High-severity CVEs (page 29)
Page 29 of 100 — high-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-69986 | High | 7.5 | 2026-10-13 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-69985 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network. |
CVE-2026-69984 | High | 7.5 | 2026-10-13 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-69977 | High | 7.0 | 2026-10-13 | Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally. |
CVE-2026-69976 | High | 7.5 | 2026-10-13 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-69970 | High | 7.0 | 2026-10-13 | Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-69966 | High | 7.8 | 2026-10-13 | Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-69964 | High | 7.0 | 2026-10-13 | Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-69963 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-69959 | High | 7.8 | 2026-10-13 | Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally. |
CVE-2026-69957 | High | 7.8 | 2026-10-13 | Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
CVE-2026-69953 | High | 7.8 | 2026-10-13 | Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
CVE-2026-69952 | High | 7.8 | 2026-10-13 | Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
CVE-2026-69950 | High | 7.8 | 2026-10-13 | Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
CVE-2026-69949 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-69945 | High | 8.8 | 2026-10-13 | Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally. |
CVE-2026-69943 | High | 8.8 | 2026-10-13 | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code ove… |
CVE-2026-69942 | High | 7.8 | 2026-10-13 | Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally. |
CVE-2026-69935 | High | 7.0 | 2026-10-13 | Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. |
CVE-2026-69934 | High | 7.8 | 2026-10-13 | Integer overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. |
CVE-2026-69931 | High | 7.0 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage allows an authorized attacker to elevate privile… |
CVE-2026-69926 | High | 7.8 | 2026-10-13 | Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-69923 | High | 7.8 | 2026-10-13 | Uncontrolled search path element in Windows AI allows an authorized attacker to elevate privileges locally. |
CVE-2026-69918 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally. |
CVE-2026-69916 | High | 7.8 | 2026-10-13 | Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-69915 | High | 7.0 | 2026-10-13 | Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-69913 | High | 8.1 | 2026-10-13 | Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network. |
CVE-2026-69909 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally. |
CVE-2026-69898 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-69884 | High | 7.8 | 2026-10-13 | Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally. |
CVE-2026-69882 | High | 7.8 | 2026-10-13 | Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally. |
CVE-2026-69880 | High | 7.8 | 2026-10-13 | Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-69867 | High | 7.8 | 2026-10-13 | Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally. |
CVE-2026-69856 | High | 7.0 | 2026-10-13 | Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. |
CVE-2026-69850 | High | 7.8 | 2026-10-13 | Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges locally. |
CVE-2026-69840 | High | 7.0 | 2026-10-13 | Use after free in Windows Certificates allows an authorized attacker to elevate privileges locally. |
CVE-2026-69830 | High | 8.1 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Server allows an unauthorized attacker to execute c… |
CVE-2026-69802 | High | 8.1 | 2026-10-13 | Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute code over a network. |
CVE-2026-69798 | High | 7.8 | 2026-10-13 | Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-69795 | High | 7.0 | 2026-10-13 | Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privileges locally. |
CVE-2026-69789 | High | 7.5 | 2026-10-13 | Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network. |
CVE-2026-69783 | High | 7.8 | 2026-10-13 | External control of file name or path in Windows Update allows an authorized attacker to elevate privileges locally. |
CVE-2026-69766 | High | 7.0 | 2026-10-13 | Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. |
CVE-2026-69765 | High | 8.8 | 2026-10-13 | Use after free in Windows Storport Miniport Driver allows an unauthorized attacker to execute code over a network. |
CVE-2026-69763 | High | 7.0 | 2026-10-13 | Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. |
CVE-2026-69743 | High | 7.0 | 2026-10-13 | Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-69736 | High | 7.0 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Manager allows an authorized attacker to elev… |
CVE-2026-69733 | High | 7.8 | 2026-10-13 | Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally. |
CVE-2026-69718 | High | 7.8 | 2026-10-13 | Improper neutralization of special elements used in a command ('command injection') in Windows Update allows an authorized attacker to elevate privileges local… |
CVE-2026-69673 | High | 7.8 | 2026-10-13 | Improper link resolution before file access ('link following') in Windows Update allows an authorized attacker to elevate privileges locally. |
CVE-2026-69651 | High | 7.5 | 2026-10-13 | Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network. |
CVE-2026-69650 | High | 7.8 | 2026-10-13 | Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally. |
CVE-2026-69633 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally. |
CVE-2026-69596 | High | 7.0 | 2026-10-13 | Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-69577 | High | 7.5 | 2026-10-13 | Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a… |
CVE-2026-69521 | High | 8.8 | 2026-10-13 | Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network. |
CVE-2026-69471 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-69454 | High | 7.5 | 2026-10-13 | Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a… |
CVE-2026-69452 | High | 7.1 | 2026-10-13 | Use after free in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network. |
CVE-2026-69387 | High | 7.0 | 2026-10-13 | Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
CVE-2026-69370 | High | 8.8 | 2026-10-13 | Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code over… |
CVE-2026-69363 | High | 8.0 | 2026-10-13 | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network. |
CVE-2026-69354 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
CVE-2026-69326 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network. |
CVE-2026-68836 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally. |
CVE-2026-61931 | High | 7.8 | 2026-10-13 | Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-58280 | High | 7.5 | 2026-10-13 | Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network. |
CVE-2026-49785 | High | 7.8 | 2026-10-13 | Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally. |
CVE-2026-110255 | High | 8.5 | 2026-10-13 | Finsys Dockhand before 1.0.43 contains a response-disclosing server-side request forgery vulnerability that allows authenticated users to make the server fetch… |
CVE-2026-110249 | High | 8.6 | 2026-10-13 | A malicious, compromised, or MITM-controlled Exchange server can return a single well-formed SOAP response containing an element with enough attributes to keep… |
CVE-2026-110247 | High | 8.4 | 2026-10-13 | Several buffer-growth sites in libmime performed size arithmetic in 32-bit types without overflow checks. On a sufficiently large message the growth guard coul… |
CVE-2026-110238 | High | 8.8 | 2026-10-13 | Rapyd Admin from 9.0.0 before 9.20.0 contains an authorization bypass vulnerability that allows authenticated company members with the default customer role to… |
CVE-2026-110237 | High | 7.3 | 2026-10-13 | Vifm 0.8.1-beta through 0.14.4 reuses a pre-existing IPC FIFO in the shared temporary directory without checking ownership, allowing local users to execute com… |
CVE-2026-110236 | High | 7.0 | 2026-10-13 | KDE Dolphin 24.08.0 through 26.08.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted folder names… |
CVE-2026-110233 | High | 7.8 | 2026-10-13 | Rovr through 0.10.3 on Windows contains an OS command injection vulnerability that allows attackers to execute commands by crafting malicious file names. Attac… |
CVE-2026-110220 | High | 7.1 | 2026-10-13 | Kubeflow Model Registry through 0.3.17 contains a server-side request forgery vulnerability that allows namespace users to steal the controller ServiceAccount… |
CVE-2026-110216 | High | 7.1 | 2026-10-13 | youlai-boot through 2.21.1 contains a missing authorization vulnerability that allows any authenticated user to enable or disable accounts because the updateUs… |
CVE-2026-110215 | High | 8.8 | 2026-10-13 | youlai-boot through 2.21.1 contains a missing authorization vulnerability that allows authenticated users to assign arbitrary menu and button permissions to ro… |
CVE-2026-110211 | High | 8.1 | 2026-10-13 | iFlytek SkillHub through 0.2.22 contains a missing authorization vulnerability that allows any authenticated user to permanently delete other users' skills via… |
CVE-2026-110208 | High | 7.1 | 2026-10-13 | Wukong AICRM through 20260610 contains a missing authorization vulnerability in the /systemConfig controller that allows any authenticated user to read the sto… |
CVE-2026-110207 | High | 8.8 | 2026-10-13 | Wukong AICRM through 20260610 contains a missing authorization vulnerability that allows any authenticated user to call user, role, department and agent admini… |
CVE-2026-110206 | High | 8.8 | 2026-10-13 | Roo Code through 3.54.0 contains a command approval bypass vulnerability in parseCommandLine() that allows attackers to auto-approve arbitrary shell commands b… |
CVE-2026-110205 | High | 8.8 | 2026-10-13 | Roo Code through 3.54.0 contains a command approval bypass vulnerability in parseCommandLine() that discards command substitutions placed next to * or ? glob c… |
CVE-2026-110204 | High | 8.8 | 2026-10-13 | Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to run denied shell commands because parseCommandLine() treats $… |
CVE-2026-110203 | High | 8.8 | 2026-10-13 | Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to auto-approve denied shell commands by abusing quote-masking r… |
CVE-2026-110202 | High | 8.8 | 2026-10-13 | Roo Code through 3.54.0 contains a command approval bypass vulnerability in getCommandDecision() that allows attackers to auto-approve denied shell commands by… |
CVE-2026-110112 | High | 8.1 | 2026-10-13 | Dockhand before 1.0.50 contains a privilege escalation vulnerability that allows users from another tenant to gain admin access because OIDC iss, aud, nonce an… |
CVE-2026-110111 | High | 7.5 | 2026-10-13 | Xen Orchestra before 6.9.0 contains an improper access control vulnerability that allows any authenticated user to become global administrator by abusing the u… |
CVE-2026-109453 | High | 7.0 | 2026-10-13 | Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-109429 | High | 8.8 | 2026-10-13 | Mistral Vibe before 2.25.4 contains a command permission gate bypass vulnerability that allows attackers to execute arbitrary commands by hiding a command subs… |
CVE-2026-109428 | High | 8.8 | 2026-10-13 | Mistral Vibe before 2.25.5 contains a permission validation bypass vulnerability that allows attackers to execute unauthorized commands by exploiting a parsing… |
CVE-2026-108471 | High | 8.8 | 2026-10-13 | Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. |
CVE-2026-108468 | High | 7.0 | 2026-10-13 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-108467 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network. |
CVE-2026-108465 | High | 7.0 | 2026-10-13 | Use after free in Windows Update Delivery Optimization allows an authorized attacker to elevate privileges locally. |
CVE-2026-108464 | High | 7.0 | 2026-10-13 | Use after free in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally. |
CVE-2026-108463 | High | 8.8 | 2026-10-13 | Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network. |
CVE-2026-108461 | High | 7.0 | 2026-10-13 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-108460 | High | 8.1 | 2026-10-13 | Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network. |
CVE-2026-108458 | High | 8.8 | 2026-10-13 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |