2026 CVEs (page 126)
Page 126 of 665 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-83974 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83973 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83972 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83971 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83970 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83969 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83968 | High | 7.8 | 2026-09-08 | Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83967 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83955 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83954 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83952 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-83951 | Medium | 5.5 | 2026-09-08 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
CVE-2026-83949 | Medium | 5.5 | 2026-09-08 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
CVE-2026-83948 | High | 8.0 | 2026-09-08 | Improper neutralization of special elements used in a command ('command injection') in Microsoft Azure CLI allows an authorized attacker to execute code over a… |
CVE-2026-83942 | High | 7.8 | 2026-09-08 | Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-83941 | Critical | 9.9 | 2026-09-08 | Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network. |
CVE-2026-83940 | High | 7.0 | 2026-09-08 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83939 | High | 8.2 | 2026-09-08 | Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. |
CVE-2026-83501 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally. |
CVE-2026-83498 | High | 7.8 | 2026-09-08 | Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. |
CVE-2026-81963 | High | 7.8 | 2026-09-08 | Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally. |
CVE-2026-81960 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-81959 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-81958 | Medium | 5.5 | 2026-09-08 | Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-81957 | High | 7.8 | 2026-09-08 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-81956 | High | 7.8 | 2026-09-08 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-81955 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. |
CVE-2026-81954 | High | 7.8 | 2026-09-08 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-81953 | High | 7.8 | 2026-09-08 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-81952 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-81951 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-81950 | High | 7.8 | 2026-09-08 | Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-81949 | High | 7.8 | 2026-09-08 | Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-81948 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-81947 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-81824 | Medium | 4.7 | 2026-09-08 | The vulnerability, if exploited, could allow a miscreant to run arbitrary JavaScript code in a browser session of a PIMBoards user who was socially engineered… |
CVE-2026-81823 | Medium | 5.3 | 2026-09-08 | The vulnerability, if exploited, could allow an unauthenticated miscreant to perform read operations intended only for PIMBoards users, resulting in informatio… |
CVE-2026-81822 | High | 8.4 | 2026-09-08 | The vulnerability, if exploited, could allow a miscreant with read access to PIMBoards project files to reverse engineer PIMBoards users’ app-native passwords… |
CVE-2026-81821 | High | 8.4 | 2026-09-08 | The vulnerability, if exploited, could allow a miscreant with read access to PIMBoards project files to decrypt and view sensitive information. |
CVE-2026-81401 | Medium | 5.5 | 2026-09-08 | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-81400 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-81399 | Medium | 5.5 | 2026-09-08 | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-81398 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-81397 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-81396 | High | 7.8 | 2026-09-08 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-81395 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-81394 | Medium | 5.5 | 2026-09-08 | Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information lo… |
CVE-2026-81393 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-81392 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-81391 | Medium | 5.5 | 2026-09-08 | Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-81390 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-81389 | High | 7.0 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-81388 | High | 7.8 | 2026-09-08 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-81387 | Medium | 5.5 | 2026-09-08 | Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information lo… |
CVE-2026-81386 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-81385 | High | 8.8 | 2026-09-08 | Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network. |
CVE-2026-81383 | High | 7.4 | 2026-09-08 | Use of incorrectly-resolved name or reference in Visual Studio Code allows an unauthorized attacker to disclose information over a network. |
CVE-2026-81381 | Medium | 6.5 | 2026-09-08 | Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network. |
CVE-2026-81380 | Medium | 5.3 | 2026-09-08 | Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to… |
CVE-2026-81379 | High | 8.2 | 2026-09-08 | Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. |
CVE-2026-81378 | High | 8.2 | 2026-09-08 | Interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. |
CVE-2026-81377 | Medium | 6.5 | 2026-09-08 | Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to perform tampering over… |
CVE-2026-81376 | Critical | 9.6 | 2026-09-08 | Incomplete comparison with missing factors in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. |
CVE-2026-81357 | High | 8.2 | 2026-09-08 | Server-side request forgery (ssrf) in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. |
CVE-2026-81356 | High | 8.2 | 2026-09-08 | Inconsistent interpretation of http requests ('http request/response smuggling') in Visual Studio Code allows an unauthorized attacker to bypass a security fea… |
CVE-2026-81355 | High | 7.5 | 2026-09-08 | Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code locally. |
CVE-2026-81354 | High | 8.2 | 2026-09-08 | Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally. |
CVE-2026-81353 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally. |
CVE-2026-81352 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network. |
CVE-2026-81349 | High | 7.2 | 2026-09-08 | Improper neutralization of special elements used in an os command ('os command injection') in Azure HDInsights allows an authorized attacker to elevate privile… |
CVE-2026-80097 | High | 8.6 | 2026-09-08 | Improper authentication in Microsoft Authenticator allows an unauthorized attacker to elevate privileges locally. |
CVE-2026-80096 | High | 8.8 | 2026-09-08 | Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network. |
CVE-2026-80093 | High | 7.0 | 2026-09-08 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-80091 | Medium | 6.5 | 2026-09-08 | Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information over a network. |
CVE-2026-80090 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
CVE-2026-80089 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network. |
CVE-2026-80088 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
CVE-2026-80087 | Medium | 6.5 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose information over a network. |
CVE-2026-80086 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. |
CVE-2026-80085 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-80084 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network. |
CVE-2026-80083 | High | 8.8 | 2026-09-08 | Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally. |
CVE-2026-80082 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network. |
CVE-2026-80081 | High | 8.8 | 2026-09-08 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. |
CVE-2026-80080 | High | 8.8 | 2026-09-08 | Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-80079 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
CVE-2026-80078 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network. |
CVE-2026-80077 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-80076 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network. |
CVE-2026-80075 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally. |
CVE-2026-80074 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-80073 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network. |
CVE-2026-79904 | Medium | 5.0 | 2026-09-08 | Photoshop Mobile is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Security… |
CVE-2026-78526 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-78525 | High | 8.8 | 2026-09-08 | Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
CVE-2026-78524 | High | 8.8 | 2026-09-08 | Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network. |
CVE-2026-78523 | Medium | 5.9 | 2026-09-08 | Use after free in Windows DNS allows an unauthorized attacker to deny service over a network. |
CVE-2026-78522 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
CVE-2026-78521 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-78520 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |