High-severity CVEs (page 97)
Page 97 of 100 — high-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-68837 | High | 7.0 | 2026-09-08 | Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-68835 | High | 7.1 | 2026-09-08 | Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network. |
CVE-2026-68834 | High | 8.0 | 2026-09-08 | Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network. |
CVE-2026-68832 | High | 7.8 | 2026-09-08 | Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-68828 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-68827 | High | 8.0 | 2026-09-08 | Integer underflow (wrap or wraparound) in Windows GDI+ allows an authorized attacker to elevate privileges over a network. |
CVE-2026-68825 | High | 7.0 | 2026-09-08 | Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-68824 | High | 7.0 | 2026-09-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User Experiences and Telemetry allows an autho… |
CVE-2026-68787 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally. |
CVE-2026-68786 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-68775 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-67642 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-67639 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-67638 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-67388 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-67385 | High | 8.8 | 2026-09-08 | Use after free in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-67384 | High | 8.8 | 2026-09-08 | Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-67381 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network. |
CVE-2026-67380 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-67379 | High | 8.5 | 2026-09-08 | Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-67376 | High | 7.5 | 2026-09-08 | Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network. |
CVE-2026-67373 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-67370 | High | 8.8 | 2026-09-08 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a n… |
CVE-2026-67368 | High | 8.8 | 2026-09-08 | Improper link resolution before file access ('link following') in SQL Server allows an authorized attacker to elevate privileges over a network. |
CVE-2026-66820 | High | 8.8 | 2026-09-08 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a n… |
CVE-2026-66819 | High | 8.8 | 2026-09-08 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a n… |
CVE-2026-66818 | High | 8.8 | 2026-09-08 | Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network. |
CVE-2026-66814 | High | 8.8 | 2026-09-08 | Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network. |
CVE-2026-65772 | High | 8.8 | 2026-09-08 | Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network. |
CVE-2026-62895 | High | 8.8 | 2026-09-08 | Permissive cross-domain policy with untrusted domains in Azure Arc allows an unauthorized attacker to elevate privileges over a network. |
CVE-2026-62813 | High | 7.5 | 2026-09-08 | Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network. |
CVE-2026-62810 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-62804 | High | 7.8 | 2026-09-08 | External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-62759 | High | 7.5 | 2026-09-08 | Authentication bypass by spoofing in Windows Netlogon allows an unauthorized attacker to perform spoofing over an adjacent network. |
CVE-2026-62744 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
CVE-2026-62706 | High | 8.8 | 2026-09-08 | Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
CVE-2026-62697 | High | 7.8 | 2026-09-08 | Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally. |
CVE-2026-62694 | High | 7.0 | 2026-09-08 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-58611 | High | 7.8 | 2026-09-08 | Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally. |
CVE-2026-58600 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to elevate privileges locally. |
CVE-2026-58599 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally. |
CVE-2026-57099 | High | 7.5 | 2026-09-08 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. |
CVE-2026-57098 | High | 7.5 | 2026-09-08 | Improper verification of cryptographic signature in Windows RDP Client allows an unauthorized attacker to disclose information over a network. |
CVE-2026-56198 | High | 7.8 | 2026-09-08 | Out-of-bounds read in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally. |
CVE-2026-56177 | High | 7.8 | 2026-09-08 | Use after free in Windows Server allows an authorized attacker to elevate privileges locally. |
CVE-2026-56172 | High | 7.8 | 2026-09-08 | Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-55007 | High | 8.1 | 2026-09-08 | Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network. |
