CVE-2026-69902 - Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally.

CVE-2026-69898 - Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc

CVE-2026-69886 - Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute c

CVE-2026-69884 - Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally.

CVE-2026-69883 - Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.

CVE-2026-69882 - Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.

CVE-2026-69880 - Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an au

CVE-2026-69877 - Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over

CVE-2026-69867 - Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally.

CVE-2026-69856 - Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.

CVE-2026-69850 - Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privi

CVE-2026-69840 - Use after free in Windows Certificates allows an authorized attacker to elevate privileges locally.

CVE-2026-69830 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-69802 - Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to e

CVE-2026-69798 - Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileg

CVE-2026-69795 - Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privil

CVE-2026-69789 - Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized at

CVE-2026-69783 - External control of file name or path in Windows Update allows an authorized attacker to elevate pri

CVE-2026-69766 - Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.

CVE-2026-69765 - Use after free in Windows Storport Miniport Driver allows an unauthorized attacker to execute code o

CVE-2026-69763 - Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.

CVE-2026-69743 - Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to e

CVE-2026-69736 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-69733 - Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.

CVE-2026-69721 - Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally.

CVE-2026-69718 - Improper neutralization of special elements used in a command ('command injection') in Windows Updat

CVE-2026-69705 - Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network.

CVE-2026-69675 - Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose informat

CVE-2026-69673 - Improper link resolution before file access ('link following') in Windows Update allows an authorize

CVE-2026-69651 - Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a ne

CVE-2026-69650 - Improper verification of cryptographic signature in Windows Key Distribution Center allows an author

CVE-2026-69644 - Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows a

CVE-2026-69640 - Incorrect authorization in Windows Key Distribution Center allows an authorized attacker to bypass a

CVE-2026-69639 - Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code ove

CVE-2026-69635 - Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges

CVE-2026-69634 - Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a n

CVE-2026-69633 - Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges loc

CVE-2026-69596 - Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to e

CVE-2026-69577 - Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allo

CVE-2026-69521 - Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over

CVE-2026-69506 - Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose informa

CVE-2026-69471 - Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges

CVE-2026-69454 - Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allo

CVE-2026-69452 - Use after free in Windows Enterprise App Management allows an authorized attacker to elevate privile

CVE-2026-69387 - Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locall

CVE-2026-69370 - Improper neutralization of special elements used in a command ('command injection') in Visual Studio

CVE-2026-69363 - Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privi

CVE-2026-69354 - Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privi

CVE-2026-69326 - Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a n

CVE-2026-68836 - Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileg

CVE-2026-66822 - Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclos

CVE-2026-62879 - Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to

CVE-2026-62687 - Improper link resolution before file access ('link following') in Windows Backup Engine allows an au

CVE-2026-61931 - Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate pri

CVE-2026-59116 - Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized at

CVE-2026-58280 - Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.

CVE-2026-54086 - SLE API for Java is an implementation of CCSDS Space Link Extension Services. Prior to 5.1.7, the IS

CVE-2026-49785 - Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a secu

CVE-2026-110256 - Finsys Dockhand through 1.0.18 contains an LDAP injection vulnerability in the tryLdapAuth function

CVE-2026-110255 - Finsys Dockhand before 1.0.43 contains a response-disclosing server-side request forgery vulnerabili

CVE-2026-110254 - Finsys Dockhand before 1.0.45 contains a server-side request forgery vulnerability in the ipCategory

CVE-2026-110249 - A malicious, compromised, or MITM-controlled Exchange server can return a single well-formed SOAP re

CVE-2026-110247 - Several buffer-growth sites in libmime performed size arithmetic in 32-bit types without overflow ch

CVE-2026-110240 - Lancet through 2.3.9 contains an SSRF protection bypass vulnerability in netutil.IsInternalIP that m

CVE-2026-110239 - Rapyd Admin before 9.20.0 contains a stored cross-site scripting vulnerability in the x-rpd::rich-te

CVE-2026-110238 - Rapyd Admin from 9.0.0 before 9.20.0 contains an authorization bypass vulnerability that allows auth

CVE-2026-110237 - Vifm 0.8.1-beta through 0.14.4 reuses a pre-existing IPC FIFO in the shared temporary directory with

CVE-2026-110236 - KDE Dolphin 24.08.0 through 26.08.2 contains an OS command injection vulnerability that allows attac

CVE-2026-110235 - MP Manager through 1.1.0 contains a path traversal vulnerability that allows attackers to write file

CVE-2026-110234 - Elio through 1.13.0 contains an insecure temporary file vulnerability that allows local users to ove

CVE-2026-110233 - Rovr through 0.10.3 on Windows contains an OS command injection vulnerability that allows attackers

CVE-2026-110232 - Fossify File Manager through 1.6.2 contains a path traversal vulnerability that allows crafted ZIP a

CVE-2026-110231 - muCommander through 1.6.2 contains a path traversal vulnerability in UnpackJob that allows attackers

CVE-2026-110230 - XBackBone through 3.8.2 contains a missing authorization vulnerability that allows authenticated use

CVE-2026-110229 - QloApps through 1.7.0 contains an improper access control vulnerability in AdminSlipController that

CVE-2026-110228 - wallabag 2.6.13 through 2.6.14 contains a stored cross-site scripting vulnerability that allows auth

CVE-2026-110226 - QloApps through 1.7.0 contains a broken access control vulnerability that allows hotel-restricted ba

CVE-2026-110225 - Shaarli through 0.16.9 contains a server-side request forgery vulnerability that allows authenticate

CVE-2026-110224 - QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in AdminSearchConfCont

CVE-2026-110223 - Kavita 0.9.0 through 0.9.1.4 contains a server-side request forgery vulnerability that allows authen

CVE-2026-110222 - Razorpay IFSC Ruby gem through 2.0.62 contains a server-side request forgery vulnerability that allo

CVE-2026-110221 - QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in the AdminHotelFeatu

CVE-2026-110220 - Kubeflow Model Registry through 0.3.17 contains a server-side request forgery vulnerability that all

CVE-2026-110219 - QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability that allows remote att

CVE-2026-110218 - Aureus ERP through 1.6.0 contains an authorization bypass vulnerability that allows unauthenticated

CVE-2026-110217 - Lenve vhr through commit 03abbd3 contains an information disclosure vulnerability that allows any au

CVE-2026-110216 - youlai-boot through 2.21.1 contains a missing authorization vulnerability that allows any authentica

CVE-2026-110215 - youlai-boot through 2.21.1 contains a missing authorization vulnerability that allows authenticated

CVE-2026-110214 - Snowy 3.6.5 contains a hard-coded HMAC key vulnerability that allows unauthenticated attackers to fo

CVE-2026-110213 - Stonewuu ai-fusion-video through 1.2.0 contains an insecure direct object reference vulnerability th

CVE-2026-110212 - Stonewuu ai-fusion-video through 1.2.0 contains a path traversal vulnerability that allows authentic

CVE-2026-110211 - iFlytek SkillHub through 0.2.22 contains a missing authorization vulnerability that allows any authe

CVE-2026-110210 - Phase Console through 2.77.3 contains a missing authorization vulnerability that allows organisation

CVE-2026-110209 - Stonewuu ai-fusion-video through 1.2.0 contains a missing authorization vulnerability that allows au

CVE-2026-110208 - Wukong AICRM through 20260610 contains a missing authorization vulnerability in the /systemConfig co

CVE-2026-110207 - Wukong AICRM through 20260610 contains a missing authorization vulnerability that allows any authent

CVE-2026-110206 - Roo Code through 3.54.0 contains a command approval bypass vulnerability in parseCommandLine() that

CVE-2026-110205 - Roo Code through 3.54.0 contains a command approval bypass vulnerability in parseCommandLine() that

CVE-2026-110204 - Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to ru

CVE-2026-110203 - Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to au

CVE-2026-110202 - Roo Code through 3.54.0 contains a command approval bypass vulnerability in getCommandDecision() tha

CVE-2026-110130 - Dockhand before 1.0.45 contains an authentication bypass in which the global auth hook skips authent

CVE-2026-110112 - Dockhand before 1.0.50 contains a privilege escalation vulnerability that allows users from another

CVE-2026-110111 - Xen Orchestra before 6.9.0 contains an improper access control vulnerability that allows any authent

CVE-2026-110036 - A flaw was found in device-mapper-persistent-data. A local attacker can cause a Denial of Service (D

CVE-2026-109453 - Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker

CVE-2026-109429 - Mistral Vibe before 2.25.4 contains a command permission gate bypass vulnerability that allows attac

CVE-2026-109428 - Mistral Vibe before 2.25.5 contains a permission validation bypass vulnerability that allows attacke

CVE-2026-108471 - Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an autho

CVE-2026-108468 - Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-108467 - Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to e

CVE-2026-108466 - Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network.

CVE-2026-108465 - Use after free in Windows Update Delivery Optimization allows an authorized attacker to elevate priv

CVE-2026-108464 - Use after free in Software Protection Platform (SPP) allows an authorized attacker to elevate privil

CVE-2026-108463 - Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to by

CVE-2026-108462 - Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows

CVE-2026-108461 - Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privil

CVE-2026-108460 - Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a net

CVE-2026-108458 - Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo

CVE-2026-108457 - Out-of-bounds write in Microsoft Windows PDF allows an unauthorized attacker to execute code over a

CVE-2026-108400 - Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker t

CVE-2026-108399 - Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges lo

CVE-2026-108398 - Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature l

CVE-2026-108396 - Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows a

CVE-2026-108136 - Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil

CVE-2026-108135 - Improper link resolution before file access ('link following') in Windows Backup Engine allows an au

CVE-2026-108134 - Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.

CVE-2026-108133 - Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows an authoriz

CVE-2026-108132 - Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.

CVE-2026-108131 - No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacke

CVE-2026-108130 - Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authoriz

CVE-2026-108129 - Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ

CVE-2026-108128 - Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ

CVE-2026-108127 - Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ

CVE-2026-107607 - SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Criti

CVE-2026-107606 - SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Criti

CVE-2026-107605 - SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Criti

CVE-2026-106625 - Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary

CVE-2026-105733 - Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally.

CVE-2026-105732 - Stack-based buffer overflow in SysInternals allows an authorized attacker to elevate privileges loca

CVE-2026-105731 - Use of uninitialized resource in Microsoft Graphics Component allows an authorized attacker to discl

CVE-2026-105729 - Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges lo

CVE-2026-105728 - Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose inf

CVE-2026-105727 - Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business

CVE-2026-105726 - Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information local

CVE-2026-105725 - Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.

CVE-2026-105723 - Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attack

CVE-2026-105722 - Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privil

CVE-2026-105720 - Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate priv

CVE-2026-105719 - Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose i

CVE-2026-105718 - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a

CVE-2026-105717 - Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute cod

CVE-2026-105716 - Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute cod

CVE-2026-105715 - Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute c

CVE-2026-105714 - Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute cod

CVE-2026-105713 - Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to p

CVE-2026-105599 - Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute

CVE-2026-105598 - Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute cod

CVE-2026-105597 - Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute cod

CVE-2026-105596 - Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute cod

CVE-2026-105595 - Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a

CVE-2026-105593 - Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute cod

CVE-2026-105592 - Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute cod

CVE-2026-105591 - Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute cod

CVE-2026-105016 - Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a

CVE-2026-105013 - Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex

CVE-2026-105010 - Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate priv

CVE-2026-105009 - Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elev

CVE-2026-105008 - No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a

CVE-2026-105007 - An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS)

CVE-2026-105006 - Use after free in HID class driver allows an unauthorized attacker to elevate privileges with a phys

CVE-2026-105005 - Out-of-bounds write in Windows Schannel allows an unauthorized attacker to execute code over a netwo

CVE-2026-105004 - Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges loc

CVE-2026-105003 - Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges l

CVE-2026-104937 - Shopware version 6.7 allows the upload of attacker‑controlled HTML files and serves them as text/htm

CVE-2026-104875 - Ente provides end-to-end encrypted cloud services and security tools. Prior to server image 2026.07.

CVE-2026-104817 - Misskey is an open source, federated social media platform. From 12.112.1 until 2026.7.0, the unauth

CVE-2026-104816 - Misskey is an open source, federated social media platform. From 12.0.0 until 2026.7.0, the RSS comp

CVE-2026-104584 - reNgine up to v2.2.0 and current master branch (commit de4199222cca5618f1255930ce78987e47d43a99) is

CVE-2026-104344 - Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbi

CVE-2026-104343 - Adobe Framemaker is affected by a NULL Pointer Dereference vulnerability that could result in an app

CVE-2026-104342 - Adobe Framemaker is affected by a Use After Free vulnerability that could result in arbitrary code e

CVE-2026-104341 - Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary

CVE-2026-104340 - Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbi

CVE-2026-103967 - Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary

CVE-2026-103966 - Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbi

CVE-2026-103937 - Misskey is an open source, federated social media platform. From 13.0.0 until 2025.4.1 and from 2025

CVE-2026-103857 - Adobe Framemaker is affected by an out-of-bounds read vulnerability that could lead to disclosure of

CVE-2026-103856 - Adobe Framemaker is affected by an out-of-bounds read vulnerability that could lead to disclosure of

CVE-2026-103849 - Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engi

CVE-2026-103578 - Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privilege

CVE-2026-103577 - Insecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass

CVE-2026-103576 - Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS)

CVE-2026-103575 - Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo

CVE-2026-103572 - Improper control of generation of code ('code injection') in Visual Studio Tools for Applications an

CVE-2026-103569 - Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information

CVE-2026-103568 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-103567 - Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose inf

CVE-2026-103565 - Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privil

CVE-2026-103560 - Improper authorization in DNS Server allows an authorized attacker to perform tampering locally.

CVE-2026-103558 - Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny

CVE-2026-103555 - Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker

CVE-2026-103554 - Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privil

CVE-2026-103553 - Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate p

CVE-2026-102870 - Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized att

CVE-2026-102869 - Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an un

CVE-2026-102867 - Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information

CVE-2026-102866 - Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthoriz

CVE-2026-102865 - Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose inf

CVE-2026-102864 - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of

CVE-2026-102863 - Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an a

CVE-2026-102862 - Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate priv

CVE-2026-102861 - Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privil

CVE-2026-102860 - Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate priv

CVE-2026-102859 - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of

CVE-2026-102858 - Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute co

CVE-2026-102857 - Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code

CVE-2026-102856 - Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code

CVE-2026-102851 - Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a secur

CVE-2026-102850 - Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute cod

CVE-2026-102849 - Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute cod

CVE-2026-102599 - Socket.IO enables bidirectional and low-latency communication for every platform. From Engine.IO 6.6

CVE-2026-102233 - Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security fea

CVE-2026-102232 - Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security f

CVE-2026-102231 - Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to byp

CVE-2026-102229 - Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code

CVE-2026-102227 - Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to

CVE-2026-102226 - Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business

CVE-2026-102225 - Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a ne

CVE-2026-102221 - No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feat

CVE-2026-102220 - Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges lo

CVE-2026-102218 - Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an auth

CVE-2026-102217 - Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privilege

CVE-2026-102216 - Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows

CVE-2026-102215 - Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an auth

CVE-2026-102214 - Use after free in Windows Hyper-V allows an authorized attacker to execute code locally.

CVE-2026-102211 - Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker

CVE-2026-102210 - Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code o

CVE-2026-102209 - Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate

CVE-2026-102208 - Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges

CVE-2026-102207 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-102206 - Heap-based buffer overflow in Windows Portable Device MTP Driver allows an unauthorized attacker to

CVE-2026-102205 - Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an auth

CVE-2026-102204 - Improper link resolution before file access ('link following') in Microsoft Defender for Endpoint al

CVE-2026-102203 - Access of resource using incompatible type ('type confusion') in RPC Runtime allows an unauthorized

CVE-2026-102202 - Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an auth

CVE-2026-102201 - Use after free in Microsoft Windows Media Foundation allows an authorized attacker to elevate privil

CVE-2026-102199 - Stack-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to d

CVE-2026-102198 - Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose info

CVE-2026-102197 - Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privil