High-severity CVEs (page 22)
Page 22 of 100 — high-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-96866 | High | 7.5 | 2026-10-13 | Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network. |
CVE-2026-96862 | High | 7.8 | 2026-10-13 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. |
CVE-2026-96861 | High | 7.5 | 2026-10-13 | Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network. |
CVE-2026-96856 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. |
CVE-2026-96852 | High | 7.0 | 2026-10-13 | Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
CVE-2026-96847 | High | 7.8 | 2026-10-13 | Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally. |
CVE-2026-96844 | High | 8.0 | 2026-10-13 | Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network. |
CVE-2026-96843 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally. |
CVE-2026-96325 | High | 7.5 | 2026-10-13 | Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network. |
CVE-2026-96324 | High | 7.8 | 2026-10-13 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
CVE-2026-96323 | High | 7.0 | 2026-10-13 | Use after free in Windows Update allows an authorized attacker to elevate privileges locally. |
CVE-2026-96322 | High | 7.0 | 2026-10-13 | Use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally. |
CVE-2026-96319 | High | 7.0 | 2026-10-13 | Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-96318 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally. |
CVE-2026-96317 | High | 7.8 | 2026-10-13 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-96313 | High | 7.0 | 2026-10-13 | Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally. |
CVE-2026-96312 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-96310 | High | 7.0 | 2026-10-13 | Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-96309 | High | 7.8 | 2026-10-13 | Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. |
CVE-2026-96308 | High | 7.8 | 2026-10-13 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-96307 | High | 7.0 | 2026-10-13 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-96306 | High | 7.8 | 2026-10-13 | Out-of-bounds read in Windows Sysmain Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-96305 | High | 7.0 | 2026-10-13 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-96304 | High | 7.0 | 2026-10-13 | Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-96302 | High | 7.0 | 2026-10-13 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-96301 | High | 7.0 | 2026-10-13 | Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-96254 | High | 7.0 | 2026-10-13 | Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-96253 | High | 7.0 | 2026-10-13 | Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-96251 | High | 8.8 | 2026-10-13 | Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network. |
CVE-2026-96250 | High | 7.0 | 2026-10-13 | Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-96249 | High | 7.8 | 2026-10-13 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
CVE-2026-96248 | High | 7.5 | 2026-10-13 | Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network. |
CVE-2026-96246 | High | 7.5 | 2026-10-13 | Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network. |
CVE-2026-96245 | High | 7.5 | 2026-10-13 | Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. |
CVE-2026-96244 | High | 7.8 | 2026-10-13 | Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally. |
CVE-2026-96243 | High | 7.8 | 2026-10-13 | Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges locally. |
CVE-2026-96237 | High | 7.5 | 2026-10-13 | Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network. |
CVE-2026-96236 | High | 7.5 | 2026-10-13 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. |
CVE-2026-96235 | High | 8.8 | 2026-10-13 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. |
CVE-2026-96233 | High | 7.5 | 2026-10-13 | Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network. |
CVE-2026-96232 | High | 7.5 | 2026-10-13 | Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network. |
CVE-2026-96231 | High | 7.8 | 2026-10-13 | Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally. |
CVE-2026-96230 | High | 8.8 | 2026-10-13 | Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to execute code over a net… |
CVE-2026-96225 | High | 7.8 | 2026-10-13 | Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally. |
CVE-2026-96224 | High | 8.8 | 2026-10-13 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. |
CVE-2026-96223 | High | 7.8 | 2026-10-13 | Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
CVE-2026-96222 | High | 7.4 | 2026-10-13 | Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. |
CVE-2026-96220 | High | 7.8 | 2026-10-13 | Improper control of generation of code ('code injection') in Windows Assigned Access allows an authorized attacker to elevate privileges locally. |
CVE-2026-96217 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-96216 | High | 7.0 | 2026-10-13 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-96215 | High | 7.0 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Autopilot allows an authorized attacker to elevate privi… |
CVE-2026-96209 | High | 7.0 | 2026-10-13 | Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally. |
CVE-2026-96202 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network. |
CVE-2026-96188 | High | 7.3 | 2026-10-13 | External control of system or configuration setting in Microsoft PowerToys allows an authorized attacker to elevate privileges locally. |
CVE-2026-96186 | High | 7.8 | 2026-10-13 | Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally. |
CVE-2026-96118 | High | 7.8 | 2026-10-13 | Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-96108 | High | 7.8 | 2026-10-13 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-96071 | High | 7.5 | 2026-10-13 | Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network. |
CVE-2026-96044 | High | 8.8 | 2026-10-13 | No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
CVE-2026-95943 | High | 7.0 | 2026-10-13 | Double free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally. |
CVE-2026-95631 | High | 8.7 | 2026-10-13 | Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An a… |
CVE-2026-92922 | High | 8.1 | 2026-10-13 | Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts… |
CVE-2026-92911 | High | 8.7 | 2026-10-13 | Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts i… |
CVE-2026-92910 | High | 7.2 | 2026-10-13 | Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerab… |
CVE-2026-92908 | High | 8.3 | 2026-10-13 | Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage… |
CVE-2026-88219 | High | 8.8 | 2026-10-13 | Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a network. |
CVE-2026-88210 | High | 7.8 | 2026-10-13 | Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally. |
CVE-2026-88207 | High | 7.5 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. |
CVE-2026-88206 | High | 7.5 | 2026-10-13 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
CVE-2026-88204 | High | 7.3 | 2026-10-13 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform sp… |
CVE-2026-88202 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-88200 | High | 8.8 | 2026-10-13 | Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
CVE-2026-88198 | High | 8.8 | 2026-10-13 | Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
CVE-2026-88197 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. |
CVE-2026-88196 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. |
CVE-2026-88194 | High | 7.8 | 2026-10-13 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
CVE-2026-88193 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally. |
CVE-2026-88191 | High | 7.8 | 2026-10-13 | Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locall… |
CVE-2026-88189 | High | 7.8 | 2026-10-13 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
CVE-2026-88188 | High | 7.8 | 2026-10-13 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
CVE-2026-88186 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-88185 | High | 8.1 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-88182 | High | 7.8 | 2026-10-13 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
CVE-2026-88181 | High | 7.8 | 2026-10-13 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
CVE-2026-88180 | High | 7.8 | 2026-10-13 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
CVE-2026-88179 | High | 7.8 | 2026-10-13 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
CVE-2026-88177 | High | 7.8 | 2026-10-13 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
CVE-2026-88174 | High | 8.1 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Deployment Services allows an unauthorized attacker to e… |
CVE-2026-88173 | High | 8.1 | 2026-10-13 | Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network. |
CVE-2026-88171 | High | 8.1 | 2026-10-13 | Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
CVE-2026-88168 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-88166 | High | 8.8 | 2026-10-13 | Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
CVE-2026-88165 | High | 8.8 | 2026-10-13 | Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network. |
CVE-2026-88163 | High | 8.8 | 2026-10-13 | Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
CVE-2026-88161 | High | 7.0 | 2026-10-13 | Use after free in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally. |
CVE-2026-88160 | High | 7.0 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows Search Component allows an authorized attacker… |
CVE-2026-88159 | High | 8.8 | 2026-10-13 | Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network. |
CVE-2026-88157 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. |
CVE-2026-88155 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
CVE-2026-88152 | High | 7.8 | 2026-10-13 | Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. |