CVE-2026-50349 | High | 7.0 | 2026-09-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authoriz… |
CVE-2026-47297 | High | 8.1 | 2026-09-08 | Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network. |
CVE-2026-86073 | High | 7.6 | 2026-09-08 | n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.1, the OAuth token endpoint bound an authorization code's first access token to th… |
CVE-2026-84393 | High | 8.1 | 2026-09-08 | A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.6 may allow attacke… |
CVE-2026-84387 | High | 7.2 | 2026-09-08 | A improper neutralization of special elements used in a command ('command injection') vulnerability in Fortinet FortiSandbox 5.2.0, FortiSandbox 5.0.0 through… |
CVE-2026-82075 | High | 7.5 | 2026-09-08 | An uncontrolled resource consumption weakness exists in the request-handling path of the MongoDB sharded-cluster router process. A client that has network acce… |
CVE-2026-82071 | High | 8.1 | 2026-09-08 | Insufficient validation of storage engine configuration options in MongoDB Server allows an authenticated user with write privileges to supply crafted paramete… |
CVE-2026-82067 | High | 8.1 | 2026-09-08 | Improper handling of case sensitivity in the configuration validation component of MongoDB Server may cause the authorization subsystem to remain in a default… |
CVE-2026-82064 | High | 7.5 | 2026-09-08 | A security issue in MongoDB Server allows an unauthenticated network user to cause a denial of service on a specific type of replica set member. The server con… |
CVE-2026-82061 | High | 8.1 | 2026-09-08 | A use-after-free security issue exists in the server's query execution memory tracking subsystem. An authenticated user with read privileges can trigger a writ… |
CVE-2026-82053 | High | 8.1 | 2026-09-08 | A security issue exists in MongoDB's LDAP authorization integration where pooled LDAP connections can retain stale authentication identities after user authent… |
CVE-2026-47625 | High | 7.5 | 2026-09-08 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could abuse missing authorization. A successful exploit of this vulnerabili… |
CVE-2026-20293 | High | 7.1 | 2026-09-08 | A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers and UCS-based appliances could allow an authentic… |
CVE-2026-16497 | High | 7.5 | 2026-09-08 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause excessive iteration. A successful exploit of this vulnerability… |
CVE-2026-86738 | High | 8.7 | 2026-09-08 | Snipe-IT versions before 8.7.0 contain a CSS injection vulnerability in the Custom CSS field due to incomplete sanitization that reverses HTML encoding on grea… |
CVE-2026-86733 | High | 7.2 | 2026-09-08 | Snipe-IT before 8.7.0 streams the SQL entry from an uploaded backup archive directly into the MySQL/MariaDB command-line client (`mysql`) without the --binary-… |
CVE-2026-86732 | High | 8.8 | 2026-09-08 | Craft CMS versions before 5.10.12 contain a remote code execution vulnerability in the element-index endpoint that allows authenticated content editors to inst… |
CVE-2026-86730 | High | 8.8 | 2026-09-08 | Craft CMS versions before 5.10.12 fail to properly cleanse string-typed field-layout elements, allowing authenticated control-panel users to inject Yii2 behavi… |
CVE-2026-86729 | High | 7.4 | 2026-09-08 | WWBN AVideo through commit e01e41ecc (no patched version available) exposes get_api_preauthorize in plugin/API/API.php as a second, undocumented login path. Un… |
CVE-2026-86728 | High | 7.5 | 2026-09-08 | AVideo through 29.0 contains an authentication bypass vulnerability in plugin/PlayLists/epg.json.php that exposes live-stream keys and private EPG schedules to… |
CVE-2026-86727 | High | 7.5 | 2026-09-08 | AVideo through 29.0 contains an information disclosure vulnerability in plugin/Live/stats.json.php that allows unauthenticated attackers to retrieve stream key… |
CVE-2026-86725 | High | 7.1 | 2026-09-08 | AVideo through c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authorization vulnerability in the SocialMediaPublisher plugin's add.json.php endpoi… |
CVE-2026-86723 | High | 8.1 | 2026-09-08 | AVideo through c3edcc274c389816d434acadac07ee78eaf330c1 contains an authentication bypass vulnerability in LoginControl::verifyChallenge() that uses loose comp… |
CVE-2026-86722 | High | 8.1 | 2026-09-08 | AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains an authentication bypass vulnerability where sqlDAL caches empty result sets that write… |
CVE-2026-86721 | High | 7.5 | 2026-09-08 | AVideo through commit c3edcc274c contains an authorization bypass vulnerability where a session cookie named 'key' with value 'value' overrides the $_REQUEST['… |
