2026 CVEs (page 129)
Page 129 of 665 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-71345 | High | 7.8 | 2026-09-08 | Out-of-bounds write in Windows Spaceport.sys allows an authorized attacker to execute code locally. |
CVE-2026-71343 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to execute code locally. |
CVE-2026-71342 | High | 7.0 | 2026-09-08 | Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-71341 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to disclose information locally. |
CVE-2026-71340 | High | 7.0 | 2026-09-08 | Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-71339 | Medium | 6.7 | 2026-09-08 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-71338 | Medium | 6.4 | 2026-09-08 | Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally. |
CVE-2026-71337 | High | 7.8 | 2026-09-08 | Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally. |
CVE-2026-71336 | High | 8.8 | 2026-09-08 | Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execute code over a network. |
CVE-2026-71334 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows NFS Portmapper allows an authorized attacker to elevate privileges locally. |
CVE-2026-71333 | High | 7.0 | 2026-09-08 | Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-71332 | High | 7.0 | 2026-09-08 | Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally. |
CVE-2026-71330 | High | 7.5 | 2026-09-08 | Exposure of sensitive system information to an unauthorized control sphere in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to dis… |
CVE-2026-71329 | Medium | 6.8 | 2026-09-08 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack. |
CVE-2026-71328 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. |
CVE-2026-70587 | High | 7.5 | 2026-09-08 | Improper null termination in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network. |
CVE-2026-70586 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to execute code over a network. |
CVE-2026-70585 | High | 7.0 | 2026-09-08 | Use after free in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to execute code locally. |
CVE-2026-70584 | High | 7.8 | 2026-09-08 | Access of resource using incompatible type ('type confusion') in Windows Core Messaging allows an authorized attacker to elevate privileges locally. |
CVE-2026-70583 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally. |
CVE-2026-70582 | Medium | 6.4 | 2026-09-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Instrumentation allows an authorized attacker… |
CVE-2026-70581 | High | 7.8 | 2026-09-08 | Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-70579 | High | 7.5 | 2026-09-08 | Out-of-bounds read in Windows Mobile Broadband allows an unauthorized attacker to disclose information over a network. |
CVE-2026-70578 | High | 7.0 | 2026-09-08 | Heap-based buffer overflow in Windows Credential Guard allows an authorized attacker to elevate privileges locally. |
CVE-2026-70577 | High | 7.0 | 2026-09-08 | Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. |
CVE-2026-70575 | Medium | 5.3 | 2026-09-08 | Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network. |
CVE-2026-70574 | High | 7.8 | 2026-09-08 | Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-70573 | High | 7.0 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-70572 | High | 7.8 | 2026-09-08 | Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-70570 | High | 7.5 | 2026-09-08 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine |
CVE-2026-70569 | High | 7.8 | 2026-09-08 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. |
CVE-2026-70568 | High | 7.0 | 2026-09-08 | Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-70567 | High | 7.0 | 2026-09-08 | Double free in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-70565 | High | 7.0 | 2026-09-08 | Use after free in Windows AF_UNIX Socket Provider allows an authorized attacker to elevate privileges locally. |
CVE-2026-70564 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. |
CVE-2026-70563 | High | 8.1 | 2026-09-08 | Improper link resolution before file access ('link following') in Windows Shell allows an unauthorized attacker to perform spoofing over a network. |
CVE-2026-70562 | High | 7.0 | 2026-09-08 | Double free in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-70351 | High | 8.8 | 2026-09-08 | Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code over a network. |
CVE-2026-70342 | High | 8.1 | 2026-09-08 | Use after free in Windows Ancillary Function Driver for WinSock allows an unauthorized attacker to elevate privileges over a network. |
CVE-2026-70334 | High | 7.8 | 2026-09-08 | Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. |
CVE-2026-70296 | Critical | 9.8 | 2026-09-08 | Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network. |
CVE-2026-70290 | Medium | 5.5 | 2026-09-08 | Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. |
CVE-2026-70289 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
CVE-2026-70283 | High | 7.0 | 2026-09-08 | Incorrect authorization in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-70203 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network. |
CVE-2026-70145 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. |
CVE-2026-70124 | Medium | 5.9 | 2026-09-08 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network. |
CVE-2026-70091 | Medium | 5.9 | 2026-09-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to deny service over… |
CVE-2026-70065 | High | 7.5 | 2026-09-08 | Missing release of memory after effective lifetime in Windows DHCP Server allows an unauthorized attacker to deny service over a network. |
CVE-2026-70019 | Medium | 6.5 | 2026-09-08 | Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network. |
CVE-2026-69989 | High | 8.1 | 2026-09-08 | Use after free in DNS Server allows an unauthorized attacker to execute code over a network. |
CVE-2026-69930 | Medium | 5.9 | 2026-09-08 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network. |
CVE-2026-69929 | Medium | 5.9 | 2026-09-08 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network. |
CVE-2026-69921 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. |
CVE-2026-69911 | High | 7.0 | 2026-09-08 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
CVE-2026-69910 | Critical | 9.8 | 2026-09-08 | Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network. |
CVE-2026-69907 | High | 7.8 | 2026-09-08 | Improper handling of insufficient permissions or privileges in Windows Enterprise App Management allows an authorized attacker to elevate privileges locally. |
CVE-2026-69906 | High | 8.2 | 2026-09-08 | Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. |
CVE-2026-69904 | Low | 3.5 | 2026-09-08 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. |
CVE-2026-69900 | High | 7.8 | 2026-09-08 | Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-69896 | High | 7.0 | 2026-09-08 | Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
CVE-2026-69895 | Medium | 4.7 | 2026-09-08 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally. |
CVE-2026-69891 | High | 7.0 | 2026-09-08 | Use after free in Windows Media allows an authorized attacker to elevate privileges locally. |
CVE-2026-69890 | High | 7.5 | 2026-09-08 | Use after free in Windows Virtual Trusted Platform Module allows an authorized attacker to elevate privileges locally. |
CVE-2026-69889 | High | 7.0 | 2026-09-08 | Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-69881 | High | 7.5 | 2026-09-08 | Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network. |
CVE-2026-69878 | Medium | 6.4 | 2026-09-08 | Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code locally. |
CVE-2026-69876 | High | 8.0 | 2026-09-08 | Use after free in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network. |
CVE-2026-69875 | High | 8.0 | 2026-09-08 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network. |
CVE-2026-69874 | High | 8.2 | 2026-09-08 | Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally. |
CVE-2026-69866 | High | 7.0 | 2026-09-08 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-69864 | High | 7.8 | 2026-09-08 | Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. |
CVE-2026-69862 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows Wireless Wide Area Network Service allows an authorized attacker to disclose information locally. |
CVE-2026-69860 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. |
CVE-2026-69859 | High | 7.0 | 2026-09-08 | Time-of-check time-of-use (toctou) race condition in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally. |
CVE-2026-69858 | High | 8.1 | 2026-09-08 | Use after free in Windows DNS allows an unauthorized attacker to execute code over a network. |
CVE-2026-69854 | Critical | 9.0 | 2026-09-08 | Improper authentication in Spring Cloud Azure allows an unauthorized attacker to elevate privileges over a network. |
CVE-2026-69853 | Medium | 4.7 | 2026-09-08 | Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally. |
CVE-2026-69852 | High | 7.5 | 2026-09-08 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine |
CVE-2026-69847 | High | 8.0 | 2026-09-08 | Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network. |
CVE-2026-69846 | High | 8.2 | 2026-09-08 | Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. |
CVE-2026-69845 | Critical | 9.8 | 2026-09-08 | Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
CVE-2026-69844 | High | 7.8 | 2026-09-08 | Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-69841 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-69839 | Medium | 6.5 | 2026-09-08 | Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network. |
CVE-2026-69838 | High | 7.0 | 2026-09-08 | Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. |
CVE-2026-69834 | High | 7.0 | 2026-09-08 | Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally. |
CVE-2026-69832 | Medium | 5.6 | 2026-09-08 | Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows an authorized attacker to disclose information locally. |
CVE-2026-69829 | Critical | 9.8 | 2026-09-08 | Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network. |
CVE-2026-69827 | High | 8.1 | 2026-09-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over… |
CVE-2026-69826 | High | 8.0 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network. |
CVE-2026-69824 | Critical | 9.8 | 2026-09-08 | Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an unauthorized attacker to execute code over a network. |
CVE-2026-69822 | High | 7.8 | 2026-09-08 | Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
CVE-2026-69821 | High | 7.8 | 2026-09-08 | Improper encoding or escaping of output in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-69820 | High | 8.2 | 2026-09-08 | Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally. |
CVE-2026-69819 | Critical | 9.8 | 2026-09-08 | Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network. |
CVE-2026-69818 | High | 7.0 | 2026-09-08 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-69817 | High | 7.0 | 2026-09-08 | Use after free in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-69816 | High | 7.0 | 2026-09-08 | Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally. |
CVE-2026-69814 | High | 7.0 | 2026-09-08 | Use after free in Windows Credential Providers allows an authorized attacker to elevate privileges locally. |