dereference in Windows Error Reporting allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83828 Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83829 Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83830 Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83832 Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. 7.8 Out-of-bounds Read Not exploited CVE-2026-83792 Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83796 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83791 Improper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83781 Improper null termination in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83783 Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83779 Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83768 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83769 Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83767 Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83763 Access of resource using incompatible type ('type confusion') in Windows Input System allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83757 Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83758 Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83761 Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83762 Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83753 Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83756 Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83741 Use after free in Internet Explorer allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83727 Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83732 Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83735 Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83721 Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83726 Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83709 Heap-based buffer overflow in Windows NTLM allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83712 Out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83704 Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally... 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83698 Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83699 Stack-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83700 Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83691 Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83692 Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83690 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83679 Use after free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83678 Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83669 Use of uninitialized resource in Windows Error Reporting allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83659 Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83650 Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83652 Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83654 Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83638 Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83639 Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83640 Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83641 Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83587 Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83588 Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83634 Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83637 Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. 7.8 Out-of-bounds Read Not exploited CVE-2026-83583 Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally. 7.8 Missing Authorization Not exploited CVE-2026-83585 Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83586 Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83579 Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83567 Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. 7.8 Out-of-bounds Read Not exploited CVE-2026-83568 Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. 7.8 Missing Authorization Not exploited CVE-2026-83569 Heap-based buffer overflow in HID Parser Library allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83570 Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83518 Heap-based buffer overflow in RPC Runtime allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83513 Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83514 Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83499 Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83506 Untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-83508 Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. 7.8 Out-of-bounds Read Not exploited CVE-2026-78459 Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-81969 Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-73027 External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70303 Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70566 Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70285 Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70286 Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70278 Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70274 Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70255 Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70245 Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileg... 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70247 Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally. 7.8 Out-of-bounds Read Not exploited CVE-2026-70238 Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70228 Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally. 7.8 Out-of-bounds Read Not exploited CVE-2026-70233 Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70225 Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileg... 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70222 Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70218 Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70220 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70184 Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70172 Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70177 Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. 7.8 Improper Input Validation Not exploited CVE-2026-70151 Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70142 Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70143 Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70138 Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70139 Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70131 Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70132 Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70121 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70123 Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70112 Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70113 Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70114 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70117 Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70104 Untrusted pointer dereference in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70106 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70108 Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70109 Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70110 Stack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70093 Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70102 Use after free in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70103 Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70092 Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70060 Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70064 Integer underflow (wrap or wraparound) in Windows Kerberos allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70054 Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70059 Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70048 Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70051 Access of resource using incompatible type ('type confusion') in Windows SmartScreen allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70052 Integer overflow or wraparound in Windows PowerShell allows an authorized attacker to execute code locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70027 Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70023 Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70010 Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70015 Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-70008 Integer overflow or wraparound in Windows IP Over USB Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-69957 Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-69959 Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally. 7.8 Out-of-bounds Read Not exploited CVE-2026-69963 Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-69966 Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-69950 Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-69952 Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. 