High-severity CVEs (page 24)
Page 24 of 100 — high-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-85900 | High | 8.8 | 2026-10-13 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
CVE-2026-85891 | High | 7.5 | 2026-10-13 | Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized attacker to disclose information over a network. |
CVE-2026-85884 | High | 7.8 | 2026-10-13 | Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-85881 | High | 8.0 | 2026-10-13 | Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network. |
CVE-2026-85879 | High | 7.0 | 2026-10-13 | Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. |
CVE-2026-85874 | High | 7.8 | 2026-10-13 | Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally. |
CVE-2026-85872 | High | 7.8 | 2026-10-13 | Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-85871 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
CVE-2026-85870 | High | 7.0 | 2026-10-13 | Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-85869 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
CVE-2026-85868 | High | 7.0 | 2026-10-13 | Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-85867 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-85864 | High | 7.8 | 2026-10-13 | Improper privilege management in Python allows an authorized attacker to elevate privileges locally. |
CVE-2026-85863 | High | 7.8 | 2026-10-13 | Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-85861 | High | 7.8 | 2026-10-13 | Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-85860 | High | 7.8 | 2026-10-13 | Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-85858 | High | 7.8 | 2026-10-13 | Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
CVE-2026-85856 | High | 7.1 | 2026-10-13 | Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to execute code over an adjacent network. |
CVE-2026-85855 | High | 7.0 | 2026-10-13 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
CVE-2026-85854 | High | 7.0 | 2026-10-13 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
CVE-2026-85853 | High | 7.0 | 2026-10-13 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
CVE-2026-85851 | High | 7.8 | 2026-10-13 | Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally. |
CVE-2026-85850 | High | 7.8 | 2026-10-13 | Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-85849 | High | 7.8 | 2026-10-13 | Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-85848 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-85846 | High | 7.0 | 2026-10-13 | Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-85843 | High | 7.8 | 2026-10-13 | Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-85842 | High | 7.8 | 2026-10-13 | Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally. |
CVE-2026-85837 | High | 7.8 | 2026-10-13 | Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-85836 | High | 7.8 | 2026-10-13 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-85834 | High | 7.0 | 2026-10-13 | Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
CVE-2026-85833 | High | 7.8 | 2026-10-13 | Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. |
CVE-2026-85832 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-85829 | High | 7.8 | 2026-10-13 | Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-85828 | High | 7.0 | 2026-10-13 | Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally. |
CVE-2026-85827 | High | 7.0 | 2026-10-13 | Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally. |
CVE-2026-85826 | High | 7.0 | 2026-10-13 | Out-of-bounds write in Windows Fast FAT Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-85825 | High | 7.0 | 2026-10-13 | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-85824 | High | 7.0 | 2026-10-13 | Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally. |
CVE-2026-85823 | High | 7.0 | 2026-10-13 | Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally. |
CVE-2026-85822 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally. |
CVE-2026-85820 | High | 7.8 | 2026-10-13 | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-85817 | High | 8.8 | 2026-10-13 | Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized attacker to execute code over a network. |
CVE-2026-85811 | High | 7.5 | 2026-10-13 | Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over an adjacent network. |
CVE-2026-85810 | High | 7.0 | 2026-10-13 | Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally. |
CVE-2026-85808 | High | 7.5 | 2026-10-13 | Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network. |
CVE-2026-85807 | High | 7.8 | 2026-10-13 | Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-85804 | High | 7.8 | 2026-10-13 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
CVE-2026-85803 | High | 7.0 | 2026-10-13 | Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally. |
CVE-2026-85802 | High | 7.0 | 2026-10-13 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
CVE-2026-85800 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
CVE-2026-85799 | High | 8.1 | 2026-10-13 | Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network. |
CVE-2026-85798 | High | 7.2 | 2026-10-13 | Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network. |
CVE-2026-85796 | High | 7.8 | 2026-10-13 | Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-85795 | High | 7.8 | 2026-10-13 | Use after free in Windows Text Services Framework allows an authorized attacker to elevate privileges locally. |
CVE-2026-85791 | High | 7.0 | 2026-10-13 | Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-85377 | High | 7.8 | 2026-10-13 | Access of resource using incompatible type ('type confusion') in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-85376 | High | 7.8 | 2026-10-13 | Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. |
CVE-2026-85375 | High | 7.8 | 2026-10-13 | Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. |
CVE-2026-85373 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. |
CVE-2026-85372 | High | 7.0 | 2026-10-13 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-85371 | High | 8.1 | 2026-10-13 | Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network. |
CVE-2026-85370 | High | 7.0 | 2026-10-13 | Use after free in WebDAV allows an authorized attacker to elevate privileges locally. |
CVE-2026-85369 | High | 8.2 | 2026-10-13 | Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
CVE-2026-85368 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
CVE-2026-85367 | High | 7.0 | 2026-10-13 | Use after free in Windows Cash Drawer Protocol Provider allows an authorized attacker to elevate privileges locally. |
CVE-2026-85366 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-85365 | High | 7.0 | 2026-10-13 | Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. |
CVE-2026-85364 | High | 7.0 | 2026-10-13 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-85363 | High | 8.8 | 2026-10-13 | Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network. |
CVE-2026-85362 | High | 7.0 | 2026-10-13 | Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. |
CVE-2026-85361 | High | 7.0 | 2026-10-13 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-85359 | High | 7.8 | 2026-10-13 | Improper control of generation of code ('code injection') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally. |
CVE-2026-85358 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-85357 | High | 7.0 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Phone Service allows an authorized attacker to elevate p… |
CVE-2026-85356 | High | 7.8 | 2026-10-13 | Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-85355 | High | 7.0 | 2026-10-13 | Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-85354 | High | 7.0 | 2026-10-13 | Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
CVE-2026-85353 | High | 7.5 | 2026-10-13 | Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network. |
CVE-2026-85352 | High | 7.0 | 2026-10-13 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-85343 | High | 7.8 | 2026-10-13 | Improper link resolution before file access ('link following') in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
CVE-2026-85342 | High | 7.0 | 2026-10-13 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-85341 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-85340 | High | 7.8 | 2026-10-13 | Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally. |
CVE-2026-85339 | High | 8.8 | 2026-10-13 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine |
CVE-2026-85338 | High | 7.8 | 2026-10-13 | Out-of-bounds read in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. |
CVE-2026-85334 | High | 7.5 | 2026-10-13 | Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network. |
CVE-2026-85332 | High | 7.8 | 2026-10-13 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-85329 | High | 7.0 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Account allows an authorized attacker to elevate privi… |
CVE-2026-85328 | High | 7.0 | 2026-10-13 | Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally. |
CVE-2026-85327 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. |
CVE-2026-85324 | High | 7.5 | 2026-10-13 | Memory allocation with excessive size value in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. |
CVE-2026-85322 | High | 7.5 | 2026-10-13 | Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. |
CVE-2026-85321 | High | 7.5 | 2026-10-13 | Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a net… |
CVE-2026-85319 | High | 7.5 | 2026-10-13 | Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a net… |
CVE-2026-85318 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. |
CVE-2026-84020 | High | 7.0 | 2026-10-13 | Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-84019 | High | 7.0 | 2026-10-13 | Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. |
CVE-2026-84018 | High | 7.0 | 2026-10-13 | Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. |
CVE-2026-84017 | High | 7.5 | 2026-10-13 | Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network. |