CVE-2026-65658 - Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex

CVE-2026-65657 - Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2026-65656 - Improper neutralization of special elements used in a command ('command injection') in Microsoft Off

CVE-2026-64922 - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of

CVE-2026-64921 - Missing authentication for critical function in Microsoft Office SharePoint allows an authorized att

CVE-2026-64920 - Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute cod

CVE-2026-64919 - Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute co

CVE-2026-64917 - Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information

CVE-2026-64916 - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of

CVE-2026-64915 - Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code

CVE-2026-64914 - Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute cod

CVE-2026-64912 - Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute co

CVE-2026-64911 - Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code l

CVE-2026-64910 - Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code lo

CVE-2026-64909 - Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execut

CVE-2026-64908 - Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute cod

CVE-2026-64907 - Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code

CVE-2026-64906 - Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute cod

CVE-2026-64905 - Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2026-64904 - Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthor

CVE-2026-64903 - Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code l

CVE-2026-64902 - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of

CVE-2026-64901 - Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex

CVE-2026-64900 - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of

CVE-2026-64899 - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local

CVE-2026-64898 - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local

CVE-2026-64897 - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of

CVE-2026-63533 - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local

CVE-2026-63532 - Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code l

CVE-2026-63531 - Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information

CVE-2026-63530 - Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information

CVE-2026-63529 - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local

CVE-2026-63528 - Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information

CVE-2026-63527 - Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code

CVE-2026-63526 - Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code loca

CVE-2026-63525 - Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code lo

CVE-2026-63524 - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local

CVE-2026-63522 - Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized att

CVE-2026-63521 - Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information

CVE-2026-63520 - Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute

CVE-2026-63519 - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local

CVE-2026-63518 - Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code

CVE-2026-63517 - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local

CVE-2026-63516 - Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to pe

CVE-2026-63515 - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2026-63514 - Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex

CVE-2026-63513 - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local

CVE-2026-63512 - Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to perform tamp

CVE-2026-62917 - Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform sp

CVE-2026-62915 - Missing authorization in Microsoft Exchange Server allows an authorized attacker to bypass a securit

CVE-2026-62914 - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Ex

CVE-2026-62913 - Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute cod

CVE-2026-62912 - Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to deny

CVE-2026-62911 - Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker t

CVE-2026-62910 - Improper control of resource identifiers ('resource injection') in Microsoft Exchange Server allows

CVE-2026-62909 - Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.

CVE-2026-62908 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-62902 - Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to

CVE-2026-62901 - Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a ne

CVE-2026-62900 - Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized

CVE-2026-62899 - Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an u

CVE-2026-62898 - Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a netw

CVE-2026-62897 - Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code loc

CVE-2026-62894 - Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate priv

CVE-2026-62893 - Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a

CVE-2026-62892 - Use after free in Capability Access Management Service (camsvc) allows an authorized attacker to ele

CVE-2026-62890 - Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally.

CVE-2026-62889 - Double free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to ex

CVE-2026-62888 - Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges local

CVE-2026-62887 - Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-62886 - Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally

CVE-2026-62885 - Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges loc

CVE-2026-62883 - Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.

CVE-2026-62882 - Insufficiently protected credentials in Microsoft Office Outlook allows an unauthorized attacker to

CVE-2026-62881 - Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.

CVE-2026-62880 - Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-62878 - Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a ne

CVE-2026-62877 - Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges lo

CVE-2026-62876 - Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-62872 - Incorrect authorization in .NET Framework allows an authorized attacker to elevate privileges over a

CVE-2026-62871 - Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.

CVE-2026-62869 - Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to pe

CVE-2026-62842 - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local

CVE-2026-62839 - Insufficiently protected credentials in Microsoft Office SharePoint allows an authorized attacker to

CVE-2026-62837 - Relative path traversal in Microsoft Office SharePoint allows an authorized attacker to disclose inf

CVE-2026-62832 - Improper link resolution before file access ('link following') in Windows User Profile Service allow

CVE-2026-62829 - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of

CVE-2026-62827 - Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate priv

CVE-2026-62824 - Stack-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code

CVE-2026-62823 - Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code ov

CVE-2026-62822 - Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over

CVE-2026-62820 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-62819 - Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an

CVE-2026-62818 - Use after free in Active Directory Certificate Services (AD CS) allows an authorized attacker to exe

CVE-2026-62817 - Out-of-bounds write in Windows DNS allows an unauthorized attacker to execute code over an adjacent

CVE-2026-62816 - Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized at

CVE-2026-62815 - Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.

CVE-2026-62814 - Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to dis

CVE-2026-62812 - Improper link resolution before file access ('link following') in Windows DHCP Server allows an auth

CVE-2026-62811 - Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges l

CVE-2026-62807 - Improper link resolution before file access ('link following') in Windows DHCP Server allows an auth

CVE-2026-62803 - Improper link resolution before file access ('link following') in Windows DHCP Server allows an auth

CVE-2026-62800 - Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over

CVE-2026-62799 - Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges

CVE-2026-62798 - Untrusted pointer dereference in Windows Win32K allows an authorized attacker to disclose informatio

CVE-2026-62797 - Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges local

CVE-2026-62796 - Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-62795 - Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attack

CVE-2026-62793 - Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-62792 - Stack-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to execute code over a

CVE-2026-62790 - Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over

CVE-2026-62788 - Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-62787 - Use after free in Windows DNS allows an authorized attacker to execute code over a network.

CVE-2026-62786 - Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.

CVE-2026-62785 - Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unautho

CVE-2026-62784 - Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorize

CVE-2026-62783 - Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker

CVE-2026-62782 - Out-of-bounds read in Windows SMB Client allows an unauthorized attacker to disclose information ove

CVE-2026-62781 - Heap-based buffer overflow in RPC Runtime allows an unauthorized attacker to execute code over a net

CVE-2026-62780 - Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-62779 - Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally.

CVE-2026-62778 - Use after free in Windows DNS allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-62777 - Missing authentication for critical function in Windows License Manager allows an authorized attacke

CVE-2026-62776 - Improper link resolution before file access ('link following') in Windows DHCP Server allows an auth

CVE-2026-62775 - Incorrect authorization in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an auth

CVE-2026-62774 - Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locall

CVE-2026-62773 - Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.

CVE-2026-62772 - Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an a

CVE-2026-62771 - Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker t

CVE-2026-62770 - Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privileges loca

CVE-2026-62769 - Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.

CVE-2026-62768 - Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges

CVE-2026-62766 - Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.

CVE-2026-62761 - Improper link resolution before file access ('link following') in Windows DHCP Server allows an auth

CVE-2026-62758 - Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker

CVE-2026-62757 - Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker

CVE-2026-62755 - Stack-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileg

CVE-2026-62754 - Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges l

CVE-2026-62753 - Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges l

CVE-2026-62752 - Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges l

CVE-2026-62751 - Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to ele

CVE-2026-62750 - Partial string comparison in Windows HTTP Protocol Stack allows an unauthorized attacker to perform

CVE-2026-62749 - Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-62748 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-62747 - Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to el

CVE-2026-62746 - Buffer over-read in Windows Win32K allows an authorized attacker to disclose information locally.

CVE-2026-62745 - Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to dis

CVE-2026-62743 - Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.

CVE-2026-62742 - Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to dis

CVE-2026-62741 - Integer underflow (wrap or wraparound) in Windows HTTP.sys allows an authorized attacker to elevate

CVE-2026-62740 - Use of uninitialized resource in Windows Imaging Component allows an authorized attacker to disclose

CVE-2026-62739 - Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges l

CVE-2026-62738 - Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose i

CVE-2026-62737 - Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges

CVE-2026-62736 - Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privilege

CVE-2026-62735 - Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges l

CVE-2026-62734 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-62733 - Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-62732 - Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate pri

CVE-2026-62730 - Buffer over-read in Windows Wired AutoConfig Service allows an authorized attacker to disclose infor

CVE-2026-62729 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-62728 - Time-of-check time-of-use (toctou) race condition in Windows Common Log File System Driver allows an

CVE-2026-62726 - Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges loca

CVE-2026-62725 - Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges loca

CVE-2026-62724 - Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges loca

CVE-2026-62723 - Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges loca

CVE-2026-62722 - Heap-based buffer overflow in Windows Brokering File System allows an authorized attacker to elevate

CVE-2026-62721 - Insufficient granularity of access control in User-Mode Power Service (UMPS) allows an authorized at

CVE-2026-62720 - Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to dis

CVE-2026-62719 - Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privi

CVE-2026-62718 - Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to dis

CVE-2026-62717 - Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privi

CVE-2026-62716 - Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to dis

CVE-2026-62715 - Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to dis

CVE-2026-62714 - Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to dis

CVE-2026-62713 - Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker t

CVE-2026-62712 - Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges loc

CVE-2026-62711 - Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-62710 - Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to el

CVE-2026-62709 - Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information

CVE-2026-62708 - Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges with a physic

CVE-2026-62707 - Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate pr

CVE-2026-62705 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-62703 - Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information

CVE-2026-62702 - Null pointer dereference in Windows Graphics Kernel allows an unauthorized attacker to deny service

CVE-2026-62701 - Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges loca

CVE-2026-62700 - Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges local

CVE-2026-62699 - Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an author

CVE-2026-62698 - Numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to elevate

CVE-2026-62696 - Integer underflow (wrap or wraparound) in Windows Program Compatibility Assistant Service allows an

CVE-2026-62695 - Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges lo

CVE-2026-62693 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-62692 - Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to eleva

CVE-2026-62690 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-62688 - Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate p

CVE-2026-61939 - Use after free in Winlogon allows an authorized attacker to elevate privileges locally.

CVE-2026-61938 - Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-61937 - Integer overflow or wraparound in Windows HTTP.sys allows an authorized attacker to elevate privileg

CVE-2026-61936 - Missing authorization in Windows Defender Firewall Service allows an authorized attacker to bypass a

CVE-2026-61934 - Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges loc

CVE-2026-61933 - Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information

CVE-2026-61932 - Access of resource using incompatible type ('type confusion') in Windows DWM Core Library allows an

CVE-2026-61930 - Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc

CVE-2026-61929 - Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-61928 - Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform

CVE-2026-61927 - Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges loc

CVE-2026-61926 - Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges

CVE-2026-61925 - Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges loc

CVE-2026-61924 - Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information

CVE-2026-61923 - Heap-based buffer overflow in Windows Display Enhancement Service allows an authorized attacker to e

CVE-2026-61921 - Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information

CVE-2026-61920 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-61918 - Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information

CVE-2026-61368 - Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information

CVE-2026-61367 - Missing authentication for critical function in Windows Remote Desktop Services allows an authorized

CVE-2026-61366 - Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges

CVE-2026-61365 - Missing authentication for critical function in Windows Remote Desktop Services allows an authorized

CVE-2026-61364 - Missing authentication for critical function in Windows Remote Desktop Services allows an authorized

CVE-2026-61363 - Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code

CVE-2026-61361 - Use after free in Windows DHCP Client allows an authorized attacker to execute code locally.

CVE-2026-61360 - Untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose information l

CVE-2026-61359 - Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges lo

CVE-2026-61358 - Improper link resolution before file access ('link following') in Windows Accessibility Infrastructu

CVE-2026-61357 - Use after free in Application Information Services allows an authorized attacker to elevate privileg

CVE-2026-61356 - Missing authentication for critical function in Windows Remote Desktop Services allows an authorized

CVE-2026-61355 - Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate p

CVE-2026-61353 - Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate pri

CVE-2026-61352 - Concurrent execution using shared resource with improper synchronization ('race condition') in Remot

CVE-2026-61350 - Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information with a phys

CVE-2026-61349 - Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges lo

CVE-2026-61348 - Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele

CVE-2026-61347 - Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose informat

CVE-2026-61346 - Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locall

CVE-2026-61345 - Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny

CVE-2026-59138 - Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny

CVE-2026-59137 - Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disc

CVE-2026-59136 - Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose

CVE-2026-59135 - Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose

CVE-2026-59134 - Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code

CVE-2026-59133 - Execution with unnecessary privileges in Microsoft High Performance Computing (HPC) Pack allows an a

CVE-2026-59132 - Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a ne

CVE-2026-59131 - No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally.

CVE-2026-59130 - No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally.

CVE-2026-59128 - Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose

CVE-2026-59127 - Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privile

CVE-2026-59126 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-59125 - Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate p

CVE-2026-59124 - Deserialization of untrusted data in Microsoft High Performance Computing (HPC) Pack allows an unaut

CVE-2026-59122 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-59119 - Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privi