7.8 Out-of-bounds Read Not exploited CVE-2026-69953 Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-69942 Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-69949 Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-69923 Uncontrolled search path element in Windows AI allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-69926 Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-69934 Integer overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. 7.8 Improper Input Validation Not exploited CVE-2026-69909 Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-69916 Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-69882 Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-69884 Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-69898 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-69850 Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-69867 Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally. 7.8 Out-of-bounds Read Not exploited CVE-2026-69880 Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-69783 External control of file name or path in Windows Update allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-69798 Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-69733 Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-69650 Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-69673 Improper link resolution before file access ('link following') in Windows Update allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-69718 Improper neutralization of special elements used in a command ('command injection') in Windows Update allows an authorized attacker to elevate privileges locall... 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-69633 Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-69471 Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-69354 Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-61931 Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-68836 Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-49785 Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-108136 Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-108130 Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-108133 Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-105003 Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-105004 Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. 7.8 Out-of-bounds Read Not exploited CVE-2026-103568 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Providers allows an authorized attacker to ele... 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-103553 Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally. 7.8 Out-of-bounds Read Not exploited CVE-2026-102227 Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-102233 Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. 7.8 Missing Authorization Not exploited CVE-2026-102215 Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-102216 Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-102218 Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-102220 Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-102201 Use after free in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-102202 Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-102204 Improper link resolution before file access ('link following') in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-102205 Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-102196 Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-100215 Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally. 7.8 Unknown/Unlisted Weakness Not exploited CVE-2026-100217 Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally. 7.8 Missing Authorization Not exploited CVE-2026-121668 Missing authorization in Azure Confidential Clean Rooms allows an authorized attacker to perform tampering over a network. 7.7 Missing Authorization Not exploited CVE-2026-108456 Server-side request forgery (ssrf) in Azure AI Foundry allows an authorized attacker to elevate privileges over a network. 7.7 Unknown/Unlisted Weakness Not exploited CVE-2026-88081 Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. 7.7 Out-of-bounds Read Not exploited CVE-2026-85888 Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. 7.7 Out-of-bounds Read Not exploited CVE-2026-102231 Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. 7.7 Unknown/Unlisted Weakness Not exploited CVE-2026-111895 phpMyFAQ 3.2.0 before 4.0.0 and 4.0.2 before 4.2.0-beta contains an authentication bypass in its Microsoft Entra ID login flow, which links users by the mutable... 7.6 Improper Authentication Not exploited CVE-2026-97002 Out-of-bounds read in Windows VMSwitch allows an authorized attacker to elevate privileges locally. 7.5 Out-of-bounds Read Not exploited CVE-2026-96993 Release of invalid pointer or reference in Windows Performance Monitor allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-96972 Out-of-bounds read in Windows DNS allows an unauthorized attacker to disclose information over a network. 7.5 Out-of-bounds Read Not exploited CVE-2026-96176 Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-96134 Uncontrolled resource consumption in Windows DHCP Server allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-96077 Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-96081 Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-95964 Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute ... 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-88244 Use after free in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over an adjacent network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-88236 Null pointer dereference in Microsoft QUIC allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-88216 Time-of-check time-of-use (toctou) race condition in Windows DHCP Server allows an authorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-88212 Use after free in Windows Network Address Translation (NAT) allows an unauthorized attacker to execute code over an adjacent network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-88111 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-84010 Exposed dangerous method or function in SQL Server allows an authorized attacker to elevate privileges over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-83684 Buffer over-read in Windows iSCSI Target Service allows an unauthorized attacker to disclose information over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-80094 Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-70240 Missing release of memory after effective lifetime in Windows Kerberos allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-69901 Origin validation error in Microsoft Teams for Android allows an unauthorized attacker to perform spoofing over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-125134 Use after free in Windows Function Discovery Resource Publication allows an unauthorized attacker to execute code over an adjacent network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-124227 Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-124185 Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-124170 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-123378 Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-123379 Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-122177 Improper link resolution before file access ('link following') in Windows iSCSI allows an unauthorized attacker to elevate privileges over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-122169 Insufficient granularity of access control in Windows IKE Extension allows an authorized attacker to perform spoofing locally. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-122163 Double free in Windows Image Acquisition allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-121680 Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-121660 Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-120006 Insertion of sensitive information into sent data in .NET Aspire allows an authorized attacker to elevate privileges locally. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-119996 Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-120000 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-119995 Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-119966 Integer overflow or wraparound in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-119960 Use of uninitialized resource in Windows Hyper-V allows an authorized attacker to elevate privileges locally. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-119947 Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-119948 Stack-based buffer overflow in Windows Active Directory allows an authorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-119944 Heap-based buffer overflow in Windows Mobile Device Management allows an unauthorized attacker to elevate privileges over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-119938 Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-119932 Null pointer dereference in Windows Remote Desktop allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-119880 Heap-based buffer overflow in Microsoft XPS Document Converter allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-119858 Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-119837 Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-118747 Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-118748 Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-118749 Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-118750 Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-118735 Weak authentication in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-118301 Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-118153 Inefficient algorithmic complexity in Microsoft Exchange Server allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-118148 Improper authentication in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-118145 Use after free in Windows Function Discovery SSDP Provider allows an unauthorized attacker to execute code over an adjacent network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-118115 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a ne... 7.5 SQL Injection Not exploited CVE-2026-118114 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a ne... 7.5 SQL Injection Not exploited CVE-2026-116947 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-118108 Improper authorization in SQL Server allows an authorized attacker to elevate privileges over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-116943 Buffer over-read in SQL Server allows an unauthorized attacker to disclose information over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-116937 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-116938 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-116931 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-116929 Execution with unnecessary privileges in SQL Server allows an authorized attacker to elevate privileges over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-116926 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Teams allows an unauthorized attacker to perform spoofing over... 7.5 Cross-site Scripting (XSS) Not exploited CVE-2026-116718 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-116706 Use after free in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over an adjacent network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-116698 Use after free in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-114157 Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges ... 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-114149 Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-114154 Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-114155 Time-of-check time-of-use (toctou) race condition in .NET allows an authorized attacker to elevate privileges locally. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-114147 Missing release of memory after effective lifetime in ASP.NET Core allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-113855 Use of uninitialized resource in Windows DNS allows an unauthorized attacker to execute code over an adjacent network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-113859 Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over an adjacent network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-113861 Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-113823 Improper limitation of a pathname to a restricted directory ('path traversal') in Azure CycleCloud allows an unauthorized attacker to disclose information over ... 7.5 Path Traversal Not exploited CVE-2026-113825 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server Network Transport Driver (srvnet.sys) allows a... 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-113768 Heap-based buffer overflow in Windows Performance Counters allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-113752 Use after free in Windows Print Spooler Components allows an unauthorized attacker to execute code over an adjacent network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-113749 Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-112985 Integer overflow or wraparound in Microsoft JScript allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-112972 Integer overflow or wraparound in Windows SMB Server allows an authorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-112966 Uncontrolled resource consumption in Windows Security Account Manager allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-112793 Use after free in Windows Event Collector Service allows an authorized attacker to elevate privileges over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-111286 Use after free in Microsoft Office allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-111287 Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-110052 Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-110053 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-109500 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-109498 Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-109478 Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-109481 Cross-site request forgery (csrf) in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network. 7.5 Cross-Site Request Forgery (CSRF) Not exploited CVE-2026-109487 Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-109491 Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-109475 Stack-based buffer overflow in .NET allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-108421 Out-of-bounds read in Windows File Server Resource Management Service allows an unauthorized attacker to elevate privileges over a network. 7.5 Out-of-bounds Read Not exploited CVE-2026-105578 Integer overflow or wraparound in Microsoft JScript allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-105579 Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to disclose information over a network. 7.5 Out-of-bounds Read Not exploited CVE-2026-105558 Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-105561 Uncontrolled resource consumption in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-105551 Heap-based buffer overflow in Windows NetBIOS allows an unauthorized attacker to elevate privileges over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-105544 Improper access control in .NET allows an authorized attacker to elevate privileges locally. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-105512 Integer underflow (wrap or wraparound) in Microsoft QUIC allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-105515 Buffer over-read in Windows Message Queuing allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-62765 Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-96185 Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-109468 Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-108448 Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-88083 Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-97830 Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-97801 Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-97788 Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-97789 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-96960 Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-96959 Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-96958 Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-96945 Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-96866 Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network. 7.5 Out-of-bounds Read Not exploited CVE-2026-96861 Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network. 7.5 Out-of-bounds Read Not exploited CVE-2026-96325 Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-96245 Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. 7.5 Out-of-bounds Read Not exploited CVE-2026-96246 Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network. 7.5 Out-of-bounds Read Not exploited CVE-2026-96248 Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-96237 Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-96236 Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-96233 Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-96232 Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network. 7.5 Out-of-bounds Read Not exploited CVE-2026-96071 Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-88206 Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-88207 Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-87716 Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-87713 Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privileges over an adjacent network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-87696 Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-85891 Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized attacker to disclose information over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-85808 Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network. 7.5 Out-of-bounds Read Not exploited CVE-2026-85811 Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over an adjacent network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-85353 Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network. 7.5 Out-of-bounds Read Not exploited CVE-2026-85334 Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network. 7.5 Out-of-bounds Read Not exploited CVE-2026-85319 Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a netw... 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-85321 Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a netw... 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-85322 Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-85324 Memory allocation with excessive size value in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-84017 Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-84008 Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-83860 Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-83855 Integer underflow (wrap or wraparound) in Windows WLAN Service allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-83856 Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network. 7.5 Out-of-bounds Read Not exploited CVE-2026-83843 Out-of-bounds read in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network. 7.5 Out-of-bounds Read Not exploited CVE-2026-83795 Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-83754 Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-83739 Use after free in Windows Bluetooth Service allows an unauthorized attacker to execute code over an adjacent network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-83677 Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-83665 Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-83670 Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose information over a network. 7.5 Out-of-bounds Read Not exploited CVE-2026-83655 Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a network. 7.5 Out-of-bounds Read Not exploited CVE-2026-83645 Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a netw... 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-83647 Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network. 7.5 Out-of-bounds Read Not exploited CVE-2026-83635 Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network. 7.5 Out-of-bounds Read Not exploited CVE-2026-83516 Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network. 7.5 Out-of-bounds Read Not exploited CVE-2026-70281 Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network. 7.5 Out-of-bounds Read Not exploited CVE-2026-70251 Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-70207 Heap-based buffer overflow in Network Policy Server (NPS) allows an authorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-70202 Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-70179 Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-70181 Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-70183 Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges ... 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-70186 Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-70159 Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-70163 Allocation of resources without limits or throttling in OpenSSH for Windows allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-70155 Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-70133 Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-70095 Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-70079 Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-70082 Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-70058 Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-70031 Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-70033 Missing release of memory after effective lifetime in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-70012 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-70014 Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-70004 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-70006 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-69992 Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-69994 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-69995 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-69996 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-69997 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-69998 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-69984 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-69986 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-69987 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-69988 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-69991 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-69976 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-69789 Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-69651 Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-69454 Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a n... 7.5 Out-of-bounds Read Not exploited CVE-2026-69577 Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a n... 7.5 Out-of-bounds Read Not exploited CVE-2026-58280 Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-108131 No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-105723 Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-105728 Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-105714 Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-105715 Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-105592 Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-105599 Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-105009 Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-103569 Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network. 7.5 Out-of-bounds Read Not exploited CVE-2026-103577 Insecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass a security feature over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-103558 Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-102192 Integer underflow (wrap or wraparound) in Windows Failover Cluster allows an unauthorized attacker to deny service over a network. 7.5 Unknown/Unlisted Weakness Not exploited CVE-2026-69327 Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code locally. 