High-severity CVEs (page 8)
Page 8 of 100 — high-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-62892 | High | 7.0 | 2026-08-11 | Use after free in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally. |
CVE-2026-62890 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally. |
CVE-2026-62889 | High | 8.1 | 2026-08-11 | Double free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network. |
CVE-2026-62888 | High | 7.8 | 2026-08-11 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
CVE-2026-62886 | High | 7.8 | 2026-08-11 | Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally. |
CVE-2026-62885 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-62880 | High | 7.8 | 2026-08-11 | Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-62877 | High | 7.8 | 2026-08-11 | Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-62876 | High | 7.8 | 2026-08-11 | Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-62872 | High | 8.8 | 2026-08-11 | Incorrect authorization in .NET Framework allows an authorized attacker to elevate privileges over a network. |
CVE-2026-62871 | High | 7.8 | 2026-08-11 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. |
CVE-2026-62869 | High | 8.8 | 2026-08-11 | Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing over a network. |
CVE-2026-62832 | High | 7.8 | 2026-08-11 | Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-62827 | High | 8.8 | 2026-08-11 | Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
CVE-2026-62824 | High | 8.8 | 2026-08-11 | Stack-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-62823 | High | 8.8 | 2026-08-11 | Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network. |
CVE-2026-62822 | High | 8.8 | 2026-08-11 | Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network. |
CVE-2026-62820 | High | 8.1 | 2026-08-11 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to execute code over… |
CVE-2026-62819 | High | 8.1 | 2026-08-11 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine |
CVE-2026-62818 | High | 8.8 | 2026-08-11 | Use after free in Active Directory Certificate Services (AD CS) allows an authorized attacker to execute code over a network. |
CVE-2026-62817 | High | 8.8 | 2026-08-11 | Out-of-bounds write in Windows DNS allows an unauthorized attacker to execute code over an adjacent network. |
CVE-2026-62816 | High | 8.8 | 2026-08-11 | Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network. |
CVE-2026-62812 | High | 7.8 | 2026-08-11 | Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally. |
CVE-2026-62811 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
CVE-2026-62807 | High | 7.8 | 2026-08-11 | Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally. |
CVE-2026-62803 | High | 7.8 | 2026-08-11 | Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally. |
CVE-2026-62800 | High | 8.8 | 2026-08-11 | Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network. |
CVE-2026-62799 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally. |
CVE-2026-62797 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-62795 | High | 8.8 | 2026-08-11 | Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network. |
CVE-2026-62792 | High | 8.1 | 2026-08-11 | Stack-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to execute code over a network. |
CVE-2026-62790 | High | 8.8 | 2026-08-11 | Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network. |
CVE-2026-62788 | High | 7.0 | 2026-08-11 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-62787 | High | 7.5 | 2026-08-11 | Use after free in Windows DNS allows an authorized attacker to execute code over a network. |
CVE-2026-62785 | High | 8.8 | 2026-08-11 | Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network. |
CVE-2026-62784 | High | 8.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to execute code over a network. |
CVE-2026-62783 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-62781 | High | 8.1 | 2026-08-11 | Heap-based buffer overflow in RPC Runtime allows an unauthorized attacker to execute code over a network. |
CVE-2026-62780 | High | 7.0 | 2026-08-11 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-62779 | High | 7.8 | 2026-08-11 | Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally. |
CVE-2026-62778 | High | 8.1 | 2026-08-11 | Use after free in Windows DNS allows an unauthorized attacker to elevate privileges over a network. |
CVE-2026-62777 | High | 7.8 | 2026-08-11 | Missing authentication for critical function in Windows License Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-62776 | High | 7.8 | 2026-08-11 | Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally. |
CVE-2026-62774 | High | 7.0 | 2026-08-11 | Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-62773 | High | 7.0 | 2026-08-11 | Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
CVE-2026-62772 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. |
CVE-2026-62771 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-62770 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privileges locally. |
CVE-2026-62768 | High | 7.8 | 2026-08-11 | Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-62766 | High | 7.0 | 2026-08-11 | Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
CVE-2026-62761 | High | 7.8 | 2026-08-11 | Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally. |
CVE-2026-62758 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-62755 | High | 7.8 | 2026-08-11 | Stack-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally. |
CVE-2026-62754 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
CVE-2026-62753 | High | 7.0 | 2026-08-11 | Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
CVE-2026-62752 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
CVE-2026-62751 | High | 7.8 | 2026-08-11 | Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally. |
CVE-2026-62749 | High | 7.0 | 2026-08-11 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-62748 | High | 7.0 | 2026-08-11 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to eleva… |
CVE-2026-62747 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-62741 | High | 7.8 | 2026-08-11 | Integer underflow (wrap or wraparound) in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
CVE-2026-62739 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
CVE-2026-62737 | High | 7.8 | 2026-08-11 | Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-62736 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally. |
CVE-2026-62735 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
CVE-2026-62734 | High | 7.0 | 2026-08-11 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to eleva… |
CVE-2026-62733 | High | 7.8 | 2026-08-11 | Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-62732 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-62729 | High | 7.0 | 2026-08-11 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to eleva… |
CVE-2026-62728 | High | 7.0 | 2026-08-11 | Time-of-check time-of-use (toctou) race condition in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-62726 | High | 7.0 | 2026-08-11 | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-62725 | High | 7.0 | 2026-08-11 | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-62724 | High | 7.0 | 2026-08-11 | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-62723 | High | 7.0 | 2026-08-11 | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-62722 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-62721 | High | 7.8 | 2026-08-11 | Insufficient granularity of access control in User-Mode Power Service (UMPS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-62719 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally. |
CVE-2026-62717 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally. |
CVE-2026-62713 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-62712 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-62711 | High | 7.8 | 2026-08-11 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-62710 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-62707 | High | 7.8 | 2026-08-11 | Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. |
CVE-2026-62705 | High | 7.0 | 2026-08-11 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bind Filter Driver allows an authorized attacker to elev… |
CVE-2026-62701 | High | 7.8 | 2026-08-11 | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-62700 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-62698 | High | 7.8 | 2026-08-11 | Numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to elevate privileges locally. |
CVE-2026-62696 | High | 7.8 | 2026-08-11 | Integer underflow (wrap or wraparound) in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-62695 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. |
CVE-2026-62693 | High | 7.0 | 2026-08-11 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows MIDI Service Module allows an authorized attacker to ele… |
CVE-2026-62692 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. |
CVE-2026-62690 | High | 7.0 | 2026-08-11 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elev… |
CVE-2026-62688 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. |
CVE-2026-61939 | High | 7.0 | 2026-08-11 | Use after free in Winlogon allows an authorized attacker to elevate privileges locally. |
CVE-2026-61938 | High | 7.0 | 2026-08-11 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-61937 | High | 7.8 | 2026-08-11 | Integer overflow or wraparound in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
CVE-2026-61934 | High | 7.8 | 2026-08-11 | Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-61932 | High | 7.8 | 2026-08-11 | Access of resource using incompatible type ('type confusion') in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
CVE-2026-61930 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-61929 | High | 7.0 | 2026-08-11 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |