High-severity CVEs (page 28)
Page 28 of 100 — high-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-70181 | High | 7.5 | 2026-10-13 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. |
CVE-2026-70179 | High | 7.5 | 2026-10-13 | Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network. |
CVE-2026-70177 | High | 7.8 | 2026-10-13 | Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
CVE-2026-70176 | High | 7.0 | 2026-10-13 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
CVE-2026-70175 | High | 8.1 | 2026-10-13 | Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network. |
CVE-2026-70174 | High | 8.8 | 2026-10-13 | Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network. |
CVE-2026-70172 | High | 7.8 | 2026-10-13 | Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-70169 | High | 7.0 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized… |
CVE-2026-70168 | High | 7.0 | 2026-10-13 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
CVE-2026-70167 | High | 8.8 | 2026-10-13 | Access of resource using incompatible type ('type confusion') in DNS Server allows an authorized attacker to execute code over a network. |
CVE-2026-70164 | High | 7.0 | 2026-10-13 | Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
CVE-2026-70163 | High | 7.5 | 2026-10-13 | Allocation of resources without limits or throttling in OpenSSH for Windows allows an unauthorized attacker to deny service over a network. |
CVE-2026-70161 | High | 7.3 | 2026-10-13 | Improper limitation of a pathname to a restricted directory ('path traversal') in .NET allows an authorized attacker to elevate privileges locally. |
CVE-2026-70160 | High | 7.0 | 2026-10-13 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-70159 | High | 7.5 | 2026-10-13 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. |
CVE-2026-70158 | High | 8.8 | 2026-10-13 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine |
CVE-2026-70156 | High | 7.0 | 2026-10-13 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
CVE-2026-70155 | High | 7.5 | 2026-10-13 | Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network. |
CVE-2026-70151 | High | 7.8 | 2026-10-13 | Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. |
CVE-2026-70150 | High | 7.0 | 2026-10-13 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
CVE-2026-70149 | High | 8.8 | 2026-10-13 | Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose informatio… |
CVE-2026-70144 | High | 7.0 | 2026-10-13 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
CVE-2026-70143 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally. |
CVE-2026-70142 | High | 7.8 | 2026-10-13 | Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-70140 | High | 7.0 | 2026-10-13 | Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-70139 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-70138 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally. |
CVE-2026-70136 | High | 7.0 | 2026-10-13 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
CVE-2026-70134 | High | 7.0 | 2026-10-13 | Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally. |
CVE-2026-70133 | High | 7.5 | 2026-10-13 | Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network. |
CVE-2026-70132 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-70131 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to elevate privileges locally. |
CVE-2026-70127 | High | 8.1 | 2026-10-13 | Use after free in DNS Server allows an unauthorized attacker to execute code over a network. |
CVE-2026-70126 | High | 7.1 | 2026-10-13 | Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network. |
CVE-2026-70123 | High | 7.8 | 2026-10-13 | Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. |
CVE-2026-70121 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-70118 | High | 7.0 | 2026-10-13 | Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-70117 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
CVE-2026-70115 | High | 7.0 | 2026-10-13 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
CVE-2026-70114 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-70113 | High | 7.8 | 2026-10-13 | Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-70112 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally. |
CVE-2026-70111 | High | 8.1 | 2026-10-13 | Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network. |
CVE-2026-70110 | High | 7.8 | 2026-10-13 | Stack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally. |
CVE-2026-70109 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally. |
CVE-2026-70108 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
CVE-2026-70106 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-70104 | High | 7.8 | 2026-10-13 | Untrusted pointer dereference in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
CVE-2026-70103 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
CVE-2026-70102 | High | 7.8 | 2026-10-13 | Use after free in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. |
CVE-2026-70095 | High | 7.5 | 2026-10-13 | Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network. |
CVE-2026-70093 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally. |
CVE-2026-70092 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally. |
CVE-2026-70089 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a network. |
CVE-2026-70086 | High | 7.0 | 2026-10-13 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
CVE-2026-70082 | High | 7.5 | 2026-10-13 | Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network. |
CVE-2026-70079 | High | 7.5 | 2026-10-13 | Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network. |
CVE-2026-70076 | High | 7.0 | 2026-10-13 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
CVE-2026-70069 | High | 8.8 | 2026-10-13 | Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network. |
CVE-2026-70068 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to elevate privileges over a network. |
CVE-2026-70067 | High | 7.0 | 2026-10-13 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
CVE-2026-70066 | High | 7.0 | 2026-10-13 | Use after free in Windows DHCP Server allows an authorized attacker to elevate privileges locally. |
CVE-2026-70064 | High | 7.8 | 2026-10-13 | Integer underflow (wrap or wraparound) in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
CVE-2026-70062 | High | 8.1 | 2026-10-13 | Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network. |
CVE-2026-70060 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
CVE-2026-70059 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally. |
CVE-2026-70058 | High | 7.5 | 2026-10-13 | Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
CVE-2026-70056 | High | 7.0 | 2026-10-13 | Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-70054 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally. |
CVE-2026-70052 | High | 7.8 | 2026-10-13 | Integer overflow or wraparound in Windows PowerShell allows an authorized attacker to execute code locally. |
CVE-2026-70051 | High | 7.8 | 2026-10-13 | Access of resource using incompatible type ('type confusion') in Windows SmartScreen allows an authorized attacker to elevate privileges locally. |
CVE-2026-70049 | High | 8.0 | 2026-10-13 | Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevat… |
CVE-2026-70048 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-70045 | High | 7.0 | 2026-10-13 | Use after free in Windows Work Folders allows an authorized attacker to elevate privileges locally. |
CVE-2026-70038 | High | 8.1 | 2026-10-13 | Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network. |
CVE-2026-70035 | High | 8.8 | 2026-10-13 | Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network. |
CVE-2026-70033 | High | 7.5 | 2026-10-13 | Missing release of memory after effective lifetime in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network. |
CVE-2026-70031 | High | 7.5 | 2026-10-13 | Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network. |
CVE-2026-70027 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. |
CVE-2026-70026 | High | 7.0 | 2026-10-13 | Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. |
CVE-2026-70023 | High | 7.8 | 2026-10-13 | Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
CVE-2026-70021 | High | 7.0 | 2026-10-13 | Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. |
CVE-2026-70015 | High | 7.8 | 2026-10-13 | Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-70014 | High | 7.5 | 2026-10-13 | Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network. |
CVE-2026-70013 | High | 8.1 | 2026-10-13 | Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network. |
CVE-2026-70012 | High | 7.5 | 2026-10-13 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-70010 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-70008 | High | 7.8 | 2026-10-13 | Integer overflow or wraparound in Windows IP Over USB Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-70007 | High | 8.8 | 2026-10-13 | Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network. |
CVE-2026-70006 | High | 7.5 | 2026-10-13 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-70004 | High | 7.5 | 2026-10-13 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-69998 | High | 7.5 | 2026-10-13 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-69997 | High | 7.5 | 2026-10-13 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-69996 | High | 7.5 | 2026-10-13 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-69995 | High | 7.5 | 2026-10-13 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-69994 | High | 7.5 | 2026-10-13 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-69992 | High | 7.5 | 2026-10-13 | Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network. |
CVE-2026-69991 | High | 7.5 | 2026-10-13 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-69988 | High | 7.5 | 2026-10-13 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-69987 | High | 7.5 | 2026-10-13 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |