CVE-2026-103825 - Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclos

CVE-2026-103824 - Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in

CVE-2026-103823 - Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result

CVE-2026-103822 - Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclos

CVE-2026-103821 - Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbi

CVE-2026-101294 - IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application

CVE-2026-100131 - Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosu

CVE-2026-100130 - Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosu

CVE-2026-100129 - Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execu

CVE-2026-100128 - Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execu

CVE-2026-100127 - Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execu

CVE-2026-100126 - Bridge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive

CVE-2026-100112 - Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary

CVE-2026-100111 - Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary

CVE-2026-90532 - Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result i

CVE-2026-90531 - Adobe Experience Manager is affected by an Improper Restriction of XML External Entity Reference ('X

CVE-2026-86022 - VNote is a note-taking platform. Prior to 4.3.0, SessionConfig::ExternalProgram::fetchCommand wraps

CVE-2026-86016 - VNote is a note-taking platform. Prior to 4.3.0, VNote uses the assignment `preNode.innerHTML = p_me

CVE-2026-83960 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-83958 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-83662 - Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75732 - Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result i

CVE-2026-70098 - Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a n

CVE-2026-63174 - Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability that allows a

CVE-2026-63172 - Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability that allows a

CVE-2026-63165 - Omnispace Agora Project before 26.10.0 contains a SQL injection vulnerability in the calendar functi

CVE-2026-63163 - Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in the MobileF

CVE-2026-63162 - Omnispace Agora Project before 26.10.0 contains a path traversal vulnerability that allows attackers

CVE-2026-63161 - Omnispace Agora Project before 26.10.0 contains a session fixation vulnerability that allows remote

CVE-2026-63160 - Omnispace Agora Project before 26.10.0 contains a vulnerability where the persistent remember-me tok

CVE-2026-63159 - Omnispace Agora Project before 26.10.0 contains a predictable password-reset token vulnerability tha

CVE-2026-63158 - Omnispace Agora Project before 26.10.0 contains an authentication bypass vulnerability that allows a

CVE-2026-63154 - Omnispace Agora Project before 26.10.0 contains a SQL identifier injection vulnerability that allows

CVE-2026-63153 - Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in setAffectat

CVE-2026-63152 - Omnispace Agora Project before 26.10.0 contains a second-order SQL injection vulnerability that allo

CVE-2026-63149 - Omnispace Agora Project before 26.10.0 contains an insecure randomness vulnerability that allows att

CVE-2026-63148 - Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that all

CVE-2026-63147 - Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that all

CVE-2026-63146 - Omnispace Agora Project before 26.10.0 contains a code injection vulnerability where unescaped, atta

CVE-2026-56826 - Shopper is a Headless e-commerce Admin Panel. From 2.0.0 until 2.9.2, authenticated users who could

CVE-2026-55601 - MultiTail is a utility for monitoring multiple log files in one terminal. In version 7.1.5 and earli

CVE-2026-48398 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-48383 - Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result i

CVE-2026-48382 - Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result i

CVE-2026-16753 - Incorrect authorization in the library-query execution endpoint in Lowcoder version, up to and inclu

CVE-2026-110084 - Adobe Experience Manager is affected by an XML Injection (aka Blind XPath Injection) vulnerability t

CVE-2026-110083 - Adobe Experience Manager is affected by an Improper Neutralization of Special Elements used in an SQ

CVE-2026-110082 - Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a l

CVE-2026-110081 - Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could

CVE-2026-110080 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-110079 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-110078 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-110077 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-110076 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-110075 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-110074 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-110073 - Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could

CVE-2026-110037 - Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could

CVE-2026-110005 - The `periphery` agent's container-management functionality of Komodo version 2.2.0 contains an OS co

CVE-2026-109415 - Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could

CVE-2026-107682 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-107305 - Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could

CVE-2026-106634 - Adobe Experience Manager is affected by an Improper Limitation of a Pathname to a Restricted Directo

CVE-2026-106633 - Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could

CVE-2026-106632 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-106631 - Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could

CVE-2026-106630 - Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could

CVE-2026-106629 - Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could

CVE-2026-106628 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-106626 - Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result