7.4 Unknown/Unlisted Weakness Not exploited CVE-2026-62903 Authentication bypass by capture-replay in SQL Server allows an unauthorized attacker to disclose information over a network. 7.4 Unknown/Unlisted Weakness Not exploited CVE-2026-102230 Missing authorization in Visual Studio Code allows an unauthorized attacker to disclose information over a network. 7.4 Missing Authorization Not exploited CVE-2026-118147 Improper certificate validation in Visual Studio allows an unauthorized attacker to perform spoofing over a network. 7.4 Unknown/Unlisted Weakness Not exploited CVE-2026-96187 Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a ... 7.4 Unknown/Unlisted Weakness Not exploited CVE-2026-102234 Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. 7.4 Unknown/Unlisted Weakness Not exploited CVE-2026-96222 Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. 7.4 Unknown/Unlisted Weakness Not exploited CVE-2026-87705 Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a security feature over an adjacent netw... 7.4 Unknown/Unlisted Weakness Not exploited CVE-2026-85922 Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network. 7.4 Unknown/Unlisted Weakness Not exploited CVE-2026-83511 Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. 7.4 Unknown/Unlisted Weakness Not exploited CVE-2026-105013 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. 7.4 Unknown/Unlisted Weakness Not exploited CVE-2026-120792 Insertion of sensitive information into log file in Aspire allows an authorized attacker to disclose information locally. 7.3 Unknown/Unlisted Weakness Not exploited CVE-2026-120778 Creation of temporary file in directory with insecure permissions in .NET Aspire allows an authorized attacker to elevate privileges locally. 7.3 Unknown/Unlisted Weakness Not exploited CVE-2026-119900 Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. 7.3 Out-of-bounds Read Not exploited CVE-2026-111303 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spo... 7.3 Cross-site Scripting (XSS) Not exploited CVE-2026-111300 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spo... 7.3 Cross-site Scripting (XSS) Not exploited CVE-2026-110065 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spo... 7.3 Cross-site Scripting (XSS) Not exploited CVE-2026-110045 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spo... 7.3 Cross-site Scripting (XSS) Not exploited CVE-2026-109504 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spo... 7.3 Cross-site Scripting (XSS) Not exploited CVE-2026-109497 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spo... 7.3 Cross-site Scripting (XSS) Not exploited CVE-2026-96188 External control of system or configuration setting in Microsoft PowerToys allows an authorized attacker to elevate privileges locally. 7.3 Unknown/Unlisted Weakness Not exploited CVE-2026-88204 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spo... 7.3 Cross-site Scripting (XSS) Not exploited CVE-2026-70190 Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally. 7.3 Unknown/Unlisted Weakness Not exploited CVE-2026-70161 Improper limitation of a pathname to a restricted directory ('path traversal') in .NET allows an authorized attacker to elevate privileges locally. 7.3 Path Traversal Not exploited CVE-2026-105732 Stack-based buffer overflow in SysInternals allows an authorized attacker to elevate privileges locally. 7.3 Unknown/Unlisted Weakness Not exploited CVE-2026-100207 Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an authorized attacker to execute code loc... 7.3 OS Command Injection Not exploited CVE-2026-118157 Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. 7.2 Unknown/Unlisted Weakness Not exploited CVE-2026-118151 External control of file name or path in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. 7.2 Unknown/Unlisted Weakness Not exploited CVE-2026-116944 Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network. 7.2 Unknown/Unlisted Weakness Not exploited CVE-2026-116936 Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. 7.2 Unknown/Unlisted Weakness Not exploited CVE-2026-116933 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. 7.2 Unknown/Unlisted Weakness Not exploited CVE-2026-105560 Release of invalid pointer or reference in Windows DHCP Server allows an authorized attacker to execute code over a network. 7.2 Unknown/Unlisted Weakness Not exploited CVE-2026-105520 Improper link resolution before file access ('link following') in Windows DNS allows an authorized attacker to elevate privileges over a network. 7.2 Unknown/Unlisted Weakness Not exploited CVE-2026-85798 Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network. 7.2 Unknown/Unlisted Weakness Not exploited CVE-2026-70267 Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. 7.2 Unknown/Unlisted Weakness Not exploited CVE-2026-108399 Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally. 7.2 Unknown/Unlisted Weakness Not exploited CVE-2026-119988 Numeric truncation error in Windows SMB allows an authorized attacker to execute code over a network. 7.1 Unknown/Unlisted Weakness Not exploited CVE-2026-118208 Improper access control in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network. 7.1 Unknown/Unlisted Weakness Not exploited CVE-2026-112973 Improper access control in Windows Kernel allows an authorized attacker to bypass a security feature locally. 7.1 Unknown/Unlisted Weakness Not exploited CVE-2026-123525 Vikunja before 2.7.1 allocates memory without limits in its Trello, Todoist and Microsoft To Do migration importers, which buffer remote attachment downloads an... 7.1 Unknown/Unlisted Weakness Not exploited CVE-2026-85856 Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to execute code over an adjacent network. 7.1 Unknown/Unlisted Weakness Not exploited CVE-2026-83715 Missing authentication for critical function in Windows Error Reporting allows an authorized attacker to perform tampering locally. 7.1 Unknown/Unlisted Weakness Not exploited CVE-2026-70126 Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network. 7.1 Improper Input Validation Not exploited CVE-2026-69452 Use after free in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network. 7.1 Unknown/Unlisted Weakness Not exploited CVE-2026-105729 Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally. 7.1 Unknown/Unlisted Weakness Not exploited CVE-2026-100205 Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally. 7.1 Unknown/Unlisted Weakness Not exploited CVE-2026-96994 Use after free in Winsock allows an authorized attacker to elevate privileges locally. 7.0 Unknown/Unlisted Weakness Not exploited CVE-2026-97000 Null pointer dereference in Windows USM Communication Manager allows an authorized attacker to elevate privileges locally. 7.0 Unknown/Unlisted Weakness Not exploited CVE-2026-96978 Use after free in Windows Credential User Interface allows an authorized attacker to elevate privileges locally. 7.0 Unknown/Unlisted Weakness Not exploited CVE-2026-96971 Use after free in Windows NetBIOS allows an authorized attacker to elevate privileges locally. 7.0 Unknown/Unlisted Weakness Not exploited CVE-2026-96973 Use after free in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally. 7.0 Unknown/Unlisted Weakness Not exploited CVE-2026-96969 Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. 7.0 Unknown/Unlisted Weakness Not exploited CVE-2026-96171 Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. 7.0 Unknown/Unlisted Weakness Not exploited CVE-2026-96158 Use of uninitialized resource in Microsoft ActiveX Installer Service allows an authorized attacker to elevate privileges locally. 7.0 Unknown/Unlisted Weakness Not exploited CVE-2026-96168 Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. 7.0 Unknown/Unlisted Weakness Not exploited CVE-2026-96153 Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. 7.0 Unknown/Unlisted Weakness Not exploited CVE-2026-96155 Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. 7.0 Unknown/Unlisted Weakness Not exploited CVE-2026-96139 Untrusted pointer dereference in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. 7.0 Unknown/Unlisted Weakness Not exploited CVE-2026-96124 Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. 7.0 Unknown/Unlisted Weakness Not exploited