High-severity CVEs (page 21)
Page 21 of 100 — high-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-97806 | High | 7.8 | 2026-10-13 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-97804 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-97803 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-97801 | High | 7.5 | 2026-10-13 | Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network. |
CVE-2026-97800 | High | 7.8 | 2026-10-13 | Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally. |
CVE-2026-97799 | High | 7.8 | 2026-10-13 | Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-97798 | High | 7.8 | 2026-10-13 | Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileg… |
CVE-2026-97794 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. |
CVE-2026-97793 | High | 7.0 | 2026-10-13 | Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally. |
CVE-2026-97792 | High | 7.8 | 2026-10-13 | Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. |
CVE-2026-97789 | High | 7.5 | 2026-10-13 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-97788 | High | 7.5 | 2026-10-13 | Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network. |
CVE-2026-97787 | High | 7.0 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Container Isolation FS Filter Driver (unionfs.sys) allow… |
CVE-2026-97783 | High | 8.1 | 2026-10-13 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform… |
CVE-2026-97781 | High | 8.8 | 2026-10-13 | Improper neutralization of special elements used in a command ('command injection') in Microsoft Office OneNote allows an unauthorized attacker to execute code… |
CVE-2026-97780 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97778 | High | 8.8 | 2026-10-13 | Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97777 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97776 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97775 | High | 8.8 | 2026-10-13 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97774 | High | 7.0 | 2026-10-13 | Time-of-check time-of-use (toctou) race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally. |
CVE-2026-97773 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97772 | High | 8.8 | 2026-10-13 | Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97771 | High | 8.8 | 2026-10-13 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97770 | High | 8.8 | 2026-10-13 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97769 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97768 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97767 | High | 8.8 | 2026-10-13 | Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97766 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97765 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97763 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97762 | High | 8.8 | 2026-10-13 | Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97761 | High | 8.8 | 2026-10-13 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97759 | High | 8.8 | 2026-10-13 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97758 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97757 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97756 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97755 | High | 8.8 | 2026-10-13 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97754 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97753 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97752 | High | 8.8 | 2026-10-13 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97751 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97750 | High | 8.8 | 2026-10-13 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97748 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97747 | High | 8.8 | 2026-10-13 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97746 | High | 8.8 | 2026-10-13 | Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97745 | High | 8.8 | 2026-10-13 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97742 | High | 8.8 | 2026-10-13 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97741 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97739 | High | 8.8 | 2026-10-13 | Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97738 | High | 8.8 | 2026-10-13 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97017 | High | 8.8 | 2026-10-13 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97012 | High | 8.8 | 2026-10-13 | Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
CVE-2026-97011 | High | 8.8 | 2026-10-13 | Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97010 | High | 8.8 | 2026-10-13 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97009 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-97008 | High | 8.8 | 2026-10-13 | Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97007 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97004 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97003 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97001 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-96997 | High | 7.8 | 2026-10-13 | Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally. |
CVE-2026-96996 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-96995 | High | 7.8 | 2026-10-13 | Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally. |
CVE-2026-96960 | High | 7.5 | 2026-10-13 | Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network. |
CVE-2026-96959 | High | 7.5 | 2026-10-13 | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. |
CVE-2026-96958 | High | 7.5 | 2026-10-13 | Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network. |
CVE-2026-96957 | High | 8.8 | 2026-10-13 | Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network. |
CVE-2026-96953 | High | 7.8 | 2026-10-13 | Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally. |
CVE-2026-96952 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
CVE-2026-96951 | High | 8.8 | 2026-10-13 | Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security featu… |
CVE-2026-96950 | High | 7.8 | 2026-10-13 | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-96949 | High | 7.0 | 2026-10-13 | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-96947 | High | 7.8 | 2026-10-13 | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-96946 | High | 7.8 | 2026-10-13 | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-96945 | High | 7.5 | 2026-10-13 | Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network. |
CVE-2026-96943 | High | 8.8 | 2026-10-13 | Integer overflow or wraparound in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network. |
CVE-2026-96939 | High | 7.0 | 2026-10-13 | Time-of-check time-of-use (toctou) race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. |
CVE-2026-96937 | High | 7.0 | 2026-10-13 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
CVE-2026-96933 | High | 7.8 | 2026-10-13 | Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-96932 | High | 7.0 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Embedded Mode Service allows an authorized attacker to e… |
CVE-2026-96931 | High | 7.8 | 2026-10-13 | Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-96929 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-96928 | High | 7.8 | 2026-10-13 | Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-96923 | High | 7.0 | 2026-10-13 | Use after free in Windows Workstation Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-96920 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-96919 | High | 7.0 | 2026-10-13 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-96918 | High | 7.8 | 2026-10-13 | Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-96917 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-96916 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-96915 | High | 7.8 | 2026-10-13 | Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
CVE-2026-96914 | High | 8.8 | 2026-10-13 | Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. |
CVE-2026-96913 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-96912 | High | 7.8 | 2026-10-13 | Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-96911 | High | 7.8 | 2026-10-13 | Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locall… |
CVE-2026-96868 | High | 7.0 | 2026-10-13 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-96867 | High | 7.8 | 2026-10-13 | Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally. |
CVE-2026-96866 | High | 7.5 | 2026-10-13 | Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network. |
CVE-2026-96862 | High | 7.8 | 2026-10-13 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. |
CVE-2026-96861 | High | 7.5 | 2026-10-13 | Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network. |