Microsoft
Page 12 of 100 — Microsoft CVEs from a corpus of 26181, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-49798 | Critical | 9.3 | 2026-07-14 | Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally. |
CVE-2026-49797 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. |
CVE-2026-49796 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally. |
CVE-2026-49795 | High | 8.8 | 2026-07-14 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-49794 | Medium | 4.6 | 2026-07-14 | Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack. |
CVE-2026-49793 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally. |
CVE-2026-49792 | High | 7.8 | 2026-07-14 | Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally. |
CVE-2026-49791 | High | 7.1 | 2026-07-14 | Improper link resolution before file access ('link following') in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate pri… |
CVE-2026-49790 | High | 7.3 | 2026-07-14 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability |
CVE-2026-49789 | High | 7.3 | 2026-07-14 | Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-49788 | High | 7.5 | 2026-07-14 | Allocation of resources without limits or throttling in HTTP/2 allows an unauthorized attacker to deny service over a network. |
CVE-2026-49787 | High | 7.5 | 2026-07-14 | Allocation of resources without limits or throttling in Windows HTTP.sys allows an unauthorized attacker to deny service over a network. |
CVE-2026-49784 | High | 7.0 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows App Store allows an authorized attacker to ele… |
CVE-2026-49783 | High | 7.8 | 2026-07-14 | Improperly implemented security check for standard in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. |
CVE-2026-49184 | High | 8.4 | 2026-07-14 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. |
CVE-2026-49183 | High | 7.0 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard Server allows an authorized attacker to elevat… |
CVE-2026-49181 | High | 7.5 | 2026-07-14 | Integer underflow (wrap or wraparound) in Windows DHCP Client allows an unauthorized attacker to elevate privileges over a network. |
CVE-2026-49180 | Medium | 5.5 | 2026-07-14 | Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information loca… |
CVE-2026-49178 | High | 8.8 | 2026-07-14 | Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over a network. |
CVE-2026-49176 | High | 7.8 | 2026-07-14 | Improper privilege management in Windows WalletService allows an authorized attacker to elevate privileges locally. |
CVE-2026-49175 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally. |
CVE-2026-49174 | Medium | 6.1 | 2026-07-14 | Missing authentication for critical function in Microsoft Windows DNS allows an authorized attacker to perform tampering locally. |
CVE-2026-49173 | High | 7.8 | 2026-07-14 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-49172 | Critical | 9.8 | 2026-07-14 | Heap-based buffer overflow in Windows FTP Service allows an unauthorized attacker to execute code over a network. |
CVE-2026-49171 | High | 7.5 | 2026-07-14 | Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally. |
CVE-2026-49170 | High | 7.8 | 2026-07-14 | Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally. |
CVE-2026-49169 | High | 8.0 | 2026-07-14 | Use after free in DNS Server allows an authorized attacker to execute code over a network. |
CVE-2026-49168 | Medium | 6.8 | 2026-07-14 | Integer overflow or wraparound in Windows Storage Spaces Direct allows an unauthorized attacker to elevate privileges with a physical attack. |
CVE-2026-49167 | Medium | 4.7 | 2026-07-14 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-49166 | High | 7.8 | 2026-07-14 | Use after free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges locally. |
CVE-2026-49165 | High | 7.1 | 2026-07-14 | Use of uninitialized resource in Microsoft Windows App Store allows an authorized attacker to disclose information locally. |
CVE-2026-49164 | High | 8.1 | 2026-07-14 | Heap-based buffer overflow in Active Directory Domain Services allows an unauthorized attacker to execute code over a network. |
CVE-2026-49162 | High | 7.0 | 2026-07-14 | Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. |
CVE-2026-48581 | High | 7.8 | 2026-07-14 | Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to elevate privileges locally. |
CVE-2026-48572 | High | 7.0 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows App Installer allows an authorized attacker to elevate p… |
CVE-2026-48571 | High | 7.0 | 2026-07-14 | Use after free in Windows App Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-48564 | High | 8.8 | 2026-07-14 | Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network. |
CVE-2026-48561 | Critical | 9.6 | 2026-07-14 | Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to execute… |
CVE-2026-47632 | High | 8.8 | 2026-07-14 | Improper certificate validation in Azure Monitor Agent allows an unauthorized attacker to elevate privileges over an adjacent network. |
CVE-2026-47296 | High | 7.5 | 2026-07-14 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a n… |
CVE-2026-47282 | Medium | 6.5 | 2026-07-14 | Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network. |