CVE-2026-86720 | High | 8.1 | 2026-09-08 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate ownership of live_restreams_id in resendRestreamer.json.php, allowing aut… |
CVE-2026-86718 | High | 7.1 | 2026-09-08 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in deleteHistory.json.php and finishAll… |
CVE-2026-86666 | High | 7.3 | 2026-09-08 | A security flaw has been discovered in aircheng-org iWebShop-5 up to 5.15. Impacted is the function upload_json/uploadFile of the file controllers/pic.php. The… |
CVE-2026-86600 | High | 8.2 | 2026-09-08 | In affected Snowflake drivers, WORKLOAD_IDENTITY authentication requests a cloud workload-identity token and attaches it to the login request without verifying… |
CVE-2026-79572 | High | 7.5 | 2026-09-08 | An XXE (XML External Entity) vulnerability in the level-rule module of Distribution Management v1.0.0 allows attackers to read sensitive files, scan internal n… |
CVE-2026-16037 | High | 7.5 | 2026-09-08 | Observable timing discrepancy vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API WHMCS Module allows Black Box R… |
CVE-2026-16025 | High | 7.5 | 2026-09-08 | Improper validation of specified quantity in input vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API WHMCS Modu… |
CVE-2026-9040 | High | 7.7 | 2026-09-08 | A race condition vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allo… |
CVE-2026-9034 | High | 7.8 | 2026-09-08 | Use After Free vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driv… |
CVE-2026-86665 | High | 7.3 | 2026-09-08 | A vulnerability was identified in aircheng-org iWebShop-5 up to 5.15. This issue affects the function Update::index of the file controllers/update.php. The man… |
CVE-2026-83527 | High | 8.1 | 2026-09-08 | An Authentication Bypass vulnerability in Sentry before R10.8.2, R10.7.3 and R10.6.4 allows a remote unauthenticated attacker to gain administrative level acce… |
CVE-2026-7477 | High | 7.8 | 2026-09-08 | Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows… |
CVE-2026-7476 | High | 7.8 | 2026-09-08 | Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows… |
CVE-2026-79575 | High | 7.5 | 2026-09-08 | The JWT signing secret in yfexam-exam v2.0 is derived from the username and the current month instead of a random server-side key, making the secret key easily… |
CVE-2026-78837 | High | 7.5 | 2026-09-08 | A SQL injection vulnerability in the ap_form_{id} parameter in AppNitro MachForm v30 allows attackers to access sensitive database information via a crafted SQ… |
CVE-2026-61517 | High | 7.2 | 2026-09-08 | Netis NX10 firmware V4.0.1.5808 and V3.0.0.4142 contain an OS command injection vulnerability in the ping diagnostic handler that allows authenticated administ… |
CVE-2026-5729 | High | 7.8 | 2026-09-08 | Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user proces… |
CVE-2026-18851 | High | 8.8 | 2026-09-08 | Missing authorization in Ivanti Endpoint Manager Mobile before version 12.10.0.0, 12.9.0.2, and 12.8.0.4 allows a remote authenticated attacker to escalate the… |
CVE-2026-12651 | High | 8.8 | 2026-09-08 | A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on… |
CVE-2026-12648 | High | 8.8 | 2026-09-08 | A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on… |
CVE-2026-0860 | High | 7.5 | 2026-09-08 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driv… |
CVE-2026-79378 | High | 7.5 | 2026-09-08 | An issue in the btm_acl_handle() function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Se… |
CVE-2026-79377 | High | 7.5 | 2026-09-08 | A heap overflow in the a2dp_decoder_sbc.cpp component of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a… |
CVE-2026-79376 | High | 8.8 | 2026-09-08 | An issue in the l2cap_handle_data() function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of… |
CVE-2026-74239 | High | 7.2 | 2026-09-08 | XenForo before 2.3.13 contains a path traversal vulnerability in the style archive importer on Windows deployments that allows authenticated non-super administ… |
CVE-2026-73316 | High | 7.5 | 2026-09-08 | XenForo before 2.3.13 contains a payment replay vulnerability in the PayPal REST payment provider that allows attackers to process the same webhook payload mul… |
CVE-2026-73315 | High | 8.6 | 2026-09-08 | XenForo before 2.3.13 contains a server-side request forgery vulnerability in the PayPal REST webhook handler that allows unauthenticated attackers to cause th… |
CVE-2026-73314 | High | 7.5 | 2026-09-08 | XenForo before 2.3.13 contains a signature verification logic error in the PayPal REST webhook handler that allows unauthenticated attackers to bypass payment… |