CVE-2026-105895 - Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result

CVE-2026-104585 - Mobile Security Framework (MobSF) v4.5.2 is vulnerable to Command Injection in /download_data/, /api

CVE-2026-104252 - Vitess is a database clustering system for horizontal scaling of MySQL. Prior to 23.0.5 and 24.0.2,

CVE-2026-103855 - Dimension is affected by a NULL Pointer Dereference vulnerability that could result in an applicatio

CVE-2026-103854 - Dimension is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary

CVE-2026-103853 - Dimension is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensit

CVE-2026-103852 - Substance3D - Stager is affected by a NULL Pointer Dereference vulnerability that could result in an

CVE-2026-103851 - Substance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability that could result in

CVE-2026-103850 - Substance3D - Stager is affected by an out-of-bounds read vulnerability that could lead to disclosur

CVE-2026-103848 - Adobe Experience Manager is affected by an Improper Neutralization of Special Elements used in an OS

CVE-2026-103847 - Dimension is affected by an Untrusted Search Path vulnerability that could result in arbitrary code

CVE-2026-103846 - Dimension is affected by an Improper Neutralization of Input During Web Page Generation vulnerabilit

CVE-2026-103845 - Dimension is affected by an Uncontrolled Search Path Element vulnerability that could result in arbi

CVE-2026-103844 - Dimension is affected by an out-of-bounds write vulnerability that could result in arbitrary code ex

CVE-2026-103843 - Substance3D - Stager is affected by a Use After Free vulnerability that could result in arbitrary co

CVE-2026-103842 - Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file,

CVE-2026-103841 - Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file,

CVE-2026-103840 - Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file,

CVE-2026-103839 - Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitr

CVE-2026-103838 - Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitr

CVE-2026-103837 - Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitr

CVE-2026-103836 - Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitr

CVE-2026-103835 - Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitr

CVE-2026-103834 - Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitr

CVE-2026-103833 - Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitr

CVE-2026-103832 - Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitr

CVE-2026-103830 - Substance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability that could result in

CVE-2026-102855 - Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code

CVE-2026-102238 - Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code

CVE-2026-102235 - Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to exe

CVE-2026-102234 - Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized att

CVE-2026-97844 - Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ

CVE-2026-97843 - Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ

CVE-2026-97842 - Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ

CVE-2026-97841 - Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ

CVE-2026-97840 - Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ

CVE-2026-97839 - Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ

CVE-2026-97838 - Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ

CVE-2026-97837 - Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ

CVE-2026-97836 - Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ

CVE-2026-97835 - Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ

CVE-2026-97834 - Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ

CVE-2026-97833 - Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ

CVE-2026-97832 - Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ

CVE-2026-97831 - Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ

CVE-2026-97830 - Double free in Windows Internet Information Services allows an unauthorized attacker to deny service

CVE-2026-97829 - Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ

CVE-2026-97828 - Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97827 - Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ

CVE-2026-97826 - Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ

CVE-2026-97825 - Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ

CVE-2026-97824 - Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ

CVE-2026-97823 - Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ

CVE-2026-97822 - Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ

CVE-2026-97821 - Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ

CVE-2026-97820 - Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ

CVE-2026-97819 - Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ

CVE-2026-97817 - Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over

CVE-2026-97816 - Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network

CVE-2026-97815 - Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute cod

CVE-2026-97814 - Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code o

CVE-2026-97813 - Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information

CVE-2026-97812 - Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileg

CVE-2026-97811 - Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.

CVE-2026-97810 - Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an a

CVE-2026-97809 - Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privil

CVE-2026-97808 - Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privil

CVE-2026-97807 - Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privil

CVE-2026-97806 - Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privil

CVE-2026-97805 - Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute

CVE-2026-97804 - Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges l

CVE-2026-97803 - Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc

CVE-2026-97801 - Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to

CVE-2026-97800 - Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authoriz

CVE-2026-97799 - Improper verification of cryptographic signature in Windows Audio Service allows an authorized attac

CVE-2026-97798 - Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error

CVE-2026-97794 - Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an a

CVE-2026-97793 - Missing authentication for critical function in Windows Setup and Deployment allows an authorized at

CVE-2026-97792 - Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an auth

CVE-2026-97790 - Improper link resolution before file access ('link following') in Windows Container Isolation FS Fil

CVE-2026-97789 - Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo

CVE-2026-97788 - Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attack

CVE-2026-97787 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-97783 - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of

CVE-2026-97782 - Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampe

CVE-2026-97781 - Improper neutralization of special elements used in a command ('command injection') in Microsoft Off

CVE-2026-97780 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-97779 - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information

CVE-2026-97778 - Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute

CVE-2026-97777 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-97776 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-97775 - Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a netw

CVE-2026-97774 - Time-of-check time-of-use (toctou) race condition in Microsoft Office Click-To-Run allows an authori

CVE-2026-97773 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-97772 - Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network

CVE-2026-97771 - Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a netw

CVE-2026-97770 - Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute cod

CVE-2026-97769 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-97768 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-97767 - Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network

CVE-2026-97766 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-97765 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-97763 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-97762 - Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code over a

CVE-2026-97761 - Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute cod

CVE-2026-97760 - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information

CVE-2026-97759 - Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a netw

CVE-2026-97758 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-97757 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-97756 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-97755 - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a

CVE-2026-97754 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-97753 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-97752 - Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a netw

CVE-2026-97751 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-97750 - Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute cod

CVE-2026-97749 - Double free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a netwo

CVE-2026-97748 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-97747 - Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a netw

CVE-2026-97746 - Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to

CVE-2026-97745 - Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a netw

CVE-2026-97744 - Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose inform

CVE-2026-97743 - Use after free in Microsoft Office Excel allows an unauthorized attacker to disclose information ove

CVE-2026-97742 - Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute cod

CVE-2026-97741 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-97740 - Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel

CVE-2026-97739 - Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to

CVE-2026-97738 - Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a netw

CVE-2026-97017 - Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a netw

CVE-2026-97016 - Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute co

CVE-2026-97014 - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information

CVE-2026-97012 - Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute c

CVE-2026-97011 - Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute c

CVE-2026-97010 - Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a netw

CVE-2026-97009 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-97008 - Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to

CVE-2026-97007 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-97005 - Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose inform

CVE-2026-97004 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-97003 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-97001 - Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code

CVE-2026-96997 - Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges local

CVE-2026-96996 - Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code

CVE-2026-96995 - Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privil

CVE-2026-96960 - Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny serv

CVE-2026-96959 - Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny

CVE-2026-96958 - Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a ne

CVE-2026-96957 - Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a

CVE-2026-96953 - Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an author

CVE-2026-96952 - Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to

CVE-2026-96951 - Improper neutralization of special elements used in a command ('command injection') in Windows Shell

CVE-2026-96950 - Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attac

CVE-2026-96949 - Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attac

CVE-2026-96948 - Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (cs

CVE-2026-96947 - Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attac

CVE-2026-96946 - Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attac

CVE-2026-96945 - Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over

CVE-2026-96944 - Insertion of sensitive information into externally-accessible file or directory in Windows Storage a

CVE-2026-96943 - Integer overflow or wraparound in Windows Raw Image Extension allows an unauthorized attacker to exe

CVE-2026-96939 - Time-of-check time-of-use (toctou) race condition in Servicing Stack Updates allows an authorized at

CVE-2026-96938 - Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to

CVE-2026-96937 - Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil

CVE-2026-96935 - Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an

CVE-2026-96934 - Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network

CVE-2026-96933 - Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to

CVE-2026-96932 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-96931 - Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges lo

CVE-2026-96930 - Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized a

CVE-2026-96929 - Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc

CVE-2026-96928 - Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-96927 - Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-96926 - Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.

CVE-2026-96925 - Integer underflow (wrap or wraparound) in Windows NTFS allows an authorized attacker to disclose inf

CVE-2026-96924 - Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a

CVE-2026-96923 - Use after free in Windows Workstation Service allows an authorized attacker to elevate privileges lo

CVE-2026-96921 - Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manag

CVE-2026-96920 - Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized a

CVE-2026-96919 - Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privil

CVE-2026-96918 - Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-96917 - Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privil