CVE-2026-45646 | High | 7.5 | 2026-07-14 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. |
CVE-2026-45496 | Medium | 5.5 | 2026-07-14 | Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to bypass a security featu… |
CVE-2026-44806 | Medium | 5.3 | 2026-07-14 | Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network. |
CVE-2026-44800 | High | 7.8 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elev… |
CVE-2026-42990 | Critical | 9.8 | 2026-07-14 | Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code over a network. |
CVE-2026-42982 | High | 7.8 | 2026-07-14 | Improper validation of consistency within input in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. |
CVE-2026-42975 | High | 8.0 | 2026-07-14 | Heap-based buffer overflow in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network. |
CVE-2026-42900 | High | 8.1 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows App Store allows an unauthorized attacker to elevate pri… |
CVE-2026-41087 | Medium | 5.5 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. |
CVE-2026-40422 | Medium | 5.5 | 2026-07-14 | Use of uninitialized resource in Windows File Explorer allows an authorized attacker to disclose information locally. |
CVE-2026-40400 | High | 8.0 | 2026-07-14 | Relative path traversal in Windows PowerShell allows an authorized attacker to execute code over a network. |
CVE-2026-40378 | High | 7.5 | 2026-07-14 | Memory allocation with excessive size value in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over… |
CVE-2026-34349 | Medium | 5.5 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Media allows an authorized attacker to disclose information locally. |
CVE-2026-34348 | Medium | 6.5 | 2026-07-14 | Protection mechanism failure in Windows Event Logging Service allows an authorized attacker to disclose information over a network. |
CVE-2026-34346 | Medium | 5.5 | 2026-07-14 | Cleartext transmission of sensitive information in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally. |
CVE-2026-34328 | Medium | 5.5 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Audio Service allows an authorized attacker to disclose information locally. |
CVE-2026-33842 | Medium | 5.5 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. |
CVE-2026-59841 | High | 7.5 | 2026-07-14 | A improper restriction of communication channel to intended endpoints vulnerability in Fortinet FortiSIEMWindowsAgent 7.4.0 through 7.4.1 may allow attacker to… |
CVE-2026-11944 | Medium | 6.5 | 2026-07-14 | openSIS Classic 9.3 contains an authenticated path traversal vulnerability in the legacy messaging sent-mail attachment download functionality that allows an a… |
CVE-2026-6851 | High | 7.0 | 2026-07-14 | An Improper link resolution before file access ('link following') vulnerability in the File Shredder module as used in Bitdefender Total Security and Internet… |
CVE-2026-58596 | High | 8.3 | 2026-07-12 | Untrusted pointer dereference in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network. |
CVE-2026-58281 | High | 8.3 | 2026-07-11 | Deserialization of untrusted data in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
CVE-2026-57211 | Medium | 6.5 | 2026-07-10 | RabbitMQ is a messaging and streaming broker. Prior to 4.1.11 and 4.2.6 on Windows, the RabbitMQ management plugin static file handler rabbit_mgmt_wm_static ca… |
CVE-2026-0278 | High | 7.8 | 2026-07-09 | Multiple protection mechanism failures in the Prisma Access Agent Data Loss Prevention (DLP) component for Windows allow a local user to bypass DLP policy enfo… |
CVE-2026-47646 | Critical | 9.3 | 2026-07-09 | Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics 365 Customer Voice allows an unauthorized attacker to perform… |
CVE-2026-15122 | High | 8.3 | 2026-07-08 | Insufficient validation of untrusted input in Codecs in Google Chrome on Windows prior to 150.0.7871.115 allowed a remote attacker who had compromised the rend… |
CVE-2026-15120 | High | 8.3 | 2026-07-08 | Use after free in Core in Google Chrome on Windows prior to 150.0.7871.115 allowed a remote attacker who had compromised the renderer process to potentially pe… |
CVE-2026-58525 | High | 8.2 | 2026-07-08 | Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network. |
CVE-2026-22927 | High | 7.8 | 2026-07-08 | Omnissa Workspace ONE® Tunnel for Windows addresses a Local Privilege Escalation Vulnerability. |
CVE-2026-57260 | High | 7.8 | 2026-07-08 | The application opened a PDF file containing an abnormal Unity 3D object. During parsing, the application incorrectly resolved a portion of the abnormal object… |
CVE-2026-57259 | Medium | 6.5 | 2026-07-08 | The input file does not need to be strictly in a structurally valid PDF format. Instead, after reviewing the content, the original document disguised as a PDF… |
CVE-2026-57258 | Medium | 6.1 | 2026-07-08 | The PRC file header parsing logic trusts the constructed file structure description information, assumes that the underlying array contains elements and reads… |
CVE-2026-57257 | Medium | 6.1 | 2026-07-08 | During the PRC parsing stage, there is a lack of boundary verification for the PRC entity index, which leads to an out-of-bounds read of the entity array. As a… |
CVE-2026-57256 | High | 7.8 | 2026-07-08 | When the application opens a PDF and executes JavaScript, it performs abnormal operations on the list box field, and this operation is repeated after the form… |
CVE-2026-57255 | Medium | 6.1 | 2026-07-08 | The application opens a PDF containing an abnormal color space whose attributes reference a valid but semantically malformed function. The function's output is… |
CVE-2026-57254 | High | 7.8 | 2026-07-08 | There is an abnormal annotation within the PDF that is referenced by other objects. When the application parses the PDF, it fails to perform proper type checki… |
CVE-2026-57253 | Medium | 6.1 | 2026-07-08 | An abnormal image object causes the renderer to enter the wrong processing branch. When converting the scan lines, an invalid image buffer pointer is used, res… |
CVE-2026-57252 | High | 7.8 | 2026-07-08 | When the application opens a PDF file, during the process of JavaScript deleting pages and removing attachment annotations, it will cause the attachment panel… |
CVE-2026-57251 | High | 7.8 | 2026-07-08 | The application opens a PDF, but the cloud-like appearance of the construction process lacks proper setting of an upper limit and consistency checks. Out-of-bo… |
CVE-2026-57250 | High | 7.8 | 2026-07-08 | When the application opens a PDF and JavaScript resets the form fields, the script re-enters the interface. The underlying native object is damaged, but the ap… |
CVE-2026-57249 | High | 7.8 | 2026-07-08 | After the application opened the PDF file, the script first reset the annotation status, then triggered the reset form event by additional action. During the r… |
CVE-2026-57248 | High | 7.8 | 2026-07-08 | When the application opens a PDF file and JavaScript writes annotation attributes, there is a lack of sufficient object type and argument checks. As a result… |
CVE-2026-57247 | High | 7.8 | 2026-07-08 | The application re-enters the document structure via field processing and deletes the current page, and then continues using the field objects obtained before… |
CVE-2026-57246 | High | 7.8 | 2026-07-08 | When dealing with abnormally constructed objects, there is a lack of argument validation; JavaScript triggers signature verification, but the signature plugin… |
CVE-2026-57245 | High | 7.8 | 2026-07-08 | When the application opens a PDF, traverses and builds the annotation elements related to hyperlinks, it fails to validate the abnormal annotation relationship… |
CVE-2026-57244 | High | 7.8 | 2026-07-08 | After JavaScript resetting the form, the synchronization process lacks re-entry protection and object lifecycle verification, resulting in the failure of the c… |
CVE-2026-57243 | Medium | 6.1 | 2026-07-08 | During the process of page opening and form formatting, a JavaScript reentrancy results in an inconsistent document status. Subsequently, with outdated page in… |
CVE-2026-57242 | High | 7.8 | 2026-07-08 | The application opens the PDF, and JavaScript modifies the form. However, the related objects on the page lack complete lifecycle management and null value val… |
CVE-2026-57241 | Medium | 6.1 | 2026-07-08 | The application opens the PDF, and JavaScript performs operations on the page and the document, causing the page-related objects within the application to lose… |
CVE-2026-57240 | High | 7.8 | 2026-07-08 | When the application opens a PDF file and JavaScript deletes the PDF fields, the subsequent logic still uses the old field pointers, resulting in invalid point… |
CVE-2026-57239 | High | 8.2 | 2026-07-08 | The user-controllable executable files will be directly executed by high-privilege processes, allowing low-privilege users to have the opportunity to elevate t… |
CVE-2026-57238 | High | 7.8 | 2026-07-08 | After the application opened the PDF, JavaScript deleted the form field object. Subsequently, it attempted to access the invalid object, which caused the appli… |
CVE-2026-57237 | High | 7.8 | 2026-07-08 | When the application opens a PDF and JavaScript modifies the properties of form fields, it causes the state of the underlying objects referenced by the program… |
CVE-2026-13129 | High | 7.8 | 2026-07-08 | When the application opens a PDF file, JavaScript uses the damaged field tree to trigger field traversal, resulting in the program holding an invalid form obje… |
CVE-2026-13128 | High | 7.8 | 2026-07-08 | Embedding JavaScript within a PDF file will cause the page to be deleted. Subsequent scripts will continue to access the relevant properties of the document vi… |
CVE-2026-13127 | High | 7.8 | 2026-07-08 | The application opens the PDF file. JavaScript then rewrites the document to modify the page structure, resulting in the invalidation of the page objects. Howe… |
CVE-2026-13126 | High | 7.8 | 2026-07-08 | The embedded JavaScript in the PDF deleted the pages, making the object invalid. The application attempted to perform a write operation on the invalid pop-up a… |
CVE-2026-13020 | High | 8.1 | 2026-07-07 | A Weak Password Recovery Mechanism for Forgotten Password exists in Esri Portal for ArcGIS versions 12.1 and earlier on Windows, Linux and Kubernetes. A remote… |
CVE-2026-13019 | Critical | 9.8 | 2026-07-07 | Esri Portal for ArcGIS versions 12.1 and earlier on Windows, Linux and Kubernetes have a missing authentication for critical function vulnerability allows a re… |